last executing test programs: 8m30.803318639s ago: executing program 0 (id=3710): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={0x1, 0xff, "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"}, &(0x7f0000000340)=0x107) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in={{0x2, 0x4e24, @broadcast}}, 0x6, 0x1ff, 0x3, 0xa, 0x1, 0x90, 0xd}, 0x9c) r2 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='\x00', &(0x7f00000004c0)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x180000}, &(0x7f0000000140)=0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r4 = memfd_create(&(0x7f0000000300)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) io_setup(0x3ff, &(0x7f0000000200)=0x0) sendmmsg(r5, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r5, 0x0}]) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1}) 8m30.733693155s ago: executing program 0 (id=3712): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000e2ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xc8948000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000000)=""/106, &(0x7f0000000340)="9ae7176fcfa6c9cdf18eb88343cc26f92a506e3aa151e2e908feb05bc394cab9da1dd7c7a678a6498484418bedbfbe3391047018ef9c370565215e157af7b258232ac3146bac994b8f2c41651ae16d8c6f0fe6bcb59ec0eef36e3b689089909c2e7f1a8313c110b1f24cad9e6521a7e663f6a93837c6a788d64276d9ab436115511a93a9b20802beca7b8ebfbec9f3bcdbafec565ed7adf31c7375952906b7c3b2c76fa83df3899e92e1c7346f81e34a5d318f8a5cbc45478fcb87a873a5c090a350477fed6d6e4380031f71a5b8a9454ac05a5d4b649a3b7c2fced54fd75b5113b366090a7847b5224e5bb21e5372ab7baf080d0dd4c355397dc3a4c49a0ebc55b286f3b045e69da691e8b2f151f7d648e8191a52b23d8e88344828b9c297e7cf1790cdf5da20f6ab3bf4d9ec32e8fd871ee0abba0b7f2b373e83923a2a6c43fcea017ace", &(0x7f00000004c0), 0x80, r6, 0x0, 0x7}, 0x38) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x92}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0x801) r7 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r7, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000001100)={0xa, 0x1, 0x0, @loopback}, 0x1c) recvmmsg(r7, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0xa569}], 0x1, 0x40010162, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xe}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x8, 0x10000, 0x44, @dev={0xfe, 0x80, '\x00', 0x44}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x40, 0x2, 0x8}}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r11, &(0x7f0000000600)='res', 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f00000001c0)=@raw=[@alu={0xa, 0x0, 0xb, 0x4, 0x7, 0x2, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f0000000540)='syzkaller\x00', 0xbad, 0x0, 0x0, 0x40f00, 0x2, '\x00', r10, 0x25, r11, 0x8, &(0x7f0000000740)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x10, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000007c0)=[{0x2, 0x4, 0x4, 0x6}, {0x4, 0x3, 0x10, 0x8}, {0x1, 0x4, 0x10, 0xc}], 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe7c, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @map_fd={0x18, 0x5}]}, &(0x7f0000000a40)='syzkaller\x00', 0x800, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x19, r11, 0x8, &(0x7f0000000a80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x6, 0x7ff, 0x100}, 0x10, 0x2b9e7, r0, 0x4, 0x0, &(0x7f0000000b80)=[{0x5, 0x2, 0x8, 0xa}, {0x2, 0x4, 0xe, 0x8}, {0x2, 0x3, 0x7, 0x1}, {0x3, 0x3, 0x7, 0xc}], 0x10, 0x1}, 0x94) 8m29.68620659s ago: executing program 0 (id=3721): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000019180)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000019100)={&(0x7f0000019340)=ANY=[@ANYBLOB="200000001214000427bd7077b3832b6d61d7b31dcb55f15a969378f6332f8d5f0d00030000000803000013000000ffaa4c86bcb35c404198224bb6f983e1b8b6bf7429373cda69f00f3e5761c898fe80ba31c938a455735ab5a2ac6ef1d5"], 0x20}, 0x1, 0x0, 0x0, 0x40095}, 0x60048804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_80211_inject_frame(&(0x7f0000000900)=@device_b, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$sw_sync_info(0xffffff9c, 0x0, 0x690000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000200)={0x0, 0x0, 0xe, 0x3, 0x1}) write$cgroup_int(r3, &(0x7f0000000040)=0x8000000001cb, 0x12) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) syz_open_procfs(0x0, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x180000) setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000019300)={&(0x7f00000191c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000192c0)={&(0x7f0000019240)={0x7c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7098}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x8, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x14d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x40000001, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x3, 0x5, 0x6, 0x8, 0x4, 0x80000001, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0xc, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x8, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0xffffff75, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x17, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0x2, 0x3, 0x7f, 0x108, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0xfffffffe, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x20006c1f, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) 8m27.924433171s ago: executing program 0 (id=3727): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x1, 0xb, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x700, 0x80, 0x3, 0x9}}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b9c4d9673797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140005007e05000017200000000000000000000005010100a1018521151f26ff00750895308102c0"], 0x12c) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000700)=ANY=[@ANYBLOB='\f\x00\x00\x001\x00!'], 0x37) r2 = userfaultfd(0x800) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x44, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x3, 0x9, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040841}, 0x4000840) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r7, @ANYBLOB="8000260b0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r8, &(0x7f0000000180)='0', 0x1) write(r8, &(0x7f00000001a0)='1', 0x1) 8m23.600494841s ago: executing program 0 (id=3748): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_vs\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000019080)={0x0, 0x0, "2734fd0396f1820c0dad7f222ce140f5f2724f8a424a586f443cb62d01000080ff5a483676cb5edeb06c9500cfbf27b503fb56f886d7ddb0172c647d97d957e53885ba7394ccf32ea2024e726436025758fd796ad6f5971a64e69ef431ead7fbcb45eb4e8e0a442e0048e8d6eca35ee858e0a562078252f3ac1a820df4948845455ab082544c93f2d5173b1770080012f165fddaf20cd03f6c66fda6ef37e1a3df106e346a90e052c3cab743dbb1b604e69c6f7c8b504ea5eadb60695c296afc02a77b26ed66c954de07cccaf090fd14410100000031d05e0d33060d2e9595085c60fff54ae872d9360a4200", "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"}) socket$inet6(0xa, 0x80003, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) io_uring_setup(0xf02, &(0x7f000001a080)={0x0, 0x8000ab4e, 0x200, 0x10000001, 0x1000002, 0x0, r0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001cc0)=@filter={'filter\x00', 0x42, 0x4, 0x314, 0xffffffff, 0x0, 0x18c, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x9c, 0xc0, 0x0, {0x100000000000000}, [@common=@unspec=@connmark={{0x2c}, {0x5}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x33, {0xd4e}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb4, 0xf4, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x370) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x2000413, &(0x7f0000019080)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0xfff, {0x7, 0x29, 0xcf940281, 0xa00010, 0x1, 0x3a76, 0x10, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593f16430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccce2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f13132773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde070a004c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912f3fcd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5326a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0xffffffffffffff9f, 0x10000000008, 0x8, 0x40000000000003, 0xfffffffffffffffe, 0xe0a, 0x0, 0x52, 0xa593e9c1ca988eda, 0xfffffff8, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 8m22.598158735s ago: executing program 0 (id=3750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000e2ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xc8948000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000000)=""/106, &(0x7f0000000340)="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", &(0x7f00000004c0), 0x80, r6, 0x0, 0x7}, 0x38) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x92}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0x801) r7 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r7, &(0x7f0000000000), 0x0, 0x48840, &(0x7f0000001100)={0xa, 0x1, 0x0, @loopback}, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xe}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x8, 0x10000, 0x44, @dev={0xfe, 0x80, '\x00', 0x44}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x40, 0x2, 0x8}}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r11, &(0x7f0000000600)='res', 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f00000001c0)=@raw=[@alu={0xa, 0x0, 0xb, 0x4, 0x7, 0x2, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f0000000540)='syzkaller\x00', 0xbad, 0x0, 0x0, 0x40f00, 0x2, '\x00', r10, 0x25, r11, 0x8, &(0x7f0000000740)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x10, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000007c0)=[{0x2, 0x4, 0x4, 0x6}, {0x4, 0x3, 0x10, 0x8}, {0x1, 0x4, 0x10, 0xc}], 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe7c, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @map_fd={0x18, 0x5}]}, &(0x7f0000000a40)='syzkaller\x00', 0x800, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x19, r11, 0x8, &(0x7f0000000a80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x6, 0x7ff, 0x100}, 0x10, 0x2b9e7, r0, 0x5, 0x0, &(0x7f0000000b80)=[{0x5, 0x2, 0x8, 0xa}, {0x2, 0x4, 0xe, 0x8}, {0x2, 0x3, 0x7, 0x1}, {0x3, 0x3, 0x7, 0xc}, {0x0, 0x5, 0x8, 0x1}], 0x10, 0x1}, 0x94) 8m22.578945897s ago: executing program 32 (id=3750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000e2ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xc8948000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000000)=""/106, &(0x7f0000000340)="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", &(0x7f00000004c0), 0x80, r6, 0x0, 0x7}, 0x38) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x92}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0x801) r7 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r7, &(0x7f0000000000), 0x0, 0x48840, &(0x7f0000001100)={0xa, 0x1, 0x0, @loopback}, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xe}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x8, 0x10000, 0x44, @dev={0xfe, 0x80, '\x00', 0x44}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x40, 0x2, 0x8}}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r11, &(0x7f0000000600)='res', 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f00000001c0)=@raw=[@alu={0xa, 0x0, 0xb, 0x4, 0x7, 0x2, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f0000000540)='syzkaller\x00', 0xbad, 0x0, 0x0, 0x40f00, 0x2, '\x00', r10, 0x25, r11, 0x8, &(0x7f0000000740)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x10, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000007c0)=[{0x2, 0x4, 0x4, 0x6}, {0x4, 0x3, 0x10, 0x8}, {0x1, 0x4, 0x10, 0xc}], 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe7c, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @map_fd={0x18, 0x5}]}, &(0x7f0000000a40)='syzkaller\x00', 0x800, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x19, r11, 0x8, &(0x7f0000000a80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x6, 0x7ff, 0x100}, 0x10, 0x2b9e7, r0, 0x5, 0x0, &(0x7f0000000b80)=[{0x5, 0x2, 0x8, 0xa}, {0x2, 0x4, 0xe, 0x8}, {0x2, 0x3, 0x7, 0x1}, {0x3, 0x3, 0x7, 0xc}, {0x0, 0x5, 0x8, 0x1}], 0x10, 0x1}, 0x94) 4m35.871850883s ago: executing program 2 (id=4618): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3fc, 0x204, 0x940c, 0x3002, 0x334, 0x2c0, 0x334, 0x3d8, 0x3d8, 0x334, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1bc, 0x204, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@socket2={{0x24}, 0x74fd9bf453f1c267}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x9, 0x80000000, 'snmp_trap\x00', {0x3}}}}, {{@ipv6={@loopback, @private0, [0x0, 0x0, 0xffffff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'veth0_to_team\x00', 'lo\x00', {0xff}, {}, 0x1, 0x3, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x9, 0x6, 0x2, 'snmp\x00', 'syz0\x00', {0xbd1a}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x458) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x1f4, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x3, 0x6, 0x0, {0x5, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x8, 0x9, 0x1}}, @NL80211_ATTR_IE={0x1c0, 0x2a, [@measure_req={0x26, 0x86, {0x3, 0x2, 0x6, "599302f0e8a7e48ba8ad7f9a37ad1cf632a34a357bf4f3014e32cad5ee23ff6aba5007d66a862f810a72cafd01515964239821c82e3fc7173eca75be20e418951616d79a53d0a31b7a1007808d8ecece4d961861412f4f2b8aa981d0b7d557c74d80c415c4e287e9bf13b514394df8696644e3856c1df300c098dab7e839c498d97c2b"}}, @mesh_chsw={0x76, 0x6, {0x7, 0x4, 0x2, 0x8d6}}, @gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0x122, {0x52, 0x12, [{{}, @device_b, 0xa4, @void, 0x29}, {{0x0, 0x1}, @broadcast, 0xffffffff, @value, 0xb}, {{}, @device_a, 0xdc7, @void, 0x6}, {{}, @device_a, 0x3, @void, 0x2c}, {{}, @device_b, 0x6, @void, 0x2}, {{}, @broadcast, 0xfffc0000, @void, 0x32}, {{}, @broadcast, 0x8, @void, 0xb}, {{0x0, 0x1}, @device_b, 0x7f, @value, 0x3e}, {{}, @device_b, 0x62a3, @void, 0x21}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x30}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x39}, {{}, @device_b, 0xfffffbff, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x1b}, {{0x0, 0x1}, @broadcast, 0xfffffffe, @value=@device_b, 0x3}, {{0x0, 0x1}, @device_b, 0x10, @value=@device_b, 0x13}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x20}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x21}, {{}, @device_b, 0xd, @void, 0xf8ce}]}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8a0}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) 4m35.776983538s ago: executing program 2 (id=4620): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000034001a8008000000020000002800048024000180080001000100000008000200", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="060004"], 0x54}}, 0x0) 4m35.77492403s ago: executing program 2 (id=4622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0xf5ff, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 4m35.691530929s ago: executing program 2 (id=4624): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./dev\x00', 0x121) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000240)="1b0000001a0025f00385bc04fef7681d0a0b49ff7088000080022800", 0x1c) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x40, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0xc000) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(&(0x7f0000000040), &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='naa.', 0x4) write(r2, &(0x7f0000000380)='NULL', 0x4) close(r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x200) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) (async) pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000540)=0x6e) 4m35.691262946s ago: executing program 2 (id=4625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0185649, &(0x7f00000002c0)={0xf000000, 0x200, 0x7fff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa30904, 0x2, '\x00', @string=0x0}}) chroot(0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001e}}, 0x1c}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008000500000000202c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x80) r5 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000180)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000100)=0x7ff}) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f0000000040)={0x2, 0x9, 0x505b, 0x4, 0x5caec93a, 0x400, "fd2eb7c796ff2bb4e498d57087b80550", 0xff, 0x80, 0x8, 0x6, 0x40, 0x5, 0x5}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x32) 4m35.475952951s ago: executing program 2 (id=4631): r0 = gettid() r1 = syz_io_uring_setup(0x5dec, &(0x7f0000000340)={0x0, 0xfffffffd, 0x1, 0x0, 0x371}, &(0x7f0000000440), &(0x7f0000000300), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) r2 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10, 0x110, 0xa, "a348"}], 0x10}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r3, &(0x7f0000000200)=""/248, 0xf8, 0x5, 0x0) 4m35.286799167s ago: executing program 33 (id=4631): r0 = gettid() r1 = syz_io_uring_setup(0x5dec, &(0x7f0000000340)={0x0, 0xfffffffd, 0x1, 0x0, 0x371}, &(0x7f0000000440), &(0x7f0000000300), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) r2 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10, 0x110, 0xa, "a348"}], 0x10}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r3, &(0x7f0000000200)=""/248, 0xf8, 0x5, 0x0) 5.950454522s ago: executing program 4 (id=5947): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x20, "", [{{0x9, 0x4, 0x0, 0x18, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1001, 0xb, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) open(0x0, 0x4827e, 0xdc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r6, 0x16, 0x0, @void}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r8, &(0x7f00000000c0)='.