last executing test programs: 10.797323562s ago: executing program 3 (id=76): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001900150000000000000000000a0000000002000000000000180009"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) splice(r4, 0x0, r2, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x1, 0xd8f9}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x100000) mkdirat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0xc1) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r5) syz_open_procfs(0x0, &(0x7f0000000400)='fd/3\x00') r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[], 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x80042, 0x0) syz_clone3(&(0x7f0000000300)={0x23800100, &(0x7f0000000380), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_disconnect(r5) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f0000000b80)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 8.256051181s ago: executing program 1 (id=92): bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000400)=0x36be4, 0x4) fsopen(&(0x7f0000000680)='ext3\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_REUSE_PORT(r1, 0x84, 0x24, &(0x7f0000000180), 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) open(0x0, 0x148640, 0x78e22799f4a46eaf) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=@v2={0x2000000, [{0xfff, 0x6}, {0x6, 0x1}]}, 0x14, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000004c0)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r3, &(0x7f00000008c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x7, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x4, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffff9, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x2, 0x6, 0xfffffffd, 0x7, 0xb, 0x3, 0x4, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x7, 0x0, 0xd, 0xba, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x0, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x9, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x4, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81319d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x5, 0x9, 0x4, 0x80000001, 0x5, 0xe46, 0xfffffb66, 0x80, 0x2, 0x20000084, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x3, 0x8, 0x6f, 0x807, 0x2, 0x1, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x5, 0x8, 0xfe4, 0x3ff], [0x2, 0xffffffff, 0x4, 0x3, 0x3, 0x20000010, 0x80, 0x8001, 0x5, 0x1, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x64, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x5, 0xfffffff7, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4c, 0x3, 0x1, 0xffffffff, 0x0, 0x9, 0x13, 0x10001, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x401, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0xfffffffd, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10005, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x6, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0xe, 0x10001, 0x1, 0x5, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0x9, 0x0, 0x0, 0x3, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb02d, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x2, 0x7, 0x4, 0x0, 0x8000b, 0x20400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) read$hiddev(r4, &(0x7f0000000d40)=""/117, 0x75) 7.373349349s ago: executing program 1 (id=86): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r2, 0xffff, '\x00', 0x0, r0}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000440)={@val={0x60, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 7.371684791s ago: executing program 0 (id=95): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xe0}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) timerfd_create(0x8, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x0, 0x2c, 0x11, 0x2}], 0x10, 0xffffffff}, 0x94) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @remote, 0x7}, 0x1c) listen(r2, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000240)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 6.797297466s ago: executing program 3 (id=87): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = syz_open_dev$usbfs(&(0x7f0000000f40), 0x1ff, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000f80)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) syz_open_procfs(0x0, &(0x7f00000010c0)='fd/3\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x800040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r3, &(0x7f0000000840)='on', 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)={0x548, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x538, 0xce, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @fd}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x100000001}, @nested={0x3a1, 0xc8, 0x0, 0x1, [@nested={0x37f, 0x5c, 0x0, 0x1, [@nested={0x155, 0xb6, 0x0, 0x1, [@nested={0x4, 0xe}, @nested={0x4, 0x5}, @nested={0x4, 0xef}, @generic="4e2efc1a852369f0d11316f559fdab113ca654e37b5f6bf93f802996604ab7676efa5975ea31b805164e511b8d80cd1bb29f84594c9a6d94c3a552caa24c7b0674f707ff01153b6121ca964d8a8bdae45332aa6f1d87ca1706e245453648f116f71944a92b9ea4f8a480b3c5a91f651e2b09c5ef", @generic="120a99e85a1f505bcde974516e09512de95eab9b7ff95945b0819c65c1348e4c8b88478b17aced97b789e86884efea7696cd3782b269473739fc920b721b9827ef98562aab4f25f2c731d8cc84166eec8458259a8af13a2e97a0787302bc7744eb739267fe9fbaae252a3923ddcd3b11247d5f7837059bd36cc3b2af5959b47147c791cb7f369484175fd61cdf62b2a9925cff848890730be8a213c4ec4ecd1e6d3dfd878dcaf4009123db40aab05822ef856bf23c7321a0a5db0ac08e8fcd80db254487ba21d5b939558d32bf", @nested={0x4, 0x7c}]}, @generic, @nested={0x95, 0xf2, 0x0, 0x1, [@typed={0x4, 0x113}, @generic="ae21539832b7db50dcf8b57f1fac16bd958eef767eabd6912fed3059076751a7b8e2fdc0c981f8322618e9469e355c196555d06f8d3eab71de86681867c5d6b0d76f2eb33848cabdf88665b72163f933e11ce23ede0dc0c3c08aa3a05b16e0c6027eb1eebfcbdeb4f56346f2e21d3b0f3961a2c94c98a4b656c75774717986398d0300edeabe420c5836e0ffa3"]}, @typed={0x8, 0xc6, 0x0, 0x0, @fd}, @generic="c7016aa67c7daba0f6683164a1af2d333aefd145d32801e0bcc73903aea18cfa2093e1fd71124fa4a12a5d4d015e1532b8cb55725cb5ad7581ab40b96fdec19634151919002942a2d080556d3724295fe1daadef2686fdaa5e5be93278159230125577cb2242d25b6f164aff363d107656c7c47248b9de84310a6a8c8f1cc80681c39a24d2e9b2fa496832733eac8ac5383bd387fa3b430581612f921e38a33a063019260b922b2488c2af9cbe6323947ae59643ddf5e8489f5ad27620cffc98faf22bc5d5fa18073074afaf604b2716e06707c022f1ac66c4af3a25fa668d2948", @typed={0x8, 0x164, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x169, 0x0, 0x0, @pid}, @generic="88eb40ec61b74a355e5b69caf2b21b678f32de798af29a1fd98b8fcd860bbe1ab5fc71f3c31336988b3e82e4b8cd9c1dfe8785171f2672f336d0ceac234bd5b1d86c35c4f4fce4eff3a8f2fcf1efca6db03df0009d463f75f84c128b2553c4cee0dbe4de20ad96be18f66c03475846aaaef5b4e19578094d754029f4f78ef1ed1c0514237bcdd5fdabae9d253cff986477f6"]}, @nested={0x4, 0x100}, @nested={0x4, 0xda}, @generic="e9deb78c97a91fbc5eea41634e2aab254c4a992d2c"]}, @generic="c0bbc22e7a5e3733d8a5cf68fd70e73ba47d167550bec74c35f32ec2a026a90681a8de07bf8359378609686564c0f26942873be759b8fffc8632303dcbe0ccbf8bba2cd60b5e07ee901adc59614efbeec2762e801ccd9a823d4fb0e11fb017296532a81ea6df72e71e94fbcee9ec5108db88ede3482c86296b2e71729a1a0e3c91d61e986a52bf0143be06633394b6dabc6c46513b6df1367f54a3eb57931fd7bf58200a3681e66d9081e16857336dbe4f183ab794cee333801b0384f1abd7b423e2b74bf558c6f369d49af66b7ab0d96743d4facc", @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="a1523b2aed5aaf0b32345cd0ef11ee3f8fc3b7a78769a8f388751274e2e6642019910ec5009ac0b7f102bf678a633489125096861de148ebde61957165e7ce38be923c25073769ebdd8970deec0ca33d4e0523702300c75999c1eee376d5dbc1e0a393ba2f1558afa2bcafaf7cb07ce46a520e9e2baf49984353f0c9218e327be92c6a5c15cdb8114dc145ea64005eef50919d"]}]}, 0x548}], 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000003c0)='syz_tun\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f0000000180), 0xffff, 0x109041) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000000000000000000180000009500000000000000c8bf1526c89c4e99fdfb5f03df21345ee528a7ac177eac883b8baac40361f21591d4631cf74fc425a0afcc0392a053436902a1e734e3b91764645fc0b68d57769496986d834ec810679495d1177feb559e91dcb44e46b72de7fca2bc2941722b0b6c4c91ab511b77f2e60f394152bcf1fa3a546dea0708387c10dfa2eb4ff6678eb9854a3bd2f345da82b75bff5f8eb73e8b8a8fbbf7def57d029ff28dfca75cf2aebfd30b53f09ad4ac498d9938c285f52d363a3041e39ac26c6a24aeb1c3ea096a497ad92997d8929f2834b88f546e65a46afc9dbe4daf72"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 6.439099344s ago: executing program 3 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') pread64(r2, 0x0, 0x0, 0x4) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_stall_count', 0x0, 0x101) io_submit(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xa, r3, 0x0, 0x0, 0x800, 0x0, 0x0, r3}, 0x0]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg\x00', 0x6bf1c2d5adba8c32}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="060000000300010006", 0x9) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='tmpfs\x00', 0x0, &(0x7f0000000400)='grpquota') r5 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000480), 0x4) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r7 = socket(0xa, 0x3, 0x3a) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setns(0xc9, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000640)={0x1, 0x1, 0x40}, 0xc) sendto(r0, &(0x7f0000000680)="2c000000360005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x20, 0x0, 0x129, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xa, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) 5.367084519s ago: executing program 0 (id=90): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000200), 0x6f5, 0x2000000022, &(0x7f0000000240)={0x77359400}) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100300000020050b391740000102030109026000030102d0090904000000010100000a240101000a0002010209040100000102000009040101010102000009050109ff030908040725010001070009040200000102000009040201010102000015f835b9000207000707250104080800"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="000000b207ed3600"]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xd8fe}}]}) write(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x4e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) lseek(r1, 0xfffffffffffffff5, 0x2) syz_open_procfs(0x0, &(0x7f00000025c0)='net/ip6_tables_matches\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002600)={0xaa, 0x6e7}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) creat(&(0x7f0000002680)='./file0\x00', 0x12c) syz_open_dev$vcsu(&(0x7f00000026c0), 0x1, 0x2242) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r2, r2) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0xb}, 0x2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.28346754s ago: executing program 3 (id=91): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005"], 0x50) fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, 'mtd0\x00'}) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000340)='bpf_lsm_inode_getsecurity\x00') getsockname$unix(r1, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x4b0942, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) socket$igmp6(0xa, 0x3, 0x2) openat2$dir(0xffffff9c, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)={0x412000, 0x16b, 0x4}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x178) mount(&(0x7f0000000700)=@filename='mtd0\x00', &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f00000007c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./mnt\x00', 0x1a7) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x200) write$dsp(r3, &(0x7f0000000080)="5cba91a4", 0xffffffd9) write$dsp(r2, &(0x7f00000000c0)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r3, &(0x7f0000000140)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r4, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) 5.248861513s ago: executing program 2 (id=93): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x200, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = add_key$user(&(0x7f0000002700), &(0x7f00000026c0)={'syz', 0x0}, &(0x7f0000000140)="5b25ad4d73d6528f703d", 0xa, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f0000002640), &(0x7f0000002680)={'syz', 0x1}, 0x0, 0x0, 0x0) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000706010400000000000000002200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0xc886) r8 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8102) writev(r8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xa) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 5.209554978s ago: executing program 1 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x4, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00', 0x10}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x74}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4001) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$random(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000680)=0x104) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtaction={0x112c, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1118, 0x1, [@m_police={0x1114, 0x1, 0x0, 0x0, {{0xb}, {0x10e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x25242e8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0xad8, 0x10001, 0x8001, 0x5, 0x7fff, 0xfffffff6, 0xfffffff4, 0x46, 0x5, 0x8, 0x0, 0x1, 0xd7, 0x0, 0x97, 0x8000, 0xa3, 0x3, 0x7, 0x100, 0x44a8, 0x6, 0x8001, 0x0, 0x7, 0xc4c7, 0x7ff, 0x44, 0x3, 0x0, 0x8, 0x8, 0x28, 0x8, 0x213580fd, 0x2, 0x1, 0x0, 0x5, 0x3, 0x31, 0x7, 0x200, 0x76, 0xec8a, 0x5, 0xe, 0x101, 0x0, 0xe5, 0xc, 0x5, 0x7, 0x4, 0x2, 0x0, 0x80dd, 0xb0, 0x35a26e02, 0xffff, 0xbf, 0x83b, 0x2, 0x200000, 0x8c, 0x2bf, 0x81a8, 0x8, 0x100, 0x3, 0x400, 0x0, 0x7, 0x2, 0x0, 0xffffffff, 0x6, 0x9, 0x237, 0x8, 0xb1, 0x7, 0x11, 0x3, 0xfd, 0xb55, 0x8000, 0x5, 0x6, 0xffffffcd, 0x2, 0x4, 0x80000000, 0x9, 0x7, 0x5, 0xc56a, 0x8, 0xffff, 0x2, 0x3, 0x5c, 0x8, 0x0, 0x6, 0x3, 0x50, 0x10000, 0x8001, 0x5, 0x1, 0x6, 0x7, 0xd, 0x9, 0x10000, 0x19, 0x91d, 0x3, 0x2, 0x1, 0x3, 0x3, 0x7ff, 0x401, 0x7, 0xd70, 0x2c, 0x9, 0x3, 0x6070, 0xfff, 0x1000, 0x8, 0x4, 0x6, 0x5, 0x4, 0x7c, 0x488531db, 0x40, 0x6, 0x5, 0xfffffffb, 0x1000000, 0x1ff, 0x5, 0xc7, 0x0, 0x8, 0x5, 0x5, 0x7, 0xfffffffb, 0x5, 0x5c, 0x1000, 0x3, 0x527, 0x3, 0x5a85, 0xf6, 0xc, 0x1, 0xaa7a, 0x6, 0x1, 0xee1, 0x80000000, 0x825f, 0x9, 0x40, 0x233, 0x80000001, 0x6, 0x401, 0x9, 0x618, 0x6, 0x4, 0x1, 0x846, 0x7, 0xb46, 0x9, 0x1ff, 0xe0, 0x4, 0xd, 0x1, 0xc98, 0x3, 0xffff8000, 0xc, 0x6, 0xfe, 0x1, 0x8, 0x2, 0x2, 0x2, 0xbecd, 0x9, 0x3, 0xba, 0x400, 0x8fe1, 0x371, 0x80, 0x2, 0x8000, 0x10000, 0x9, 0x5, 0x6e36c67d, 0xbe4, 0x7f, 0x1, 0x7, 0x2, 0x3, 0x1, 0x64, 0x8843, 0x6, 0x80, 0x3, 0x6, 0xfffffe01, 0x5, 0x8001, 0xfffffff7, 0x9, 0x9, 0x3ff, 0x751, 0x0, 0x1, 0x8, 0xfffffff3, 0xe, 0x7fff, 0xff, 0x800, 0x3, 0xd, 0x80000000, 0xe, 0xc0, 0x6, 0x6397, 0x9f9, 0x239, 0x89e4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x38f43bb0}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5e5, 0x0, 0x1, 0xa, 0x2, 0x5, 0x0, 0x5, 0x7, 0x2, 0x4, 0x0, 0x2, 0x1000, 0x7fffffff, 0x80, 0x6, 0x0, 0xffffffff, 0xaffc, 0x1, 0x34, 0x1, 0x4, 0x1, 0x5, 0x9, 0x4, 0x4, 0x1, 0x151d, 0x5, 0x6, 0xfffffffa, 0xd, 0xebc, 0x8, 0x752e, 0x8, 0x289, 0x100, 0xffffffff, 0x7f, 0x7fffffff, 0x101, 0x7f, 0x2, 0x5, 0x5, 0xfffffff7, 0x1, 0x5, 0x3, 0xd, 0x0, 0x7f, 0xffff2a91, 0x3, 0x100, 0x6, 0x2ce, 0x7f, 0xc14, 0xfff, 0x6, 0xfffffff7, 0x5, 0xd9, 0xffff6d2d, 0x7e, 0x0, 0x2, 0x4, 0xd1, 0x0, 0x0, 0x85, 0x1, 0xadfb, 0xd34, 0x9, 0xf324, 0x2000, 0x1, 0x5, 0x80, 0x1000, 0x0, 0x0, 0xecc1, 0xc, 0x1000, 0x7fffffff, 0x4, 0x4, 0x0, 0xfff, 0x7, 0x4, 0x7, 0x22, 0xa, 0x3, 0x2, 0x3e78, 0x134, 0x9, 0x80000001, 