last executing test programs: 15m15.2952649s ago: executing program 0 (id=1076): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000180)=0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 15m15.046635874s ago: executing program 0 (id=1078): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r1, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xda4, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0) r5 = syz_io_uring_complete(r2, r3) io_uring_enter(r1, 0x20, 0x20, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) write$UHID_INPUT2(r5, &(0x7f00000015c0)={0xc, {0x9d, "611abf9e35d509b5d34b5f13c4f6775c3e7ce30ba3c50e779067fd1d62e835b0fb6b65f9cac777302cbdee7ad9e9c19caea0ec020ecf09a952625c5cf7210b942d2b846326cd193cc5599fcc0609e823b9544c7f81a963609df213d89433eb80e3ef568a57684a7da690f2b777950f6e8e11d4ed878de308bdecf699eca1c30bd872175f9713f6e4762d815b7002c7108cd405cf86adc616b327e9b480"}}, 0xa3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000580)=""/4096, 0x1000, 0x10000, &(0x7f0000001580)={0xa, 0x0, 0x0, @remote}, 0x20) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r6, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 15m12.709664868s ago: executing program 0 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4800400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0xa4, 0x3, 0xa, 0x2895d8059d982b7d, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3beb1e56}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x22b501a6}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0x3e, 0x7, 0x1, 0x0, "820891d27a6170f92cee5a18626e17a6f40417f8b71037165810634ed4bc7c381b194f6fd870b97f5b68eeb8ecfebdc706870bdc10e77ad3e0f7"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x15c}, 0x1, 0x0, 0x0, 0x80000}, 0x4) r1 = getpid() syz_pidfd_open(r1, 0x0) ioprio_get$pid(0x1, r1) symlink(&(0x7f0000000040)='mtd0\x00', &(0x7f0000000080)='mtd0\x00') 15m12.466317704s ago: executing program 0 (id=1091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f47a3b6e947d8444000000806b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_open_dev$evdev(0x0, 0x4, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2014050, 0x0) r3 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0xb, 0x2031200, 0x8, 0x1, 0x200, 0x4, 0x0, 0x0, 0x10, 0x44}}, 0x50) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r9, &(0x7f0000000180)='.\x00', 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x20000, {r9}}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020076657468315f6d6163767461e31bd8fa0c0003800400050004000100"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000040) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r1, 0xc) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 15m11.658089875s ago: executing program 0 (id=1096): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x24, &(0x7f0000000000)="909313d542a13c3da503ec35aa08ac867f73126b0b586b09c0f7cf861ad21326ffaf26df325df10030127c7dd6004a31a15d107be800a8704d5537d248f031c8599761ceff2f20a464e190cb16a043f145ca6104bfc8201446e7ba018058cd91b0e1e03405a5fa749744a43aff9c111f0597109be7afc75b8c4c3fa669d764af0fb1a94b8b", 0x85) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000021918f16541af69200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000020a01030000e6ff00100000020000000900010073797a30"], 0x7c}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0x9362, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="17d0677e001400008ea117ba23263eaf0420284b3a38f90b106d000000d1a4ff16cfc28123601e35c08438af7ed1b227c1fc0fc56b281089537e4b50c5292770a220c72e4858650fde2083b7b101b8d9cb8c50075f713e91948d69157806ac13875d729fd86c3069829e87c5eb573c1db061005c94402baca3d84cf01ae56fc0e0f2ac1cf3bbe611e60b85678faa20f21c6d2fc730240a9122d3d10a1e78f4748e116f40add0b0c0e5c1c467f4eeab6bf7faabb1341b31a3fbe7e10caaf869", @ANYRES32, @ANYBLOB="8700000000000008040000200000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001400010023bd7000ffdbdf250a1700ff", @ANYRES32=r9, @ANYBLOB="14000100000000000004000000000000000f0000000000000000000c8200001a2d000005000000"], 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r8, 0x40109441, &(0x7f0000000000)={0x7, 0x3, 0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xd, 0x8}, {0xe, 0x6}, {0xa, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20004051) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 15m10.239267446s ago: executing program 0 (id=1099): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x15, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x5, [0x0, 0x0, 0xd1, 0x8b, 0xc]}}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x40440d1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x1f, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x10, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000040)={0xf000, 0x1000, 0x8}) set_mempolicy(0x2, &(0x7f0000000080)=0x3576, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x48033, 0xffffffffffffffff, 0x40000000) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000200)=0x60, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m9.876776243s ago: executing program 32 (id=1099): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x15, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x5, [0x0, 0x0, 0xd1, 0x8b, 0xc]}}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x40440d1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x1f, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x10, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000040)={0xf000, 0x1000, 0x8}) set_mempolicy(0x2, &(0x7f0000000080)=0x3576, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x48033, 0xffffffffffffffff, 0x40000000) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000200)=0x60, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m5.897608026s ago: executing program 1 (id=1325): socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) socket(0xa, 0x3, 0x3a) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101000, 0x120) socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0xd30, &(0x7f0000000100)={0x0, 0x11aa, 0x400, 0x2, 0x313}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000003c0)={&(0x7f0000002000)={[{&(0x7f0000000340)="f2816b4da9bc64351dbd293ca3bbe9804a894729259fd6f6c97458f103cd9dd1f6123032a690d2add5e3bdb51c34e67d2da6bf30ea63865a034014dfc25b7f80d950e1d8617e8ae15e3e03094b91462997dfc6bd530d94871bcaef40691565e3bdadeab43575208bbeac1a69771233", 0x6f}]}, 0x1}, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000000fe800000000700000000000000000000fe8000000000000000000000000000aa000000000000000000"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c010000160001000000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa4e240000000000000000a0003b00", @ANYRESOCT, @ANYRESHEX, @ANYRES16], 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket(0x28, 0x3, 0x6) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe48, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x4}, 0xfffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8820}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat(r0, &(0x7f0000000300)='./file1\x00', 0x149942, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) ftruncate(r4, 0x101fff) copy_file_range(r4, 0x0, r3, 0x0, 0xe003e45c, 0x700000000000000) 13m59.777408572s ago: executing program 1 (id=1348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010067bd7000fedbdfa51900000008000300", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 13m59.451512168s ago: executing program 1 (id=1349): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200403afffe8000000000000000000000000000bbff0200000000000000000000fb00000103019078000000006900000080000000000000000000000000fc020000000000000000000000000000890000000000000098efd03a7e60b623"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="000100fefffbfffeffffff017c000600800a00000c00028008001780040065800000000000000000000000d6ae75b4b7ed136da402751f0292af0c9e15ef"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaab888aaaa88a8250081000800000c01006c72379b00"/38], 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',grou', @ANYRESDEC=0x0]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000280)={0x9}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 13m56.877966159s ago: executing program 1 (id=1360): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x164, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x583}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xf}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 13m56.526805074s ago: executing program 1 (id=1363): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0xffffffff, &(0x7f0000000300)=0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r4, &(0x7f0000000120)='0-CONFIG=disabled\n', 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x2002c80, 0x0) setns(r3, 0x24020000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) wait4(r5, 0x0, 0x80000000, 0x0) 13m55.676812337s ago: executing program 1 (id=1371): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) (fail_nth: 10) 13m40.411031504s ago: executing program 33 (id=1371): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) (fail_nth: 10) 10m46.018628663s ago: executing program 2 (id=2395): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000005fc0)={@private0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x4, 0x8000, 0x3d, 0x0, 0x8, 0x21}) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x20000000) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000c9d5bc86edbddca1002a1cf5ff47c74eea0a7be6d66f2bdc73d1ffaab371b6e7e7b914fd345e06d365112938377abc75f3ffc2925d04120c35798d475d20bfc4f4fc1317e01adb1289e7d7281b2692ddf8ee0ba6076fe5e0220c026b522593fdc796c155e38292faccde83f18df79f0bc1c6b2f5a595922cce0724684f92a3d26354", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/28], 0x50) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 10m44.081858783s ago: executing program 2 (id=2399): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) close(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) r1 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000010300)={r5, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f00000103c0)=0x84) accept4$inet(r4, &(0x7f0000000180)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') sendmsg$nl_route_sched(r7, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=@deltaction={0x138, 0x31, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe19}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xde}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb88}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x185}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8bdc6132b197f0b6}, 0x40040) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x600, 0x0, 0x56, 0x6, 0x0, 0x3b4, 0x126, 0x7, 0x6, 0x8, 0x0, 0x9, 0x4, 0x8, 0x1, 0x7, 0xf0a, 0xfd, 0x6, 0xffff, 0xd, 0x5, 0x2, 0x1000, 0x9, 0x5, 0x3c3, 0x80, 0x9, 0xd, 0x40, 0x3]}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0xfffffffe, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40f, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) 10m41.542043104s ago: executing program 2 (id=2416): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$DVB_DVR_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000040)={0xf0d, 0x7fff, 0x9, 0xb, 0x8, 0x3}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xfff7, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x2, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x76e}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="3c04000000000000c2020000000204010400010005020000071000000000027f09000000000001000000050200070000"], 0x30) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x60) lseek(r6, 0x7f, 0x4) socket(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x9, r1, 'id1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0xffffffffa08e2400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) sched_setattr(0x0, 0x0, 0x0) 10m40.6269917s ago: executing program 2 (id=2426): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x3, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r1, 0x540b, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x200, 0x0) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x6) bind(0xffffffffffffffff, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x1500, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000010003704000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000900000000000000004214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) ioctl$CDROMSEEK(r11, 0x5316, &(0x7f0000000080)={0x0, 0x10, 0x9, 0x5, 0x74, 0xa8}) 10m40.547257375s ago: executing program 2 (id=2428): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x200048c0}, 0x20008000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x40000000000000d, 0x0, &(0x7f0000000080)) write$UHID_INPUT(r0, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) r3 = syz_open_dev$video4linux(&(0x7f0000000400), 0xd, 0x28580) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc040564a, &(0x7f0000000000)={0x0, 0x7fff, 0x100f, 0xffffffffffffffff, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) r5 = socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x10000) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) 10m40.005920616s ago: executing program 2 (id=2431): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000380)=@userptr={0x180, 0x3, 0x4, 0x704805b77874914c, 0xb1, {}, {0x5, 0xc, 0x1, 0x39, 0xd7, 0x1, "81608aa9"}, 0x7774, 0x2, {0x0}, 0x38d2}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1a4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/device_path\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='./fi', 0x4) readlink(&(0x7f0000000040)='./config\x00', &(0x7f0000000340)=""/184, 0xb8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/enable\x00', 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r2, &(0x7f0000000200)='0', 0x1) 10m39.792701031s ago: executing program 34 (id=2431): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000380)=@userptr={0x180, 0x3, 0x4, 0x704805b77874914c, 0xb1, {}, {0x5, 0xc, 0x1, 0x39, 0xd7, 0x1, "81608aa9"}, 0x7774, 0x2, {0x0}, 0x38d2}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1a4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/device_path\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='./fi', 0x4) readlink(&(0x7f0000000040)='./config\x00', &(0x7f0000000340)=""/184, 0xb8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/enable\x00', 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r2, &(0x7f0000000200)='0', 0x1) 9m56.463202711s ago: executing program 6 (id=2807): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_getscheduler(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x34}}, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0xffffffffffffff7e) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @remote, 0x63}, 0x1c) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="080001000300"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) writev(r7, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9m55.537689885s ago: executing program 6 (id=2812): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x0, 0x100, 0x1000000003, 0xa1d, 0x2000000007, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xa}, {0x2, 0x1, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x3, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0xc2, 0x6, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xed, 0x5}, {0xeeee8000, 0xfec00000, 0xa, 0x1, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffe}, 0xddf8ffdb, 0x0, 0xeeee0000, 0x120, 0x8, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x1d, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000237428000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) pwrite64(r3, &(0x7f00000003c0)="5aa1389090bbd3b19ae1d0092b242bab5c32509b5454355c9db2e956cc30a42f4a36d63e3d29ce229aa1690b48f77bd45708c62a37bec10c6328fa26c9e6b5eb25add67863c079918e9b18cc5babd188af36dcd1ebac2892f34279d0e100c1b540a43dbf69e39ed6c817a5722149f6a8cfc15e477291b545b667fa415a04ebef8303f0ea152fe0f177b9e96370f136e10a749170721c9b7c2a8547b34f07c848f9790ca7d41dadc5a12821b9f9b58e70a167876a4cd3c2450c6abe4ad3f872bddce8167e5c97f5167c3eb84eb2c6d2adc082d47d702838ec07345682b1d522030eddf6", 0xe3, 0x45) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x20000000) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000000040000900000082b0cfc4330000000000007400a391793ba70d0000000000fd0e01000000baffda6e00"/61], 0x3d) 9m55.215682465s ago: executing program 6 (id=2815): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000001000)='nfsd.fh/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000001100)="6c6f63616c686f7374203120010000002032303030303030303030202f746d700a", 0x21) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@hyper, 0x7}, @any, 0x1, 0x0, 0x7, 0x8, 0x8, 0x3, 0xffff58bd}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) mremap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x8a000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc25c4111, &(0x7f0000000340)={0x8000, [[0x0, 0x3, 0x0, 0x10f, 0x437, 0x300, 0xd, 0xfffff276], [0x2, 0x0, 0xa4, 0x5, 0x532, 0x6, 0xfffffffb, 0xd], [0x97f6, 0x9, 0x9, 0x3, 0x101, 0x8, 0x4, 0x10]], '\x00', [{0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7ff, 0x1c, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x5, 0x0, 0x1}, {0x5, 0x81, 0x1, 0x1, 0x0, 0x1}, {0x7ff, 0x40, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x400, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x401, 0x3, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5, 0xfd89, 0x0, 0x1, 0x1}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x7ff, 0xfffffff0, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x2}) write(r2, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000200)=[0x7fff, 0xffff, 0x8]) 9m55.174649754s ago: executing program 6 (id=2816): r0 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) readahead(r0, 0xfffff002, 0x36) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) 9m55.094775199s ago: executing program 6 (id=2818): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x48) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = geteuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) read$eventfd(r1, &(0x7f0000000280), 0x8) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000080)=@s={0x5, @SEQ_MIDIPUTC=0xff}) setresuid(0x0, r5, r5) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000840)={0xb0, 0xffffffda, 0x3, [{{0x4, 0x0, 0x8000000000000000, 0x4, 0x0, 0xff, {0x1, 0x6, 0x5, 0x9c, 0x81, 0x7e, 0x0, 0x7, 0x46e, 0x8000, 0x8c50, r8, r9, 0x4, 0x81}}, {0x0, 0x2, 0x1, 0x7, '\x00'}}]}, 0xb0) r10 = getegid() r11 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010006000000000002000600", @ANYRES32=r3, @ANYBLOB="0200f12c1e62566c99d182df0858d491e7", @ANYRES32=r5, @ANYBLOB="040006000000000008000400", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x3) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r12, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) openat$uinput(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000000)='active', 0x6) 9m54.843310345s ago: