last executing test programs: 14m26.166849953s ago: executing program 0 (id=354): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x8, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @rand_addr=0x64010102}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14m25.816196094s ago: executing program 0 (id=357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) 14m25.620608317s ago: executing program 0 (id=359): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x1, @local, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000240)="9704b25dff50844a2d6c855537518fb40823c33e081c6c7a1573d01281318220f4b6cabd4d15", 0x26}], 0x1}}], 0x1, 0x4000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000005"], 0x8) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) syz_fuse_handle_req(r2, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000000840)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0x8000, 0xffffffff80250120, 0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=""/244, 0xf4) 14m24.750341504s ago: executing program 0 (id=365): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x84) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0x4, 0x0, {0x5, 0x7, 0x29000000000, 0xa54, 0xa, 0x80000006, 0x5, 0x6, 0xfff, 0x4000, 0x11, 0xffffffffffffffff, 0x0, 0x800003, 0x1c00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_metadata(0x0, &(0x7f0000000140), 0x0, 0x0, 0x3) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000) tee(r0, r2, 0x4e, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000100), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000001c80)={0x0, 0xf691, 0x200, 0x2, 0x169, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000006300)={0x0, 0x0, "2ace5333042b795aac6e9e173bdb136ce5819fac1e01da6afb76215550fa6d06018e5edc2e0b312347f7d6c11624c2f0bddfcc697396d3b20fbb22a10d394de9e390028357d82eec630fa239040e3224efb187d769186503d5a34ddfcc05320a29be30849913e610646539d9d8daad7b28425c065003787eb5bae4cbf2657dd02c74c208ce6654278c960c8b16144b7d45616e085e85845387ea45cc1172f10893b0a67f1022045c0647f67c354eed0f702d69e91428646ba87c5bc4e168b2a31c69210279c9d27c02495cb979d0e42cda1eadc0e1abfaf3b7a5c2d45ddda86df0118c402b2125380e486ca4bb5201e9ca3752d2353d4690a75cf09474593e84", "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"}) io_uring_enter(r6, 0x708, 0x54bd, 0x2d, 0x0, 0x0) pipe(&(0x7f0000001c40)) 14m23.776151901s ago: executing program 0 (id=370): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x12, 0x4000ffc, 0x60}, 0x2c) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 14m23.47058081s ago: executing program 0 (id=377): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) userfaultfd(0x80001) userfaultfd(0x80001) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'}) 14m23.384005945s ago: executing program 32 (id=377): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) userfaultfd(0x80001) userfaultfd(0x80001) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'}) 4m53.605146597s ago: executing program 4 (id=2836): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 'id1\x00'}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x602000, 0x6) r2 = openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'veth0_virt_wifi\x00', @multicast}) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) readv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/225, 0xe1}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe8, r6, 0x8138fb604f667265, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe635}, {0x6, 0x11, 0x3}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48000}, 0x40) pread64(r5, &(0x7f00000005c0)=""/193, 0xc1, 0x4) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f00000006c0)={0x5, @output={0x0, 0x0, {0xecd, 0x5}, 0x4, 0x3}}) getpeername$packet(r4, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000840)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xbc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r5) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000c80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x168, r8, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000e40)={0x1, 0x1, 0x1000, 0xd1, &(0x7f0000000cc0)="133655900205c41b8c3c106082bb96c3d281d36d7c704ec69b137aeeec50e0e958f5147b67e6d730685d87acc3a8568cd51ce4fc77a32ffb095c9d666c3c0097a8ff0f681300d236cb7574a4f5880c8ad1a8d6b05942da1aa0b169072b89d6c9994c5f05e0bb51e44b1fc85595def01445185c691ba1735ec53432d8919f1d7000cf0c36d5700add64da91a60fc773af13fdecbc0b2ba2772097bc290bac6329c27b173ef2953e67d84decc2827d0ef081b0e6ba3bdc2095d6601ef969077f75faa2b46d8541c0653452221b8fd957b557", 0x70, 0x0, &(0x7f0000000dc0)="f5b7a50ec911d7f2ca0ef25ddf455c984c4146da26e63a3e2ee76bca99c322823e3be917faade44096864a2cf9a42281428c1a027225befee93c79c0502efe893a565fc89ce4e75a79f96349a113d8c5b8b1beabd25d19cbdd1e6c08932ccc1142a2cfc39e62014359f97ef260eb77cc"}) connect$unix(r1, &(0x7f0000000ec0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$nl_generic(r5, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f80)={0x148, 0x37, 0x100, 0x70bd2c, 0x25dfdbff, {0x12}, [@nested={0x116, 0x2c, 0x0, 0x1, [@generic="57baab3d3b5c9b2dc6567aae0ad42110c4acc14ef109c4d0b9c3b296da5cc97e7a352815679ed403037f5ecb090c4fca77e98787b1b1eb8f6d2199fbbc3cd3dc97ca716f11c6e954f2286010581546472bd31f977ee963742699e785ee960ac4ef82d6ad89fe3e97c1aa2dfc0b82d0636f74ae7fc963f8c3df570e7ccb834cec6d1f795f30139b8546f92d49b2692f72a9cc5def2b1d7219cb72657ba73d87a40a9cb8c6f23231de12498e013750907a1d86e853b45ce8df42bcbbbc07d90bd9098bc6525d61d9eaa156c07e29152ec52e09c694c9180eb3cc9645f9776a7d3dc2a7f0a2d53f2d3e1ec9ef8a08af726af19e26303598defc3901", @typed={0x8, 0x46, 0x0, 0x0, @u32=0x6}, @typed={0xc, 0xc8, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0x2c}]}, @generic="2bb94cddc4929292", @generic="33c837b2375da829bfca46f6be5d22bcc9"]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x40000040) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x815}, 0x815) clock_gettime(0x0, &(0x7f0000004540)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000001280)=@un=@abs, 0x80, &(0x7f0000001680)=[{&(0x7f0000001300)=""/186, 0xba}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/55, 0x37}, {&(0x7f0000001480)=""/141, 