\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@gettaction={0x18, 0x32, 0x6dd711a25f4cb68b, 0x70bd25, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000080)={0x40, 0x23, 0xf0, {0xf0, 0x7, "c862c3f9b35893979a94c299d8ed8f15ceae884d0befa36db6a14cae8565ed305967851a6c6f5ca77b326de1419f68eeb7598920082f0ed4c02c875b6ab7fa9aa2bd5e65703f43c532fd68a74b8c3708ad2d8329c2c42bea449f7c96ac67b6f35cd521effb33872797156dc42a3c7e26a504b16d6df1b47b65011551a63e4bda3f1a1c45006c6a1ec697c7bd6a74ae8d5efaf54cf43173daa8f30666efec1c9178ad2f013c93904dd7a0fe7d8b301b44862c5ddebe35cad30fe2e2298ee54898dfd62d5238a835131daf4c06fefa5bdf1a5548d298f5d652e65314ca12b169510a53ae967abbeb9a7b126ff48cc8"}}, &(0x7f0000000180)={0x0, 0x3, 0x82, @string={0x82, 0x3, "efc0d701fb5ec60c8d9a4775af21f4e8aa507374744cb761be3e33f203bfde29f1c748cd6c5ac03cbc0efc5286169392c433a8285e0a65948da588a5975b84f12d8111749f4634209ef8b7fc47f27c3c4b76663f8fbae0b4dfd2538f9abc8afc7ac010bbf3c9b9e3b568231f73c75d0783539301c18575f0b9f836a3b525e79b"}}, &(0x7f0000000240)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x8, "c65a"}, @local=@item_012={0x2, 0x2, 0x2, "eefb"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0xcc6}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x0, 0x17, 0x12, "5c9273aa77f4fa6d09ea25e9da33d54abb4b"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x1, 0x98, "86fe5f62d337521b1cb1c71fb161a22493e648fdab4784fd9581c8513dfedd640e7453339bd6416939e886cbfdac90eee4df51c829d12a29f941f6904ab0d7828e02fc669a7e6258344e1535846edd3deb11e5c7a31f1424e36ba61562fe23608cfc3baa31026820e8b7c9948a2371ed16b74d39671501bfb5ccea5d8b24af0c46a1c29d6957fd8083afd253a755878b52bca2f838ed214f"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xc}}) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x8, "07579985"}, @global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) 4.120853477s ago: executing program 5 (id=5970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x3, 0x0, @pic={0x6, 0xf9, 0x7c, 0x1, 0x0, 0x5, 0x2, 0x9, 0xf7, 0x8, 0x7, 0x7, 0x0, 0x6, 0x2, 0xf}}) 4.040238558s ago: executing program 5 (id=5971): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) close_range(r0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 3.827786211s ago: executing program 5 (id=5981): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x1c1, &(0x7f00000009c0)=ANY=[@ANYBLOB="12011001020000202505a1a44000010203010902af01020100c0040904000001020d00000824060001d80061052400000004240f010900000007000408241c0700f709003b24130c5063c5ab9b35b25b64d2175211fb12d17836337e36cf1beb3186ea40e2182bfca65129668cb032931c7f7dac69909356780352f4c1e8b2f5241380923efb0b6805c868601d1d73c2cfe1d0159790e0b7cc55092cd75b293078d915674e2c586d78a7ff6332580bae9554c71e7c7c6502a9e045d703dee6db3b77ff3fade0b62b4dc0f6fca3e00c7f63917dd759e4c84c8b6274bbe86ff3d243bdb6a1f6188cc17ac68bcf775fca5f7d76db926ae842a62ccc648790da314b8e51bbfd17f1d5dee8e846ea4ac318424c17d7214777f0851998f12e099091a86e67bb4ef001e0b9c7802e9f2eef7e2bfa91f8eecd0408bf8eff836ec131f6f802f80b14bead00006ae4ab30e6acb6566fc3533a6445ed97b1e8f02f96dfcb5dc607cdaa523f0cb25c707c63ecf1a387840fd3b5f2db164fff620c241b07000101040205000f052401000107240ae202da09090581032000ff06e60904010000020f0000090401010202"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) io_uring_setup(0x47ee, 0x0) 2.210738773s ago: executing program 5 (id=5989): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x40}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00'], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 2.185406414s ago: executing program 3 (id=5991): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.130989722s ago: executing program 5 (id=5992): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) openat$null(0xffffff9c, &(0x7f0000000040), 0xa0403, 0x0) socket(0x2b, 0x1, 0x1) move_pages(0x0, 0x41, 0x0, 0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000000010000c013fb", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28, @ANYRESHEX=0x0], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 2.130774418s ago: executing program 3 (id=5993): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 2.050010349s ago: executing program 4 (id=5995): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) bind$packet(r1, &(0x7f0000000080)={0x11, 0x6, 0x0, 0x1, 0x0, 0x6, @random="e855ff0dcf7d"}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa010606"], 0x0) 2.049807346s ago: executing program 4 (id=5996): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000900)=@ethtool_gstrings={0x1b, 0x7}}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x1, 0x0, 0x0}) 1.949606658s ago: executing program 3 (id=5998): setns(0xc9, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4045) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') read$FUSE(r0, &(0x7f0000005a80)={0x2020}, 0x2020) 1.750952301s ago: executing program 4 (id=6000): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000048c0)={'icmp6\x00'}, &(0x7f0000004900)=0x1e) 1.701057238s ago: executing program 4 (id=6001): socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 1.529947159s ago: executing program 3 (id=6003): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 1.529661646s ago: executing program 4 (id=6004): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000040)=0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x5}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000009cdb18738153fcba249a6ac0fd060000000000000000", @ANYRES32, @ANYBLOB], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x222822, 0x101) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r5, 0x4) sendmsg$AUDIT_GET(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x10) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x4b, 0x21, 0xfffffffffffffffe}}) 1.320254774s ago: executing program 3 (id=6005): connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) unshare(0x62020600) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, 0x0, 0x0}, 0x20) 1.117997047s ago: executing program 5 (id=6006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 729.016759ms ago: executing program 1 (id=6007): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000007, 0x2000002, 0x401c031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$802154_dgram(r0, &(0x7f00000001c0)={0x2, @none={0x0, 0x2}}, 0x14) 723.295155ms ago: executing program 1 (id=6008): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xe10, 0x80000001f000000}) pread64(r0, &(0x7f0000001600)=""/4073, 0xfe9, 0x3fffffffffff8) r2 = socket(0x2, 0x3, 0x100) socketpair(0x10, 0x5, 0x2, &(0x7f00000001c0)) connect$inet(r2, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r3, 0x0, 0x61) syz_usb_connect(0x6, 0x32, &(0x7f0000000000)=ANY=[], 0x0) timer_create(0x5, &(0x7f00000003c0)={0x0, 0x20, 0x4, @thr={&(0x7f0000000580)="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", &(0x7f0000000300)="23e8b4652f161dd9358950edd777b9de2a916966a2c5331f7a7a209698e6bc764be7fd1ac5ca06ac3a8ee007c73fb0c2631ed74e30c84f9cec4553bad5bf309f8750043ee84729cb0fb9cca239603392d10bb5a6021de63906e050df223bf38f61f7e75c964b8e0c8a63f2a76ab4d93116b670d46e1d7ef3c1ed4f51311cc89e6305a3ca5ef44988550ac719d7f5deabf11f3e1abd8f26c59f10ae9fa16c2f79ab5058343985ef50294cd5a2db"}}, &(0x7f0000000400)) r4 = getpgrp(0xffffffffffffffff) prlimit64(r4, 0x0, &(0x7f0000000000)={0x8}, &(0x7f0000000080)) 261.008466ms ago: executing program 3 (id=6009): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) 90.895411ms ago: executing program 1 (id=6010): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 90.785533ms ago: executing program 1 (id=6011): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) 192.954µs ago: executing program 1 (id=6012): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x22020600) close(r0) pidfd_send_signal(r0, 0x11, 0x0, 0x0) 0s ago: executing program 1 (id=6013): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ll slaves [ 1726.324989][T27594] fuse: Unknown parameter 'grou00000000000000000000' [ 1726.355189][T27596] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5478'. [ 1726.367316][ T44] audit: type=1326 audit(1791449004.569:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27591 comm="syz.5.5476" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94fec code=0x0 [ 1726.375627][T27599] fuse: Bad value for 'fd' [ 1726.759192][T27607] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5480'. [ 1726.764224][T25231] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1726.991055][T27617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5481'. [ 1726.997872][T27617] FAULT_INJECTION: forcing a failure. [ 1726.997872][T27617] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.997894][T27617] CPU: 2 UID: 0 PID: 27617 Comm: syz.4.5481 Tainted: G L syzkaller #0 PREEMPT(full) [ 1726.997910][T27617] Tainted: [L]=SOFTLOCKUP [ 1726.997915][T27617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1726.997922][T27617] Call Trace: [ 1726.997926][T27617] [ 1726.997932][T27617] dump_stack_lvl+0x100/0x190 [ 1726.997952][T27617] should_fail_ex.cold+0x5/0xa [ 1726.997968][T27617] should_failslab+0xc2/0x120 [ 1726.997988][T27617] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1726.998005][T27617] ? __kernfs_new_node+0xd2/0xa10 [ 1726.998027][T27617] __kernfs_new_node+0xd2/0xa10 [ 1726.998047][T27617] ? __pfx___kernfs_new_node+0x10/0x10 [ 1726.998067][T27617] ? lock_acquire+0x1d1/0x380 [ 1726.998084][T27617] ? kernfs_root+0x23/0x2a0 [ 1726.998100][T27617] ? find_held_lock+0x2b/0x80 [ 1726.998114][T27617] ? kernfs_root+0xee/0x2a0 [ 1726.998129][T27617] ? kernfs_root+0xee/0x2a0 [ 1726.998148][T27617] kernfs_new_node+0x117/0x150 [ 1726.998168][T27617] __kernfs_create_file+0x53/0x350 [ 1726.998183][T27617] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1726.998203][T27617] internal_create_group+0x593/0xfb0 [ 1726.998222][T27617] ? kobject_init_and_add+0x129/0x180 [ 1726.998237][T27617] ? __pfx_internal_create_group+0x10/0x10 [ 1726.998253][T27617] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1726.998266][T27617] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 1726.998281][T27617] ? ___sys_sendmsg+0x190/0x1e0 [ 1726.998297][T27617] ? __sys_sendmsg+0x160/0x210 [ 1726.998308][T27617] ? __do_fast_syscall_32+0x13a/0x8b0 [ 1726.998326][T27617] ? do_fast_syscall_32+0x32/0x70 [ 1726.998335][T27617] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1726.998353][T27617] internal_create_groups+0x9d/0x150 [ 1726.998372][T27617] net_rx_queue_update_kobjects+0xc7/0x760 [ 1726.998393][T27617] ? kset_register+0x1bb/0x290 [ 1726.998408][T27617] netdev_register_kobject+0x2c6/0x410 [ 1726.998428][T27617] register_netdevice+0x15b6/0x25a0 [ 1726.998446][T27617] ? __pfx_register_netdevice+0x10/0x10 [ 1726.998464][T27617] bond_newlink+0x6a/0x100 [ 1726.998477][T27617] ? __pfx_bond_newlink+0x10/0x10 [ 1726.998489][T27617] rtnl_newlink+0x1697/0x2620 [ 1726.998508][T27617] ? __pfx_rtnl_newlink+0x10/0x10 [ 1726.998523][T27617] ? rcu_is_watching+0x13/0xc0 [ 1726.998548][T27617] ? find_held_lock+0x2b/0x80 [ 1726.998564][T27617] ? lock_acquire+0x1d1/0x380 [ 1726.998580][T27617] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1726.998595][T27617] ? find_held_lock+0x2b/0x80 [ 1726.998608][T27617] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1726.998628][T27617] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1726.998645][T27617] ? __pfx_rtnl_newlink+0x10/0x10 [ 1726.998660][T27617] rtnetlink_rcv_msg+0x95e/0xe90 [ 1726.998677][T27617] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1726.998697][T27617] ? ref_tracker_free+0x37e/0x6c0 [ 1726.998719][T27617] netlink_rcv_skb+0x159/0x420 [ 1726.998736][T27617] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1726.998758][T27617] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1726.998782][T27617] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1726.998809][T27617] netlink_unicast+0x585/0x850 [ 1726.998823][T27617] ? __pfx_netlink_unicast+0x10/0x10 [ 1726.998838][T27617] netlink_sendmsg+0x8b0/0xda0 [ 1726.998872][T27617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.998886][T27617] ? apparmor_socket_sendmsg+0x165/0x280 [ 1726.998910][T27617] ____sys_sendmsg+0xa4d/0xbe0 [ 1726.998926][T27617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.998940][T27617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1726.998965][T27617] ___sys_sendmsg+0x190/0x1e0 [ 1726.998984][T27617] ? __pfx____sys_sendmsg+0x10/0x10 [ 1726.999002][T27617] ? futex_wait+0x11e/0x370 [ 1726.999023][T27617] ? find_held_lock+0x2b/0x80 [ 1726.999048][T27617] __sys_sendmsg+0x160/0x210 [ 1726.999062][T27617] ? __pfx___sys_sendmsg+0x10/0x10 [ 1726.999083][T27617] __do_fast_syscall_32+0x13a/0x8b0 [ 1726.999104][T27617] do_fast_syscall_32+0x32/0x70 [ 1726.999115][T27617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1726.999132][T27617] RIP: 0023:0xf7fa3fec [ 1726.999147][T27617] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 1726.999153][T27617] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1726.999165][T27617] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1726.999172][T27617] RDX: 00000000097a09f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1726.999180][T27617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1726.999186][T27617] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1726.999193][T27617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1726.999208][T27617] [ 1727.002740][T27617] bond8 (unregistered): Released all slaves [ 1727.041629][T25231] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1727.158076][T25231] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1727.158107][T25231] usb 10-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1727.158129][T25231] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1727.299470][T25231] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1727.353962][T25231] usb 10-1: Product: syz [ 1727.353981][T25231] usb 10-1: Manufacturer: syz [ 1727.353994][T25231] usb 10-1: SerialNumber: syz [ 1727.386793][T25231] usb 10-1: config 0 descriptor?? [ 1727.388122][T27597] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1727.395769][T25231] usb 10-1: selecting invalid altsetting 0 [ 1727.551391][T27635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1727.577335][T27635] random: crng reseeded on system resumption [ 1729.149161][T27655] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5486'. [ 1729.281392][T27657] fuse: Unknown parameter 'group_i00000000000000000000' [ 1729.342683][T27660] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5488'. [ 1729.566245][T27668] fuse: Bad value for 'fd' [ 1729.725763][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.725793][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.872440][T25231] usb 10-1: USB disconnect, device number 16 [ 1730.868929][T27684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5493'. [ 1730.918769][T27684] FAULT_INJECTION: forcing a failure. [ 1730.918769][T27684] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.919022][T27684] CPU: 3 UID: 0 PID: 27684 Comm: syz.3.5493 Tainted: G L syzkaller #0 PREEMPT(full) [ 1730.919045][T27684] Tainted: [L]=SOFTLOCKUP [ 1730.919050][T27684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1730.919070][T27684] Call Trace: [ 1730.919075][T27684] [ 1730.919080][T27684] dump_stack_lvl+0x100/0x190 [ 1730.919101][T27684] should_fail_ex.cold+0x5/0xa [ 1730.919118][T27684] should_failslab+0xc2/0x120 [ 1730.919137][T27684] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1730.919154][T27684] ? __asan_memcpy+0x3c/0x60 [ 1730.919168][T27684] ? __kernfs_new_node+0xd2/0xa10 [ 1730.919191][T27684] __kernfs_new_node+0xd2/0xa10 [ 1730.919211][T27684] ? __pfx___kernfs_new_node+0x10/0x10 [ 1730.919231][T27684] ? lock_acquire+0x1d1/0x380 [ 1730.919248][T27684] ? kernfs_root+0x23/0x2a0 [ 1730.919264][T27684] ? find_held_lock+0x2b/0x80 [ 1730.919278][T27684] ? kernfs_root+0xee/0x2a0 [ 1730.919293][T27684] ? kernfs_root+0xee/0x2a0 [ 1730.919314][T27684] kernfs_create_dir_ns+0xa6/0x2b0 [ 1730.919330][T27684] sysfs_create_dir_ns+0x13a/0x2b0 [ 1730.919346][T27684] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1730.919362][T27684] ? find_held_lock+0x2b/0x80 [ 1730.919375][T27684] ? kobject_add_internal+0x25f/0x930 [ 1730.919389][T27684] ? kobject_add_internal+0x25f/0x930 [ 1730.919404][T27684] ? do_raw_spin_unlock+0x145/0x1e0 [ 1730.919418][T27684] kobject_add_internal+0x2c8/0x930 [ 1730.919434][T27684] kobject_init_and_add+0x121/0x180 [ 1730.919449][T27684] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1730.919462][T27684] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 1730.919478][T27684] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1730.919494][T27684] ? ___sys_sendmsg+0x190/0x1e0 [ 1730.919509][T27684] ? __sys_sendmsg+0x160/0x210 [ 1730.919521][T27684] ? __do_fast_syscall_32+0x13a/0x8b0 [ 1730.919538][T27684] ? do_fast_syscall_32+0x32/0x70 [ 1730.919549][T27684] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1730.919570][T27684] net_rx_queue_update_kobjects+0x37e/0x760 [ 1730.919590][T27684] ? kset_register+0x1bb/0x290 [ 1730.919605][T27684] netdev_register_kobject+0x2c6/0x410 [ 1730.919625][T27684] register_netdevice+0x15b6/0x25a0 [ 1730.919643][T27684] ? __pfx_register_netdevice+0x10/0x10 [ 1730.919663][T27684] bond_newlink+0x6a/0x100 [ 1730.919675][T27684] ? __pfx_bond_newlink+0x10/0x10 [ 1730.919687][T27684] rtnl_newlink+0x1697/0x2620 [ 1730.919707][T27684] ? __pfx_rtnl_newlink+0x10/0x10 [ 1730.919722][T27684] ? rcu_is_watching+0x13/0xc0 [ 1730.919748][T27684] ? find_held_lock+0x2b/0x80 [ 1730.919764][T27684] ? lock_acquire+0x1d1/0x380 [ 1730.919781][T27684] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1730.919796][T27684] ? find_held_lock+0x2b/0x80 [ 1730.919810][T27684] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1730.919824][T27684] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1730.919839][T27684] ? __pfx_rtnl_newlink+0x10/0x10 [ 1730.919854][T27684] rtnetlink_rcv_msg+0x95e/0xe90 [ 1730.919870][T27684] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1730.919892][T27684] netlink_rcv_skb+0x159/0x420 [ 1730.919904][T27684] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1730.919920][T27684] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1730.919937][T27684] ? rcu_is_watching+0x13/0xc0 [ 1730.919954][T27684] netlink_unicast+0x585/0x850 [ 1730.919967][T27684] ? __pfx_netlink_unicast+0x10/0x10 [ 1730.919983][T27684] netlink_sendmsg+0x8b0/0xda0 [ 1730.920019][T27684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1730.920033][T27684] ? apparmor_socket_sendmsg+0x165/0x280 [ 1730.920060][T27684] ____sys_sendmsg+0xa4d/0xbe0 [ 1730.920077][T27684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1730.920091][T27684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1730.920116][T27684] ___sys_sendmsg+0x190/0x1e0 [ 1730.920135][T27684] ? __pfx____sys_sendmsg+0x10/0x10 [ 1730.920154][T27684] ? futex_wait+0x11e/0x370 [ 1730.920176][T27684] ? find_held_lock+0x2b/0x80 [ 1730.920203][T27684] __sys_sendmsg+0x160/0x210 [ 1730.920216][T27684] ? __pfx___sys_sendmsg+0x10/0x10 [ 1730.920238][T27684] __do_fast_syscall_32+0x13a/0x8b0 [ 1730.920258][T27684] do_fast_syscall_32+0x32/0x70 [ 1730.920270][T27684] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1730.920285][T27684] RIP: 0023:0xf741efec [ 1730.920300][T27684] Code: Unable to access opcode bytes at 0xf741efc2. [ 1730.920305][T27684] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1730.920317][T27684] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1730.920325][T27684] RDX: 00000000097a09f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1730.920332][T27684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1730.920339][T27684] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1730.920346][T27684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1730.920361][T27684] [ 1730.920499][T27684] kobject: kobject_add_internal failed for rx-12 (error: -12 parent: queues) [ 1731.220162][T27684] bond4 (unregistered): Released all slaves [ 1731.296149][T27690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5494'. [ 1731.305623][T27690] FAULT_INJECTION: forcing a failure. [ 1731.305623][T27690] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.305656][T27690] CPU: 3 UID: 0 PID: 27690 Comm: syz.4.5494 Tainted: G L syzkaller #0 PREEMPT(full) [ 1731.305684][T27690] Tainted: [L]=SOFTLOCKUP [ 1731.305692][T27690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1731.305706][T27690] Call Trace: [ 1731.305712][T27690] [ 1731.305722][T27690] dump_stack_lvl+0x100/0x190 [ 1731.305755][T27690] should_fail_ex.cold+0x5/0xa [ 1731.305783][T27690] should_failslab+0xc2/0x120 [ 1731.305816][T27690] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1731.305843][T27690] ? __alloc_skb+0x140/0x710 [ 1731.305870][T27690] __alloc_skb+0x140/0x710 [ 1731.305889][T27690] ? __alloc_skb+0x5b7/0x710 [ 1731.305909][T27690] ? __pfx___alloc_skb+0x10/0x10 [ 1731.305934][T27690] ? __asan_memcpy+0x3c/0x60 [ 1731.305957][T27690] alloc_uevent_skb+0x7d/0x210 [ 1731.305984][T27690] kobject_uevent_env+0x122c/0x18b0 [ 1731.306019][T27690] net_rx_queue_update_kobjects+0x1dd/0x760 [ 1731.306059][T27690] ? kset_register+0x1bb/0x290 [ 1731.306085][T27690] netdev_register_kobject+0x2c6/0x410 [ 1731.306117][T27690] register_netdevice+0x15b6/0x25a0 [ 1731.306148][T27690] ? __pfx_register_netdevice+0x10/0x10 [ 1731.306182][T27690] bond_newlink+0x6a/0x100 [ 1731.306203][T27690] ? __pfx_bond_newlink+0x10/0x10 [ 1731.306224][T27690] rtnl_newlink+0x1697/0x2620 [ 1731.306256][T27690] ? __pfx_rtnl_newlink+0x10/0x10 [ 1731.306281][T27690] ? rcu_is_watching+0x13/0xc0 [ 1731.306325][T27690] ? find_held_lock+0x2b/0x80 [ 1731.306353][T27690] ? lock_acquire+0x1d1/0x380 [ 1731.306380][T27690] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1731.306405][T27690] ? find_held_lock+0x2b/0x80 [ 1731.306427][T27690] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1731.306450][T27690] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1731.306476][T27690] ? __pfx_rtnl_newlink+0x10/0x10 [ 1731.306500][T27690] rtnetlink_rcv_msg+0x95e/0xe90 [ 1731.306525][T27690] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1731.306556][T27690] ? ref_tracker_free+0x37e/0x6c0 [ 1731.306584][T27690] netlink_rcv_skb+0x159/0x420 [ 1731.306606][T27690] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1731.306632][T27690] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1731.306663][T27690] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1731.306699][T27690] netlink_unicast+0x585/0x850 [ 1731.306722][T27690] ? __pfx_netlink_unicast+0x10/0x10 [ 1731.306750][T27690] netlink_sendmsg+0x8b0/0xda0 [ 1731.306774][T27690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1731.306797][T27690] ? apparmor_socket_sendmsg+0x165/0x280 [ 1731.306834][T27690] ____sys_sendmsg+0xa4d/0xbe0 [ 1731.306861][T27690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1731.306882][T27690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1731.306921][T27690] ___sys_sendmsg+0x190/0x1e0 [ 1731.306952][T27690] ? __pfx____sys_sendmsg+0x10/0x10 [ 1731.306980][T27690] ? futex_wait+0x11e/0x370 [ 1731.307016][T27690] ? find_held_lock+0x2b/0x80 [ 1731.307070][T27690] __sys_sendmsg+0x160/0x210 [ 1731.307096][T27690] ? __pfx___sys_sendmsg+0x10/0x10 [ 1731.307157][T27690] __do_fast_syscall_32+0x13a/0x8b0 [ 1731.307193][T27690] do_fast_syscall_32+0x32/0x70 [ 