executing program 6 (id=2821): capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_INPUT(r0, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) syz_open_dev$video4linux(&(0x7f0000000400), 0xd, 0x28580) listen(0xffffffffffffffff, 0x10000) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) 9m39.512441873s ago: executing program 35 (id=2821): capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_INPUT(r0, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) syz_open_dev$video4linux(&(0x7f0000000400), 0xd, 0x28580) listen(0xffffffffffffffff, 0x10000) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) 10.897909977s ago: executing program 7 (id=6469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) 8.731074373s ago: executing program 7 (id=6484): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) 6.894769636s ago: executing program 7 (id=6493): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r3, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) 6.305637978s ago: executing program 3 (id=6495): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fff7ffc}, {0x1000, 0xe, 0xda, 0xfffffc8f}, {0x7, 0x15, 0xf, 0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000003c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_tracefs\x00', 0x1ff) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x2, 0x8]}, 0x8) 5.881219162s ago: executing program 3 (id=6498): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28) recvfrom(r1, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x4) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x1, 0xc0c0) 5.782170105s ago: executing program 7 (id=6499): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28) recvfrom(r1, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x4) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="c5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) 4.620631172s ago: executing program 3 (id=6501): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r3, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) 4.615694101s ago: executing program 7 (id=6503): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) 4.606736653s ago: executing program 4 (id=6510): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r3, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) 3.230588007s ago: executing program 5 (id=6506): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fff7ffc}, {0x1000, 0xe, 0xda, 0xfffffc8f}, {0x7, 0x15, 0xf, 0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000003c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_tracefs\x00', 0x1ff) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x2, 0x8]}, 0x8) 3.184722272s ago: executing program 5 (id=6507): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) close(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) r1 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000010300)={r5, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f00000103c0)=0x84) accept4$inet(r4, &(0x7f0000000180)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') sendmsg$nl_route_sched(r7, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=@deltaction={0xf8, 0x31, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe19}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xde}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb88}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x185}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8bdc6132b197f0b6}, 0x40040) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x600, 0x0, 0x56, 0x6, 0x0, 0x3b4, 0x126, 0x7, 0x6, 0x8, 0x0, 0x9, 0x4, 0x8, 0x1, 0x7, 0xf0a, 0xfd, 0x6, 0xffff, 0xd, 0x5, 0x2, 0x1000, 0x9, 0x5, 0x3c3, 0x80, 0x9, 0xd, 0x40, 0x3]}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0xfffffffe, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40f, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) 2.526998746s ago: executing program 3 (id=6509): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r3, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) 2.52666732s ago: executing program 4 (id=6511): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) 2.524790079s ago: executing program 7 (id=6512): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x6, 0x2, 0x0, 0x6, 0x808, 0x4003}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="0500f9ff0001000071112400000000008510000002000000850000000e0000009500000000005bf68cf5dcc135b7000001efe75bf1939893cbde4149da0f35397d17cd60812bf8234e8d2dc01e03b53e9de5630c53d910fc385fdce1b7c2d1e3929985395ec9ce5140696e8214f82bb1ee4f8933a08375483282e8cef22f7d05dc4684c92296a3b55d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r4) openat$fb0(0xffffff9c, &(0x7f0000000100), 0x400, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)={0x1c, r5, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 1.244706472s ago: executing program 5 (id=6513): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28) recvfrom(r1, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x4) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x12c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) 1.196621924s ago: executing program 4 (id=6514): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) unshare(0x22020600) syz_ublk_setup_queues(r1, r6, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x69, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r1}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) (fail_nth: 2) 1.053064042s ago: executing program 4 (id=6515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b8605ddc9460b0310f168ac93b87358e0a87d61f3423e3a5967243c55cf5b85c19801d45ff94e4bf659e7ae8b0e99168e4c8a588cf68f3eb74a2e77ac08804992e0a1ec94ce68b8a4e4c615607bc2b30c367cddb8c3b3f231369cd0c7bafb7a1d81b2bd7a1196d60112f0330cc15c2d9bbbec664bed0d148b4d1cc63bb194cb435fce8a3462e0eb24977bab80ffca4373a8522b468549590fdd89cf"], &(0x7f0000000800)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40)=[{{&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000680)="adfccb018997c9e8852f9120d7a92807677931d3a96d42d45c6740da9613dc8a56829b885d4134eb7ed383629b637cf3710303f16acb15782fb8e16432f21dac9e64c38e8edd13acbfd8cba019a7ea0d2bb4f626fc356e9a37c19f699782fab09a76ec6568dd87d8174e5c90df89e552ca7a54081d6d8b3318e31d6039c96dedf5a46329732e96063467", 0x8a}, {&(0x7f0000000740)="7d5b02628e93c5c7d3362e27496e3a1c7b8e1c815b896f6ba7051fccd54f4b646f6b4725a2b0f780b76edcf7a9b260f05377cc48dc73502646a4d8d360e72324899ab3632f9a063819aa55c94cb4f42f5340dc62704a02de709808713efaa6e54cf92d7503e2462e1b697011bd0f1a255d146fb25167732c59300182a158f72fb95fa5b948cf59eff9712dacddc6945819c8ad77c5f95dee5d45f755b8e240782db56444c1fd23589b365d3893447df8b64ea7520bf8dbcdaaae61af5d", 0xbd}, {&(0x7f0000000840)="2c2303fb92e1d91494bbdcf3cadbdb6a81535aa5d87d6b9931f35602a99132220adbdb5818d7e0a8a617e03f3b8ab15f3b0fa7ebcb4eb3016cb9818cff91a86fd2dffb397ffdef1f036d4e5063df4add3ec7eee3047a2894308cda12ed5eceb5df2e9b52fd3841331e99375568a6160560ea88c8d8602b08178e70efe719be214c8112873542bf3e345a2f26f02623d4b954de1332b9cf681905cfed45f734f3f997b385b49b918828c9a7e6fb0d8a0df93b709dad532aa0724ad2e7f1ca2fd3251d62c2d575b0043fb702bd291cd38fd605f4fcb55be71c479d", 0xda}, {&(0x7f0000000a00)="c5c06a11d0346a5a36c0ddc5ae96e55b59ca239c83ff40355759d5d1fc343c1667499027db55a951ee4f40c6816ab3ab6650e1e0b7d0ffc7936b70de7d400c84ebb3859288bad3d7ac26d8db054fbd43842846fe95315ef4a03421dc9296b4c39e2615db2e80aaeebdb97e17e4e93a6e63c49a8d7e7d5ffc0e8ccd33af2c261c03f8f1c74bf2a2da2b775d02cbc39cb257f651af8fc9113f63a01ebaf6b186b2f886a0ea", 0xa4}, {&(0x7f0000000ac0)="1ce07d", 0x3}], 0x5, 0x0, 0x0, 0x800}}], 0x1, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r5 = gettid() capget(&(0x7f00000001c0)={0x19980330, r5}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f00000005c0)=[{&(0x7f0000000040)="00213ae50deba8cd1caf190e1ae69f52cf98f3a1309b", 0x16}], 0x1, 0x807, 0x0) r7 = dup3(r4, r3, 0x0) recvmmsg(r7, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r7, 0x0, 0x0) unshare(0x62040200) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) 416.756979ms ago: executing program 3 (id=6516): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) wait4(0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ptrace$getregset(0x4205, 0x0, 0x202, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x80, 0xc01}, 0x5, 0x7fffffff, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xee00}) r1 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x1, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 353.05571ms ago: executing program 5 (id=6517): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fff7ffc}, {0x1000, 0xe, 0xda, 0xfffffc8f}, {0x7, 0x15, 0xf, 0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000003c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_tracefs\x00', 0x1ff) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x2, 0x8]}, 0x8) 233.799341ms ago: executing program 5 (id=6518): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) 151.754369ms ago: executing program 5 (id=6519): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r3, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) 146.867819ms ago: executing program 4 (id=6520): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r6, &(0x7f00000002c0)=""/75, 0x4b, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0xca, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000100)={0x1, 0x4, 0xffffff7e}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) 60.40307ms ago: executing program 3 (id=6521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0xfff5) 0s ago: executing program 4 (id=6522): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) kernel console output (not intermixed with test programs): .468320][T26658] ? down_read+0x13b/0x4c0 [ 1022.468344][T26658] do_madvise+0x238/0x290 [ 1022.468362][T26658] ? __pfx_do_madvise+0x10/0x10 [ 1022.468389][T26658] ? fput+0x79/0x100 [ 1022.468404][T26658] ? ksys_write+0x1ac/0x250 [ 1022.468416][T26658] __ia32_sys_madvise+0xa7/0x110 [ 1022.468434][T26658] ? lockdep_hardirqs_on+0x78/0x100 [ 1022.468449][T26658] __do_fast_syscall_32+0xe7/0x970 [ 1022.468466][T26658] ? lockdep_hardirqs_on+0x78/0x100 [ 1022.468482][T26658] do_fast_syscall_32+0x32/0x70 [ 1022.468499][T26658] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1022.468515][T26658] RIP: 0023:0xf7fb2fec [ 1022.468529][T26658] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 1022.468535][T26658] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 1022.468547][T26658] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 000000000060005f [ 1022.468554][T26658] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1022.468561][T26658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1022.468567][T26658] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1022.468574][T26658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1022.468588][T26658] [ 1022.569290][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804f613400: abort rx timeout. Force session deactivation [ 1022.761885][T26672] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1022.919861][T26687] bond2: Removing last arp target with arp_interval on [ 1023.525547][T26709] FAULT_INJECTION: forcing a failure. [ 1023.525547][T26709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.545818][T26710] jffs2: notice: (26710) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1023.556161][T26709] CPU: 0 UID: 0 PID: 26709 Comm: syz.4.5864 Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.556183][T26709] Tainted: [L]=SOFTLOCKUP [ 1023.556188][T26709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1023.556195][T26709] Call Trace: [ 1023.556201][T26709] [ 1023.556206][T26709] dump_stack_lvl+0x100/0x190 [ 1023.556226][T26709] should_fail_ex.cold+0x5/0xa [ 1023.556240][T26709] save_fsave_header+0x14c/0x2f0 [ 1023.556254][T26709] ? __pfx_save_fsave_header+0x10/0x10 [ 1023.556270][T26709] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 1023.556284][T26709] ? __local_bh_enable_ip+0x9e/0x120 [ 1023.556301][T26709] copy_fpstate_to_sigframe+0x755/0xae0 [ 1023.556316][T26709] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1023.556330][T26709] ? posixtimer_deliver_signal+0x19d/0x6e0 [ 1023.556346][T26709] ? x86_task_fpu+0x5f/0x90 [ 1023.556366][T26709] get_sigframe+0x3fb/0x940 [ 1023.556389][T26709] ? __pfx_get_sigframe+0x10/0x10 [ 1023.556406][T26709] ? rcu_is_watching+0x12/0xc0 [ 1023.556421][T26709] ? siginfo_layout+0x156/0x290 [ 1023.556436][T26709] ia32_setup_rt_frame+0xe7/0xaf0 [ 1023.556455][T26709] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1023.556473][T26709] arch_do_signal_or_restart+0x459/0x7a0 [ 1023.556486][T26709] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1023.556512][T26709] exit_to_user_mode_loop+0x139/0x6f0 [ 1023.556525][T26709] ? rcu_is_watching+0x12/0xc0 [ 1023.556540][T26709] __do_fast_syscall_32+0x701/0x970 [ 1023.556559][T26709] ? lockdep_hardirqs_on+0x78/0x100 [ 1023.556576][T26709] do_fast_syscall_32+0x32/0x70 [ 1023.556593][T26709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1023.556609][T26709] RIP: 0023:0xf7fb2fea [ 1023.556620][T26709] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1023.556631][T26709] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000174 [ 1023.556643][T26709] RAX: 0000000000000174 RBX: 0000000000000004 RCX: 0000000080000600 [ 1023.556651][T26709] RDX: 0000000040000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1023.556657][T26709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1023.556664][T26709] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1023.556671][T26709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1023.556684][T26709] [ 1024.005952][T26716] netlink: 'syz.5.5866': attribute type 1 has an invalid length. [ 1024.030017][T26716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1024.047482][T26707] comedi comedi3: pcl818: I/O base address or length out of range [ 1024.167773][T26722] FAULT_INJECTION: forcing a failure. [ 1024.167773][T26722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.199820][T26722] CPU: 0 UID: 0 PID: 26722 Comm: syz.5.5867 Tainted: G L syzkaller #0 PREEMPT(full) [ 1024.199842][T26722] Tainted: [L]=SOFTLOCKUP [ 1024.199847][T26722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1024.199853][T26722] Call Trace: [ 1024.199858][T26722] [ 1024.199863][T26722] dump_stack_lvl+0x100/0x190 [ 1024.199884][T26722] should_fail_ex.cold+0x5/0xa [ 1024.199898][T26722] _copy_to_user+0x32/0xd0 [ 1024.199919][T26722] do_fb_ioctl+0x231/0x730 [ 1024.199937][T26722] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1024.199961][T26722] ? tomoyo_init_request_info+0x101/0x370 [ 1024.199980][T26722] ? get_pid_task+0x106/0x250 [ 1024.200003][T26722] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1024.200024][T26722] fb_compat_ioctl+0x4f5/0x680 [ 1024.200039][T26722] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 1024.200054][T26722] ? hook_file_ioctl_common+0x140/0x440 [ 1024.200069][T26722] ? __fget_files+0x215/0x3d0 [ 1024.200083][T26722] ? __fget_files+0x21f/0x3d0 [ 1024.200095][T26722] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 1024.200111][T26722] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1024.200130][T26722] __do_fast_syscall_32+0xe7/0x970 [ 1024.200148][T26722] ? lockdep_hardirqs_on+0x78/0x100 [ 1024.200164][T26722] do_fast_syscall_32+0x32/0x70 [ 1024.200182][T26722] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1024.200197][T26722] RIP: 0023:0xf6fcefec [ 1024.200213][T26722] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 1024.200218][T26722] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1024.200230][T26722] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 1024.200237][T26722] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1024.200244][T26722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1024.200251][T26722] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1024.200257][T26722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1024.200271][T26722] [ 1024.547736][T26735] FAULT_INJECTION: forcing a failure. [ 1024.547736][T26735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.552376][T26735] CPU: 0 UID: 0 PID: 26735 Comm: syz.4.5871 Tainted: G L syzkaller #0 PREEMPT(full) [ 1024.552397][T26735] Tainted: [L]=SOFTLOCKUP [ 1024.552401][T26735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1024.552409][T26735] Call Trace: [ 1024.552414][T26735] [ 1024.552419][T26735] dump_stack_lvl+0x100/0x190 [ 1024.552441][T26735] should_fail_ex.cold+0x5/0xa [ 1024.552456][T26735] _copy_from_iter+0x1f4/0x1690 [ 1024.552471][T26735] ? __pfx__copy_from_iter+0x10/0x10 [ 1024.552482][T26735] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1024.552511][T26735] copy_page_from_iter+0x238/0x300 [ 1024.552523][T26735] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 1024.552545][T26735] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1024.552560][T26735] ? unwind_get_return_address+0x59/0xa0 [ 1024.552578][T26735] ? arch_stack_walk+0xa6/0xf0 [ 1024.552597][T26735] ? __lock_acquire+0x49f/0x1a40 [ 1024.552625][T26735] tun_get_user+0x16d6/0x3c20 [ 1024.552644][T26735] ? __pfx_tun_get_user+0x10/0x10 [ 1024.552659][T26735] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1024.552677][T26735] ? find_held_lock+0x2b/0x80 [ 1024.552691][T26735] ? tun_get+0x191/0x370 [ 1024.552703][T26735] ? tun_get+0x191/0x370 [ 1024.552719][T26735] tun_chr_write_iter+0xdc/0x200 [ 1024.552734][T26735] vfs_write+0x6ac/0x1050 [ 1024.552746][T26735] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1024.552785][T26735] ? __pfx_vfs_write+0x10/0x10 [ 1024.552795][T26735] ? find_held_lock+0x2b/0x80 [ 1024.552818][T26735] ksys_write+0x12a/0x250 [ 1024.552828][T26735] ? __pfx_ksys_write+0x10/0x10 [ 1024.552843][T26735] do_int80_emulation+0x14b/0x720 [ 1024.552863][T26735] asm_int80_emulation+0x1a/0x20 [ 1024.552876][T26735] RIP: 0023:0xf71b74eb [ 1024.552886][T26735] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1024.552898][T26735] RSP: 002b:00000000f547644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1024.552911][T26735] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800001c0 [ 1024.552918][T26735] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 1024.552924][T26735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1024.552931][T26735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.552938][T26735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1024.552951][T26735] [ 1025.121307][T16460] usb 48-1: device descriptor read/8, error -110 [ 1025.218722][T26740] jffs2: notice: (26740) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1025.370243][T26754] FAULT_INJECTION: forcing a failure. [ 1025.370243][T26754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1025.380189][T26754] CPU: 0 UID: 0 PID: 26754 Comm: syz.7.5877 Tainted: G L syzkaller #0 PREEMPT(full) [ 1025.380211][T26754] Tainted: [L]=SOFTLOCKUP [ 1025.380215][T26754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1025.380222][T26754] Call Trace: [ 1025.380227][T26754] [ 1025.380233][T26754] dump_stack_lvl+0x100/0x190 [ 1025.380265][T26754] should_fail_ex.cold+0x5/0xa [ 