last executing test programs: 28m51.721580551s ago: executing program 2 (id=2961): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000000010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018004e204e24140017"], 0x54}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) chdir(&(0x7f0000000440)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, 0x0, 0x7f03) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x4) r5 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r6 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r6, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r5, 0x0) 28m50.837992945s ago: executing program 2 (id=2967): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000000010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018004e204e24140017"], 0x54}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) chdir(&(0x7f0000000440)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, 0x0, 0x7f03) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x4) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x10) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r5, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, 0xffffffffffffffff, 0x0) 28m49.850968712s ago: executing program 2 (id=2972): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000001010101000000000000000002000000180001801400018008000100ac1414aa08000200000000000c0019800800010015010000cbb146f85a5f17e6840f9ae44991c875a2692f0c907b12f05223842f401335454051560bc25384586969afbff42f4761336f9086"], 0x38}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="050000000400000004000000070000", @ANYRES32, @ANYBLOB="000000000000006e384e8f8ddc8df329eda0c300", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r0], 0x48) r6 = epoll_create(0x10) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000000c0)) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r7 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080), 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x48, 0x830, 0x56bb, 0x6, 0x7, 0x100001, 0x8f5a, 0x5}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r10, 0xae80, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3, r5, 0x4}, 0x38) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 28m49.610934685s ago: executing program 2 (id=2973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() io_setup(0x8, &(0x7f0000004200)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_destroy(r2) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) close(r7) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000300)={0x362, 0x202, 0xa, 0x8000000000000001, 0x5, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0x6, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x921ffffffffffffd, 0x8e, 0x0, 0x80000001, 0x0, 0x5, 0x7}) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r8, 0x8915, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 28m49.051157593s ago: executing program 2 (id=2977): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) 28m48.841308422s ago: executing program 2 (id=2979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000000010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018004e204e24140017"], 0x54}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) chdir(&(0x7f0000000440)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, 0x0, 0x7f03) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x4) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x10) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r5, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, 0xffffffffffffffff, 0x0) 28m48.627562751s ago: executing program 32 (id=2979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000000010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018004e204e24140017"], 0x54}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) chdir(&(0x7f0000000440)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, 0x0, 0x7f03) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x4) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x10) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r5, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, 0xffffffffffffffff, 0x0) 27m47.148067524s ago: executing program 3 (id=3178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x7c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x24fd, 0x0, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000440)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x200004, 0x2, 0xff}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, [0x2, 0x4]}}) r7 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r8, &(0x7f0000000240)=[{&(0x7f0000000140)="f9", 0x1}], 0x1, 0x3, 0xd4bd) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x118) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 27m45.901015634s ago: executing program 3 (id=3182): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r0, 0x1) timer_create(0x0, &(0x7f0000001040)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) socket(0x1d, 0x2, 0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x28}}], 0x1, 0x4000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 27m43.624489737s ago: executing program 3 (id=3193): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000180), 0x4) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0xa0002) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x400c4152, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1e9100, 0x2c8) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0xc100, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x29, 0x0, 0xc00350, 0x1, 0x2, 0xfffffffb, 0x2, 0x0, 0x0, 0x20, 0x1}}, 0x50) 27m43.460300003s ago: executing program 3 (id=3194): r0 = socket$alg(0x26, 0x5, 0x0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x58, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xff}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x48041) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005140)={0x60, r4, 0x1, 0x70bd2a, 0x3, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0x30, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0x5, 0x1, 0x0, 0x1, {0x7, 0x1, r2}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x46d5ef3f5461204a) r6 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f00000001c0)={0x4}, 0x1) (async, rerun: 32) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') (rerun: 32) read$qrtrtun(r7, &(0x7f00000004c0)=""/57, 0x39) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, r8, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc814}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40810}, 0x4008094) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/84, 0x54}], 0x1}, 0x0) 27m43.341659683s ago: executing program 3 (id=3195): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) mount$fuse(0x0, 0x0, 0x0, 0x1010000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x20) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001000b5952704000000dbdf250a4000ff", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)=0x31) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 27m43.319226391s ago: executing program 3 (id=3196): bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_setup(0x400, &(0x7f0000000780)=0x0) io_destroy(r0) io_destroy(r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x8a301, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000400), 0x0, 0xffffffffffffffa2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000680)={0x2, @pix_mp={0x101, 0x0, 0x38416761, 0x2, 0x6, [{0x5, 0x6}, {0x6, 0x7}, {0x6, 0xffffffff}, {0x9, 0x6}, {0xe6, 0xd}, {0x400007f, 0x80000}, {0x6, 0x17}, {0x2000, 0xfffffff3}], 0xfa, 0x4, 0x8, 0x2}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000640)="ce", 0x1}], 0x1) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000002100)={0x3, 0x4, 0x0, 0xfffffffe, 0x4, 0x2}) 27m27.963107815s ago: executing program 33 (id=3196): bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_setup(0x400, &(0x7f0000000780)=0x0) io_destroy(r0) io_destroy(r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x8a301, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000400), 0x0, 0xffffffffffffffa2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000680)={0x2, @pix_mp={0x101, 0x0, 0x38416761, 0x2, 0x6, [{0x5, 0x6}, {0x6, 0x7}, {0x6, 0xffffffff}, {0x9, 0x6}, {0xe6, 0xd}, {0x400007f, 0x80000}, {0x6, 0x17}, {0x2000, 0xfffffff3}], 0xfa, 0x4, 0x8, 0x2}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000640)="ce", 0x1}], 0x1) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000002100)={0x3, 0x4, 0x0, 0xfffffffe, 0x4, 0x2}) 9m9.281069078s ago: executing program 0 (id=7687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x9, 0x2, 0xd, 0x0, 0xc3, 0x0, 0x31, 0x6, 0x6, 0x6, 0x9, 0x3, 0x0, 0x5, 0x2, 0x4, 0x4, 0x4, 0x4d, '\x00', 0x4, 0x7}) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002000040"]) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r3, &(0x7f0000001b00)={0x18, 0xffffffffffffffda, 0x0, {0xffffffffffffffff}}, 0x40) r10 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$qrtrtun(r10, &(0x7f0000000380)="3af94be9", 0x4) sendmsg$inet(r10, &(0x7f0000001900)={&(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000001c40)="dfcc09000000f8518346ffc5f85ef9c3863ab700000000004d1f60160544ae6cbb50b23e7cacacab46f66ac20b1655c382ddfeef9bdca3b2ad939edd5d66d3a48f9053d3dea669a65c2e52d0ecee2db4cb76efe59ff6b39e72a5255a69509b0a4d7b092553646d96e4f36e6ebf2902b6fb567938e0000000000000000000000000000000001c251884b8e21b4d9c490728f16d3f4e16934af25fed2cd510904d8b8ac6b31d8d5fbd3425962ac24716ee86f326977b6be34877", 0xb9}, {&(0x7f0000000340)="c7d67969dddee4e0e1488193ef7c29464c8f3bb7703d9731429e636cf81931dfbdf35b09947307b002", 0x29}, {&(0x7f0000000380)="e86d9a8eea419a722348565c5ac2b9a76238d26045bb26e8bd4c55b14eaeae2358d75246d55d2f54c41de3a5b49007f6f972929ca5", 0x35}, {&(0x7f0000001b40)="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", 0xfc}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="f97aea548922dcee2d416a22f528cd9fef7fd8d6fb81618873d51d5e4d277002a7a46b787bb28841c0333fc8dbc45ec02e11a7ab9d7662b93657e8e9d8f27c79181a1d8670254f0366e0963b4b4864530c882d1349b9d1cc6d2a1f66185884d750db9d0243f4ef751b704304116f11372083f93c2be02529186169a88c15b11696ba8de17f36", 0x86}, {&(0x7f0000001640)="c24cb2488e0ea430c6cfd649826274343adae6f23a407943d3efabf3711baaee87a7342f43dabff70c76f99b741db22786a8da81699cf202dd894740c5fc72eab05ef9c9afc0ee4cb92db1f598099c5bdcb48cd97e2b37f9e9cd0086d23631bb07a97cb4dbdb2de1593050fdc529d1e70e78b3f27bb3ba5a5226ef9ce4fe5888b7527648d948445e", 0x88}, {&(0x7f0000001700)="c746d4ae85a29cd2e1966f4b63a672ea7a2c9b7a2576d6cc15ff128db7d9c7af187e0cd09eb553a882713c8865d7cc04ea4d5bb8e35f46f9a7127dc2370da487aee805ec56e9535be3663921cccdc4ab4611f95257ca3bef63c9065b51594adda223e3896d84327f9391b602c974490ae137ae91f50d13fa93121cb52c00c25e8ed2806646006f19a5b5c7bd5b30eb10545f3ea5d81a8ae9173eb3f790a111d5993736857c00134455cf82727b8954f4a6b5dda80bf3a859f3b230e7883ea99aaf23c9f0c1b0bddedb3143b739376e4a8c4bf38c6f76089ecc511baa9e3e9a474ccc7c8b9eb332351bd7e28631", 0xed}, {&(0x7f0000001800)="8c50b6af6c08f61f63d5d795faf0ded6176b6f77aef9e215c6e7225621cee9789cbaceda4a279ea9861e88ccde81cdc22219814128199dc04bdd0de9842c5bb1023b3aedc0e685473b1466dc0f5f52b659737038a610a1b01c9c3b4a61268d7c5eaa696674cabf71ba318eaa2473713024c2c4829417fd7bb83e8d641c", 0x7d}], 0x9, &(0x7f0000000500)}, 0x4c040) write$FUSE_DIRENTPLUS(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r11 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r12 = dup(r11) write$6lowpan_enable(r12, &(0x7f0000000000)='0', 0xfffffd2c) write$char_usb(r12, &(0x7f0000000400)="f20f5f36cbdfe2768d3119da31613ab4ad0db019e31ce4d946a8af8d5c375113e738cebcf6f8c6b669d94d51f0cfea8ecb0ebabb15facaed697d208fe7f37814dff88d3c9658b06564ae7d3df1aed7ae245f717ba5553787fdc8d2293d6013fc814f844b01a26455b8a7241c1028a3ebefe8f0be63f90c1f93f0c25176e752fb33859dde8c7b96a3fd7494436b74f4", 0x8f) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r9) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r9, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000125bd7000fbdbdf25430000000c00990006020000770000000c00580032000000000000000c00580047000000000000000c0058006f00000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4008880) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000), 0x1010002, &(0x7f0000000200)=ANY=[@ANYBLOB='tr\x00\x00\x00\x00fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',cachetag=^,aname=trans=fd,,version=9p2000.L,\x00']) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2100) 9m7.988196315s ago: executing program 0 (id=7697): preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x20) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x102, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="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", 0x0, 0x10, 0x0, 0x1, 0x0}) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000500)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 9m7.911125305s ago: executing program 0 (id=7698): openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000500)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 9m7.91079152s ago: executing program 0 (id=7699): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000002080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x7d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200000000000140) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$cgroup(0x0, 0x0, 0x0, 0x10000, 0x0) 9m7.750833561s ago: executing program 0 (id=7701): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) 9m6.949987634s ago: executing program 0 (id=7704): io_setup(0x7e, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e24, 0x400, @loopback}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x7c2) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) (async) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (async) write$UHID_CREATE2(r4, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) (async) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) (async) r5 = socket$netlink(0x10, 0x3, 0x2) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="2800000000000000000000060000000027000000", @ANYRES32=r6, @ANYBLOB="0b000080976b64086860300004000180"], 0x28}], 0x1, 0x0, 0x0, 0x24000045}, 0x880) syz_emit_ethernet(0x46, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff080045e40038000000000006907800000041ffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90008f03907800000402240c9bbc1a213d3a9d0000000000"], 0x0) 9m6.653925845s ago: executing program 34 (id=7704): io_setup(0x7e, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e24, 0x400, @loopback}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x7c2) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) (async) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (async) write$UHID_CREATE2(r4, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) (async) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) (async) r5 = socket$netlink(0x10, 0x3, 0x2) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="2800000000000000000000060000000027000000", @ANYRES32=r6, @ANYBLOB="0b000080976b64086860300004000180"], 0x28}], 0x1, 0x0, 0x0, 0x24000045}, 0x880) syz_emit_ethernet(0x46, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff080045e40038000000000006907800000041ffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90008f03907800000402240c9bbc1a213d3a9d0000000000"], 0x0) 6.474536207s ago: executing program 5 (id=9730): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) ioctl(r0, 0x9, &(0x7f0000000600)="a951b8be2db08ebb47749317cbc35d418cb6bc01b820254d74510f5239e7bdd736c5e159625288ec02afb627d42b05dd58720eac2a1589173fe4845e49cc2992ee2b3734bed937595e9e6b6ed5c84212c03e9571666f50579826b93351c23269749c62ad47917aa75073f40d29df9fb5728523a122cfc1066fea7fb64990f3dd8e45b8629aed7c82dc95062286bcf930ef7ca28ddac41e480440fb7e50834ae97904317c45f546612403d26b2f77aba116b897ce74de0083dd9da8088b2d3a7a86b0979ed2ed9809aa59de8678c1470c16ea15a54178c5a3") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3100}, [@RTA_PRIORITY={0x8, 0x6, 0x6}]}, 0x24}}, 0x800) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x2) connect$pppl2tp(r3, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="230e27bd7000ffdbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="5e0500a0"], 0x20}}, 0x4080) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) write$FUSE_LK(r0, 0x0, 0x0) r10 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f00000000c0)={0x1d, r11, 0x8000000000000003, {}, 0xfd}, 0x18) close(r10) 4.615885755s ago: executing program 5 (id=9738): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000340)={0x101, 0x100}, &(0x7f0000000380)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r7, 0x25, 0x2, @val=@netkit={@void, @value=r5}}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r9, &(0x7f0000001b00)=[{&(0x7f0000000180)=""/244, 0xf4}], 0x1, 0x10, 0x0) 3.641430876s ago: executing program 5 (id=9741): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) io_setup(0x81, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190003000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.595391665s ago: executing program 5 (id=9743): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x4}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r3 = socket(0x1e, 0x4, 0x0) connect$inet(r3, &(0x7f0000000000)={0x1e, 0x4e20, @multicast2}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) shmdt(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000008540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000380240000800800034000000002180002801400028008000180fffffffd08000340"], 0xe8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x2c, r8, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) 3.594846255s ago: executing program 4 (id=9744): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, 0x0, 0x0) 3.534402003s ago: executing program 6 (id=9745): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x6c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xffe0}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @rand_addr=0x64010100}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x800) 3.533948957s ago: executing program 4 (id=9746): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20004045, &(0x7f0000000140)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r5, 0x200004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0xec, 0xd8, 0xb081, r5, 0x5, '\x00', 0x0, r5, 0x5, 0x2, 0x4, 0xc}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000e8c67d08000000000000000000001811001f", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000180)) r8 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r8, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) shutdown(r8, 0x0) write$apparmor_exec(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(r3, r5, 0x0, 0x80001d00c0d1) 3.374423441s ago: executing program 6 (id=9747): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20004045, &(0x7f0000000140)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r6, 0x200004) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0xec, 0xd8, 0xb081, r6, 0x5, '\x00', 0x0, r6, 0x5, 0x2, 0x4, 0xc}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000e8c67d08000000000000000000001811001f", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r6, 0x1263, &(0x7f0000000180)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) shutdown(0xffffffffffffffff, 0x0) write$apparmor_exec(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(r3, r6, 0x0, 0x80001d00c0d1) 3.227644475s ago: executing program 5 (id=9748): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r7, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x14, r7, 0x1}, 0x14}}, 0x20000800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2.836761437s ago: executing program 1 (id=9750): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x82080, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x11, r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0xffffffffffffff7f) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/hardlockup_count', 0x0, 0x8a) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a140000f71000010000000000000000000700000a"], 0x28}, 0x1, 0x0, 0x0, 0x20004090}, 0x4800) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="b33112367cbe0180c20000000800450000b00000000000119078000000000000000000004e49ab3c9d7801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56c78490f2b0c108d1935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643febb2c5a57df67d544af6e8001009"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) capset(0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x204000, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000006c0)=""/254, 0xfe}], 0x2, &(0x7f00000007c0)}, 0xffffffff}], 0x1, 0x10000, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000080)=0xfffff800) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 2.359609851s ago: executing program 4 (id=9751): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) io_setup(0x81, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190003000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.330168576s