1731.307214][T27690] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1731.307239][T27690] RIP: 0023:0xf7fa3fec [ 1731.307261][T27690] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 1731.307271][T27690] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1731.307292][T27690] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1731.307306][T27690] RDX: 00000000097a09f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1731.307319][T27690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1731.307332][T27690] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1731.307345][T27690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1731.307375][T27690] [ 1731.315926][T27690] bond8: entered promiscuous mode [ 1731.315966][T27690] bond8: entered allmulticast mode [ 1731.316249][T27690] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1731.396649][T27698] fuse: Unknown parameter 'group_i00000000000000000000' [ 1731.427768][T27701] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5498'. [ 1732.885963][T27718] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5500'. [ 1733.182268][T27728] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5502'. [ 1734.152406][T27743] fuse: Unknown parameter 'group_i00000000000000000000' [ 1734.158715][T27745] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5507'. [ 1734.568031][T27762] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5509'. [ 1734.793805][T27766] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5510'. [ 1735.633712][T27773] fuse: Unknown parameter 'group_id00000000000000000000' [ 1736.931521][T27800] fuse: Bad value for 'fd' [ 1736.934214][T20799] Bluetooth: hci4: command 0x0406 tx timeout [ 1737.337809][T27821] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5523'. [ 1737.432877][T27820] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5522'. [ 1738.041321][T27826] fuse: Unknown parameter 'group_id00000000000000000000' [ 1740.257703][T27851] fuse: Bad value for 'fd' [ 1740.270729][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5532'. [ 1740.276854][T27853] FAULT_INJECTION: forcing a failure. [ 1740.276854][T27853] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.276876][T27853] CPU: 1 UID: 0 PID: 27853 Comm: syz.5.5532 Tainted: G L syzkaller #0 PREEMPT(full) [ 1740.276893][T27853] Tainted: [L]=SOFTLOCKUP [ 1740.276897][T27853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1740.276904][T27853] Call Trace: [ 1740.276908][T27853] [ 1740.276913][T27853] dump_stack_lvl+0x100/0x190 [ 1740.276934][T27853] should_fail_ex.cold+0x5/0xa [ 1740.276950][T27853] should_failslab+0xc2/0x120 [ 1740.276969][T27853] __kmalloc_noprof+0xfc/0x840 [ 1740.276986][T27853] ? kobject_get_path+0xcf/0x2c0 [ 1740.277001][T27853] kobject_get_path+0xcf/0x2c0 [ 1740.277016][T27853] kobject_uevent_env+0x287/0x18b0 [ 1740.277037][T27853] net_rx_queue_update_kobjects+0x1dd/0x760 [ 1740.277058][T27853] ? kset_register+0x1bb/0x290 [ 1740.277079][T27853] netdev_register_kobject+0x2c6/0x410 [ 1740.277112][T27853] register_netdevice+0x15b6/0x25a0 [ 1740.277133][T27853] ? __pfx_register_netdevice+0x10/0x10 [ 1740.277153][T27853] bond_newlink+0x6a/0x100 [ 1740.277166][T27853] ? __pfx_bond_newlink+0x10/0x10 [ 1740.277178][T27853] rtnl_newlink+0x1697/0x2620 [ 1740.277199][T27853] ? __pfx_rtnl_newlink+0x10/0x10 [ 1740.277215][T27853] ? rcu_is_watching+0x13/0xc0 [ 1740.277242][T27853] ? find_held_lock+0x2b/0x80 [ 1740.277259][T27853] ? lock_acquire+0x1d1/0x380 [ 1740.277275][T27853] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1740.277290][T27853] ? find_held_lock+0x2b/0x80 [ 1740.277303][T27853] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1740.277316][T27853] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1740.277331][T27853] ? __pfx_rtnl_newlink+0x10/0x10 [ 1740.277346][T27853] rtnetlink_rcv_msg+0x95e/0xe90 [ 1740.277361][T27853] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1740.277380][T27853] ? ref_tracker_free+0x37e/0x6c0 [ 1740.277396][T27853] netlink_rcv_skb+0x159/0x420 [ 1740.277409][T27853] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1740.277424][T27853] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1740.277441][T27853] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1740.277461][T27853] netlink_unicast+0x585/0x850 [ 1740.277475][T27853] ? __pfx_netlink_unicast+0x10/0x10 [ 1740.277491][T27853] netlink_sendmsg+0x8b0/0xda0 [ 1740.277505][T27853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1740.277518][T27853] ? apparmor_socket_sendmsg+0x165/0x280 [ 1740.277540][T27853] ____sys_sendmsg+0xa4d/0xbe0 [ 1740.277555][T27853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1740.277570][T27853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1740.277599][T27853] ___sys_sendmsg+0x190/0x1e0 [ 1740.277625][T27853] ? __pfx____sys_sendmsg+0x10/0x10 [ 1740.277655][T27853] ? futex_wait+0x11e/0x370 [ 1740.277682][T27853] ? find_held_lock+0x2b/0x80 [ 1740.277705][T27853] __sys_sendmsg+0x160/0x210 [ 1740.277719][T27853] ? __pfx___sys_sendmsg+0x10/0x10 [ 1740.277740][T27853] __do_fast_syscall_32+0x13a/0x8b0 [ 1740.277761][T27853] do_fast_syscall_32+0x32/0x70 [ 1740.277772][T27853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1740.277786][T27853] RIP: 0023:0xf7f94fec [ 1740.277801][T27853] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 1740.277807][T27853] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1740.277818][T27853] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1740.277825][T27853] RDX: 00000000097a09f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1740.277833][T27853] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1740.277840][T27853] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1740.277847][T27853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1740.277862][T27853] [ 1740.282530][T27853] bond8: entered promiscuous mode [ 1740.282568][T27853] bond8: entered allmulticast mode [ 1740.282741][T27853] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1740.549877][T27869] fuse: Unknown parameter 'group_id00000000000000000000' [ 1740.654031][T27866] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5535'. [ 1740.982668][T27878] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5537'. [ 1741.589977][T27884] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5538'. [ 1742.798352][T27899] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5541'. [ 1743.038926][T27910] fuse: Bad value for 'fd' [ 1743.521624][T27916] fuse: Bad value for 'user_id' [ 1743.521643][T27916] fuse: Bad value for 'user_id' [ 1743.816634][T27920] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5546'. [ 1744.303975][T27930] fuse: Bad value for 'fd' [ 1744.632362][T27938] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5550'. [ 1745.996942][T27962] fuse: Bad value for 'user_id' [ 1745.996962][T27962] fuse: Bad value for 'user_id' [ 1746.593846][ T44] audit: type=1326 audit(1791449049.789:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27959 comm="syz.3.5553" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741efec code=0x0 [ 1746.914476][ T5886] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1747.012283][T27977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5556'. [ 1747.064799][ T5886] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1747.066510][ T5886] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1747.066529][ T5886] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1747.066541][ T5886] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1747.070283][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1747.070296][ T5886] usb 8-1: Product: syz [ 1747.070304][ T5886] usb 8-1: Manufacturer: syz [ 1747.070311][ T5886] usb 8-1: SerialNumber: syz [ 1747.072791][ T5886] usb 8-1: config 0 descriptor?? [ 1747.080263][T27969] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1747.083144][ T5886] usb 8-1: selecting invalid altsetting 0 [ 1747.144456][T27977] bond9: entered promiscuous mode [ 1747.144904][T27977] bond9: entered allmulticast mode [ 1747.146432][T27977] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1747.233270][T27981] fuse: Bad value for 'fd' [ 1748.564996][T28001] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5560'. [ 1748.851733][T28016] fuse: Bad value for 'user_id' [ 1748.851765][T28016] fuse: Bad value for 'user_id' [ 1748.892425][T28013] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5561'. [ 1749.276635][T22041] usb 8-1: USB disconnect, device number 83 [ 1749.813186][T28027] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5564'. [ 1749.820678][T28035] fuse: Bad value for 'fd' [ 1750.462391][T28050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5569'. [ 1750.478886][T28050] FAULT_INJECTION: forcing a failure. [ 1750.478886][T28050] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.478914][T28050] CPU: 0 UID: 0 PID: 28050 Comm: syz.3.5569 Tainted: G L syzkaller #0 PREEMPT(full) [ 1750.478932][T28050] Tainted: [L]=SOFTLOCKUP [ 1750.478936][T28050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1750.478943][T28050] Call Trace: [ 1750.478948][T28050] [ 1750.478953][T28050] dump_stack_lvl+0x100/0x190 [ 1750.478975][T28050] should_fail_ex.cold+0x5/0xa [ 1750.478991][T28050] should_failslab+0xc2/0x120 [ 1750.479011][T28050] __kmalloc_cache_noprof+0x91/0x6d0 [ 1750.479026][T28050] ? kobject_uevent_env+0x263/0x18b0 [ 1750.479044][T28050] kobject_uevent_env+0x263/0x18b0 [ 1750.479065][T28050] net_rx_queue_update_kobjects+0x1dd/0x760 [ 1750.479086][T28050] ? kset_register+0x1bb/0x290 [ 1750.479100][T28050] netdev_register_kobject+0x2c6/0x410 [ 1750.479120][T28050] register_netdevice+0x15b6/0x25a0 [ 1750.479139][T28050] ? __pfx_register_netdevice+0x10/0x10 [ 1750.479159][T28050] bond_newlink+0x6a/0x100 [ 1750.479172][T28050] ? __pfx_bond_newlink+0x10/0x10 [ 1750.479183][T28050] rtnl_newlink+0x1697/0x2620 [ 1750.479203][T28050] ? __pfx_rtnl_newlink+0x10/0x10 [ 1750.479218][T28050] ? rcu_is_watching+0x13/0xc0 [ 1750.479256][T28050] ? find_held_lock+0x2b/0x80 [ 1750.479275][T28050] ? lock_acquire+0x1d1/0x380 [ 1750.479292][T28050] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1750.479307][T28050] ? find_held_lock+0x2b/0x80 [ 1750.479322][T28050] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1750.479336][T28050] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1750.479352][T28050] ? __pfx_rtnl_newlink+0x10/0x10 [ 1750.479368][T28050] rtnetlink_rcv_msg+0x95e/0xe90 [ 1750.479385][T28050] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1750.479405][T28050] ? ref_tracker_free+0x37e/0x6c0 [ 1750.479421][T28050] netlink_rcv_skb+0x159/0x420 [ 1750.479433][T28050] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1750.479449][T28050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1750.479466][T28050] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1750.479487][T28050] netlink_unicast+0x585/0x850 [ 1750.479501][T28050] ? __pfx_netlink_unicast+0x10/0x10 [ 1750.479517][T28050] netlink_sendmsg+0x8b0/0xda0 [ 1750.479531][T28050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1750.479544][T28050] ? apparmor_socket_sendmsg+0x165/0x280 [ 1750.479566][T28050] ____sys_sendmsg+0xa4d/0xbe0 [ 1750.479582][T28050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1750.479595][T28050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1750.479618][T28050] ___sys_sendmsg+0x190/0x1e0 [ 1750.479636][T28050] ? __pfx____sys_sendmsg+0x10/0x10 [ 1750.479653][T28050] ? futex_wait+0x11e/0x370 [ 1750.479673][T28050] ? find_held_lock+0x2b/0x80 [ 1750.479697][T28050] __sys_sendmsg+0x160/0x210 [ 1750.479710][T28050] ? __pfx___sys_sendmsg+0x10/0x10 [ 1750.479732][T28050] __do_fast_syscall_32+0x13a/0x8b0 [ 1750.479753][T28050] do_fast_syscall_32+0x32/0x70 [ 1750.479764][T28050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1750.479779][T28050] RIP: 0023:0xf741efec [ 1750.479794][T28050] Code: Unable to access opcode bytes at 0xf741efc2. [ 1750.479799][T28050] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1750.479811][T28050] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1750.479818][T28050] RDX: 00000000097a09f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1750.479825][T28050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1750.479833][T28050] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1750.479839][T28050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1750.479855][T28050] [ 1750.497340][T28050] bond4: entered promiscuous mode [ 1750.497369][T28050] bond4: entered allmulticast mode [ 1750.497574][T28050] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1751.113262][T28065] fuse: Bad value for 'fd' [ 1752.492410][T28094] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5577'. [ 1753.120831][ T44] audit: type=1326 audit(1791449066.311:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28068 comm="syz.1.5573" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741efec code=0x0 [ 1753.434295][ T42] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1753.584738][ T42] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1753.585671][ T42] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1753.585689][ T42] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1753.585703][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1753.587452][ T42] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1753.587465][ T42] usb 6-1: Product: syz [ 1753.587473][ T42] usb 6-1: Manufacturer: syz [ 1753.587482][ T42] usb 6-1: SerialNumber: syz [ 1753.644720][ T42] usb 6-1: config 0 descriptor?? [ 1753.645217][T28085] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1753.666269][ T42] usb 6-1: selecting invalid altsetting 0 [ 1754.093455][T28119] fuse: Bad value for 'fd' [ 1754.201300][T28122] fuse: Bad value for 'fd' [ 1754.266119][T28129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5584'. [ 1754.271100][T28129] FAULT_INJECTION: forcing a failure. [ 1754.271100][T28129] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.271122][T28129] CPU: 3 UID: 0 PID: 28129 Comm: syz.5.5584 Tainted: G L syzkaller #0 PREEMPT(full) [ 1754.271140][T28129] Tainted: [L]=SOFTLOCKUP [ 1754.271144][T28129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1754.271152][T28129] Call Trace: [ 1754.271156][T28129] [ 1754.271162][T28129] dump_stack_lvl+0x100/0x190 [ 1754.271182][T28129] should_fail_ex.cold+0x5/0xa [ 1754.271197][T28129] should_failslab+0xc2/0x120 [ 1754.271218][T28129] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1754.271235][T28129] ? __lock_acquire+0x5c0/0x1f40 [ 1754.271252][T28129] ? __kernfs_new_node+0xd2/0xa10 [ 1754.271273][T28129] __kernfs_new_node+0xd2/0xa10 [ 1754.271291][T28129] ? lock_acquire+0x1d1/0x380 [ 1754.271309][T28129] ? kernfs_root+0x23/0x2a0 [ 1754.271324][T28129] ? __pfx___kernfs_new_node+0x10/0x10 [ 1754.271344][T28129] ? lock_acquire+0x1d1/0x380 [ 1754.271360][T28129] ? kernfs_root+0x23/0x2a0 [ 1754.271375][T28129] ? find_held_lock+0x2b/0x80 [ 1754.271389][T28129] ? kernfs_root+0xee/0x2a0 [ 1754.271403][T28129] ? kernfs_root+0xee/0x2a0 [ 1754.271422][T28129] kernfs_new_node+0x117/0x150 [ 1754.271442][T28129] __kernfs_create_file+0x53/0x350 [ 1754.271458][T28129] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1754.271477][T28129] internal_create_group+0x593/0xfb0 [ 1754.271496][T28129] ? kobject_init_and_add+0x129/0x180 [ 1754.271511][T28129] ? __pfx_internal_create_group+0x10/0x10 [ 1754.271527][T28129] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1754.271540][T28129] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 1754.271556][T28129] ? ___sys_sendmsg+0x190/0x1e0 [ 1754.271572][T28129] ? __sys_sendmsg+0x160/0x210 [ 1754.271583][T28129] ? __do_fast_syscall_32+0x13a/0x8b0 [ 1754.271623][T28129] ? do_fast_syscall_32+0x32/0x70 [ 1754.271634][T28129] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1754.271651][T28129] internal_create_groups+0x9d/0x150 [ 1754.271670][T28129] net_rx_queue_update_kobjects+0xc7/0x760 [ 1754.271692][T28129] ? kset_register+0x1bb/0x290 [ 1754.271709][T28129] netdev_register_kobject+0x2c6/0x410 [ 1754.271729][T28129] register_netdevice+0x15b6/0x25a0 [ 1754.271749][T28129] ? __pfx_register_netdevice+0x10/0x10 [ 1754.271767][T28129] bond_newlink+0x6a/0x100 [ 1754.271780][T28129] ? __pfx_bond_newlink+0x10/0x10 [ 1754.271792][T28129] rtnl_newlink+0x1697/0x2620 [ 1754.271811][T28129] ? __pfx_rtnl_newlink+0x10/0x10 [ 1754.271826][T28129] ? rcu_is_watching+0x13/0xc0 [ 1754.271852][T28129] ? find_held_lock+0x2b/0x80 [ 1754.271873][T28129] ? lock_acquire+0x1d1/0x380 [ 1754.271890][T28129] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1754.271905][T28129] ? find_held_lock+0x2b/0x80 [ 1754.271919][T28129] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1754.271934][T28129] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1754.271949][T28129] ? __pfx_rtnl_newlink+0x10/0x10 [ 1754.271966][T28129] rtnetlink_rcv_msg+0x95e/0xe90 [ 1754.271983][T28129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1754.272003][T28129] ? ref_tracker_free+0x37e/0x6c0 [ 1754.272020][T28129] netlink_rcv_skb+0x159/0x420 [ 1754.272032][T28129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1754.272048][T28129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1754.272065][T28129] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1754.272086][T28129] netlink_unicast+0x585/0x850 [ 1754.272100][T28129] ? __pfx_netlink_unicast+0x10/0x10 [ 1754.272115][T28129] netlink_sendmsg+0x8b0/0xda0 [ 1754.272130][T28129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1754.272143][T28129] ? apparmor_socket_sendmsg+0x165/0x280 [ 1754.272164][T28129] ____sys_sendmsg+0xa4d/0xbe0 [ 1754.272180][T28129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1754.272192][T28129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1754.272212][T28129] ? plist_check_list+0x1b8/0x280 [ 1754.272226][T28129] ? plist_del+0x308/0x510 [ 1754.272241][T28129] ___sys_sendmsg+0x190/0x1e0 [ 1754.272259][T28129] ? __pfx____sys_sendmsg+0x10/0x10 [ 1754.272275][T28129] ? futex_wake+0x220/0x5e0 [ 1754.272297][T28129] ? find_held_lock+0x2b/0x80 [ 1754.272321][T28129] __sys_sendmsg+0x160/0x210 [ 1754.272334][T28129] ? __pfx___sys_sendmsg+0x10/0x10 [ 1754.272380][T28129] __do_fast_syscall_32+0x13a/0x8b0 [ 1754.272401][T28129] do_fast_syscall_32+0x32/0x70 [ 1754.272413][T28129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1754.272428][T28129] RIP: 0023:0xf7f94fec [ 1754.272444][T28129] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 1754.272449][T28129] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1754.272461][T28129] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1754.272469][T28129] RDX: 00000000097a09f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1754.272476][T28129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1754.272483][T28129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1754.272490][T28129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1754.272505][T28129] [ 1754.283734][T28129] bond9 (unregistered): Released all slaves [ 1754.455866][T28134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5585'. [ 1754.461437][T28134] FAULT_INJECTION: forcing a failure. [ 1754.461437][T28134] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.461457][T28134] CPU: 3 UID: 0 PID: 28134 Comm: syz.4.5585 Tainted: G L syzkaller #0 PREEMPT(full) [ 1754.461475][T28134] Tainted: [L]=SOFTLOCKUP [ 1754.461479][T28134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1754.461487][T28134] Call Trace: [ 1754.461492][T28134] [ 1754.461497][T28134] dump_stack_lvl+0x100/0x190 [ 1754.461518][T28134] should_fail_ex.cold+0x5/0xa [ 1754.461535][T28134] should_failslab+0xc2/0x120 [ 1754.461555][T28134] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1754.461577][T28134] ? __kernfs_new_node+0xd2/0xa10 [ 1754.461599][T28134] __kernfs_new_node+0xd2/0xa10 [ 1754.461620][T28134] ? __pfx___kernfs_new_node+0x10/0x10 [ 1754.461641][T28134] ? lock_acquire+0x1d1/0x380 [ 1754.461659][T28134] ? kernfs_root+0x23/0x2a0 [ 1754.461676][T28134] ? find_held_lock+0x2b/0x80 [ 1754.461690][T28134] ? kernfs_root+0xee/0x2a0 [ 1754.461706][T28134] ? kernfs_root+0xee/0x2a0 [ 1754.461726][T28134] kernfs_new_node+0x117/0x150 [ 1754.461746][T28134] __kernfs_create_file+0x53/0x350 [ 1754.461762][T28134] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1754.461781][T28134] internal_create_group+0x593/0xfb0 [ 1754.461801][T28134] ? kobject_init_and_add+0x129/0x180 [ 1754.461815][T28134] ? __pfx_internal_create_group+0x10/0x10 [ 1754.461832][T28134] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1754.461845][T28134] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 