0x8d}, {&(0x7f0000001540)=""/161, 0xa1}, {&(0x7f0000001600)=""/62, 0x3e}, {&(0x7f0000001640)=""/35, 0x23}], 0x7, &(0x7f00000016c0)=""/65, 0x41}, 0x3}, {{&(0x7f0000001740)=@phonet, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000017c0)=""/214, 0xd6}, {&(0x7f00000018c0)=""/239, 0xef}, {&(0x7f00000019c0)=""/228, 0xe4}, {&(0x7f0000001ac0)=""/241, 0xf1}, {&(0x7f0000001bc0)=""/203, 0xcb}], 0x5, &(0x7f0000001d00)=""/46, 0x2e}, 0x6}, {{&(0x7f0000001d40)=@qipcrtr, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001dc0)=""/61, 0x3d}], 0x1, &(0x7f0000001e40)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002e40)=@phonet, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002ec0)=""/43, 0x2b}, {&(0x7f0000002f00)=""/4096, 0x1000}], 0x2}, 0x5}, {{&(0x7f0000003f40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000004340)=[{&(0x7f0000003fc0)=""/254, 0xfe}, {&(0x7f00000040c0)=""/208, 0xd0}, {&(0x7f00000041c0)=""/29, 0x1d}, {&(0x7f0000004200)=""/199, 0xc7}, {&(0x7f0000004300)=""/29, 0x1d}], 0x5, &(0x7f0000004380)=""/213, 0xd5}, 0xa8000000}], 0x5, 0x10000, &(0x7f0000004580)={r10, r11+10000000}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000045c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000046c0)=0xe4) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, r13, &(0x7f0000004700)='./file0\x00') r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004780), r4) sendmsg$NL80211_CMD_GET_REG(r12, &(0x7f00000048c0)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004880)={&(0x7f00000047c0)={0xa4, r14, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x68, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xec}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8854}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x340080c0}, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000004900)={[0x3, 0x1, 0x3, 0x7f, 0x200000000, 0x9, 0x3, 0x2, 0x0, 0x81, 0xaa84, 0x1, 0xffffffffffffffff, 0x80, 0x452, 0x4], 0xd000, 0x4891}) getpid() openat$dsp(0xffffff9c, &(0x7f00000049c0), 0x208440, 0x0) 4m53.604881432s ago: executing program 4 (id=2837): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="3d000000ffffffd0000000000000009bbd000000bb7f1aa5dcb83e404f00c600feff0000000a9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) 4m53.375484971s ago: executing program 4 (id=2838): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) (fail_nth: 1) sysfs$2(0x2, 0x19, 0x0) 4m53.289717177s ago: executing program 4 (id=2839): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x4, 0x205, 0x9, 0x6, 0x2, 0x10001, 0x4, 0x0}, &(0x7f0000000040)=0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x11}}, 0x98}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') io_setup(0xff, &(0x7f0000000440)=0x0) io_submit(r3, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000ec0)="a5", 0x1, 0x7cb1358f}]) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x8ae9, 0x80, 0x0, 0x10018}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) writev(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)="976005b75f71900eaf8480928f63631a3a7d321506a6858fc3dc227de401fe97f45de1f53bbb5fe162c9218a14eac5163aad907b1fcbda7a9ea580b7daeba86f", 0x40}], 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r1, 0x9}, 0x8) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe4) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000300)=@filename='./file0\x00', r10, &(0x7f0000000680)) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) syz_clone(0x20000000, &(0x7f0000000180)="fdbe2eccd5e2416f196c23f1a2cd97958ba639a17896fe44a2ebd4ac389ebb2b3266bee20391687535494801fc330863ac7b1c30", 0x34, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000500)="4b8aa61c669daad618a60878eb8a7d99bcbfb53cab449672289fbb02474177ffbea3f76d5d13432665cc39c6ebb69460ab345338f10a6742596bd31144f20c8075efeace609988767f91b6bcdf7c0acfa4855f5e69a3490f653797c715324a8fa33afd") sysfs$2(0x2, 0x19, 0x0) 4m53.03994021s ago: executing program 4 (id=2841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='block_plug\x00', r1}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (fail_nth: 1) 4m52.56249241s ago: executing program 4 (id=2846): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48844}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x3}, {0x6, 0xb}}}, {0xa, 0xe7, 0x1d, 0x0, @tick, {0xf3, 0x7}, {0x7, 0x9}, @addr={0x8, 0x41}}], 0x54) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_gettime(0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005c80)=[{{&(0x7f00000016c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000002800)=[{0x0}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x2, 0x20000000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) (fail_nth: 1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) r7 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180), 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000240)={r7, r7, r7}, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000005, 0x2, &(0x7f0000006680)=0x1) lsm_get_self_attr(0x69, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x6, ""/6}, &(0x7f00000001c0)=0x26, 0x0) r8 = syz_io_uring_setup(0x31c7, &(0x7f0000000600)={0x0, 0xfffffffe, 0x400, 0x80000003}, &(0x7f00000003c0), &(0x7f00000005c0)) unshare(0x60400) syz_io_uring_setup(0x3c67, &(0x7f0000000240)={0x0, 0x7b46, 0x27, 0x2, 0x0, 0x0, r8}, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 4m52.278357175s ago: executing program 33 (id=2846): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48844}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x3}, {0x6, 0xb}}}, {0xa, 0xe7, 0x1d, 0x0, @tick, {0xf3, 0x7}, {0x7, 0x9}, @addr={0x8, 0x41}}], 0x54) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_gettime(0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005c80)=[{{&(0x7f00000016c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000002800)=[{0x0}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x2, 0x20000000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) (fail_nth: 1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) r7 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180), 