ago: executing program 6 (id=9752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x1ff, 0x6, 0x6, 0x800, 0x2}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x100}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) close(0x3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd08, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r9 = dup2(r5, r5) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r9, &(0x7f0000004d80)={0x2020}, 0x2020) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x6, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r11}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x20, 0xdd, "06b4ceecf0e8585f3d7081f141304ca8611073c9ff47326c064cc947fd64be7ff59858d674eae8fb11097ce725c9510b5ed13398510b6391c841ea9f21f5c097d7d10360967216507bbee1f732e6404782fa8d6fb1e65e97d421608983021c80ccd5b46e888b593327fa969b74ff1a75efe65ffa46636624b08a48430eda390a219f9339bc0b9f278c47e6975f28d63929205435a970153822a285c779bcf0911afdfc06d7212db1fe0946120413ed7dd2a77b1291ee3f5e75e6fc6d2886f3e65fcb10b358698154650ad9cc09bae9c7cca3f0de86c917914608c25ca4"}}) r12 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r12, 0x29, 0x33, &(0x7f0000000080)=0xffff73d9, 0x4) 2.310303744s ago: executing program 5 (id=9753): prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_fc_track_range\x00', r1, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003600)=@newtfilter={0x40, 0x2c, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1c}, {0xfff3, 0xc}, {0xd, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) io_setup(0x9, 0x0) io_submit(0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10000, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) unshare(0x28000600) fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r7, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r7, 0x0, 0x0) write$ppp(r7, &(0x7f0000000480)="ac4a", 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[@ANYBLOB="800100001000010028bd7000ffdbdf25ac1414aa000000000000000000000000fe8800000000000000000000000000014e2300004e208000000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142a000000000000000000000000000001206c000000fe800000000000000000000000000023feffffffffffffff000000000000000000000000000000000000000000000000c802000000000100080000000000000000000000000004000000000000000000ffffffffff1f0000080000000000000000000000000000000100000000000000fdffffffe70000000000000000000000000000000200010003000000480003"], 0x180}, 0x1, 0x0, 0x0, 0x4075}, 0x4880) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 2.155725615s ago: executing program 6 (id=9754): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002600)=@delchain={0x6dc, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @filter_kind_options=@f_basic={{0xa}, {0x6a4, 0x2, [@TCA_BASIC_POLICE={0x458, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xd39, 0x8000, 0x4, 0x1, 0x7fffffff, 0x2, 0x6, 0x7, 0xffff, 0x3896330b, 0x0, 0x10000, 0x2, 0x8, 0xf, 0x2, 0x2, 0x0, 0x9, 0xf, 0x10001, 0x5, 0xc3, 0x0, 0xe, 0x3, 0x5, 0xf, 0x800, 0xbac, 0x200, 0x5, 0x10, 0x0, 0x9fe, 0x2, 0xfffffffc, 0x0, 0xffffffc0, 0x7, 0x10000, 0x2, 0x7, 0x0, 0x5, 0x100, 0x0, 0x6, 0x3, 0x7ff, 0x4, 0x1000, 0x3, 0x7ff, 0x2, 0x8, 0x1ee, 0x200, 0x2, 0x3ff, 0x102000, 0xffffffdc, 0x0, 0x0, 0xfff, 0xfffffffa, 0x200, 0x9, 0x8, 0xfffffbff, 0x1, 0x19, 0x7, 0x0, 0x8, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0x1000, 0x8, 0x2, 0xfffffffe, 0x0, 0x7fffffff, 0x8, 0x5, 0xe, 0x8, 0x3f, 0x81, 0x1, 0x1000, 0x0, 0x3, 0x7, 0x3, 0xcb, 0x5, 0x101, 0x400, 0x3ff, 0x0, 0x8d13, 0xff, 0x5, 0x4, 0x21ad, 0x2, 0x1, 0x8, 0x8001, 0x1, 0x80000001, 0x1ff, 0x10000, 0x5, 0x101, 0xb4b4, 0x3, 0x1, 0xc, 0x8, 0x2, 0x80000000, 0x8000, 0x8, 0x1, 0x9, 0x4, 0x7, 0x6, 0xc2c9, 0x7, 0x1e9, 0x4, 0x0, 0x4, 0xfffffffa, 0x80000001, 0xff, 0xfffffffb, 0x400, 0xb0d, 0x7, 0xffffb6f2, 0xe, 0x4, 0xe, 0x5, 0x80000000, 0x200, 0x2d8, 0x1, 0x6299, 0x7439, 0x1, 0x5, 0x6, 0x400, 0x0, 0x5, 0x9, 0x10000, 0xfffffff6, 0xf, 0xfffffffc, 0x38, 0x5, 0x1, 0x3, 0x5, 0xe, 0x0, 0x252d, 0xfffffffe, 0xfffffffd, 0x3, 0x200, 0x0, 0x4000000, 0x9, 0xfffffff7, 0x0, 0x2, 0xf, 0x5, 0x8, 0x3, 0x6, 0x1, 0x8, 0x4, 0x0, 0xfffffff7, 0x0, 0x7, 0x431e, 0x0, 0x8000000, 0x2, 0x831, 0x180000, 0x1, 0x8a1, 0x5, 0x5, 0x8, 0xffff8000, 0xffffc917, 0x9, 0x4, 0x4085, 0x40, 0x80000000, 0xdc42, 0x0, 0x7, 0xffffff7d, 0xf805, 0x6, 0x45, 0x2, 0x0, 0x8, 0x200, 0x0, 0xfffff8fe, 0x1, 0x5, 0x2, 0xffffffff, 0x4, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xfff, 0x8, 0x81d, 0x45a, 0x3, 0x2, 0x7fdde78e, 0x7f, 0x80, 0x5, 0x3, 0x7, 0x80, 0x7993]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x470, 0x0, 0xbfc1, 0x7, 0x9, {0x8, 0x1, 0xfffc, 0x8, 0x1, 0x8}, {0x5, 0x0, 0x2a97, 0x3d, 0x1, 0x9356b6f}, 0x2, 0x1, 0x2}}]}, @TCA_BASIC_EMATCHES={0x170, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0xd0, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x3}, {0x2, 0x1, 0x7}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0xcec3}, {0x6, 0x6, 0x7fff, 0x1, 0xd, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x8a}, {0x800, 0x7, 0x6}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8001, 0x8, 0x671}, {0x4, 0x6, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x1ff, 0x2, 0x5}, {0xb3, 0x6, 0x1, "73a4597867df"}}}, @TCF_EM_META={0x50, 0x3, 0x0, 0x0, {{0xb6, 0x4, 0x8a}, [@TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="703c1d71621e3d3a11", @TCF_META_TYPE_VAR="43df", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR='>', @TCF_META_TYPE_VAR="336c11aea7"]}, @TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="82664a31b1da76", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="8419581d7ce59b", @TCF_META_TYPE_VAR="eaa2c46d889813606d60", @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x2}, {0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x9}, {0xfff, 0x7, 0x5, 0x2, 0x8, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8}, {0x3, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x7ff, 0x2, 0xff}, {0x0, 0x9, 0x2, "f5f52c3b4b6a921eea"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x7, 0x0, 0x0, {{0xfc01, 0x7, 0x7f}, {{0x2}, {0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0xad31}, {{0x2, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x6}}, @TCA_BASIC_EMATCHES={0xd0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xd, 0x7, 0x2}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x200}, {0x1, 0x81, 0x8, 0x6, 0x1, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0xe5}, {{0x3, 0x0, 0x1}, {0x1}}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x0, 0x9, 0xfffe}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xd}]}}, @TCF_EM_CONTAINER={0x38, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x1ff}, "faef7359303b9787ac6434f2c1d506e96a5e985d66ca37724ea342f8a34685a3eeeb36ce14f3667bad"}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x4080}, 0xc050) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 2.154817414s ago: executing program 4 (id=9755): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000043000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x100, 0xffffffff, 0x9, 0x2, 0x16, "0038545d89a2dce8ab4b3419c6b302ef670919"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000001c00)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xc7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000b3b000/0x1000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ecm(0x1, 0x8d, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x7, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0xabec}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xff43, 0x10}, [@mbim={0xc, 0x24, 0x1b, 0x401, 0x0, 0x2, 0x9, 0xfffb, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0xf0ab, 0x0, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x3f, 0xc}, @dmm={0x7, 0x24, 0x14, 0x10, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x797, 0x80, 0x5b, 0x2d}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x69, 0x4, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6d}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x53, 0xe, 0xa, 0x40, 0x6}, 0x7e, &(0x7f00000002c0)={0x5, 0xf, 0x7e, 0x5, [@generic={0x35, 0x10, 0x5, "ca1b394af73b944465141b9832c918e98ee9c403dde609b66e84c88aae4695b8682adaf8fdd52d47ac00c439d17e5d05a3b7"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x0, 0x56, 0x3, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x66, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x53, 0xf, 0x7, [0x3f30, 0x8, 0x3f00, 0x0, 0x3f5f, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x45, 0x23, 0x4, 0x7, 0xf}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x835}}, {0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="4103d2ae14e4c16836be2263ec249c3b43d5a533dfcdcbbe3980eff6cac58ec5c5d9ebdc1c89e7c7096755b5ff19f7468bb8df41b6bc620900000000000000000063fdc39ee24584486b78dee2a7e4a044646129b7e75a4fe3ba91181af3bc805a8044310fc5db10f492bff200b4cbbb892673cc1b3afb6a39b70e3134093140a00c029f99e35f4b3b54e3c29c069161ee412838006084c37c18d257fc85f68271f2b383b5efb2f35af59af9da48cd1f6a39a11df0ecb029cd2b543b7682e4281e989a8f29f49823868e3a0fd100ce7e814d2f5afcf7f355dd2522a74929fb2c839d9df99fd53a852f985253866bfc"]}]}) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r9, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030005ac0f"], 0x58}}, 0x0) 1.865878265s ago: executing program 1 (id=9756): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20004045, &(0x7f0000000140)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r6, 0x200004) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0xec, 0xd8, 0xb081, r6, 0x5, '\x00', 0x0, r6, 0x5, 0x2, 0x4, 0xc}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000e8c67d08000000000000000000001811001f", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r6, 0x1263, &(0x7f0000000180)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) shutdown(0xffffffffffffffff, 0x0) write$apparmor_exec(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(r3, r6, 0x0, 0x80001d00c0d1) 1.406165673s ago: executing program 4 (id=9757): socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_io_uring_setup(0x4d71, &(0x7f00000001c0)={0x0, 0xc20e, 0x400, 0x2, 0xbfd00000}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='svc_authenticate\x00'}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000100)=""/174, 0xae}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) 716.674892ms ago: executing program 1 (id=9758): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 715.96973ms ago: executing program 6 (id=9759): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r0, &(0x7f00000002c0)={{0x3, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x7e) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=@gettaction={0xd8, 0x32, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3ff}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x2004, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa7}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe0000}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd09}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x14}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 715.621677ms ago: executing program 1 (id=9760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x2, 0x4, 0x5, 0x143, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000100000000000000030000001800000003000000000000000400030095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 655.616976ms ago: executing program 6 (id=9761): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000010001fff000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0918000000000000700012800b000149b84c526c0a6480bb3f9900697036746e6c00f11300028005000900040022af66c958ee7c000014020200fe8000000000000000000000000000bb0800040000000002"], 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x1}, 0xfffffffffffffd25) unshare(0x6a040000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000300)="3d0f", 0x2}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x80005885, 0x10, 0xfffbfffd, 0x2c1, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r7, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r8, 0x3516, 0x701f, 0x0, 0x0, 0x0) r11 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r11, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000001001010001000000"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) 654.694966ms ago: executing program 1 (id=9762): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f0000005c00)=[{{&(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000480)="b64e203bf1da809547c0036e780f714e82440943518c5bc2f94fe373b228384a44ada2ea365d72e63bb5ac6676697303054261d64c91e0591f0e6faa2e40fe1da6c7fdeaf76755b755e4d2920ce527e0b16d7cc9955ec3a2dad2868149e1101235d617b8995e6db4ed7319cc61c44d196775d8c2f3fb89c13a7cff318d11ef827148b4f94d69b7e75fa179b4689277c369116293e9a7ec9695fe69f0b2e7cafe871b5cc462c3394846e659205c42eb8a074308e19070a3d09a1819d82f320ae37ee75c75ebf575cc292042105b7076952c2c41d3daccf7d2690b284b292773ec1b10580344f7e53fd33c8735df48824273afdd792c6bea", 0xf7}, {&(0x7f00000005c0)="ae0e5d4dd41f0917cfc578d3306f804a7c8f6ce80c5087f7b1eccea4d112660bb85f5ae25faa3192fc5df4146f42052ed1711b9f136e2320f23649386d5e74281f8b581c7d2da0f8", 0x48}, {&(0x7f00000006c0)="eba4aac7d1d2e0136ed700e85a358a1f712089ca9c14680f077edb3eb992a2e29bc49be33428ec0860958597136ada2c72dbb878ccaa1ab8651eba57e1543be367ad1c1d59bec32fcf7b336b6dbc261c247cd54a478b92afdf2d582f63f0be3e448369b32175e5c0be97a8e1dde6adbdc2c5da7743e48e847ca6cee3cf91a83d736e417e0708", 0x86}, {&(0x7f0000000300)="ec51aff54c06971e9b32250b72847bebeb88dc3622", 0x15}, {&(0x7f0000000780)="0536cd4fd698edb1c203434ccf782ffb3a203296528e298b9bf805eba3fbb4bd86b7aca36600ed4c3682d64dd12bb21979f32bcaef4d2b5f15f01f50ab016bf13006f8d8638cefad663d8f45b0127a19c0632534a2e8ece1693f6a2a2072be5a0acfb6fb68d0c2de04a8b66fa37ed340374c5f44f75a2f35668d4e089527649f076849ce0b8c778156002047fde42f3e5dbeeac6a7db1540abda333a", 0x9c}, {&(0x7f0000000640)="9f58166e243221832b6924fcb9b8a1cdc4c1cd2b8c04ed032ded21fa6857b48e72dcd1b91cd99877d6bfdec6ab2d851d01e65e3c39a2bec7", 0x38}, {&(0x7f0000000840)="7ef8957f0b2a76b24e900f4553d2960e43bb9284a4c634a9bd7e3896377b985e9a64ef9a704f06fad49fc0db17f3ae549a3fc90c8305329b34373f887fb8b04a1e9f11323b694481078bb6aed11415a23b0ecc336b578e20d0c67b9532f72fb46932c2bc2128e6a2146edb4abda2f4421c602486cd62c49a1221248cb36399814ee849f5096059949fad6a82316e24ddee47a44cdda92c4d176409c51d97fe0dbf86341b5104b0b897dcd363423c85ed8400f564cc36b26d73022d656fd62b87931ca5f2f99e8063edbb38c3", 0xcc}, {&(0x7f0000000940)="cffa257146d8a5fecc3f8db08b3e00590a1c66813f8c716e899ffd6d175bda2ed57b30f27725aefba76dce84e9a0f5b2fd98594e1021e29cc9926426aa1f5d5668dfe8d3c2f1e7e2ee7ff9aac8ab718ceef097f675ec52e352037c416766b3ae03cb568b0cbeec2550415f316fba444cdeb88afe0750076ee6bcaa1d004616619127054ccef40044bbc4eb1a3b2b78e2f872ccb60aa6da990c27d9ec07aa1f49dfaab6395adbbc5a0cae87f25636a8", 0xaf}, {&(0x7f0000000a00)="3e3d3c22d29992eae8b9113e7566dcce1d6079f144818b2af13b930dcc6629c89143580a6361d8f17d65f612541ad55a90b1e735caf8db838629ffc2572ca53d30016156fc3dab45d68e1d13d513bbcd432f1f0bba01a6988fa424a5e46719fa1b9830a0e275b4c8a75e736a42a90f79c0e55480c4becdcd", 0x78}, {&(0x7f0000000a80)="4cc2687cde115857162c174575795bfc6bf6f5d245953e7d4e7ea087903a3f3cebcb378aa2dd890b624afd5013b21a2ef3149689a7a938c339ad1f0edf0769459553d4a96c220a197e9bbddf6c1bf7a8467a22138ae5101b093765ab205f68e4d117e3e08abd8458f86ab3924cd4306d0ec28625b304515ad1db84568b606f2483427de3439950a9aae1b62eab6f62094ae5fdc510424ac041556ece", 0x9c}], 0xa, 0x0, 0x0, 0x10}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000bc0)="35c68817e1a00da7236fa13795c5afb09884319e6c1298ee420884071d4dd20f1b6d0d495ed1e7a1b79a480662b6cec31b974fcc69634180ac5662a316393980654ea1530212d692c9c156619e6875d9cc308d19d16c7b0a69506895addb3759307d56aaa0f999d9d2b0ec7dd375248ec89a8b47a3decad2977d88eeea87371ccfe28d43c8feba649b9a32b0142361b161173ddec33d582f4c1fb2ef28e8c535a736be0c4d1fc520c3294fd95f9930c879432badf105979ef877ba6cd8f631fda601f810470a8842287fc2c95d80763fda59328bf79cdcdf9ab077bdaa793dadb52e87", 0xe3}, {&(0x7f0000000cc0)="d5d731464939cea50f96cf31f88edcde1d4d96c3b5500f499bc7b03c2b78e72ab84f2c80e88ac8ad449d27f18a74311ccc858a1be16eee9f6c8a49a5ac0a8b74bdb73721b23a4178298f6a281c943cb50890cd891287439ed9a15dad8137867ba1b7e789247f048f2a7d01f178928e961fa2f9f289e8a4f772d93ba5210a7fc87ecf243eaaf947951101510c00ddd3a0bcf10577ee1d7f34cb21cb73df62d6c1f2a0e6524bcc1d0a93f11e757a1de8eca39eccb5954d4844c3442716dfe43c37a89ad85c9872d5", 0xc7}, {&(0x7f0000000dc0)="f475045463e96b888840076032b7b05ddfbfb8a409ee708e93cabd50ab5645b09e2d91334f83f65379b222a05269e3c13d2b6ce4a62590f175245820f66eb3ebccc40d8e3c125d29abdab26b44e724ab53ae9e148685249770a94d9b612a53d22c5b5c8ae1ccfccf320d0ba50f21a5af50ba3d5fa59e2a8e0bb0cfe6bf4970480ea0310c7ab0f70035", 0x89}, {&(0x7f0000000e80)="8beb220a4599d38bf74600ed8e929955d103e02e0f2c77aba9c04690776c0504d0a1736043890859339c3e42129b2a1ead54a70b5d6c448e1d17b7c0d8a846c8471aa42d6f5e565fafbb4273", 0x4c}, {&(0x7f0000000f00)="50d44df8e7b81b4049c518429ef749f66105578af83fbfc87d2fbe7f6c60221634b5bd1d9075b42fb150b84111eb41f2464e0cd799064a20a54efdc23e3874bddbd6564579f76a065c83d4c1070b1cb9a7d7e27214932b7159310ae891eeab6336c3b41b44d87a093022fe55dc1027138109bba45b228ad05aad023221", 0x7d}], 0x5, &(0x7f0000000fc0)=[@rights={{0x28, 0x1, 0x1, [r1, r0, r0, r0, r1, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0, r1]}}], 0x40, 0x20008045}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000001000)="73fed3508729467e5534f29a81f13c3e27b06a159396b044e3a99e6dca906a3aa55ed6610f72115ff7ceb1143e9a51cefd3975ff21c85ef40918be1adef1b10977cf02dbceefe28be3874070a90e558bf39214b74c0ffc9ed4c0eeadef56943a53c7c566cf29281bc9fbf130d48be9b85157134f61785fe90abb2b2897583697beae7acf88664f963a39db600e29a60728f3450aef", 0x95}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="0c5e7a5ec06b62b87759358aac5543332d5409417935be126c00e4c3fc790181d3719b3971995cda49b9248f977903e620d904be74ef28af25ecfda2", 0x3c}, {&(0x7f0000002100)="f632113a3861df3d10c5a8a4594201553953241c28fcaec30c9976ce2b602a2de233c9d97ec19a9a2984c887f7a3f187e426038fc57d3163e57fbd4fff944e230867ea405a95fce52d9d1f2df4065561481f8c9eda43d1f56465e16cf596126b0836591137a0a4d46440a7265ee309124a9764902b031fefd3b7432a20ad8e58dbf5f3ca03ed3d3d58a043641a3a3137a588e412c310bd23ff92aa7b71e3e92d8e0f76c0a7a61b08c17f0e866850c70ab4b0412df5364ad839134fcee2857177b41878fa468fb9f3f29ee16f10f229450bffdc3bd74a16a1e703fc9eee58e79ee6d559916c8eee1080ca053316", 0xed}, {&(0x7f0000002200)="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", 0x1000}], 0x5, &(0x7f0000003800)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0, r1, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r1, r0, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x18}}], 0xe4, 0x40000}}, {{&(0x7f0000004300)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000004740)=[{&(0x7f0000004380)="4018e688027e473f0db46501c4a136be8567d75a4965b3e76797a321027b794fd324b2042e3da61e5fc4215b117a856c4861f49416e7123d4f1e70a8fa7851ff0859011914be7b7d32e86bda1a2067918dbeb182319923d54bf2ae08d145f7bf566bc1151fcd8f996f6283ca919899c7bd1fc0627abd736a4311", 0x7a}, {&(0x7f0000004400)="e6e05813e3f12456918a3617445f25ff4aaf49aae8e7c64856ebdccb40038a6a37a32459a0a268d7441e3e544d540d2b63730abbd685c6b67212ede53d8b3d372fb692a88124fa45d40560b59de50e3a83281e65594fd7c5c0b60c9722d731d5858085630b358dc1ad76b04c824f3fa1610aeab0de89474a6cac8c1cda60ce0a0e55addaa049841bfc6efa23177ee9a1fcefd5b11a861c6fcedf24ef2ebf4e6d21367bfa0b455e6c354f1ab118b69da40999949e29443c89c410bce1e8d81fe6474bb0d11d2321b50718fbd8a83e2746cfbc6817799171e024d7b7911091c4fd48f7fe90de0ebfdf2617bb588c55069a6dbc3bf1fe1fb09d9d3c4b21", 0xfc}, {&(0x7f0000004500)="19b8641d0c4689c67f4adf9afff3b1d605c14fa307f34bc9c45d5543ad86fc1ca0ea5defa053c884bac318df80769f54e0ce7453aee06e3c77cc80e20ce6998604b2b73ab2d99104ebf322e7d2bf424609950f22635d054dc1cc93b46d7a9d431f7a8656cec83713466721187bc656a6e39656367998", 0x76}, {&(0x7f0000004580)="74706f76e7e1969b79906381e9d63521f422e8e7bb4a66a5b7521743f9487d120f79252472709f5a1dfe0b6e196df672f39f42f81b4bf3d48a90509e9850b513fd0f1d90ddbf8542830ba0c42883c86cbc1e8718179b1ec49301b54f5a662188ce9e3a061e134d3c864afc81fd0293", 0x6f}, {&(0x7f0000004600)="e46bf612556533077c6667385824920d7e52fcad578114bd8f60a3034ded44bb9b104258edf09e25ac7f00dba0ad92882eb96f9bac4e57c057fc080d5f873fda882b1861173c077ceaad51d5f91ede9963d12e7f7099d78ecbbf70f68d090765f04490b1", 0x64}, {&(0x7f0000004680)="7a7459733c0cc25f5e66f8ec793f2de9ee230654825bde4c02aaf8cd9f9d8ecec3313eb58e7f693243ec587e50c1de87bbb0d61c0143c88eb2c4bdcaf40df90f834c3a06b08ca733e1082672f982965c49fb9967f38d51176f2ec30980ab22823b6464bef032b629003764cf4c21795510f35cd42512628aad5c9fdf1d60e74c6ebb7e4d70cd3419483b6178e6a62c1941dc5599df821df6c8c1518408", 0x9d}], 0x6, &(0x7f0000004780)=[@cred={{0x18}}, @cred={{0x18}}], 0x30, 0x1}}, {{0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f00000047c0)="6034060cc8bc11b5203599f2f027351ade561380cade20942b455387ec2007cae383bb86bbe339bb56a1f95d59aac27f007c8cf617511e46b9348faf31f5e93f87ebbe6484073a49428212c463f8d2309053da6a914458790f4970bfab56", 