1025.380280][T26754] _copy_from_iter+0x1f4/0x1690 [ 1025.380295][T26754] ? __pfx__copy_from_iter+0x10/0x10 [ 1025.380306][T26754] ? trace_kmalloc+0xeb/0x110 [ 1025.380322][T26754] ? __kasan_kmalloc+0xaa/0xb0 [ 1025.380338][T26754] ? __kmalloc_noprof+0x343/0x820 [ 1025.380353][T26754] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1025.380370][T26754] kernfs_fop_write_iter+0x186/0x5f0 [ 1025.380385][T26754] vfs_write+0x6ac/0x1050 [ 1025.380398][T26754] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1025.380413][T26754] ? __pfx_vfs_write+0x10/0x10 [ 1025.380422][T26754] ? find_held_lock+0x2b/0x80 [ 1025.380447][T26754] ksys_write+0x12a/0x250 [ 1025.380458][T26754] ? __pfx_ksys_write+0x10/0x10 [ 1025.380467][T26754] ? ksys_write+0x1ac/0x250 [ 1025.380492][T26754] ? __pfx_ksys_write+0x10/0x10 [ 1025.380506][T26754] __do_fast_syscall_32+0xe7/0x970 [ 1025.380524][T26754] ? lockdep_hardirqs_on+0x78/0x100 [ 1025.380540][T26754] do_fast_syscall_32+0x32/0x70 [ 1025.380557][T26754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1025.380572][T26754] RIP: 0023:0xf7f83fec [ 1025.380587][T26754] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 1025.380593][T26754] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1025.380606][T26754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1025.380613][T26754] RDX: 000000000000002f RSI: 0000000000000000 RDI: 0000000000000000 [ 1025.380621][T26754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1025.380628][T26754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.380635][T26754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1025.380649][T26754] [ 1025.469613][T26744] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5873'. [ 1025.511103][T16460] usb usb48-port1: attempt power cycle [ 1025.651484][T26766] comedi comedi3: pcl818: I/O base address or length out of range [ 1025.925306][T26771] jffs2: notice: (26771) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1026.070952][T16460] usb usb48-port1: unable to enumerate USB device [ 1026.308273][T26786] FAULT_INJECTION: forcing a failure. [ 1026.308273][T26786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.315573][T26786] CPU: 2 UID: 0 PID: 26786 Comm: syz.5.5889 Tainted: G L syzkaller #0 PREEMPT(full) [ 1026.315609][T26786] Tainted: [L]=SOFTLOCKUP [ 1026.315616][T26786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1026.315627][T26786] Call Trace: [ 1026.315634][T26786] [ 1026.315642][T26786] dump_stack_lvl+0x100/0x190 [ 1026.315673][T26786] should_fail_ex.cold+0x5/0xa [ 1026.315697][T26786] strncpy_from_user+0x3b/0x2d0 [ 1026.315729][T26786] do_getname+0x78/0x390 [ 1026.315758][T26786] __ia32_sys_rename+0x56/0xb0 [ 1026.315782][T26786] __do_fast_syscall_32+0xe7/0x970 [ 1026.315810][T26786] ? lockdep_hardirqs_on+0x78/0x100 [ 1026.315838][T26786] do_fast_syscall_32+0x32/0x70 [ 1026.315864][T26786] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1026.315887][T26786] RIP: 0023:0xf6fcefec [ 1026.315906][T26786] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 1026.315914][T26786] RSP: 002b:00000000f539c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000026 [ 1026.315935][T26786] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000080000140 [ 1026.315947][T26786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1026.315958][T26786] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1026.315969][T26786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1026.315979][T26786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1026.316001][T26786] [ 1026.452141][T26790] option changes via remount are deprecated (pid=26789 comm=syz.7.5891) [ 1026.987467][T26803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5895'. [ 1027.569323][T26823] FAULT_INJECTION: forcing a failure. [ 1027.569323][T26823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1027.580979][T26823] CPU: 2 UID: 0 PID: 26823 Comm: syz.4.5901 Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.581003][T26823] Tainted: [L]=SOFTLOCKUP [ 1027.581008][T26823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1027.581016][T26823] Call Trace: [ 1027.581020][T26823] [ 1027.581026][T26823] dump_stack_lvl+0x100/0x190 [ 1027.581047][T26823] should_fail_ex.cold+0x5/0xa [ 1027.581062][T26823] _copy_from_iter+0x1f4/0x1690 [ 1027.581078][T26823] ? __pfx__copy_from_iter+0x10/0x10 [ 1027.581091][T26823] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1027.581116][T26823] copy_page_from_iter+0x238/0x300 [ 1027.581130][T26823] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 1027.581152][T26823] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1027.581167][T26823] ? unwind_get_return_address+0x59/0xa0 [ 1027.581188][T26823] ? arch_stack_walk+0xa6/0xf0 [ 1027.581208][T26823] ? __lock_acquire+0x49f/0x1a40 [ 1027.581237][T26823] tun_get_user+0x16d6/0x3c20 [ 1027.581258][T26823] ? __pfx_tun_get_user+0x10/0x10 [ 1027.581274][T26823] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1027.581292][T26823] ? find_held_lock+0x2b/0x80 [ 1027.581307][T26823] ? tun_get+0x191/0x370 [ 1027.581319][T26823] ? tun_get+0x191/0x370 [ 1027.581336][T26823] tun_chr_write_iter+0xdc/0x200 [ 1027.581353][T26823] vfs_write+0x6ac/0x1050 [ 1027.581366][T26823] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1027.581383][T26823] ? __pfx_vfs_write+0x10/0x10 [ 1027.581393][T26823] ? find_held_lock+0x2b/0x80 [ 1027.581417][T26823] ksys_write+0x12a/0x250 [ 1027.581428][T26823] ? __pfx_ksys_write+0x10/0x10 [ 1027.581444][T26823] do_int80_emulation+0x14b/0x720 [ 1027.581465][T26823] asm_int80_emulation+0x1a/0x20 [ 1027.581479][T26823] RIP: 0023:0xf71b74eb [ 1027.581504][T26823] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1027.581518][T26823] RSP: 002b:00000000f547644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1027.581531][T26823] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800001c0 [ 1027.581539][T26823] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 1027.581546][T26823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1027.581553][T26823] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1027.581560][T26823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1027.581576][T26823] [ 1027.738850][T26826] netlink: 'syz.4.5903': attribute type 21 has an invalid length. [ 1028.164115][T26831] netlink: 'syz.4.5904': attribute type 8 has an invalid length. [ 1028.220133][T26831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5904'. [ 1028.226082][T26831] bridge_slave_1: left allmulticast mode [ 1028.232683][T26841] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5905'. [ 1028.236057][T26831] bridge_slave_1: left promiscuous mode [ 1028.239801][T26831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.246138][T26831] bridge_slave_0: left allmulticast mode [ 1028.248031][T26831] bridge_slave_0: left promiscuous mode [ 1028.250082][T26831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.270119][T26841] team0 (unregistering): Port device team_slave_0 removed [ 1028.280063][T26841] team0 (unregistering): Port device team_slave_1 removed [ 1028.287349][T26842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5905'. [ 1028.888833][T26856] comedi comedi3: pcl818: I/O base address or length out of range [ 1029.077575][T26858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5909'. [ 1029.114074][T26858] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1029.116073][T26858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1029.118508][T26858] vhci_hcd vhci_hcd.0: Device attached [ 1029.184797][T26859] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 1029.190423][T18982] vhci_hcd vhci_hcd.4: stop threads [ 1029.192394][T18982] vhci_hcd vhci_hcd.4: release socket [ 1029.194147][T18982] vhci_hcd vhci_hcd.4: disconnect device [ 1030.181208][ T1349] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 1030.332619][ T1349] usb 12-1: Using ep0 maxpacket: 16 [ 1030.340182][ T1349] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.347467][ T1349] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1030.351276][ T1349] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1030.354964][T26886] nvme_tcp: malformed address passed: 127.0.0..:8009 [ 1030.357990][ T1349] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.366130][ T1349] usb 12-1: config 0 descriptor?? [ 1030.449023][T26891] FAULT_INJECTION: forcing a failure. [ 1030.449023][T26891] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.453215][T26891] CPU: 0 UID: 0 PID: 26891 Comm: syz.5.5917 Tainted: G L syzkaller #0 PREEMPT(full) [ 1030.453235][T26891] Tainted: [L]=SOFTLOCKUP [ 1030.453240][T26891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1030.453248][T26891] Call Trace: [ 1030.453252][T26891] [ 1030.453257][T26891] dump_stack_lvl+0x100/0x190 [ 1030.453277][T26891] should_fail_ex.cold+0x5/0xa [ 1030.453292][T26891] should_failslab+0xc2/0x120 [ 1030.453309][T26891] __kmalloc_noprof+0xfc/0x820 [ 1030.453325][T26891] ? comedi_alloc_devpriv+0x22/0x60 [ 1030.453372][T26891] comedi_alloc_devpriv+0x22/0x60 [ 1030.453387][T26891] pcl812_attach+0x52/0x2300 [ 1030.453401][T26891] ? lockdep_init_map_type+0x5c/0x250 [ 1030.453416][T26891] comedi_device_attach+0x40e/0x6b0 [ 1030.453434][T26891] do_devconfig_ioctl+0x1b3/0x6d0 [ 1030.453451][T26891] ? comedi_unlocked_ioctl+0x180/0x3310 [ 1030.453464][T26891] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1030.453488][T26891] ? kernel_text_address+0x8d/0x100 [ 1030.453507][T26891] ? __kernel_text_address+0xd/0x30 [ 1030.453524][T26891] ? unwind_get_return_address+0x59/0xa0 [ 1030.453549][T26891] comedi_unlocked_ioctl+0x860/0x3310 [ 1030.453563][T26891] ? _parse_integer_limit+0x1ac/0x220 [ 1030.453580][T26891] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1030.453592][T26891] ? _kstrtoull+0x13c/0x1f0 [ 1030.453606][T26891] ? __pfx__kstrtoull+0x10/0x10 [ 1030.453624][T26891] ? __lock_acquire+0x49f/0x1a40 [ 1030.453647][T26891] ? tomoyo_domain+0xb2/0x150 [ 1030.453660][T26891] ? tomoyo_profile+0x47/0x60 [ 1030.453672][T26891] ? tomoyo_init_request_info+0x101/0x370 [ 1030.453687][T26891] ? tomoyo_path_number_perm+0x188/0x580 [ 1030.453706][T26891] comedi_compat_ioctl+0x438/0xe20 [ 1030.453718][T26891] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1030.453731][T26891] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1030.453750][T26891] ? do_vfs_ioctl+0x226/0x13e0 [ 1030.453767][T26891] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1030.453788][T26891] ? find_held_lock+0x2b/0x80 [ 1030.453802][T26891] ? __fget_files+0x215/0x3d0 [ 1030.453813][T26891] ? hook_file_ioctl_common+0x140/0x440 [ 1030.453829][T26891] ? __fget_files+0x215/0x3d0 [ 1030.453842][T26891] ? __fget_files+0x21f/0x3d0 [ 1030.453855][T26891] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1030.453866][T26891] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1030.453885][T26891] __do_fast_syscall_32+0xe7/0x970 [ 1030.453904][T26891] ? lockdep_hardirqs_on+0x78/0x100 [ 1030.453921][T26891] do_fast_syscall_32+0x32/0x70 [ 1030.453938][T26891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1030.453953][T26891] RIP: 0023:0xf6fcefec [ 1030.453967][T26891] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1030.453979][T26891] RSP: 002b:00000000f537b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1030.453992][T26891] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 1030.453999][T26891] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1030.454006][T26891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1030.454013][T26891] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1030.454019][T26891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1030.454034][T26891] [ 1030.672373][ T5745] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 1030.692819][T10931] usb 12-1: USB disconnect, device number 12 [ 1030.755068][T26892] comedi comedi3: pcl818: I/O base address or length out of range [ 1031.263576][T26905] FAULT_INJECTION: forcing a failure. [ 1031.263576][T26905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.268215][T26905] CPU: 0 UID: 0 PID: 26905 Comm: syz.7.5922 Tainted: G L syzkaller #0 PREEMPT(full) [ 1031.268236][T26905] Tainted: [L]=SOFTLOCKUP [ 1031.268240][T26905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1031.268247][T26905] Call Trace: [ 1031.268253][T26905] [ 1031.268258][T26905] dump_stack_lvl+0x100/0x190 [ 1031.268278][T26905] should_fail_ex.cold+0x5/0xa [ 1031.268293][T26905] _copy_to_user+0x32/0xd0 [ 1031.268314][T26905] simple_read_from_buffer+0xcb/0x170 [ 1031.268335][T26905] proc_fail_nth_read+0x1af/0x230 [ 1031.268352][T26905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1031.268368][T26905] ? rw_verify_area+0xce/0x6d0 [ 1031.268386][T26905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1031.268401][T26905] vfs_read+0x1e4/0xb40 [ 1031.268414][T26905] ? __pfx_vfs_read+0x10/0x10 [ 1031.268423][T26905] ? find_held_lock+0x2b/0x80 [ 1031.268439][T26905] ? __fget_files+0x215/0x3d0 [ 1031.268453][T26905] ? __fget_files+0x21f/0x3d0 [ 1031.268467][T26905] ksys_read+0x12a/0x250 [ 1031.268477][T26905] ? __pfx_ksys_read+0x10/0x10 [ 1031.268492][T26905] do_int80_emulation+0x14b/0x720 [ 1031.268512][T26905] asm_int80_emulation+0x1a/0x20 [ 1031.268524][T26905] RIP: 0023:0xf71874eb [ 1031.268534][T26905] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1031.268545][T26905] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1031.268558][T26905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54465d0 [ 1031.268565][T26905] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1031.268572][T26905] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1031.268578][T26905] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1031.268585][T26905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1031.268599][T26905] [ 1031.529428][T26916] 9p: Bad value for 'rfdno' [ 1031.705812][T26925] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5930'. [ 1031.878863][T26933] dns_resolver: Unsupported content type (237) [ 1032.049448][T26921] tmpfs: Unknown parameter '‘Çhè9å­±ÍH{üÛÞdx‰iÿ‰©ø8¼àã­0ZÑl |wµ?–VHü²C\W4ÒÙÆtµC|þA [ 1032.049448][T26921] Ä5¾' [ 1032.077575][T26939] netlink: 'syz.7.5935': attribute type 1 has an invalid length. [ 1032.106812][T26939] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1032.253679][T26944] FAULT_INJECTION: forcing a failure. [ 1032.253679][T26944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.258284][T26944] CPU: 2 UID: 0 PID: 26944 Comm: syz.5.5937 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.258317][T26944] Tainted: [L]=SOFTLOCKUP [ 1032.258321][T26944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1032.258330][T26944] Call Trace: [ 1032.258336][T26944] [ 1032.258342][T26944] dump_stack_lvl+0x100/0x190 [ 1032.258363][T26944] should_fail_ex.cold+0x5/0xa [ 1032.258378][T26944] _copy_from_user+0x2e/0xd0 [ 1032.258399][T26944] kstrtouint_from_user+0xd6/0x1d0 [ 1032.258415][T26944] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1032.258429][T26944] ? __lock_acquire+0x49f/0x1a40 [ 1032.258456][T26944] proc_fail_nth_write+0x83/0x220 [ 1032.258474][T26944] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1032.258499][T26944] vfs_write+0x2aa/0x1050 [ 1032.258512][T26944] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1032.258530][T26944] ? __pfx_vfs_write+0x10/0x10 [ 1032.258541][T26944] ? find_held_lock+0x2b/0x80 [ 1032.258556][T26944] ? __fget_files+0x215/0x3d0 [ 1032.258571][T26944] ? __fget_files+0x21f/0x3d0 [ 1032.258586][T26944] ksys_write+0x12a/0x250 [ 1032.258602][T26944] ? __pfx_ksys_write+0x10/0x10 [ 1032.258624][T26944] do_int80_emulation+0x14b/0x720 [ 1032.258648][T26944] asm_int80_emulation+0x1a/0x20 [ 1032.258660][T26944] RIP: 0023:0xf71074eb [ 1032.258670][T26944] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1032.258681][T26944] RSP: 002b:00000000f53bd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1032.258694][T26944] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53bd5d0 [ 1032.258701][T26944] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1032.258708][T26944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1032.258714][T26944] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1032.258726][T26944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1032.258740][T26944] [ 1032.351201][T26931] comedi comedi3: pcl818: I/O base address or length out of range [ 1032.440599][T24512] Bluetooth: hci4: Frame reassembly failed (-84) [ 1032.851014][T26966] erspan1: entered promiscuous mode [ 1032.858185][T26965] gadgetfs: bound to dummy_udc driver [ 1033.100438][T16460] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1033.103202][ C0] gadgetfs: connected [ 1033.105498][T16460] gadgetfs: disconnected [ 1033.110777][ T1349] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1033.251485][ C0] gadgetfs: connected [ 1033.254259][T16460] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1033.257307][T16460] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1033.260498][T16460] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.265290][ T1349] usb 9-1: config 2 has an invalid interface number: 43 but max is 0 [ 1033.267972][ T1349] usb 9-1: config 2 has no interface number 0 [ 1033.271776][ T1349] usb 9-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 1033.274922][ C0] gadgetfs: configuration #1 [ 1033.279153][ T1349] usb 9-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 1033.282859][ T1349] usb 9-1: config 2 interface 43 has no altsetting 0 [ 1033.286754][ T1349] usb 9-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1033.289693][ T1349] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.292575][ T1349] usb 9-1: Product: syz [ 1033.294143][ T1349] usb 9-1: Manufacturer: syz [ 1033.295743][ T1349] usb 9-1: SerialNumber: syz [ 1033.299584][T26965] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1033.302996][T26965] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1034.482559][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1034.717818][T26963] gadgetfs: suspended from state 3 [ 1034.719017][ T1349] ums-usbat 9-1:2.43: USB Mass Storage device detected [ 1034.732857][T26963] gadgetfs: disconnected [ 1034.736681][T19872] usb 6-1: USB disconnect, device number 9 [ 1034.740830][ T1349] ums-usbat 9-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 1034.877277][T26985] nvme nvme0: failed to connect socket: -101 [ 1035.143813][ T1349] ums-usbat 9-1:2.43: probe with driver ums-usbat failed with error -5 [ 1036.294739][ T1349] usb 9-1: USB disconnect, device number 20 [ 1036.698162][T26994] syzkaller0: entered promiscuous mode [ 1036.702446][T26994] syzkaller0: entered allmulticast mode [ 1036.837993][T26982] comedi comedi3: pcl818: I/O base address or length out of range [ 1036.884227][T27003] tipc: Started in network mode [ 1036.886068][T27003] tipc: Node identity , cluster identity 4711 [ 1036.906015][T27003] tipc: Failed to obtain node identity [ 1036.907862][T27003] tipc: Enabling of bearer rejected, failed to enable media [ 1038.010165][T27015] tipc: Started in network mode [ 1038.011860][T27015] tipc: Node identity , cluster identity 4711 [ 1038.013828][T27015] tipc: Failed to obtain node identity [ 1038.015693][T27015] tipc: Enabling of bearer rejected, failed to enable media [ 1038.231709][T27025] tipc: Started in network mode [ 1038.237533][T27025] tipc: Node identity , cluster identity 4711 [ 1038.249543][T27025] tipc: Failed to obtain node identity [ 1038.257182][T27025] tipc: Enabling of bearer rejected, failed to enable media [ 1039.630295][T27064] comedi comedi3: pcl818: I/O base address or length out of range [ 1039.773259][T12824] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1039.920741][T12824] usb 9-1: Using ep0 maxpacket: 16 [ 1039.924291][T12824] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.928278][T12824] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1039.932497][T12824] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1039.936170][T12824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.947192][T12824] usb 9-1: config 0 descriptor?? [ 1040.176353][T12824] usb 9-1: USB disconnect, device number 21 [ 1040.212102][T27066] tipc: Started in network mode [ 1040.213629][T27066] tipc: Node identity , cluster identity 4711 [ 1040.215415][T27066] tipc: Failed to obtain node identity [ 1040.217176][T27066] tipc: Enabling of bearer rejected, failed to enable media [ 1040.805785][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 1041.816553][T27093] tipc: Started in network mode [ 1041.818624][T27093] tipc: Node identity , cluster identity 4711 [ 1041.821293][T27093] tipc: Failed to obtain node identity [ 1041.823152][T27093] tipc: Enabling of bearer rejected, failed to enable media [ 1041.889506][T27098] tipc: Enabling of bearer rejected, already enabled [ 1042.784148][T27135] bond2: Removing last arp target with arp_interval on [ 1042.920150][T27140] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5982'. [ 1042.926282][T27140] openvswitch: netlink: Flow key attr not present in new flow. [ 1043.208529][T27144] comedi comedi3: pcl818: I/O base address or length out of range [ 1043.776499][T27162] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1043.778622][T27162] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1043.794648][T27162] vhci_hcd vhci_hcd.0: Device attached [ 1043.892524][T27166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5987'. [ 1043.907540][T27166] 9pnet_virtio: no channels available for device syz [ 1043.921786][T27166] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1043.921786][T27166] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1043.938221][T27166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5987'. [ 1044.081041][T19873] usb 52-1: SetAddress Request (2) to port 0 [ 1044.087227][T19873] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1044.254594][T27163] vhci_hcd: connection reset by peer [ 1044.260828][ T5822] vhci_hcd vhci_hcd.7: stop threads [ 1044.263115][ T5822] vhci_hcd vhci_hcd.7: release socket [ 1044.266682][ T5822] vhci_hcd vhci_hcd.7: disconnect device [ 1044.382556][T27171] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1044.385540][T27171] ALSA: mixer_oss: invalid index 137438 [ 1044.725471][T27177] tipc: Started in network mode [ 1044.727471][T27177] tipc: Node identity , cluster identity 4711 [ 1044.729628][T27177] tipc: Failed to obtain node identity [ 1045.120194][T27176] fuse: Bad value for 'fd' [ 1045.911155][T27177] tipc: Enabling of bearer rejected, failed to enable media [ 1047.039917][T27216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5996'. [ 1047.045268][T27216] netlink: 'syz.4.5996': attribute type 5 has an invalid length. [ 1047.047840][T27216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5996'. [ 1047.437882][T27223] comedi comedi3: pcl818: I/O base address or length out of range [ 1047.740496][ T24] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1047.908500][T27237] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1047.911722][T27237] ALSA: mixer_oss: invalid index 137438 [ 1047.970539][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1048.074100][T27235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6001'. [ 1048.626017][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.748516][ T24] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1048.752407][ T24] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1048.755680][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.763680][ T24] usb 9-1: config 0 descriptor?? [ 1048.865961][T27241] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6005'. [ 1048.972959][ T24] usb 9-1: USB disconnect, device number 22 [ 1049.110687][T12824] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 1049.120800][T19873] usb 52-1: device descriptor read/8, error -110 [ 1049.183502][T27256] netlink: 'syz.5.6008': attribute type 1 has an invalid length. [ 1049.186806][T27256] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6008'. [ 1049.261056][T12824] usb 12-1: Using ep0 maxpacket: 8 [ 1049.264189][T12824] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.268083][T12824] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1049.271557][T12824] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.275091][T12824] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1049.278830][T12824] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.536781][T12824] hub 12-1:1.0: bad descriptor, ignoring hub [ 1049.541586][T19873] usb usb52-port1: attempt power cycle [ 1049.546495][T12824] hub 12-1:1.0: probe with driver hub failed with error -5 [ 1049.555926][T12824] cdc_wdm 12-1:1.0: skipping garbage [ 1049.565269][T12824] cdc_wdm 12-1:1.0: skipping garbage [ 1049.569355][T12824] cdc_wdm 12-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1050.139069][T19873] usb usb52-port1: unable to enumerate USB device [ 1050.181525][T27279] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1050.183620][T27279] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1050.209592][T27279] vhci_hcd vhci_hcd.0: Device attached [ 1050.260831][T19873] usb 12-1: USB disconnect, device number 13 [ 1050.400876][T19872] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1050.470495][T19872] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1050.474709][T27280] vhci_hcd: connection closed [ 1050.474982][ T5796] vhci_hcd vhci_hcd.5: stop threads [ 1050.478328][ T5796] vhci_hcd vhci_hcd.5: release socket [ 1050.480127][ T5796] vhci_hcd vhci_hcd.5: disconnect device [ 1050.738444][T27286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6013'. [ 1050.745658][T27286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6013'. [ 1051.242091][T27293] comedi comedi3: pcl818: I/O base address or length out of range [ 1051.286970][T27300] tipc: Started in network mode [ 1051.291317][T27300] tipc: Node identity , cluster identity 4711 [ 1051.296712][T27300] tipc: Failed to obtain node identity [ 1051.303169][T27300] tipc: Enabling of bearer rejected, failed to enable media [ 1052.255278][T27319] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6020'. [ 1052.259410][T27319] 9pnet_virtio: no channels available for device syz [ 1052.276124][T27319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6020'. [ 1052.357293][T27321] netlink: 'syz.7.6021': attribute type 1 has an invalid length. [ 1052.360514][T27321] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6021'. [ 1052.385982][T27323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6022'. [ 1052.389031][T27323] netlink: 'syz.5.6022': attribute type 5 has an invalid length. [ 1052.393624][T27323] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6022'. [ 1052.442289][T27325] tipc: Started in network mode [ 1052.443949][T27325] tipc: Node identity , cluster identity 4711 [ 1052.445881][T27325] tipc: Failed to obtain node identity [ 1052.447700][T27325] tipc: Enabling of bearer rejected, failed to enable media [ 1054.091980][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.315086][T27363] tipc: Enabling of bearer rejected, already enabled [ 1054.475320][T27343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6026'. [ 1054.705619][T27358] comedi comedi3: pcl818: I/O base address or length out of range [ 1054.729055][T16460] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1054.916606][T27360] comedi comedi3: pcl818: I/O base address or length out of range [ 1054.923297][T16460] usb 8-1: Using ep0 maxpacket: 8 [ 1054.927464][T16460] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.931071][T16460] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1054.934310][T16460] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.937522][T16460] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1054.940818][T16460] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.964912][T16460] hub 8-1:1.0: bad descriptor, ignoring hub [ 1054.966980][T16460] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1054.969609][T16460] cdc_wdm 8-1:1.0: skipping garbage [ 1054.973726][T16460] cdc_wdm 8-1:1.0: skipping garbage [ 1054.975755][T16460] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1055.378889][T27384] Bluetooth: MGMT ver 1.23 [ 1055.412110][ T24] usb 8-1: USB disconnect, device number 42 [ 1055.459297][T27380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6032'. [ 1055.610481][T19872] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1055.780761][T16460] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1055.931958][T16460] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1055.946568][T16460] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1055.959148][T16460] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1055.970886][T16460] usb 10-1: Product: syz [ 1055.974083][T16460] usb 10-1: Manufacturer: syz [ 1055.978534][T16460] usb 10-1: SerialNumber: syz [ 1056.198514][T16460] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1056.451243][ C0] usblp0: nonzero write bulk status received: -71 [ 1056.456544][T19873] usb 10-1: USB disconnect, device number 2 [ 1056.477184][T19873] usblp0: removed [ 1056.580468][ T5891] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1056.593989][ T24] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 1056.772081][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1056.775680][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1056.782368][ T24] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1056.785845][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.788504][ T24] usb 8-1: Product: syz [ 1056.790124][ T24] usb 8-1: Manufacturer: syz [ 1056.792189][ T24] usb 8-1: SerialNumber: syz [ 1056.799743][ T24] usb 8-1: config 0 descriptor?? [ 1056.807466][ T24] hub 8-1:0.0: bad descriptor, ignoring hub [ 1056.809677][ T24] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1056.818207][ T24] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input48 [ 1057.057369][T27404] FAULT_INJECTION: forcing a failure. [ 1057.057369][T27404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.062578][T27404] CPU: 2 UID: 0 PID: 27404 Comm: syz.5.6040 Tainted: G L syzkaller #0 PREEMPT(full) [ 1057.062597][T27404] Tainted: [L]=SOFTLOCKUP [ 1057.062602][T27404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1057.062609][T27404] Call Trace: [ 1057.062613][T27404] [ 1057.062618][T27404] dump_stack_lvl+0x100/0x190 [ 1057.062638][T27404] should_fail_ex.cold+0x5/0xa [ 1057.062653][T27404] _copy_to_user+0x32/0xd0 [ 1057.062688][T27404] bpf_test_finish.isra.0+0x4db/0x650 [ 1057.062712][T27404] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 1057.062733][T27404] ? skb_checksum+0x7f4/0x950 [ 1057.062751][T27404] bpf_prog_test_run_skb+0x248e/0x3540 [ 1057.062771][T27404] ? __fget_files+0x181/0x3d0 [ 1057.062787][T27404] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1057.062802][T27404] ? fput+0x79/0x100 [ 1057.062817][T27404] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1057.062831][T27404] __sys_bpf+0x2a12/0x4e80 [ 1057.062848][T27404] ? __pfx___sys_bpf+0x10/0x10 [ 1057.062862][T27404] ? find_held_lock+0x2b/0x80 [ 1057.062876][T27404] ? get_pid_task+0xfc/0x250 [ 1057.062892][T27404] ? get_pid_task+0xfc/0x250 [ 1057.062910][T27404] ? proc_fail_nth_write+0x9f/0x220 [ 1057.062927][T27404] ? find_held_lock+0x2b/0x80 [ 1057.062945][T27404] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1057.062960][T27404] ? find_held_lock+0x2b/0x80 [ 1057.062974][T27404] ? ksys_write+0x190/0x250 [ 1057.062984][T27404] ? ksys_write+0x190/0x250 [ 1057.063005][T27404] ? fput+0x79/0x100 [ 1057.063020][T27404] ? __ia32_sys_bpf+0xcc/0x170 [ 1057.063032][T27404] __ia32_sys_bpf+0xcc/0x170 [ 1057.063045][T27404] ? __do_fast_syscall_32+0x98/0x970 [ 1057.063065][T27404] __do_fast_syscall_32+0xe7/0x970 [ 1057.063081][T27404] ? lockdep_hardirqs_on+0x78/0x100 [ 1057.063098][T27404] do_fast_syscall_32+0x32/0x70 [ 1057.063115][T27404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1057.063131][T27404] RIP: 0023:0xf6fcefec [ 1057.063145][T27404] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 1057.063152][T27404] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1057.063164][T27404] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 1057.063172][T27404] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1057.063179][T27404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1057.063185][T27404] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1057.063192][T27404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1057.063207][T27404] [ 1057.187734][T27406] tipc: Started in network mode [ 1057.189382][T27406] tipc: Node identity , cluster identity 4711 [ 1057.191704][T27406] tipc: Failed to obtain node identity [ 1057.193511][T27406] tipc: Enabling of bearer rejected, failed to enable media [ 1057.430215][T27410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6038'. [ 1057.837017][ T5891] usb 9-1: Using ep0 maxpacket: 16 [ 1057.849523][ T5891] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.853084][ T5891] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1057.858867][ T5891] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1057.886324][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.894411][ T5891] usb 9-1: config 0 descriptor?? [ 1058.120235][ T5891] usb 9-1: USB disconnect, device number 23 [ 1058.694248][T27424] tipc: Started in network mode [ 1058.696224][T27424] tipc: Node identity , cluster identity 4711 [ 1058.698517][T27424] tipc: Failed to obtain node identity [ 1058.700520][T27424] tipc: Enabling of bearer rejected, failed to enable media [ 1059.298500][T27426] comedi comedi3: pcl818: I/O base address or length out of range [ 1059.356639][ T5745] Bluetooth: hci0: link tx timeout [ 1059.363395][ T5745] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1059.427566][ T5745] Bluetooth: hci0: link tx timeout [ 1059.436220][ T5745] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1059.491911][ T5745] Bluetooth: hci0: link tx timeout [ 1059.493979][ T5745] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1059.497310][ T5745] Bluetooth: hci0: link tx timeout [ 1059.500161][ T5745] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1059.507343][ T24] usb 8-1: USB disconnect, device number 43 [ 1059.937902][T27451] comedi comedi3: pcl818: I/O base address or length out of range [ 1060.080777][T19873] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 1060.233976][T27446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6047'. [ 1060.271863][T19873] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1060.277422][T19873] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1060.280172][T19873] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1060.282790][T19873] usb 12-1: Product: syz [ 1060.284319][T19873] usb 12-1: Manufacturer: syz [ 1060.285795][T19873] usb 12-1: SerialNumber: syz [ 1060.470710][ T5891] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1060.496401][T19873] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1060.620581][ T5891] usb 9-1: Using ep0 maxpacket: 8 [ 1060.629622][ T5891] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.641046][ T5891] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1060.650777][ T5891] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.656693][ T5891] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1060.671373][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.682174][ T5891] hub 9-1:1.0: bad descriptor, ignoring hub [ 1060.687207][ T5891] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1060.693797][ T5891] cdc_wdm 9-1:1.0: skipping garbage [ 1060.700556][ T5891] cdc_wdm 9-1:1.0: skipping garbage [ 1060.706833][ T5891] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1060.771275][T19872] usb 12-1: USB disconnect, device number 14 [ 1060.781639][T19872] usblp0: removed [ 1060.991037][T16460] usb 9-1: USB disconnect, device number 24 [ 1061.216224][T27455] comedi comedi3: pcl818: I/O base address or length out of range [ 1061.274386][T27460] 9pnet_fd: Insufficient options for proto=fd [ 1061.316901][T27462] tipc: Enabling of bearer rejected, already enabled [ 1061.365116][ T5745] Bluetooth: hci0: link tx timeout [ 1061.366870][ T5745] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1061.369330][ T5745] Bluetooth: hci0: link tx timeout [ 1061.371359][ T5745] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1061.382791][T27465] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1061.415930][T27465] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1061.419387][T27465] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1061.423406][T27465] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1061.426822][T27465] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1061.595295][T27465] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 164657 usecs [ 1061.601152][ T5745] Bluetooth: hci0: command 0x0406 tx timeout [ 1061.651192][T27465] pci 0000:00:01.0: Adding to iommu group 1 [ 1061.939929][T27465] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1061.942504][T27465] pci 0000:00:01.0: vgaarb: bridge control possible [ 1061.944858][T27465] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1062.138202][T27477] tipc: Started in network mode [ 1062.143780][T27477] tipc: Node identity , cluster identity 4711 [ 1062.149209][T27477] tipc: Failed to obtain node identity [ 1062.154903][T27477] tipc: Enabling of bearer rejected, failed to enable media [ 1062.444887][T27465] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1062.447561][T27465] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1062.450818][T27465] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1062.453222][T27465] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1062.470554][T27465] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 1062.474436][T27465] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 1062.482585][T27465] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1062.497109][T27465] [drm] Found bochs VGA, ID 0xb0c5. [ 1062.498983][T27465] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1062.503740][T27465] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 1062.898923][T27498] tipc: Enabling of bearer rejected, already enabled [ 1064.001330][ T5745] Bluetooth: hci0: command 0x0406 tx timeout [ 1064.044287][T27514] tipc: Enabling of bearer rejected, already enabled [ 1064.602459][T27519] 9pnet_virtio: no channels available for device syz [ 1064.784545][T27522] tipc: Started in network mode [ 1064.787624][T27522] tipc: Node identity , cluster identity 4711 [ 1064.790703][T27522] tipc: Failed to obtain node identity [ 1064.792591][T27522] tipc: Enabling of bearer rejected, failed to enable media [ 1065.720827][T27544] 9pnet_fd: Insufficient options for proto=fd [ 1065.754390][T27544] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1065.756505][T27544] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1065.761324][T27544] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 1065.765872][T27544] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 1065.835412][T27549] tipc: Started in network mode [ 1065.837315][T27549] tipc: Node identity , cluster identity 4711 [ 1065.839992][T27549] tipc: Failed to obtain node identity [ 1065.847201][T27549] tipc: Enabling of bearer rejected, failed to enable media [ 1065.980419][T12824] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1066.159027][ T5745] Bluetooth: hci0: command 0x0406 tx timeout [ 1066.249845][T12824] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1066.259709][T12824] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1066.264225][T12824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1066.267043][T12824] usb 9-1: Product: syz [ 1066.268638][T12824] usb 9-1: Manufacturer: syz [ 1066.270211][T12824] usb 9-1: SerialNumber: syz [ 1066.485791][T12824] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1066.879432][T12824] usb 9-1: USB disconnect, device number 25 [ 1066.889872][T12824] usblp0: removed [ 1067.130239][T27570] comedi comedi3: pcl818: I/O base address or length out of range [ 1067.464003][T27574] tipc: Started in network mode [ 1067.465688][T27574] tipc: Node identity , cluster identity 4711 [ 1067.467753][T27574] tipc: Failed to obtain node identity [ 1067.469572][T27574] tipc: Enabling of bearer rejected, failed to enable media [ 1067.899331][T27585] kthread_run failed with err -4 [ 1067.928331][T27591] FAULT_INJECTION: forcing a failure. [ 1067.928331][T27591] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.932535][T27591] CPU: 2 UID: 0 PID: 27591 Comm: syz.5.6076 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.932574][T27591] Tainted: [L]=SOFTLOCKUP [ 1067.932580][T27591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1067.932595][T27591] Call Trace: [ 1067.932613][T27591] [ 1067.932619][T27591] dump_stack_lvl+0x100/0x190 [ 1067.932701][T27591] should_fail_ex.cold+0x5/0xa [ 1067.932729][T27591] should_failslab+0xc2/0x120 [ 1067.932768][T27591] __kmalloc_cache_noprof+0x91/0x6c0 [ 1067.932788][T27591] ? bpf_prog_alloc_no_stats+0x15f/0x640 [ 1067.932822][T27591] bpf_prog_alloc_no_stats+0x15f/0x640 [ 1067.932841][T27591] bpf_prog_alloc+0x3b/0x200 [ 1067.932855][T27591] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1067.932881][T27591] bpf_prog_load+0x4a9/0x2fa0 [ 1067.932898][T27591] ? __pfx_bpf_prog_load+0x10/0x10 [ 1067.932910][T27591] ? __lock_acquire+0x49f/0x1a40 [ 1067.932953][T27591] __sys_bpf+0x18dc/0x4e80 [ 1067.932970][T27591] ? __pfx___sys_bpf+0x10/0x10 [ 1067.932983][T27591] ? find_held_lock+0x2b/0x80 [ 1067.932997][T27591] ? get_pid_task+0xfc/0x250 [ 1067.933019][T27591] ? get_pid_task+0xfc/0x250 [ 1067.933037][T27591] ? proc_fail_nth_write+0x9f/0x220 [ 1067.933091][T27591] ? find_held_lock+0x2b/0x80 [ 1067.933108][T27591] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1067.933125][T27591] ? find_held_lock+0x2b/0x80 [ 1067.933139][T27591] ? ksys_write+0x190/0x250 [ 1067.933156][T27591] ? ksys_write+0x190/0x250 [ 1067.933178][T27591] ? fput+0x79/0x100 [ 1067.933195][T27591] ? __ia32_sys_bpf+0xcc/0x170 [ 1067.933208][T27591] __ia32_sys_bpf+0xcc/0x170 [ 1067.933221][T27591] ? __do_fast_syscall_32+0x98/0x970 [ 1067.933249][T27591] __do_fast_syscall_32+0xe7/0x970 [ 1067.933265][T27591] ? lockdep_hardirqs_on+0x78/0x100 [ 1067.933282][T27591] do_fast_syscall_32+0x32/0x70 [ 1067.933299][T27591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1067.933316][T27591] RIP: 0023:0xf6fcefec [ 1067.933332][T27591] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 1067.933347][T27591] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1067.933360][T27591] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 1067.933367][T27591] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1067.933374][T27591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1067.933381][T27591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.933387][T27591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1067.933408][T27591] [ 1068.084297][T27600] tipc: Enabling of bearer rejected, already enabled [ 1068.245753][T27609] nbd: must specify at least one socket [ 1068.671743][T19873] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1068.830534][T19873] usb 10-1: Using ep0 maxpacket: 16 [ 1068.833609][T19873] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.836975][T19873] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1068.840032][T19873] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1068.843771][T19873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.850508][T19873] usb 10-1: config 0 descriptor?? [ 1068.975551][T27624] tipc: Enabling of bearer rejected, already enabled [ 1069.298088][ T10] usb 10-1: USB disconnect, device number 3 [ 1069.382917][T27606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.982819][T27636] tipc: Started in network mode [ 1069.985097][T27636] tipc: Node identity , cluster identity 4711 [ 1069.988089][T27636] tipc: Failed to obtain node identity [ 1069.991586][T27636] tipc: Enabling of bearer rejected, failed to enable media [ 1070.352168][T27655] tipc: Started in network mode [ 1070.353892][T27655] tipc: Node identity , cluster identity 4711 [ 1070.355907][T27655] tipc: Failed to obtain node identity [ 1070.357824][T27655] tipc: Enabling of bearer rejected, failed to enable media [ 1070.582143][T27642] comedi comedi3: pcl818: I/O base address or length out of range [ 1071.461623][ T10] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1071.612316][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1071.619772][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.623609][ T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1071.630018][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1071.638902][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.664141][ T10] usb 9-1: config 0 descriptor?? [ 1071.875334][ T5101] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 1071.907986][ T10] usb 9-1: USB disconnect, device number 26 [ 1071.945735][T27686] tipc: Started in network mode [ 1071.952232][T27686] tipc: Node identity , cluster identity 4711 [ 1071.958858][T27686] tipc: Failed to obtain node identity [ 1071.964309][T27686] tipc: Enabling of bearer rejected, failed to enable media [ 1073.128226][T27704] 9p: Bad value for 'rfdno' [ 1073.184902][T27695] 9p: Bad value for 'wfdno' [ 1073.289706][T27709] comedi comedi3: pcl818: I/O base address or length out of range [ 1073.384361][T27713] tipc: Started in network mode [ 1073.386295][T27713] tipc: Node identity , cluster identity 4711 [ 1073.388420][T27713] tipc: Failed to obtain node identity [ 1073.390239][T27713] tipc: Enabling of bearer rejected, failed to enable media [ 1073.901634][T27728] tipc: Started in network mode [ 1073.903607][T27728] tipc: Node identity , cluster identity 4711 [ 1073.905656][T27728] tipc: Failed to obtain node identity [ 1073.907863][T27728] tipc: Enabling of bearer rejected, failed to enable media [ 1074.760756][T19873] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1075.704472][T27743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.794215][T19873] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1075.798024][T19873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1075.801562][T19873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1075.807017][T19873] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1075.811123][T19873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.813796][T19873] usb 9-1: Product: syz [ 1075.815117][T19873] usb 9-1: Manufacturer: syz [ 1075.816785][T19873] usb 9-1: SerialNumber: syz [ 1075.821111][T19873] usb 9-1: config 0 descriptor?? [ 1075.825059][T27742] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1075.871325][T19873] rc_core: IR keymap rc-streamzap not found [ 1075.873406][T19873] Registered IR keymap rc-empty [ 1075.875812][T19873] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 1075.881535][T19873] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input49 [ 1075.961015][ T24] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 1076.240654][ T24] usb 12-1: Using ep0 maxpacket: 16 [ 1076.244697][ T24] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.248146][ T24] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1076.251686][ T24] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1076.254573][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.259349][ T24] usb 12-1: config 0 descriptor?? [ 1076.367811][T27768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6116'. [ 1076.475634][ T5101] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 1076.570953][T19873] usb 12-1: USB disconnect, device number 15 [ 1076.616280][T27772] tipc: Started in network mode [ 1076.618469][T27772] tipc: Node identity , cluster identity 4711 [ 1076.621190][T27772] tipc: Failed to obtain node identity [ 1076.623467][T27772] tipc: Enabling of bearer rejected, failed to enable media [ 1077.104161][T27787] tipc: Started in network mode [ 1077.106308][T27787] tipc: Node identity , cluster identity 4711 [ 1077.109244][T27787] tipc: Failed to obtain node identity [ 1077.113398][T27787] tipc: Enabling of bearer rejected, failed to enable media [ 1077.397376][T27795] comedi comedi3: pcl818: I/O base address or length out of range [ 1077.841452][T27803] comedi comedi3: pcl818: I/O base address or length out of range [ 1077.845312][ T24] usb 9-1: USB disconnect, device number 27 [ 1078.148603][T27812] comedi comedi3: pcl818: I/O base address or length out of range [ 1079.545240][T27827] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 1079.606727][T27835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6129'. [ 1079.627737][T27838] tipc: Enabling of bearer rejected, already enabled [ 1079.990731][ T24] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 1080.075033][T27857] comedi comedi3: pcl818: I/O base address or length out of range [ 1080.153742][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1080.158619][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1080.163651][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1080.171368][ T24] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1080.175394][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.179150][ T24] usb 8-1: Product: syz [ 1080.183408][ T24] usb 8-1: Manufacturer: syz [ 1080.185601][ T24] usb 8-1: SerialNumber: syz [ 1080.208088][ T24] usb 8-1: config 0 descriptor?? [ 1080.212386][T27843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1080.281203][ T24] rc_core: IR keymap rc-streamzap not found [ 1080.285041][ T24] Registered IR keymap rc-empty [ 1080.291917][ T24] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 1080.309063][ T24] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input50 [ 1081.304850][T27877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6131'. [ 1081.641033][T12824] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1081.746631][T27887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6139'. [ 1082.368421][T27868] comedi comedi3: pcl818: I/O base address or length out of range [ 1082.442294][T12824] usb 9-1: Using ep0 maxpacket: 16 [ 1082.447645][T12824] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.451191][T12824] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1082.454301][T12824] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1082.457775][T12824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.473058][T12824] usb 9-1: config 0 descriptor?? [ 1082.697836][ T5101] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 1082.733615][T12824] usb 9-1: USB disconnect, device number 28 [ 1082.828727][T16460] usb 8-1: USB disconnect, device number 44 [ 1082.888745][T27900] tipc: Enabling of bearer rejected, already enabled [ 1083.151900][T27912] tipc: Started in network mode [ 1083.153911][T27912] tipc: Node identity , cluster identity 4711 [ 1083.156291][T27912] tipc: Failed to obtain node identity [ 1083.158383][T27912] tipc: Enabling of bearer rejected, failed to enable media [ 1084.691105][T27922] 9p: Bad value for 'wfdno' [ 1084.762546][T27940] tipc: Started in network mode [ 1084.766214][T27940] tipc: Node identity , cluster identity 4711 [ 1084.770692][T27940] tipc: Failed to obtain node identity [ 1084.774771][T27940] tipc: Enabling of bearer rejected, failed to enable media [ 1085.042763][T27949] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6149'. [ 1085.452281][T27960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6150'. [ 1085.914752][T27967] comedi comedi3: pcl818: I/O base address or length out of range [ 1086.585402][T27978] tipc: Started in network mode [ 1086.593606][T27978] tipc: Node identity , cluster identity 4711 [ 1086.604006][T27978] tipc: Failed to obtain node identity [ 1086.609107][T27978] tipc: Enabling of bearer rejected, failed to enable media [ 1086.659591][T27976] comedi comedi3: pcl818: I/O base address or length out of range [ 1087.526408][T28002] tipc: Started in network mode [ 1087.534309][T28002] tipc: Node identity , cluster identity 4711 [ 1087.539000][T28002] tipc: Failed to obtain node identity [ 1087.548817][T28002] tipc: Enabling of bearer rejected, failed to enable media [ 1087.561780][T28000] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6156'. [ 1087.640508][T19873] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1088.230453][T19873] usb 10-1: Using ep0 maxpacket: 16 [ 1088.645335][T19873] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.651508][T19873] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1088.654616][T19873] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1088.657479][T19873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.664937][T19873] usb 10-1: config 0 descriptor?? [ 1088.909475][T19873] usb 10-1: USB disconnect, device number 4 [ 1088.926289][T27994] comedi comedi3: pcl818: I/O base address or length out of range [ 1089.122500][T28024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6162'. [ 1089.154828][T28028] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6164'. [ 1089.375050][T28039] comedi comedi3: pcl818: I/O base address or length out of range [ 1089.405690][T28038] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6168'. [ 1089.474395][ T5894] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1089.605202][T28046] tipc: Started in network mode [ 1089.608579][T28046] tipc: Node identity , cluster identity 4711 [ 1089.612285][T28046] tipc: Failed to obtain node identity [ 1089.616092][T28046] tipc: Enabling of bearer rejected, failed to enable media [ 1089.662297][ T5894] usb 8-1: Using ep0 maxpacket: 16 [ 1089.674698][ T5894] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.687534][ T5894] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1089.700097][ T5894] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1089.709968][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.763791][ T5894] usb 8-1: config 0 descriptor?? [ 1090.234330][T28059] tipc: Enabling of bearer rejected, already enabled [ 1090.706486][ T5101] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 1090.711869][T16460] usb 8-1: USB disconnect, device number 45 [ 1091.579810][T28074] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1091.582802][T28074] cramfs: wrong magic [ 1091.596303][T28074] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6174'. [ 1092.090819][ T5894] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1092.220758][T12824] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 1092.245001][T28087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6179'. [ 1092.261890][ T5894] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1092.265362][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1092.274926][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1092.293192][ T5894] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1092.296747][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.299807][ T5894] usb 10-1: Product: syz [ 1092.301825][ T5894] usb 10-1: Manufacturer: syz [ 1092.303651][ T5894] usb 10-1: SerialNumber: syz [ 1092.313634][ T5894] usb 10-1: config 0 descriptor?? [ 1092.316270][T28078] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1092.380670][T12824] usb 12-1: Using ep0 maxpacket: 16 [ 1092.383924][T12824] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.391956][T12824] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1092.395433][T28090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6187'. [ 1092.398492][T12824] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1092.403552][T12824] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.407751][ T5894] rc_core: IR keymap rc-streamzap not found [ 1092.410108][ T5894] Registered IR keymap rc-empty [ 1092.410216][T12824] usb 12-1: config 0 descriptor?? [ 1092.414134][ T5894] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 1092.426349][ T5894] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input51 [ 1092.647831][ T5101] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 1092.662425][T12824] usb 12-1: USB disconnect, device number 16 [ 1092.826161][T28099] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6176'. [ 1093.531777][T28109] tipc: Started in network mode [ 1093.533846][T28109] tipc: Node identity , cluster identity 4711 [ 1093.536433][T28109] tipc: Failed to obtain node identity [ 1093.539083][T28109] tipc: Enabling of bearer rejected, failed to enable media [ 1093.635980][T28114] tipc: Started in network mode [ 1093.645401][T28114] tipc: Node identity , cluster identity 4711 [ 1093.653431][T28114] tipc: Failed to obtain node identity [ 1093.662479][T28114] tipc: Enabling of bearer rejected, failed to enable media [ 1094.937880][T12824] usb 10-1: USB disconnect, device number 5 [ 1095.246363][T28131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6185'. [ 1095.510545][T19872] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1095.524156][T28142] tipc: Started in network mode [ 1095.525809][T28142] tipc: Node identity , cluster identity 4711 [ 1095.527707][T28142] tipc: Failed to obtain node identity [ 1095.529464][T28142] tipc: Enabling of bearer rejected, failed to enable media [ 1095.680943][T19872] usb 9-1: Using ep0 maxpacket: 16 [ 1095.688702][T19872] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.695807][T19872] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1095.698873][T19872] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1095.702167][T19872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.706474][T19872] usb 9-1: config 0 descriptor?? [ 1095.914501][ T5101] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 1095.918137][T19872] usb 9-1: USB disconnect, device number 29 [ 1096.503999][T28153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6189'. [ 1096.518515][T28155] tipc: Started in network mode [ 1096.522146][T28155] tipc: Node identity , cluster identity 4711 [ 1096.525845][T28155] tipc: Failed to obtain node identity [ 1096.529365][T28155] tipc: Enabling of bearer rejected, failed to enable media [ 1096.928603][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 1096.928668][ T42] audit: type=1326 audit(1786095629.740:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28158 comm="syz.5.