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000240)={r7, r7, r7}, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000005, 0x2, &(0x7f0000006680)=0x1) lsm_get_self_attr(0x69, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x6, ""/6}, &(0x7f00000001c0)=0x26, 0x0) r8 = syz_io_uring_setup(0x31c7, &(0x7f0000000600)={0x0, 0xfffffffe, 0x400, 0x80000003}, &(0x7f00000003c0), &(0x7f00000005c0)) unshare(0x60400) syz_io_uring_setup(0x3c67, &(0x7f0000000240)={0x0, 0x7b46, 0x27, 0x2, 0x0, 0x0, r8}, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 3m12.454284768s ago: executing program 3 (id=3286): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x854, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], [0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa, 0x1ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x7ffd, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3], [0x0, 0x4000000, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3fe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x7, 0x9]}, 0x45c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe000001000000000400"], 0x24}}, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000013002f0a2bbd70000000000007006800", @ANYRES32=r4, @ANYBLOB="400900006522020018001a8009000100766c616e000000000800058004000380"], 0x38}}, 0x8004) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000700)="f387f3d0d636834c015f24e62c2e7c82d107a6808737c85e69706da9c8440000009c0ebf8e3f0a7efe0ed91d923af04bf049364e1b69237c6258215d8f1e91bd3bd03e7f3876d52ef012264768d6b703075024a5164aebe8ba1203b8512b2258bb6dfa2f55f496386fd12d29590c6eee14a6c7bc9d4c9c26915315ab4f01f3b278e7a837b409f9a8d7") ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x0, 0x5002) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @pic={0x9, 0x6, 0xc6, 0x7, 0x18, 0x4, 0x1, 0x4, 0x4, 0x1, 0x4, 0x3, 0x1a, 0x6, 0xcf, 0x4}}) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000240)=[{0xe, 0x81, 0x0, 0xfd, @time={0x5, 0x5}, {0x10, 0x49}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) 3m12.252268094s ago: executing program 3 (id=3288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) 3m10.95512605s ago: executing program 3 (id=3291): madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x810c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) 3m10.814282805s ago: executing program 3 (id=3292): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) r3 = syz_open_dev$audion(&(0x7f0000000100), 0xf, 0x610080) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r4}}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000080)='GPL\x00', 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000400)) 3m10.721145046s ago: executing program 3 (id=3293): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)) r2 = syz_create_resource$binfmt(&(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x41) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xffffffff}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfff}]}}]}, 0x40}}, 0x2000400c) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000006034b698fb225d090000000000"], 0x20}}, 0x0) 3m10.394411175s ago: executing program 3 (id=3294): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x200) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x513602) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2m55.396796802s ago: executing program 34 (id=3294): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x200) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x513602) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m40.272859003s ago: executing program 2 (id=3684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x800000) socket(0x1d, 0x2, 0x6) setpriority(0x3, r1, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) 1m39.222626018s ago: executing program 2 (id=3688): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x8041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0)={0xdb, 0x0, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) syz_emit_ethernet(0x82, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r6, &(0x7f00000001c0)="d2", 0x1) 1m37.671137163s ago: executing program 2 (id=3697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) setreuid(0xffffffffffffffff, 0xee00) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {0xffffffffffffffff}, 0x20800}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r5, @ANYRESHEX=r6], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) openat$sr(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r9) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}]}, 0x3c}}, 0x20004000) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYRESDEC], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x94) 1m37.610201462s ago: executing program 2 (id=3698): capget(0x0, 0x0) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x8c941, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x94, &(0x7f00000000c0)={0x0, 0x80000001000, 0x40d}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00') mlockall(0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setgid(0xffffffffffffffff) fsopen(&(0x7f0000000080)='bdev\x00', 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r1, r2, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000480)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) mount$9p_xen(&(0x7f00000002c0), &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340), 0x800, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=xen,version=9p2000.L,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',fscache,access=any,afid=0x0000000000000c59,debug=0x0000000000000000,euid=', @ANYRESDEC=0x0, @ANYBLOB=',fsname=@}[,rootcontext=system_u,seclabel,appraise_type=imasig,uid<', @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC=r1, @ANYBLOB=',\x00']) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'netdevsim0\x00'}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x402c5829, &(0x7f00000003c0)={0x0, 0x0, 0x1890, 0x11}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) mlockall(0x5) lremovexattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="41737adf1445ebe62e00"]) sendmsg$nl_generic(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1480745}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc8, 