0x5e}, {&(0x7f0000004840)="b0493525cb0b9b80c91ab4c769b80218a57eac589eb4b55ae5cbdca9604c9f25a8d90a2c9bd13799d7417bfdbb7630b7cf8b898cc8579586d2f923438175b9d978b0efa5558391c257012ff6acdf8b5e7f3184d59e16f291971ced33c22362d34836ca1583fd8d650112456f5e1e190a07ec4e99d961d9a29d913d9c568edcd56dbb6c843c6d4c492f8519b41f0826d236f19e5030c3aa5f4500937feb45d369c70740d6d3216a15e9446262ab12429267b16d74011536482db4ecef9e7fb6", 0xbf}, {&(0x7f0000004900)="7324cd2b0dd9e7e163c9440df76908303b879683e74ddfd0b2cdf45611d6c1d489fe24b1a58694bcbac7920d264704d56bb65a015828dce5e3f2e3686c081e1e99da88d262817539b5505c8170963924a3a962d7cdfade3013a041a9e6eb06c98501dafa93015c90c4aa48fddb6ee9d918bfbb1b3a69ddc49afa4d7c54b7738062a68d0c1f243997b6ee378e6ec85cc4eaf555e22bc5a36028a2f02e75e7a87bcaecc82c680901c6dff7b46e45e50fad9b8806b6b4b665387614bb7f976e1afa4822bfecc36350f9311cbab6762843293abaf40aa165926be6929ac6343f1312463730b3e1", 0xe5}, {&(0x7f0000004a00)="521887a08ffe", 0x6}, {&(0x7f0000004a40)="48f145833a623d578ca72a89de4169391939a6a2aaf5eb4bf589f0e1d2d7", 0x1e}, {&(0x7f0000004a80)="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", 0x1000}, {&(0x7f0000005a80)="b32da5354df37c73e3685471d843122680048fa06175d238b93f0ac7051ffa7221983b52b93535c72eb40bff3d59405a3bda61f96bf742165a8b181aa4043e3dfa074364ee5eafd7a15e0bca853a8c799be74f5528ca9ed51748994ab836bf686acedf972f9b9fe85d2fc028638521fd09a242a611dfd11d462264", 0x7b}], 0x7, &(0x7f0000005b40)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0x90, 0x4000}}], 0x5, 0x24000881) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000000010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018004e204e24140017"], 0x54}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) chdir(&(0x7f0000000440)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, 0x0, 0x7f03) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x4) r5 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x10) r6 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r6, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r5, 0x0) 163.611477ms ago: executing program 1 (id=9763): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x2a01, 0x0) (fail_nth: 11) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, 0x0) 0s ago: executing program 4 (id=9764): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x82080, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x11, r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0xffffffffffffff7f) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/hardlockup_count', 0x0, 0x8a) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a140000f71000010000000000000000000700000a"], 0x28}, 0x1, 0x0, 0x0, 0x20004090}, 0x4800) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="b33112367cbe0180c20000000800450000b00000000000119078000000000000000000004e49ab3c9d7801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56c78490f2b0c108d1935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643febb2c5a57df67d544af6e8001009"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) capset(0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x204000, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000006c0)=""/254, 0xfe}], 0x2, &(0x7f00000007c0)}, 0xffffffff}], 0x1, 0x10000, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000080)=0xfffff800) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) kernel console output (not intermixed with test programs): [ 2279.711160][T11720] ? find_held_lock+0x2b/0x80 [ 2279.711175][T11720] ? __pfx___might_resched+0x10/0x10 [ 2279.711189][T11720] do_recvmmsg+0x55d/0x750 [ 2279.711207][T11720] ? __pfx_do_recvmmsg+0x10/0x10 [ 2279.711222][T11720] ? trace_sched_exit_tp+0xd1/0x120 [ 2279.711248][T11720] ? __pfx___schedule+0x10/0x10 [ 2279.711262][T11720] ? __fget_files+0x20e/0x3c0 [ 2279.711273][T11720] ? handle_mm_fault+0x1b0/0xd10 [ 2279.711286][T11720] __sys_recvmmsg+0x21c/0x280 [ 2279.711303][T11720] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2279.711323][T11720] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 2279.711339][T11720] ? lockdep_hardirqs_on+0x7c/0x110 [ 2279.711355][T11720] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2279.711372][T11720] __do_fast_syscall_32+0x7c/0x300 [ 2279.711390][T11720] do_fast_syscall_32+0x32/0x80 [ 2279.711400][T11720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2279.711413][T11720] RIP: 0023:0xf7ff3579 [ 2279.711422][T11720] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2279.711432][T11720] RSP: 002b:00000000f54d555c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2279.711442][T11720] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800066c0 [ 2279.711449][T11720] RDX: 0000000000000a0d RSI: 0000000000000000 RDI: 0000000000000000 [ 2279.711455][T11720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2279.711461][T11720] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2279.711467][T11720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2279.711480][T11720] [ 2279.931864][T11723] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2280.591498][T11737] netlink: 76 bytes leftover after parsing attributes in process `syz.6.9148'. [ 2280.973512][ C3] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2281.053944][ T53] usb 46-1: device descriptor read/8, error -110 [ 2281.575200][T11742] netlink: 'syz.1.9151': attribute type 1 has an invalid length. [ 2281.578583][T11743] netlink: 'syz.1.9151': attribute type 1 has an invalid length. [ 2281.583493][ T53] usb usb46-port1: attempt power cycle [ 2281.605109][T11742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2281.615145][T11741] bond3: (slave wlan0): Opening slave failed [ 2281.631711][T11741] vlan2: entered allmulticast mode [ 2281.634271][T11741] veth1: entered allmulticast mode [ 2281.637476][T11741] bond3: (slave vlan2): Opening slave failed [ 2282.003496][ C3] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2282.508193][ T53] usb usb46-port1: unable to enumerate USB device [ 2282.750768][T11751] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2282.754196][T11751] FAULT_INJECTION: forcing a failure. [ 2282.754196][T11751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2282.758338][T11751] CPU: 3 UID: 0 PID: 11751 Comm: syz.5.9154 Not tainted syzkaller #0 PREEMPT(full) [ 2282.758353][T11751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2282.758360][T11751] Call Trace: [ 2282.758364][T11751] [ 2282.758369][T11751] dump_stack_lvl+0x16c/0x1f0 [ 2282.758389][T11751] should_fail_ex+0x512/0x640 [ 2282.758408][T11751] _copy_to_user+0x32/0xd0 [ 2282.758421][T11751] simple_read_from_buffer+0xcb/0x170 [ 2282.758434][T11751] proc_fail_nth_read+0x197/0x240 [ 2282.758447][T11751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2282.758459][T11751] ? rw_verify_area+0xcf/0x6c0 [ 2282.758471][T11751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2282.758482][T11751] vfs_read+0x1e1/0xcf0 [ 2282.758497][T11751] ? __pfx_vfs_read+0x10/0x10 [ 2282.758508][T11751] ? find_held_lock+0x2b/0x80 [ 2282.758522][T11751] ? __fget_files+0x20e/0x3c0 [ 2282.758534][T11751] ? handle_mm_fault+0x1b0/0xd10 [ 2282.758548][T11751] ksys_read+0x12a/0x250 [ 2282.758560][T11751] ? __pfx_ksys_read+0x10/0x10 [ 2282.758574][T11751] ? rcu_is_watching+0x12/0xc0 [ 2282.758587][T11751] __do_fast_syscall_32+0x7c/0x300 [ 2282.758605][T11751] do_fast_syscall_32+0x32/0x80 [ 2282.758615][T11751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2282.758629][T11751] RIP: 0023:0xf707e579 [ 2282.758638][T11751] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2282.758649][T11751] RSP: 002b:00000000f546e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2282.758659][T11751] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546e620 [ 2282.758665][T11751] RDX: 000000000000000f RSI: 00000000f7404ff4 RDI: 0000000000000000 [ 2282.758672][T11751] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2282.758677][T11751] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2282.758684][T11751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2282.758697][T11751] [ 2283.985657][T11771] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2285.714449][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9163'. [ 2286.281972][T11802] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9165'. [ 2286.306986][T11806] lo speed is unknown, defaulting to 1000 [ 2286.563067][T11806] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9168'. [ 2286.566419][T11806] fuse: Bad value for 'fd' [ 2287.503906][T11817] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2287.593472][ T6378] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 2287.753722][ T6378] usb 10-1: Using ep0 maxpacket: 8 [ 2287.759335][ T6378] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2287.765061][ T6378] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2287.770188][ T6378] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2287.778383][ T6378] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2287.783354][ T6378] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2287.787274][ T6378] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.996569][ T6378] usb 10-1: GET_CAPABILITIES returned 0 [ 2287.998468][ T6378] usbtmc 10-1:16.0: can't read capabilities [ 2288.023608][ T9] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2288.173539][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 2288.176497][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2288.181015][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2288.184616][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2288.187861][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2288.192148][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2288.195970][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.253902][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9169'. [ 2288.309946][ T6378] usb 10-1: USB disconnect, device number 63 [ 2288.409682][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 2288.411474][ T9] usbtmc 6-1:16.0: can't read capabilities [ 2288.659207][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9172'. [ 2288.800676][ T9] usb 6-1: USB disconnect, device number 104 [ 2288.964908][T11837] syzkaller1: entered promiscuous mode [ 2288.967441][T11837] syzkaller1: entered allmulticast mode [ 2289.224686][ T6378] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2289.274705][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9176'. [ 2289.919606][T11866] 9pnet_fd: Insufficient options for proto=fd [ 2290.635410][T11880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2290.639518][T11880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2290.713641][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9183'. [ 2301.225398][T11931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2301.229038][T11931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2301.337064][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9191'. [ 2301.393462][T25798] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 2301.543498][T25798] usb 9-1: Using ep0 maxpacket: 8 [ 2301.546956][T25798] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2301.550441][T25798] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2301.553903][T25798] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2301.557664][T25798] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2301.562027][T25798] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2301.565118][T25798] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.782196][T25798] usb 9-1: GET_CAPABILITIES returned 0 [ 2301.784518][T25798] usbtmc 9-1:16.0: can't read capabilities [ 2302.039232][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9190'. [ 2302.044425][T25798] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2302.099490][ T9] usb 9-1: USB disconnect, device number 69 [ 2302.204421][T25798] usb 6-1: Using ep0 maxpacket: 8 [ 2302.208831][T25798] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2302.213966][T25798] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2302.217257][T25798] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2302.220442][T25798] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2302.224971][T25798] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2302.227904][T25798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2302.442940][T25798] usb 6-1: GET_CAPABILITIES returned 0 [ 2302.445522][T25798] usbtmc 6-1:16.0: can't read capabilities [ 2302.698489][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9192'. [ 2303.479252][T25798] usb 6-1: USB disconnect, device number 105 [ 2304.092981][T11990] FAULT_INJECTION: forcing a failure. [ 2304.092981][T11990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2304.099485][T11990] CPU: 0 UID: 0 PID: 11990 Comm: syz.1.9206 Not tainted syzkaller #0 PREEMPT(full) [ 2304.099502][T11990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2304.099509][T11990] Call Trace: [ 2304.099514][T11990] [ 2304.099519][T11990] dump_stack_lvl+0x16c/0x1f0 [ 2304.099542][T11990] should_fail_ex+0x512/0x640 [ 2304.099564][T11990] _copy_to_user+0x32/0xd0 [ 2304.099578][T11990] sg_ioctl+0x1ec4/0x27f0 [ 2304.099595][T11990] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2304.099616][T11990] ? __pfx_sg_ioctl+0x10/0x10 [ 2304.099632][T11990] ? find_held_lock+0x2b/0x80 [ 2304.099644][T11990] ? hook_file_ioctl_common+0x145/0x410 [ 2304.099663][T11990] ? __fget_files+0x20e/0x3c0 [ 2304.099678][T11990] ? __pfx_sg_ioctl+0x10/0x10 [ 2304.099692][T11990] compat_ptr_ioctl+0x6b/0xa0 [ 2304.099709][T11990] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 2304.099727][T11990] __ia32_compat_sys_ioctl+0x23f/0x370 [ 2304.099751][T11990] __do_fast_syscall_32+0x7c/0x300 [ 2304.099781][T11990] do_fast_syscall_32+0x32/0x80 [ 2304.099799][T11990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2304.099821][T11990] RIP: 0023:0xf702e579 [ 2304.099838][T11990] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2304.099855][T11990] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2304.099874][T11990] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000002286 [ 2304.099886][T11990] RDX: 0000000080007f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 2304.099899][T11990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2304.099912][T11990] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2304.099922][T11990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2304.099940][T11990] [ 2305.198987][T12018] netdevsim netdevsim4: Direct firmware load for @ failed with error -2 [ 2305.201882][T12018] netdevsim netdevsim4: Falling back to sysfs fallback for: @ [ 2305.499816][T12030] netlink: zone id is out of range [ 2305.502250][T12030] netlink: zone id is out of range [ 2305.507137][T12030] netlink: zone id is out of range [ 2305.509558][T12030] netlink: zone id is out of range [ 2305.511888][T12030] netlink: zone id is out of range [ 2305.514443][T12030] netlink: zone id is out of range [ 2305.516608][T12030] netlink: zone id is out of range [ 2305.518924][T12030] netlink: zone id is out of range [ 2305.521273][T12030] netlink: zone id is out of range [ 2305.529974][T12030] netlink: zone id is out of range [ 2305.534502][T12030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9215'. [ 2307.373166][T12069] rdma_rxe: rxe_newlink: failed to add lo [ 2308.312687][T12097] lo speed is unknown, defaulting to 1000 [ 2309.342824][T12119] lo speed is unknown, defaulting to 1000 [ 2309.353091][T12118] tipc: Enabled bearer , priority 0 [ 2309.362067][T12118] syzkaller0: entered promiscuous mode [ 2309.364598][T12118] syzkaller0: entered allmulticast mode [ 2312.050644][T12111] tipc: Resetting bearer [ 2312.082657][T12111] tipc: Disabling bearer [ 2312.424842][T12165] 9pnet_fd: Insufficient options for proto=fd [ 2312.874025][T12172] FAULT_INJECTION: forcing a failure. [ 2312.874025][T12172] name failslab, interval 1, probability 0, space 0, times 0 [ 2312.879158][T12172] CPU: 3 UID: 0 PID: 12172 Comm: syz.5.9252 Not tainted syzkaller #0 PREEMPT(full) [ 2312.879179][T12172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2312.879190][T12172] Call Trace: [ 2312.879197][T12172] [ 2312.879203][T12172] dump_stack_lvl+0x16c/0x1f0 [ 2312.879232][T12172] should_fail_ex+0x512/0x640 [ 2312.879257][T12172] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2312.879277][T12172] should_failslab+0xc2/0x120 [ 2312.879299][T12172] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2312.879316][T12172] ? copy_mount_options+0x55/0x190 [ 2312.879341][T12172] copy_mount_options+0x55/0x190 [ 2312.879365][T12172] __ia32_sys_mount+0x1ac/0x310 [ 2312.879386][T12172] ? __pfx___ia32_sys_mount+0x10/0x10 [ 2312.879409][T12172] ? rcu_is_watching+0x12/0xc0 [ 2312.879429][T12172] __do_fast_syscall_32+0x7c/0x300 [ 2312.879455][T12172] do_fast_syscall_32+0x32/0x80 [ 2312.879471][T12172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2312.879490][T12172] RIP: 0023:0xf707e579 [ 2312.879502][T12172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2312.879518][T12172] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 2312.879534][T12172] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 00000000800002c0 [ 2312.879545][T12172] RDX: 0000000080000300 RSI: 0000000000000040 RDI: 0000000080000980 [ 2312.879555][T12172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2312.879565][T12172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2312.879574][T12172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2312.879612][T12172] [ 2314.024277][T12200] FAULT_INJECTION: forcing a failure. [ 2314.024277][T12200] name failslab, interval 1, probability 0, space 0, times 0 [ 2314.041865][T12200] CPU: 2 UID: 0 PID: 12200 Comm: syz.6.9260 Not tainted syzkaller #0 PREEMPT(full) [ 2314.041889][T12200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2314.041898][T12200] Call Trace: [ 2314.041903][T12200] [ 2314.041910][T12200] dump_stack_lvl+0x16c/0x1f0 [ 2314.041937][T12200] should_fail_ex+0x512/0x640 [ 2314.041964][T12200] should_failslab+0xc2/0x120 [ 2314.041985][T12200] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2314.042002][T12200] ? __alloc_skb+0x2b2/0x380 [ 2314.042026][T12200] __alloc_skb+0x2b2/0x380 [ 2314.042045][T12200] ? __pfx___alloc_skb+0x10/0x10 [ 2314.042067][T12200] ? __alloc_skb+0x200/0x380 [ 2314.042087][T12200] ? __pfx___alloc_skb+0x10/0x10 [ 2314.042108][T12200] ? __lock_acquire+0xb97/0x1ce0 [ 2314.042135][T12200] create_monitor_ctrl_event+0x3b/0x450 [ 2314.042178][T12200] mgmt_cmd_complete+0x2de/0x550 [ 2314.042201][T12200] set_connectable+0x478/0x820 [ 2314.042217][T12200] ? __pfx_set_connectable+0x10/0x10 [ 2314.042235][T12200] ? do_raw_read_unlock+0x44/0xe0 [ 2314.042257][T12200] ? _raw_read_unlock+0x28/0x50 [ 2314.042279][T12200] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 2314.042304][T12200] hci_sock_sendmsg+0x1522/0x25f0 [ 2314.042329][T12200] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2314.042348][T12200] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2314.042370][T12200] sock_write_iter+0x4ff/0x5b0 [ 2314.042386][T12200] ? __pfx_sock_write_iter+0x10/0x10 [ 2314.042411][T12200] ? bpf_lsm_file_permission+0x9/0x10 [ 2314.042433][T12200] ? security_file_permission+0x71/0x210 [ 2314.042453][T12200] ? rw_verify_area+0xcf/0x6c0 [ 2314.042471][T12200] vfs_write+0x7d3/0x11d0 [ 2314.042488][T12200] ? __pfx_sock_write_iter+0x10/0x10 [ 2314.042508][T12200] ? __pfx_vfs_write+0x10/0x10 [ 2314.042526][T12200] ? find_held_lock+0x2b/0x80 [ 2314.042558][T12200] ksys_write+0x1f8/0x250 [ 2314.042577][T12200] ? __pfx_ksys_write+0x10/0x10 [ 2314.042599][T12200] ? rcu_is_watching+0x12/0xc0 [ 2314.042622][T12200] __do_fast_syscall_32+0x7c/0x300 [ 2314.042651][T12200] do_fast_syscall_32+0x32/0x80 [ 2314.042667][T12200] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2314.042687][T12200] RIP: 0023:0xf704e579 [ 2314.042702][T12200] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2314.042720][T12200] RSP: 002b:00000000f543e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 2314.042739][T12200] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 2314.042750][T12200] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 2314.042760][T12200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2314.042769][T12200] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2314.042778][T12200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2314.042809][T12200] [ 2314.653688][T12210] IPVS: persistence engine module ip_vs_pe_s not found [ 2315.984681][T12195] syz.4.9257 (12195) used greatest stack depth: 18440 bytes left [ 2315.998715][T12230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2316.003520][T12230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2316.048720][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9268'. [ 2316.397624][T12240] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2316.399736][T12240] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2316.402730][T12240] vhci_hcd vhci_hcd.0: Device attached [ 2316.493668][T11082] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 2316.643941][T11082] usb 10-1: Using ep0 maxpacket: 8 [ 2316.658864][T11082] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2316.662539][T11082] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2316.667563][T29001] usb 40-1: SetAddress Request (26) to port 0 [ 2316.669914][T29001] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 2316.703494][T11082] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2316.723521][T11082] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2316.728877][T11082] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2316.731841][T11082] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.869507][T12241] vhci_hcd: connection reset by peer [ 2316.874465][T32207] vhci_hcd: stop threads [ 2316.875863][T32207] vhci_hcd: release socket [ 2316.877874][T32207] vhci_hcd: disconnect device [ 2316.980859][T11082] usb 10-1: GET_CAPABILITIES returned 0 [ 2316.982641][T11082] usbtmc 10-1:16.0: can't read capabilities [ 2317.307814][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9270'. [ 2317.577045][T27918] usb 10-1: USB disconnect, device number 64 [ 2317.949602][T12264] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2318.177568][T12271] dlm: non-version read from control device 36 [ 2318.483626][T29333] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 2318.633571][T29333] usb 9-1: Using ep0 maxpacket: 8 [ 2318.638045][T29333] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2318.692944][T12278] xt_limit: Overflow, try lower: 324382443/3881449858 [ 2318.722834][T29333] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2318.726767][T29333] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2318.730213][T29333] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2318.763073][T29333] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2318.766250][T29333] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2318.983740][T25798] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 2319.001026][T29333] usb 9-1: GET_CAPABILITIES returned 0 [ 2319.002951][T29333] usbtmc 9-1:16.0: can't read capabilities [ 2319.146479][T25798] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2319.149387][T25798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.151942][T25798] usb 6-1: Product: syz [ 2319.153901][T25798] usb 6-1: Manufacturer: syz [ 2319.155461][T25798] usb 6-1: SerialNumber: syz [ 2319.161685][T25798] usb 6-1: config 0 descriptor?? [ 2319.280056][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9279'. [ 2319.389774][T29333] usb 9-1: USB disconnect, device number 70 [ 2319.478586][T12290] ubi: mtd0 is already attached to ubi0 [ 2321.763576][T29001] usb 40-1: device descriptor read/8, error -110 [ 2321.774907][T27918] usb 6-1: USB disconnect, device number 106 [ 2321.813114][T12308] FAULT_INJECTION: forcing a failure. [ 2321.813114][T12308] name failslab, interval 1, probability 0, space 0, times 0 [ 2321.864366][T12308] CPU: 2 UID: 0 PID: 12308 Comm: syz.1.9287 Not tainted syzkaller #0 PREEMPT(full) [ 2321.864393][T12308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2321.864405][T12308] Call Trace: [ 2321.864411][T12308] [ 2321.864419][T12308] dump_stack_lvl+0x16c/0x1f0 [ 2321.864451][T12308] should_fail_ex+0x512/0x640 [ 2321.864478][T12308] ? __kvmalloc_node_noprof+0x124/0x620 [ 2321.864502][T12308] should_failslab+0xc2/0x120 [ 2321.864527][T12308] __kvmalloc_node_noprof+0x137/0x620 [ 2321.864549][T12308] ? simple_xattr_alloc+0x41/0xa0 [ 2321.864579][T12308] ? simple_xattr_alloc+0x41/0xa0 [ 2321.864602][T12308] simple_xattr_alloc+0x41/0xa0 [ 2321.864627][T12308] simple_xattr_set+0x3d/0x3e0 [ 2321.864655][T12308] shmem_xattr_handler_set+0x31b/0x3b0 [ 2321.864699][T12308] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 2321.864729][T12308] __vfs_setxattr+0x175/0x1e0 [ 2321.864752][T12308] ? __pfx___vfs_setxattr+0x10/0x10 [ 2321.864772][T12308] ? apparmor_capable+0x114/0x1d0 [ 2321.864798][T12308] __vfs_setxattr_noperm+0x127/0x660 [ 2321.864825][T12308] __vfs_setxattr_locked+0x182/0x260 [ 2321.864846][T12308] ? up_write+0x1b2/0x520 [ 2321.864876][T12308] vfs_setxattr+0x145/0x360 [ 2321.865019][T12308] ? __pfx_vfs_setxattr+0x10/0x10 [ 2321.865040][T12308] ? lock_acquire+0x179/0x350 [ 2321.865064][T12308] ? find_held_lock+0x2b/0x80 [ 2321.865088][T12308] ovl_check_setxattr+0x181/0x320 [ 2321.865120][T12308] ovl_set_impure+0x13e/0x1e0 [ 2321.865149][T12308] ovl_lookup+0x1ec6/0x21a0 [ 2321.865172][T12308] ? __pfx_ovl_lookup+0x10/0x10 [ 2321.865192][T12308] ? do_raw_spin_lock+0x12c/0x2b0 [ 2321.865211][T12308] ? do_raw_spin_unlock+0x172/0x230 [ 2321.865228][T12308] ? _raw_spin_unlock+0x28/0x50 [ 2321.865245][T12308] lookup_one_qstr_excl+0x1ce/0x250 [ 2321.865261][T12308] ? mnt_want_write+0x161/0x450 [ 2321.865273][T12308] do_renameat2+0x5aa/0xc50 [ 2321.865292][T12308] ? __pfx_do_renameat2+0x10/0x10 [ 2321.865307][T12308] ? find_held_lock+0x2b/0x80 [ 2321.865317][T12308] ? __might_fault+0xe3/0x190 [ 2321.865329][T12308] ? __might_fault+0x13b/0x190 [ 2321.865349][T12308] ? getname_flags.part.0+0x1c5/0x550 [ 2321.865368][T12308] __ia32_sys_renameat2+0xe7/0x130 [ 2321.865385][T12308] __do_fast_syscall_32+0x7c/0x300 [ 2321.865403][T12308] do_fast_syscall_32+0x32/0x80 [ 2321.865413][T12308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2321.865427][T12308] RIP: 0023:0xf702e579 [ 2321.865436][T12308] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2321.865446][T12308] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000161 [ 2321.865457][T12308] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000440 [ 2321.865463][T12308] RDX: 00000000ffffff9c RSI: 0000000080000480 RDI: 0000000000000002 [ 2321.865470][T12308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2321.865475][T12308] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2321.865481][T12308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2321.865495][T12308] [ 2322.215684][T29001] usb usb40-port1: attempt power cycle [ 2322.834573][T12325] syz.4.9291 (12325): drop_caches: 2 [ 2322.880948][T29001] usb usb40-port1: unable to enumerate USB device [ 2324.489335][T12353] mkiss: ax0: crc mode is auto. [ 2325.329805][T12367] syzkaller1: entered promiscuous mode [ 2325.331619][T12367] syzkaller1: entered allmulticast mode [ 2325.484134][T12371] 9pnet_fd: Insufficient options for proto=fd [ 2325.694010][T27918] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2326.992146][T12394] FAULT_INJECTION: forcing a failure. [ 2326.992146][T12394] name failslab, interval 1, probability 0, space 0, times 0 [ 2326.997684][T12394] CPU: 3 UID: 0 PID: 12394 Comm: syz.1.9310 Not tainted syzkaller #0 PREEMPT(full) [ 2326.997699][T12394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2326.997706][T12394] Call Trace: [ 2326.997710][T12394] [ 2326.997715][T12394] dump_stack_lvl+0x16c/0x1f0 [ 2326.997735][T12394] should_fail_ex+0x512/0x640 [ 2326.997752][T12394] ? __kmalloc_node_noprof+0xc5/0x500 [ 2326.997767][T12394] should_failslab+0xc2/0x120 [ 2326.997796][T12394] __kmalloc_node_noprof+0xd8/0x500 [ 2326.997810][T12394] ? __get_vm_area_node+0x208/0x330 [ 2326.997827][T12394] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 2326.997840][T12394] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 2326.997859][T12394] ? vhost_task_create+0x1d2/0x2e0 [ 2326.997875][T12394] ? rcu_read_unlock+0x17/0x60 [ 2326.997892][T12394] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2326.997902][T12394] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 2326.997922][T12394] ? vhost_task_create+0x1d2/0x2e0 [ 2326.997937][T12394] __vmalloc_node_noprof+0xad/0xf0 [ 2326.997946][T12394] ? vhost_task_create+0x1d2/0x2e0 [ 2326.997963][T12394] copy_process+0x2c70/0x7690 [ 2326.997983][T12394] ? __pfx_copy_process+0x10/0x10 [ 2326.997999][T12394] ? lockdep_init_map_type+0x5c/0x280 [ 2326.998016][T12394] ? lockdep_init_map_type+0x5c/0x280 [ 2326.998030][T12394] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 2326.998045][T12394] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 2326.998063][T12394] vhost_task_create+0x1d2/0x2e0 [ 2326.998078][T12394] ? __pfx_vhost_task_create+0x10/0x10 [ 2326.998098][T12394] ? __pfx_vhost_task_fn+0x10/0x10 [ 2326.998120][T12394] kvm_mmu_post_init_vm+0x1b7/0x380 [ 2326.998133][T12394] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 2326.998149][T12394] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 2326.998166][T12394] kvm_vcpu_ioctl+0x5eb/0x1690 [ 2326.998182][T12394] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2326.998196][T12394] ? tomoyo_path_number_perm+0x18d/0x580 [ 2326.998211][T12394] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2326.998230][T12394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2326.998247][T12394] ? do_vfs_ioctl+0x128/0x14f0 [ 2326.998265][T12394] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2326.998288][T12394] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 2326.998303][T12394] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2326.998317][T12394] ? __fget_files+0x20e/0x3c0 [ 2326.998332][T12394] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2326.998346][T12394] __ia32_compat_sys_ioctl+0x23f/0x370 [ 2326.998365][T12394] __do_fast_syscall_32+0x7c/0x300 [ 2326.998383][T12394] do_fast_syscall_32+0x32/0x80 [ 2326.998393][T12394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2326.998407][T12394] RIP: 0023:0xf702e579 [ 2326.998416][T12394] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2326.998430][T12394] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2326.998445][T12394] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 2326.998453][T12394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2326.998462][T12394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2326.998470][T12394] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2326.998479][T12394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2326.998501][T12394] [ 2326.998545][T12394] syz.1.9310: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 2327.123492][T29333] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 2327.124631][T12394] ,cpuset=/,mems_allowed=0-1 [ 2327.155575][T12394] CPU: 3 UID: 0 PID: 12394 Comm: syz.1.9310 Not tainted syzkaller #0 PREEMPT(full) [ 2327.155597][T12394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2327.155608][T12394] Call Trace: [ 2327.155615][T12394] [ 2327.155623][T12394] dump_stack_lvl+0x16c/0x1f0 [ 2327.155654][T12394] warn_alloc+0x248/0x3a0 [ 2327.155677][T12394] ? __pfx_warn_alloc+0x10/0x10 [ 2327.155696][T12394] ? dump_stack_lvl+0x1a3/0x1f0 [ 2327.155728][T12394] ? rcu_is_watching+0x12/0xc0 [ 2327.155747][T12394] ? trace_kmalloc+0x2b/0xd0 [ 2327.155771][T12394] ? __get_vm_area_node+0x208/0x330 [ 2327.155822][T12394] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 2327.155850][T12394] ? vhost_task_create+0x1d2/0x2e0 [ 2327.155876][T12394] ? rcu_read_unlock+0x17/0x60 [ 2327.155900][T12394] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2327.155917][T12394] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 2327.155946][T12394] ? vhost_task_create+0x1d2/0x2e0 [ 2327.155965][T12394] __vmalloc_node_noprof+0xad/0xf0 [ 2327.155978][T12394] ? vhost_task_create+0x1d2/0x2e0 [ 2327.156000][T12394] copy_process+0x2c70/0x7690 [ 2327.156030][T12394] ? __pfx_copy_process+0x10/0x10 [ 2327.156052][T12394] ? lockdep_init_map_type+0x5c/0x280 [ 2327.156075][T12394] ? lockdep_init_map_type+0x5c/0x280 [ 2327.156096][T12394] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 2327.156118][T12394] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 2327.156144][T12394] vhost_task_create+0x1d2/0x2e0 [ 2327.156168][T12394] ? __pfx_vhost_task_create+0x10/0x10 [ 2327.156200][T12394] ? __pfx_vhost_task_fn+0x10/0x10 [ 2327.156264][T12394] kvm_mmu_post_init_vm+0x1b7/0x380 [ 2327.156286][T12394] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 2327.156312][T12394] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 2327.156341][T12394] kvm_vcpu_ioctl+0x5eb/0x1690 [ 2327.156368][T12394] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2327.156391][T12394] ? tomoyo_path_number_perm+0x18d/0x580 [ 2327.156416][T12394] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2327.156447][T12394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2327.156476][T12394] ? do_vfs_ioctl+0x128/0x14f0 [ 2327.156504][T12394] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2327.156542][T12394] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 2327.156566][T12394] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2327.156590][T12394] ? __fget_files+0x20e/0x3c0 [ 2327.156613][T12394] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2327.156637][T12394] __ia32_compat_sys_ioctl+0x23f/0x370 [ 2327.156667][T12394] __do_fast_syscall_32+0x7c/0x300 [ 2327.156698][T12394] do_fast_syscall_32+0x32/0x80 [ 2327.156713][T12394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2327.156734][T12394] RIP: 0023:0xf702e579 [ 2327.156749][T12394] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2327.156765][T12394] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2327.156783][T12394] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 2327.156794][T12394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2327.156804][T12394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2327.156815][T12394] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2327.156825][T12394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2327.156854][T12394] [ 2327.156905][T12394] Mem-Info: [ 2327.283500][T29333] usb 9-1: Using ep0 maxpacket: 8 [ 2327.284314][T12394] active_anon:17220 inactive_anon:20351 isolated_anon:0 [ 2327.284314][T12394] active_file:8426 inactive_file:8591 isolated_file:0 [ 2327.284314][T12394] unevictable:1768 dirty:370 writeback:0 [ 2327.284314][T12394] slab_reclaimable:6789 slab_unreclaimable:66479 [ 2327.284314][T12394] mapped:25153 shmem:36697 pagetables:1761 [ 2327.284314][T12394] sec_pagetables:337 bounce:0 [ 2327.284314][T12394] kernel_misc_reclaimable:0 [ 2327.284314][T12394] free:26128 free_pcp:9217 free_cma:0 [ 2327.292644][T29333] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2327.294594][T12394] Node 0 active_anon:1764kB inactive_anon:200kB active_file:0kB inactive_file:192kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:5068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7836kB pagetables:2340kB sec_pagetables:1192kB all_unreclaimable? yes Balloon:0kB [ 2327.297984][T29333] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2327.299356][T12394] Node 1 active_anon:67116kB inactive_anon:81204kB active_file:33704kB inactive_file:34172kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100508kB dirty:1480kB writeback:0kB shmem:141720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6424kB pagetables:4704kB sec_pagetables:156kB all_unreclaimable? no Balloon:0kB [ 2327.300629][T29333] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2327.300650][T29333] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2327.300685][T29333] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2327.302763][T12394] Node 0 [ 2327.321509][T29333] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2327.376686][T12394] DMA free:2092kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:364kB local_pcp:172kB free_cma:0kB [ 2327.388571][T12394] lowmem_reserve[]: 0 288 288 288 288 [ 2327.391201][T12394] Node 0 DMA32 free:17320kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:652KB active_anon:1824kB inactive_anon:200kB active_file:0kB inactive_file:192kB unevictable:3536kB writepending:0kB present:1032196kB managed:295080kB mlocked:0kB bounce:0kB free_pcp:10968kB local_pcp:432kB free_cma:0kB [ 2327.409432][T12394] lowmem_reserve[]: 0 0 0 0 0 [ 2327.411565][T12394] Node 1 DMA32 free:85308kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:8192KB free_highatomic:2608KB active_anon:67152kB inactive_anon:81204kB active_file:33704kB inactive_file:34172kB unevictable:3536kB writepending:1488kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:25792kB local_pcp:2468kB free_cma:0kB [ 2327.425865][T12394] lowmem_reserve[]: 0 0 0 0 0 [ 2327.428252][T12394] Node 0 DMA: 4*4kB (M) 7*8kB (UM) 4*16kB (UM) 7*32kB (UM) 5*64kB (UM) 5*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2088kB [ 2327.435671][T12394] Node 0 DMA32: 318*4kB (UMEH) 170*8kB (UMEH) 107*16kB (UMEH) 129*32kB (UMEH) 67*64kB (UMEH) 24*128kB (UME) 3*256kB (UM) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 17112kB [ 2327.445822][T12394] Node 1 DMA32: 616*4kB (UMH) 597*8kB (UMEH) 361*16kB (UMEH) 453*32kB (UMEH) 257*64kB (UMEH) 73*128kB (UMEH) 20*256kB (MEH) 17*512kB (UMEH) 12*1024kB (MH) 3*2048kB (M) 0*4096kB = 85560kB [ 2327.454928][T12394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2327.459834][T12394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2327.475318][T12394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2327.480811][T12394] Node 1 hugepages_total=5 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 2327.488127][T12394] 54790 total pagecache pages [ 2327.490703][T12394] 954 pages in swap cache [ 2327.494625][T12394] Free swap = 244kB [ 2327.497984][T12394] Total swap = 124996kB [ 2327.502279][T12394] 524155 pages RAM [ 2327.506734][T12394] 0 pages HighMem/MovableOnly [ 2327.509021][T12394] 209490 pages reserved [ 2327.512165][T12394] 0 pages cma reserved [ 2327.538084][T29333] usb 9-1: GET_CAPABILITIES returned 0 [ 2327.540690][T29333] usbtmc 9-1:16.0: can't read capabilities [ 2327.663904][T12405] FAULT_INJECTION: forcing a failure. [ 2327.663904][T12405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2327.669129][T12405] CPU: 3 UID: 0 PID: 12405 Comm: syz.1.9313 Not tainted syzkaller #0 PREEMPT(full) [ 2327.669145][T12405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2327.669152][T12405] Call Trace: [ 2327.669157][T12405] [ 2327.669162][T12405] dump_stack_lvl+0x16c/0x1f0 [ 2327.669196][T12405] should_fail_ex+0x512/0x640 [ 2327.669216][T12405] _copy_to_user+0x32/0xd0 [ 2327.669229][T12405] simple_read_from_buffer+0xcb/0x170 [ 2327.669242][T12405] proc_fail_nth_read+0x197/0x240 [ 2327.669255][T12405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2327.669268][T12405] ? rw_verify_area+0xcf/0x6c0 [ 2327.669279][T12405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2327.669290][T12405] vfs_read+0x1e1/0xcf0 [ 2327.669306][T12405] ? __pfx_vfs_read+0x10/0x10 [ 2327.669317][T12405] ? find_held_lock+0x2b/0x80 [ 2327.669332][T12405] ? __fget_files+0x20e/0x3c0 [ 2327.669348][T12405] ksys_read+0x12a/0x250 [ 2327.669360][T12405] ? __pfx_ksys_read+0x10/0x10 [ 2327.669373][T12405] ? rcu_is_watching+0x12/0xc0 [ 2327.669387][T12405] __do_fast_syscall_32+0x7c/0x300 [ 2327.669405][T12405] do_fast_syscall_32+0x32/0x80 [ 2327.669415][T12405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2327.669429][T12405] RIP: 0023:0xf702e579 [ 2327.669438][T12405] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2327.669448][T12405] RSP: 002b:00000000f541e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2327.669459][T12405] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f541e620 [ 2327.669466][T12405] RDX: 000000000000000f RSI: 00000000f73b4ff4 RDI: 0000000000000000 [ 2327.669472][T12405] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2327.669478][T12405] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2327.669484][T12405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2327.669498][T12405] [ 2327.805342][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9309'. [ 2327.936771][T11082] usb 9-1: USB disconnect, device number 71 [ 2329.138324][T12423] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2330.088427][T12431] syz.6.9319 (12431): drop_caches: 2 [ 2330.120145][T12432] delete_channel: no stack [ 2331.295641][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9323'. [ 2331.733730][ T40] audit: type=1326 audit(2000000024.919:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12451 comm="syz.1.9324" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702e579 code=0x0 [ 2331.975734][T12453] kvm: pic: non byte read [ 2331.978298][T12453] kvm: pic: level sensitive irq not supported [ 2331.978534][T12453] kvm: pic: non byte read [ 2331.983328][T12453] kvm: pic: level sensitive irq not supported [ 2331.984329][T12453] kvm: pic: non byte read [ 2331.990806][T12453] kvm: pic: level sensitive irq not supported [ 2331.991050][T12453] kvm: pic: non byte read [ 2331.996095][T12453] kvm: pic: level sensitive irq not supported [ 2331.996344][T12453] kvm: pic: non byte read [ 2332.001590][T12453] kvm: pic: level sensitive irq not supported [ 2332.001822][T12453] kvm: pic: non byte read [ 2332.007866][T12453] kvm: pic: level sensitive irq not supported [ 2332.008104][T12453] kvm: pic: non byte read [ 2332.651177][T12460] syz.4.9326 (12460): /proc/12459/oom_adj is deprecated, please use /proc/12459/oom_score_adj instead. [ 2333.154631][T12475] bond2: (slave ip6gre1): Releasing backup interface [ 2333.157613][T12475] ip6gre1: left promiscuous mode [ 2333.251431][T12475] kAFS: Can only specify source 'none' with -o dyn [ 