0x608, 0x80e8, 0x371, 0x8, 0x6f, 0x0, 0xfffff801, 0x6, 0x0, 0x4, 0x5, 0xffff, 0x0, 0x720fbc85, 0x101, 0x1ff, 0x48, 0xa3f, 0x4, 0xf46b, 0x9, 0x0, 0x4, 0x9, 0x401, 0x81, 0x84c, 0x6, 0x3, 0x5, 0xffff, 0x6, 0x7, 0x31a, 0xa, 0x9, 0xc16, 0x3ff, 0x0, 0x8001, 0x9, 0x1ff, 0x4, 0x68000000, 0x5, 0xfff, 0x800, 0x4, 0x30e9, 0x1, 0x9, 0x6, 0xec, 0x0, 0x7, 0x1, 0x8, 0xe0000, 0x0, 0x7, 0x8000000, 0x3, 0x7f, 0x1ff, 0x2, 0x9, 0x0, 0xfffffff1, 0xeb, 0x6, 0x10000, 0x0, 0x3, 0x6, 0x9, 0xdbe, 0x1000, 0x800, 0x3, 0x2, 0x3, 0x10001, 0xa, 0x7, 0x4, 0x4, 0xffffffff, 0x8, 0x0, 0x8000, 0x7, 0x8, 0x2, 0x8, 0x9, 0x238, 0x800, 0xffffffff, 0x4, 0x5, 0x9, 0x3c, 0x8000, 0x5, 0x1, 0x400, 0x2, 0xd, 0x200, 0xc, 0x2, 0x3, 0x1ff, 0x4, 0x0, 0x212c6b57, 0x75, 0x7, 0x70, 0xfffff219, 0xffffffc0, 0x2, 0x200, 0x6c, 0x7, 0x6, 0x9, 0x6bb1, 0x6, 0x8, 0x1, 0x9, 0x6a, 0xbf, 0x2, 0x2, 0x9, 0x9, 0x2, 0x9, 0x1, 0xc, 0x9, 0x8, 0x10000, 0x7, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6000, 0x5, 0x757ab92d, 0x9b5, 0x3, {0x3, 0x0, 0x0, 0x3, 0x7, 0x8}, {0x1, 0x1, 0x3, 0xe5e, 0x7ff, 0x8}, 0xe, 0x8, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x5, 0x7fffffff, 0xfffffffe, {0x2, 0x2, 0x7, 0x8001, 0x101, 0x656}, {0x4, 0x1, 0x80, 0xfad, 0xe, 0x3}, 0x0, 0x9, 0xffff}}], [@TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0x3, 0xfffffff7, 0x1ff, 0x8, 0x4, 0x10000, 0x7fffffff, 0x0, 0x3ff, 0x9, 0x200, 0x7fff, 0x4, 0x8, 0x9000000, 0x1, 0xa, 0xffff751a, 0x1, 0x6, 0xc9e8, 0x8001, 0xffff, 0x9, 0xb, 0x8, 0x7, 0x100, 0xf, 0x2, 0x5, 0x38, 0x0, 0x5b2d, 0x0, 0x5, 0x5, 0x5, 0x9, 0x6, 0x3ff, 0x6, 0x5, 0x21, 0x1, 0x8, 0x9, 0x5, 0xf0c, 0x4, 0x1, 0xc48, 0x60000, 0x10001, 0x62e5, 0xf5, 0x3, 0x4, 0x6, 0x8, 0x6, 0x4, 0x7fff, 0x4, 0xb7, 0x4, 0x9, 0xdaff, 0xdca, 0x6711, 0x2, 0x6, 0x10001, 0x4, 0x101, 0x3, 0xde5, 0x3, 0x401, 0xffffffbc, 0x8000, 0x1, 0x6, 0xa9, 0x7, 0x9, 0x4, 0x8, 0x3, 0x1, 0xc, 0x4, 0x3, 0x6, 0x0, 0xf5, 0xf, 0x8, 0x1, 0x5, 0x3, 0x6b, 0x6, 0x8, 0x8001, 0x4, 0x0, 0x7, 0x7fff, 0x4, 0x0, 0x8, 0x9f4d, 0x9, 0x1000, 0xa10, 0x6, 0x0, 0x7, 0x7, 0x5, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x9, 0x3, 0x5, 0x717, 0x5, 0x5, 0x4, 0x75, 0x401, 0x6, 0x5, 0x7, 0xd9e, 0x0, 0x7, 0x0, 0x97e2, 0x6, 0x6, 0x1ff, 0x6, 0xfffffffa, 0x2, 0x1000, 0x4, 0x800, 0xfffffff9, 0x8001, 0x3, 0x6, 0x69, 0x0, 0x6, 0x401, 0x474, 0x6, 0x1, 0x0, 0x7b75b7e8, 0xd, 0x401, 0xff, 0x3, 0xd93a, 0x6, 0xb98, 0x0, 0x401, 0x2, 0x6, 0x58, 0x3, 0x38f08769, 0xa78e, 0x7, 0x6, 0x7fff, 0x5, 0xa1b6, 0x5e5a, 0x9, 0x1, 0x1, 0x2, 0x1, 0x6, 0x2, 0xff, 0x4000, 0x0, 0x3, 0xb, 0x9, 0xc060da9, 0x8, 0xfffffffc, 0x0, 0x0, 0x1, 0x6, 0x9, 0x10, 0xa2, 0x2, 0xfffffffc, 0x10, 0x5, 0x4, 0x7392, 0x1, 0x2, 0x6, 0x6, 0x4, 0x9, 0xb1e2, 0x2, 0x1, 0xff, 0x6281, 0x5f, 0xc, 0x0, 0x2, 0x0, 0x7, 0xf987, 0xfffffff7, 0x3, 0x8, 0x2, 0x401, 0x6, 0x2, 0xb, 0x80, 0xfffffff7, 0x1, 0xffffad25, 0xa03, 0xff, 0x0, 0x2, 0x4, 0x4, 0x81, 0x4, 0x3, 0xf]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0xd4e4, 0x40, 0x3, 0x6, 0x64b8, 0x155a, 0x1000, 0x5dd900, 0x7ff, 0x2800000, 0x401, 0x5d, 0x6, 0xffff, 0x6, 0x80, 0x101, 0x3005f5ab, 0x3b7e6b03, 0xfff, 0x5, 0x2, 0x10000, 0xe, 0x8, 0x4, 0x8, 0x2, 0x7fffffff, 0x566, 0xb1, 0x5, 0x0, 0x0, 0x4, 0x81, 0x1, 0x8, 0x10001, 0x3, 0x0, 0x30000, 0x2, 0x0, 0x1, 0x0, 0x2, 0x2, 0x1, 0x0, 0x2, 0x0, 0x5, 0x1, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x9, 0xfffffffb, 0x8, 0x3, 0xc00000, 0x5da, 0xffff7fff, 0x787, 0x7, 0x5, 0x8, 0x6a65, 0x1, 0x0, 0x5, 0xd6, 0x9, 0x6, 0x3, 0xa, 0xa0b0, 0xffffff81, 0x3ff, 0x1ff, 0xfffffff6, 0xa, 0xf, 0x6, 0x6, 0x7fffffff, 0x3, 0x10000, 0x31a2, 0x10000, 0x9, 0x5d86a571, 0x101, 0x8, 0x9, 0x1, 0x3, 0x2, 0x3, 0xa361, 0x4, 0xfffffff8, 0x80000000, 0x10001, 0xe, 0x2, 0x3d7a3cad, 0xcba, 0x7, 0x8, 0x7, 0x4, 0x800, 0x2, 0x2, 0x7, 0xfffffe00, 0x9, 0xbb7, 0x10, 0x9, 0x1, 0x5, 0x0, 0xff, 0xf, 0x45f, 0x7, 0x6, 0x9, 0x3, 0x7, 0x9, 0xfffffc01, 0x1b9, 0x1ff, 0x10000, 0x2, 0x8, 0xf, 0x5, 0x2, 0x3, 0xecd4, 0xd7, 0x7, 0x6, 0x7, 0x5, 0x7, 0x4, 0x78ad195f, 0x2, 0x6, 0xc, 0x1, 0x7, 0x76, 0xffffffff, 0x4, 0x8, 0x3, 0x7, 0x4, 0x400, 0x5, 0x0, 0x7, 0x2, 0xff, 0xbcdc, 0x40, 0x5, 0x5, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x39f6, 0xfff, 0x40, 0x5, 0xbf, 0xe8, 0x7fff, 0x2, 0x8, 0x10000, 0x80000001, 0x5, 0x3, 0xc7, 0x7ff, 0x0, 0xfffffff9, 0x3, 0xd23, 0x4, 0x66, 0x2, 0xffffffff, 0x6, 0x9, 0x5, 0x4, 0x8, 0x7, 0xd, 0x7, 0x9, 0x2, 0x5, 0xffffffd4, 0x0, 0xfff, 0x0, 0x6, 0x200, 0x0, 0x0, 0x2, 0x0, 0x7f, 0xfffff801, 0x8, 0x4, 0x9, 0x3, 0x9, 0x2, 0x0, 0xfff, 0x800, 0x9, 0x40, 0x5, 0xfffffffb, 0x8, 0x799, 0x4, 0x3, 0x9, 0x80, 0x3, 0x4, 0x7f, 0x0, 0x4, 0x57]}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x112c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000001780)=ANY=[@ANYBLOB="fcc80045004100010002030400ff0fffff04080c000000cb75070205080702d509050311000080590b000007023000050101020204000d0308000300f537e9000500060c040007000100"], 0x4a) flock(0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000003010101000000001646741400000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x80) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="80ba9fe37fe15a4003faed2aa9e3563d271030df15105f522e579c6c6290bec90b4f8210a0f02e15b44b489261f66f7b55590ab6b57c91bdfaddcdd76da1e17c1ebd1e6fe8d347d26d9c22ca75fd4066debe5346f9f1de6ca20ded2e2265a6fe8a9d3311508e0033abbbc5dce4fd4276b6c2af72fae05562868f55a38d65bfbe0a81875ed4d0fc68df802cae8bdf976328000b906deb7ff649363e341a34c8903dbefef1cd63a4286405f603e1d0030aa2b26c16d22f0187b6dc372249d5a70f1640e3f1736951", 0xc7}, {&(0x7f0000000400)="d0b60c8e4f23a541b142399ff1171fa464f6ae93c7", 0x15}, {&(0x7f0000000440)="e9a382cb415c427737332b8793744a6be8d7063a063237bcf02ffe0958161a027232e909508c526f5c29b0100731cea6caf22ab49719088c2e23b01798773e78c866f04dfe7a527ff46ce7ae8ce7270e7781918b961b75bbb891fca4d623a9a3e44ce3ed334a95add657e440a499931b6b362c0f1822b33bc546bab04a2c5de7d9e2579627b52afa2674f1006f0fa1eddc61d85163c02964c7f1adc2afef586ebcecd72c22bf894a35299b24ae1d8ac4d64986987490912196780ef837", 0xbd}], 0x3}, 0x1) 4.5481002s ago: executing program 1 (id=96): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x80\x9aV%\x8f\xd8\xd3\xbdQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf16000000000000bf61000000000000b702000000000000bfa300000000000007030000f8ffffffb704000004000000b7050000010000008500000044000000b70000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0xc4) socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000580)={'full'}, 0x2f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xf2, 0x4, 0x4, @empty, @empty, 0x8, 0x80, 0x4, 0x6}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffd) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000100)) ioctl(r4, 0xc048aeca, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r5, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r5, &(0x7f0000000680)='nullb1\x00', 0x200) 4.292324332s ago: executing program 3 (id=97): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001900150000000000000000000a0000000002000000000000180009"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) splice(r4, 0x0, r2, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x1, 0xd8f9}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x100000) mkdirat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0xc1) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r5) syz_open_procfs(0x0, &(0x7f0000000400)='fd/3\x00') r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[], 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x80042, 0x0) syz_clone3(&(0x7f0000000300)={0x23800100, &(0x7f0000000380), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_disconnect(r5) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f0000000b80)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 4.024806108s ago: executing program 2 (id=98): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) close(r0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f80)=@generic={&(0x7f0000000f40)='./file0\x00', 0x0, 0x18}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x17, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000005000000000000001000e4d50000"], &(0x7f0000000500)='GPL\x00', 0xf872, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x3, 0x5, 0x7fff, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000001000), 0x10, 0x9}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x36b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x115, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000280), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000005c0)={'comedi_parport\x00', [0x4f24, 0x14, 0x10000, 0xff, 0x5, 0xcc8, 0x6, 0x7, 0x9, 0x100, 0x3, 0xffffffff, 0x1, 0x9, 0x3, 0x2, 0x0, 0x7, 0x3, 0x40000003, 0x3, 0x6, 0x4, 0x20001e58, 0x3, 0x1, 0x7c, 0x207, 0x6, 0x0, 0xb]}) syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x91a1, 0x200, 0x2, 0x100da, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e94, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2, 0x3, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367, 0x0, r3}}], 0x1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r7 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000340)={0x9000000d}) 3.388353782s ago: executing program 0 (id=99): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0), 0x2, 0x2) ioctl$int_in(r1, 0x5421, &(0x7f0000000300)=0x7) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c}) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000840)={'#! ', './file0', [{0x20, './)$!b[0\x8c'}, {0x20, '[*]}@'}, {}, {0x20, '/dev/nullb0\x00'}, {}], 0xa, "2ae03e3507955a91bc2f65bdb9eeb9ab80d8d7c974a2eafa54ceaeca6ebbe5e8c1f56528c0e9c96c8d375b26947b55a06c5ddd38458dd33b5bffd81643bb2813c08b07186c27ae0f000f1361cc586529306aa0b052da083bb1b60b038e1f850e70b8a9136d9e28b24f274acf2637839665fc5e6c3ae5d187af4cf7b880714fd9f0952becb98059270e70e3152472ab5dac7d8cc3d03edd1c2cabe725218d9e528d7f46194cf119cef98aef4b218147a9fa01cb24c3635c0717f9fc6d54a05efd763ae9a2f26647c9defe74"}, 0xf5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0x200c17a) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = syz_open_dev$dri(0x0, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0001}]}) io_setup(0x8, &(0x7f00000004c0)=0x0) io_pgetevents(r6, 0x3, 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000580)={0x0, 0x3938700}, 0x0) futex_waitv(&(0x7f0000000640)=[{0x6, &(0x7f0000000680)=0x6, 0x2}], 0x1, 0x0, 0x0, 0x1) 3.388085032s ago: executing program 1 (id=100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) syz_io_uring_setup(0x111, &(0x7f0000000040)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@delqdisc={0x24, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc084}, 0x2400c800) r4 = socket$kcm(0x11, 0x3, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) ppoll(&(0x7f0000000100)=[{}, {r5}], 0x2, 0x0, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0x6) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4038587a, &(0x7f0000000280)={{r1, &(0x7f0000000140)='\'*[-\\', 0x4241, &(0x7f0000000180)={@_ha_fsid={[0xc4, 0x1]}, {0x0, 0x0, 0x7fff, 0x8}}, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x3}, {[0x617c, 0xa571, 0x7fff, 0x8]}, 0xd00, 0x18, &(0x7f0000000240)=""/24}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x85) dup3(r9, r8, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x180) ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, &(0x7f00000002c0)) 2.055571546s ago: executing program 0 (id=101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) unlink(&(0x7f0000000280)='./file0\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/igmp\x00') ioprio_get$pid(0x2, r0) pread64(r5, &(0x7f00000004c0)=""/15, 0xfffffe9c, 0x3c) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18d7330a", @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000020000780080001000100000008000100000400000c0004000020000000000000"], 0x34}}, 0x4008800) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d2861657329000000000000000000000000000000000000000000000000140000"], 0x68}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000ca9f9fd1c55cc5301bac3afea8f10002000100abf8eadeaba8f73401000000000000000000008f99d8728b41a69d8c54092ffec895"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r7 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) 2.055362416s ago: executing program 2 (id=102): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') socket$packet(0x11, 0xa, 0x300) r0 = socket(0x1e, 0x4, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="e6ba65ebdc0c417bd22114ebad3401b1d5d219103ddbd5b127318fb233bf082fde482e640b3c91c019571645656da5627b3619073b3d3e1c6699c12901c34c216c7f3c9118f31c1896bb0ab54d5337ea0682a48f712fef5c4264ecbb8c25a4bc6d9fc1c04a30099f7dbe12d9f64bf175fe592fb45bbc200f497b6b52e569daa6b82ef9cb9ec293a32b76e7783584f10205a79b4959709ac4b994790020763cd67b6f3c36618b5d769ad430b8cd50284878fad91c8046c566110e803c074d0ae567f39171726a4d0c7031d9c7579908688c36be72969d49528ab17cd1ec365eb35e3cc4fbe06c800fc02711ae971fb1", 0xef}, {&(0x7f00000002c0)="a91adc3429eac11168baf3b6c28ea84628f1551dcd7b3d59e97e17c5387dc53f66720d686748192a7ccb27b502f36a9a320fb0ef63709d08046f8218d57e5a00ac82dabd84b952205d47f604a64b7dfc6dd8c29669749c93f2fde602553f7ea384bdd1", 0x63}], 0x2}, 0x20000015) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x20}]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000300)=@raw=[@alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x3, 0x2, 0x0, 0x0, 0x10}, @exit], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f0000000500)={0x0, 0xffff, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000005c0)={{0x5, 0x4, 0x7, 0x7, 'syz0\x00', 0x67de}, 0x6, 0x100, 0x5, r4, 0x4, 0x6, 'syz1\x00', &(0x7f0000000580)=['\x00', '\x00', '{\xc7\x00', '(-,%\\#$\x00'], 0xd}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlinkat(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', r2, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x15, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) sendfile(r5, r5, 0x0, 0x200000) 1.012254511s ago: executing program 0 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x0) syz_ublk_add_dev(r3, 0x0, 0x0, r4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400000200fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="43a00000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4054) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) getpid() write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1000, 0x200, &(0x7f000000bb40)) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r11, 0x9) recvfrom$inet(r11, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x7fffffff, 0xffffffff, 0x7fff, 0x7fff, 0x3}) 836.384682ms ago: executing program 2 (id=104): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = syz_open_dev$usbfs(&(0x7f0000000f40), 0x1ff, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000f80)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) syz_open_procfs(0x0, &(0x7f00000010c0)='fd/3\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x800040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r3, &(0x7f0000000840)='on', 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)={0x550, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x540, 0xce, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @fd}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x100000001}, @nested={0x3a9, 0xc8, 0x0, 0x1, [@nested={0x387, 0x5c, 0x0, 0x1, [@nested={0x15d, 0xb6, 0x0, 0x1, [@nested={0x4, 0xe}, @nested={0x4, 0x5}, @nested={0x4, 