0x23, 0x10, 0x70bd25, 0x25dfdbfd, {0x16}, [@typed={0x8, 0x51, 0x0, 0x0, @fd}, @typed={0xaa, 0x7e, 0x0, 0x0, @binary="38d3a3e51e61c093030699e5b2dfd133d0b31c7a13c47d2c499fba8967ba97fd01c76aff174f9eda5f598d072da07833fc3923f5af507c44fcfe3eda8fd87675c1ff8f3049cd6dd29607d0538b60a54bf49be471ff4a77d96f95bf94e2b51babbe8210d7ac2f26116c70a7eb383618c69663888366c1c0128f03f74a5241acca4a9a323dccb5b40b0dc984ca6160884d588218e3441dcda2c43fd929e10b8c9a55070b543adf"}]}, 0xc8}}, 0x40) 1m36.994008294s ago: executing program 2 (id=3701): shmget$private(0x0, 0x14000, 0x10, &(0x7f0000fe9000/0x14000)=nil) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000240), 0x408c0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000140)) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) r6 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10010, &(0x7f00000002c0)={[{@subsystem='hugetlb'}, {@clone_children}, {@subsystem='cpuacct'}, {@favordynmods}], [{@subj_user}, {@subj_user}, {@fsname={'fsname', 0x3d, 'cpuacct'}}, {@seclabel}, {@flag='nolazytime'}, {@smackfstransmute={'smackfstransmute', 0x3d, '}'}}]}) r7 = syz_open_procfs(r6, &(0x7f0000000000)='net/route\x00') mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) fstat(r7, &(0x7f00000000c0)) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f00000004c0)={0x2d, 0x1, 0x0, "1c1bebdaf2f20d55806b26b1d750185fd75a206da058e8fc42466ab1439b1cc2"}) getsockopt$inet_opts(r7, 0x0, 0x9, &(0x7f0000000140)=""/204, &(0x7f0000000040)=0xcc) 1m36.661631443s ago: executing program 2 (id=3702): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000580), 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}]}) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./bus\x00') 1m36.572847053s ago: executing program 35 (id=3702): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000580), 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}]}) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./bus\x00') 7.66420281s ago: executing program 7 (id=4080): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0xb15}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x1fff, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x1000}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x8d, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) listen(r0, 0x9) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0) 6.722877603s ago: executing program 7 (id=4084): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130003eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x1, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0x10, 0x40000000}}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x10, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_emit_vhci(&(0x7f0000001d00)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1}}}, 0x4) 4.858390927s ago: executing program 7 (id=4086): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x8041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0)={0xdb, 0x0, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r4, &(0x7f00000001c0)="d2", 0x1) 3.802428243s ago: executing program 1 (id=4091): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0xc0445609, &(0x7f0000000100)={0x1, {0xf8000002, 0x8ba, 0x27, 0xb}}) 3.762796211s ago: executing program 1 (id=4092): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x80) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)='.', 0x0, 0x7}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000140)={0xc6f0, 0xb, 0x7, 0x7fffffffffffffff, 0x3, 0x585}) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = io_uring_setup(0x7b9d, &(0x7f0000000880)={0x0, 0x8c9f, 0x10000, 0x8000002, 0x36c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xe, &(0x7f0000000040)={0xfffffffd, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'pim6reg0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_open_pts(r5, 0x64e81) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000550001002bbd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="012102c54e020000003f30c9bbfdffff7f0000010800000093c9869d90fc0715011758d9f981d1aaee4795768341f531b490f350c6b2958a7dffcb8d7f19907977f5a9d963cffa160f378f454e25bf1db8110000000000000000e62c5b30be4571faeeb981227accf68eda4ee6cc03b3e6373190db22237adc0c3cdf55880fc155c82380b9e88fd5e8c8ac5128"], 0x38}, 0x1, 0x0, 0x0, 0x24040044}, 0x4000014) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x2, "0062ba7d82000000000000000000f7fffeff00"}) r9 = syz_open_pts(r0, 0x8182) dup3(r3, r5, 0x0) dup3(r9, r0, 0x0) write(r0, 0x0, 0x0) ioctl$TIOCSBRK(r9, 0x5427) 3.754208877s ago: executing program 6 (id=4093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c0002800800014000000900100002800c00028008000180ffffffff0900010073797a30000000000900020073797a3200"], 0x88}}, 0x0) (fail_nth: 7) 3.662648581s ago: executing program 6 (id=4094): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002340)=0x4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x3c9302) (async) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000280)="94", 0x1}, {0x0}], 0x2) readv(r2, 0x0, 0x0) (async, rerun: 64) r4 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x400000, 0x6, 0x0, 0x0, 0x26, 0x3}, 0x9c) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/93) (async, rerun: 32) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) (async) read$FUSE(r6, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0xffffffffffffff82) syz_fuse_handle_req(r6, &(0x7f0000008880)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) write$FUSE_INIT(r6, &(0x7f00000003c0)={0x1, 0x0, r7, {0x7, 0x2b, 0x6, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xffff}}, 0x50) (async, rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) (async) r8 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r8, 0x0) 3.661630766s ago: executing program 6 (id=4095): socket$phonet(0x23, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000036000701040000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x10) (fail_nth: 7) 3.503327538s ago: executing program 6 (id=4096): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x801, 0x0, 0x0, 0x3}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8], 