2333.278986][T12482] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2333.281156][T12482] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2333.287516][T12482] vhci_hcd vhci_hcd.0: Device attached [ 2333.563953][T11082] usb 48-1: SetAddress Request (18) to port 0 [ 2333.567905][T11082] usb 48-1: new SuperSpeed USB device number 18 using vhci_hcd [ 2334.189972][T12483] vhci_hcd: connection reset by peer [ 2334.192721][ T46] vhci_hcd: stop threads [ 2334.194509][ T46] vhci_hcd: release socket [ 2334.196017][ T46] vhci_hcd: disconnect device [ 2334.260868][T12498] netlink: 136784 bytes leftover after parsing attributes in process `syz.4.9334'. [ 2334.306995][T12498] net_ratelimit: 5 callbacks suppressed [ 2334.307007][T12498] netlink: zone id is out of range [ 2334.442347][T12498] netlink: zone id is out of range [ 2334.455303][T12498] netlink: zone id is out of range [ 2334.465015][T12498] netlink: zone id is out of range [ 2334.469762][T12498] netlink: zone id is out of range [ 2334.482396][T12498] netlink: zone id is out of range [ 2334.484963][T12498] netlink: zone id is out of range [ 2334.487686][T12498] netlink: zone id is out of range [ 2334.490613][T12498] netlink: zone id is out of range [ 2334.493021][T12498] netlink: zone id is out of range [ 2335.352768][T12516] FAULT_INJECTION: forcing a failure. [ 2335.352768][T12516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2335.357159][T12516] CPU: 1 UID: 0 PID: 12516 Comm: syz.5.9338 Not tainted syzkaller #0 PREEMPT(full) [ 2335.357185][T12516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2335.357193][T12516] Call Trace: [ 2335.357197][T12516] [ 2335.357202][T12516] dump_stack_lvl+0x16c/0x1f0 [ 2335.357244][T12516] should_fail_ex+0x512/0x640 [ 2335.357269][T12516] _copy_from_user+0x2e/0xd0 [ 2335.357281][T12516] move_addr_to_kernel+0x65/0x170 [ 2335.357296][T12516] __sys_connect+0xb1/0x160 [ 2335.357310][T12516] ? __pfx___sys_connect+0x10/0x10 [ 2335.357333][T12516] __ia32_sys_connect+0x71/0xb0 [ 2335.357346][T12516] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2335.357368][T12516] __do_fast_syscall_32+0x7c/0x300 [ 2335.357387][T12516] do_fast_syscall_32+0x32/0x80 [ 2335.357397][T12516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2335.357410][T12516] RIP: 0023:0xf707e579 [ 2335.357419][T12516] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2335.357429][T12516] RSP: 002b:00000000f542c55c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 2335.357446][T12516] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800009c0 [ 2335.357453][T12516] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2335.357459][T12516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2335.357465][T12516] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2335.357471][T12516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2335.357484][T12516] [ 2335.417895][ C1] vkms_vblank_simulate: vblank timer overrun [ 2335.520420][T12517] 9pnet_virtio: no channels available for device syz [ 2335.717573][T12521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2335.721949][T12521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2335.818136][T12524] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9340'. [ 2336.223777][T29333] usb 10-1: new full-speed USB device number 65 using dummy_hcd [ 2336.373642][T29333] usb 10-1: device descriptor read/64, error -71 [ 2336.623564][T29333] usb 10-1: new full-speed USB device number 66 using dummy_hcd [ 2336.763566][T29333] usb 10-1: device descriptor read/64, error -71 [ 2336.768720][T12546] vlan0: entered promiscuous mode [ 2336.897139][T29333] usb usb10-port1: attempt power cycle [ 2337.284490][T29333] usb 10-1: new full-speed USB device number 67 using dummy_hcd [ 2337.357311][T29333] usb 10-1: device descriptor read/8, error -71 [ 2337.733500][T29333] usb 10-1: new full-speed USB device number 68 using dummy_hcd [ 2337.754111][T29333] usb 10-1: device descriptor read/8, error -71 [ 2337.863856][T29333] usb usb10-port1: unable to enumerate USB device [ 2338.515282][T12566] FAULT_INJECTION: forcing a failure. [ 2338.515282][T12566] name failslab, interval 1, probability 0, space 0, times 0 [ 2338.519237][T12566] CPU: 1 UID: 0 PID: 12566 Comm: syz.6.9353 Not tainted syzkaller #0 PREEMPT(full) [ 2338.519252][T12566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2338.519259][T12566] Call Trace: [ 2338.519264][T12566] [ 2338.519269][T12566] dump_stack_lvl+0x16c/0x1f0 [ 2338.519290][T12566] should_fail_ex+0x512/0x640 [ 2338.519307][T12566] ? fs_reclaim_acquire+0xae/0x150 [ 2338.519324][T12566] ? p9_fcall_init+0x97/0x260 [ 2338.519339][T12566] should_failslab+0xc2/0x120 [ 2338.519354][T12566] __kmalloc_noprof+0xd2/0x510 [ 2338.519366][T12566] ? rcu_is_watching+0x12/0xc0 [ 2338.519380][T12566] p9_fcall_init+0x97/0x260 [ 2338.519396][T12566] p9_tag_alloc+0x161/0x640 [ 2338.519414][T12566] ? __pfx_p9_tag_alloc+0x10/0x10 [ 2338.519435][T12566] p9_client_prepare_req+0x19b/0x4d0 [ 2338.519452][T12566] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 2338.519468][T12566] ? __ia32_compat_sys_openat+0x16d/0x210 [ 2338.519482][T12566] ? __lock_acquire+0xb97/0x1ce0 [ 2338.519499][T12566] p9_client_rpc+0x1c4/0xc50 [ 2338.519515][T12566] ? node_tag_clear+0x105/0x290 [ 2338.519529][T12566] ? __pfx_p9_client_rpc+0x10/0x10 [ 2338.519546][T12566] ? idr_alloc_u32+0x20f/0x2f0 [ 2338.519564][T12566] ? idr_preload_end+0xc2/0x230 [ 2338.519580][T12566] ? rcu_is_watching+0x12/0xc0 [ 2338.519593][T12566] p9_client_walk+0x1ab/0x530 [ 2338.519605][T12566] ? __pfx_p9_client_walk+0x10/0x10 [ 2338.519617][T12566] ? v9fs_fid_lookup+0xe9/0xeb0 [ 2338.519636][T12566] v9fs_vfs_lookup+0x206/0x5b0 [ 2338.519648][T12566] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 2338.519665][T12566] v9fs_vfs_atomic_open+0x4cc/0x920 [ 2338.519678][T12566] ? generic_permission+0xad/0x7d0 [ 2338.519694][T12566] ? __pfx_v9fs_vfs_atomic_open+0x10/0x10 [ 2338.519706][T12566] ? security_inode_permission+0xbf/0x260 [ 2338.519720][T12566] ? inode_permission+0x156/0x630 [ 2338.519736][T12566] ? __pfx_v9fs_vfs_atomic_open+0x10/0x10 [ 2338.519749][T12566] lookup_open.isra.0+0x83a/0x1580 [ 2338.519763][T12566] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 2338.519781][T12566] ? __pfx_down_write+0x10/0x10 [ 2338.519791][T12566] ? mnt_get_write_access+0x20c/0x300 [ 2338.519809][T12566] path_openat+0x893/0x2cb0 [ 2338.519826][T12566] ? __pfx_path_openat+0x10/0x10 [ 2338.519844][T12566] ? __lock_acquire+0xb97/0x1ce0 [ 2338.519859][T12566] do_filp_open+0x20b/0x470 [ 2338.519873][T12566] ? __pfx_do_filp_open+0x10/0x10 [ 2338.519895][T12566] ? _raw_spin_unlock+0x28/0x50 [ 2338.519909][T12566] ? alloc_fd+0x471/0x7d0 [ 2338.519924][T12566] do_sys_openat2+0x11b/0x1d0 [ 2338.519941][T12566] ? __pfx_do_sys_openat2+0x10/0x10 [ 2338.519959][T12566] ? __fget_files+0x20e/0x3c0 [ 2338.519970][T12566] ? handle_mm_fault+0x1b0/0xd10 [ 2338.519983][T12566] __ia32_compat_sys_openat+0x16d/0x210 [ 2338.519994][T12566] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2338.520004][T12566] ? ksys_write+0x1ac/0x250 [ 2338.520018][T12566] ? rcu_is_watching+0x12/0xc0 [ 2338.520031][T12566] __do_fast_syscall_32+0x7c/0x300 [ 2338.520062][T12566] do_fast_syscall_32+0x32/0x80 [ 2338.520072][T12566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2338.520086][T12566] RIP: 0023:0xf704e579 [ 2338.520096][T12566] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2338.520122][T12566] RSP: 002b:00000000f543e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 2338.520133][T12566] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 2338.520140][T12566] RDX: 00000000000026e1 RSI: 0000000000000000 RDI: 0000000000000000 [ 2338.520146][T12566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2338.520152][T12566] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2338.520158][T12566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2338.520172][T12566] [ 2338.646071][T11082] usb 48-1: device descriptor read/8, error -110 [ 2338.866752][T12573] netlink: 'syz.6.9354': attribute type 8 has an invalid length. [ 2339.034082][T11082] usb usb48-port1: attempt power cycle [ 2339.684908][T11082] usb usb48-port1: unable to enumerate USB device [ 2340.691949][T12613] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 2340.692188][T12612] IPVS: stopping backup sync thread 12613 ... [ 2340.904324][T12624] syzkaller1: entered promiscuous mode [ 2340.906140][T12624] syzkaller1: entered allmulticast mode [ 2341.058873][T12625] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 2341.060998][T12625] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2341.064195][T12625] vhci_hcd vhci_hcd.0: Device attached [ 2341.158050][ T40] audit: type=1800 audit(2000000034.349:7221): pid=12625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9364" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2341.343594][T27918] usb 46-1: SetAddress Request (30) to port 0 [ 2341.345995][T27918] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd [ 2341.659593][T12626] vhci_hcd: connection reset by peer [ 2341.662065][T32207] vhci_hcd: stop threads [ 2341.665573][T32207] vhci_hcd: release socket [ 2341.667566][T32207] vhci_hcd: disconnect device [ 2343.217325][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9375'. [ 2343.296012][T12663] genirq: Flags mismatch irq 8. 00200000 (comedi_parport) vs. 00200000 (rtc0) [ 2343.561577][ T40] audit: type=1326 audit(2000000036.749:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12665 comm="syz.4.9377" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x0 [ 2344.166558][T12679] FAULT_INJECTION: forcing a failure. [ 2344.166558][T12679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2344.172029][T12679] CPU: 3 UID: 0 PID: 12679 Comm: syz.1.9381 Not tainted syzkaller #0 PREEMPT(full) [ 2344.172074][T12679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2344.172086][T12679] Call Trace: [ 2344.172094][T12679] [ 2344.172102][T12679] dump_stack_lvl+0x16c/0x1f0 [ 2344.172134][T12679] should_fail_ex+0x512/0x640 [ 2344.172165][T12679] _copy_to_user+0x32/0xd0 [ 2344.172186][T12679] simple_read_from_buffer+0xcb/0x170 [ 2344.172208][T12679] proc_fail_nth_read+0x197/0x240 [ 2344.172229][T12679] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2344.172251][T12679] ? rw_verify_area+0xcf/0x6c0 [ 2344.172269][T12679] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2344.172289][T12679] vfs_read+0x1e1/0xcf0 [ 2344.172315][T12679] ? __pfx_vfs_read+0x10/0x10 [ 2344.172333][T12679] ? find_held_lock+0x2b/0x80 [ 2344.172359][T12679] ? __fget_files+0x20e/0x3c0 [ 2344.172387][T12679] ksys_read+0x12a/0x250 [ 2344.172407][T12679] ? __pfx_ksys_read+0x10/0x10 [ 2344.172429][T12679] ? rcu_is_watching+0x12/0xc0 [ 2344.172459][T12679] __do_fast_syscall_32+0x7c/0x300 [ 2344.172488][T12679] do_fast_syscall_32+0x32/0x80 [ 2344.172505][T12679] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2344.172527][T12679] RIP: 0023:0xf702e579 [ 2344.172540][T12679] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2344.172557][T12679] RSP: 002b:00000000f541e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2344.172575][T12679] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f541e620 [ 2344.172587][T12679] RDX: 000000000000000f RSI: 00000000f73b4ff4 RDI: 0000000000000000 [ 2344.172597][T12679] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2344.172607][T12679] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2344.172617][T12679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2344.172642][T12679] [ 2344.448211][T12681] input: syz1 as /devices/virtual/input/input66 [ 2344.783359][T12694] IPVS: set_ctl: invalid protocol: 12 100.1.1.1:1 [ 2344.884420][T12699] FAULT_INJECTION: forcing a failure. [ 2344.884420][T12699] name failslab, interval 1, probability 0, space 0, times 0 [ 2344.888796][T12699] CPU: 0 UID: 0 PID: 12699 Comm: syz.1.9389 Not tainted syzkaller #0 PREEMPT(full) [ 2344.888820][T12699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2344.888830][T12699] Call Trace: [ 2344.888837][T12699] [ 2344.888846][T12699] dump_stack_lvl+0x16c/0x1f0 [ 2344.888879][T12699] should_fail_ex+0x512/0x640 [ 2344.888906][T12699] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2344.888927][T12699] should_failslab+0xc2/0x120 [ 2344.888953][T12699] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2344.888974][T12699] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 2344.889002][T12699] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 2344.889030][T12699] idr_get_free+0x528/0xa30 [ 2344.889065][T12699] idr_alloc_u32+0x190/0x2f0 [ 2344.889093][T12699] ? __pfx_idr_alloc_u32+0x10/0x10 [ 2344.889123][T12699] ? tcf_exts_init_ex+0x1bc/0x610 [ 2344.889151][T12699] basic_change+0xcb1/0x1400 [ 2344.889181][T12699] ? __pfx_basic_change+0x10/0x10 [ 2344.889218][T12699] ? __pfx_basic_change+0x10/0x10 [ 2344.889243][T12699] tc_new_tfilter+0xa35/0x2340 [ 2344.889274][T12699] ? __kernel_text_address+0xd/0x40 [ 2344.889292][T12699] ? __pfx_tc_new_tfilter+0x10/0x10 [ 2344.889319][T12699] ? __lock_acquire+0x62e/0x1ce0 [ 2344.889359][T12699] ? find_held_lock+0x2b/0x80 [ 2344.889376][T12699] ? __pfx_tc_new_tfilter+0x10/0x10 [ 2344.889390][T12699] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 2344.889410][T12699] ? __pfx_tc_new_tfilter+0x10/0x10 [ 2344.889428][T12699] rtnetlink_rcv_msg+0x95e/0xe90 [ 2344.889445][T12699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2344.889466][T12699] ? __lock_acquire+0x62e/0x1ce0 [ 2344.889495][T12699] netlink_rcv_skb+0x155/0x420 [ 2344.889523][T12699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2344.889544][T12699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2344.889581][T12699] ? netlink_deliver_tap+0x1ae/0xd30 [ 2344.889608][T12699] ? is_vmalloc_addr+0x86/0xa0 [ 2344.889634][T12699] netlink_unicast+0x5aa/0x870 [ 2344.889666][T12699] ? __pfx_netlink_unicast+0x10/0x10 [ 2344.889693][T12699] ? __pfx___might_resched+0x10/0x10 [ 2344.889722][T12699] netlink_sendmsg+0x8d1/0xdd0 [ 2344.889760][T12699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2344.889793][T12699] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2344.889820][T12699] ____sys_sendmsg+0xa95/0xc70 [ 2344.889846][T12699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2344.889866][T12699] ? get_compat_msghdr+0x11a/0x170 [ 2344.889904][T12699] ___sys_sendmsg+0x134/0x1d0 [ 2344.889933][T12699] ? __pfx____sys_sendmsg+0x10/0x10 [ 2344.889970][T12699] ? find_held_lock+0x2b/0x80 [ 2344.890005][T12699] __sys_sendmsg+0x16d/0x220 [ 2344.890033][T12699] ? __pfx___sys_sendmsg+0x10/0x10 [ 2344.890071][T12699] ? rcu_is_watching+0x12/0xc0 [ 2344.890092][T12699] __do_fast_syscall_32+0x7c/0x300 [ 2344.890123][T12699] do_fast_syscall_32+0x32/0x80 [ 2344.890141][T12699] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2344.890162][T12699] RIP: 0023:0xf702e579 [ 2344.890176][T12699] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2344.890195][T12699] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2344.890212][T12699] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 2344.890224][T12699] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 2344.890233][T12699] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2344.890243][T12699] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2344.890254][T12699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2344.890279][T12699] [ 2346.353523][T12730] FAULT_INJECTION: forcing a failure. [ 2346.353523][T12730] name failslab, interval 1, probability 0, space 0, times 0 [ 2346.358587][T12730] CPU: 2 UID: 0 PID: 12730 Comm: syz.4.9399 Not tainted syzkaller #0 PREEMPT(full) [ 2346.358610][T12730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2346.358622][T12730] Call Trace: [ 2346.358630][T12730] [ 2346.358639][T12730] dump_stack_lvl+0x16c/0x1f0 [ 2346.358669][T12730] should_fail_ex+0x512/0x640 [ 2346.358710][T12730] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 2346.358734][T12730] should_failslab+0xc2/0x120 [ 2346.358756][T12730] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2346.358778][T12730] ? __alloc_skb+0x2b2/0x380 [ 2346.358806][T12730] __alloc_skb+0x2b2/0x380 [ 2346.358830][T12730] ? __pfx___alloc_skb+0x10/0x10 [ 2346.358862][T12730] alloc_skb_with_frags+0xe0/0x860 [ 2346.358879][T12730] ? __might_fault+0xe3/0x190 [ 2346.358897][T12730] ? __might_fault+0x13b/0x190 [ 2346.358921][T12730] sock_alloc_send_pskb+0x7fb/0x990 [ 2346.358946][T12730] ? _copy_from_iter+0x15d/0x1720 [ 2346.358971][T12730] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2346.358994][T12730] ? __lock_acquire+0xb97/0x1ce0 [ 2346.359016][T12730] ? _parse_integer_limit+0x17f/0x1d0 [ 2346.359044][T12730] ? iov_iter_advance+0x7d/0x6c0 [ 2346.359065][T12730] tun_get_user+0x7f6/0x3ce0 [ 2346.359098][T12730] ? __pfx_tun_get_user+0x10/0x10 [ 2346.359120][T12730] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2346.359146][T12730] ? find_held_lock+0x2b/0x80 [ 2346.359164][T12730] ? tun_get+0x191/0x370 [ 2346.359188][T12730] tun_chr_write_iter+0xdc/0x210 [ 2346.359211][T12730] vfs_write+0x7d3/0x11d0 [ 2346.359233][T12730] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2346.359256][T12730] ? __pfx_vfs_write+0x10/0x10 [ 2346.359274][T12730] ? find_held_lock+0x2b/0x80 [ 2346.359308][T12730] ksys_write+0x12a/0x250 [ 2346.359328][T12730] ? __pfx_ksys_write+0x10/0x10 [ 2346.359351][T12730] ? rcu_is_watching+0x12/0xc0 [ 2346.359373][T12730] __do_fast_syscall_32+0x7c/0x300 [ 2346.359403][T12730] do_fast_syscall_32+0x32/0x80 [ 2346.359419][T12730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2346.359441][T12730] RIP: 0023:0xf7ff3579 [ 2346.359455][T12730] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2346.359472][T12730] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 2346.359490][T12730] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 2346.359501][T12730] RDX: 000000000000007a RSI: 0000000000000000 RDI: 0000000000000000 [ 2346.359516][T12730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2346.359526][T12730] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2346.359536][T12730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2346.359559][T12730] [ 2346.477172][T27918] usb 46-1: device descriptor read/8, error -110 [ 2346.865838][T27918] usb usb46-port1: attempt power cycle [ 2347.112620][T12744] lo speed is unknown, defaulting to 1000 [ 2347.149824][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9405'. [ 2347.439632][T27918] usb usb46-port1: unable to enumerate USB device [ 2349.284671][T27918] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 2375.255579][T12818] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9417'. [ 2375.293499][ T2021] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 2375.297471][T12820] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2375.299540][T12820] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2375.302663][T12820] vhci_hcd vhci_hcd.0: Device attached [ 2375.594523][T29001] usb 50-1: SetAddress Request (6) to port 0 [ 2375.613838][T29001] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd [ 2375.797564][ T2021] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2375.800773][ T2021] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 2375.806075][ T2021] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2375.811281][ T2021] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2375.816052][ T2021] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2375.881392][ T2021] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2375.884867][ T2021] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 2375.889344][ T2021] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2375.907104][ T2021] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2375.928757][ T2021] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2375.940329][ T2021] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2375.943373][ T2021] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 2375.967972][ T2021] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2375.972778][ T2021] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2375.977656][ T2021] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2375.984735][ T2021] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2375.990548][ T2021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2375.997209][ T2021] usb 6-1: Product: syz [ 2376.001669][ T2021] usb 6-1: Manufacturer: syz [ 2376.005059][ T2021] usb 6-1: SerialNumber: syz [ 2376.342973][T12821] vhci_hcd: connection reset by peer [ 2376.346277][T31693] vhci_hcd: stop threads [ 2376.348177][T31693] vhci_hcd: release socket [ 2376.350192][T31693] vhci_hcd: disconnect device [ 2376.478707][ T2021] adutux 6-1:168.0: ADU100 ᭭흏 now attached to /dev/usb/adutux0 [ 2376.647510][ T2021] usb 6-1: USB disconnect, device number 107 [ 2377.304679][T12846] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9420'. [ 2377.556275][T12852] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2377.558934][T12852] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2377.562852][T12852] vhci_hcd