1754.461861][T28134] ? ___sys_sendmsg+0x190/0x1e0 [ 1754.461877][T28134] ? __sys_sendmsg+0x160/0x210 [ 1754.461889][T28134] ? __do_fast_syscall_32+0x13a/0x8b0 [ 1754.461908][T28134] ? do_fast_syscall_32+0x32/0x70 [ 1754.461918][T28134] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1754.461935][T28134] internal_create_groups+0x9d/0x150 [ 1754.461954][T28134] net_rx_queue_update_kobjects+0xc7/0x760 [ 1754.461975][T28134] ? kset_register+0x1bb/0x290 [ 1754.462011][T28134] netdev_register_kobject+0x2c6/0x410 [ 1754.462032][T28134] register_netdevice+0x15b6/0x25a0 [ 1754.462052][T28134] ? __pfx_register_netdevice+0x10/0x10 [ 1754.462072][T28134] bond_newlink+0x6a/0x100 [ 1754.462085][T28134] ? __pfx_bond_newlink+0x10/0x10 [ 1754.462098][T28134] rtnl_newlink+0x1697/0x2620 [ 1754.462118][T28134] ? __pfx_rtnl_newlink+0x10/0x10 [ 1754.462134][T28134] ? rcu_is_watching+0x13/0xc0 [ 1754.462159][T28134] ? find_held_lock+0x2b/0x80 [ 1754.462176][T28134] ? lock_acquire+0x1d1/0x380 [ 1754.462192][T28134] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1754.462207][T28134] ? find_held_lock+0x2b/0x80 [ 1754.462220][T28134] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1754.462234][T28134] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1754.462249][T28134] ? __pfx_rtnl_newlink+0x10/0x10 [ 1754.462264][T28134] rtnetlink_rcv_msg+0x95e/0xe90 [ 1754.462280][T28134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1754.462299][T28134] ? ref_tracker_free+0x37e/0x6c0 [ 1754.462315][T28134] netlink_rcv_skb+0x159/0x420 [ 1754.462327][T28134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1754.462343][T28134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1754.462360][T28134] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1754.462380][T28134] netlink_unicast+0x585/0x850 [ 1754.462394][T28134] ? __pfx_netlink_unicast+0x10/0x10 [ 1754.462410][T28134] netlink_sendmsg+0x8b0/0xda0 [ 1754.462423][T28134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1754.462436][T28134] ? apparmor_socket_sendmsg+0x165/0x280 [ 1754.462458][T28134] ____sys_sendmsg+0xa4d/0xbe0 [ 1754.462473][T28134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1754.462486][T28134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1754.462509][T28134] ___sys_sendmsg+0x190/0x1e0 [ 1754.462527][T28134] ? __pfx____sys_sendmsg+0x10/0x10 [ 1754.462544][T28134] ? futex_wait+0x11e/0x370 [ 1754.462570][T28134] ? find_held_lock+0x2b/0x80 [ 1754.462594][T28134] __sys_sendmsg+0x160/0x210 [ 1754.462608][T28134] ? __pfx___sys_sendmsg+0x10/0x10 [ 1754.462631][T28134] __do_fast_syscall_32+0x13a/0x8b0 [ 1754.462654][T28134] do_fast_syscall_32+0x32/0x70 [ 1754.462667][T28134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1754.462683][T28134] RIP: 0023:0xf7fa3fec [ 1754.462697][T28134] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 1754.462703][T28134] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1754.462714][T28134] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1754.462722][T28134] RDX: 00000000097a09f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1754.462729][T28134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1754.462736][T28134] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1754.462743][T28134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1754.462758][T28134] [ 1754.471363][T28134] bond10 (unregistered): Released all slaves [ 1755.217166][ T25] usb 6-1: USB disconnect, device number 89 [ 1755.929642][T28163] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5589'. [ 1755.984544][T28167] fuse: Bad value for 'fd' [ 1756.790826][T28177] fuse: Bad value for 'fd' [ 1756.936847][T28182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1756.948986][T28182] random: crng reseeded on system resumption [ 1757.211267][T28190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5596'. [ 1757.319082][T28190] FAULT_INJECTION: forcing a failure. [ 1757.319082][T28190] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.319165][T28190] CPU: 0 UID: 0 PID: 28190 Comm: syz.3.5596 Tainted: G L syzkaller #0 PREEMPT(full) [ 1757.319198][T28190] Tainted: [L]=SOFTLOCKUP [ 1757.319208][T28190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1757.319222][T28190] Call Trace: [ 1757.319230][T28190] [ 1757.319240][T28190] dump_stack_lvl+0x100/0x190 [ 1757.319281][T28190] should_fail_ex.cold+0x5/0xa [ 1757.319328][T28190] should_failslab+0xc2/0x120 [ 1757.319363][T28190] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1757.319390][T28190] ? __asan_memcpy+0x3c/0x60 [ 1757.319416][T28190] ? __kernfs_new_node+0xd2/0xa10 [ 1757.319453][T28190] __kernfs_new_node+0xd2/0xa10 [ 1757.319486][T28190] ? __pfx___kernfs_new_node+0x10/0x10 [ 1757.319521][T28190] ? lock_acquire+0x1d1/0x380 [ 1757.319551][T28190] ? kernfs_root+0x23/0x2a0 [ 1757.319579][T28190] ? find_held_lock+0x2b/0x80 [ 1757.319604][T28190] ? kernfs_root+0xee/0x2a0 [ 1757.319628][T28190] ? kernfs_root+0xee/0x2a0 [ 1757.319664][T28190] kernfs_create_dir_ns+0xa6/0x2b0 [ 1757.319690][T28190] sysfs_create_dir_ns+0x13a/0x2b0 [ 1757.319718][T28190] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1757.319744][T28190] ? find_held_lock+0x2b/0x80 [ 1757.319767][T28190] ? kobject_add_internal+0x25f/0x930 [ 1757.319791][T28190] ? kobject_add_internal+0x25f/0x930 [ 1757.319817][T28190] ? do_raw_spin_unlock+0x145/0x1e0 [ 1757.319842][T28190] kobject_add_internal+0x2c8/0x930 [ 1757.319871][T28190] kobject_init_and_add+0x121/0x180 [ 1757.319897][T28190] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1757.319922][T28190] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 1757.319950][T28190] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1757.319981][T28190] ? ___sys_sendmsg+0x190/0x1e0 [ 1757.320008][T28190] ? __sys_sendmsg+0x160/0x210 [ 1757.320029][T28190] ? __do_fast_syscall_32+0x13a/0x8b0 [ 1757.320062][T28190] ? do_fast_syscall_32+0x32/0x70 [ 1757.320080][T28190] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1757.320117][T28190] net_rx_queue_update_kobjects+0x37e/0x760 [ 1757.320153][T28190] ? kset_register+0x1bb/0x290 [ 1757.320179][T28190] netdev_register_kobject+0x2c6/0x410 [ 1757.320213][T28190] register_netdevice+0x15b6/0x25a0 [ 1757.320245][T28190] ? __pfx_register_netdevice+0x10/0x10 [ 1757.320279][T28190] bond_newlink+0x6a/0x100 [ 1757.320301][T28190] ? __pfx_bond_newlink+0x10/0x10 [ 1757.320322][T28190] rtnl_newlink+0x1697/0x2620 [ 1757.320381][T28190] ? __pfx_rtnl_newlink+0x10/0x10 [ 1757.320422][T28190] ? __pfx___schedule+0x10/0x10 [ 1757.320463][T28190] ? preempt_schedule_common+0x3c/0xb0 [ 1757.320493][T28190] ? preempt_schedule_thunk+0x16/0x40 [ 1757.320523][T28190] ? lock_acquire+0x1d1/0x380 [ 1757.320553][T28190] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1757.320579][T28190] ? find_held_lock+0x2b/0x80 [ 1757.320601][T28190] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1757.320626][T28190] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1757.320653][T28190] ? __pfx_rtnl_newlink+0x10/0x10 [ 1757.320679][T28190] rtnetlink_rcv_msg+0x95e/0xe90 [ 1757.320707][T28190] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.320733][T28190] ? irqentry_exit+0x24d/0xa10 [ 1757.320762][T28190] ? lockdep_hardirqs_on+0x7d/0x110 [ 1757.320791][T28190] ? irqentry_exit+0x24d/0xa10 [ 1757.320829][T28190] netlink_rcv_skb+0x159/0x420 [ 1757.320847][T28190] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.320874][T28190] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1757.320909][T28190] ? rcu_is_watching+0x13/0xc0 [ 1757.320941][T28190] netlink_unicast+0x585/0x850 [ 1757.320975][T28190] ? __pfx_netlink_unicast+0x10/0x10 [ 1757.321004][T28190] netlink_sendmsg+0x8b0/0xda0 [ 1757.321030][T28190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.321055][T28190] ? apparmor_socket_sendmsg+0x165/0x280 [ 1757.321093][T28190] ____sys_sendmsg+0xa4d/0xbe0 [ 1757.321120][T28190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.321143][T28190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1757.321187][T28190] ___sys_sendmsg+0x190/0x1e0 [ 1757.321219][T28190] ? __pfx____sys_sendmsg+0x10/0x10 [ 1757.321250][T28190] ? futex_wait+0x11e/0x370 [ 1757.321289][T28190] ? find_held_lock+0x2b/0x80 [ 1757.321332][T28190] __sys_sendmsg+0x160/0x210 [ 1757.321357][T28190] ? __pfx___sys_sendmsg+0x10/0x10 [ 1757.321390][T28190] __do_fast_syscall_32+0x13a/0x8b0 [ 1757.321423][T28190] do_fast_syscall_32+0x32/0x70 [ 1757.321440][T28190] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1757.321460][T28190] RIP: 0023:0xf741efec [ 1757.321483][T28190] Code: Unable to access opcode bytes at 0xf741efc2. [ 1757.321492][T28190] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1757.321511][T28190] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1757.321523][T28190] RDX: 00000000097a09f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1757.321532][T28190] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1757.321539][T28190] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1757.321546][T28190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1757.321561][T28190] [ 1757.321703][T28190] kobject: kobject_add_internal failed for rx-11 (error: -12 parent: queues) [ 1757.481104][T28190] bond5 (unregistered): Released all slaves [ 1757.750535][T28195] FAULT_INJECTION: forcing a failure. [ 1757.750535][T28195] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.750656][T28195] CPU: 1 UID: 0 PID: 28195 Comm: syz.1.5597 Tainted: G L syzkaller #0 PREEMPT(full) [ 1757.750685][T28195] Tainted: [L]=SOFTLOCKUP [ 1757.750690][T28195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1757.750697][T28195] Call Trace: [ 1757.750701][T28195] [ 1757.750707][T28195] dump_stack_lvl+0x100/0x190 [ 1757.750727][T28195] should_fail_ex.cold+0x5/0xa [ 1757.750743][T28195] should_failslab+0xc2/0x120 [ 1757.750761][T28195] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1757.750777][T28195] ? ptlock_alloc+0x1f/0x70 [ 1757.750791][T28195] ptlock_alloc+0x1f/0x70 [ 1757.750803][T28195] pte_alloc_one+0x82/0x3d0 [ 1757.750818][T28195] __pte_alloc+0x6d/0x380 [ 1757.750834][T28195] ? __pfx___pte_alloc+0x10/0x10 [ 1757.750850][T28195] ? irqentry_exit+0x24d/0xa10 [ 1757.750866][T28195] ? lockdep_hardirqs_on+0x7d/0x110 [ 1757.750884][T28195] do_anonymous_page+0x1307/0x2050 [ 1757.750900][T28195] ? __pfx_do_anonymous_page+0x10/0x10 [ 1757.750917][T28195] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 1757.750937][T28195] __handle_mm_fault+0x1ff3/0x2f60 [ 1757.750953][T28195] ? __pfx___handle_mm_fault+0x10/0x10 [ 1757.750964][T28195] ? __pfx_mt_find+0x10/0x10 [ 1757.750987][T28195] handle_mm_fault+0x363/0xa20 [ 1757.751002][T28195] __get_user_pages+0x8ae/0x2c30 [ 1757.751022][T28195] ? mtree_load+0xdc/0xb50 [ 1757.751039][T28195] ? __pfx___get_user_pages+0x10/0x10 [ 1757.751054][T28195] ? mtree_load+0x388/0xb50 [ 1757.751070][T28195] ? mtree_load+0x388/0xb50 [ 1757.751091][T28195] get_user_pages_remote+0x3d2/0xb10 [ 1757.751107][T28195] ? mas_prev_setup.constprop.0+0x980/0x9e0 [ 1757.751127][T28195] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1757.751149][T28195] __access_remote_vm+0x3bb/0x890 [ 1757.751166][T28195] ? do_raw_spin_lock+0x128/0x260 [ 1757.751179][T28195] ? __pfx___access_remote_vm+0x10/0x10 [ 1757.751193][T28195] ? environ_read+0x22a/0x490 [ 1757.751204][T28195] ? environ_read+0x22a/0x490 [ 1757.751219][T28195] environ_read+0x31c/0x490 [ 1757.751233][T28195] ? __pfx_environ_read+0x10/0x10 [ 1757.751244][T28195] vfs_readv+0x5d8/0x8d0 [ 1757.751261][T28195] ? __pfx_vfs_readv+0x10/0x10 [ 1757.751274][T28195] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1757.751294][T28195] ? lock_acquire+0x1d1/0x380 [ 1757.751311][T28195] ? __fget_files+0x34/0x3d0 [ 1757.751330][T28195] ? __fget_files+0x21f/0x3d0 [ 1757.751349][T28195] ? do_preadv+0x1ac/0x270 [ 1757.751361][T28195] do_preadv+0x1ac/0x270 [ 1757.751374][T28195] ? __pfx_do_preadv+0x10/0x10 [ 1757.751387][T28195] ? rcu_is_watching+0x13/0xc0 [ 1757.751403][T28195] __do_fast_syscall_32+0x13a/0x8b0 [ 1757.751421][T28195] ? lockdep_hardirqs_on+0x7d/0x110 [ 1757.751438][T28195] do_fast_syscall_32+0x32/0x70 [ 1757.751449][T28195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1757.751464][T28195] RIP: 0023:0xf741efec [ 1757.751478][T28195] Code: Unable to access opcode bytes at 0xf741efc2. [ 1757.751484][T28195] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000014d [ 1757.751495][T28195] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080001400 [ 1757.751503][T28195] RDX: 0000000000000001 RSI: 0000000000c002a0 RDI: 0000000000000000 [ 1757.751509][T28195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1757.751516][T28195] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1757.751523][T28195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1757.751537][T28195] [ 1759.080826][T28209] fuse: Bad value for 'fd' [ 1760.131702][T28231] fuse: Bad value for 'fd' [ 1761.888453][T28240] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5606'. [ 1761.949699][T28254] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5607'. [ 1761.970341][T28259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5609'. [ 1761.982375][T28259] FAULT_INJECTION: forcing a failure. [ 1761.982375][T28259] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.982409][T28259] CPU: 3 UID: 0 PID: 28259 Comm: syz.4.5609 Tainted: G L syzkaller #0 PREEMPT(full) [ 1761.982440][T28259] Tainted: [L]=SOFTLOCKUP [ 1761.982449][T28259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1761.982463][T28259] Call Trace: [ 1761.982471][T28259] [ 1761.982480][T28259] dump_stack_lvl+0x100/0x190 [ 1761.982520][T28259] should_fail_ex.cold+0x5/0xa [ 1761.982547][T28259] should_failslab+0xc2/0x120 [ 1761.982579][T28259] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1761.982609][T28259] ? __kernfs_new_node+0xd2/0xa10 [ 1761.982645][T28259] __kernfs_new_node+0xd2/0xa10 [ 1761.982680][T28259] ? __pfx___kernfs_new_node+0x10/0x10 [ 1761.982713][T28259] ? lock_acquire+0x1d1/0x380 [ 1761.982742][T28259] ? kernfs_root+0x23/0x2a0 [ 1761.982766][T28259] ? find_held_lock+0x2b/0x80 [ 1761.982790][T28259] ? kernfs_root+0xee/0x2a0 [ 1761.982817][T28259] ? kernfs_root+0xee/0x2a0 [ 1761.982852][T28259] kernfs_new_node+0x117/0x150 [ 1761.982886][T28259] __kernfs_create_file+0x53/0x350 [ 1761.982913][T28259] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1761.982947][T28259] internal_create_group+0x593/0xfb0 [ 1761.982981][T28259] ? kobject_init_and_add+0x129/0x180 [ 1761.983007][T28259] ? __pfx_internal_create_group+0x10/0x10 [ 1761.983033][T28259] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1761.983056][T28259] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 1761.983083][T28259] ? ___sys_sendmsg+0x190/0x1e0 [ 1761.983110][T28259] ? __sys_sendmsg+0x160/0x210 [ 1761.983129][T28259] ? __do_fast_syscall_32+0x13a/0x8b0 [ 1761.983161][T28259] ? do_fast_syscall_32+0x32/0x70 [ 1761.983181][T28259] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1761.983211][T28259] internal_create_groups+0x9d/0x150 [ 1761.983244][T28259] net_rx_queue_update_kobjects+0xc7/0x760 [ 1761.983295][T28259] ? kset_register+0x1bb/0x290 [ 1761.983325][T28259] netdev_register_kobject+0x2c6/0x410 [ 1761.983358][T28259] register_netdevice+0x15b6/0x25a0 [ 1761.983392][T28259] ? __pfx_register_netdevice+0x10/0x10 [ 1761.983427][T28259] bond_newlink+0x6a/0x100 [ 1761.983450][T28259] ? __pfx_bond_newlink+0x10/0x10 [ 1761.983471][T28259] rtnl_newlink+0x1697/0x2620 [ 1761.983514][T28259] ? __pfx_rtnl_newlink+0x10/0x10 [ 1761.983543][T28259] ? rcu_is_watching+0x13/0xc0 [ 1761.983590][T28259] ? find_held_lock+0x2b/0x80 [ 1761.983620][T28259] ? lock_acquire+0x1d1/0x380 [ 1761.983650][T28259] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1761.983674][T28259] ? find_held_lock+0x2b/0x80 [ 1761.983698][T28259] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1761.983723][T28259] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1761.983750][T28259] ? __pfx_rtnl_newlink+0x10/0x10 [ 1761.983777][T28259] rtnetlink_rcv_msg+0x95e/0xe90 [ 1761.983805][T28259] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1761.983838][T28259] ? ref_tracker_free+0x37e/0x6c0 [ 1761.983866][T28259] netlink_rcv_skb+0x159/0x420 [ 1761.983888][T28259] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1761.983916][T28259] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1761.983948][T28259] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1761.983985][T28259] netlink_unicast+0x585/0x850 [ 1761.984010][T28259] ? __pfx_netlink_unicast+0x10/0x10 [ 1761.984040][T28259] netlink_sendmsg+0x8b0/0xda0 [ 1761.984064][T28259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1761.984088][T28259] ? apparmor_socket_sendmsg+0x165/0x280 [ 1761.984126][T28259] ____sys_sendmsg+0xa4d/0xbe0 [ 1761.984152][T28259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1761.984175][T28259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1761.984215][T28259] ___sys_sendmsg+0x190/0x1e0 [ 1761.984247][T28259] ? __pfx____sys_sendmsg+0x10/0x10 [ 1761.984276][T28259] ? futex_wait+0x11e/0x370 [ 1761.984335][T28259] ? find_held_lock+0x2b/0x80 [ 1761.984377][T28259] __sys_sendmsg+0x160/0x210 [ 1761.984404][T28259] ? __pfx___sys_sendmsg+0x10/0x10 [ 1761.984443][T28259] __do_fast_syscall_32+0x13a/0x8b0 [ 1761.984479][T28259] do_fast_syscall_32+0x32/0x70 [ 1761.984506][T28259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1761.984533][T28259] RIP: 0023:0xf7fa3fec [ 1761.984555][T28259] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 1761.984567][T28259] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1761.984589][T28259] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1761.984603][T28259] RDX: 00000000097a09f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1761.984615][T28259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1761.984627][T28259] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1761.984640][T28259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1761.984669][T28259] [ 1761.999702][T28259] bond10 (unregistered): Released all slaves [ 1762.414321][T28268] fuse: Bad value for 'fd' [ 1763.156881][T28275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1763.168210][T28275] random: crng reseeded on system resumption [ 1765.579019][T28280] FAULT_INJECTION: forcing a failure. [ 1765.579019][T28280] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.579077][T28280] CPU: 1 UID: 0 PID: 28280 Comm: syz.3.5615 Tainted: G L syzkaller #0 PREEMPT(full) [ 1765.579097][T28280] Tainted: [L]=SOFTLOCKUP [ 1765.579103][T28280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1765.579110][T28280] Call Trace: [ 1765.579115][T28280] [ 1765.579121][T28280] dump_stack_lvl+0x100/0x190 [ 1765.579141][T28280] should_fail_ex.cold+0x5/0xa [ 1765.579157][T28280] should_failslab+0xc2/0x120 [ 1765.579176][T28280] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1765.579194][T28280] ? __rcu_read_unlock+0x26a/0x5e0 [ 1765.579213][T28280] ? do_getname_kernel+0x5d/0x250 [ 1765.579235][T28280] do_getname_kernel+0x5d/0x250 [ 1765.579254][T28280] kern_path+0x1f/0x50 [ 1765.579269][T28280] tomoyo_mount_acl+0x2f4/0x8b0 [ 1765.579284][T28280] ? is_bpf_text_address+0x8a/0x1a0 [ 1765.579303][T28280] ? is_bpf_text_address+0x8a/0x1a0 [ 1765.579323][T28280] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1765.579341][T28280] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1765.579355][T28280] ? kernel_text_address+0x8d/0x100 [ 1765.579371][T28280] ? unwind_get_return_address+0x59/0xa0 [ 1765.579391][T28280] ? arch_stack_walk+0xa6/0xf0 [ 1765.579407][T28280] ? __lock_acquire+0x5c0/0x1f40 [ 1765.579432][T28280] ? tomoyo_mount_permission+0x1f6/0x460 [ 1765.579450][T28280] ? tomoyo_domain+0xb2/0x150 [ 1765.579467][T28280] ? tomoyo_profile+0x47/0x60 [ 1765.579486][T28280] tomoyo_mount_permission+0x214/0x460 [ 1765.579501][T28280] ? tomoyo_mount_permission+0x1f6/0x460 [ 1765.579518][T28280] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1765.579543][T28280] security_sb_mount+0xdd/0x270 [ 1765.579556][T28280] path_mount+0x158/0x24c0 [ 1765.579577][T28280] ? __pfx_path_mount+0x10/0x10 [ 1765.579595][T28280] ? lockdep_hardirqs_on+0x7d/0x110 [ 1765.579614][T28280] ? putname+0xb1/0x110 [ 1765.579630][T28280] ? kmem_cache_free+0x127/0x6c0 [ 1765.579648][T28280] ? __ia32_sys_mount+0x292/0x310 [ 1765.579659][T28280] __ia32_sys_mount+0x292/0x310 [ 1765.579671][T28280] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1765.579682][T28280] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 