0x7c}}, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddaf0200000000000000d2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0xaaa, @local, 0xff, 0x1}, 0x20) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000008340)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8000, 0xfffffffc, r7, r8, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r9, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r9, r5) 2.71203185s ago: executing program 5 (id=4097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) 2.711652071s ago: executing program 7 (id=4098): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0xb15}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ac1414aa000000000000000000000000000000001fff0000000000005c00000009a89788519ba123b49cdde9ac454937b1705d43e32747882893221eb571dda7071cc288a95c005311fe692d2550c8d5e5dc9d8c9c69c6a046bd5f5e61b0aa1b39cb2737f9b9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c00000000000014000000000000000000000000000000000000000000000000080000000000000000000000fffffffff7ffffff000000000000000000000000000000000000000000000010000000000000000000000000000000000400000000000000001000000000000000000000000000000000000000000000000000000000008000000000020001062c000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10000, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@mmap}], [{@subj_type}, {@smackfstransmute={'smackfstransmute', 0x3d, ',\\.U}$\xb1@&'}}, {@smackfshat}, {@pcr={'pcr', 0x3d, 0x1e}}]}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) listen(r1, 0x9) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0) 2.711461819s ago: executing program 1 (id=4099): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x14) (async) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000002c0)={0x80, 0x45, &(0x7f00000001c0)="2ffde8a3c63f1be8697e1df64c98261ad7d6b840013c8ec2caac1ba214b7ac767f1f333a6e531009a02eb833aabdcace29e59188cebf052b47c6babbb35af755908c0b70f3e3f4c3abd9717fb911e3759493e818768be23418118a9677144bd1007c0a22d46ae0606d30a36b22b74052dacc7c5d346039d637a4c503b16ca77b6f9b442ace40d94b69759d313bfa840ea38c4b64ed89a3241f413b003f0ca48f3ddae83f4074907dfee4ebee2b9b8d311baa5764c0b281e1f7386ef4dc95f1f25cd31a5d9720b9b1ac6986c0d3c692b52ebbb5d43b010ffba0deef45f0e804acc455536c92cefc33", {0x8000, 0x2, 0x4f424752, 0x9, 0x8, 0xd58, 0x0, 0x9}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0xa, 0x8) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000100)) (async) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0xfffff7f9, 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x731480, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r4 = openat$qrtrtun(0xffffff9c, &(0x7f0000000380), 0x22883) mmap$qrtrtun(&(0x7f0000610000/0x3000)=nil, 0x3000, 0xe, 0x11, r4, 0x62) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @rand_addr=0x64010101, 0x1, 0x6, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010101, @local]}, 0x28) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x40) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x51) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000543000/0x2000)=nil}) 2.711087555s ago: executing program 5 (id=4100): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000400), 0x12) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/106, 0x6a}], 0x1) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x20, 0x7, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000001640), &(0x7f0000001680)=0x30) 2.632822901s ago: executing program 1 (id=4101): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000003140)={0x5, 0x1000000}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)=0x2) socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000036000701040000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020f08001000000000000000fedbdf25030005002b00000002000020000000000000000000000000080012000000040000000000070000000600320000020000000000000000000000000000000000008000ffffe0000001fe800000000000000000000000000018030006000000000002004e240a010101000000000000000031d46fbcca575e1068585f758e46e6"], 0x80}}, 0x4) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x10) 2.632483756s ago: executing program 5 (id=4102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') lseek(r1, 0x1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1522, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x3000000, 0x0, 0x4000001}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x1, 0x0, 0x30, 0x0, [{@local}, {}, {@dev}]}}) clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) 2.632198297s ago: executing program 5 (id=4103): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) ioctl(0xffffffffffffffff, 0x1acb7133, &(0x7f0000002740)) socket$nl_route(0x10, 0x3, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x16) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000380)='net/if_inet6\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0x11, 0x148, 0x170, 0x0, 0x264, 0x2a8, 0x2a8, 0x264, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x150, 0x170, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xb}}, @common=@unspec=@conntrack2={{0xbc}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010104, [0xffffff00, 0x0, 0xff, 0xff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e26, 0x4e24, 0xbd2}, 0x40, 0x8e0}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'ipvlan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x1}, 0x0, 0xcc, 0xf4, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x6}, {0x1}], 0x2}}, @inet=@rpfilter={{0x24}, {0xb}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x354) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000000)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x800) 2.579096986s ago: executing program 1 (id=4104): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x8041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0)={0xdb, 0x0, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$alg(0x26, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r5, &(0x7f00000001c0)="d2", 0x1) 2.577398417s ago: executing program 6 (id=4105): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x1, r6}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x20, 