vhci_hcd.0: Device attached [ 2377.836083][ T908] usb 46-1: SetAddress Request (34) to port 0 [ 2377.838268][ T908] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd [ 2378.358548][T12853] vhci_hcd: connection reset by peer [ 2378.364450][T31693] vhci_hcd: stop threads [ 2378.365895][T31693] vhci_hcd: release socket [ 2378.367423][T31693] vhci_hcd: disconnect device [ 2380.159239][ T40] audit: type=1326 audit(2000000073.349:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.4.9430" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff3579 code=0x0 [ 2380.223449][T12890] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2380.223478][T12890] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2380.225862][T12890] vhci_hcd vhci_hcd.0: Device attached [ 2380.265800][T12894] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9431'. [ 2380.266537][T12894] ata1.00: invalid multi_count 1 ignored [ 2381.608040][T12891] vhci_hcd: connection reset by peer [ 2381.613623][T32217] vhci_hcd: stop threads [ 2381.617626][T32217] vhci_hcd: release socket [ 2381.634443][T29001] usb 50-1: device descriptor read/8, error -110 [ 2381.691104][T32217] vhci_hcd: disconnect device [ 2382.154006][T29001] usb usb50-port1: attempt power cycle [ 2382.764033][T29001] usb usb50-port1: unable to enumerate USB device [ 2382.777985][T12921] fuse: Bad value for 'group_id' [ 2382.780124][T12921] fuse: Bad value for 'group_id' [ 2382.802268][T12921] lo speed is unknown, defaulting to 1000 [ 2382.888518][ T908] usb 46-1: device descriptor read/8, error -110 [ 2383.274381][ T908] usb usb46-port1: attempt power cycle [ 2383.807005][T12943] program syz.6.9442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2383.907780][ T908] usb usb46-port1: unable to enumerate USB device [ 2384.163065][T12945] syzkaller1: entered promiscuous mode [ 2384.167213][T12945] syzkaller1: entered allmulticast mode [ 2384.632197][T12952] netlink: 'syz.6.9445': attribute type 2 has an invalid length. [ 2384.637584][T12948] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2384.640499][T12948] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2384.654760][T15551] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2384.667945][T12948] vhci_hcd vhci_hcd.0: Device attached [ 2384.717167][T12955] FAULT_INJECTION: forcing a failure. [ 2384.717167][T12955] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.721537][T12955] CPU: 2 UID: 0 PID: 12955 Comm: syz.6.9446 Not tainted syzkaller #0 PREEMPT(full) [ 2384.721552][T12955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2384.721559][T12955] Call Trace: [ 2384.721564][T12955] [ 2384.721569][T12955] dump_stack_lvl+0x16c/0x1f0 [ 2384.721591][T12955] should_fail_ex+0x512/0x640 [ 2384.721608][T12955] ? fs_reclaim_acquire+0xae/0x150 [ 2384.721625][T12955] ? tomoyo_encode2+0x100/0x3e0 [ 2384.721640][T12955] should_failslab+0xc2/0x120 [ 2384.721655][T12955] __kmalloc_noprof+0xd2/0x510 [ 2384.721671][T12955] tomoyo_encode2+0x100/0x3e0 [ 2384.721688][T12955] tomoyo_encode+0x29/0x50 [ 2384.721703][T12955] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2384.721720][T12955] ? tomoyo_profile+0x47/0x60 [ 2384.721731][T12955] tomoyo_path_number_perm+0x245/0x580 [ 2384.721743][T12955] ? tomoyo_path_number_perm+0x237/0x580 [ 2384.721758][T12955] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2384.721785][T12955] ? find_held_lock+0x2b/0x80 [ 2384.721796][T12955] ? hook_file_ioctl_common+0x145/0x410 [ 2384.721814][T12955] ? __fget_files+0x20e/0x3c0 [ 2384.721828][T12955] security_file_ioctl_compat+0x9b/0x240 [ 2384.721844][T12955] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2384.721877][T12955] __do_fast_syscall_32+0x7c/0x300 [ 2384.721896][T12955] do_fast_syscall_32+0x32/0x80 [ 2384.721906][T12955] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2384.721919][T12955] RIP: 0023:0xf704e579 [ 2384.721929][T12955] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2384.721939][T12955] RSP: 002b:00000000f543e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2384.721950][T12955] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008933 [ 2384.721957][T12955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2384.721963][T12955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2384.721969][T12955] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2384.721975][T12955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2384.721989][T12955] [ 2384.722036][T12955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2384.933613][ T7477] usb 48-1: SetAddress Request (22) to port 0 [ 2384.936353][ T7477] usb 48-1: new SuperSpeed USB device number 22 using vhci_hcd [ 2385.120962][T12971] netlink: 'syz.4.9449': attribute type 1 has an invalid length. [ 2385.206846][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9449'. [ 2385.265542][T12971] Error: Device magic number does not match. [ 2385.336007][T12949] vhci_hcd: connection reset by peer [ 2385.343088][T32201] vhci_hcd: stop threads [ 2385.352467][T32201] vhci_hcd: release socket [ 2385.355227][T32201] vhci_hcd: disconnect device [ 2390.003591][ T7477] usb 48-1: device descriptor read/8, error -110 [ 2390.394031][ T7477] usb usb48-port1: attempt power cycle [ 2390.954201][ T7477] usb usb48-port1: unable to enumerate USB device [ 2392.873625][T13019] lo speed is unknown, defaulting to 1000 [ 2393.034795][T13020] block nbd4: NBD_DISCONNECT [ 2393.036411][T13020] block nbd4: Disconnected due to user request. [ 2393.039269][T13020] block nbd4: shutting down sockets [ 2393.220658][T13031] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9457'. [ 2394.644154][T20225] Bluetooth: hci3: sending frame failed (-49) [ 2394.648014][T32644] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 2394.977400][T10433] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2395.133668][T10433] usb 6-1: Using ep0 maxpacket: 8 [ 2395.143047][T10433] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 2395.147661][T10433] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 2395.152037][T10433] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2395.158936][T10433] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 2395.162862][T10433] usb 6-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 2395.166084][T10433] usb 6-1: Product: syz [ 2395.167856][T10433] usb 6-1: Manufacturer: 폏蹃晡ᘌ疈澢ᢹλ樵ݡᙚ꽂髏韙䛒﷭⃃ᶏ覯뿄ų쎯褈⤗䜚툖萳殯Ȝꃈ㹡䒔肃僂ͣ๾憱롢嬭땶玍艱㒷唞鋫ॉ㸐峻哹ཧꛋᢌ낎ͳ섪뵞謟孌쨳뒮଄ꅵ迲龈汗令뢄䒎앐襎ﾈ㬡쟰糇拓ᡫ懤ㄕ⌔䫋ꤣጺዴ菌殺 [ 2395.183477][T10433] usb 6-1: SerialNumber: syz [ 2395.190773][T13063] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2395.199569][T13063] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2395.440311][T13063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2395.454433][T13063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2395.676747][T10433] usblp0: Disabling reads from problematic bidirectional printer [ 2395.695323][T10433] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 8 proto 3 vid 0x03F0 pid 0x0004 [ 2395.700440][T10433] usb 6-1: USB disconnect, device number 108 [ 2395.707125][T10433] usblp0: removed [ 2396.196855][T13090] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2396.488338][T13097] raw_sendmsg: syz.6.9475 forgot to set AF_INET. Fix it! [ 2396.622564][T13110] netlink: 'syz.1.9476': attribute type 4 has an invalid length. [ 2396.634028][T13110] loop6: detected capacity change from 0 to 63 [ 2396.641451][T13110] Buffer I/O error on dev loop6, logical block 0, async page read [ 2396.646345][T13110] Buffer I/O error on dev loop6, logical block 0, async page read [ 2396.649565][T13110] Buffer I/O error on dev loop6, logical block 0, async page read [ 2396.652622][T13110] Buffer I/O error on dev loop6, logical block 0, async page read [ 2396.656680][T13110] Buffer I/O error on dev loop6, logical block 0, async page read [ 2396.660259][ T692] Buffer I/O error on dev loop6, logical block 0, async page read [ 2396.663114][ T692] Buffer I/O error on dev loop6, logical block 0, async page read [ 2396.669042][ T692] Buffer I/O error on dev loop6, logical block 0, async page read [ 2396.672014][ T692] Buffer I/O error on dev loop6, logical block 0, async page read [ 2396.676834][T13110] Buffer I/O error on dev loop6, logical block 0, async page read [ 2396.998649][T13119] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9480'. [ 2397.002406][T13119] netlink: 'syz.6.9480': attribute type 1 has an invalid length. [ 2397.564445][T13131] FAULT_INJECTION: forcing a failure. [ 2397.564445][T13131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2397.568496][T13131] CPU: 1 UID: 0 PID: 13131 Comm: syz.1.9483 Not tainted syzkaller #0 PREEMPT(full) [ 2397.568522][T13131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2397.568528][T13131] Call Trace: [ 2397.568533][T13131] [ 2397.568537][T13131] dump_stack_lvl+0x16c/0x1f0 [ 2397.568557][T13131] should_fail_ex+0x512/0x640 [ 2397.568577][T13131] _copy_from_user+0x2e/0xd0 [ 2397.568590][T13131] snd_seq_oss_write+0x4f8/0x7d0 [ 2397.568607][T13131] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 2397.568619][T13131] ? __rcu_read_unlock+0x2bc/0x550 [ 2397.568637][T13131] ? common_file_perm+0x1a9/0x340 [ 2397.568652][T13131] ? bpf_lsm_file_permission+0x9/0x10 [ 2397.568670][T13131] ? __pfx_odev_write+0x10/0x10 [ 2397.568680][T13131] odev_write+0x51/0xa0 [ 2397.568690][T13131] vfs_write+0x29d/0x11d0 [ 2397.568708][T13131] ? __pfx_vfs_write+0x10/0x10 [ 2397.568719][T13131] ? find_held_lock+0x2b/0x80 [ 2397.568730][T13131] ? __fget_files+0x204/0x3c0 [ 2397.568744][T13131] ? __fget_files+0x20e/0x3c0 [ 2397.568755][T13131] ? handle_mm_fault+0x1b0/0xd10 [ 2397.568770][T13131] ksys_write+0x12a/0x250 [ 2397.568782][T13131] ? __pfx_ksys_write+0x10/0x10 [ 2397.568796][T13131] ? rcu_is_watching+0x12/0xc0 [ 2397.568808][T13131] __do_fast_syscall_32+0x7c/0x300 [ 2397.568827][T13131] do_fast_syscall_32+0x32/0x80 [ 2397.568836][T13131] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2397.568850][T13131] RIP: 0023:0xf702e579 [ 2397.568858][T13131] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2397.568868][T13131] RSP: 002b:00000000f53dc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 2397.568879][T13131] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000080 [ 2397.568885][T13131] RDX: 0000000000000222 RSI: 0000000000000000 RDI: 0000000000000000 [ 2397.568891][T13131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2397.568897][T13131] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2397.568903][T13131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2397.568917][T13131] [ 2398.236335][T13133] syzkaller1: entered promiscuous mode [ 2398.238670][T13133] syzkaller1: entered allmulticast mode [ 2398.499277][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9485'. [ 2398.844157][ T6378] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2398.864449][ T6061] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 2399.157386][ T6061] usb 9-1: Using ep0 maxpacket: 8 [ 2399.163286][ T6061] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 2399.166674][ T6061] usb 9-1: config 0 has no interface number 0 [ 2399.169387][ T6061] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2399.173370][ T6061] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2399.178389][ T6061] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2399.182398][ T6061] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2399.187636][ T6061] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2399.191346][ T6061] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2399.198323][ T6061] usb 9-1: config 0 descriptor?? [ 2399.207479][ T6061] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2399.224964][T13150] syzkaller1: entered promiscuous mode [ 2399.227331][T13150] syzkaller1: entered allmulticast mode [ 2399.365019][T13156] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2399.367087][T13156] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2399.369856][T13156] vhci_hcd vhci_hcd.0: Device attached [ 2399.608144][T13136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9485'. [ 2399.743794][ T908] usb 48-1: SetAddress Request (26) to port 0 [ 2399.745567][ T908] usb 48-1: new SuperSpeed USB device number 26 using vhci_hcd [ 2399.879451][T13157] vhci_hcd: connection reset by peer [ 2399.881677][T32207] vhci_hcd: stop threads [ 2399.883712][T32207] vhci_hcd: release socket [ 2399.885803][T32207] vhci_hcd: disconnect device [ 2400.054069][ T6378] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2400.773182][ T6061] usb 9-1: USB disconnect, device number 72 [ 2400.793468][ T6061] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 2403.253716][ T6378] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 2403.423631][ T6378] usb 10-1: Using ep0 maxpacket: 8 [ 2403.423667][T25798] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2403.427292][ T6378] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2403.432637][ T6378] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2403.438958][ T6378] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2403.442173][ T6378] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2403.451379][ T6378] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2403.457103][ T6378] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2403.584871][T25798] usb 6-1: Using ep0 maxpacket: 8 [ 2403.590721][T25798] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2403.595732][T25798] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2403.604825][T25798] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2403.614285][T25798] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2403.623518][T25798] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2403.627221][T25798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2403.669806][ T6378] usb 10-1: GET_CAPABILITIES returned 0 [ 2403.671627][ T6378] usbtmc 10-1:16.0: can't read capabilities [ 2403.869426][T25798] usb 6-1: GET_CAPABILITIES returned 0 [ 2403.871843][T25798] usbtmc 6-1:16.0: can't read capabilities [ 2404.014230][T25798] usb 10-1: USB disconnect, device number 69 [ 2404.129673][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9506'. [ 2404.187326][T27918] usb 6-1: USB disconnect, device number 109 [ 2404.283601][ T6378] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 2404.433844][ T6378] usb 9-1: Using ep0 maxpacket: 8 [ 2404.440091][ T6378] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2404.444203][ T6378] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2404.448215][ T6378] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2404.452288][ T6378] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2404.458525][ T6378] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2404.462177][ T6378] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2404.690398][ T6378] usb 9-1: GET_CAPABILITIES returned 0 [ 2404.692182][ T6378] usbtmc 9-1:16.0: can't read capabilities [ 2404.803838][ T908] usb 48-1: device descriptor read/8, error -110 [ 2404.904748][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9507'. [ 2405.098644][T25798] usb 9-1: USB disconnect, device number 73 [ 2405.205779][ T908] usb usb48-port1: attempt power cycle [ 2405.907322][ T908] usb usb48-port1: unable to enumerate USB device [ 2406.062453][T13275] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2406.065122][T13275] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2406.084217][T13275] vhci_hcd vhci_hcd.0: Device attached [ 2406.294506][T13282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2406.297563][T13282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2406.363698][ T908] usb 40-1: SetAddress Request (30) to port 0 [ 2406.366625][ T908] usb 40-1: new SuperSpeed USB device number 30 using vhci_hcd [ 2406.614957][T13276] vhci_hcd: connection reset by peer [ 2406.617165][T32217] vhci_hcd: stop threads [ 2406.619091][T32217] vhci_hcd: release socket [ 2406.621151][T32217] vhci_hcd: disconnect device [ 2406.883662][ T6378] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 2407.033849][ T6378] usb 9-1: Using ep0 maxpacket: 8 [ 2407.037210][ T6378] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2407.047604][ T6378] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2407.051277][ T6378] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2407.062803][ T6378] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2407.071906][T13292] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9519'. [ 2407.092850][ T6378] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2407.102815][ T6378] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2407.326592][ T6378] usb 9-1: GET_CAPABILITIES returned 0 [ 2407.329821][ T6378] usbtmc 9-1:16.0: can't read capabilities [ 2407.585956][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9518'. [ 2407.608474][ T40] audit: type=1326 audit(2000000100.793:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.1.9522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 2407.622717][ T40] audit: type=1326 audit(2000000100.793:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.1.9522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 2407.629863][ T40] audit: type=1326 audit(2000000100.793:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.1.9522" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 2407.637940][ T40] audit: type=1326 audit(2000000100.793:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.1.9522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 2407.653453][ T40] audit: type=1326 audit(2000000100.793:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.1.9522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 2407.660146][ T40] audit: type=1326 audit(2000000100.803:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.1.9522" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 2407.667586][ T40] audit: type=1326 audit(2000000100.813:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.1.9522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 2407.674241][T10433] usb 9-1: USB disconnect, device number 74 [ 2407.674711][ T40] audit: type=1326 audit(2000000100.813:7231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.1.9522" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 2407.692767][ T40] audit: type=1326 audit(2000000100.813:7232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.1.9522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 2407.699739][ T40] audit: type=1326 audit(2000000100.813:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.1.9522" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 2409.523708][ T6378] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 2409.693609][ T6378] usb 9-1: Using ep0 maxpacket: 8 [ 2409.697879][ T6378] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2409.713083][ T6378] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2409.717287][ T6378] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2409.721599][ T6378] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2409.733500][ T6378] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2409.743744][ T6378] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2409.884065][T13340] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2409.886166][T13340] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2409.890925][T13340] vhci_hcd vhci_hcd.0: Device attached [ 2409.969202][ T6378] usb 9-1: GET_CAPABILITIES returned 0 [ 2409.979277][ T6378] usbtmc 9-1:16.0: can't read capabilities [ 2410.170605][T13349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2410.175852][T13349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2410.258424][T13342] vhci_hcd: connection closed [ 2410.258875][T32217] vhci_hcd: stop threads [ 2410.268227][T32217] vhci_hcd: release socket [ 2410.273551][T32217] vhci_hcd: disconnect device [ 2410.347038][T10433] usb 9-1: USB disconnect, device number 75 [ 2411.443752][ T908] usb 40-1: device descriptor read/8, error -110 [ 2411.650455][T13368] FAULT_INJECTION: forcing a failure. [ 2411.650455][T13368] name failslab, interval 1, probability 0, space 0, times 0 [ 2411.654901][T13368] CPU: 0 UID: 0 PID: 13368 Comm: syz.1.9537 Not tainted syzkaller #0 PREEMPT(full) [ 2411.654937][T13368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2411.654947][T13368] Call Trace: [ 2411.654954][T13368] [ 2411.654963][T13368] dump_stack_lvl+0x16c/0x1f0 [ 2411.654989][T13368] should_fail_ex+0x512/0x640 [ 2411.655007][T13368] ? __kmalloc_noprof+0xbf/0x510 [ 2411.655021][T13368] ? iter_file_splice_write+0x1cc/0x12e0 [ 2411.655033][T13368] should_failslab+0xc2/0x120 [ 2411.655048][T13368] __kmalloc_noprof+0xd2/0x510 [ 2411.655060][T13368] ? __pfx_timestamp_truncate+0x10/0x10 [ 2411.655080][T13368] ? ktime_get_coarse_real_ts64_mg+0x1d4/0x300 [ 2411.655097][T13368] iter_file_splice_write+0x1cc/0x12e0 [ 2411.655110][T13368] ? current_time+0x11d/0x1a0 [ 2411.655123][T13368] ? __pfx_current_time+0x10/0x10 [ 2411.655135][T13368] ? __pfx_make_vfsgid+0x10/0x10 [ 2411.655155][T13368] ? atime_needs_update+0x8b/0x710 [ 