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1096.940977][T28168] fuse: Unknown parameter '0x0000000000000009' [ 1096.955164][ T42] audit: type=1326 audit(1786095629.740:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28158 comm="syz.5.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1096.970206][ T42] audit: type=1326 audit(1786095629.740:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28158 comm="syz.5.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71074eb code=0x7ffc0000 [ 1096.987505][ T42] audit: type=1326 audit(1786095629.740:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28158 comm="syz.5.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1097.002243][ T42] audit: type=1326 audit(1786095629.740:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28158 comm="syz.5.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1097.017804][ T42] audit: type=1326 audit(1786095629.740:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28158 comm="syz.5.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1097.032848][ T42] audit: type=1326 audit(1786095629.740:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28158 comm="syz.5.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1097.047939][ T42] audit: type=1326 audit(1786095629.740:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28158 comm="syz.5.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1097.062010][ T42] audit: type=1326 audit(1786095629.740:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28158 comm="syz.5.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1097.076786][ T42] audit: type=1326 audit(1786095629.740:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28158 comm="syz.5.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1097.531332][T12824] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1097.658481][T28179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6195'. [ 1097.682114][T12824] usb 8-1: Using ep0 maxpacket: 16 [ 1097.685623][T12824] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.688827][T12824] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1097.692415][T12824] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1097.708079][T12824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.724230][T12824] usb 8-1: config 0 descriptor?? [ 1097.973160][ T5101] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 1098.018152][T28182] comedi comedi3: pcl818: I/O base address or length out of range [ 1098.022386][T12824] usb 8-1: USB disconnect, device number 46 [ 1098.066771][T28188] input: syz1 as /devices/virtual/input/input52 [ 1098.438348][T28190] tipc: Enabling of bearer rejected, already enabled [ 1098.474620][T28193] tipc: Started in network mode [ 1098.476330][T28193] tipc: Node identity , cluster identity 4711 [ 1098.478258][T28193] tipc: Failed to obtain node identity [ 1098.479952][T28193] tipc: Enabling of bearer rejected, failed to enable media [ 1099.692279][T28206] tipc: Started in network mode [ 1099.693953][T28206] tipc: Node identity , cluster identity 4711 [ 1099.696062][T28206] tipc: Failed to obtain node identity [ 1099.697945][T28206] tipc: Enabling of bearer rejected, failed to enable media [ 1100.309220][T28218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6202'. [ 1100.750573][T19872] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 1100.930603][T19872] usb 12-1: Using ep0 maxpacket: 16 [ 1100.948822][T19872] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.960214][T28244] fuse: Unknown parameter '0x0000000000000009' [ 1101.291662][T19872] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1101.294689][T19872] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1101.297613][T19872] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.302639][T19872] usb 12-1: config 0 descriptor?? [ 1101.497476][T28249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6205'. [ 1101.523247][ T5101] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 1101.525337][T19872] usb 12-1: USB disconnect, device number 17 [ 1101.643889][T28251] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1101.662034][T28253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6209'. [ 1101.757542][T28256] tipc: Started in network mode [ 1101.759334][T28256] tipc: Node identity , cluster identity 4711 [ 1101.775087][T28256] tipc: Failed to obtain node identity [ 1101.777089][T28256] tipc: Enabling of bearer rejected, failed to enable media [ 1101.782650][T28258] tipc: Started in network mode [ 1101.784570][T28258] tipc: Node identity , cluster identity 4711 [ 1101.786642][T28258] tipc: Failed to obtain node identity [ 1101.788259][T28258] tipc: Enabling of bearer rejected, failed to enable media [ 1101.823016][T28264] tipc: Started in network mode [ 1101.824880][T28264] tipc: Node identity , cluster identity 4711 [ 1101.826962][T28264] tipc: Failed to obtain node identity [ 1101.828722][T28264] tipc: Enabling of bearer rejected, failed to enable media [ 1103.572466][T28289] IPVS: ip_vs_add_dest(): server weight less than zero [ 1103.620627][ T42] kauditd_printk_skb: 68 callbacks suppressed [ 1103.620663][ T42] audit: type=1326 audit(1786095636.370:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28281 comm="syz.4.6213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1103.639523][ T42] audit: type=1326 audit(1786095636.370:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28281 comm="syz.4.6213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1103.676635][T16460] IPVS: starting estimator thread 0... [ 1103.682541][ T42] audit: type=1326 audit(1786095636.380:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28281 comm="syz.4.6213" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b74eb code=0x7ffc0000 [ 1103.692320][ T42] audit: type=1326 audit(1786095636.380:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28281 comm="syz.4.6213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1103.699325][ T42] audit: type=1326 audit(1786095636.380:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28281 comm="syz.4.6213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1103.707743][ T42] audit: type=1326 audit(1786095636.380:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28281 comm="syz.4.6213" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1103.742527][ T42] audit: type=1326 audit(1786095636.380:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28281 comm="syz.4.6213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1103.749171][ T42] audit: type=1326 audit(1786095636.380:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28281 comm="syz.4.6213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1103.785968][ T42] audit: type=1326 audit(1786095636.380:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28281 comm="syz.4.6213" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1103.800849][T28290] IPVS: using max 43 ests per chain, 103200 per kthread [ 1103.823768][ T42] audit: type=1326 audit(1786095636.380:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28281 comm="syz.4.6213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1103.944233][T28301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6215'. [ 1103.992835][T28292] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6214'. [ 1104.119002][T28304] tipc: Started in network mode [ 1104.129622][T28304] tipc: Node identity , cluster identity 4711 [ 1105.268883][T28304] tipc: Failed to obtain node identity [ 1105.281185][T28304] tipc: Enabling of bearer rejected, failed to enable media [ 1105.294757][T28306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6217'. [ 1105.317908][T28315] tipc: Enabling of bearer rejected, already enabled [ 1105.668335][T28327] tipc: Started in network mode [ 1105.671719][T28327] tipc: Node identity , cluster identity 4711 [ 1105.677701][T28327] tipc: Failed to obtain node identity [ 1105.682408][T28327] tipc: Enabling of bearer rejected, failed to enable media [ 1105.711141][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6228'. [ 1106.419196][T28335] tipc: Started in network mode [ 1106.423040][T28335] tipc: Node identity , cluster identity 4711 [ 1106.425076][T28335] tipc: Failed to obtain node identity [ 1106.426848][T28335] tipc: Enabling of bearer rejected, failed to enable media [ 1107.337651][T28357] tipc: Started in network mode [ 1107.342872][T28357] tipc: Node identity , cluster identity 4711 [ 1107.351705][T28357] tipc: Failed to obtain node identity [ 1107.355678][T28357] tipc: Enabling of bearer rejected, failed to enable media [ 1108.526177][T28358] comedi comedi3: pcl818: I/O base address or length out of range [ 1108.775434][T28371] tipc: Started in network mode [ 1108.778366][T28371] tipc: Node identity , cluster identity 4711 [ 1108.790713][T28371] tipc: Failed to obtain node identity [ 1108.792805][T28371] tipc: Enabling of bearer rejected, failed to enable media [ 1108.935990][T28380] tipc: Enabling of bearer rejected, already enabled [ 1109.997747][T28391] tipc: Started in network mode [ 1109.999372][T28391] tipc: Node identity , cluster identity 4711 [ 1110.002284][T28391] tipc: Failed to obtain node identity [ 1110.004400][T28391] tipc: Enabling of bearer rejected, failed to enable media [ 1110.187367][T28382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6227'. [ 1110.251399][T28397] tipc: Started in network mode [ 1110.253115][T28397] tipc: Node identity , cluster identity 4711 [ 1110.255011][T28397] tipc: Failed to obtain node identity [ 1110.256860][T28397] tipc: Enabling of bearer rejected, failed to enable media [ 1111.607697][T28407] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd7": -EINTR [ 1111.626699][T28419] tipc: Started in network mode [ 1111.652496][T28419] tipc: Node identity , cluster identity 4711 [ 1111.656453][T28419] tipc: Failed to obtain node identity [ 1111.658708][T28419] tipc: Enabling of bearer rejected, failed to enable media [ 1111.713326][T28424] tipc: Started in network mode [ 1111.714966][T28424] tipc: Node identity , cluster identity 4711 [ 1111.717040][T28424] tipc: Failed to obtain node identity [ 1111.718806][T28424] tipc: Enabling of bearer rejected, failed to enable media [ 1113.149134][T28446] tipc: Started in network mode [ 1113.153711][T28446] tipc: Node identity , cluster identity 4711 [ 1113.162040][T28446] tipc: Failed to obtain node identity [ 1113.163837][T28446] tipc: Enabling of bearer rejected, failed to enable media [ 1113.666962][T28461] comedi comedi3: pcl818: I/O base address or length out of range [ 1114.329884][T28465] comedi comedi3: pcl818: I/O base address or length out of range [ 1114.429919][T28469] tipc: Started in network mode [ 1114.432466][T28469] tipc: Node identity , cluster identity 4711 [ 1114.435137][T28469] tipc: Failed to obtain node identity [ 1114.436923][T28469] tipc: Enabling of bearer rejected, failed to enable media [ 1115.030193][T28484] tipc: Started in network mode [ 1115.032664][T28484] tipc: Node identity , cluster identity 4711 [ 1115.034692][T28484] tipc: Failed to obtain node identity [ 1115.036610][T28484] tipc: Enabling of bearer rejected, failed to enable media [ 1115.497456][T28488] tipc: Started in network mode [ 1115.500575][T28488] tipc: Node identity , cluster identity 4711 [ 1115.510574][T28488] tipc: Failed to obtain node identity [ 1115.512930][T28488] tipc: Enabling of bearer rejected, failed to enable media [ 1115.522059][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.250270][T28497] tipc: Enabling of bearer rejected, already enabled [ 1116.805350][T28523] tipc: Started in network mode [ 1116.807551][T28523] tipc: Node identity , cluster identity 4711 [ 1116.813129][T28523] tipc: Failed to obtain node identity [ 1116.815575][T28523] tipc: Enabling of bearer rejected, failed to enable media [ 1118.348672][T28541] tipc: Started in network mode [ 1118.350511][T28541] tipc: Node identity , cluster identity 4711 [ 1118.352465][T28541] tipc: Failed to obtain node identity [ 1118.354177][T28541] tipc: Enabling of bearer rejected, failed to enable media [ 1118.518178][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 1118.518192][ T42] audit: type=1326 audit(1786095651.330:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28544 comm="syz.4.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1118.543218][ T42] audit: type=1326 audit(1786095651.350:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28544 comm="syz.4.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1118.562742][ T42] audit: type=1326 audit(1786095651.350:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28544 comm="syz.4.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1118.585654][ T42] audit: type=1326 audit(1786095651.350:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28544 comm="syz.4.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1118.611242][ T42] audit: type=1326 audit(1786095651.350:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28544 comm="syz.4.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1118.635586][ T42] audit: type=1326 audit(1786095651.350:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28544 comm="syz.4.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1118.640777][T28551] comedi comedi3: pcl818: I/O base address or length out of range [ 1118.660918][ T42] audit: type=1326 audit(1786095651.350:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28544 comm="syz.4.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1118.667751][ T42] audit: type=1326 audit(1786095651.350:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28544 comm="syz.4.6250" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 1119.509416][T28566] tipc: Started in network mode [ 1119.513829][T28566] tipc: Node identity , cluster identity 4711 [ 1119.516422][T28566] tipc: Failed to obtain node identity [ 1119.518918][T28566] tipc: Enabling of bearer rejected, failed to enable media [ 1119.740729][T12824] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1120.710636][T12824] usb 10-1: Using ep0 maxpacket: 16 [ 1120.713772][T12824] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.717023][T12824] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1120.719853][T12824] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1120.722919][T12824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.727033][T12824] usb 10-1: config 0 descriptor?? [ 1120.933237][T12824] usb 10-1: USB disconnect, device number 6 [ 1121.303422][T28590] comedi comedi3: pcl818: I/O base address or length out of range [ 1121.381847][T28592] tipc: Enabling of bearer rejected, already enabled [ 1121.584398][T28596] tipc: Started in network mode [ 1121.588576][T28596] tipc: Node identity , cluster identity 4711 [ 1121.595626][T28596] tipc: Failed to obtain node identity [ 1121.600481][T28596] tipc: Enabling of bearer rejected, failed to enable media [ 1122.428780][T28602] tipc: Started in network mode [ 1122.433504][T28602] tipc: Node identity , cluster identity 4711 [ 1122.437033][T28602] tipc: Failed to obtain node identity [ 1122.439854][T28602] tipc: Enabling of bearer rejected, failed to enable media [ 1123.217993][T28627] comedi comedi3: pcl818: I/O base address or length out of range [ 1123.864024][T28636] tipc: Started in network mode [ 1123.870759][T28636] tipc: Node identity , cluster identity 4711 [ 1123.872836][T28636] tipc: Failed to obtain node identity [ 1123.875816][T28636] tipc: Enabling of bearer rejected, failed to enable media [ 1124.842049][T28678] tipc: Started in network mode [ 1124.843759][T28678] tipc: Node identity , cluster identity 4711 [ 1124.845755][T28678] tipc: Failed to obtain node identity [ 1124.847629][T28678] tipc: Enabling of bearer rejected, failed to enable media [ 1125.000477][T16460] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1125.150774][T16460] usb 9-1: Using ep0 maxpacket: 16 [ 1125.435087][T16460] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.719601][T28665] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1125.722239][T28665] cramfs: wrong magic [ 1125.725785][T28665] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6267'. [ 1125.729312][T28665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.822885][T28689] tipc: Started in network mode [ 1125.824614][T28689] tipc: Node identity , cluster identity 4711 [ 1125.826664][T28689] tipc: Failed to obtain node identity [ 1125.828591][T28689] tipc: Enabling of bearer rejected, failed to enable media [ 1125.959912][T16460] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1125.962901][T16460] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1125.965759][T16460] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.004488][T16460] usb 9-1: config 0 descriptor?? [ 1126.208577][ T5745] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 1126.381008][T16460] usb 9-1: USB disconnect, device number 30 [ 1126.481735][T28699] comedi comedi3: pcl818: I/O base address or length out of range [ 1126.641796][T28711] input: syz1 as /devices/virtual/input/input53 [ 1126.771412][T28713] tipc: Started in network mode [ 1126.773773][T28713] tipc: Node identity , cluster identity 4711 [ 1126.776488][T28713] tipc: Failed to obtain node identity [ 1126.778882][T28713] tipc: Enabling of bearer rejected, failed to enable media [ 1127.087824][T28728] tipc: Started in network mode [ 1127.095164][T28728] tipc: Node identity , cluster identity 4711 [ 1127.098815][T28728] tipc: Failed to obtain node identity [ 1127.102667][T28728] tipc: Enabling of bearer rejected, failed to enable media [ 1127.444279][T28732] comedi comedi3: pcl818: I/O base address or length out of range [ 1127.848171][ T5745] Bluetooth: hci1: command 0x0406 tx timeout [ 1128.546122][T28748] futex_wake_op: syz.3.6280 tries to shift op by 144; fix this program [ 1128.559773][T28748] futex_wake_op: syz.3.6280 tries to shift op by 144; fix this program [ 1129.653884][T28750] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1129.657051][T28750] cramfs: wrong magic [ 1129.662769][T28750] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6281'. [ 1129.665869][T28750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.671576][T28750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.749183][T28759] can0: slcan on ttyS3. [ 1130.094392][T28751] comedi comedi3: pcl818: I/O base address or length out of range [ 