0xef}, @generic="4e2efc1a852369f0d11316f559fdab113ca654e37b5f6bf93f802996604ab7676efa5975ea31b805164e511b8d80cd1bb29f84594c9a6d94c3a552caa24c7b0674f707ff01153b6121ca964d8a8bdae45332aa6f1d87ca1706e245453648f116f71944a92b9ea4f8a480b3c5a91f651e2b09c5efb481ab3603f2f703", @generic="120a99e85a1f505bcde974516e09512de95eab9b7ff95945b0819c65c1348e4c8b88478b17aced97b789e86884efea7696cd3782b269473739fc920b721b9827ef98562aab4f25f2c731d8cc84166eec8458259a8af13a2e97a0787302bc7744eb739267fe9fbaae252a3923ddcd3b11247d5f7837059bd36cc3b2af5959b47147c791cb7f369484175fd61cdf62b2a9925cff848890730be8a213c4ec4ecd1e6d3dfd878dcaf4009123db40aab05822ef856bf23c7321a0a5db0ac08e8fcd80db254487ba21d5b939558d32bf", @nested={0x4, 0x7c}]}, @generic, @nested={0x95, 0xf2, 0x0, 0x1, [@typed={0x4, 0x113}, @generic="ae21539832b7db50dcf8b57f1fac16bd958eef767eabd6912fed3059076751a7b8e2fdc0c981f8322618e9469e355c196555d06f8d3eab71de86681867c5d6b0d76f2eb33848cabdf88665b72163f933e11ce23ede0dc0c3c08aa3a05b16e0c6027eb1eebfcbdeb4f56346f2e21d3b0f3961a2c94c98a4b656c75774717986398d0300edeabe420c5836e0ffa3"]}, @typed={0x8, 0xc6, 0x0, 0x0, @fd}, @generic="c7016aa67c7daba0f6683164a1af2d333aefd145d32801e0bcc73903aea18cfa2093e1fd71124fa4a12a5d4d015e1532b8cb55725cb5ad7581ab40b96fdec19634151919002942a2d080556d3724295fe1daadef2686fdaa5e5be93278159230125577cb2242d25b6f164aff363d107656c7c47248b9de84310a6a8c8f1cc80681c39a24d2e9b2fa496832733eac8ac5383bd387fa3b430581612f921e38a33a063019260b922b2488c2af9cbe6323947ae59643ddf5e8489f5ad27620cffc98faf22bc5d5fa18073074afaf604b2716e06707c022f1ac66c4af3a25fa668d2948", @typed={0x8, 0x164, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x169, 0x0, 0x0, @pid}, @generic="88eb40ec61b74a355e5b69caf2b21b678f32de798af29a1fd98b8fcd860bbe1ab5fc71f3c31336988b3e82e4b8cd9c1dfe8785171f2672f336d0ceac234bd5b1d86c35c4f4fce4eff3a8f2fcf1efca6db03df0009d463f75f84c128b2553c4cee0dbe4de20ad96be18f66c03475846aaaef5b4e19578094d754029f4f78ef1ed1c0514237bcdd5fdabae9d253cff986477f6"]}, @nested={0x4, 0x100}, @nested={0x4, 0xda}, @generic="e9deb78c97a91fbc5eea41634e2aab254c4a992d2c"]}, @generic="c0bbc22e7a5e3733d8a5cf68fd70e73ba47d167550bec74c35f32ec2a026a90681a8de07bf8359378609686564c0f26942873be759b8fffc8632303dcbe0ccbf8bba2cd60b5e07ee901adc59614efbeec2762e801ccd9a823d4fb0e11fb017296532a81ea6df72e71e94fbcee9ec5108db88ede3482c86296b2e71729a1a0e3c91d61e986a52bf0143be06633394b6dabc6c46513b6df1367f54a3eb57931fd7bf58200a3681e66d9081e16857336dbe4f183ab794cee333801b0384f1abd7b423e2b74bf558c6f369d49af66b7ab0d96743d4facc", @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="a1523b2aed5aaf0b32345cd0ef11ee3f8fc3b7a78769a8f388751274e2e6642019910ec5009ac0b7f102bf678a633489125096861de148ebde61957165e7ce38be923c25073769ebdd8970deec0ca33d4e0523702300c75999c1eee376d5dbc1e0a393ba2f1558afa2bcafaf7cb07ce46a520e9e2baf49984353f0c9218e327be92c6a5c15cdb8114dc145ea64005eef50919d"]}]}, 0x550}], 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000003c0)='syz_tun\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f0000000180), 0xffff, 0x109041) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000000000000000000180000009500000000000000c8bf1526c89c4e99fdfb5f03df21345ee528a7ac177eac883b8baac40361f21591d4631cf74fc425a0afcc0392a053436902a1e734e3b91764645fc0b68d57769496986d834ec810679495d1177feb559e91dcb44e46b72de7fca2bc2941722b0b6c4c91ab511b77f2e60f394152bcf1fa3a546dea0708387c10dfa2eb4ff6678eb9854a3bd2f345da82b75bff5f8eb73e8b8a8fbbf7def57d029ff28dfca75cf2aebfd30b53f09ad4ac498d9938c285f52d363a3041e39ac26c6a24aeb1c3ea096a497ad92997d8929f2834b88f546e65a46afc9dbe4daf72"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 497.957151ms ago: executing program 2 (id=105): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = syz_open_dev$usbfs(&(0x7f0000000f40), 0x1ff, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000f80)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) syz_open_procfs(0x0, &(0x7f00000010c0)='fd/3\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x800040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r3, &(0x7f0000000840)='on', 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)={0x554, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x544, 0xce, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @fd}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x100000001}, @nested={0x3ad, 0xc8, 0x0, 0x1, [@nested={0x38b, 0x5c, 0x0, 0x1, [@nested={0x161, 0xb6, 0x0, 0x1, [@nested={0x4, 0xe}, @nested={0x4, 0x5}, @generic="4e2efc1a852369f0d11316f559fdab113ca654e37b5f6bf93f802996604ab7676efa5975ea31b805164e511b8d80cd1bb29f84594c9a6d94c3a552caa24c7b0674f707ff01153b6121ca964d8a8bdae45332aa6f1d87ca1706e245453648f116f71944a92b9ea4f8a480b3c5a91f651e2b09c5efb481ab3603f2f7030c517d878cd67b1b", @generic="120a99e85a1f505bcde974516e09512de95eab9b7ff95945b0819c65c1348e4c8b88478b17aced97b789e86884efea7696cd3782b269473739fc920b721b9827ef98562aab4f25f2c731d8cc84166eec8458259a8af13a2e97a0787302bc7744eb739267fe9fbaae252a3923ddcd3b11247d5f7837059bd36cc3b2af5959b47147c791cb7f369484175fd61cdf62b2a9925cff848890730be8a213c4ec4ecd1e6d3dfd878dcaf4009123db40aab05822ef856bf23c7321a0a5db0ac08e8fcd80db254487ba21d5b939558d32bf", @nested={0x4, 0x7c}]}, @generic, @nested={0x95, 0xf2, 0x0, 0x1, [@typed={0x4, 0x113}, @generic="ae21539832b7db50dcf8b57f1fac16bd958eef767eabd6912fed3059076751a7b8e2fdc0c981f8322618e9469e355c196555d06f8d3eab71de86681867c5d6b0d76f2eb33848cabdf88665b72163f933e11ce23ede0dc0c3c08aa3a05b16e0c6027eb1eebfcbdeb4f56346f2e21d3b0f3961a2c94c98a4b656c75774717986398d0300edeabe420c5836e0ffa3"]}, @typed={0x8, 0xc6, 0x0, 0x0, @fd}, @generic="c7016aa67c7daba0f6683164a1af2d333aefd145d32801e0bcc73903aea18cfa2093e1fd71124fa4a12a5d4d015e1532b8cb55725cb5ad7581ab40b96fdec19634151919002942a2d080556d3724295fe1daadef2686fdaa5e5be93278159230125577cb2242d25b6f164aff363d107656c7c47248b9de84310a6a8c8f1cc80681c39a24d2e9b2fa496832733eac8ac5383bd387fa3b430581612f921e38a33a063019260b922b2488c2af9cbe6323947ae59643ddf5e8489f5ad27620cffc98faf22bc5d5fa18073074afaf604b2716e06707c022f1ac66c4af3a25fa668d2948", @typed={0x8, 0x164, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x169, 0x0, 0x0, @pid}, @generic="88eb40ec61b74a355e5b69caf2b21b678f32de798af29a1fd98b8fcd860bbe1ab5fc71f3c31336988b3e82e4b8cd9c1dfe8785171f2672f336d0ceac234bd5b1d86c35c4f4fce4eff3a8f2fcf1efca6db03df0009d463f75f84c128b2553c4cee0dbe4de20ad96be18f66c03475846aaaef5b4e19578094d754029f4f78ef1ed1c0514237bcdd5fdabae9d253cff986477f6"]}, @nested={0x4, 0x100}, @nested={0x4, 0xda}, @generic="e9deb78c97a91fbc5eea41634e2aab254c4a992d2c"]}, @generic="c0bbc22e7a5e3733d8a5cf68fd70e73ba47d167550bec74c35f32ec2a026a90681a8de07bf8359378609686564c0f26942873be759b8fffc8632303dcbe0ccbf8bba2cd60b5e07ee901adc59614efbeec2762e801ccd9a823d4fb0e11fb017296532a81ea6df72e71e94fbcee9ec5108db88ede3482c86296b2e71729a1a0e3c91d61e986a52bf0143be06633394b6dabc6c46513b6df1367f54a3eb57931fd7bf58200a3681e66d9081e16857336dbe4f183ab794cee333801b0384f1abd7b423e2b74bf558c6f369d49af66b7ab0d96743d4facc", @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="a1523b2aed5aaf0b32345cd0ef11ee3f8fc3b7a78769a8f388751274e2e6642019910ec5009ac0b7f102bf678a633489125096861de148ebde61957165e7ce38be923c25073769ebdd8970deec0ca33d4e0523702300c75999c1eee376d5dbc1e0a393ba2f1558afa2bcafaf7cb07ce46a520e9e2baf49984353f0c9218e327be92c6a5c15cdb8114dc145ea64005eef50919d"]}]}, 0x554}], 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000003c0)='syz_tun\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f0000000180), 0xffff, 0x109041) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000000000000000000180000009500000000000000c8bf1526c89c4e99fdfb5f03df21345ee528a7ac177eac883b8baac40361f21591d4631cf74fc425a0afcc0392a053436902a1e734e3b91764645fc0b68d57769496986d834ec810679495d1177feb559e91dcb44e46b72de7fca2bc2941722b0b6c4c91ab511b77f2e60f394152bcf1fa3a546dea0708387c10dfa2eb4ff6678eb9854a3bd2f345da82b75bff5f8eb73e8b8a8fbbf7def57d029ff28dfca75cf2aebfd30b53f09ad4ac498d9938c285f52d363a3041e39ac26c6a24aeb1c3ea096a497ad92997d8929f2834b88f546e65a46afc9dbe4daf72"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 387.591336ms ago: executing program 2 (id=106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x4, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00', 0x10}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x74}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4001) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$random(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000680)=0x104) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtaction={0x112c, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1118, 0x1, [@m_police={0x1114, 0x1, 0x0, 0x0, {{0xb}, {0x10e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x25242e8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0xad8, 0x10001, 0x8001, 0x5, 0x7fff, 0xfffffff6, 0xfffffff4, 0x46, 0x5, 0x8, 0x0, 0x1, 0xd7, 0x0, 0x97, 0x8000, 0xa3, 0x3, 0x7, 0x100, 0x44a8, 0x6, 0x8001, 0x0, 0x7, 0xc4c7, 0x7ff, 0x44, 0x3, 0x0, 0x8, 0x8, 0x28, 0x8, 0x213580fd, 0x2, 0x1, 0x0, 0x5, 0x3, 0x31, 0x7, 0x200, 0x76, 0xec8a, 0x5, 0xe, 0x101, 0x0, 0xe5, 0xc, 0x5, 0x7, 0x4, 0x2, 0x0, 0x80dd, 0xb0, 0x35a26e02, 0xffff, 0xbf, 0x83b, 0x2, 0x200000, 0x8c, 0x2bf, 0x81a8, 0x8, 0x100, 0x3, 0x400, 0x0, 0x7, 0x2, 0x0, 0xffffffff, 0x6, 0x9, 0x237, 0x8, 0xb1, 0x7, 0x11, 0x3, 0xfd, 0xb55, 0x8000, 0x5, 0x6, 0xffffffcd, 0x2, 0x4, 0x80000000, 0x9, 0x7, 0x5, 0xc56a, 0x8, 0xffff, 0x2, 0x3, 0x5c, 0x8, 0x0, 0x6, 0x3, 0x50, 0x10000, 0x8001, 0x5, 0x1, 0x6, 0x7, 0xd, 0x9, 0x10000, 0x19, 0x91d, 0x3, 0x2, 0x1, 0x3, 0x3, 0x7ff, 0x401, 0x7, 0xd70, 0x2c, 0x9, 0x3, 0x6070, 0xfff, 0x1000, 0x8, 0x4, 0x6, 0x5, 0x4, 0x7c, 0x488531db, 0x40, 0x6, 0x5, 0xfffffffb, 0x1000000, 0x1ff, 0x5, 0xc7, 0x0, 0x8, 0x5, 0x5, 0x7, 0xfffffffb, 0x5, 0x5c, 0x1000, 0x3, 0x527, 0x3, 0x5a85, 0xf6, 0xc, 0x1, 0xaa7a, 0x6, 0x1, 0xee1, 0x80000000, 0x825f, 0x9, 0x40, 0x233, 0x80000001, 0x6, 0x401, 0x9, 0x618, 0x6, 0x4, 0x1, 0x846, 0x7, 0xb46, 0x9, 0x1ff, 0xe0, 0x4, 0xd, 0x1, 0xc98, 0x3, 0xffff8000, 0xc, 0x6, 0xfe, 0x1, 0x8, 0x2, 0x2, 0x2, 0xbecd, 0x9, 0x3, 0xba, 0x400, 0x8fe1, 0x371, 0x80, 0x2, 0x8000, 0x10000, 0x9, 0x5, 0x6e36c67d, 0xbe4, 0x7f, 0x1, 0x7, 0x2, 0x3, 0x1, 0x64, 0x8843, 0x6, 0x80, 0x3, 0x6, 0xfffffe01, 0x5, 0x8001, 0xfffffff7, 0x9, 0x9, 0x3ff, 0x751, 0x0, 0x1, 0x8, 0xfffffff3, 0xe, 0x7fff, 0xff, 0x800, 0x3, 0xd, 0x80000000, 0xe, 0xc0, 0x6, 0x6397, 0x9f9, 0x239, 0x89e4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x38f43bb0}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5e5, 0x0, 0x1, 0xa, 0x2, 0x5, 0x0, 0x5, 0x7, 0x2, 0x4, 0x0, 0x2, 0x1000, 0x7fffffff, 0x80, 0x6, 0x0, 0xffffffff, 0xaffc, 0x1, 0x34, 0x1, 0x4, 0x1, 0x5, 0x9, 0x4, 0x4, 0x1, 0x151d, 0x5, 0x6, 0xfffffffa, 0xd, 0xebc, 0x8, 0x752e, 0x8, 0x289, 0x100, 0xffffffff, 0x7f, 0x7fffffff, 0x101, 0x7f, 0x2, 0x5, 0x5, 0xfffffff7, 0x1, 0x5, 0x3, 0xd, 0x0, 0x7f, 0xffff2a91, 0x3, 0x100, 0x6, 0x2ce, 0x7f, 0xc14, 0xfff, 0x6, 0xfffffff7, 0x5, 0xd9, 0xffff6d2d, 0x7e, 0x0, 0x2, 0x4, 0xd1, 0x0, 0x0, 0x85, 0x1, 0xadfb, 0xd34, 0x9, 0xf324, 0x2000, 0x1, 0x5, 0x80, 0x1000, 0x0, 0x0, 0xecc1, 0xc, 0x1000, 0x7fffffff, 0x4, 0x4, 0x0, 0xfff, 0x7, 0x4, 0x7, 0x22, 0xa, 0x3, 0x2, 0x3e78, 0x134, 0x9, 0x80000001, 0x608, 0x80e8, 0x371, 0x8, 0x6f, 0x0, 0xfffff801, 0x6, 0x0, 0x4, 0x5, 0xffff, 0x0, 0x720fbc85, 0x101, 0x1ff, 0x48, 0xa3f, 0x4, 0xf46b, 0x9, 0x0, 0x4, 0x9, 0x401, 0x81, 0x84c, 0x6, 0x3, 0x5, 0xffff, 0x6, 0x7, 0x31a, 0xa, 0x9, 0xc16, 0x3ff, 0x0, 0x8001, 0x9, 0x1ff, 0x4, 0x68000000, 0x5, 0xfff, 0x800, 0x4, 0x30e9, 0x1, 0x9, 0x6, 0xec, 0x0, 0x7, 0x1, 0x8, 0xe0000, 0x0, 0x7, 0x8000000, 0x3, 0x7f, 0x1ff, 0x2, 0x9, 0x0, 0xfffffff1, 0xeb, 0x6, 0x10000, 0x0, 0x3, 0x6, 0x9, 0xdbe, 0x1000, 0x800, 0x3, 0x2, 0x3, 0x10001, 0xa, 0x7, 0x4, 0x4, 0xffffffff, 0x8, 0x0, 0x8000, 0x7, 0x8, 0x2, 0x8, 0x9, 0x238, 0x800, 0xffffffff, 0x4, 0x5, 0x9, 0x3c, 0x8000, 0x5, 0x1, 0x400, 0x2, 0xd, 0x200, 0xc, 0x2, 0x3, 0x1ff, 0x4, 0x0, 0x212c6b57, 0x75, 0x7, 0x70, 0xfffff219, 0xffffffc0, 0x2, 0x200, 0x6c, 0x7, 0x6, 0x9, 0x6bb1, 0x6, 0x8, 0x1, 0x9, 0x6a, 0xbf, 0x2, 0x2, 0x9, 0x9, 0x2, 0x9, 0x1, 0xc, 0x9, 0x8, 0x10000, 0x7, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6000, 0x5, 0x757ab92d, 0x9b5, 0x3, {0x3, 0x0, 0x0, 0x3, 0x7, 0x8}, {0x1, 0x1, 0x3, 0xe5e, 0x7ff, 0x8}, 0xe, 0x8, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x5, 0x7fffffff, 0xfffffffe, {0x2, 0x2, 0x7, 0x8001, 0x101, 0x656}, {0x4, 0x1, 0x80, 0xfad, 0xe, 0x3}, 0x0, 0x9, 0xffff}}], [@TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0x3, 0xfffffff7, 0x1ff, 0x8, 0x4, 0x10000, 0x7fffffff, 0x0, 0x3ff, 0x9, 0x200, 0x7fff, 0x4, 0x8, 0x9000000, 0x1, 0xa, 0xffff751a, 0x1, 0x6, 0xc9e8, 0x8001, 0xffff, 0x9, 0xb, 0x8, 0x7, 0x100, 0xf, 0x2, 0x5, 0x38, 0x0, 0x5b2d, 0x0, 0x5, 0x5, 0x5, 0x9, 0x6, 0x3ff, 0x6, 0x5, 0x21, 0x1, 0x8, 0x9, 0x5, 0xf0c, 0x4, 0x1, 0xc48, 0x60000, 0x10001, 0x62e5, 0xf5, 0x3, 0x4, 0x6, 0x8, 0x6, 0x4, 0x7fff, 0x4, 0xb7, 0x4, 0x9, 0xdaff, 0xdca, 0x6711, 0x2, 0x6, 0x10001, 0x4, 0x101, 0x3, 0xde5, 0x3, 0x401, 0xffffffbc, 0x8000, 0x1, 0x6, 0xa9, 0x7, 0x9, 0x4, 0x8, 0x3, 0x1, 0xc, 0x4, 0x3, 0x6, 0x0, 0xf5, 0xf, 0x8, 0x1, 0x5, 0x3, 0x6b, 0x6, 0x8, 0x8001, 0x4, 0x0, 0x7, 0x7fff, 0x4, 0x0, 0x8, 0x9f4d, 0x9, 0x1000, 0xa10, 0x6, 0x0, 0x7, 0x7, 0x5, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x9, 0x3, 0x5, 0x717, 0x5, 0x5, 0x4, 0x75, 0x401, 0x6, 0x5, 0x7, 0xd9e, 0x0, 0x7, 0x0, 0x97e2, 0x6, 0x6, 0x1ff, 0x6, 0xfffffffa, 0x2, 0x1000, 0x4, 0x800, 0xfffffff9, 0x8001, 0x3, 0x6, 0x69, 0x0, 0x6, 0x401, 0x474, 0x6, 0x1, 0x0, 0x7b75b7e8, 0xd, 0x401, 0xff, 0x3, 0xd93a, 0x6, 0xb98, 0x0, 0x401, 0x2, 0x6, 0x58, 0x3, 0x38f08769, 0xa78e, 0x7, 0x6, 0x7fff, 0x5, 0xa1b6, 0x5e5a, 0x9, 0x1, 0x1, 0x2, 0x1, 0x6, 0x2, 0xff, 0x4000, 0x0, 0x3, 0xb, 0x9, 0xc060da9, 0x8, 0xfffffffc, 0x0, 0x0, 0x1, 0x6, 0x9, 0x10, 0xa2, 0x2, 0xfffffffc, 0x10, 0x5, 0x4, 0x7392, 0x1, 0x2, 0x6, 0x6, 0x4, 0x9, 0xb1e2, 0x2, 0x1, 0xff, 0x6281, 0x5f, 0xc, 0x0, 0x2, 0x0, 0x7, 0xf987, 0xfffffff7, 0x3, 0x8, 0x2, 0x401, 0x6, 0x2, 0xb, 0x80, 0xfffffff7, 0x1, 0xffffad25, 0xa03, 0xff, 0x0, 0x2, 0x4, 0x4, 0x81, 0x4, 0x3, 0xf]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0xd4e4, 0x40, 0x3, 0x6, 0x64b8, 0x155a, 0x1000, 0x5dd900, 0x7ff, 0x2800000, 0x401, 0x5d, 0x6, 0xffff, 0x6, 0x80, 0x101, 0x3005f5ab, 0x3b7e6b03, 0xfff, 0x5, 0x2, 0x10000, 0xe, 0x8, 0x4, 0x8, 0x2, 0x7fffffff, 0x566, 0xb1, 0x5, 0x0, 0x0, 0x4, 0x81, 0x1, 0x8, 0x10001, 0x3, 0x0, 0x30000, 0x2, 0x0, 0x1, 0x0, 0x2, 0x2, 0x1, 0x0, 0x2, 0x0, 0x5, 0x1, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x9, 0xfffffffb, 0x8, 0x3, 0xc00000, 0x5da, 0xffff7fff, 0x787, 0x7, 0x5, 0x8, 0x6a65, 0x1, 0x0, 0x5, 0xd6, 0x9, 0x6, 0x3, 0xa, 0xa0b0, 0xffffff81, 0x3ff, 0x1ff, 0xfffffff6, 0xa, 0xf, 0x6, 0x6, 0x7fffffff, 0x3, 0x10000, 0x31a2, 0x10000, 0x9, 0x5d86a571, 0x101, 0x8, 0x9, 0x1, 0x3, 0x2, 0x3, 0xa361, 0x4, 0xfffffff8, 0x80000000, 0x10001, 0xe, 0x2, 0x3d7a3cad, 0xcba, 0x7, 0x8, 0x7, 0x4, 0x800, 0x2, 0x2, 0x7, 0xfffffe00, 0x9, 0xbb7, 0x10, 0x9, 0x1, 0x5, 0x0, 0xff, 0xf, 0x45f, 0x7, 0x6, 0x9, 0x3, 0x7, 0x9, 0xfffffc01, 0x1b9, 0x1ff, 0x10000, 0x2, 0x8, 0xf, 0x5, 0x2, 0x3, 0xecd4, 0xd7, 0x7, 0x6, 0x7, 0x5, 0x7, 0x4, 0x78ad195f, 0x2, 0x6, 0xc, 0x1, 0x7, 0x76, 0xffffffff, 0x4, 0x8, 0x3, 0x7, 0x4, 0x400, 0x5, 0x0, 0x7, 0x2, 0xff, 0xbcdc, 0x40, 0x5, 0x5, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x39f6, 0xfff, 0x40, 0x5, 0xbf, 0xe8, 0x7fff, 0x2, 0x8, 0x10000, 0x80000001, 0x5, 0x3, 0xc7, 0x7ff, 0x0, 0xfffffff9, 0x3, 0xd23, 0x4, 0x66, 0x2, 0xffffffff, 0x6, 0x9, 0x5, 0x4, 0x8, 0x7, 0xd, 0x7, 0x9, 0x2, 0x5, 0xffffffd4, 0x0, 0xfff, 0x0, 0x6, 0x200, 0x0, 0x0, 0x2, 0x0, 0x7f, 0xfffff801, 0x8, 0x4, 0x9, 0x3, 0x9, 0x2, 0x0, 0xfff, 0x800, 0x9, 0x40, 0x5, 0xfffffffb, 0x8, 0x799, 0x4, 0x3, 0x9, 0x80, 0x3, 0x4, 0x7f, 0x0, 0x4, 0x57]}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x112c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000001780)=ANY=[@ANYBLOB="fcc80045004100010002030400ff0fffff04080c000000cb75070205080702d509050311000080590b000007023000050101020204000d0308000300f537e9000500060c040007000100"], 