1765.579697][T28280] ? syscall_user_dispatch+0x76/0x130 [ 1765.579712][T28280] __do_fast_syscall_32+0x13a/0x8b0 [ 1765.579734][T28280] do_fast_syscall_32+0x32/0x70 [ 1765.579746][T28280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1765.579761][T28280] RIP: 0023:0xf741efec [ 1765.579774][T28280] Code: Unable to access opcode bytes at 0xf741efc2. [ 1765.579780][T28280] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 1765.579792][T28280] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 00000000800001c0 [ 1765.579800][T28280] RDX: 0000000080000680 RSI: 0000000000200000 RDI: 00000000800006c0 [ 1765.579807][T28280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1765.579814][T28280] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1765.579821][T28280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1765.579836][T28280] [ 1765.764245][ T42] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1765.925156][ T42] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 1765.926295][ T42] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1765.926317][ T42] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1765.928488][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.928506][ T42] usb 9-1: Product: syz [ 1765.928527][ T42] usb 9-1: Manufacturer: syz [ 1765.928540][ T42] usb 9-1: SerialNumber: syz [ 1765.937532][ T42] usb 9-1: NFC: intf ffff88802612a000 id ffffffff90e96960 [ 1765.992072][ T42] nfcmrvl 9-1:1.0: NFC: registered with nci successfully [ 1766.149526][T14377] usb 9-1: USB disconnect, device number 36 [ 1766.151383][T14377] usb 9-1: NFC: intf ffff88802612a000 [ 1766.358775][T28295] fuse: Bad value for 'fd' [ 1766.508886][T28301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5619'. [ 1766.519309][T28301] FAULT_INJECTION: forcing a failure. [ 1766.519309][T28301] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.519340][T28301] CPU: 0 UID: 0 PID: 28301 Comm: syz.5.5619 Tainted: G L syzkaller #0 PREEMPT(full) [ 1766.519366][T28301] Tainted: [L]=SOFTLOCKUP [ 1766.519379][T28301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1766.519392][T28301] Call Trace: [ 1766.519400][T28301] [ 1766.519408][T28301] dump_stack_lvl+0x100/0x190 [ 1766.519437][T28301] should_fail_ex.cold+0x5/0xa [ 1766.519462][T28301] should_failslab+0xc2/0x120 [ 1766.519489][T28301] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1766.519516][T28301] ? arch_stack_walk+0xa6/0xf0 [ 1766.519536][T28301] ? kvasprintf_const+0x66/0x1a0 [ 1766.519559][T28301] kvasprintf+0xbc/0x150 [ 1766.519576][T28301] ? __pfx_kvasprintf+0x10/0x10 [ 1766.519598][T28301] ? mark_held_locks+0x40/0x70 [ 1766.519628][T28301] kvasprintf_const+0x66/0x1a0 [ 1766.519646][T28301] kobject_set_name_vargs+0x5a/0x140 [ 1766.519670][T28301] kobject_init_and_add+0xe7/0x180 [ 1766.519693][T28301] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1766.519713][T28301] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 1766.519737][T28301] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1766.519760][T28301] ? ___sys_sendmsg+0x190/0x1e0 [ 1766.519783][T28301] ? __sys_sendmsg+0x160/0x210 [ 1766.519801][T28301] ? __do_fast_syscall_32+0x13a/0x8b0 [ 1766.519852][T28301] ? do_fast_syscall_32+0x32/0x70 [ 1766.519868][T28301] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1766.519899][T28301] net_rx_queue_update_kobjects+0x37e/0x760 [ 1766.519930][T28301] ? kset_register+0x1bb/0x290 [ 1766.519953][T28301] netdev_register_kobject+0x2c6/0x410 [ 1766.519983][T28301] register_netdevice+0x15b6/0x25a0 [ 1766.520011][T28301] ? __pfx_register_netdevice+0x10/0x10 [ 1766.520041][T28301] bond_newlink+0x6a/0x100 [ 1766.520061][T28301] ? __pfx_bond_newlink+0x10/0x10 [ 1766.520080][T28301] rtnl_newlink+0x1697/0x2620 [ 1766.520113][T28301] ? __pfx_rtnl_newlink+0x10/0x10 [ 1766.520138][T28301] ? rcu_is_watching+0x13/0xc0 [ 1766.520178][T28301] ? find_held_lock+0x2b/0x80 [ 1766.520204][T28301] ? lock_acquire+0x1d1/0x380 [ 1766.520228][T28301] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1766.520251][T28301] ? find_held_lock+0x2b/0x80 [ 1766.520271][T28301] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1766.520317][T28301] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1766.520343][T28301] ? __pfx_rtnl_newlink+0x10/0x10 [ 1766.520367][T28301] rtnetlink_rcv_msg+0x95e/0xe90 [ 1766.520397][T28301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1766.520428][T28301] ? ref_tracker_free+0x37e/0x6c0 [ 1766.520448][T28301] netlink_rcv_skb+0x159/0x420 [ 1766.520461][T28301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1766.520476][T28301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1766.520493][T28301] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1766.520514][T28301] netlink_unicast+0x585/0x850 [ 1766.520528][T28301] ? __pfx_netlink_unicast+0x10/0x10 [ 1766.520544][T28301] netlink_sendmsg+0x8b0/0xda0 [ 1766.520558][T28301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1766.520571][T28301] ? apparmor_socket_sendmsg+0x165/0x280 [ 1766.520593][T28301] ____sys_sendmsg+0xa4d/0xbe0 [ 1766.520608][T28301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1766.520621][T28301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1766.520644][T28301] ___sys_sendmsg+0x190/0x1e0 [ 1766.520662][T28301] ? __pfx____sys_sendmsg+0x10/0x10 [ 1766.520679][T28301] ? futex_wait+0x11e/0x370 [ 1766.520700][T28301] ? find_held_lock+0x2b/0x80 [ 1766.520724][T28301] __sys_sendmsg+0x160/0x210 [ 1766.520737][T28301] ? __pfx___sys_sendmsg+0x10/0x10 [ 1766.520759][T28301] __do_fast_syscall_32+0x13a/0x8b0 [ 1766.520779][T28301] do_fast_syscall_32+0x32/0x70 [ 1766.520790][T28301] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1766.520805][T28301] RIP: 0023:0xf7f94fec [ 1766.520820][T28301] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 1766.520825][T28301] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1766.520837][T28301] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1766.520844][T28301] RDX: 00000000097a09f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1766.520851][T28301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1766.520858][T28301] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1766.520865][T28301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1766.520882][T28301] [ 1766.520988][T28301] kobject: can not set name properly! [ 1766.551224][T28304] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5618'. [ 1766.697898][T28301] bond9 (unregistered): Released all slaves [ 1767.579431][T28325] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5621'. [ 1768.516962][T28329] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5623'. [ 1768.979705][T28333] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5624'. [ 1769.089572][T28335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1769.122726][T28335] random: crng reseeded on system resumption [ 1771.458191][T28351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5628'. [ 1771.483213][T28354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5629'. [ 1771.492003][T28354] FAULT_INJECTION: forcing a failure. [ 1771.492003][T28354] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.492034][T28354] CPU: 2 UID: 0 PID: 28354 Comm: syz.5.5629 Tainted: G L syzkaller #0 PREEMPT(full) [ 1771.492061][T28354] Tainted: [L]=SOFTLOCKUP [ 1771.492068][T28354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1771.492080][T28354] Call Trace: [ 1771.492088][T28354] [ 1771.492096][T28354] dump_stack_lvl+0x100/0x190 [ 1771.492126][T28354] should_fail_ex.cold+0x5/0xa [ 1771.492152][T28354] should_failslab+0xc2/0x120 [ 1771.492179][T28354] __kmalloc_noprof+0xfc/0x840 [ 1771.492204][T28354] ? kobject_get_path+0xcf/0x2c0 [ 1771.492229][T28354] kobject_get_path+0xcf/0x2c0 [ 1771.492253][T28354] kobject_uevent_env+0x287/0x18b0 [ 1771.492315][T28354] net_rx_queue_update_kobjects+0x1dd/0x760 [ 1771.492347][T28354] ? kset_register+0x1bb/0x290 [ 1771.492370][T28354] netdev_register_kobject+0x2c6/0x410 [ 1771.492399][T28354] register_netdevice+0x15b6/0x25a0 [ 1771.492428][T28354] ? __pfx_register_netdevice+0x10/0x10 [ 1771.492458][T28354] bond_newlink+0x6a/0x100 [ 1771.492478][T28354] ? __pfx_bond_newlink+0x10/0x10 [ 1771.492497][T28354] rtnl_newlink+0x1697/0x2620 [ 1771.492530][T28354] ? __pfx_rtnl_newlink+0x10/0x10 [ 1771.492554][T28354] ? rcu_is_watching+0x13/0xc0 [ 1771.492595][T28354] ? find_held_lock+0x2b/0x80 [ 1771.492622][T28354] ? lock_acquire+0x1d1/0x380 [ 1771.492647][T28354] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1771.492669][T28354] ? find_held_lock+0x2b/0x80 [ 1771.492690][T28354] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1771.492711][T28354] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1771.492735][T28354] ? __pfx_rtnl_newlink+0x10/0x10 [ 1771.492776][T28354] rtnetlink_rcv_msg+0x95e/0xe90 [ 1771.492805][T28354] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1771.492836][T28354] ? ref_tracker_free+0x37e/0x6c0 [ 1771.492863][T28354] netlink_rcv_skb+0x159/0x420 [ 1771.492882][T28354] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1771.492912][T28354] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1771.492941][T28354] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1771.492966][T28354] netlink_unicast+0x585/0x850 [ 1771.492980][T28354] ? __pfx_netlink_unicast+0x10/0x10 [ 1771.492996][T28354] netlink_sendmsg+0x8b0/0xda0 [ 1771.493010][T28354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1771.493023][T28354] ? apparmor_socket_sendmsg+0x165/0x280 [ 1771.493045][T28354] ____sys_sendmsg+0xa4d/0xbe0 [ 1771.493060][T28354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1771.493072][T28354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1771.493095][T28354] ___sys_sendmsg+0x190/0x1e0 [ 1771.493113][T28354] ? __pfx____sys_sendmsg+0x10/0x10 [ 1771.493130][T28354] ? futex_wait+0x11e/0x370 [ 1771.493151][T28354] ? find_held_lock+0x2b/0x80 [ 1771.493175][T28354] __sys_sendmsg+0x160/0x210 [ 1771.493189][T28354] ? __pfx___sys_sendmsg+0x10/0x10 [ 1771.493210][T28354] __do_fast_syscall_32+0x13a/0x8b0 [ 1771.493231][T28354] do_fast_syscall_32+0x32/0x70 [ 1771.493243][T28354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1771.493258][T28354] RIP: 0023:0xf7f94fec [ 1771.493272][T28354] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 1771.493278][T28354] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1771.493290][T28354] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1771.493297][T28354] RDX: 00000000097a09f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1771.493305][T28354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1771.493313][T28354] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1771.493320][T28354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1771.493337][T28354] [ 1771.499812][T28354] bond9: entered promiscuous mode [ 1771.499842][T28354] bond9: entered allmulticast mode [ 1771.500041][T28354] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1771.522100][T28351] FAULT_INJECTION: forcing a failure. [ 1771.522100][T28351] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1771.522132][T28351] CPU: 3 UID: 0 PID: 28351 Comm: syz.3.5628 Tainted: G L syzkaller #0 PREEMPT(full) [ 1771.522159][T28351] Tainted: [L]=SOFTLOCKUP [ 1771.522167][T28351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1771.522179][T28351] Call Trace: [ 1771.522186][T28351] [ 1771.522195][T28351] dump_stack_lvl+0x100/0x190 [ 1771.522223][T28351] should_fail_ex.cold+0x5/0xa [ 1771.522244][T28351] ? prepare_alloc_pages+0x16d/0x5b0 [ 1771.522275][T28351] should_fail_alloc_page+0xeb/0x140 [ 1771.522303][T28351] prepare_alloc_pages+0x1f0/0x5b0 [ 1771.522330][T28351] ? rcu_read_unlock+0x17/0x60 [ 1771.522383][T28351] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1771.522415][T28351] ? __asan_memset+0x23/0x50 [ 1771.522457][T28351] ? __lock_acquire+0x5c0/0x1f40 [ 1771.522489][T28351] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1771.522515][T28351] ? __css_rstat_updated+0x1ce/0x590 [ 1771.522538][T28351] ? lock_acquire+0x1d1/0x380 [ 1771.522564][T28351] ? do_raw_spin_lock+0x128/0x260 [ 1771.522584][T28351] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1771.522604][T28351] ? find_held_lock+0x2b/0x80 [ 1771.522633][T28351] ? __lock_acquire+0x5c0/0x1f40 [ 1771.522659][T28351] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1771.522688][T28351] ? policy_nodemask+0xed/0x4f0 [ 1771.522718][T28351] alloc_pages_mpol+0x201/0x550 [ 1771.522747][T28351] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1771.522783][T28351] folio_alloc_mpol_noprof+0x36/0x260 [ 1771.522806][T28351] shmem_alloc_folio+0x135/0x160 [ 1771.522835][T28351] shmem_alloc_and_add_folio+0x371/0xd40 [ 1771.522861][T28351] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1771.522883][T28351] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1771.522909][T28351] shmem_get_folio_gfp+0x75b/0x1980 [ 1771.522936][T28351] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1771.522959][T28351] ? filemap_map_pages+0x1155/0x2060 [ 1771.522992][T28351] shmem_fault+0x1fb/0xa30 [ 1771.523014][T28351] ? __pfx_shmem_fault+0x10/0x10 [ 1771.523038][T28351] ? __pfx_filemap_map_pages+0x10/0x10 [ 1771.523069][T28351] ? find_held_lock+0x2b/0x80 [ 1771.523092][T28351] ? __pfx_filemap_map_pages+0x10/0x10 [ 1771.523119][T28351] __do_fault+0x10b/0x440 [ 1771.523144][T28351] do_fault+0xb3f/0x1830 [ 1771.523174][T28351] ? __pfx_do_fault+0x10/0x10 [ 1771.523197][T28351] ? rcu_read_unlock+0x2d/0xb0 [ 1771.523216][T28351] ? rcu_read_unlock+0x2d/0xb0 [ 1771.523235][T28351] ? __pte_offset_map+0x179/0x310 [ 1771.523263][T28351] __handle_mm_fault+0x150b/0x2f60 [ 1771.523289][T28351] ? __pfx___handle_mm_fault+0x10/0x10 [ 1771.523307][T28351] ? pte_offset_map_lock+0x174/0x320 [ 1771.523332][T28351] ? find_held_lock+0x2b/0x80 [ 1771.523352][T28351] ? find_held_lock+0x2b/0x80 [ 1771.523379][T28351] ? follow_page_pte+0x536/0x1050 [ 1771.523422][T28351] handle_mm_fault+0x363/0xa20 [ 1771.523448][T28351] __get_user_pages+0x8ae/0x2c30 [ 1771.523479][T28351] ? __pfx_mt_find+0x10/0x10 [ 1771.523500][T28351] ? __pfx___get_user_pages+0x10/0x10 [ 1771.523535][T28351] populate_vma_page_range+0x267/0x3f0 [ 1771.523563][T28351] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1771.523590][T28351] ? __pfx_find_vma_intersection+0x10/0x10 [ 1771.523625][T28351] __mm_populate+0x107/0x3a0 [ 1771.523654][T28351] ? __pfx___mm_populate+0x10/0x10 [ 1771.523683][T28351] ? up_write+0x2dc/0x5b0 [ 1771.523704][T28351] vm_mmap_pgoff+0x441/0x470 [ 1771.523731][T28351] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1771.523756][T28351] ? __pfx_do_futex+0x10/0x10 [ 1771.523787][T28351] ksys_mmap_pgoff+0xe4/0x610 [ 1771.523814][T28351] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1771.523847][T28351] __do_fast_syscall_32+0x13a/0x8b0 [ 1771.523878][T28351] do_fast_syscall_32+0x32/0x70 [ 1771.523897][T28351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1771.523920][T28351] RIP: 0023:0xf741efec [ 1771.523943][T28351] Code: Unable to access opcode bytes at 0xf741efc2. [ 1771.523952][T28351] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 1771.523971][T28351] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 1771.523984][T28351] RDX: 0000000006ebbeee RSI: 0000000000008031 RDI: 00000000ffffffff [ 1771.523997][T28351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1771.524009][T28351] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1771.524021][T28351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1771.524049][T28351] [ 1772.019812][T28364] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5630'. [ 1772.125533][ T44] audit: type=1326 audit(1791449101.324:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28373 comm="syz.3.5634" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741efec code=0x0 [ 1772.414235][ T42] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1772.575138][ T42] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1772.576070][ T42] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1772.576098][ T42] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1772.576118][ T42] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1772.578034][ T42] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1772.578055][ T42] usb 8-1: Product: syz [ 1772.578068][ T42] usb 8-1: Manufacturer: syz [ 1772.578082][ T42] usb 8-1: SerialNumber: syz [ 1772.580238][ T42] usb 8-1: config 0 descriptor?? [ 1772.585953][T28378] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1772.591962][ T42] usb 8-1: selecting invalid altsetting 0 [ 1773.513501][T28408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5641'. [ 1773.574537][T28409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1773.590168][T28409] random: crng reseeded on system resumption [ 1773.667902][T28414] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5639'. [ 1773.763159][T28408] FAULT_INJECTION: forcing a failure. [ 1773.763159][T28408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1773.763246][T28408] CPU: 1 UID: 0 PID: 28408 Comm: syz.5.5641 Tainted: G L syzkaller #0 PREEMPT(full) [ 1773.763275][T28408] Tainted: [L]=SOFTLOCKUP [ 1773.763280][T28408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1773.763288][T28408] Call Trace: [ 1773.763293][T28408] [ 1773.763299][T28408] dump_stack_lvl+0x100/0x190 [ 1773.763319][T28408] should_fail_ex.cold+0x5/0xa [ 1773.763332][T28408] ? prepare_alloc_pages+0x16d/0x5b0 [ 1773.763353][T28408] should_fail_alloc_page+0xeb/0x140 [ 1773.763373][T28408] prepare_alloc_pages+0x1f0/0x5b0 [ 1773.763393][T28408] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1773.763411][T28408] ? timerqueue_linked_add+0x260/0x430 [ 1773.763426][T28408] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 1773.763445][T28408] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1773.763463][T28408] ? mark_held_locks+0x40/0x70 [ 1773.763480][T28408] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1773.763498][T28408] ? lockdep_hardirqs_on+0x7d/0x110 [ 1773.763515][T28408] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1773.763535][T28408] ? rcu_is_watching+0x13/0xc0 [ 1773.763556][T28408] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1773.763574][T28408] ? policy_nodemask+0xed/0x4f0 [ 1773.763594][T28408] alloc_pages_mpol+0x201/0x550 [ 1773.763613][T28408] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1773.763635][T28408] folio_alloc_mpol_noprof+0x36/0x260 [ 1773.763649][T28408] shmem_alloc_folio+0x135/0x160 [ 1773.763668][T28408] shmem_alloc_and_add_folio+0x371/0xd40 [ 1773.763684][T28408] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1773.763699][T28408] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1773.763716][T28408] shmem_get_folio_gfp+0x75b/0x1980 [ 1773.763733][T28408] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1773.763747][T28408] ? filemap_map_pages+0x1155/0x2060 [ 1773.763769][T28408] shmem_fault+0x1fb/0xa30 [ 1773.763782][T28408] ? __pfx_shmem_fault+0x10/0x10 [ 1773.763795][T28408] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1773.763811][T28408] ? lockdep_hardirqs_on+0x7d/0x110 [ 1773.763828][T28408] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1773.763851][T28408] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 1773.763873][T28408] ? __rcu_read_unlock+0x26a/0x5e0 [ 1773.763894][T28408] ? __pfx_filemap_map_pages+0x10/0x10 [ 1773.763913][T28408] __do_fault+0x10b/0x440 [ 1773.763930][T28408] do_fault+0xb3f/0x1830 [ 1773.763950][T28408] ? __pfx_do_fault+0x10/0x10 [ 1773.763979][T28408] ? rcu_read_unlock+0x2d/0xb0 [ 1773.763995][T28408] ? rcu_read_unlock+0x2d/0xb0 [ 1773.764009][T28408] ? __pte_offset_map+0x179/0x310 [ 1773.764029][T28408] __handle_mm_fault+0x150b/0x2f60 [ 1773.764047][T28408] ? __pfx___handle_mm_fault+0x10/0x10 [ 1773.764061][T28408] ? pte_offset_map_lock+0x174/0x320 [ 1773.764078][T28408] ? find_held_lock+0x2b/0x80 [ 1773.764093][T28408] ? find_held_lock+0x2b/0x80 [ 1773.764108][T28408] ? follow_page_pte+0x536/0x1050 [ 1773.764133][T28408] handle_mm_fault+0x363/0xa20 [ 1773.764149][T28408] __get_user_pages+0x8ae/0x2c30 [ 1773.764170][T28408] ? __pfx_mt_find+0x10/0x10 [ 1773.764181][T28408] ? __pfx___get_user_pages+0x10/0x10 [ 1773.764203][T28408] populate_vma_page_range+0x267/0x3f0 [ 1773.764222][T28408] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1773.764239][T28408] ? __pfx_find_vma_intersection+0x10/0x10 [ 1773.764279][T28408] __mm_populate+0x107/0x3a0 [ 1773.764300][T28408] ? __pfx___mm_populate+0x10/0x10 [ 