0x37, 0x1, {0x0, 0x6, 0x62, r6, 0x2, '\'%'}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x401], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0xff, 0x0, 0x81, 0x80}, {0x5000, 0xf000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x16, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa3, 0x5, 0x5}, {0x1, 0xeeef0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x0, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.688025542s ago: executing program 7 (id=4106): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x8, 0x70bd2b, 0x0, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x0, 0x3e, 0xb}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xff}]}, 0xc}, 0x1, 0x0, 0x0, 0x4004}, 0x80) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8923, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x480080, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x7ffffffffffff08, 0x801c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff2e) syz_open_pts(0xffffffffffffffff, 0x0) 1.386678608s ago: executing program 5 (id=4107): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x8041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0)={0xdb, 0x0, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r5, &(0x7f00000001c0)="d2", 0x1) 1.195112873s ago: executing program 6 (id=4108): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x8041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0)={0xdb, 0x0, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r4, &(0x7f00000001c0)="d2", 0x1) 248.883503ms ago: executing program 1 (id=4109): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x8041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r6, &(0x7f00000001c0)="d2", 0x1) 212.406311ms ago: executing program 7 (id=4110): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x8, 0x70bd2b, 0x0, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x0, 0x3e, 0xb}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xff}]}, 0xc}, 0x1, 0x0, 0x0, 0x4004}, 0x80) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8923, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x480080, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x7ffffffffffff08, 0x801c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff2e) syz_open_pts(0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=4111): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x800, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, r1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0}) kernel console output (not intermixed with test programs): [ 809.803796][ T840] usb 6-1: config 0 descriptor?? [ 809.919981][T11568] dvb-usb: bulk message failed: -22 (1/0) [ 809.922224][T11568] dvb-usb: error while querying for an remote control event. [ 810.080092][T11568] dvb-usb: bulk message failed: -22 (1/0) [ 810.082817][T11568] dvb-usb: error while querying for an remote control event. [ 810.129880][ T61] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 810.228014][ T840] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 810.240985][ T840] dvb-usb: bulk message failed: -22 (1/0) [ 810.243105][ T840] dvb-usb: error while querying for an remote control event. [ 810.282025][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.286618][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.290954][ T61] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 810.296767][ T61] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 810.300884][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.307835][ T61] usb 7-1: config 0 descriptor?? [ 810.400096][ T840] dvb-usb: bulk message failed: -22 (1/0) [ 810.403107][ T840] dvb-usb: error while querying for an remote control event. [ 810.531329][T22845] vhci_hcd: connection reset by peer [ 810.534298][ T841] usb 10-1: USB disconnect, device number 4 [ 810.536148][T14052] vhci_hcd: stop threads [ 810.537647][T14052] vhci_hcd: release socket [ 810.539447][T14052] vhci_hcd: disconnect device [ 810.552139][ T841] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 810.718797][T22855] usb usb5: usbfs: process 22855 (syz.6.3531) did not claim interface 0 before use [ 810.723744][ T61] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 811.063270][T22861] FAULT_INJECTION: forcing a failure. [ 811.063270][T22861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.067635][T22861] CPU: 1 UID: 0 PID: 22861 Comm: syz.5.3532 Not tainted syzkaller #0 PREEMPT(full) [ 811.067650][T22861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 811.067656][T22861] Call Trace: [ 811.067661][T22861] [ 811.067666][T22861] dump_stack_lvl+0x16c/0x1f0 [ 811.067682][T22861] should_fail_ex+0x512/0x640 [ 811.067716][T22861] _copy_to_user+0x32/0xd0 [ 811.067734][T22861] simple_read_from_buffer+0xcb/0x170 [ 811.067753][T22861] proc_fail_nth_read+0x197/0x240 [ 811.067765][T22861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 811.067778][T22861] ? rw_verify_area+0xcf/0x6c0 [ 811.067788][T22861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 811.067799][T22861] vfs_read+0x1e4/0xcf0 [ 811.067813][T22861] ? __pfx_vfs_read+0x10/0x10 [ 811.067823][T22861] ? find_held_lock+0x2b/0x80 [ 811.067838][T22861] ? __fget_files+0x20e/0x3c0 [ 811.067852][T22861] ksys_read+0x12a/0x250 [ 811.067863][T22861] ? __pfx_ksys_read+0x10/0x10 [ 811.067874][T22861] ? fput+0x9b/0xd0 [ 811.067887][T22861] ? rcu_is_watching+0x12/0xc0 [ 811.067901][T22861] __do_fast_syscall_32+0x7c/0x300 [ 811.067915][T22861] do_fast_syscall_32+0x32/0x80 [ 811.067928][T22861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 811.067942][T22861] RIP: 0023:0xf7f64579 [ 811.067951][T22861] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 811.067961][T22861] RSP: 002b:00000000f5456590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 811.067971][T22861] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5456620 [ 811.067978][T22861] RDX: 000000000000000f RSI: 00000000f73f6ff4 RDI: 0000000000000000 [ 811.067984][T22861] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 811.067990][T22861] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 811.067996][T22861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 