0x4a) flock(0xffffffffffffffff, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000003010101000000001646741400000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x80) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="80ba9fe37fe15a4003faed2aa9e3563d271030df15105f522e579c6c6290bec90b4f8210a0f02e15b44b489261f66f7b55590ab6b57c91bdfaddcdd76da1e17c1ebd1e6fe8d347d26d9c22ca75fd4066debe5346f9f1de6ca20ded2e2265a6fe8a9d3311508e0033abbbc5dce4fd4276b6c2af72fae05562868f55a38d65bfbe0a81875ed4d0fc68df802cae8bdf976328000b906deb7ff649363e341a34c8903dbefef1cd63a4286405f603e1d0030aa2b26c16d22f0187b6dc372249d5a70f1640e3f1736951", 0xc7}, {&(0x7f0000000400)="d0b60c8e4f23a541b142399ff1171fa464f6ae93c7", 0x15}, {&(0x7f0000000440)="e9a382cb415c427737332b8793744a6be8d7063a063237bcf02ffe0958161a027232e909508c526f5c29b0100731cea6caf22ab49719088c2e23b01798773e78c866f04dfe7a527ff46ce7ae8ce7270e7781918b961b75bbb891fca4d623a9a3e44ce3ed334a95add657e440a499931b6b362c0f1822b33bc546bab04a2c5de7d9e2579627b52afa2674f1006f0fa1eddc61d85163c02964c7f1adc2afef586ebcecd72c22bf894a35299b24ae1d8ac4d64986987490912196780ef837", 0xbd}], 0x3}, 0x1) 355.941258ms ago: executing program 1 (id=107): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000200), 0x6f5, 0x2000000022, &(0x7f0000000240)={0x77359400}) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100300000020050b391740000102030109026000030102d0090904000000010100000a240101000a0002010209040100000102000009040101010102000009050109ff030908040725010001070009040200000102000009040201010102000015f835b9000207000707250104080800"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="000000b207ed3600"]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xd8fe}}]}) write(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x4e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) lseek(r1, 0xfffffffffffffff5, 0x2) syz_open_procfs(0x0, &(0x7f00000025c0)='net/ip6_tables_matches\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002600)={0xaa, 0x6e7}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) creat(&(0x7f0000002680)='./file0\x00', 0x12c) syz_open_dev$vcsu(&(0x7f00000026c0), 0x1, 0x2242) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r2, r2) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0xb}, 0x2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 287.935901ms ago: executing program 3 (id=108): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r2 = socket(0x10, 0x2, 0x0) timerfd_create(0x8, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r4, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000440), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000480)={0x4, 0xffffffffffffffff, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000004c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 0s ago: executing program 0 (id=109): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) openat$mice(0xffffff9c, &(0x7f0000000180), 0x2080) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e0c0)="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", 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount(&(0x7f0000000380)=@filename='ubi0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000400)='ubifs\x00', 0x18000, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xff70, 0x0, 0x3, 0xfffffffc}]}) syz_usb_disconnect(r1) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x80) renameat2(r7, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x7) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:61097' (ED25519) to the list of known hosts. [ 33.566902][ T5702] cgroup: Unknown subsys name 'net' [ 33.698715][ T5702] cgroup: Unknown subsys name 'cpuset' [ 33.702427][ T5702] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.823500][ T5702] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.184167][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.189868][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.190431][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.191202][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.191629][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.192147][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.194410][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.194445][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 39.195219][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.197505][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 39.197528][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.197903][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.199067][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 39.205060][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.207274][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.207778][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.208017][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 39.210402][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.214458][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.216332][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.406955][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.407419][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.408184][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.417719][ T5797] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 39.430893][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 39.434609][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 39.491776][ T5787] infiniband rxe0: set active [ 39.493261][ T30] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.493867][ T5787] infiniband rxe0: added rxe_eth0 [ 39.503645][ T5787] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 39.503668][ T5787] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 39.503690][ T5787] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 39.511397][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.528922][ T5787] RDS/IB: rxe0: added [ 39.529045][ T5787] smc: adding ib device rxe0 with port count 1 [ 39.529118][ T5787] smc: ib device rxe0 port 1 has no pnetid [ 39.534857][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.625122][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.751161][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.772042][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.772124][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.772224][ T5797] bridge_slave_0: entered allmulticast mode [ 39.773429][ T5797] bridge_slave_0: entered promiscuous mode [ 39.804311][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.804436][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.804515][ T5797] bridge_slave_1: entered allmulticast mode [ 39.805336][ T5797] bridge_slave_1: entered promiscuous mode [ 39.824358][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.824423][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.824508][ T5788] bridge_slave_0: entered allmulticast mode [ 39.826218][ T5788] bridge_slave_0: entered promiscuous mode [ 39.855194][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.855325][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.855528][ T5788] bridge_slave_1: entered allmulticast mode [ 39.856769][ T5788] bridge_slave_1: entered promiscuous mode [ 39.867276][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.870320][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.887717][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.896986][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.898172][ T5797] team0: Port device team_slave_0 added [ 39.910563][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.916842][ T5797] team0: Port device team_slave_1 added [ 39.933452][ T5788] team0: Port device team_slave_0 added [ 39.948534][ T5788] team0: Port device team_slave_1 added [ 39.990977][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.990990][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.991004][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.992567][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.992576][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.992590][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.021139][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.021151][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.021165][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.022177][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.022186][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.022200][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.061915][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.061959][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.062011][ T5786] bridge_slave_0: entered allmulticast mode [ 40.062709][ T5786] bridge_slave_0: entered promiscuous mode [ 40.088690][ T5797] hsr_slave_0: entered promiscuous mode [ 40.089556][ T5797] hsr_slave_1: entered promiscuous mode [ 40.090876][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.090959][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.091077][ T5786] bridge_slave_1: entered allmulticast mode [ 40.091870][ T5786] bridge_slave_1: entered promiscuous mode [ 40.112437][ T5788] hsr_slave_0: entered promiscuous mode [ 40.112958][ T5788] hsr_slave_1: entered promiscuous mode [ 40.113271][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 40.113280][ T5788] Cannot create hsr debugfs directory [ 40.177199][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.180055][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.235730][ T5786] team0: Port device team_slave_0 added [ 40.252783][ T5786] team0: Port device team_slave_1 added [ 40.282833][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.282846][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.282860][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.305664][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.305679][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.305698][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.369229][ T5786] hsr_slave_0: entered promiscuous mode [ 40.369648][ T5786] hsr_slave_1: entered promiscuous mode [ 40.370058][ T5786] debugfs: 'hsr0' already exists in 'hsr' [ 40.370068][ T5786] Cannot create hsr debugfs directory [ 40.465833][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.469112][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.469602][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.474403][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.510852][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.516566][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.517596][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.519589][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.569972][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.570053][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.570182][ T5787] bridge_slave_0: entered allmulticast mode [ 40.571430][ T5787] bridge_slave_0: entered promiscuous mode [ 40.589101][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.589180][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.589239][ T5787] bridge_slave_1: entered allmulticast mode [ 40.590103][ T5787] bridge_slave_1: entered promiscuous mode [ 40.611332][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.614481][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.615262][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.620831][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.625130][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.637977][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.644146][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.644824][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.648693][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.659533][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.714337][ T5787] team0: Port device team_slave_0 added [ 40.725604][ T5787] team0: Port device team_slave_1 added [ 40.757028][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.757045][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.757066][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.762561][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.762575][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.762597][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.763993][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.768671][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.781539][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.793081][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.808331][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.813289][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.814053][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.818492][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.847452][ T5787] hsr_slave_0: entered promiscuous mode [ 40.848211][ T5787] hsr_slave_1: entered promiscuous mode [ 40.848914][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 40.848928][ T5787] Cannot create hsr debugfs directory [ 41.000883][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.034746][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.036914][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.040699][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.041685][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.047236][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.054131][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.057541][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.074714][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.078000][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.080982][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.089905][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.095838][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.096177][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.113224][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.113291][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.123156][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.123203][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.135658][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.135705][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.153606][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.176943][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.194121][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.194171][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.213690][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.213777][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.262381][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.266145][ T66] Bluetooth: hci3: command tx timeout [ 41.275658][ T66] Bluetooth: hci2: command tx timeout [ 41.275827][ T66] Bluetooth: hci0: command tx timeout [ 41.275935][ T5791] Bluetooth: hci1: command tx timeout [ 41.281966][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.290616][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.290707][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.302383][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.302531][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.481798][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.519373][ T5788] veth0_vlan: entered promiscuous mode [ 41.523319][ T5788] veth1_vlan: entered promiscuous mode [ 41.531822][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.543701][ T5788] veth0_macvtap: entered promiscuous