2411.655172][T13368] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2411.655185][T13368] ? __lock_acquire+0xb97/0x1ce0 [ 2411.655211][T13368] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2411.655224][T13368] direct_splice_actor+0x192/0x6c0 [ 2411.655238][T13368] splice_direct_to_actor+0x342/0xa30 [ 2411.655250][T13368] ? __pfx_direct_splice_actor+0x10/0x10 [ 2411.655265][T13368] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2411.655275][T13368] ? get_pid_task+0xfc/0x250 [ 2411.655295][T13368] do_splice_direct+0x174/0x240 [ 2411.655306][T13368] ? __pfx_do_splice_direct+0x10/0x10 [ 2411.655318][T13368] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2411.655332][T13368] ? rw_verify_area+0xcf/0x6c0 [ 2411.655345][T13368] do_sendfile+0xb06/0xe50 [ 2411.655360][T13368] ? __pfx_do_sendfile+0x10/0x10 [ 2411.655372][T13368] ? __might_fault+0xe3/0x190 [ 2411.655384][T13368] ? __might_fault+0x13b/0x190 [ 2411.655400][T13368] __ia32_compat_sys_sendfile+0x162/0x220 [ 2411.655417][T13368] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 2411.655458][T13368] ? rcu_is_watching+0x12/0xc0 [ 2411.655471][T13368] __do_fast_syscall_32+0x7c/0x300 [ 2411.655490][T13368] do_fast_syscall_32+0x32/0x80 [ 2411.655500][T13368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2411.655514][T13368] RIP: 0023:0xf702e579 [ 2411.655523][T13368] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2411.655534][T13368] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2411.655545][T13368] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000006 [ 2411.655552][T13368] RDX: 0000000080000080 RSI: 0000000000007f04 RDI: 0000000000000000 [ 2411.655559][T13368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2411.655565][T13368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2411.655571][T13368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2411.655585][T13368] [ 2411.834523][ T908] usb usb40-port1: attempt power cycle [ 2411.903654][ T53] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 2412.123504][ T53] usb 10-1: Using ep0 maxpacket: 16 [ 2412.130632][ T53] usb 10-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 32 [ 2412.131113][T13376] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9539'. [ 2412.395545][ T908] usb usb40-port1: unable to enumerate USB device [ 2413.563591][ T53] usb 10-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2413.568985][ T53] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2413.580250][ T53] usb 10-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 2413.584215][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.587582][ T53] usb 10-1: Product: ≦媛墡숦⹘ᚅ⸱侌ᅋ圀ᙙ辩Ᏽ㓰꒣람䏹廯蠚䱂桫㜒뵧臋ﮒ姞嚆ᫌ➗왽諩䒧霹Ｄ䷆覛墣ꪶ얬့孙텒芮灡㡫骥䬿떂혪Ś浶誏郎췃藢鄠㑞덆繳쪋絸걀捊鸠 [ 2413.610405][ T53] usb 10-1: Manufacturer: 䣖薽덱䡏㥯灮츷䲴䝒軔ﱱ⼺ꃷ蘮ᚁ秧脌Ά笉繇འꦽᅴ湼⧔᦬ｏ琋麿輧뒳ຸ혹衰媟碨쌹撗ｇ獔圃垆ቚ [ 2413.623556][ T53] usb 10-1: SerialNumber: Р [ 2413.642836][T13365] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2413.875025][ T53] usblp0: Disabling reads from problematic bidirectional printer [ 2413.879672][ T53] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 2 proto 1 vid 0x03F0 pid 0x0004 [ 2413.887570][ T53] usb 10-1: USB disconnect, device number 70 [ 2413.892679][ T53] usblp0: removed [ 2414.368741][T13382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2414.373126][T13382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2414.713523][ T6378] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 2414.863572][ T6378] usb 10-1: Using ep0 maxpacket: 8 [ 2414.867941][ T6378] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2414.873079][ T6378] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2414.879261][ T6378] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2414.883850][ T6378] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2414.889308][ T6378] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2414.893174][ T6378] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2415.109447][ T6378] usb 10-1: GET_CAPABILITIES returned 0 [ 2415.111934][ T6378] usbtmc 10-1:16.0: can't read capabilities [ 2415.287780][T13396] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2415.366285][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9542'. [ 2415.426200][T10433] usb 10-1: USB disconnect, device number 71 [ 2415.720077][T13405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9546'. [ 2415.802328][T13405] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2417.493791][T13430] netlink: 76 bytes leftover after parsing attributes in process `syz.6.9553'. [ 2420.016302][T13450] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9558'. [ 2421.835606][T13477] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2421.837712][T13477] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2421.841493][T13477] vhci_hcd vhci_hcd.0: Device attached [ 2422.311849][T13478] vhci_hcd: connection closed [ 2422.312362][ T46] vhci_hcd: stop threads [ 2422.320414][ T46] vhci_hcd: release socket [ 2422.335520][ T46] vhci_hcd: disconnect device [ 2422.384093][ T7477] usb 46-1: enqueue for inactive port 0 [ 2422.969535][ T6033] tipc: Resetting bearer [ 2422.976200][ T7477] usb usb46-port1: attempt power cycle [ 2422.996808][ T6033] tipc: Disabling bearer [ 2423.320699][T13059] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2423.328760][T13059] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2423.332935][T13059] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2423.336564][T13502] loop2: detected capacity change from 0 to 7 [ 2423.339164][T13502] Dev loop2: unable to read RDB block 7 [ 2423.339418][T13059] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2423.341311][T13502] loop2: unable to read partition table [ 2423.345993][T13502] loop2: partition table beyond EOD, truncated [ 2423.346159][T13059] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2423.347978][T13502] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2423.369605][T32644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2423.372363][T32644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2423.377129][T32644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2423.381045][T32644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2423.384402][T32644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2423.460425][T13500] lo speed is unknown, defaulting to 1000 [ 2423.613145][ T7477] usb usb46-port1: unable to enumerate USB device [ 2423.789767][T13500] chnl_net:caif_netlink_parms(): no params data found [ 2423.960226][T13500] bridge0: port 1(bridge_slave_0) entered blocking state [ 2423.963095][T13500] bridge0: port 1(bridge_slave_0) entered disabled state [ 2423.968578][T13500] bridge_slave_0: entered allmulticast mode [ 2423.973017][T13500] bridge_slave_0: entered promiscuous mode [ 2423.979298][T13500] bridge0: port 2(bridge_slave_1) entered blocking state [ 2423.982524][T13500] bridge0: port 2(bridge_slave_1) entered disabled state [ 2423.991407][T13500] bridge_slave_1: entered allmulticast mode [ 2424.000399][T13500] bridge_slave_1: entered promiscuous mode [ 2424.071345][T13500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2424.077952][T13500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2424.170046][T13500] team0: Port device team_slave_0 added [ 2424.177855][T13500] team0: Port device team_slave_1 added [ 2424.248892][T13500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2424.250997][T13500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2424.260321][T13500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2424.265208][T13500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2424.267469][T13500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2424.277725][T13500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2424.372613][T13500] hsr_slave_0: entered promiscuous mode [ 2424.376010][T13500] hsr_slave_1: entered promiscuous mode [ 2424.378937][T13500] debugfs: 'hsr0' already exists in 'hsr' [ 2424.381442][T13500] Cannot create hsr debugfs directory [ 2424.992899][T31693] dvmrp0 (unregistering): left allmulticast mode [ 2425.046260][T13533] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2425.048443][T13533] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2425.052976][T13533] vhci_hcd vhci_hcd.0: Device attached [ 2425.445516][T32644] Bluetooth: hci3: command tx timeout [ 2425.539021][T13534] vhci_hcd: connection closed [ 2425.539415][T32217] vhci_hcd: stop threads [ 2425.543351][T32217] vhci_hcd: release socket [ 2425.545150][T32217] vhci_hcd: disconnect device [ 2425.763559][ T7477] usb 48-1: enqueue for inactive port 0 [ 2425.849978][T13540] overlayfs: missing 'workdir' [ 2425.976940][T31693] bond0 (unregistering): Released all slaves [ 2426.124745][T31693] bond1 (unregistering): Released all slaves [ 2426.138181][T31693] bond2 (unregistering): Released all slaves [ 2426.266364][T31693] bond3 (unregistering): Released all slaves [ 2426.284974][ T7477] usb usb48-port1: attempt power cycle [ 2426.290954][T13539] syz_tun: entered promiscuous mode [ 2426.294318][T13539] batadv_slave_0: entered promiscuous mode [ 2426.449071][T31693] tipc: Left network mode [ 2426.467024][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 2426.467035][ T40] audit: type=1800 audit(2000000119.613:7242): pid=13552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.9584" name="/newroot/518" dev="tmpfs" ino=2878 res=0 errno=0 [ 2427.032565][T13573] random: crng reseeded on system resumption [ 2427.066659][T13573] Unrecognized hibernate image header format! [ 2427.070873][T13573] PM: hibernation: Image mismatch: architecture specific data [ 2427.204071][ T7477] usb usb48-port1: unable to enumerate USB device [ 2427.270723][T13585] FAULT_INJECTION: forcing a failure. [ 2427.270723][T13585] name failslab, interval 1, probability 0, space 0, times 0 [ 2427.277544][T13585] CPU: 1 UID: 0 PID: 13585 Comm: syz.5.9590 Not tainted syzkaller #0 PREEMPT(full) [ 2427.277567][T13585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2427.277578][T13585] Call Trace: [ 2427.277584][T13585] [ 2427.277592][T13585] dump_stack_lvl+0x16c/0x1f0 [ 2427.277641][T13585] should_fail_ex+0x512/0x640 [ 2427.277668][T13585] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2427.277691][T13585] should_failslab+0xc2/0x120 [ 2427.277713][T13585] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2427.277732][T13585] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 2427.277758][T13585] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 2427.277781][T13585] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 2427.277812][T13585] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 2427.277846][T13585] mmu_topup_memory_caches+0x25/0x170 [ 2427.277866][T13585] kvm_mmu_load+0xd6/0x23c0 [ 2427.277883][T13585] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 2427.277902][T13585] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 2427.277922][T13585] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 2427.277948][T13585] ? __pfx_kvm_mmu_load+0x10/0x10 [ 2427.277964][T13585] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 2427.277991][T13585] ? kvm_check_and_inject_events+0x71c/0x1310 [ 2427.278020][T13585] vcpu_run+0x35a3/0x55a0 [ 2427.278045][T13585] ? __lock_acquire+0xb97/0x1ce0 [ 2427.278075][T13585] ? __pfx_vcpu_run+0x10/0x10 [ 2427.278102][T13585] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 2427.278121][T13585] ? __local_bh_enable_ip+0xa4/0x120 [ 2427.278146][T13585] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 2427.278168][T13585] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 2427.278200][T13585] kvm_vcpu_ioctl+0x5eb/0x1690 [ 2427.278226][T13585] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2427.278248][T13585] ? tomoyo_path_number_perm+0x18d/0x580 [ 2427.278269][T13585] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2427.278298][T13585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2427.278327][T13585] ? do_vfs_ioctl+0x128/0x14f0 [ 2427.278355][T13585] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2427.278394][T13585] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 2427.278417][T13585] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2427.278439][T13585] ? __fget_files+0x20e/0x3c0 [ 2427.278462][T13585] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2427.278487][T13585] __ia32_compat_sys_ioctl+0x23f/0x370 [ 2427.278517][T13585] __do_fast_syscall_32+0x7c/0x300 [ 2427.278547][T13585] do_fast_syscall_32+0x32/0x80 [ 2427.278564][T13585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2427.278586][T13585] RIP: 0023:0xf707e579 [ 2427.278600][T13585] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2427.278616][T13585] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2427.278632][T13585] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 2427.278643][T13585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2427.278653][T13585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2427.278662][T13585] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2427.278672][T13585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2427.278693][T13585] [ 2427.280990][T31693] hsr_slave_0: left promiscuous mode [ 2427.389516][T31693] hsr_slave_1: left promiscuous mode [ 2427.420881][T31693] pimreg (unregistering): left allmulticast mode [ 2427.534617][T32644] Bluetooth: hci3: command tx timeout [ 2427.683621][ T6378] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 2427.833518][ T6378] usb 9-1: Using ep0 maxpacket: 8 [ 2427.836563][ T6378] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2427.840216][ T6378] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2427.846306][ T6378] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2427.850279][ T6378] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2427.856446][ T6378] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2427.859823][ T6378] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2428.071290][ T6378] usb 9-1: GET_CAPABILITIES returned 0 [ 2428.074351][ T6378] usbtmc 9-1:16.0: can't read capabilities [ 2428.330703][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9592'. [ 2429.181963][T10433] usb 9-1: USB disconnect, device number 76 [ 2429.309485][T13500] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2429.314604][T13500] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2429.318902][T13500] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2429.323921][T13500] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2429.478444][T13500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2429.497377][T13500] 8021q: adding VLAN 0 to HW filter on device team0 [ 2429.508290][T32202] bridge0: port 1(bridge_slave_0) entered blocking state [ 2429.510605][T32202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2429.523055][T32201] bridge0: port 2(bridge_slave_1) entered blocking state [ 2429.526141][T32201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2429.543806][T31693] IPVS: stop unused estimator thread 0... [ 2429.607142][T32644] Bluetooth: hci3: command tx timeout [ 2429.836696][T13500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2429.982079][T13500] veth0_vlan: entered promiscuous mode [ 2430.008385][T13500] veth1_vlan: entered promiscuous mode [ 2430.025638][T13500] veth0_macvtap: entered promiscuous mode [ 2430.029323][T13500] veth1_macvtap: entered promiscuous mode [ 2430.039906][T13500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2430.049092][T13500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2430.058314][ T6517] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.062156][ T6517] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.067526][ T6517] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.070441][ T6517] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.383967][T32202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2430.387704][T32202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2430.410773][T32202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2430.417666][T32202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2430.802070][T13654] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9601'. [ 2431.117074][T13663] overlayfs: failed to resolve './file1': -2 [ 2431.693543][T32644] Bluetooth: hci3: command tx timeout [ 2432.083536][T15551] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2432.234035][T15551] usb 6-1: Using ep0 maxpacket: 8 [ 2432.237438][T15551] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2432.241262][T15551] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2432.245264][T15551] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2432.249186][T15551] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2432.253276][T15551] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2432.256590][T15551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2432.466847][T15551] usb 6-1: GET_CAPABILITIES returned 0 [ 2432.469355][T15551] usbtmc 6-1:16.0: can't read capabilities [ 2432.670371][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9605'. [ 2432.676324][T15551] usb 6-1: USB disconnect, device number 110 [ 2433.648365][T13677] netlink: 'syz.5.9608': attribute type 2 has an invalid length. [ 2433.785153][T13681] syzkaller1: entered promiscuous mode [ 2433.787052][T13681] syzkaller1: entered allmulticast mode [ 2434.283856][T15551] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2434.406506][T13700] overlayfs: failed to resolve './file1': -2 [ 2434.833480][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9614'. [ 2435.362776][T13722] netlink: 76 bytes leftover after parsing attributes in process `syz.6.9616'. [ 2436.522382][T13730] netlink: 'syz.1.9618': attribute type 2 has an invalid length. [ 2436.556430][T13732] usb usb8: usbfs: process 13732 (syz.5.9617) did not claim interface 0 before use [ 2443.798707][T13762] fuse: Unknown parameter 'fd$0xffffffffffffffff' [ 2443.902733][T13764] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2443.904774][T13764] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2443.909238][T13764] vhci_hcd vhci_hcd.0: Device attached [ 2444.065461][T13767] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2444.068267][T13767] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2444.072323][T13767] vhci_hcd vhci_hcd.0: Device attached [ 2444.183721][T29001] usb 50-1: SetAddress Request (10) to port 0 [ 2444.186452][T29001] usb 50-1: new SuperSpeed USB device number 10 using vhci_hcd [ 2444.333730][ T53] usb 48-1: SetAddress Request (34) to port 0 [ 2444.335925][ T53] usb 48-1: new SuperSpeed USB device number 34 using vhci_hcd [ 2444.757556][T13768] vhci_hcd: connection reset by peer [ 2444.768882][T32217] vhci_hcd: stop threads [ 2444.770631][T32217] vhci_hcd: release socket [ 2444.772964][T32217] vhci_hcd: disconnect device [ 2444.891147][T13765] vhci_hcd: connection reset by peer [ 2444.895180][T32202] vhci_hcd: stop threads [ 2444.896991][T32202] vhci_hcd: release socket [ 2444.899493][T32202] vhci_hcd: disconnect device [ 2445.803881][T13792] overlayfs: failed to resolve './file1': -2 [ 2445.805576][T13789] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9627'. [ 2446.109850][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9625'. [ 2447.024408][T13805] syzkaller1: entered promiscuous mode [ 2447.026757][T13805] syzkaller1: entered allmulticast mode [ 2447.524601][ T59] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2449.283652][T29001] usb 50-1: device descriptor read/8, error -110 [ 2449.603588][ T53] usb 48-1: device descriptor read/8, error -110 [ 2449.674519][T29001] usb usb50-port1: attempt power cycle [ 2449.994572][ T53] usb usb48-port1: attempt power cycle [ 2450.234170][T29001] usb usb50-port1: unable to enumerate USB device [ 2450.555727][ T53] usb usb48-port1: unable to enumerate USB device [ 2456.081313][T13882] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2456.081339][T13882] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2456.081432][T13882] vhci_hcd vhci_hcd.0: Device attached [ 2456.110762][T13888] vhci_hcd: connection closed [ 2456.343760][T29001] usb 48-1: SetAddress Request (38) to port 0 [ 2456.343931][T29001] usb 48-1: new SuperSpeed USB device number 38 using vhci_hcd [ 2456.386866][T32202] vhci_hcd: stop threads [ 2456.386886][T32202] vhci_hcd: release socket [ 2456.386933][T32202] vhci_hcd: disconnect device [ 2456.739530][T13894] syzkaller1: entered promiscuous mode [ 2456.741925][T13894] syzkaller1: entered allmulticast mode [ 2457.183846][ T59] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2457.360916][T13903] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9646'. [ 2461.443710][T29001] usb 48-1: device descriptor read/8, error -110 [ 2461.835097][T29001] usb usb48-port1: attempt power cycle [ 2462.395064][T29001] usb usb48-port1: unable to enumerate USB device [ 2472.568921][T14032] lo speed is unknown, defaulting to 1000 [ 2472.698359][T14034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9671'. [ 2476.251369][T14076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2476.254479][T14076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2476.295518][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9683'. [ 