1773.764320][T28408] ? up_write+0x2dc/0x5b0 [ 1773.764335][T28408] vm_mmap_pgoff+0x441/0x470 [ 1773.764354][T28408] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1773.764371][T28408] ? __pfx_do_futex+0x10/0x10 [ 1773.764392][T28408] ksys_mmap_pgoff+0xe4/0x610 [ 1773.764412][T28408] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1773.764433][T28408] __do_fast_syscall_32+0x13a/0x8b0 [ 1773.764454][T28408] do_fast_syscall_32+0x32/0x70 [ 1773.764465][T28408] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1773.764480][T28408] RIP: 0023:0xf7f94fec [ 1773.764494][T28408] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 1773.764499][T28408] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 1773.764512][T28408] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 1773.764519][T28408] RDX: 0000000006ebbeee RSI: 0000000000008031 RDI: 00000000ffffffff [ 1773.764527][T28408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1773.764534][T28408] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1773.764541][T28408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1773.764556][T28408] [ 1774.436943][T28418] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3345044383 (214082840512 ns) > initial count (60632714432 ns). Using initial count to start timer. [ 1774.699930][T28422] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 1774.984818][T28434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5644'. [ 1774.985052][T28429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5644'. [ 1775.026810][T12133] usb 8-1: USB disconnect, device number 84 [ 1775.193478][T28435] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5645'. [ 1775.538241][T28447] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5646'. [ 1777.214548][ T5886] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1777.434211][ T5886] usb 8-1: Using ep0 maxpacket: 8 [ 1777.435707][ T5886] usb 8-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1777.437658][ T5886] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1777.437677][ T5886] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1777.443486][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.443506][ T5886] usb 8-1: Product: syz [ 1777.443518][ T5886] usb 8-1: Manufacturer: syz [ 1777.443530][ T5886] usb 8-1: SerialNumber: syz [ 1777.910127][T14377] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1778.069200][ T5886] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1778.071354][ T5886] usb 8-1: USB disconnect, device number 85 [ 1778.084630][T14377] usb 10-1: device descriptor read/64, error -71 [ 1778.085298][T28394] udevd[28394]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1778.354490][T14377] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1778.484418][T14377] usb 10-1: device descriptor read/64, error -71 [ 1778.500053][T28501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5658'. [ 1778.601479][T14377] usb usb10-port1: attempt power cycle [ 1778.954183][T14377] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1778.959720][ T44] audit: type=1326 audit(1791449113.158:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28504 comm="syz.4.5660" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 1778.959770][ T44] audit: type=1326 audit(1791449113.158:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28504 comm="syz.4.5660" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 1778.961054][ T44] audit: type=1326 audit(1791449113.158:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28504 comm="syz.4.5660" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 1778.961104][ T44] audit: type=1326 audit(1791449113.158:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28504 comm="syz.4.5660" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 1778.961142][ T44] audit: type=1326 audit(1791449113.158:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28504 comm="syz.4.5660" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 1778.961181][ T44] audit: type=1326 audit(1791449113.158:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28504 comm="syz.4.5660" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71975eb code=0x7ffc0000 [ 1778.961803][ T44] audit: type=1326 audit(1791449113.158:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28504 comm="syz.4.5660" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71975eb code=0x7ffc0000 [ 1778.961846][ T44] audit: type=1326 audit(1791449113.158:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28504 comm="syz.4.5660" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 1778.961882][ T44] audit: type=1326 audit(1791449113.158:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28504 comm="syz.4.5660" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 1778.962552][ T44] audit: type=1326 audit(1791449113.158:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28504 comm="syz.4.5660" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 1778.985831][T14377] usb 10-1: device descriptor read/8, error -71 [ 1779.233319][T28522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5666'. [ 1779.254290][T14377] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1779.274896][T14377] usb 10-1: device descriptor read/8, error -71 [ 1779.384685][T14377] usb usb10-port1: unable to enumerate USB device [ 1779.473496][T28532] syzkaller0: entered promiscuous mode [ 1779.473513][T28532] syzkaller0: entered allmulticast mode [ 1780.000914][T28541] Line length is too long: Should be less than 4094 [ 1780.859719][T28572] FAULT_INJECTION: forcing a failure. [ 1780.859719][T28572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1780.859748][T28572] CPU: 0 UID: 0 PID: 28572 Comm: syz.5.5687 Tainted: G L syzkaller #0 PREEMPT(full) [ 1780.859768][T28572] Tainted: [L]=SOFTLOCKUP [ 1780.859773][T28572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1780.859782][T28572] Call Trace: [ 1780.859788][T28572] [ 1780.860086][T28572] dump_stack_lvl+0x100/0x190 [ 1780.860132][T28572] should_fail_ex.cold+0x5/0xa [ 1780.860423][T28572] strncpy_from_user+0x3b/0x2d0 [ 1780.860447][T28572] path_setxattrat+0x127/0x3b0 [ 1780.860479][T28572] ? __pfx_path_setxattrat+0x10/0x10 [ 1780.860512][T28572] ? lock_acquire+0x1d1/0x380 [ 1780.860559][T28572] ? xfd_validate_state+0x129/0x190 [ 1780.860593][T28572] __ia32_sys_fsetxattr+0xc4/0x140 [ 1780.860657][T28572] ? __do_fast_syscall_32+0xb3/0x8b0 [ 1780.860690][T28572] ? lockdep_hardirqs_on+0x7d/0x110 [ 1780.860718][T28572] __do_fast_syscall_32+0x13a/0x8b0 [ 1780.860753][T28572] do_fast_syscall_32+0x32/0x70 [ 1780.860771][T28572] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1780.860794][T28572] RIP: 0023:0xf7f94fec [ 1780.860813][T28572] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 1780.860822][T28572] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000000e4 [ 1780.860841][T28572] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1780.860853][T28572] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1780.860864][T28572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1780.860877][T28572] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1780.860889][T28572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1780.860915][T28572] [ 1781.204576][T28551] netlink: 352 bytes leftover after parsing attributes in process `syz.4.5679'. [ 1781.294327][ T42] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1781.353514][T28590] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5694'. [ 1781.444872][ T42] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1781.445926][ T42] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1781.445961][ T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.550453][T14377] wiimote 0005:057E:0306.0007: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1781.551256][T14377] wiimote 0005:057E:0306.0007: New device registered [ 1781.553701][T28605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5700'. [ 1781.564716][T28600] wiimote 0005:057E:0306.0007: Device removed [ 1781.633838][T28606] fido_id[28606]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1781.653284][ T42] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 1781.654940][ T42] input: Aiptek as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:17.0/input/input16 [ 1781.704324][ T42] usb 10-1: USB disconnect, device number 21 [ 1781.704379][ C2] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1781.971059][T28622] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 1781.979468][T28622] pci 0000:00:00.0: Adding to iommu group 0 [ 1782.410530][T28639] device-mapper: ioctl: only supply one of name or uuid, cmd(15) [ 1782.464969][T28642] netlink: 'syz.5.5714': attribute type 4 has an invalid length. [ 1782.724270][ T42] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 1782.876021][ T42] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1782.877031][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.877067][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.880602][ T42] usb 8-1: config 0 descriptor?? [ 1782.954207][T20807] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1783.124359][T20807] usb 6-1: Using ep0 maxpacket: 32 [ 1783.125948][T20807] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1783.125973][T20807] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1783.126936][T20807] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1783.126951][T20807] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.126963][T20807] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1783.126975][T20807] usb 6-1: config 128 has no interface number 0 [ 1783.126994][T20807] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1783.127010][T20807] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1783.127023][T20807] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1783.128638][T20807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.128652][T20807] usb 6-1: Product: syz [ 1783.128661][T20807] usb 6-1: Manufacturer: syz [ 1783.128670][T20807] usb 6-1: SerialNumber: syz [ 1783.292457][ T42] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 1783.292488][ T42] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 1783.292507][ T42] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 1783.292527][ T42] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 1783.292547][ T42] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 1783.303477][ T42] playstation 0003:054C:0DF2.0008: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 1783.365317][T20807] usb 6-1: USB disconnect, device number 90 [ 1783.376919][T28394] udevd[28394]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1783.493151][ T42] playstation 0003:054C:0DF2.0008: Failed to retrieve feature with reportID 9: -71 [ 1783.493177][ T42] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -71 [ 1783.493217][ T42] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense [ 1783.493232][ T42] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 1783.495480][ T42] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -71 [ 1783.505586][ T42] usb 8-1: USB disconnect, device number 86 [ 1784.794670][T28710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5740'. [ 1787.863756][T28790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5769'. [ 1788.414187][T25231] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 1788.564966][T25231] usb 9-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1788.566034][T25231] usb 9-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1788.566062][T25231] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1788.566089][T25231] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.568929][T25231] usb 9-1: config 0 descriptor?? [ 1788.967044][ T44] kauditd_printk_skb: 24 callbacks suppressed [ 1788.967063][ T44] audit: type=1326 audit(1791449123.168:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28820 comm="syz.1.5779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efec code=0x7ffc0000 [ 1788.967191][ T44] audit: type=1326 audit(1791449123.168:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28820 comm="syz.1.5779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efec code=0x7ffc0000 [ 1788.969263][ T44] audit: type=1326 audit(1791449123.168:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28820 comm="syz.1.5779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efec code=0x7ffc0000 [ 1788.969397][ T44] audit: type=1326 audit(1791449123.168:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28820 comm="syz.1.5779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efec code=0x7ffc0000 [ 1788.969422][ T44] audit: type=1326 audit(1791449123.168:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28820 comm="syz.1.5779" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf741efec code=0x7ffc0000 [ 1788.969685][ T44] audit: type=1326 audit(1791449123.168:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28820 comm="syz.1.5779" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71775eb code=0x7ffc0000 [ 1788.970117][ T44] audit: type=1326 audit(1791449123.168:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28820 comm="syz.1.5779" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71775eb code=0x7ffc0000 [ 1788.970273][ T44] audit: type=1326 audit(1791449123.168:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28820 comm="syz.1.5779" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71775eb code=0x7ffc0000 [ 1788.970417][ T44] audit: type=1326 audit(1791449123.168:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28820 comm="syz.1.5779" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71775eb code=0x7ffc0000 [ 1788.970802][ T44] audit: type=1326 audit(1791449123.168:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28820 comm="syz.1.5779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efec code=0x7ffc0000 [ 1789.252750][T28826] overlayfs: failed to resolve './file2': -2 [ 1789.455741][T28829] tc_dump_action: action bad kind [ 1789.464148][T25231] hid-led 0003:1294:1320.0009: ignoring exceeding usage max [ 1789.472050][T25231] hid-led 0003:1294:1320.0009: hidraw1: USB HID v10.01 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 1789.524657][T25231] hid-led 0003:1294:1320.0009: Riso Kagaku Webmail Notifier initialized [ 1789.689241][T28836] fuse: Bad value for 'fd' [ 1789.826126][T28841] erspan0: entered promiscuous mode [ 1789.884245][T19496] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1790.034665][T19496] usb 6-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 1790.035535][T19496] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.041304][T19496] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1790.446493][T19496] scsi host6: usb-storage 6-1:1.0 [ 1790.653128][T19496] usb 6-1: USB disconnect, device number 91 [ 1791.168541][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.168708][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.234689][ T42] usb 9-1: USB disconnect, device number 37 [ 1791.266079][T20813] leds riso_kagaku1:blue: Setting an LED's brightness failed (-38) [ 1791.319466][T14369] leds riso_kagaku1:green: Setting an LED's brightness failed (-38) [ 1791.320056][T14369] leds riso_kagaku1:red: Setting an LED's brightness failed (-38) [ 1792.168746][T28874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5793'. [ 1792.219116][T28874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5793'. [ 1792.324313][T19496] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1792.474192][T19496] usb 6-1: Using ep0 maxpacket: 16 [ 1792.477009][T19496] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1792.483739][T19496] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.483849][T19496] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1792.510092][T19496] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.510198][T19496] usb 6-1: Product: syz [ 1792.510215][T19496] usb 6-1: Manufacturer: syz [ 1792.510229][T19496] usb 6-1: SerialNumber: syz [ 1792.559542][T19496] usb 6-1: 0:2 : does not exist [ 1792.751341][T28886] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5797'. [ 1792.767997][T19496] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1792.791263][T19496] usb 6-1: USB disconnect, device number 92 [ 1792.875757][T28394] udevd[28394]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1793.042571][T28904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5802'. [ 1793.354211][ T42] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 1793.504193][ T42] usb 8-1: device descriptor read/64, error -71 [ 1793.775363][ T42] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 1793.924263][ T42] usb 8-1: device descriptor read/64, error -71 [ 1794.034422][ T42] usb usb8-port1: attempt power cycle [ 1794.241860][T28917] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5804'. [ 1794.434332][ T42] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 1794.456724][ T42] usb 8-1: device descriptor read/8, error -71 [ 1794.650954][T20807] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1794.653166][T20807] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1794.714283][ T42] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1794.746740][ T42] usb 8-1: device descriptor read/8, error -71 [ 1794.855376][ T42] usb usb8-port1: unable to enumerate USB device [ 1794.972738][T28948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5817'. [ 1795.017141][T28933] fido_id[28933]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1795.144504][T20807] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1795.304396][T20807] usb 6-1: Using ep0 maxpacket: 16 [ 1795.304955][T20807] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1795.305758][T20807] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1795.305772][T20807] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1795.307534][T20807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.307549][T20807] usb 6-1: Product: syz [ 1795.307557][T20807] usb 6-1: Manufacturer: syz [ 1795.307566][T20807] usb 6-1: SerialNumber: syz [ 1795.316284][T28960] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5821'. [ 1795.376790][T20807] usb 6-1: 0:2 : does not exist [ 1795.518944][T20807] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1795.546467][T20807] usb 6-1: USB disconnect, device number 93 [ 1795.584985][T28394] udevd[28394]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1796.008233][T28980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5827'. [ 1796.213117][ T44] kauditd_printk_skb: 3 callbacks suppressed [ 1796.213135][ T44] audit: type=1326 audit(1791449134.403:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28983 comm="syz.3.5829" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741efec code=0x0 [ 1796.465205][T28994] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5833'. [ 1796.465221][T28994] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5833'. [ 1796.465229][T28994] netlink: 'syz.5.5833': attribute type 6 has an invalid length. [ 1796.465237][T28994] netlink: 'syz.5.5833': attribute type 5 has an invalid length. [ 1796.514393][ T5886] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1796.517642][T20807] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 1796.664890][ T5886] usb 9-1: Using ep0 maxpacket: 16 [ 1796.665655][ T5886] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1796.666733][T20807] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1796.667120][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.667145][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1796.667165][ T5886] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1796.667199][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.669469][ T5886] usb 9-1: config 0 descriptor?? [ 1796.677041][T20807] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1796.677067][T20807] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1796.677087][T20807] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1796.679653][T20807] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1796.679674][T20807] usb 8-1: Product: syz [ 1796.679687][T20807] usb 8-1: Manufacturer: syz [ 1796.679699][T20807] usb 8-1: SerialNumber: syz [ 1796.685293][T20807] usb 8-1: config 0 descriptor?? [ 1796.689600][T28989] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1796.701715][T20807] usb 8-1: selecting invalid altsetting 0 [ 1797.134625][ T5886] microsoft 0003:045E:07DA.000B: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1797.290694][T29008] fuse: Bad value for 'fd' [ 1797.308561][ T42] usb 9-1: USB disconnect, device number 38 [ 1797.527057][T29012] __nla_validate_parse: 2 callbacks suppressed [ 1797.527099][T29012] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5836'. [ 1798.571849][T29036] veth1_to_bond: entered promiscuous mode [ 1798.577961][T29036] bridge0: port 3(veth1_to_bond) entered blocking state [ 1798.578031][T29036] bridge0: port 3(veth1_to_bond) entered disabled state [ 1798.578922][T29036] veth1_to_bond: entered allmulticast mode [ 1798.580866][T29036] bridge0: port 3(veth1_to_bond) entered blocking state [ 1798.580916][T29036] bridge0: port 3(veth1_to_bond) entered forwarding state [ 1798.734808][ T5886] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1798.885000][ T5886] usb 10-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 1798.885846][ T5886] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.889311][ T5886] usb-storage 10-1:1.0: USB Mass Storage device detected [ 1799.044265][ T35] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 1799.085219][T12133] usb 8-1: USB disconnect, device number 91 [ 1799.194691][ T35] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1799.195476][ T35] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.195501][ T35] usb 6-1: Duplicate descriptor for config 9 interface 0 altsetting 0, skipping [ 1799.195518][ T35] usb 6-1: config 9 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1799.197089][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.197109][ T35] usb 6-1: Product: syz [ 1799.197121][ T35] usb 6-1: Manufacturer: syz [ 1799.197135][ T35] usb 6-1: SerialNumber: syz [ 1799.295615][ T5886] scsi host6: usb-storage 10-1:1.0 [ 1799.434280][ T35] usb 6-1: cannot request logical cluster ID: 3 (err: -71) [ 1799.435177][ T35] usb 6-1: unit 80 not found! [ 1799.455470][ T35] usb 6-1: USB disconnect, device number 94 [ 1799.464830][T28394] udevd[28394]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:9.