811.068010][T22861] [ 811.212740][T22865] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 811.588691][T22848] usb 6-1: string descriptor 0 read error: -71 [ 811.591412][T22854] FAULT_INJECTION: forcing a failure. [ 811.591412][T22854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.598570][T22854] CPU: 3 UID: 0 PID: 22854 Comm: syz.1.3529 Not tainted syzkaller #0 PREEMPT(full) [ 811.598592][T22854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 811.598602][T22854] Call Trace: [ 811.598609][T22854] [ 811.598617][T22854] dump_stack_lvl+0x16c/0x1f0 [ 811.598638][T22854] should_fail_ex+0x512/0x640 [ 811.598666][T22854] _copy_from_user+0x2e/0xd0 [ 811.598692][T22854] hiddev_ioctl_usage.isra.0+0xb35/0x1650 [ 811.598715][T22854] ? find_held_lock+0x2b/0x80 [ 811.598735][T22854] ? mark_held_locks+0x49/0x80 [ 811.598757][T22854] ? __pfx_hiddev_ioctl_usage.isra.0+0x10/0x10 [ 811.598780][T22854] ? usbhid_init_reports+0x1ab/0x390 [ 811.598803][T22854] hiddev_ioctl+0x644/0x15a0 [ 811.598826][T22854] ? __pfx_hiddev_ioctl+0x10/0x10 [ 811.598853][T22854] ? find_held_lock+0x2b/0x80 [ 811.598869][T22854] ? hook_file_ioctl_common+0x145/0x410 [ 811.598892][T22854] ? __fget_files+0x20e/0x3c0 [ 811.598913][T22854] ? __pfx_hiddev_ioctl+0x10/0x10 [ 811.598933][T22854] compat_ptr_ioctl+0x6e/0xa0 [ 811.598955][T22854] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 811.598978][T22854] __ia32_compat_sys_ioctl+0x242/0x370 [ 811.599008][T22854] __do_fast_syscall_32+0x7c/0x300 [ 811.599031][T22854] do_fast_syscall_32+0x32/0x80 [ 811.599051][T22854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 811.599073][T22854] RIP: 0023:0xf705d579 [ 811.599087][T22854] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 811.599103][T22854] RSP: 002b:00000000f542c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 811.599120][T22854] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000d01c4813 [ 811.599131][T22854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 811.599141][T22854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 811.599151][T22854] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 811.599161][T22854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 811.599184][T22854] [ 811.665771][T22871] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 811.671741][T11568] usb 7-1: USB disconnect, device number 47 [ 811.671782][T22871] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 811.694586][T22872] loop6: detected capacity change from 0 to 524287999 [ 811.697840][ T7978] buffer_io_error: 27 callbacks suppressed [ 811.697855][ T7978] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.702264][ T7978] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.705588][ T7978] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.708851][ T7978] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.710083][ T29] usb 6-1: reset high-speed USB device number 56 using dummy_hcd [ 811.716516][T22871] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 811.718652][T22871] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 811.719383][ T7978] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.724944][ T7978] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.727659][ T7978] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.730614][ T7978] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.733312][ T7978] ldm_validate_partition_table(): Disk read failed. [ 811.735418][ T7978] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.781541][ T7978] Buffer I/O error on dev loop6, logical block 0, async page read [ 811.784582][ T7978] Dev loop6: unable to read RDB block 0 [ 811.786636][ T7978] loop6: unable to read partition table [ 811.789421][T22872] ldm_validate_partition_table(): Disk read failed. [ 811.795117][T22872] Dev loop6: unable to read RDB block 0 [ 811.800390][T22872] loop6: unable to read partition table [ 811.802776][T22872] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 811.806872][T22874] ldm_validate_partition_table(): Disk read failed. [ 811.809087][T22874] Dev loop6: unable to read RDB block 0 [ 811.821111][T22874] loop6: unable to read partition table [ 811.823016][T22874] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 812.312815][ T5348] ldm_validate_partition_table(): Disk read failed. [ 812.315215][ T5348] Dev loop6: unable to read RDB block 0 [ 812.317615][ T5348] loop6: unable to read partition table [ 812.384833][T22898] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 812.387613][T11568] IPVS: starting estimator thread 0... [ 812.430369][T22901] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 812.480333][T22899] IPVS: using max 43 ests per chain, 103200 per kthread [ 812.550624][ T8264] usb 6-1: USB disconnect, device number 56 [ 812.795979][T22916] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 813.640080][T11568] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 813.805538][T11568] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.810251][T11568] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.814284][T11568] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 813.819601][T11568] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 813.823550][T11568] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.828751][T11568] usb 10-1: config 0 descriptor?? [ 814.236050][T11568] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 814.240106][T11568] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 814.246816][T11568] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 814.436500][T22951] hub 8-0:1.0: USB hub found [ 814.441415][T22951] hub 8-0:1.0: 1 port detected [ 814.460138][T22932] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.3553' resets device [ 814.466922][T11568] usb 10-1: USB disconnect, device number 5 [ 814.709502][T22956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3559'. [ 814.750243][ T7192] vhci_hcd: vhci_device speed not set [ 815.222317][T22971] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3562'. [ 815.409910][ T7973] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 815.631477][ T7973] usb 10-1: Using ep0 maxpacket: 8 [ 815.747129][ T7973] usb 