2477.374629][T25798] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 2477.523629][T25798] usb 10-1: Using ep0 maxpacket: 8 [ 2477.527502][T25798] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2477.531237][T25798] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2477.534550][T25798] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2477.538040][T25798] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2477.542518][T25798] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2477.546048][T25798] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2477.768569][T25798] usb 10-1: GET_CAPABILITIES returned 0 [ 2477.770545][T25798] usbtmc 10-1:16.0: can't read capabilities [ 2477.933646][ T6061] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2478.043608][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9687'. [ 2478.113568][ T6061] usb 6-1: Using ep0 maxpacket: 8 [ 2478.118038][ T6061] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2478.122871][ T6061] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2478.127475][ T6061] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2478.132567][ T6061] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2478.141575][ T6061] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2478.144761][ T6061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2478.149405][ T9] usb 10-1: USB disconnect, device number 72 [ 2478.416600][ T6061] usb 6-1: GET_CAPABILITIES returned 0 [ 2478.421818][ T6061] usbtmc 6-1:16.0: can't read capabilities [ 2478.626183][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9688'. [ 2478.696755][T14111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9692'. [ 2478.725038][ T908] usb 6-1: USB disconnect, device number 111 [ 2478.739166][T14113] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9691'. [ 2478.794945][T14115] FAULT_INJECTION: forcing a failure. [ 2478.794945][T14115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2478.800740][T14115] CPU: 1 UID: 0 PID: 14115 Comm: syz.5.9693 Not tainted syzkaller #0 PREEMPT(full) [ 2478.800755][T14115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2478.800762][T14115] Call Trace: [ 2478.800765][T14115] [ 2478.800770][T14115] dump_stack_lvl+0x16c/0x1f0 [ 2478.800790][T14115] should_fail_ex+0x512/0x640 [ 2478.800810][T14115] _copy_to_user+0x32/0xd0 [ 2478.800823][T14115] bpf_ctx_finish.isra.0+0xf6/0x1c0 [ 2478.800839][T14115] ? __pfx_bpf_ctx_finish.isra.0+0x10/0x10 [ 2478.800854][T14115] ? __asan_memset+0x23/0x50 [ 2478.800868][T14115] bpf_prog_test_run_skb+0x1d03/0x2280 [ 2478.800889][T14115] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2478.800906][T14115] ? fput+0x9b/0xd0 [ 2478.800923][T14115] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2478.800939][T14115] __sys_bpf+0x104d/0x4de0 [ 2478.800958][T14115] ? __pfx___sys_bpf+0x10/0x10 [ 2478.800974][T14115] ? ksys_write+0x190/0x250 [ 2478.800988][T14115] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 2478.801013][T14115] ? fput+0x9b/0xd0 [ 2478.801027][T14115] ? ksys_write+0x1ac/0x250 [ 2478.801039][T14115] ? __pfx_ksys_write+0x10/0x10 [ 2478.801054][T14115] __ia32_sys_bpf+0x76/0xe0 [ 2478.801069][T14115] __do_fast_syscall_32+0x7c/0x300 [ 2478.801095][T14115] do_fast_syscall_32+0x32/0x80 [ 2478.801112][T14115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2478.801128][T14115] RIP: 0023:0xf707e579 [ 2478.801137][T14115] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2478.801147][T14115] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2478.801158][T14115] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 2478.801164][T14115] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 2478.801170][T14115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2478.801176][T14115] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2478.801182][T14115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2478.801195][T14115] [ 2480.736643][T14154] random: crng reseeded on system resumption [ 2481.638629][T14168] EXT4-fs (md0): unable to read superblock [ 2482.967632][T14196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9718'. [ 2482.995990][T14196] sp0: Synchronizing with TNC [ 2485.491395][T14220] netlink: 'syz.5.9725': attribute type 4 has an invalid length. [ 2485.584927][T14221] loop6: detected capacity change from 0 to 63 [ 2485.650521][T14220] buffer_io_error: 5085 callbacks suppressed [ 2485.650532][T14220] Buffer I/O error on dev loop6, logical block 0, async page read [ 2485.664184][T14220] Buffer I/O error on dev loop6, logical block 0, async page read [ 2485.668031][T14220] Buffer I/O error on dev loop6, logical block 0, async page read [ 2485.670691][T14220] Buffer I/O error on dev loop6, logical block 0, async page read [ 2485.673731][T14220] Buffer I/O error on dev loop6, logical block 0, async page read [ 2485.676499][T14220] Buffer I/O error on dev loop6, logical block 0, async page read [ 2485.679148][T14220] Buffer I/O error on dev loop6, logical block 0, async page read [ 2485.681930][T14220] Buffer I/O error on dev loop6, logical block 0, async page read [ 2485.693663][T14220] Buffer I/O error on dev loop6, logical block 0, async page read [ 2485.699861][T14220] Buffer I/O error on dev loop6, logical block 0, async page read [ 2486.193296][ T908] usb 6-1: new low-speed USB device number 112 using dummy_hcd [ 2486.373539][ T908] usb 6-1: Invalid ep0 maxpacket: 32 [ 2486.443556][T15551] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 2486.503502][ T908] usb 6-1: new low-speed USB device number 113 using dummy_hcd [ 2486.615521][T15551] usb 10-1: Using ep0 maxpacket: 8 [ 2486.619041][T15551] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2486.622498][T15551] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2486.633461][T15551] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2486.636792][T15551] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2486.640829][T15551] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2486.644350][T15551] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2486.653575][ T908] usb 6-1: Invalid ep0 maxpacket: 32 [ 2486.659864][ T908] usb usb6-port1: attempt power cycle [ 2486.763319][T14249] program syz.4.9732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2486.860340][T15551] usb 10-1: GET_CAPABILITIES returned 0 [ 2486.862214][T15551] usbtmc 10-1:16.0: can't read capabilities [ 2487.033508][ T908] usb 6-1: new low-speed USB device number 114 using dummy_hcd [ 2487.064545][ T908] usb 6-1: Invalid ep0 maxpacket: 32 [ 2487.120196][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9730'. [ 2487.203647][ T908] usb 6-1: new low-speed USB device number 115 using dummy_hcd [ 2487.226683][ T908] usb 6-1: Invalid ep0 maxpacket: 32 [ 2487.241154][ T908] usb usb6-port1: unable to enumerate USB device [ 2487.534686][T15551] usb 10-1: USB disconnect, device number 73 [ 2489.549048][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9748'. [ 2489.630574][T14307] netlink: 14 bytes leftover after parsing attributes in process `syz.5.9748'. [ 2490.233720][T14307] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2490.257666][T14307] bridge0: port 1(syz_tun) entered disabled state [ 2490.281808][T14307] bond0 (unregistering): Released all slaves [ 2490.590126][T14323] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9753'. [ 2492.056162][T14349] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9761'. [ 2492.081630][T14349] lo speed is unknown, defaulting to 1000 [ 2492.195172][T14351] net_ratelimit: 4171 callbacks suppressed [ 2492.195184][T14351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2492.223686][ T40] audit: type=1804 audit(2000000185.393:7243): pid=14351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9762" name="/newroot/43/bus/bus" dev="overlay" ino=259 res=1 errno=0 [ 2492.230203][ T40] audit: type=1804 audit(2000000185.393:7244): pid=14351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9762" name="/newroot/43/bus/bus" dev="overlay" ino=259 res=1 errno=0 [ 2492.544238][T14355] random: crng reseeded on system resumption [ 2492.546956][T14355] FAULT_INJECTION: forcing a failure. [ 2492.546956][T14355] name failslab, interval 1, probability 0, space 0, times 0 [ 2492.552752][T14355] CPU: 2 UID: 0 PID: 14355 Comm: syz.1.9763 Not tainted syzkaller #0 PREEMPT(full) [ 2492.552775][T14355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2492.552787][T14355] Call Trace: [ 2492.552792][T14355] [ 2492.552799][T14355] dump_stack_lvl+0x16c/0x1f0 [ 2492.552829][T14355] should_fail_ex+0x512/0x640 [ 2492.552854][T14355] ? lockdep_hardirqs_on+0x7c/0x110 [ 2492.552880][T14355] should_failslab+0xc2/0x120 [ 2492.552902][T14355] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2492.552917][T14355] ? do_raw_spin_lock+0x12c/0x2b0 [ 2492.552942][T14355] ? find_held_lock+0x2b/0x80 [ 2492.552957][T14355] ? async_schedule_node_domain+0x54/0x120 [ 2492.552981][T14355] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 2492.553004][T14355] async_schedule_node_domain+0x54/0x120 [ 2492.553027][T14355] dev_cache_fw_image+0x38e/0x490 [ 2492.553050][T14355] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 2492.553076][T14355] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 2492.553098][T14355] dpm_for_each_dev+0x5a/0xb0 [ 2492.553118][T14355] fw_pm_notify+0x81/0x150 [ 2492.553137][T14355] notifier_call_chain+0xb9/0x410 [ 2492.553157][T14355] ? __pfx_fw_pm_notify+0x10/0x10 [ 2492.553183][T14355] blocking_notifier_call_chain_robust+0xc8/0x160 [ 2492.553207][T14355] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 2492.553237][T14355] pm_notifier_call_chain_robust+0x27/0x60 [ 2492.553261][T14355] snapshot_open+0x218/0x2b0 [ 2492.553281][T14355] ? __pfx_snapshot_open+0x10/0x10 [ 2492.553302][T14355] misc_open+0x35a/0x420 [ 2492.553322][T14355] ? __pfx_misc_open+0x10/0x10 [ 2492.553341][T14355] chrdev_open+0x231/0x6a0 [ 2492.553361][T14355] ? __pfx_apparmor_file_open+0x10/0x10 [ 2492.553401][T14355] ? __pfx_chrdev_open+0x10/0x10 [ 2492.553425][T14355] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 2492.553450][T14355] do_dentry_open+0x97f/0x1530 [ 2492.553472][T14355] ? __pfx_chrdev_open+0x10/0x10 [ 2492.553498][T14355] vfs_open+0x82/0x3f0 [ 2492.553526][T14355] path_openat+0x1de4/0x2cb0 [ 2492.553555][T14355] ? __pfx_path_openat+0x10/0x10 [ 2492.553575][T14355] ? __lock_acquire+0xb97/0x1ce0 [ 2492.553600][T14355] do_filp_open+0x20b/0x470 [ 2492.553621][T14355] ? __pfx_do_filp_open+0x10/0x10 [ 2492.553660][T14355] ? _raw_spin_unlock+0x28/0x50 [ 2492.553681][T14355] ? alloc_fd+0x471/0x7d0 [ 2492.553707][T14355] do_sys_openat2+0x11b/0x1d0 [ 2492.553731][T14355] ? __pfx_do_sys_openat2+0x10/0x10 [ 2492.553759][T14355] ? __fget_files+0x20e/0x3c0 [ 2492.553774][T14355] ? handle_mm_fault+0x1b0/0xd10 [ 2492.553796][T14355] __ia32_compat_sys_openat+0x16d/0x210 [ 2492.553813][T14355] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2492.553828][T14355] ? ksys_write+0x1ac/0x250 [ 2492.553851][T14355] ? rcu_is_watching+0x12/0xc0 [ 2492.553871][T14355] __do_fast_syscall_32+0x7c/0x300 [ 2492.553899][T14355] do_fast_syscall_32+0x32/0x80 [ 2492.553914][T14355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2492.553934][T14355] RIP: 0023:0xf706e579 [ 2492.553948][T14355] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2492.553963][T14355] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 2492.553979][T14355] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001180 [ 2492.553989][T14355] RDX: 0000000000002a01 RSI: 0000000000000000 RDI: 0000000000000000 [ 2492.554000][T14355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2492.554008][T14355] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2492.554018][T14355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2492.554041][T14355] [ 2492.744404][T14355] [ 2492.745389][T14355] ============================================ [ 2492.747756][T14355] WARNING: possible recursive locking detected [ 2492.750100][T14355] syzkaller #0 Not tainted [ 2492.752673][T14355] -------------------------------------------- [ 2492.756001][T14355] syz.1.9763/14355 is trying to acquire lock: [ 2492.758321][T14355] ffffffff8f51dc68 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x4e/0x640 [ 2492.761451][T14355] [ 2492.761451][T14355] but task is already holding lock: [ 2492.764436][T14355] ffffffff8f51dc68 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 2492.767686][T14355] [ 2492.767686][T14355] other info that might help us debug this: [ 2492.770861][T14355] Possible unsafe locking scenario: [ 2492.770861][T14355] [ 2492.773763][T14355] CPU0 [ 2492.775136][T14355] ---- [ 2492.776466][T14355] lock(fw_lock); [ 2492.777949][T14355] lock(fw_lock); [ 2492.779465][T14355] [ 2492.779465][T14355] *** DEADLOCK *** [ 2492.779465][T14355] [ 2492.782625][T14355] May be due to missing lock nesting notation [ 2492.782625][T14355] [ 2492.785886][T14355] 5 locks held by syz.1.9763/14355: [ 2492.787949][T14355] #0: ffffffff8f3080e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 2492.791244][T14355] #1: ffffffff8e484b88 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 2492.795303][T14355] #2: ffffffff8e4c4ff0 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 2492.799882][T14355] #3: ffffffff8f51dc68 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2492.803255][T14355] #4: ffffffff8f518668 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 2492.806735][T14355] [ 2492.806735][T14355] stack backtrace: [ 2492.808574][T14355] CPU: 1 UID: 0 PID: 14355 Comm: syz.1.9763 Not tainted syzkaller #0 PREEMPT(full) [ 2492.808588][T14355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2492.808595][T14355] Call Trace: [ 2492.808599][T14355] [ 2492.808604][T14355] dump_stack_lvl+0x116/0x1f0 [ 2492.808622][T14355] print_deadlock_bug+0x1e9/0x240 [ 2492.808636][T14355] __lock_acquire+0x1133/0x1ce0 [ 2492.808650][T14355] ? kasan_save_track+0x14/0x30 [ 2492.808665][T14355] lock_acquire+0x179/0x350 [ 2492.808678][T14355] ? assign_fw+0x4e/0x640 [ 2492.808693][T14355] ? __pfx___might_resched+0x10/0x10 [ 2492.808704][T14355] ? path_openat+0x1de4/0x2cb0 [ 2492.808716][T14355] ? do_filp_open+0x20b/0x470 [ 2492.808727][T14355] ? do_sys_openat2+0x11b/0x1d0 [ 2492.808744][T14355] ? assign_fw+0x4e/0x640 [ 2492.808756][T14355] __mutex_lock+0x193/0x1060 [ 2492.808772][T14355] ? assign_fw+0x4e/0x640 [ 2492.808787][T14355] ? __pfx___mutex_lock+0x10/0x10 [ 2492.808805][T14355] ? kasan_quarantine_put+0x10a/0x240 [ 2492.808817][T14355] ? lockdep_hardirqs_on+0x7c/0x110 [ 2492.808833][T14355] ? assign_fw+0x4e/0x640 [ 2492.808845][T14355] assign_fw+0x4e/0x640 [ 2492.808858][T14355] ? _request_firmware+0x957/0x1470 [ 2492.808873][T14355] _request_firmware+0x988/0x1470 [ 2492.808889][T14355] ? __pfx__request_firmware+0x10/0x10 [ 2492.808903][T14355] ? dump_stack_lvl+0x197/0x1f0 [ 2492.808918][T14355] ? dump_stack_lvl+0x1a3/0x1f0 [ 2492.808934][T14355] __async_dev_cache_fw_image+0xb1/0x340 [ 2492.808949][T14355] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 2492.808964][T14355] ? mark_held_locks+0x49/0x80 [ 2492.808977][T14355] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2492.808992][T14355] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 2492.809007][T14355] async_schedule_node_domain+0xd4/0x120 [ 2492.809020][T14355] dev_cache_fw_image+0x38e/0x490 [ 2492.809034][T14355] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 2492.809052][T14355] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 2492.809065][T14355] dpm_for_each_dev+0x5a/0xb0 [ 2492.809078][T14355] fw_pm_notify+0x81/0x150 [ 2492.809090][T14355] notifier_call_chain+0xb9/0x410 [ 2492.809103][T14355] ? __pfx_fw_pm_notify+0x10/0x10 [ 2492.809116][T14355] blocking_notifier_call_chain_robust+0xc8/0x160 [ 2492.809131][T14355] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 2492.809147][T14355] pm_notifier_call_chain_robust+0x27/0x60 [ 2492.809162][T14355] snapshot_open+0x218/0x2b0 [ 2492.809174][T14355] ? __pfx_snapshot_open+0x10/0x10 [ 2492.809186][T14355] misc_open+0x35a/0x420 [ 2492.809199][T14355] ? __pfx_misc_open+0x10/0x10 [ 2492.809211][T14355] chrdev_open+0x231/0x6a0 [ 2492.809225][T14355] ? __pfx_apparmor_file_open+0x10/0x10 [ 2492.809237][T14355] ? __pfx_chrdev_open+0x10/0x10 [ 2492.809250][T14355] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 2492.809264][T14355] do_dentry_open+0x97f/0x1530 [ 2492.809277][T14355] ? __pfx_chrdev_open+0x10/0x10 [ 2492.809291][T14355] vfs_open+0x82/0x3f0 [ 2492.809308][T14355] path_openat+0x1de4/0x2cb0 [ 2492.809322][T14355] ? __pfx_path_openat+0x10/0x10 [ 2492.809334][T14355] ? __lock_acquire+0xb97/0x1ce0 [ 2492.809348][T14355] do_filp_open+0x20b/0x470 [ 2492.809360][T14355] ? __pfx_do_filp_open+0x10/0x10 [ 2492.809376][T14355] ? _raw_spin_unlock+0x28/0x50 [ 2492.809389][T14355] ? alloc_fd+0x471/0x7d0 [ 2492.809401][T14355] do_sys_openat2+0x11b/0x1d0 [ 2492.809417][T14355] ? __pfx_do_sys_openat2+0x10/0x10 [ 2492.809434][T14355] ? __fget_files+0x20e/0x3c0 [ 2492.809444][T14355] ? handle_mm_fault+0x1b0/0xd10 [ 2492.809455][T14355] __ia32_compat_sys_openat+0x16d/0x210 [ 2492.809465][T14355] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2492.809475][T14355] ? ksys_write+0x1ac/0x250 [ 2492.809488][T14355] ? rcu_is_watching+0x12/0xc0 [ 2492.809500][T14355] __do_fast_syscall_32+0x7c/0x300 [ 2492.809516][T14355] do_fast_syscall_32+0x32/0x80 [ 2492.809526][T14355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2492.809539][T14355] RIP: 0023:0xf706e579 [ 2492.809548][T14355] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2492.809557][T14355] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 2492.809567][T14355] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001180 [ 2492.809574][T14355] RDX: 0000000000002a01 RSI: 0000000000000000 RDI: 0000000000000000 [ 2492.809580][T14355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2492.809586][T14355] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2492.809592][T14355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2492.809601][T14355] [ 2493.041332][T10440] raw-gadget.0 gadget.6: failed to queue disconnect event VM DIAGNOSIS: 08:55:05 Registers: info registers vcpu 0 CPU#0 RAX=ffffed10048b7086 RBX=ffffed10048b7087 RCX=ffffffff8188477d RDX=0000000000000000 RSI=0000000000000008 RDI=ffff8880245b8430 RBP=ffffed10048b7086 RSP=ffffc900036cf9d0 R8 =0000000000000000 R9 =ffffed10048b7086 R10=ffff8880245b8437 R11=0000000000000000 R12=0000000000000000 R13=0000000000000098 R14=0000000000000000 R15=ffff8880245b8430 RIP=ffffffff8220727f RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fcd0a1f5c80 ffffffff 00c00000 GS =0000 ffff8880974ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008007f000 CR3=00000000272b7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000018000000 Opmask03=0000000000000000 Opmask04=00000000f7ffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0e1d490b 00007ffc0e1d490b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0e1d4e10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0e1d4e10 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73615f5f5f786670 5f5f203f20205d35 35333431545b5d31 38393235352e3239 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303d6f6e72726520 313d736572203935 323d6f6e69202279 616c7265766f223d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7665642022737562 2f7375622f33342f 746f6f7277656e2f 223d656d616e2022 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323637392e312e7a 7973223d6d6d6f63 2073726574697277 5f6e65706f3d6573 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756163207263705f 64696c61766e693d 706f2064656e6966 6e6f636e753d6a62 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8561e695 RDI=ffffffff9b102780 RBP=ffffffff9b102740 RSP=ffffc900048cecc8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000000 R14=ffffffff9b102740 R15=ffffffff9b102a00 RIP=ffffffff8561e6bf RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975ba000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080080000 CR3=000000006e527000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff9ae5d080 RDX=dffffc0000000000 RSI=ffffffff8c163780 RDI=0000000000000001 RBP=0000000000000293 RSP=ffffc900070d7b38 R8 =0000000000000000 R9 =fffffbfff2157592 R10=ffffffff90abac97 R11=0000000000000003 R12=ffff8880233ae438 R13=dffffc0000000000 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff818821cf RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7426288 CR3=0000000049d3d000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000080 DR3=000000000f000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 EAX=00000000 EBX=00000000 ECX=f706e579 EDX=ffbe4c04 ESI=ffbe4bfc EDI=ffbe4c04 EBP=00000000 ESP=ffbe4bd4 EIP=f706e57a EFL=00000293 [--S-A-C] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57a65440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055dab2094f40 CR3=000000006e527000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000080 DR3=000000000f000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000