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1799.499535][ T5886] usb 10-1: USB disconnect, device number 23 [ 1800.590506][T29081] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5855'. [ 1800.912382][T29087] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5856'. [ 1801.849443][T29105] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5861'. [ 1802.446240][T29128] team_slave_0: entered allmulticast mode [ 1802.446696][T29128] team_slave_0: left allmulticast mode [ 1803.813142][T29168] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5881'. [ 1804.191078][T29176] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5882'. [ 1805.206598][T29190] binder: 29189:29190 ioctl c0306201 800006c0 returned -22 [ 1805.331949][T29207] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5894'. [ 1805.331965][T29207] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5894'. [ 1805.331973][T29207] netlink: 'syz.5.5894': attribute type 6 has an invalid length. [ 1805.331981][T29207] netlink: 'syz.5.5894': attribute type 5 has an invalid length. [ 1805.331988][T29207] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5894'. [ 1805.400765][T29201] lo: entered promiscuous mode [ 1805.425100][T29222] FAULT_INJECTION: forcing a failure. [ 1805.425100][T29222] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.425126][T29222] CPU: 3 UID: 0 PID: 29222 Comm: syz.3.5900 Tainted: G L syzkaller #0 PREEMPT(full) [ 1805.425153][T29222] Tainted: [L]=SOFTLOCKUP [ 1805.425161][T29222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1805.425174][T29222] Call Trace: [ 1805.425181][T29222] [ 1805.425190][T29222] dump_stack_lvl+0x100/0x190 [ 1805.425222][T29222] should_fail_ex.cold+0x5/0xa [ 1805.425255][T29222] should_failslab+0xc2/0x120 [ 1805.425287][T29222] __kmalloc_noprof+0xfc/0x840 [ 1805.425315][T29222] ? tomoyo_encode2+0xfb/0x3c0 [ 1805.425341][T29222] tomoyo_encode2+0xfb/0x3c0 [ 1805.425357][T29222] ? __get_fs_type+0xe3/0x200 [ 1805.425378][T29222] tomoyo_encode+0x29/0x50 [ 1805.425397][T29222] tomoyo_mount_acl+0x388/0x8b0 [ 1805.425419][T29222] ? is_bpf_text_address+0x8a/0x1a0 [ 1805.425448][T29222] ? is_bpf_text_address+0x8a/0x1a0 [ 1805.425479][T29222] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1805.425510][T29222] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1805.425532][T29222] ? kernel_text_address+0x8d/0x100 [ 1805.425551][T29222] ? unwind_get_return_address+0x59/0xa0 [ 1805.425568][T29222] ? arch_stack_walk+0xa6/0xf0 [ 1805.425584][T29222] ? __lock_acquire+0x5c0/0x1f40 [ 1805.425609][T29222] ? tomoyo_mount_permission+0x1f6/0x460 [ 1805.425626][T29222] ? tomoyo_domain+0xb2/0x150 [ 1805.425643][T29222] ? tomoyo_profile+0x47/0x60 [ 1805.425662][T29222] tomoyo_mount_permission+0x214/0x460 [ 1805.425676][T29222] ? tomoyo_mount_permission+0x1f6/0x460 [ 1805.425692][T29222] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1805.425714][T29222] security_sb_mount+0xdd/0x270 [ 1805.425727][T29222] path_mount+0x158/0x24c0 [ 1805.425750][T29222] ? __pfx_path_mount+0x10/0x10 [ 1805.425767][T29222] ? lockdep_hardirqs_on+0x7d/0x110 [ 1805.425787][T29222] ? putname+0xb1/0x110 [ 1805.425803][T29222] ? kmem_cache_free+0x127/0x6c0 [ 1805.425821][T29222] ? __ia32_sys_mount+0x292/0x310 [ 1805.425831][T29222] __ia32_sys_mount+0x292/0x310 [ 1805.425843][T29222] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1805.425858][T29222] __do_fast_syscall_32+0x13a/0x8b0 [ 1805.425879][T29222] do_fast_syscall_32+0x32/0x70 [ 1805.425891][T29222] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1805.425906][T29222] RIP: 0023:0xf741efec [ 1805.425919][T29222] Code: Unable to access opcode bytes at 0xf741efc2. [ 1805.425925][T29222] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 1805.425937][T29222] RAX: ffffffffffffffda RBX: 0000000080000340 RCX: 0000000080000280 [ 1805.425944][T29222] RDX: 0000000080000300 RSI: 0000000002208440 RDI: 0000000080000200 [ 1805.425952][T29222] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1805.425958][T29222] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1805.425965][T29222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1805.425980][T29222] [ 1805.452179][T29201] tunl0: entered promiscuous mode [ 1805.453282][T29201] gre0: entered promiscuous mode [ 1805.459419][T29201] gretap0: entered promiscuous mode [ 1805.470647][T29201] erspan0: entered promiscuous mode [ 1805.472626][T29201] ip_vti0: entered promiscuous mode [ 1805.474388][T29201] ip6_vti0: entered promiscuous mode [ 1805.478183][T29201] sit0: entered promiscuous mode [ 1805.489080][T29201] ip6tnl0: entered promiscuous mode [ 1805.495857][T29201] ip6gre0: entered promiscuous mode [ 1805.506059][T29201] syz_tun: entered promiscuous mode [ 1805.516991][T29201] ip6gretap0: entered promiscuous mode [ 1805.524905][T29201] bridge0: port 3(veth1_to_bond) entered disabled state [ 1805.524997][T29201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.525621][T29201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.530790][T29201] bridge0: entered promiscuous mode [ 1805.550247][T29201] vcan0: entered promiscuous mode [ 1805.556977][T29201] bond0: entered promiscuous mode [ 1805.557017][T29201] bond_slave_0: entered promiscuous mode [ 1805.557562][T29201] bond_slave_1: entered promiscuous mode [ 1805.562745][T29201] team0: entered promiscuous mode [ 1805.562795][T29201] team_slave_0: entered promiscuous mode [ 1805.563267][T29201] team_slave_1: entered promiscuous mode [ 1805.572975][T29201] dummy0: entered promiscuous mode [ 1805.585840][T29201] nlmon0: entered promiscuous mode [ 1805.588647][T29201] batadv0: entered promiscuous mode [ 1805.593852][T29201] vxcan0: entered promiscuous mode [ 1805.600260][T29201] vxcan1: entered promiscuous mode [ 1805.609035][T29201] veth0: entered promiscuous mode [ 1805.635294][T29201] veth1: entered promiscuous mode [ 1805.657156][T29201] wg0: entered promiscuous mode [ 1805.658522][T29201] wg1: entered promiscuous mode [ 1805.659722][T29201] wg2: entered promiscuous mode [ 1805.660784][T29201] veth0_to_bridge: entered promiscuous mode [ 1805.662963][T29201] veth1_to_bridge: entered promiscuous mode [ 1805.667854][T29201] veth0_to_bond: entered promiscuous mode [ 1805.674452][T29201] veth0_to_team: entered promiscuous mode [ 1805.678211][T29201] veth1_to_team: entered promiscuous mode [ 1805.680679][T29201] veth0_to_batadv: entered promiscuous mode [ 1805.682244][T29201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1805.682270][T29201] batadv_slave_0: entered promiscuous mode [ 1805.683754][T29201] veth1_to_batadv: entered promiscuous mode [ 1805.685081][T29201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1805.685105][T29201] batadv_slave_1: entered promiscuous mode [ 1805.686574][T29201] xfrm0: entered promiscuous mode [ 1805.687590][T29201] veth0_to_hsr: entered promiscuous mode [ 1805.689801][T29201] veth1_to_hsr: entered promiscuous mode [ 1805.693765][T29201] hsr0: entered promiscuous mode [ 1805.696182][T29201] veth1_virt_wifi: entered promiscuous mode [ 1805.697334][T29201] veth0_virt_wifi: entered promiscuous mode [ 1805.698476][T29201] virt_wifi0: entered promiscuous mode [ 1805.703357][T29201] vlan0: entered promiscuous mode [ 1805.706364][T29201] vlan1: entered promiscuous mode [ 1805.715328][T29201] macvlan0: entered promiscuous mode [ 1805.728546][T29201] macvlan1: entered promiscuous mode [ 1805.729784][T29201] ipvlan0: entered promiscuous mode [ 1805.729858][T29201] ipvlan1: entered promiscuous mode [ 1805.737990][T29201] macvtap0: entered promiscuous mode [ 1805.744219][T29201] macsec0: entered promiscuous mode [ 1805.746177][T29201] geneve0: entered promiscuous mode [ 1805.748273][T29201] geneve1: entered promiscuous mode [ 1805.750127][T29201] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1805.751738][T29201] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1805.753695][T29201] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 1805.770720][T29201] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 1805.779892][T29201] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1805.783734][T29201] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 1805.789595][T29201] vxlan0: entered promiscuous mode [ 1805.789862][T29201] bridge1: entered promiscuous mode [ 1805.792321][T29201] veth2: entered promiscuous mode [ 1805.792413][T29201] veth3: entered promiscuous mode [ 1805.797750][T20813] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.797858][T20813] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.797907][T20813] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.805338][T20813] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.315551][T29246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5908'. [ 1807.194187][T12133] usb 8-1: new full-speed USB device number 92 using dummy_hcd [ 1807.364629][T12133] usb 8-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1807.365446][T12133] usb 8-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1807.365555][T12133] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1807.365573][T12133] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.366855][T12133] usb 8-1: config 0 descriptor?? [ 1807.632356][ T44] audit: type=1326 audit(1791449154.827:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29264 comm="syz.4.5914" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa3fec code=0x0 [ 1807.877125][T12133] hid-led 0003:1294:1320.000C: hidraw1: USB HID v10.01 Device [HID 1294:1320] on usb-dummy_hcd.3-1/input0 [ 1807.944200][ T35] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1808.026381][T12133] hid-led 0003:1294:1320.000C: Riso Kagaku Webmail Notifier initialized [ 1808.070084][T12133] usb 8-1: USB disconnect, device number 92 [ 1808.100823][T20813] leds riso_kagaku1:blue: Setting an LED's brightness failed (-38) [ 1808.114632][ T35] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1808.115477][T20813] leds riso_kagaku1:green: Setting an LED's brightness failed (-38) [ 1808.116473][ T35] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1808.116500][ T35] usb 9-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1808.116520][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1808.118296][ T35] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1808.118315][ T35] usb 9-1: Product: syz [ 1808.118327][ T35] usb 9-1: Manufacturer: syz [ 1808.118341][ T35] usb 9-1: SerialNumber: syz [ 1808.143061][ T35] usb 9-1: config 0 descriptor?? [ 1808.145908][T29266] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1808.156980][ T35] usb 9-1: selecting invalid altsetting 0 [ 1808.160408][T20813] leds riso_kagaku1:red: Setting an LED's brightness failed (-38) [ 1809.425583][T29288] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5917'. [ 1810.434210][T24287] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1810.541507][ T35] usb 9-1: USB disconnect, device number 39 [ 1810.597291][T24287] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1810.597317][T24287] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1810.599702][T24287] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1810.599724][T24287] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1810.602383][T24287] usb 6-1: string descriptor 0 read error: -22 [ 1810.602442][T24287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.614348][T24287] usb 6-1: selecting invalid altsetting 1 [ 1810.614883][T24287] usb 6-1: unit 6 not found! [ 1810.659844][T29305] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5923'. [ 1810.659859][T29305] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5923'. [ 1810.708391][T29307] batadv_slave_1: entered promiscuous mode [ 1810.709280][T29307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5925'. [ 1810.709345][T29307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1810.721496][T29307] batadv_slave_1 (unregistering): left promiscuous mode [ 1810.721654][T29307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1810.817021][T24287] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1810.846060][T24287] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1810.881126][T29314] fuse: Bad value for 'fd' [ 1811.024988][ T25] usb 6-1: USB disconnect, device number 95 [ 1811.610297][T29327] fuse: Bad value for 'fd' [ 1812.673332][T29362] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5941'. [ 1812.690882][T29364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5942'. [ 1813.114227][ T35] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 1813.274789][ T35] usb 9-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1813.275874][ T35] usb 9-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1813.275898][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1813.275921][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.278963][ T35] usb 9-1: config 0 descriptor?? [ 1813.956575][ T35] hid-led 0003:1294:1320.000D: ignoring exceeding usage max [ 1813.961764][ T35] hid-led 0003:1294:1320.000D: hidraw1: USB HID v10.01 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 1813.963497][ T35] hid-led 0003:1294:1320.000D: Riso Kagaku Webmail Notifier initialized [ 1814.256590][T29427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5965'. [ 1814.257855][T29427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5965'. [ 1814.802253][T29443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5972'. [ 1814.811320][T29443] FAULT_INJECTION: forcing a failure. [ 1814.811320][T29443] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.811350][T29443] CPU: 0 UID: 0 PID: 29443 Comm: syz.1.5972 Tainted: G L syzkaller #0 PREEMPT(full) [ 1814.811376][T29443] Tainted: [L]=SOFTLOCKUP [ 1814.811383][T29443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1814.811396][T29443] Call Trace: [ 1814.811403][T29443] [ 1814.811411][T29443] dump_stack_lvl+0x100/0x190 [ 1814.811441][T29443] should_fail_ex.cold+0x5/0xa [ 1814.811466][T29443] should_failslab+0xc2/0x120 [ 1814.811497][T29443] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1814.811524][T29443] ? __alloc_skb+0x140/0x710 [ 1814.811548][T29443] __alloc_skb+0x140/0x710 [ 1814.811566][T29443] ? __alloc_skb+0x5b7/0x710 [ 1814.811584][T29443] ? __pfx___alloc_skb+0x10/0x10 [ 1814.811605][T29443] ? __asan_memcpy+0x3c/0x60 [ 1814.811631][T29443] alloc_uevent_skb+0x7d/0x210 [ 1814.811657][T29443] kobject_uevent_env+0x122c/0x18b0 [ 1814.811694][T29443] net_rx_queue_update_kobjects+0x1dd/0x760 [ 1814.811728][T29443] ? kset_register+0x1bb/0x290 [ 1814.811752][T29443] netdev_register_kobject+0x2c6/0x410 [ 1814.811785][T29443] register_netdevice+0x15b6/0x25a0 [ 1814.811814][T29443] ? __pfx_register_netdevice+0x10/0x10 [ 1814.811845][T29443] bond_newlink+0x6a/0x100 [ 1814.811865][T29443] ? __pfx_bond_newlink+0x10/0x10 [ 1814.811883][T29443] rtnl_newlink+0x1697/0x2620 [ 1814.811915][T29443] ? __pfx_rtnl_newlink+0x10/0x10 [ 1814.811938][T29443] ? is_bpf_text_address+0x94/0x1a0 [ 1814.811966][T29443] ? kernel_text_address+0x8d/0x100 [ 1814.811988][T29443] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1814.812014][T29443] ? __kernel_text_address+0xd/0x30 [ 1814.812055][T29443] ? stack_trace_save+0x8e/0xc0 [ 1814.812108][T29443] ? __pfx_stack_trace_save+0x10/0x10 [ 1814.812139][T29443] ? lock_acquire+0x1d1/0x380 [ 1814.812166][T29443] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1814.812188][T29443] ? find_held_lock+0x2b/0x80 [ 1814.812209][T29443] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1814.812230][T29443] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1814.812254][T29443] ? __pfx_rtnl_newlink+0x10/0x10 [ 1814.812278][T29443] rtnetlink_rcv_msg+0x95e/0xe90 [ 1814.812303][T29443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1814.812330][T29443] ? __lock_acquire+0x5c0/0x1f40 [ 1814.812357][T29443] ? __netlink_lookup+0xa9/0x900 [ 1814.812388][T29443] netlink_rcv_skb+0x159/0x420 [ 1814.812407][T29443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1814.812431][T29443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1814.812458][T29443] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1814.812491][T29443] netlink_unicast+0x585/0x850 [ 1814.812513][T29443] ? __pfx_netlink_unicast+0x10/0x10 [ 1814.812539][T29443] netlink_sendmsg+0x8b0/0xda0 [ 1814.812562][T29443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1814.812583][T29443] ? apparmor_socket_sendmsg+0x165/0x280 [ 1814.812617][T29443] ____sys_sendmsg+0xa4d/0xbe0 [ 1814.812644][T29443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1814.812665][T29443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1814.812709][T29443] ___sys_sendmsg+0x190/0x1e0 [ 1814.812737][T29443] ? __pfx____sys_sendmsg+0x10/0x10 [ 1814.812765][T29443] ? futex_wait+0x11e/0x370 [ 1814.812801][T29443] ? find_held_lock+0x2b/0x80 [ 1814.812844][T29443] __sys_sendmsg+0x160/0x210 [ 1814.812869][T29443] ? __pfx___sys_sendmsg+0x10/0x10 [ 1814.812906][T29443] __do_fast_syscall_32+0x13a/0x8b0 [ 1814.812939][T29443] do_fast_syscall_32+0x32/0x70 [ 1814.812957][T29443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1814.812980][T29443] RIP: 0023:0xf741efec [ 1814.813001][T29443] Code: Unable to access opcode bytes at 0xf741efc2. [ 1814.813009][T29443] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1814.813029][T29443] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1814.813041][T29443] RDX: 00000000097a09f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1814.813052][T29443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1814.813064][T29443] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1814.813075][T29443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1814.813101][T29443] [ 1814.818606][T29443] bond4: entered promiscuous mode [ 1814.818637][T29443] bond4: entered allmulticast mode [ 1814.818792][T29443] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1815.189975][T29455] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5973'. [ 1815.256144][T25231] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1815.544264][T25231] usb 10-1: Using ep0 maxpacket: 32 [ 1815.569696][T25231] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1815.631858][T25231] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.631874][T25231] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1815.631895][T25231] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1815.763011][T25231] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.763028][T25231] usb 10-1: Product: syz [ 1815.763036][T25231] usb 10-1: Manufacturer: syz [ 1815.763044][T25231] usb 10-1: SerialNumber: syz [ 1815.880284][T25231] cdc_ncm 10-1:1.0: skipping garbage [ 1815.880297][T25231] cdc_ncm 10-1:1.0: skipping garbage [ 