mode [ 41.549003][ T5788] veth1_macvtap: entered promiscuous mode [ 41.567708][ T5797] veth0_vlan: entered promiscuous mode [ 41.569554][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.573683][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.587211][ T5797] veth1_vlan: entered promiscuous mode [ 41.623213][ T5797] veth0_macvtap: entered promiscuous mode [ 41.631301][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.635510][ T5797] veth1_macvtap: entered promiscuous mode [ 41.662345][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.662381][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.684406][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.705623][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.705639][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.708702][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.711259][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.731604][ T5786] veth0_vlan: entered promiscuous mode [ 41.738162][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.738372][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.738408][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.757610][ T5786] veth1_vlan: entered promiscuous mode [ 41.797767][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.797785][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.798436][ T5787] veth0_vlan: entered promiscuous mode [ 41.806403][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.806526][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.806572][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.806619][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.806666][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.812255][ T5787] veth1_vlan: entered promiscuous mode [ 41.829668][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.829681][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.837190][ T5786] veth0_macvtap: entered promiscuous mode [ 41.844480][ T5786] veth1_macvtap: entered promiscuous mode [ 41.850842][ T5788] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.861089][ T5788] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.864902][ T5787] veth0_macvtap: entered promiscuous mode [ 41.867326][ T5787] veth1_macvtap: entered promiscuous mode [ 41.869981][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.877648][ T5788] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.879156][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.879170][ T5788] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.889584][ T5788] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.892661][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.901118][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.959736][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.959758][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.998678][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.998693][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.024421][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.024442][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.026050][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.069017][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.069039][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.100582][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.100923][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.100957][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.100986][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.101015][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.101045][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.101074][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.315620][ T5954] Invalid ELF header magic: != ELF [ 42.352518][ T5954] ======================================================= [ 42.352518][ T5954] WARNING: The mand mount option has been deprecated and [ 42.352518][ T5954] and is ignored by this kernel. Remove the mand [ 42.352518][ T5954] option from the mount to silence this warning. [ 42.352518][ T5954] ======================================================= [ 42.355326][ T5954] overlay: Unknown parameter '/' [ 42.513917][ T5956] input: syz1 as /devices/virtual/input/input5 [ 43.307618][ T5955] Zero length message leads to an empty skb [ 43.356300][ T5798] Bluetooth: hci2: command tx timeout [ 43.356322][ T5798] Bluetooth: hci0: command tx timeout [ 43.356334][ T5798] Bluetooth: hci3: command tx timeout [ 43.356395][ T66] Bluetooth: hci1: command tx timeout [ 43.486054][ T5875] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 43.527174][ T5966] mmap: syz.2.7 (5966) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.637042][ T5875] usb 8-1: New USB device found: idVendor=18d1, idProduct=2d04, bcdDevice=0.40 [ 43.639393][ T5875] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 43.639428][ T5875] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 43.643250][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.643265][ T5875] usb 8-1: Product: syz [ 43.643272][ T5875] usb 8-1: Manufacturer: syz [ 43.643280][ T5875] usb 8-1: SerialNumber: syz [ 43.663630][ T5971] comedi comedi3: board detection failed [ 43.687831][ T56] IPVS: starting estimator thread 0... [ 43.688513][ T5966] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:21 [ 43.775509][ T5972] IPVS: using max 41 ests per chain, 98400 per kthread [ 43.825734][ T5970] netlink: 'syz.0.8': attribute type 10 has an invalid length. [ 43.826550][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.827965][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.834912][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.834964][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.835351][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.835452][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.836990][ T5970] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 43.986317][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.986736][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.008825][ T5977] process 'syz.1.9' launched './file2' with NULL argv: empty string added [ 44.028872][ T5961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.144825][ T5875] usb 8-1: Unsupported UAC3 BADD profile [ 44.620474][ T5875] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 44.632306][ T5875] usb 8-1: USB disconnect, device number 2 [ 44.645883][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 44.916214][ T42] hid-sensor-hub 0003:1234:5678.0002: hidraw1: USB HID v0.01 Device [syz0] on syz0 [ 44.994698][ T6000] netlink: 'syz.2.14': attribute type 22 has an invalid length. [ 44.994719][ T6000] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 44.994805][ T6000] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14'. [ 45.002586][ T6000] 9pnet_virtio: no channels available for device c::: [ 45.520378][ T66] Bluetooth: hci1: command tx timeout [ 45.520405][ T66] Bluetooth: hci3: command tx timeout [ 45.520419][ T66] Bluetooth: hci0: command tx timeout [ 45.520432][ T66] Bluetooth: hci2: command tx timeout [ 45.844752][ T6004] fido_id[6004]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 46.877193][ T6024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.942381][ T6024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.003072][ T6024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.586305][ T5791] Bluetooth: hci2: command tx timeout [ 47.586330][ T5791] Bluetooth: hci0: command tx timeout [ 47.586342][ T5791] Bluetooth: hci3: command tx timeout [ 47.586355][ T5791] Bluetooth: hci1: command tx timeout [ 47.672040][ T6036] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 47.672361][ T6036] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 47.672725][ T6036] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 47.704867][ T6034] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 47.993116][ T6030] veth1_macvtap: left promiscuous mode [ 47.993145][ T6030] macsec0: entered promiscuous mode [ 48.020356][ T6030] veth1_macvtap: entered promiscuous mode [ 48.023443][ T6030] macsec0: left promiscuous mode [ 48.143759][ T6034] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 49.215339][ T11] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.297552][ T6053] FAULT_INJECTION: forcing a failure. [ 49.297552][ T6053] name failslab, interval 1, probability 0, space 0, times 1 [ 49.297586][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: syz.3.25 Not tainted syzkaller #0 PREEMPT(full) [ 49.297600][ T6053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.297608][ T6053] Call Trace: [ 49.297612][ T6053] [ 49.297617][ T6053] dump_stack_lvl+0x100/0x190 [ 49.297641][ T6053] should_fail_ex.cold+0x5/0xa [ 49.297679][ T6053] should_failslab+0xc2/0x120 [ 49.297698][ T6053] __kmalloc_cache_noprof+0x91/0x6d0 [ 49.297715][ T6053] ? __pfx___might_resched+0x10/0x10 [ 49.297735][ T6053] ? ceph_key_preparse+0x10d/0x260 [ 49.297752][ T6053] ceph_key_preparse+0x10d/0x260 [ 49.297768][ T6053] ? __pfx_ceph_key_preparse+0x10/0x10 [ 49.297785][ T6053] ? __pfx_ceph_key_preparse+0x10/0x10 [ 49.297805][ T6053] __key_create_or_update+0x3f6/0xe10 [ 49.297829][ T6053] ? __pfx___key_create_or_update+0x10/0x10 [ 49.297849][ T6053] ? lookup_user_key+0x58c/0x14f0 [ 49.297866][ T6053] ? __lock_acquire+0x5c0/0x1f40 [ 49.297884][ T6053] ? __pfx_lookup_user_key+0x10/0x10 [ 49.297912][ T6053] key_create_or_update+0x42/0x60 [ 49.297933][ T6053] __do_sys_add_key+0x2e8/0x460 [ 49.297947][ T6053] ? __pfx___do_sys_add_key+0x10/0x10 [ 49.297966][ T6053] __do_fast_syscall_32+0x14d/0x8e0 [ 49.297986][ T6053] do_fast_syscall_32+0x32/0x70 [ 49.298004][ T6053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 49.298027][ T6053] RIP: 0023:0xf73befbc [ 49.298038][ T6053] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 49.298049][ T6053] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 49.298070][ T6053] RAX: ffffffffffffffda RBX: 0000000080000300 RCX: 0000000000000000 [ 49.298080][ T6053] RDX: 0000000080000380 RSI: 0000000000000001 RDI: 00000000fffffffb [ 49.298089][ T6053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 49.298096][ T6053] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 49.298103][ T6053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.298118][ T6053] [ 49.378872][ T11] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 49.385318][ T11] usb 5-1: Dual-Role OTG device on HNP port [ 49.387415][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.393122][ T11] gspca_main: spca501-2.14.0 probing 0000:0000 [ 49.393871][ T11] gspca_spca501: reg write: error -32 [ 49.393880][ T11] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 49.393915][ T11] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 49.518163][ T11] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.646701][ T6061] team0: Device ipip0 is up. Set it down before adding it as a team port [ 50.017186][ T6074] netlink: 72 bytes leftover after parsing attributes in process `syz.0.27'. [ 50.020402][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 50.020452][ T6083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'. [ 52.651882][ T6107] Bluetooth: MGMT ver 1.23 [ 52.779722][ T6114] trusted_key: encrypted_key: insufficient parameters specified [ 52.781786][ T6114] trusted_key: encrypted_key: insufficient parameters specified [ 52.975416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 53.136499][ T6123] jffs2: notice: (6123) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 53.232408][ T5875] hid-generic 0005:15C2:8000.0003: unknown main item tag 0x4 [ 53.232439][ T5875] hid-generic 0005:15C2:8000.0003: item fetching failed at offset 5/6 [ 53.233074][ T5875] hid-generic 0005:15C2:8000.0003: probe with driver hid-generic failed with error -22 [ 54.274045][ T6129] ceph: No mds server is up or the cluster is laggy [ 54.360920][ T902] libceph: connect (1)[c::]:6789 error -101 [ 54.380646][ T902] libceph: mon0 (1)[c::]:6789 connect error [ 54.692537][ T35] libceph: connect (1)[c::]:6789 error -101 [ 54.694166][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 55.171494][ T6140] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 55.171547][ T6140] CPU: 2 UID: 0 PID: 6140 Comm: syz.1.38 Not tainted syzkaller #0 PREEMPT(full) [ 55.171564][ T6140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.171571][ T6140] Call Trace: [ 55.171576][ T6140] [ 55.171581][ T6140] dump_stack_lvl+0x100/0x190 [ 55.171604][ T6140] sysfs_warn_dup.cold+0x1c/0x28 [ 55.171625][ T6140] sysfs_create_dir_ns+0x24b/0x2b0 [ 55.171643][ T6140] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 55.171660][ T6140] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 55.171678][ T6140] ? do_raw_spin_unlock+0x53/0x1e0 [ 55.171692][ T6140] ? class_dir_child_ns_type+0xd/0x60 [ 55.171708][ T6140] kobject_add_internal+0x2c8/0x930 [ 55.171726][ T6140] kobject_add+0x16a/0x1e0 [ 55.171740][ T6140] ? __pfx_kobject_add+0x10/0x10 [ 55.171756][ T6140] ? kobject_put+0xb9/0x640 [ 55.171772][ T6140] device_add+0x294/0x1970 [ 55.171787][ T6140] ? lockdep_init_map_type+0x5c/0x250 [ 55.171801][ T6140] ? __pfx_device_add+0x10/0x10 [ 55.171813][ T6140] ? lockdep_init_map_type+0x5c/0x250 [ 55.171827][ T6140] ? __init_waitqueue_head+0xca/0x150 [ 55.171845][ T6140] tty_register_device_attr+0x388/0x810 [ 55.171863][ T6140] ? lockdep_init_map_type+0x5c/0x250 [ 55.171877][ T6140] ? __pfx_tty_register_device_attr+0x10/0x10 [ 55.171897][ T6140] ? tty_port_init+0x156/0x1c0 [ 55.171929][ T6140] gsm_activate_mux+0x155/0x2a0 [ 55.171948][ T6140] gsmld_ioctl+0xbbc/0x15c0 [ 55.171963][ T6140] ? __pfx_gsmld_ioctl+0x10/0x10 [ 55.171985][ T6140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.172004][ T6140] ? __pfx_gsmld_ioctl+0x10/0x10 [ 55.172015][ T6140] tty_compat_ioctl+0x396/0x420 [ 55.172033][ T6140] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 55.172051][ T6140] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 55.172066][ T6140] __do_fast_syscall_32+0x14d/0x8e0 [ 55.172087][ T6140] do_fast_syscall_32+0x32/0x70 [ 55.172105][ T6140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.172121][ T6140] RIP: 0023:0xf7f75fbc [ 55.172131][ T6140] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 55.172142][ T6140] RSP: 002b:00000000f4fc150c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 55.172154][ T6140] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 55.172162][ T6140] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.172174][ T6140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.172181][ T6140] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.172188][ T6140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.172204][ T6140] [ 55.172526][ T6140] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 55.228109][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 56.521180][ T6147] syzkaller1: entered promiscuous mode [ 56.521468][ T6147] syzkaller1: entered allmulticast mode [ 58.338181][ T43] audit: type=1326 audit(1794186712.047:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 58.340700][ T43] audit: type=1326 audit(1794186712.057:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 58.347196][ T43] audit: type=1326 audit(1794186712.067:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 58.347315][ T43] audit: type=1326 audit(1794186712.067:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 58.347408][ T43] audit: type=1326 audit(1794186712.067:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 58.347529][ T43] audit: type=1326 audit(1794186712.067:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 58.347652][ T43] audit: type=1326 audit(1794186712.067:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 58.348006][ T43] audit: type=1326 audit(1794186712.067:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 58.348137][ T43] audit: type=1326 audit(1794186712.067:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 58.348266][ T43] audit: type=1326 audit(1794186712.067:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 58.923269][ T6161] fuse: Bad value for 'fd' [ 59.020961][ T35] usb 5-1: USB disconnect, device number 2 [ 59.308894][ T6158] Console: switching to colour dummy device 80x25 [ 59.584485][ T6170] pim6reg: entered allmulticast mode [ 59.674098][ T6157] ima: policy update completed [ 59.720219][ T6173] pim6reg: left allmulticast mode [ 59.787866][ T6171] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 59.822730][ T6171] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 59.823177][ T6171] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff] [ 59.823831][ T6171] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 59.826745][ T6171] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 59.859621][ T6171] pci 0000:00:01.0: Adding to iommu group 1 [ 59.875204][ T6171] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 59.875221][ T6171] pci 0000:00:01.0: vgaarb: bridge control possible [ 59.875237][ T6171] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 59.900293][ T6171] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 59.915899][ T6171] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 59.933325][ T6171] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 59.959422][ T6171] [drm] Found bochs VGA, ID 0xb0c5. [ 59.959470][ T6171] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 60.086628][ T6171] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 60.271948][ T6177] tipc: Started in network mode [ 60.271966][ T6177] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 60.272727][ T6177] tipc: Enabled bearer , priority 0 [ 60.288592][ T6178] warning: `syz.0.