1130.189165][T28773] tipc: Enabling of bearer rejected, already enabled [ 1130.305144][T28765] can0 (unregistered): slcan off ttyS3. [ 1131.713165][T28798] tipc: Started in network mode [ 1131.715311][T28798] tipc: Node identity , cluster identity 4711 [ 1131.718582][T28798] tipc: Failed to obtain node identity [ 1131.722525][T28798] tipc: Enabling of bearer rejected, failed to enable media [ 1132.019967][T28806] comedi comedi3: pcl818: I/O base address or length out of range [ 1132.190993][T28773] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd7": -EINTR [ 1132.397026][T28815] tipc: Enabling of bearer rejected, already enabled [ 1134.921326][T28844] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 1134.924990][T28843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6296'. [ 1135.285692][T28855] comedi comedi3: pcl818: I/O base address or length out of range [ 1135.421406][T28858] tipc: Started in network mode [ 1135.423070][T28858] tipc: Node identity , cluster identity 4711 [ 1135.427199][T28858] tipc: Failed to obtain node identity [ 1135.431707][T28858] tipc: Enabling of bearer rejected, failed to enable media [ 1135.542250][T28856] comedi comedi3: pcl818: I/O base address or length out of range [ 1136.319282][T28875] tipc: Started in network mode [ 1136.322491][T28875] tipc: Node identity , cluster identity 4711 [ 1136.324361][T28875] tipc: Failed to obtain node identity [ 1136.326220][T28875] tipc: Enabling of bearer rejected, failed to enable media [ 1136.403479][T28877] tipc: Started in network mode [ 1136.405138][T28877] tipc: Node identity , cluster identity 4711 [ 1136.407181][T28877] tipc: Failed to obtain node identity [ 1136.408979][T28877] tipc: Enabling of bearer rejected, failed to enable media [ 1137.763707][T28903] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 1137.782412][T28902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6308'. [ 1137.867426][T28905] tipc: Started in network mode [ 1137.869352][T28905] tipc: Node identity , cluster identity 4711 [ 1137.873334][T28905] tipc: Failed to obtain node identity [ 1137.875239][T28905] tipc: Enabling of bearer rejected, failed to enable media [ 1138.584174][T28909] loop5: detected capacity change from 0 to 7 [ 1138.595778][T28909] Dev loop5: unable to read RDB block 7 [ 1138.599263][T28909] loop5: unable to read partition table [ 1138.606392][T28909] loop5: partition table beyond EOD, truncated [ 1138.609119][T28909] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1138.762837][T28911] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6312'. [ 1139.440426][T16460] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1139.590598][T16460] usb 8-1: Using ep0 maxpacket: 16 [ 1139.602688][T16460] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.602710][T16460] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1139.602743][T16460] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1139.602757][T16460] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.607411][T16460] usb 8-1: config 0 descriptor?? [ 1139.747548][T28930] tipc: Started in network mode [ 1139.756270][T28930] tipc: Node identity , cluster identity 4711 [ 1139.758381][T28930] tipc: Failed to obtain node identity [ 1139.760173][T28930] tipc: Enabling of bearer rejected, failed to enable media [ 1139.959439][ T5101] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 1139.971548][T16460] usb 8-1: USB disconnect, device number 47 [ 1140.250592][ T1349] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 1140.402441][ T1349] usb 12-1: Using ep0 maxpacket: 16 [ 1140.407548][ T1349] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.412662][ T1349] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1140.416648][ T1349] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1140.419962][ T1349] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.425826][ T1349] usb 12-1: config 0 descriptor?? [ 1140.639921][T28940] tipc: Started in network mode [ 1140.642158][T28940] tipc: Node identity , cluster identity 4711 [ 1140.644120][T28940] tipc: Failed to obtain node identity [ 1140.645998][T28940] tipc: Enabling of bearer rejected, failed to enable media [ 1140.652686][ T5101] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 1140.655461][ T1349] usb 12-1: USB disconnect, device number 18 [ 1141.055667][T28943] comedi comedi3: pcl818: I/O base address or length out of range [ 1141.438114][T28961] tipc: Started in network mode [ 1141.439799][T28961] tipc: Node identity , cluster identity 4711 [ 1141.442183][T28961] tipc: Failed to obtain node identity [ 1141.444100][T28961] tipc: Enabling of bearer rejected, failed to enable media [ 1141.985035][T28980] tipc: Started in network mode [ 1141.986687][T28980] tipc: Node identity , cluster identity 4711 [ 1141.989038][T28980] tipc: Failed to obtain node identity [ 1141.991120][T28980] tipc: Enabling of bearer rejected, failed to enable media [ 1142.643414][T28984] comedi comedi3: pcl818: I/O base address or length out of range [ 1142.764061][T28993] tipc: Started in network mode [ 1142.766398][T28993] tipc: Node identity , cluster identity 4711 [ 1142.768580][T28993] tipc: Failed to obtain node identity [ 1142.771218][T28993] tipc: Enabling of bearer rejected, failed to enable media [ 1143.772284][T29012] tipc: Started in network mode [ 1143.775572][T29012] tipc: Node identity , cluster identity 4711 [ 1143.780595][T29012] tipc: Failed to obtain node identity [ 1143.784856][T29012] tipc: Enabling of bearer rejected, failed to enable media [ 1144.190654][T29016] comedi comedi3: pcl818: I/O base address or length out of range [ 1144.265744][T29009] comedi comedi3: pcl818: I/O base address or length out of range [ 1144.929559][T29029] tipc: Started in network mode [ 1144.936525][T29029] tipc: Node identity , cluster identity 4711 [ 1144.946709][T29029] tipc: Failed to obtain node identity [ 1144.957039][T29029] tipc: Enabling of bearer rejected, failed to enable media [ 1145.023888][T29031] tipc: Enabling of bearer rejected, already enabled [ 1145.878373][T29044] tipc: Started in network mode [ 1145.880039][T29044] tipc: Node identity , cluster identity 4711 [ 1145.882077][T29044] tipc: Failed to obtain node identity [ 1145.883905][T29044] tipc: Enabling of bearer rejected, failed to enable media [ 1146.002996][T29050] tipc: Started in network mode [ 1146.006333][T29050] tipc: Node identity , cluster identity 4711 [ 1146.009727][T29050] tipc: Failed to obtain node identity [ 1146.014967][T29050] tipc: Enabling of bearer rejected, failed to enable media [ 1147.753293][T29069] tipc: Started in network mode [ 1147.757005][T29069] tipc: Node identity , cluster identity 4711 [ 1147.763312][T29069] tipc: Failed to obtain node identity [ 1147.766369][T29069] tipc: Enabling of bearer rejected, failed to enable media [ 1148.985962][T29098] tipc: Enabling of bearer rejected, already enabled [ 1149.021511][T19872] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1150.049933][T19872] usb 10-1: Using ep0 maxpacket: 16 [ 1150.112157][T19872] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.116212][T19872] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1150.119727][T19872] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1150.123533][T19872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.128103][T19872] usb 10-1: config 0 descriptor?? [ 1150.342271][ T1349] usb 10-1: USB disconnect, device number 7 [ 1151.530647][T29111] comedi comedi3: pcl818: I/O base address or length out of range [ 1151.632797][T29133] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1151.635338][T29133] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1151.647482][T29133] vhci_hcd vhci_hcd.0: Device attached [ 1151.950100][T29146] tipc: Started in network mode [ 1151.954638][T29146] tipc: Node identity , cluster identity 4711 [ 1151.956840][T29146] tipc: Failed to obtain node identity [ 1151.958958][T29146] tipc: Enabling of bearer rejected, failed to enable media [ 1151.971441][T19873] usb 52-1: SetAddress Request (6) to port 0 [ 1151.974371][T19873] usb 52-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1152.260869][T29134] vhci_hcd: connection reset by peer [ 1152.284649][ T13] vhci_hcd vhci_hcd.7: stop threads [ 1152.380388][ T13] vhci_hcd vhci_hcd.7: release socket [ 1152.387624][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 1152.506630][ T42] audit: type=1800 audit(1786095685.320:1155): pid=29159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6348" name="memory_backed" dev="configfs" ino=108886 res=0 errno=0 [ 1152.537026][ T42] audit: type=1800 audit(1786095685.320:1156): pid=29159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6348" name="zone_nr_conv" dev="configfs" ino=108887 res=0 errno=0 [ 1152.546340][T29159] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1152.549862][ T42] audit: type=1800 audit(1786095685.320:1157): pid=29159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6348" name="power" dev="configfs" ino=108888 res=0 errno=0 [ 1152.566869][T29159] ALSA: mixer_oss: invalid index 137438 [ 1152.569631][T29159] ALSA: mixer_oss: invalid OSS volume '' [ 1152.572568][T29159] ALSA: mixer_oss: invalid OSS volume '' [ 1152.829422][T29167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6350'. [ 1152.935065][T29170] netlink: 5216 bytes leftover after parsing attributes in process `syz.5.6351'. [ 1152.971017][T29170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6351'. [ 1153.173786][T29175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6353'. [ 1154.180019][T29183] tipc: Started in network mode [ 1154.182151][T29183] tipc: Node identity , cluster identity 4711 [ 1154.184587][T29183] tipc: Failed to obtain node identity [ 1154.186735][T29183] tipc: Enabling of bearer rejected, failed to enable media [ 1154.314814][T29181] comedi comedi3: pcl818: I/O base address or length out of range [ 1155.617338][T29207] tipc: Started in network mode [ 1155.619460][T29207] tipc: Node identity , cluster identity 4711 [ 1155.635824][T29207] tipc: Failed to obtain node identity [ 1155.638239][T29207] tipc: Enabling of bearer rejected, failed to enable media [ 1157.040756][T19873] usb 52-1: device descriptor read/8, error -110 [ 1157.203528][T29229] tipc: Enabling of bearer rejected, already enabled [ 1157.740193][T29233] tipc: Started in network mode [ 1157.743116][T29233] tipc: Node identity , cluster identity 4711 [ 1157.745259][T29233] tipc: Failed to obtain node identity [ 1157.747116][T29233] tipc: Enabling of bearer rejected, failed to enable media [ 1158.335342][T19873] usb usb52-port1: attempt power cycle [ 1158.423278][T29224] comedi comedi3: pcl818: I/O base address or length out of range [ 1158.873637][T29256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6365'. [ 1158.952266][T19873] usb usb52-port1: unable to enumerate USB device [ 1159.138627][T29271] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1159.138650][T29271] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1159.139055][T29271] vhci_hcd vhci_hcd.0: Device attached [ 1159.340068][T29268] comedi comedi3: pcl818: I/O base address or length out of range [ 1159.400433][T19873] usb 46-1: SetAddress Request (14) to port 0 [ 1159.400557][T19873] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1159.679653][T29272] vhci_hcd: connection reset by peer [ 1159.686411][ T5822] vhci_hcd vhci_hcd.4: stop threads [ 1159.686433][ T5822] vhci_hcd vhci_hcd.4: release socket [ 1159.686514][ T5822] vhci_hcd vhci_hcd.4: disconnect device [ 1159.878537][T29277] tipc: Enabling of bearer rejected, already enabled [ 1160.285664][T29280] comedi comedi3: pcl818: I/O base address or length out of range [ 1161.411275][T29296] comedi comedi3: pcl818: I/O base address or length out of range [ 1161.449412][T29307] tipc: Started in network mode [ 1161.451551][T29307] tipc: Node identity , cluster identity 4711 [ 1161.453839][T29307] tipc: Failed to obtain node identity [ 1161.455664][T29307] tipc: Enabling of bearer rejected, failed to enable media [ 1161.488831][T29310] tipc: Enabling of bearer rejected, already enabled [ 1162.657966][T29324] tipc: Started in network mode [ 1162.664376][T29324] tipc: Node identity , cluster identity 4711 [ 1162.666295][T29324] tipc: Failed to obtain node identity [ 1162.668123][T29324] tipc: Enabling of bearer rejected, failed to enable media [ 1163.006225][T29344] tipc: Started in network mode [ 1163.018027][T29344] tipc: Node identity , cluster identity 4711 [ 1163.020691][T29344] tipc: Failed to obtain node identity [ 1163.022818][T29344] tipc: Enabling of bearer rejected, failed to enable media [ 1164.095921][T29357] comedi comedi3: pcl818: I/O base address or length out of range [ 1164.260041][T29368] tipc: Enabling of bearer rejected, already enabled [ 1164.491682][T19873] usb 46-1: device descriptor read/8, error -110 [ 1165.266306][T29377] tipc: Started in network mode [ 1165.268110][T29377] tipc: Node identity , cluster identity 4711 [ 1165.270166][T29377] tipc: Failed to obtain node identity [ 1165.272756][T29377] tipc: Enabling of bearer rejected, failed to enable media [ 1165.342733][T19873] usb usb46-port1: attempt power cycle [ 1165.407583][T29372] comedi comedi3: pcl818: I/O base address or length out of range [ 1166.607565][T29403] tipc: Enabling of bearer rejected, already enabled [ 1166.622721][T19873] usb usb46-port1: unable to enumerate USB device [ 1167.915078][T29416] tipc: Started in network mode [ 1167.916930][T29416] tipc: Node identity , cluster identity 4711 [ 1167.919479][T29416] tipc: Failed to obtain node identity [ 1167.942686][T29416] tipc: Enabling of bearer rejected, failed to enable media [ 1169.045325][T29432] tipc: Started in network mode [ 1169.047379][T29432] tipc: Node identity , cluster identity 4711 [ 1169.049774][T29432] tipc: Failed to obtain node identity [ 1169.052407][T29432] tipc: Enabling of bearer rejected, failed to enable media [ 1169.653982][T29417] comedi comedi3: pcl818: I/O base address or length out of range [ 1169.657642][T29436] tipc: Started in network mode [ 1169.659689][T29436] tipc: Node identity , cluster identity 4711 [ 1169.663602][T29436] tipc: Failed to obtain node identity [ 1169.666079][T29436] tipc: Enabling of bearer rejected, failed to enable media [ 1171.549399][T29466] comedi comedi3: pcl818: I/O base address or length out of range [ 1171.583007][T29473] tipc: Started in network mode [ 1171.584757][T29473] tipc: Node identity , cluster identity 4711 [ 1171.586707][T29473] tipc: Failed to obtain node identity [ 1171.588437][T29473] tipc: Enabling of bearer rejected, failed to enable media [ 1174.807573][T29505] tipc: Started in network mode [ 1174.809387][T29505] tipc: Node identity , cluster identity 4711 [ 1174.814708][T29505] tipc: Failed to obtain node identity [ 1174.816895][T29505] tipc: Enabling of bearer rejected, failed to enable media [ 1175.783872][T29518] tipc: Started in network mode [ 1175.785512][T29518] tipc: Node identity , cluster identity 4711 [ 1175.787509][T29518] tipc: Failed to obtain node identity [ 1175.789324][T29518] tipc: Enabling of bearer rejected, failed to enable media [ 1175.969003][T29525] tipc: Started in network mode [ 1175.971723][T29525] tipc: Node identity , cluster identity 4711 [ 1175.974730][T29525] tipc: Failed to obtain node identity [ 1175.989661][T29525] tipc: Enabling of bearer rejected, failed to enable media [ 1176.962784][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.972113][T29547] tipc: Started in network mode [ 1177.973784][T29547] tipc: Node identity , cluster identity 4711 [ 1177.975687][T29547] tipc: Failed to obtain node identity [ 1177.977420][T29547] tipc: Enabling of bearer rejected, failed to enable media [ 1178.074104][T29552] tipc: Started in network mode [ 1178.075801][T29552] tipc: Node identity , cluster identity 4711 [ 1178.077932][T29552] tipc: Failed to obtain node identity [ 1178.079746][T29552] tipc: Enabling of bearer rejected, failed to enable media [ 1179.026864][T29555] tipc: Enabling of bearer rejected, already enabled [ 1180.913263][T29600] tipc: Started in network mode [ 1180.914798][T29600] tipc: Node identity , cluster identity 4711 [ 1180.915003][T29591] comedi comedi3: pcl818: I/O base address or length out of range [ 1180.916978][T29600] tipc: Failed to obtain node identity [ 1180.921561][T29600] tipc: Enabling of bearer rejected, failed to enable media [ 1180.925003][T29601] tipc: Started in network mode [ 1180.926615][T29601] tipc: Node identity , cluster identity 4711 [ 1180.928525][T29601] tipc: Failed to obtain node identity [ 1180.930915][T29601] tipc: Enabling of bearer rejected, failed to enable media [ 1182.585639][T29631] tipc: Started in network mode [ 1182.587229][T29631] tipc: Node identity , cluster identity 4711 [ 1182.589074][T29631] tipc: Failed to obtain node identity [ 1182.591721][T29631] tipc: Enabling of bearer rejected, failed to enable media [ 1183.569080][T29641] tipc: Started in network mode [ 1183.573029][T29641] tipc: Node identity , cluster identity 4711 [ 1183.648625][T29641] tipc: Failed to obtain node identity [ 1183.666550][T29641] tipc: Enabling of bearer rejected, failed to enable media [ 1184.906590][T29655] comedi comedi3: pcl818: I/O base address or length out of range [ 1185.909285][T29673] tipc: Started in network mode [ 1185.912859][T29673] tipc: Node identity , cluster identity 4711 [ 1185.914913][T29673] tipc: Failed to obtain node identity [ 1185.917142][T29673] tipc: Enabling of bearer rejected, failed to enable media [ 1187.325789][T29691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6434'. [ 1187.329507][T29691] FAULT_INJECTION: forcing a failure. [ 1187.329507][T29691] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.336000][T29691] CPU: 2 UID: 0 PID: 29691 Comm: syz.5.6434 Tainted: G L syzkaller #0 PREEMPT(full) [ 1187.336040][T29691] Tainted: [L]=SOFTLOCKUP [ 1187.336045][T29691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1187.336052][T29691] Call Trace: [ 1187.336058][T29691] [ 1187.336063][T29691] dump_stack_lvl+0x100/0x190 [ 1187.336091][T29691] should_fail_ex.cold+0x5/0xa [ 1187.336109][T29691] should_failslab+0xc2/0x120 [ 1187.336130][T29691] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1187.336148][T29691] ? skb_clone+0x190/0x400 [ 1187.336219][T29691] skb_clone+0x190/0x400 [ 1187.336237][T29691] genlmsg_multicast_allns+0x1a0/0x5a0 [ 1187.336275][T29691] l2tp_session_notify.constprop.0+0xfc/0x150 [ 1187.336333][T29691] ? l2tp_session_set_header_len+0xf2/0x200 [ 1187.336352][T29691] l2tp_nl_cmd_session_modify+0x3fe/0x540 [ 1187.336370][T29691] ? __pfx_l2tp_nl_cmd_session_modify+0x10/0x10 [ 1187.336388][T29691] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1187.336405][T29691] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1187.336425][T29691] genl_family_rcv_msg_doit+0x214/0x300 [ 1187.336442][T29691] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1187.336458][T29691] ? genl_get_cmd+0x3e7/0x760 [ 1187.336475][T29691] ? bpf_lsm_capable+0x9/0x10 [ 1187.336497][T29691] ? security_capable+0x80/0x260 [ 1187.336549][T29691] ? ns_capable+0xd2/0xf0 [ 1187.336567][T29691] genl_rcv_msg+0x560/0x800 [ 1187.336584][T29691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1187.336600][T29691] ? __pfx_l2tp_nl_cmd_session_modify+0x10/0x10 [ 1187.336619][T29691] ? __lock_acquire+0x49f/0x1a40 [ 1187.336643][T29691] netlink_rcv_skb+0x159/0x420 [ 1187.336656][T29691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1187.336673][T29691] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1187.336693][T29691] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1187.336708][T29691] genl_rcv+0x28/0x40 [ 1187.336722][T29691] netlink_unicast+0x585/0x850 [ 1187.336738][T29691] ? __pfx_netlink_unicast+0x10/0x10 [ 1187.336756][T29691] netlink_sendmsg+0x8b0/0xda0 [ 1187.336772][T29691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1187.336788][T29691] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1187.336813][T29691] ____sys_sendmsg+0xa4d/0xbe0 [ 1187.336833][T29691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1187.336852][T29691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1187.336872][T29691] ___sys_sendmsg+0x190/0x1e0 [ 1187.336887][T29691] ? __pfx____sys_sendmsg+0x10/0x10 [ 1187.336908][T29691] ? find_held_lock+0x2b/0x80 [ 1187.336932][T29691] __sys_sendmsg+0x160/0x210 [ 1187.336950][T29691] ? __pfx___sys_sendmsg+0x10/0x10 [ 1187.336971][T29691] ? __pfx_ksys_write+0x10/0x10 [ 1187.336989][T29691] __do_fast_syscall_32+0xe7/0x970 [ 1187.337007][T29691] ? lockdep_hardirqs_on+0x78/0x100 [ 1187.337024][T29691] do_fast_syscall_32+0x32/0x70 [ 1187.337041][T29691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1187.337057][T29691] RIP: 0023:0xf6fcefec [ 1187.337073][T29691] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 1187.337079][T29691] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1187.337095][T29691] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 1187.337105][T29691] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1187.337114][T29691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1187.337124][T29691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.337133][T29691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1187.337155][T29691] [ 1187.451870][T19873] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1187.575148][T29676] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd3": -EINTR [ 1187.606079][T19873] usb 9-1: device descriptor read/64, error -71 [ 1188.468812][T19873] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1188.547394][T29720] comedi comedi3: pcl818: I/O base address or length out of range [ 1188.600422][T19873] usb 9-1: device descriptor read/64, error -71 [ 1188.710579][T19873] usb usb9-port1: attempt power cycle [ 1188.934292][T29730] tipc: Started in network mode [ 1188.937543][T29730] tipc: Node identity , cluster identity 4711 [ 1188.941917][T29730] tipc: Failed to obtain node identity [ 1188.945065][T29730] tipc: Enabling of bearer rejected, failed to enable media [ 1189.134026][T19873] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1190.253704][T19873] usb 9-1: device descriptor read/8, error -71 [ 1191.231095][T10931] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1191.290908][T29734] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR [ 1191.391495][T29776] tipc: Started in network mode [ 1191.395851][T29776] tipc: Node identity , cluster identity 4711 [ 1191.397925][T29776] tipc: Failed to obtain node identity [ 1191.399680][T29776] tipc: Enabling of bearer rejected, failed to enable media [ 1191.420406][T10931] usb 10-1: Using ep0 maxpacket: 32 [ 1191.426370][T10931] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.431575][T10931] usb 10-1: config 0 has no interfaces? [ 1191.436743][T10931] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1191.446464][T10931] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1191.751204][T29784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6452'. [ 1192.284333][T10931] usb 10-1: Product: syz [ 1192.285768][T10931] usb 10-1: Manufacturer: syz [ 1192.287335][T10931] usb 10-1: SerialNumber: syz [ 1192.297393][T10931] usb 10-1: config 0 descriptor?? [ 1192.550941][T10931] usb 10-1: USB disconnect, device number 8 [ 1193.251366][T29827] tipc: Started in network mode [ 1193.253045][T29827] tipc: Node identity , cluster identity 4711 [ 1193.255084][T29827] tipc: Failed to obtain node identity [ 1193.256875][T29827] tipc: Enabling of bearer rejected, failed to enable media [ 1196.091308][T29854] tipc: Started in network mode [ 1196.093066][T29854] tipc: Node identity , cluster identity 4711 [ 1196.095056][T29854] tipc: Failed to obtain node identity [ 1196.096895][T29854] tipc: Enabling of bearer rejected, failed to enable media [ 1196.184466][T29859] tipc: Enabling of bearer rejected, already enabled [ 1196.485226][T29852] comedi comedi3: pcl818: I/O base address or length out of range [ 1197.413359][T29873] tipc: Started in network mode [ 1197.416943][T29873] tipc: Node identity , cluster identity 4711 [ 1197.422014][T29873] tipc: Failed to obtain node identity [ 1197.424499][T29873] tipc: Enabling of bearer rejected, failed to enable media [ 1197.535433][T29878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6472'. [ 1198.563544][T29923] tipc: Started in network mode [ 1198.565265][T29923] tipc: Node identity , cluster identity 4711 [ 1198.567356][T29923] tipc: Failed to obtain node identity [ 1198.569195][T29923] tipc: Enabling of bearer rejected, failed to enable media [ 1199.614862][T29930] tipc: Enabling of bearer rejected, already enabled [ 1200.288307][T29961] tipc: Started in network mode [ 1200.295056][T29961] tipc: Node identity , cluster identity 4711 [ 1200.297235][T29961] tipc: Failed to obtain node identity [ 1200.301306][T29961] tipc: Enabling of bearer rejected, failed to enable media [ 1201.055027][T29987] tipc: Started in network mode [ 1201.057145][T29987] tipc: Node identity , cluster identity 4711 [ 1201.060621][T29987] tipc: Failed to obtain node identity [ 1201.062868][T29987] tipc: Enabling of bearer rejected, failed to enable media [ 1201.257532][T29997] tipc: Started in network mode [ 1201.259534][T29997] tipc: Node identity , cluster identity 4711 [ 1201.264408][T29997] tipc: Failed to obtain node identity [ 1201.266710][T29997] tipc: Enabling of bearer rejected, failed to enable media [ 1201.359589][T30001] tipc: Started in network mode [ 1201.362721][T30001] tipc: Node identity , cluster identity 4711 [ 1201.365392][T30001] tipc: Failed to obtain node identity [ 1201.367614][T30001] tipc: Enabling of bearer rejected, failed to enable media [ 1202.000678][ T10] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1202.043844][T30037] tipc: Started in network mode [ 1202.045745][T30037] tipc: Node identity , cluster identity 4711 [ 1202.047896][T30037] tipc: Failed to obtain node identity [ 1202.049741][T30037] tipc: Enabling of bearer rejected, failed to enable media [ 1202.650891][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1203.209987][ T10] usb 8-1: device descriptor read/all, error -71 [ 1203.225613][T30049] bond3 (unregistering): Released all slaves [ 1203.398112][T30028] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd7": -EINTR [ 1203.671215][T30065] tipc: Enabling of bearer rejected, already enabled [ 1203.681174][T30060] comedi comedi3: pcl818: I/O base address or length out of range [ 1205.886083][T30113] tipc: Started in network mode [ 1205.887812][T30113] tipc: Node identity , cluster identity 4711 [ 1205.891726][T30113] tipc: Failed to obtain node identity [ 1205.894117][T30113] tipc: Enabling of bearer rejected, failed to enable media [ 1205.897946][T30114] tipc: Started in network mode [ 1205.900049][T30114] tipc: Node identity , cluster identity 4711 [ 1205.903740][T30114] tipc: Failed to obtain node identity [ 1205.905701][T30114] tipc: Enabling of bearer rejected, failed to enable media [ 1207.012740][T30118] tipc: Started in network mode [ 1207.014429][T30118] tipc: Node identity , cluster identity 4711 [ 1207.016427][T30118] tipc: Failed to obtain node identity [ 1207.018317][T30118] tipc: Enabling of bearer rejected, failed to enable media [ 1207.969035][T30167] tipc: Started in network mode [ 1207.971540][T30167] tipc: Node identity , cluster identity 4711 [ 1207.973660][T30167] tipc: Failed to obtain node identity [ 1207.975487][T30167] tipc: Enabling of bearer rejected, failed to enable media [ 1209.319306][T30185] FAULT_INJECTION: forcing a failure. [ 1209.319306][T30185] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.324929][T30185] CPU: 2 UID: 0 PID: 30185 Comm: syz.4.6514 Tainted: G L syzkaller #0 PREEMPT(full) [ 1209.324949][T30185] Tainted: [L]=SOFTLOCKUP [ 1209.324954][T30185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1209.324961][T30185] Call Trace: [ 1209.324966][T30185] [ 1209.324970][T30185] dump_stack_lvl+0x100/0x190 [ 1209.324995][T30185] should_fail_ex.cold+0x5/0xa [ 1209.325010][T30185] should_failslab+0xc2/0x120 [ 1209.325030][T30185] __kmalloc_cache_noprof+0x91/0x6c0 [ 1209.325044][T30185] ? io_uring_setup.cold+0x6c/0x1c2e [ 1209.325065][T30185] io_uring_setup.cold+0x6c/0x1c2e [ 1209.325083][T30185] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1209.325102][T30185] ? vfs_write+0x15d/0x1050 [ 1209.325114][T30185] ? __pfx_io_uring_setup+0x10/0x10 [ 1209.325143][T30185] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1209.325163][T30185] ? __pfx_vfs_write+0x10/0x10 [ 1209.325173][T30185] ? do_sys_openat2+0x159/0x1e0 [ 1209.325197][T30185] ? ksys_write+0x1ac/0x250 [ 1209.325208][T30185] ? __pfx_ksys_write+0x10/0x10 [ 1209.325220][T30185] __ia32_sys_io_uring_setup+0xc2/0x170 [ 1209.325234][T30185] __do_fast_syscall_32+0xe7/0x970 [ 1209.325255][T30185] ? lockdep_hardirqs_on+0x78/0x100 [ 1209.325272][T30185] do_fast_syscall_32+0x32/0x70 [ 1209.325292][T30185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1209.325308][T30185] RIP: 0023:0xf7fb2fec [ 1209.325322][T30185] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 1209.325328][T30185] RSP: 002b:00000000f547643c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 1209.325340][T30185] RAX: ffffffffffffffda RBX: 00000000000006d1 RCX: 0000000080000a88 [ 1209.325347][T30185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1209.325354][T30185] RBP: 00000000f54764fc R08: 0000000000000000 R09: 0000000000000000 [ 1209.325361][T30185] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1209.325367][T30185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1209.325381][T30185] [ 1209.568182][T30187] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1209.570549][T30187] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1209.660936][T30187] vhci_hcd vhci_hcd.0: Device attached [ 1209.750132][T24522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.753979][T24522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.796750][T30191] lo speed is unknown, defaulting to 1000 [ 1209.930625][ T10] usb 52-1: SetAddress Request (10) to port 0 [ 1209.932660][ T10] usb 52-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1210.216709][T30188] vhci_hcd: connection reset by peer [ 1210.218937][ T13] vhci_hcd vhci_hcd.7: stop threads [ 1210.225911][ T13] vhci_hcd vhci_hcd.7: release socket [ 1210.233360][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 1210.378000][T30212] tipc: Started in network mode [ 1210.379655][T30212] tipc: Node identity , cluster identity 4711 [ 1210.383277][T30212] tipc: Failed to obtain node identity [ 1210.385125][T30212] tipc: Enabling of bearer rejected, failed to enable media [ 1210.488693][T30222] mac80211_hwsim hwsim41 syzkaller0: Caught tx_queue_len zero misconfig [ 1210.492302][T30222] BUG: unable to handle page fault for address: fffffffffffffc10 [ 1210.494687][T30222] #PF: supervisor read access in kernel mode [ 1210.496565][T30222] #PF: error_code(0x0000) - not-present page [ 1210.499749][T30222] PGD e997067 P4D e997067 PUD e999067 PMD 0 [ 1210.502461][T30222] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 1210.504313][T30222] CPU: 2 UID: 0 PID: 30222 Comm: syz.3.6521 Tainted: G L syzkaller #0 PREEMPT(full) [ 1210.507704][T30222] Tainted: [L]=SOFTLOCKUP [ 1210.509099][T30222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1210.512361][T30222] RIP: 0010:strnlen+0x4b/0x80 [ 1210.513920][T30222] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 c0 87 07 00 48 [ 1210.519778][T30222] RSP: 0018:ffffc900075c7110 EFLAGS: 00010246 [ 1210.521713][T30222] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1210.524202][T30222] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 1210.526721][T30222] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 1210.529285][T30222] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 1210.531753][T30222] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 1210.534144][T30222] FS: 0000000000000000(0000) GS:ffff888096ddf000(0063) knlGS:00000000f548db40 [ 1210.536983][T30222] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1210.539093][T30222] CR2: fffffffffffffc10 CR3: 0000000056a5a000 CR4: 0000000000352ef0 [ 1210.541600][T30222] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1210.544048][T30222] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1210.546555][T30222] Call Trace: [ 1210.547663][T30222] [ 1210.548623][T30222] ? look_up_lock_class+0x55/0x120 [ 1210.550246][T30222] trace_event_raw_event_drv_net_setup_tc+0x100/0x5d0 [ 1210.552352][T30222] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 1210.554598][T30222] ? __pfx___might_resched+0x10/0x10 [ 1210.556307][T30222] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 1210.558181][T30222] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 1210.560199][T30222] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 1210.562119][T30222] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 1210.564143][T30222] ? __pfx_down_write+0x10/0x10 [ 1210.565706][T30222] tcf_block_get_ext+0x7ed/0x1950 [ 1210.567340][T30222] tcf_block_get+0xa8/0x100 [ 1210.568810][T30222] ? __pfx_tcf_block_get+0x10/0x10 [ 1210.570474][T30222] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1210.572421][T30222] ? lockdep_init_map_type+0x5c/0x250 [ 1210.574126][T30222] ? __pfx_multiq_init+0x10/0x10 [ 1210.575674][T30222] multiq_init+0x70/0x2b0 [ 1210.577077][T30222] ? __pfx_multiq_init+0x10/0x10 [ 1210.578632][T30222] qdisc_create+0x47b/0x1060 [ 1210.580123][T30222] tc_modify_qdisc+0xdcf/0x2120 [ 1210.581738][T30222] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1210.583456][T30222] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1210.585185][T30222] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1210.586815][T30222] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1210.588751][T30222] ? ref_tracker_free+0x37e/0x6c0 [ 1210.590603][T30222] netlink_rcv_skb+0x159/0x420 [ 1210.592167][T30222] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1210.593917][T30222] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1210.595661][T30222] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1210.597394][T30222] netlink_unicast+0x585/0x850 [ 1210.598926][T30222] ? __pfx_netlink_unicast+0x10/0x10 [ 1210.600623][T30222] netlink_sendmsg+0x8b0/0xda0 [ 1210.602147][T30222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1210.603866][T30222] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1210.605721][T30222] ____sys_sendmsg+0xa4d/0xbe0 [ 1210.607161][T30222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1210.608778][T30222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1210.610490][T30222] ? plist_check_list+0x1b8/0x280 [ 1210.612189][T30222] ? plist_del+0x308/0x510 [ 1210.613651][T30222] ___sys_sendmsg+0x190/0x1e0 [ 1210.615201][T30222] ? __pfx____sys_sendmsg+0x10/0x10 [ 1210.616897][T30222] ? futex_wake+0x220/0x5e0 [ 1210.618368][T30222] ? find_held_lock+0x2b/0x80 [ 1210.619886][T30222] __sys_sendmsg+0x160/0x210 [ 1210.621400][T30222] ? __pfx___sys_sendmsg+0x10/0x10 [ 1210.623061][T30222] __do_fast_syscall_32+0xe7/0x970 [ 1210.624755][T30222] do_fast_syscall_32+0x32/0x70 [ 1210.626312][T30222] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1210.628320][T30222] RIP: 0023:0xf709efec [ 1210.629654][T30222] Code: Unable to access opcode bytes at 0xf709efc2. [ 1210.631806][T30222] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1210.634755][T30222] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800012c0 [ 1210.637452][T30222] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1210.639909][T30222] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1210.642461][T30222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1210.644983][T30222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1210.647474][T30222] [ 1210.648521][T30222] Modules linked in: [ 1210.649803][T30222] CR2: fffffffffffffc10 [ 1210.651159][T30222] ---[ end trace 0000000000000000 ]--- [ 1210.652896][T30222] RIP: 0010:strnlen+0x4b/0x80 [ 1210.654393][T30222] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 c0 87 07 00 48 [ 1210.660440][T30222] RSP: 0018:ffffc900075c7110 EFLAGS: 00010246 [ 1210.662403][T30222] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1210.664846][T30222] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 1210.667350][T30222] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 1210.669895][T30222] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 1210.672294][T30222] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 1210.674739][T30222] FS: 0000000000000000(0000) GS:ffff888096ddf000(0063) knlGS:00000000f548db40 [ 1210.677544][T30222] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1210.679580][T30222] CR2: 00000000f709f000 CR3: 0000000056a5a000 CR4: 0000000000352ef0 [ 1210.682070][T30222] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1210.684585][T30222] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1210.687024][T30222] Kernel panic - not syncing: Fatal exception [ 1210.689479][T30222] Kernel Offset: disabled [ 1210.690904][T30222] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:34:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81fd1ee2 RDX=ffff88802919ca80 RSI=ffffffff81fd1ebc RDI=ffff88802919ca80 RBP=ffff88802b441380 RSP=ffffc90005fdf538 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000003 R13=ffffed1005688271 R14=0000000000000001 R15=ffff88802b23c9c0 RIP=ffffffff81fd1ebe RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdd56c0fa90 CR3=00000000620b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000015af000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c742540 RSI=ffffffff81b51ece RDI=ffff88801c742540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5413ff4 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0c1f5 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc900075c6970 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9b6f7217 R15=ffffffff85a0c190 RIP=ffffffff85a0c21f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffffffffffffc10 CR3=0000000056a5a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c7f2540 RSI=ffffffff81b51ece RDI=ffff88801c7f2540 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2c818d1140 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000