1815.880303][T25231] cdc_ncm 10-1:1.0: skipping garbage [ 1815.880310][T25231] cdc_ncm 10-1:1.0: skipping garbage [ 1815.880316][T25231] cdc_ncm 10-1:1.0: skipping garbage [ 1815.880323][T25231] cdc_ncm 10-1:1.0: invalid descriptor buffer length [ 1815.880330][T25231] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 1815.880348][T25231] cdc_ncm 10-1:1.0: bind() failure [ 1816.086507][ T35] usb 10-1: USB disconnect, device number 24 [ 1816.179607][T24287] corsair-cpro 0003:1B1C:0C10.000E: hidraw2: USB HID v0.00 Device [syz0] on syz0 [ 1816.498785][T24287] corsair-cpro 0003:1B1C:0C10.000E: probe with driver corsair-cpro failed with error -110 [ 1816.587376][T29482] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1816.611703][T29488] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5988'. [ 1816.645731][ T5886] usb 9-1: USB disconnect, device number 40 [ 1816.647515][T14369] leds riso_kagaku1:blue: Setting an LED's brightness failed (-38) [ 1816.648102][T14369] leds riso_kagaku1:green: Setting an LED's brightness failed (-38) [ 1816.650404][T29493] netlink: 'syz.3.5991': attribute type 4 has an invalid length. [ 1816.657014][T14369] leds riso_kagaku1:red: Setting an LED's brightness failed (-38) [ 1816.661158][T29493] netlink: 'syz.3.5991': attribute type 4 has an invalid length. [ 1817.834534][T29533] syzkaller0: entered promiscuous mode [ 1817.834550][T29533] syzkaller0: entered allmulticast mode [ 1817.944304][T20807] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1818.105250][T20807] usb 9-1: Using ep0 maxpacket: 8 [ 1818.105752][T20807] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1818.111967][T20807] usb 9-1: config 0 has no interfaces? [ 1818.111986][T20807] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.113292][T20807] usb 9-1: config 0 descriptor?? [ 1818.776335][T20807] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 1818.924286][T20807] usb 8-1: Using ep0 maxpacket: 8 [ 1818.925193][T20807] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1818.927922][T20807] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1818.927944][T20807] usb 8-1: config 179 has no interface number 0 [ 1818.927978][T20807] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1818.927999][T20807] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1818.928018][T20807] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1818.928037][T20807] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1818.928079][T20807] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1818.928111][T20807] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.934331][T29543] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1819.343014][ T5829] usb 8-1: USB disconnect, device number 93 [ 1819.343369][ C0] xpad 8-1:179.65: xp ** replaying previous printk message ** [ 1819.343369][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1819.343401][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1819.346363][ C0] ================================================================== [ 1819.346376][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23a/0x260 [ 1819.346402][ C0] Read of size 4 at addr ffff88801421e05c by task ksoftirqd/0/15 [ 1819.346416][ C0] [ 1819.346427][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1819.346451][ C0] Tainted: [L]=SOFTLOCKUP [ 1819.346458][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1819.346469][ C0] Call Trace: [ 1819.346475][ C0] [ 1819.346482][ C0] dump_stack_lvl+0x100/0x190 [ 1819.346507][ C0] print_report+0x13d/0x4b0 [ 1819.346533][ C0] ? __virt_addr_valid+0x239/0x430 [ 1819.346560][ C0] ? do_raw_spin_lock+0x23a/0x260 [ 1819.346577][ C0] kasan_report+0xdf/0x1c0 [ 1819.346604][ C0] ? do_raw_spin_lock+0x23a/0x260 [ 1819.346624][ C0] do_raw_spin_lock+0x23a/0x260 [ 1819.346641][ C0] ? __wake_up+0x1c/0x60 [ 1819.346669][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1819.346688][ C0] ? kcov_remote_stop+0x27d/0x560 [ 1819.346713][ C0] ? kcov_remote_stop+0x27d/0x560 [ 1819.346739][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 1819.346762][ C0] ? __wake_up+0x1c/0x60 [ 1819.346783][ C0] __wake_up+0x1c/0x60 [ 1819.346806][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 1819.346825][ C0] __usb_hcd_giveback_urb+0x3d8/0x610 [ 1819.346851][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1819.346877][ C0] dummy_timer+0xdaf/0x3820 [ 1819.346905][ C0] ? ieee80211_clean_skb+0x1a7/0x740 [ 1819.346931][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1819.346954][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1819.346977][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1819.347003][ C0] ? rcu_is_watching+0x13/0xc0 [ 1819.347025][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1819.347049][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1819.347076][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1819.347102][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 1819.347125][ C0] handle_softirqs+0x1e6/0x9d0 [ 1819.347153][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1819.347180][ C0] ? run_ksoftirqd+0x5b/0x60 [ 1819.347204][ C0] ? rcu_is_watching+0x13/0xc0 [ 1819.347224][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1819.347249][ C0] run_ksoftirqd+0x38/0x60 [ 1819.347273][ C0] smpboot_thread_fn+0x3d3/0xab0 [ 1819.347293][ C0] ? kthread+0x13a/0x450 [ 1819.347312][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1819.347329][ C0] kthread+0x373/0x450 [ 1819.347348][ C0] ? __pfx_kthread+0x10/0x10 [ 1819.347369][ C0] ret_from_fork+0x730/0xd60 [ 1819.347387][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1819.347406][ C0] ? __switch_to+0x800/0x10f0 [ 1819.347428][ C0] ? __pfx_kthread+0x10/0x10 [ 1819.347448][ C0] ret_from_fork_asm+0x1a/0x30 [ 1819.347472][ C0] [ 1819.347478][ C0] [ 1819.347483][ C0] Allocated by task 20807: [ 1819.347492][ C0] kasan_save_stack+0x30/0x50 [ 1819.347514][ C0] kasan_save_track+0x14/0x30 [ 1819.347534][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1819.347568][ C0] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1819.347587][ C0] xpad_probe+0x28e/0x1f60 [ 1819.347603][ C0] usb_probe_interface+0x386/0x9b0 [ 1819.347625][ C0] really_probe+0x241/0xa60 [ 1819.347640][ C0] __driver_probe_device+0x210/0x460 [ 1819.347660][ C0] driver_probe_device+0x4a/0x140 [ 1819.347677][ C0] __device_attach_driver+0x1df/0x320 [ 1819.347694][ C0] bus_for_each_drv+0x159/0x1e0 [ 1819.347716][ C0] __device_attach+0x1e4/0x4d0 [ 1819.347732][ C0] device_initial_probe+0xaf/0xd0 [ 1819.347749][ C0] bus_probe_device+0x64/0x160 [ 1819.347772][ C0] device_add+0x121d/0x1970 [ 1819.347790][ C0] usb_set_configuration+0xd97/0x1dc0 [ 1819.347809][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 1819.347826][ C0] usb_probe_device+0xef/0x400 [ 1819.347846][ C0] really_probe+0x241/0xa60 [ 1819.347862][ C0] __driver_probe_device+0x210/0x460 [ 1819.347879][ C0] driver_probe_device+0x4a/0x140 [ 1819.347895][ C0] __device_attach_driver+0x1df/0x320 [ 1819.347911][ C0] bus_for_each_drv+0x159/0x1e0 [ 1819.347934][ C0] __device_attach+0x1e4/0x4d0 [ 1819.347950][ C0] device_initial_probe+0xaf/0xd0 [ 1819.347967][ C0] bus_probe_device+0x64/0x160 [ 1819.347991][ C0] device_add+0x121d/0x1970 [ 1819.348008][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 1819.348031][ C0] hub_event.cold+0x1e3/0xe90 [ 1819.348078][ C0] process_one_work+0xac7/0x1b10 [ 1819.348099][ C0] worker_thread+0x5ef/0xe50 [ 1819.348118][ C0] kthread+0x373/0x450 [ 1819.348136][ C0] ret_from_fork+0x730/0xd60 [ 1819.348150][ C0] ret_from_fork_asm+0x1a/0x30 [ 1819.348166][ C0] [ 1819.348171][ C0] Freed by task 5829: [ 1819.348178][ C0] kasan_save_stack+0x30/0x50 [ 1819.348200][ C0] kasan_save_track+0x14/0x30 [ 1819.348221][ C0] kasan_save_free_info+0x3b/0x70 [ 1819.348239][ C0] __kasan_slab_free+0x5f/0x80 [ 1819.348262][ C0] kfree+0x22b/0x6d0 [ 1819.348277][ C0] xpad_disconnect+0x1cf/0x530 [ 1819.348293][ C0] usb_unbind_interface+0x1dd/0x9e0 [ 1819.348315][ C0] device_remove+0x12a/0x180 [ 1819.348330][ C0] device_release_driver_internal+0x44e/0x620 [ 1819.348349][ C0] bus_remove_device+0x2bc/0x560 [ 1819.348372][ C0] device_del+0x376/0x9b0 [ 1819.348387][ C0] usb_disable_device+0x367/0x810 [ 1819.348405][ C0] usb_disconnect+0x2e2/0x9a0 [ 1819.348423][ C0] hub_event+0x1bb1/0x4420 [ 1819.348441][ C0] process_one_work+0xac7/0x1b10 [ 1819.348461][ C0] worker_thread+0x5ef/0xe50 [ 1819.348481][ C0] kthread+0x373/0x450 [ 1819.348498][ C0] ret_from_fork+0x730/0xd60 [ 1819.348512][ C0] ret_from_fork_asm+0x1a/0x30 [ 1819.348525][ C0] [ 1819.348528][ C0] The buggy address belongs to the object at ffff88801421e000 [ 1819.348528][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 1819.348542][ C0] The buggy address is located 92 bytes inside of [ 1819.348542][ C0] freed 1024-byte region [ffff88801421e000, ffff88801421e400) [ 1819.348560][ C0] [ 1819.348564][ C0] The buggy address belongs to the physical page: [ 1819.348573][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14218 [ 1819.348589][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1819.348603][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1819.348619][ C0] page_type: f5(slab) [ 1819.348634][ C0] raw: 00fff00000000040 ffff88801d042dc0 dead000000000100 dead000000000122 [ 1819.348655][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1819.348671][ C0] head: 00fff00000000040 ffff88801d042dc0 dead000000000100 dead000000000122 [ 1819.348686][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1819.348702][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1819.348718][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1819.348727][ C0] page dumped because: kasan: bad access detected [ 1819.348736][ C0] page_owner tracks the page as allocated [ 1819.348742][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 29, tgid 29 (ksoftirqd/1), ts 40861043513 [ 1819.348769][ C0] post_alloc_hook+0xfd/0x120 [ 1819.348787][ C0] get_page_from_freelist+0x110d/0x35d0 [ 1819.348805][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1819.348824][ C0] new_slab+0xa9/0x6e0 [ 1819.348840][ C0] refill_objects+0xe3/0x410 [ 1819.348858][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 1819.348876][ C0] __kmalloc_noprof+0x67c/0x840 [ 1819.348895][ C0] ieee802_11_parse_elems_full+0x17c/0x3c90 [ 1819.348915][ C0] ieee80211_inform_bss+0x159/0x1170 [ 1819.348932][ C0] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 1819.348958][ C0] cfg80211_inform_bss_data+0x230/0x3c20 [ 1819.348982][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 1819.349006][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 1819.349023][ C0] ieee80211_scan_rx+0x4e6/0xb60 [ 1819.349040][ C0] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 1819.349060][ C0] ieee80211_rx_list+0xf19/0x2160 [ 1819.349077][ C0] page last free pid 854 tgid 854 ts 40479230918 stack trace: [ 1819.349088][ C0] __free_frozen_pages+0x79f/0x10f0 [ 1819.349102][ C0] qlist_free_all+0x47/0xf0 [ 1819.349122][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1819.349142][ C0] __kasan_slab_alloc+0x69/0x90 [ 1819.349164][ C0] __kmalloc_cache_noprof+0x278/0x6d0 [ 1819.349182][ C0] nsim_fib_event_work+0x1573/0x6330 [ 1819.349207][ C0] process_one_work+0xac7/0x1b10 [ 1819.349226][ C0] worker_thread+0x5ef/0xe50 [ 1819.349246][ C0] kthread+0x373/0x450 [ 1819.349262][ C0] ret_from_fork+0x730/0xd60 [ 1819.349276][ C0] ret_from_fork_asm+0x1a/0x30 [ 1819.349291][ C0] [ 1819.349295][ C0] Memory state around the buggy address: [ 1819.349303][ C0] ffff88801421df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1819.349316][ C0] ffff88801421df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1819.349328][ C0] >ffff88801421e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1819.349337][ C0] ^ [ 1819.349347][ C0] ffff88801421e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1819.349358][ C0] ffff88801421e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1819.349368][ C0] ================================================================== [ 1819.349378][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1819.718428][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1819.722531][ C0] Tainted: [L]=SOFTLOCKUP [ 1819.724273][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1819.728270][ C0] Call Trace: [ 1819.729633][ C0] [ 1819.730844][ C0] dump_stack_lvl+0x100/0x190 [ 1819.732533][ C0] vpanic+0x553/0x970 [ 1819.733934][ C0] ? __pfx_vpanic+0x10/0x10 [ 1819.735771][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1819.737819][ C0] ? do_raw_spin_lock+0x23a/0x260 [ 1819.739897][ C0] panic+0xd1/0xe0 [ 1819.741448][ C0] ? __pfx_panic+0x10/0x10 [ 1819.743270][ C0] ? end_report.part.0+0x23/0x90 [ 1819.744998][ C0] ? rcu_is_watching+0x13/0xc0 [ 1819.746803][ C0] ? end_report.part.0+0x23/0x90 [ 1819.748837][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1819.750976][ C0] end_report.part.0+0x3a/0x90 [ 1819.752925][ C0] kasan_report.cold+0xe/0x18 [ 1819.754827][ C0] ? do_raw_spin_lock+0x23a/0x260 [ 1819.756861][ C0] do_raw_spin_lock+0x23a/0x260 [ 1819.758836][ C0] ? __wake_up+0x1c/0x60 [ 1819.760559][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1819.762333][ C0] ? kcov_remote_stop+0x27d/0x560 [ 1819.764337][ C0] ? kcov_remote_stop+0x27d/0x560 [ 1819.766368][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 1819.768482][ C0] ? __wake_up+0x1c/0x60 [ 1819.770209][ C0] __wake_up+0x1c/0x60 [ 1819.771874][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 1819.774091][ C0] __usb_hcd_giveback_urb+0x3d8/0x610 [ 1819.776262][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1819.777993][ C0] dummy_timer+0xdaf/0x3820 [ 1819.779833][ C0] ? ieee80211_clean_skb+0x1a7/0x740 [ 1819.781992][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1819.784358][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1819.786498][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1819.788263][ C0] ? rcu_is_watching+0x13/0xc0 [ 1819.790206][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1819.792576][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1819.794581][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1819.796299][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 1819.798380][ C0] handle_softirqs+0x1e6/0x9d0 [ 1819.800390][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1819.802075][ C0] ? run_ksoftirqd+0x5b/0x60 [ 1819.803555][ C0] ? rcu_is_watching+0x13/0xc0 [ 1819.805089][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1819.806721][ C0] run_ksoftirqd+0x38/0x60 [ 1819.808183][ C0] smpboot_thread_fn+0x3d3/0xab0 [ 1819.809790][ C0] ? kthread+0x13a/0x450 [ 1819.811142][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1819.812880][ C0] kthread+0x373/0x450 [ 1819.814182][ C0] ? __pfx_kthread+0x10/0x10 [ 1819.815657][ C0] ret_from_fork+0x730/0xd60 [ 1819.817138][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1819.818807][ C0] ? __switch_to+0x800/0x10f0 [ 1819.820320][ C0] ? __pfx_kthread+0x10/0x10 [ 1819.821791][ C0] ret_from_fork_asm+0x1a/0x30 [ 1819.823364][ C0] [ 1819.824965][ C0] Kernel Offset: disabled [ 1819.826337][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:43:04 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85b0e180 RDI=ffffffff9cc69ba0 RBP=ffffffff9cc69b60 RSP=ffffc9000041f018 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff398d3c9 R15=dffffc0000000000 RIP=ffffffff85b0e1a7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809574d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e01cff8 CR3=000000004bc2f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff88801d764b00 RSI=ffffffff81ff159e RDI=ffff88801d764b00 RBP=ffffc9000045fcd8 RSP=ffffc9000045fbc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88802b333de0 R12=ffff88802b13d3c0 R13=ffffed1005627a79 R14=ffff88802b13d3c8 R15=0000000000000001 RIP=ffffffff81ff159e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809584d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73f4714 CR3=000000004ebbc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefefc00 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000008400004 Opmask04=00000000fffdffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564917a1dd00 0000564917a1dcc0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564917a20170 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f11ff1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f11ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f11f52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d382f38627375 2f332e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f11ff1b30 0048544150564544 0000000000000021 00000035362e3937 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002d1 0000000000000070 000000006465723a 31756b6167616b5f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722c4334312c4234 312c4134312c3734 312c3634312c3434 312c3334312c3234 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3134312c3034 312c3231312c3131 312c3031312c3243 2c31432c30432c46 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 422c45422c44422c 43422c42422c4142 2c39422c38422c37 422c37382c36382c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81feeb33 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888024c04b00 RBP=ffff88802b043b00 RSP=ffffc9000d86f898 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1004980c13 R13=0000000000000003 R14=ffffed1005608761 R15=0000000000000001 RIP=ffffffff820b9f60 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809594d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005578ef68ff40 CR3=0000000044477000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=73bcf12efb40f7d9 2a9e7ef6ec1abb37 73bcf12efb40f7d9 2a9e7ef6ec1abb37 73bcf12efb40f7d9 2a9e7ef6ec1abb37 73bcf12efb40f7d9 2a9e7ef6ec1abb37 ZMM18=49376e7cf61e8ff0 2e0e9139de0b18cc 49376e7cf61e8ff0 2e0e9139de0b18cc 49376e7cf61e8ff0 2e0e9139de0b18cc 49376e7cf61e8ff0 2e0e9139de0b18cc ZMM19=542e000000000000 0000000000000004 542e000000000000 0000000000000003 542e000000000000 0000000000000002 542e000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03019e020005a003 0008000598031fff ffffe20800059003 40a0860800058803 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1fffeffdf0080005 80030d800202d0a4 0800010000000806 06012a981202000d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003000202d0a408 0001000000080606 012a982602000003 2a40808080880008 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000598031fffffff e2080005900340a0 8608000588031fff effdf00800058003 ZMM25=2e0e91392e0e9139 2e0e91392e0e9139 2e0e91392e0e9139 2e0e91392e0e9139 2e0e91392e0e9139 2e0e91392e0e9139 2e0e91392e0e9139 2e0e91392e0e9139 ZMM26=f61e8ff0f61e8ff0 f61e8ff0f61e8ff0 f61e8ff0f61e8ff0 f61e8ff0f61e8ff0 f61e8ff0f61e8ff0 f61e8ff0f61e8ff0 f61e8ff0f61e8ff0 f61e8ff0f61e8ff0 ZMM27=49376e7c49376e7c 49376e7c49376e7c 49376e7c49376e7c 49376e7c49376e7c 49376e7c49376e7c 49376e7c49376e7c 49376e7c49376e7c 49376e7c49376e7c ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=522e0000522e0000 522e0000522e0000 522e0000522e0000 522e0000522e0000 522e0000522e0000 522e0000522e0000 522e0000522e0000 522e0000522e0000 info registers vcpu 3 CPU#3 RAX=8000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88801d758000 RSI=ffffffff81e9e6f6 RDI=ffff88801d758000 RBP=0000000000000003 RSP=ffffc9000042f958 R8 =0000000000000005 R9 =0000000000000000 R10=00000000ffffffff R11=0000000064617078 R12=ffffffff90bdcda0 R13=ffffc9000042fda8 R14=0000000000000000 R15=ffffc9000042fdb4 RIP=ffffffff820ba670 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095a4d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e015ff8 CR3=0000000026c1d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000180000 Opmask03=0000000000000000 Opmask04=00000000fff7ffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc19ab15bb 00007ffc19ab15bb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc19ab1ac0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc19ab1ac0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3120534f4942202c 2939303032202c39 484349202b203533 5128204350206472 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3332203a65756c61 76207327726f7470 6972637365642065 6361667265746e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20656874206d6f72 6620746e65726566 666964202c73726f 7470697263736564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20746e696f70646e 6520322073616820 3020676e69747465 73746c6120353620 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656361667265746e 6920393731206769 666e6f63203a312d 3820627375205d37 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000