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.540791][ T6171] Console: switching to colour frame buffer device 160x50 [ 60.583121][ T6171] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 61.389884][ T5875] tipc: Node number set to 43690 [ 62.429263][ T6187] device-mapper: table: 248:0: striped: Target length not divisible by chunk size (-EINVAL) [ 62.429390][ T6187] device-mapper: ioctl: error adding target to table [ 64.177609][ T6219] Invalid ELF header magic: != ELF [ 65.155272][ T6211] xt_connbytes: Forcing CT accounting to be enabled [ 65.155648][ T6211] xt_SECMARK: invalid mode: 0 [ 67.781755][ T43] kauditd_printk_skb: 294 callbacks suppressed [ 67.781768][ T43] audit: type=1800 audit(1794186722.495:306): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.64" name="new_device" dev="sysfs" ino=45500 res=0 errno=-13 [ 67.782817][ T6256] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 67.932327][ T43] audit: type=1800 audit(1794186723.644:307): pid=6264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.66" name="events_dfl_poll_msecs" dev="sysfs" ino=60009 res=0 errno=-22 [ 68.284094][ T6271] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 68.294972][ T6271] vimc link validate: Sensor B:src:640x480 (0x33424752, 0, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 68.424273][ T43] audit: type=1800 audit(1794186724.134:308): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.68" name="rcu_stall_count" dev="sysfs" ino=67642 res=0 errno=-22 [ 68.682934][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 68.682995][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 68.683010][ T6261] netlink: 1 bytes leftover after parsing attributes in process `syz.0.65'. [ 68.813045][ T30] hid-sensor-hub 0003:1234:5678.0004: hidraw1: USB HID v0.01 Device [syz0] on syz0 [ 68.815174][ T43] audit: type=1800 audit(1794186724.524:309): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130855 res=0 errno=-22 [ 68.901390][ T43] audit: type=1800 audit(1794186724.614:310): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130877 res=0 errno=-22 [ 68.926269][ T43] audit: type=1800 audit(1794186724.644:311): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130891 res=0 errno=-22 [ 68.937175][ T43] audit: type=1800 audit(1794186724.654:312): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130921 res=0 errno=-22 [ 69.030060][ T6301] Invalid ELF header magic: != ELF [ 69.095252][ T6301] overlay: Unknown parameter '/' [ 69.762283][ T6306] usb 1-1: USB disconnect, device number 2 [ 69.913555][ T43] audit: type=1800 audit(1794186725.624:313): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=27431 res=0 errno=-22 [ 69.921963][ T6299] fido_id[6299]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.979860][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 69.983379][ T43] audit: type=1800 audit(1794186725.694:314): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.73" name="control" dev="sysfs" ino=5022 res=0 errno=-22 [ 69.986169][ T6306] netlink: 380 bytes leftover after parsing attributes in process `syz.1.73'. [ 69.993201][ T43] audit: type=1800 audit(1794186725.704:315): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16144 res=0 errno=-22 [ 70.096551][ T6312] Console: switching to colour dummy device 80x25 [ 70.205522][ T6317] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 70.467499][ T5791] Bluetooth: hci0: command 0x0c3a tx timeout [ 70.467593][ T66] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 70.524891][ T6315] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 70.594562][ T6315] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 70.594667][ T6315] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 70.595045][ T6315] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 70.595792][ T6315] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 70.606218][ T6315] pci 0000:00:01.0: Adding to iommu group 1 [ 70.611347][ T6315] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 70.611366][ T6315] pci 0000:00:01.0: vgaarb: bridge control possible [ 70.611375][ T6315] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 70.616915][ T6315] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 70.617205][ T6315] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 70.618912][ T6315] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 70.628461][ T6315] [drm] Found bochs VGA, ID 0xb0c5. [ 70.628470][ T6315] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 70.714384][ T6327] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 70.779627][ T6315] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 70.893556][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 70.897281][ T6329] Invalid ELF header magic: != ELF [ 70.959641][ T1448] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.959773][ T1448] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.015579][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.062909][ T6315] Console: switching to colour frame buffer device 160x50 [ 71.102478][ T6315] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 71.166221][ T25] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 71.167333][ T25] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.167355][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.167370][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.167447][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.168857][ T25] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.168870][ T25] usb 8-1: Product: syz [ 71.168877][ T25] usb 8-1: Manufacturer: syz [ 71.198856][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 71.198869][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 71.204439][ T25] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 71.204452][ T25] cdc_wdm 8-1:1.0: Unknown control protocol [ 71.249894][ T1031] cfg80211: failed to load regulatory.db [ 71.409440][ T5890] usb 8-1: USB disconnect, device number 3 [ 72.185609][ T5890] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.269908][ T6344] input: syz0 as /devices/virtual/input/input8 [ 72.335720][ T6344] netlink: 'syz.0.82': attribute type 3 has an invalid length. [ 72.556495][ T5890] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 72.557403][ T5890] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.557418][ T5890] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.557431][ T5890] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.557451][ T5890] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.559787][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.559806][ T5890] usb 8-1: Product: syz [ 72.559818][ T5890] usb 8-1: Manufacturer: syz [ 72.563154][ T5890] cdc_wdm 8-1:1.0: skipping garbage [ 72.563163][ T5890] cdc_wdm 8-1:1.0: skipping garbage [ 72.564056][ T5890] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 72.564066][ T5890] cdc_wdm 8-1:1.0: Unknown control protocol [ 72.949660][ T5890] usb 8-1: USB disconnect, device number 4 [ 72.971066][ T43] kauditd_printk_skb: 45 callbacks suppressed [ 72.971080][ T43] audit: type=1800 audit(1794186728.684:361): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131806 res=0 errno=-22 [ 72.974128][ T43] audit: type=1800 audit(1794186728.684:362): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=131821 res=0 errno=-22 [ 72.974236][ T6357] input: syz0 as /devices/virtual/input/input9 [ 72.974597][ T43] audit: type=1800 audit(1794186728.684:363): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=131824 res=0 errno=-22 [ 72.975716][ T43] audit: type=1800 audit(1794186728.694:364): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=131823 res=0 errno=-22 [ 72.976141][ T43] audit: type=1800 audit(1794186728.694:365): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=131822 res=0 errno=-22 [ 72.976565][ T43] audit: type=1800 audit(1794186728.694:366): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=131813 res=0 errno=-22 [ 72.977501][ T43] audit: type=1800 audit(1794186728.694:367): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=131816 res=0 errno=-22 [ 72.978388][ T43] audit: type=1800 audit(1794186728.694:368): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=131809 res=0 errno=-22 [ 72.980941][ T43] audit: type=1800 audit(1794186728.694:369): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.85" name="new_device" dev="sysfs" ino=45500 res=0 errno=-13 [ 72.985058][ T6356] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 73.056757][ T43] audit: type=1800 audit(1794186728.774:370): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131837 res=0 errno=-22 [ 73.899332][ T6363] syzkaller1: entered promiscuous mode [ 73.899520][ T6363] syzkaller1: entered allmulticast mode [ 74.400621][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 74.570898][ T6373] team0: Device ipip0 is up. Set it down before adding it as a team port [ 75.899102][ T6385] input: syz0 as /devices/virtual/input/input10 [ 75.929329][ T6385] netlink: 'syz.1.94': attribute type 3 has an invalid length. [ 76.295696][ T35] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.314663][ T6379] jffs2: notice: (6379) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 76.445476][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 76.448583][ T35] usb 5-1: unable to get BOS descriptor or descriptor too short [ 76.448610][ T35] usb 5-1: New USB device found: idVendor=0b05, idProduct=1739, bcdDevice=0.40 [ 76.449480][ T35] usb 5-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 76.449515][ T35] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.453473][ T35] usb 5-1: language id specifier not provided by device, defaulting to English [ 76.455133][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.455148][ T35] usb 5-1: Product: syz [ 76.455155][ T35] usb 5-1: SerialNumber: syz [ 76.805419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 77.125586][ T5890] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 77.379300][ T5890] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 77.491135][ T35] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 77.574499][ T35] usb 5-1: USB disconnect, device number 3 [ 77.578317][ T5890] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.578351][ T5890] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.578361][ T5890] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.578395][ T5890] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.590210][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.590224][ T5890] usb 8-1: Product: syz [ 77.590232][ T5890] usb 8-1: Manufacturer: syz [ 77.622719][ T6286] udevd[6286]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.955553][ T5937] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 78.103641][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 78.103653][ T43] audit: type=1800 audit(1794186734.813:398): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=132471 res=0 errno=-22 [ 78.104445][ T5890] cdc_wdm 8-1:1.0: skipping garbage [ 78.104460][ T5890] cdc_wdm 8-1:1.0: skipping garbage [ 78.107205][ T5937] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.107649][ T43] audit: type=1800 audit(1794186734.823:399): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=132510 res=0 errno=-22 [ 78.109230][ T5937] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.109243][ T5937] usb 6-1: config 0 has no interface number 0 [ 78.109261][ T5937] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 78.109275][ T5937] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 78.109294][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.109775][ T5890] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 78.109792][ T5890] cdc_wdm 8-1:1.0: Unknown control protocol [ 78.111573][ T43] audit: type=1800 audit(1794186734.823:400): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=132478 res=0 errno=-22 [ 78.115476][ T43] audit: type=1800 audit(1794186734.823:401): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=132479 res=0 errno=-22 [ 78.116887][ T5937] usb 6-1: config 0 descriptor?? [ 78.117286][ T43] audit: type=1800 audit(1794186734.833:402): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=132508 res=0 errno=-22 [ 78.118611][ T43] audit: type=1800 audit(1794186734.833:403): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=132560 res=0 errno=-22 [ 78.119148][ T6403] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.124197][ T43] audit: type=1800 audit(1794186734.833:404): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=132509 res=0 errno=-22 [ 78.124223][ T43] audit: type=1800 audit(1794186734.833:405): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=132589 res=0 errno=-22 [ 78.124243][ T43] audit: type=1800 audit(1794186734.833:406): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=132567 res=0 errno=-22 [ 78.124262][ T43] audit: type=1800 audit(1794186734.833:407): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=132480 res=0 errno=-22 [ 78.137302][ T5937] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 78.308027][ T5890] usb 8-1: USB disconnect, device number 5 [ 78.745816][ T5890] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 78.896958][ T5890] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 78.897929][ T5890] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.897949][ T5890] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.897964][ T5890] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.897995][ T5890] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.899376][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 78.899394][ T5890] usb 8-1: Product: syz [ 78.899406][ T5890] usb 8-1: Manufacturer: syz [ 78.909011][ T5890] cdc_wdm 8-1:1.0: skipping garbage [ 78.909025][ T5890] cdc_wdm 8-1:1.0: skipping garbage [ 78.911377][ T5890] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 78.911388][ T5890] cdc_wdm 8-1:1.0: Unknown control protocol [ 79.329967][ T6418] Invalid ELF header magic: != ELF [ 79.905693][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 79.905752][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 79.905997][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 79.906008][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 79.906246][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 79.906255][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 79.906456][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 79.906465][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 79.907205][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 79.907217][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 79.907541][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 79.907552][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 79.907733][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 79.907742][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 79.907945][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 79.907954][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 79.908581][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 79.908592][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 79.908900][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 79.908910][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 79.911490][ T902] usb 8-1: USB disconnect, device number 6 [ 79.911601][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 80.003497][ T6421] team0: Device ipip0 is up. Set it down before adding it as a team port [ 80.378699][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 80.609774][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 80.673951][ T6431] input: syz0 as /devices/virtual/input/input11 [ 80.689537][ T6431] netlink: 'syz.2.106': attribute type 3 has an invalid length. [ 80.706917][ T5890] usb 6-1: USB disconnect, device number 2 [ 81.276974][ T5890] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 81.325672][ T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.435568][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 81.453725][ T5890] usb 6-1: unable to get BOS descriptor or descriptor too short [ 81.454278][ T5890] usb 6-1: New USB device found: idVendor=0b05, idProduct=1739, bcdDevice=0.40 [ 81.459863][ T5890] usb 6-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 81.466893][ T5890] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.483393][ T5890] usb 6-1: language id specifier not provided by device, defaulting to English [ 81.490674][ T42] usb 5-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 81.490710][ T42] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 81.491764][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.491807][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.491830][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.492821][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.492860][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.492884][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.493760][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.493795][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.493816][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.494708][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.494730][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.494743][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.496352][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.496952][ T5890] usb 6-1: Product: syz [ 81.497326][ T5890] usb 6-1: SerialNumber: syz [ 81.502938][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.502988][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.503009][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.557911][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.557946][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.557964][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.572077][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.572104][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.572117][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.586702][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.586729][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.586743][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.602694][ T42] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 81.602708][ T42] usb 5-1: Product: syz [ 81.602716][ T42] usb 5-1: Manufacturer: syz [ 81.602723][ T42] usb 5-1: SerialNumber: syz [ 81.613002][ T42] usb 5-1: config 0 descriptor?? [ 81.614946][ C3] ================================================================== [ 81.614958][ C3] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 81.615041][ C3] Read of size 1 at addr ffff88806172c4e8 by task kworker/3:1/42 [ 81.615050][ C3] [ 81.615067][ C3] CPU: 3 UID: 0 PID: 42 Comm: kworker/3:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.615083][ C3] Tainted: [L]=SOFTLOCKUP [ 81.615087][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.615094][ C3] Workqueue: usb_hub_wq hub_event [ 81.615106][ C3] Call Trace: [ 81.615110][ C3] [ 81.615116][ C3] dump_stack_lvl+0x100/0x190 [ 81.615142][ C3] print_report+0x13d/0x4b0 [ 81.615166][ C3] ? __virt_addr_valid+0x239/0x430 [ 81.615186][ C3] ? find_endpoint+0x2a3/0x2c0 [ 81.615197][ C3] kasan_report+0xdf/0x1c0 [ 81.615232][ C3] ? find_endpoint+0x2a3/0x2c0 [ 81.615244][ C3] find_endpoint+0x2a3/0x2c0 [ 81.615257][ C3] dummy_timer+0x506/0x3840 [ 81.615271][ C3] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 81.615285][ C3] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 81.615300][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 81.615335][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 81.615350][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 81.615374][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 81.615390][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 81.615403][ C3] ? mark_held_locks+0x40/0x70 [ 81.615415][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 81.615429][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 81.615442][ C3] __hrtimer_run_queues+0x448/0x9a0 [ 81.615461][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 81.615478][ C3] handle_softirqs+0x216/0xa20 [ 81.615489][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 81.615499][ C3] ? _raw_spin_unlock+0x28/0x50 [ 81.615512][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 81.615524][ C3] __irq_exit_rcu+0x178/0x220 [ 81.615533][ C3] irq_exit_rcu+0x9/0x30 [ 81.615543][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 81.615558][ C3] [ 81.615562][ C3] [ 81.615566][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.615578][ C3] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 81.615594][ C3] Code: ff ff ff ff 65 0f c1 15 f1 67 cd 09 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 8c 58 03 00 e9 87 58 03 00 31 c0 [ 81.615605][ C3] RSP: 0018:ffffc90000656838 EFLAGS: 00000282 [ 81.615622][ C3] RAX: 0000000000000000 RBX: ffffffff8ffeada0 RCX: 0000000000000001 [ 81.615630][ C3] RDX: 0000000000000046 RSI: ffffffff8e5ff9b7 RDI: ffffffff8c836280 [ 81.615637][ C3] RBP: ffff88801ef08000 R08: 0000000000000000 R09: 0000000000000000 [ 81.615643][ C3] R10: ffff88801eacf1af R11: 0000000000000001 R12: 00000000ffffffff [ 81.615650][ C3] R13: 0000000000000246 R14: ffff88801ef08cc8 R15: 0000000000000007 [ 81.615662][ C3] __might_resched+0x298/0x330 [ 81.615679][ C3] ? __pfx___might_resched+0x10/0x10 [ 81.615696][ C3] ? up_write+0x2dc/0x5b0 [ 81.615709][ C3] down_write+0x6a/0x1f0 [ 81.615725][ C3] ? __pfx_down_write+0x10/0x10 [ 81.615742][ C3] kernfs_add_one+0x4cb/0xb40 [ 81.615755][ C3] kernfs_create_dir_ns+0x155/0x2b0 [ 81.615767][ C3] sysfs_create_dir_ns+0x13a/0x2b0 [ 81.615782][ C3] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 81.615797][ C3] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 81.615811][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 81.615824][ C3] ? class_dir_child_ns_type+0xd/0x60 [ 81.615837][ C3] kobject_add_internal+0x2c8/0x930 [ 81.615851][ C3] kobject_add+0x16a/0x1e0 [ 81.615863][ C3] ? __pfx_kobject_add+0x10/0x10 [ 81.615876][ C3] ? kobject_put+0xb9/0x640 [ 81.615888][ C3] device_add+0x294/0x1970 [ 81.615900][ C3] ? __pfx_device_add+0x10/0x10 [ 81.615912][ C3] ? kfree_const+0x5a/0x70 [ 81.615924][ C3] ? kfree+0x1e5/0x6d0 [ 81.615940][ C3] device_create_groups_vargs+0x1f8/0x270 [ 81.615957][ C3] device_create+0xed/0x130 [ 81.615969][ C3] ? __pfx_device_create+0x10/0x10 [ 81.615981][ C3] ? down_write+0x141/0x1f0 [ 81.615997][ C3] ? __pfx_down_write+0x10/0x10 [ 81.616015][ C3] usb_register_dev+0x2f0/0x570 [ 81.616028][ C3] ? __pfx_usb_register_dev+0x10/0x10 [ 81.616043][ C3] yurex_probe+0xb03/0xfb0 [ 81.616055][ C3] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 81.616067][ C3] ? __pfx_yurex_probe+0x10/0x10 [ 81.616081][ C3] ? mark_held_locks+0x40/0x70 [ 81.616098][ C3] ? __pfx_autoremove_wake_function+0x10/0x10 [ 81.616124][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 81.616146][ C3] ? __pm_runtime_set_status+0x13c/0x970 [ 81.616168][ C3] usb_probe_interface+0x386/0x980 [ 81.616188][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 81.616200][ C3] ? kernfs_put+0x3f/0x60 [ 81.616217][ C3] ? sysfs_create_link+0x68/0xc0 [ 81.616232][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 81.616244][ C3] really_probe+0x241/0xa60 [ 81.616261][ C3] __driver_probe_device+0x210/0x460 [ 81.616277][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 81.616292][ C3] driver_probe_device+0x4a/0x140 [ 81.616302][ C3] __device_attach_driver+0x1df/0x320 [ 81.616313][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 81.616323][ C3] bus_for_each_drv+0x159/0x1e0 [ 81.616336][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 81.616350][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.616365][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 81.616379][ C3] __device_attach+0x1e4/0x4c0 [ 81.616389][ C3] ? __pfx___device_attach+0x10/0x10 [ 81.616399][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 81.616412][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 81.616426][ C3] device_initial_probe+0xaf/0xf0 [ 81.616437][ C3] __bus_probe_device+0x60/0x160 [ 81.616451][ C3] device_add+0x121d/0x1970 [ 81.616463][ C3] ? __pfx_device_add+0x10/0x10 [ 81.616474][ C3] ? mark_held_locks+0x40/0x70 [ 81.616484][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 81.616499][ C3] usb_set_configuration+0xd97/0x1dc0 [ 81.616520][ C3] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 81.616534][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 81.616549][ C3] usb_probe_device+0xef/0x400 [ 81.616559][ C3] ? __pfx_usb_probe_device+0x10/0x10 [ 81.616570][ C3] really_probe+0x241/0xa60 [ 81.616586][ C3] __driver_probe_device+0x210/0x460 [ 81.616602][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 81.616617][ C3] driver_probe_device+0x4a/0x140 [ 81.616627][ C3] __device_attach_driver+0x1df/0x320 [ 81.616637][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 81.616647][ C3] bus_for_each_drv+0x159/0x1e0 [ 81.616661][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 81.616675][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.616689][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 81.616703][ C3] __device_attach+0x1e4/0x4c0 [ 81.616713][ C3] ? __pfx___device_attach+0x10/0x10 [ 81.616723][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 81.616736][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 81.616750][ C3] device_initial_probe+0xaf/0xf0 [ 81.616761][ C3] __bus_probe_device+0x60/0x160 [ 81.616775][ C3] device_add+0x121d/0x1970 [ 81.616786][ C3] ? __pfx_device_add+0x10/0x10 [ 81.616797][ C3] ? add_device_randomness+0xc9/0x110 [ 81.616810][ C3] usb_new_device.part.0+0xcc2/0x1686 [ 81.616831][ C3] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 81.616843][ C3] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 81.616853][ C3] ? mark_held_locks+0x40/0x70 [ 81.616865][ C3] hub_event.cold+0x1e3/0xe90 [ 81.616880][ C3] ? __pfx_hub_event+0x10/0x10 [ 81.616889][ C3] ? up_write+0x80/0x5b0 [ 81.616902][ C3] ? lock_acquire+0x1d1/0x380 [ 81.616912][ C3] ? process_one_work+0xa2c/0x1b10 [ 81.616929][ C3] ? process_one_work+0x906/0x1b10 [ 81.616944][ C3] ? process_one_work+0x906/0x1b10 [ 81.616963][ C3] process_one_work+0xac7/0x1b10 [ 81.616980][ C3] ? __pfx_process_one_work+0x10/0x10 [ 81.616996][ C3] ? lock_acquire+0x1d1/0x380 [ 81.617008][ C3] ? __pfx_hub_event+0x10/0x10 [ 81.617018][ C3] worker_thread+0x5ef/0xe50 [ 81.617035][ C3] ? kthread+0x13a/0x450 [ 81.617049][ C3] ? __pfx_worker_thread+0x10/0x10 [ 81.617064][ C3] kthread+0x373/0x450 [ 81.617077][ C3] ? __pfx_kthread+0x10/0x10 [ 81.617091][ C3] ret_from_fork+0x730/0xd60 [ 81.617111][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 81.617123][ C3] ? __switch_to+0x800/0x10e0 [ 81.617145][ C3] ? __pfx_kthread+0x10/0x10 [ 81.617159][ C3] ret_from_fork_asm+0x1a/0x30 [ 81.617174][ C3] [ 81.617178][ C3] [ 81.617181][ C3] Allocated by task 6286: [ 81.617187][ C3] kasan_save_stack+0x30/0x50 [ 81.617198][ C3] kasan_save_track+0x14/0x30 [ 81.617208][ C3] __kasan_kmalloc+0xaa/0xb0 [ 81.617218][ C3] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 81.617232][ C3] kernfs_fop_open+0x347/0x10f0 [ 81.617242][ C3] do_dentry_open+0x674/0x1470 [ 81.617253][ C3] vfs_open_consume+0xcc/0x460 [ 81.617267][ C3] path_openat+0x1547/0x23f0 [ 81.617278][ C3] do_file_open+0x20e/0x430 [ 81.617290][ C3] do_sys_openat2+0x163/0x1d0 [ 81.617303][ C3] __x64_sys_openat+0x12d/0x210 [ 81.617317][ C3] do_syscall_64+0x123/0x780 [ 81.617331][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.617341][ C3] [ 81.617343][ C3] Freed by task 6286: [ 81.617347][ C3] kasan_save_stack+0x30/0x50 [ 81.617357][ C3] kasan_save_track+0x14/0x30 [ 81.617367][ C3] kasan_save_free_info+0x3b/0x70 [ 81.617381][ C3] __kasan_slab_free+0x5f/0x80 [ 81.617392][ C3] kfree+0x22b/0x6d0 [ 81.617405][ C3] kernfs_fop_release+0x12c/0x1f0 [ 81.617415][ C3] __fput+0x3fb/0xb50 [ 81.617427][ C3] fput_close_sync+0x118/0x250 [ 81.617440][ C3] filp_close_sync+0x75/0xa0 [ 81.617454][ C3] __x64_sys_close+0x81/0x110 [ 81.617472][ C3] do_syscall_64+0x123/0x780 [ 81.617493][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.617508][ C3] [ 81.617512][ C3] The buggy address belongs to the object at ffff88806172c400 [ 81.617512][ C3] which belongs to the cache kmalloc-512 of size 512 [ 81.617525][ C3] The buggy address is located 232 bytes inside of [ 81.617525][ C3] freed 512-byte region [ffff88806172c400, ffff88806172c600) [ 81.617541][ C3] [ 81.617545][ C3] The buggy address belongs to the physical page: [ 81.617552][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806172c800 pfn:0x6172c [ 81.617569][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 81.617578][ C3] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 81.617589][ C3] page_type: f5(slab) [ 81.617598][ C3] raw: 04fff00000000240 ffff88801d442c80 ffffea000132e410 ffffea0001854010 [ 81.617607][ C3] raw: ffff88806172c800 0000000000100001 00000000f5000000 0000000000000000 [ 81.617616][ C3] head: 04fff00000000240 ffff88801d442c80 ffffea000132e410 ffffea0001854010 [ 81.617625][ C3] head: ffff88806172c800 0000000000100001 00000000f5000000 0000000000000000 [ 81.617634][ C3] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 81.617643][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 81.617649][ C3] page dumped because: kasan: bad access detected [ 81.617654][ C3] page_owner tracks the page as allocated [ 81.617657][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6040, tgid 6039 (syz.0.22), ts 48588103377 [ 81.617675][ C3] post_alloc_hook+0xfd/0x120 [ 81.617689][ C3] get_page_from_freelist+0x112f/0x3640 [ 81.617704][ C3] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 81.617720][ C3] new_slab+0xb1/0x6d0 [ 81.617733][ C3] refill_objects+0xe3/0x410 [ 81.617748][ C3] __pcs_replace_empty_main+0x35e/0x650 [ 81.617762][ C3] __kmalloc_cache_noprof+0x4ef/0x6d0 [ 81.617776][ C3] snd_mixer_oss_build_test+0x7a/0x380 [ 81.617789][ C3] snd_mixer_oss_build_test_all+0x1ac/0x6e0 [ 81.617801][ C3] snd_mixer_oss_build_input+0x139/0xd50 [ 81.617814][ C3] snd_mixer_oss_notify_handler+0x4e5/0xa10 [ 81.617828][ C3] snd_card_register+0x2bd/0x780 [ 81.617843][ C3] f_midi2_bind+0x1198/0x2770 [ 81.617859][ C3] usb_add_function+0x219/0x890 [ 81.617870][ C3] configfs_composite_bind+0xd83/0x1960 [ 81.617880][ C3] gadget_bind_driver+0x28c/0xbf0 [ 81.617894][ C3] page last free pid 5797 tgid 5797 ts 39999033766 stack trace: [ 81.617901][ C3] __free_frozen_pages+0x7b4/0x1110 [ 81.617914][ C3] qlist_free_all+0x47/0xf0 [ 81.617923][ C3] kasan_quarantine_reduce+0x1a0/0x1f0 [ 81.617934][ C3] __kasan_slab_alloc+0x69/0x90 [ 81.617945][ C3] __kmalloc_cache_noprof+0x278/0x6d0 [ 81.617963][ C3] ipv6_add_addr+0x531/0x20e0 [ 81.617975][ C3] addrconf_add_linklocal+0x2ae/0x510 [ 81.617987][ C3] addrconf_addr_gen+0x338/0x3b0 [ 81.617999][ C3] addrconf_init_auto_addrs+0x1cb/0x780 [ 81.618012][ C3] addrconf_notify+0x10af/0x1ba0 [ 81.618026][ C3] notifier_call_chain+0x99/0x3f0 [ 81.618039][ C3] call_netdevice_notifiers_info+0xbe/0x110 [ 81.618052][ C3] __dev_notify_flags+0x22c/0x4b0 [ 81.618067][ C3] rtnl_configure_link+0x21b/0x4c0 [ 81.618076][ C3] rtnl_newlink+0x16d1/0x2620 [ 81.618087][ C3] rtnetlink_rcv_msg+0x95e/0xe90 [ 81.618097][ C3] [ 81.618100][ C3] Memory state around the buggy address: [ 81.618105][ C3] ffff88806172c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.618112][ C3] ffff88806172c400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.618119][ C3] >ffff88806172c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.618124][ C3] ^ [ 81.618130][ C3] ffff88806172c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.618137][ C3] ffff88806172c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.618143][ C3] ================================================================== [ 81.618149][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.107824][ C3] CPU: 3 UID: 0 PID: 42 Comm: kworker/3:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.111128][ C3] Tainted: [L]=SOFTLOCKUP [ 82.112480][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.115648][ C3] Workqueue: usb_hub_wq hub_event [ 82.117224][ C3] Call Trace: [ 82.118276][ C3] [ 82.119199][ C3] dump_stack_lvl+0x100/0x190 [ 82.120676][ C3] vpanic+0x2dc/0x6f8 [ 82.121944][ C3] panic+0xd1/0xe0 [ 82.123132][ C3] ? __pfx_panic+0x10/0x10 [ 82.124503][ C3] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 82.126419][ C3] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 82.128721][ C3] check_panic_on_warn.cold+0x19/0x34 [ 82.130394][ C3] end_report.part.0+0x3a/0x90 [ 82.131898][ C3] kasan_report.cold+0xe/0x18 [ 82.133370][ C3] ? find_endpoint+0x2a3/0x2c0 [ 82.134885][ C3] find_endpoint+0x2a3/0x2c0 [ 82.136334][ C3] dummy_timer+0x506/0x3840 [ 82.137758][ C3] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 82.139636][ C3] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 82.141958][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.143793][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 82.145566][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 82.147437][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 82.148988][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 82.150528][ C3] ? mark_held_locks+0x40/0x70 [ 82.152032][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.153861][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 82.155430][ C3] __hrtimer_run_queues+0x448/0x9a0 [ 82.157055][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 82.158658][ C3] handle_softirqs+0x216/0xa20 [ 82.160149][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 82.161794][ C3] ? _raw_spin_unlock+0x28/0x50 [ 82.163348][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 82.165103][ C3] __irq_exit_rcu+0x178/0x220 [ 82.166618][ C3] irq_exit_rcu+0x9/0x30 [ 82.168302][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 82.170462][ C3] [ 82.171602][ C3] [ 82.172766][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 82.175158][ C3] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 82.177355][ C3] Code: ff ff ff ff 65 0f c1 15 f1 67 cd 09 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 8c 58 03 00 e9 87 58 03 00 31 c0 [ 82.184889][ C3] RSP: 0018:ffffc90000656838 EFLAGS: 00000282 [ 82.187312][ C3] RAX: 0000000000000000 RBX: ffffffff8ffeada0 RCX: 0000000000000001 [ 82.190432][ C3] RDX: 0000000000000046 RSI: ffffffff8e5ff9b7 RDI: ffffffff8c836280 [ 82.193561][ C3] RBP: ffff88801ef08000 R08: 0000000000000000 R09: 0000000000000000 [ 82.196693][ C3] R10: ffff88801eacf1af R11: 0000000000000001 R12: 00000000ffffffff [ 82.199814][ C3] R13: 0000000000000246 R14: ffff88801ef08cc8 R15: 0000000000000007 [ 82.202947][ C3] __might_resched+0x298/0x330 [ 82.204842][ C3] ? __pfx___might_resched+0x10/0x10 [ 82.206928][ C3] ? up_write+0x2dc/0x5b0 [ 82.208634][ C3] down_write+0x6a/0x1f0 [ 82.210323][ C3] ? __pfx_down_write+0x10/0x10 [ 82.212234][ C3] kernfs_add_one+0x4cb/0xb40 [ 82.214086][ C3] kernfs_create_dir_ns+0x155/0x2b0 [ 82.216189][ C3] sysfs_create_dir_ns+0x13a/0x2b0 [ 82.218223][ C3] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 82.220436][ C3] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 82.223390][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 82.225418][ C3] ? class_dir_child_ns_type+0xd/0x60 [ 82.227538][ C3] kobject_add_internal+0x2c8/0x930 [ 82.229580][ C3] kobject_add+0x16a/0x1e0 [ 82.231370][ C3] ? __pfx_kobject_add+0x10/0x10 [ 82.233332][ C3] ? kobject_put+0xb9/0x640 [ 82.235186][ C3] device_add+0x294/0x1970 [ 82.236962][ C3] ? __pfx_device_add+0x10/0x10 [ 82.238919][ C3] ? kfree_const+0x5a/0x70 [ 82.240689][ C3] ? kfree+0x1e5/0x6d0 [ 82.242353][ C3] device_create_groups_vargs+0x1f8/0x270 [ 82.244596][ C3] device_create+0xed/0x130 [ 82.246419][ C3] ? __pfx_device_create+0x10/0x10 [ 82.248437][ C3] ? down_write+0x141/0x1f0 [ 82.250237][ C3] ? __pfx_down_write+0x10/0x10 [ 82.252207][ C3] usb_register_dev+0x2f0/0x570 [ 82.254153][ C3] ? __pfx_usb_register_dev+0x10/0x10 [ 82.256300][ C3] yurex_probe+0xb03/0xfb0 [ 82.258073][ C3] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 82.260446][ C3] ? __pfx_yurex_probe+0x10/0x10 [ 82.262410][ C3] ? mark_held_locks+0x40/0x70 [ 82.264328][ C3] ? __pfx_autoremove_wake_function+0x10/0x10 [ 82.266735][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.269036][ C3] ? __pm_runtime_set_status+0x13c/0x970 [ 82.271261][ C3] usb_probe_interface+0x386/0x980 [ 82.273270][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 82.275502][ C3] ? kernfs_put+0x3f/0x60 [ 82.277239][ C3] ? sysfs_create_link+0x68/0xc0 [ 82.279214][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 82.281437][ C3] really_probe+0x241/0xa60 [ 82.283259][ C3] __driver_probe_device+0x210/0x460 [ 82.285363][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.287665][ C3] driver_probe_device+0x4a/0x140 [ 82.289590][ C3] __device_attach_driver+0x1df/0x320 [ 82.291642][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 82.293853][ C3] bus_for_each_drv+0x159/0x1e0 [ 82.295812][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.297911][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 82.299968][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.302324][ C3] __device_attach+0x1e4/0x4c0 [ 82.304061][ C3] ? __pfx___device_attach+0x10/0x10 [ 82.306048][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 82.307956][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 82.309890][ C3] device_initial_probe+0xaf/0xf0 [ 82.311646][ C3] __bus_probe_device+0x60/0x160 [ 82.313273][ C3] device_add+0x121d/0x1970 [ 82.314899][ C3] ? __pfx_device_add+0x10/0x10 [ 82.316714][ C3] ? mark_held_locks+0x40/0x70 [ 82.318568][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.321038][ C3] usb_set_configuration+0xd97/0x1dc0 [ 82.323330][ C3] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 82.325929][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 82.328229][ C3] usb_probe_device+0xef/0x400 [ 82.330264][ C3] ? __pfx_usb_probe_device+0x10/0x10 [ 82.332548][ C3] really_probe+0x241/0xa60 [ 82.334510][ C3] __driver_probe_device+0x210/0x460 [ 82.336363][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.338196][ C3] driver_probe_device+0x4a/0x140 [ 82.339932][ C3] __device_attach_driver+0x1df/0x320 [ 82.341609][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 82.343700][ C3] bus_for_each_drv+0x159/0x1e0 [ 82.345290][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.346990][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 82.348622][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.350728][ C3] __device_attach+0x1e4/0x4c0 [ 82.352307][ C3] ? __pfx___device_attach+0x10/0x10 [ 82.354008][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 82.355699][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 82.357320][ C3] device_initial_probe+0xaf/0xf0 [ 82.358900][ C3] __bus_probe_device+0x60/0x160 [ 82.360708][ C3] device_add+0x121d/0x1970 [ 82.362187][ C3] ? __pfx_device_add+0x10/0x10 [ 82.363753][ C3] ? add_device_randomness+0xc9/0x110 [ 82.365450][ C3] usb_new_device.part.0+0xcc2/0x1686 [ 82.367143][ C3] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 82.369006][ C3] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 82.370868][ C3] ? mark_held_locks+0x40/0x70 [ 82.372398][ C3] hub_event.cold+0x1e3/0xe90 [ 82.373876][ C3] ? __pfx_hub_event+0x10/0x10 [ 82.375402][ C3] ? up_write+0x80/0x5b0 [ 82.376733][ C3] ? lock_acquire+0x1d1/0x380 [ 82.378205][ C3] ? process_one_work+0xa2c/0x1b10 [ 82.379913][ C3] ? process_one_work+0x906/0x1b10 [ 82.381598][ C3] ? process_one_work+0x906/0x1b10 [ 82.383369][ C3] process_one_work+0xac7/0x1b10 [ 82.385129][ C3] ? __pfx_process_one_work+0x10/0x10 [ 82.386892][ C3] ? lock_acquire+0x1d1/0x380 [ 82.388561][ C3] ? __pfx_hub_event+0x10/0x10 [ 82.390400][ C3] worker_thread+0x5ef/0xe50 [ 82.391963][ C3] ? kthread+0x13a/0x450 [ 82.393300][ C3] ? __pfx_worker_thread+0x10/0x10 [ 82.394931][ C3] kthread+0x373/0x450 [ 82.396216][ C3] ? __pfx_kthread+0x10/0x10 [ 82.397665][ C3] ret_from_fork+0x730/0xd60 [ 82.399141][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 82.400768][ C3] ? __switch_to+0x800/0x10e0 [ 82.402260][ C3] ? __pfx_kthread+0x10/0x10 [ 82.403711][ C3] ret_from_fork_asm+0x1a/0x30 [ 82.405216][ C3] [ 82.406811][ C3] Kernel Offset: disabled [ 82.408170][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:12:15 Registers: info registers vcpu 0 CPU#0 RAX=00000002000008fd RBX=ffff88801d4f3384 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90004c077d0 R8 =0000000000000000 R9 =fffffbfff24d5deb R10=ffffffff926aef5f R11=0000000000000000 R12=0000000000000004 R13=1ffff92000980efd R14=0000000000000001 R15=ffffc90004c07808 RIP=ffffffff81b99b3a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095279000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=0000000069a8b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000081803000 Opmask01=000000000000003f Opmask02=000000003fe7ffbf Opmask03=0000000008000004 Opmask04=00000000fffffffb Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dff616db00 000055dff616db00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dff6026a30 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dff6026a30 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8998df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8998d52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dff39ed919 ffffff0000312e74 65676461672d7761 723d524556495244 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dfce9ed919 c2c2c200000c1349 585a595c5a104a5c 4f00524556495244 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0048544150564544 0000000000000021 0030656369766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303030302d696370 2f687461702d7962 2f7475706e692f76 65642f206573756f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d2d746e6576652d 312d372e64313a30 303a303030302d34 353738325f74656c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6261545f4253555f 554d45515f554d45 512d6273752f6469 2d79622f7475706e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88802842b000 RCX=0000000000000000 RDX=1ffff9200067df87 RSI=ffffffff89b3658c RDI=ffff8880298c4558 RBP=ffff8880298c4540 RSP=ffffc900033efad8 R8 =0000000000000000 R9 =0000000000000000 R10=ffff888025ef24df R11=0000000000000000 R12=ffff88802842b0e8 R13=ffffc900033efc38 R14=ffff888025ef2380 R15=0000000000000000 RIP=ffffffff89b365cb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f89993b5880 ffffffff 00c00000 GS =0000 ffff888095379000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f71e95d0 CR3=000000004fc64000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000082000020 Opmask04=00000000fffffffb Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dff60ae4d0 000055dff3a0c040 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dff60ae4d0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dff601dc90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dff601dd50 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8998df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8998d52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 737365636f727020 756c6c2520716573 006e6f6974697472 6170006b636f6c62 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d352f35627375 2f302e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dff606bb18 000055dff606bb18 0000000000000051 000000000000302e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 2e73656c75722f76 0000003165730000 307761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 46422c45422c4442 2c43422c42422c41 422c39422c38422c 37422c44412c4341 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c36412c35412c34 412c33412c46392c 45392c44392c4339 2c42392c46382c45 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382c43382c30382c 46372c45372c4437 2c43372c42372c41 372c39372c37372c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000c9f93 RBX=ffff88801e32a580 RCX=ffffffff8bed6375 RDX=0000000000000001 RSI=ffffffff8e626a08 RDI=ffffffff8c836280 RBP=ffffed1003c654b0 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed1005606825 R10=ffff88802b03412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bed480f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095479000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e4e0155660 CR3=000000005d9ff000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85c19ed0 RDI=ffffffff9cf42560 RBP=ffffffff9cf42520 RSP=ffffc900005f83b0 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=6b726f776b203a43 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff39e8501 R15=dffffc0000000000 RIP=ffffffff85c19ef7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095579000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e4efd39168 CR3=00000000615fb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000