10-1: config 0 interface 0 has no altsetting 0 [ 815.749171][ T7973] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 815.752225][ T7973] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.784246][ T7973] usb 10-1: config 0 descriptor?? [ 816.139080][T22994] syzkaller0: entered promiscuous mode [ 816.141007][T22994] syzkaller0: entered allmulticast mode [ 816.537761][T23009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3574'. [ 816.776767][ T7973] usbhid 10-1:0.0: can't add hid device: -71 [ 816.778713][ T7973] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 816.796078][ T7973] usb 10-1: USB disconnect, device number 6 [ 817.176724][T23018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 817.349892][ T9] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 817.509979][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 817.513288][ T9] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 817.517023][ T9] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 817.517094][T23027] 9pnet: Could not find request transport: ôÈvXk|­=00000000000000000000 [ 817.521139][ T9] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 817.529339][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 817.533983][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 817.537477][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.541831][ T9] usb 7-1: Product: syz [ 817.543552][ T9] usb 7-1: Manufacturer: syz [ 817.545835][ T9] usb 7-1: SerialNumber: syz [ 817.767924][T23020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.770898][T23020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.777016][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 818.129970][ T8264] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 818.292959][ T8264] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.296289][ T8264] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 818.298988][ T8264] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 818.301994][ T8264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.313447][ T8264] usb 6-1: config 0 descriptor?? [ 818.344468][ T8264] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 818.346607][ T8264] dvb-usb: bulk message failed: -22 (3/0) [ 818.376675][ T8264] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 818.392373][ T8264] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 818.395685][ T8264] usb 6-1: media controller created [ 818.463679][ T8264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 818.493927][ T8264] dvb-usb: bulk message failed: -22 (6/0) [ 818.495874][ T8264] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 818.513320][ T8264] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input80 [ 818.520644][ T8264] dvb-usb: schedule remote query interval to 150 msecs. [ 818.522938][ T8264] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 818.635235][ T9] usb 7-1: USB disconnect, device number 48 [ 818.652432][ T9] usblp0: removed [ 818.679976][ T8264] dvb-usb: bulk message failed: -22 (1/0) [ 818.681990][ T8264] dvb-usb: error while querying for an remote control event. [ 818.839991][ T8264] dvb-usb: bulk message failed: -22 (1/0) [ 818.842687][ T8264] dvb-usb: error while querying for an remote control event. [ 818.863601][ T10] usb 6-1: USB disconnect, device number 57 [ 818.881764][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 820.950098][T23086] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 820.952315][T23086] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 820.955460][T23086] vhci_hcd vhci_hcd.0: Device attached [ 821.230150][ T7192] usb 50-1: SetAddress Request (10) to port 0 [ 821.236844][ T7192] usb 50-1: new SuperSpeed USB device number 10 using vhci_hcd [ 821.621906][T23087] vhci_hcd: connection reset by peer [ 821.623826][T14045] vhci_hcd: stop threads [ 821.625233][T14045] vhci_hcd: release socket [ 821.629979][T14045] vhci_hcd: disconnect device [ 822.299902][ T9] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 822.519936][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 822.524034][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 822.526578][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 822.540042][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.550686][ T9] usb 7-1: config 0 descriptor?? [ 822.579587][T23114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3605'. [ 822.783240][T23119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.788426][T23119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.020113][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 823.074025][T23124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.530067][T23141] random: crng reseeded on system resumption [ 823.770525][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 823.776392][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 823.800964][ T9] usb 7-1: USB disconnect, device number 49 [ 824.270230][T23161] netlink: 'syz.2.3617': attribute type 10 has an invalid length. [ 824.913323][T23161] macvlan0: entered promiscuous mode [ 825.050253][T23161] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 825.214814][T23170] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3621'. [ 826.339996][ T7192] usb 50-1: device descriptor read/8, error -110 [ 827.005399][ T7192] usb usb50-port1: attempt power cycle [ 827.278487][T23204] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 828.004154][T23212] overlayfs: failed to resolve './file1': -2 [ 828.020418][ T7192] usb usb50-port1: unable to enumerate USB device [ 828.473360][T23221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3633'. [ 828.991659][T23228] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3636'. [ 828.997149][T23228] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3636'. [ 829.496954][T23241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3638'. [ 829.777364][T23250] overlayfs: failed to resolve './file1': -2 [ 830.528579][T23262] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 831.000834][T23279] siw: device registration error -23 [ 831.137490][T23280] hub 8-0:1.0: USB hub found [ 831.141370][T23280] hub 8-0:1.0: 1 port detected [ 831.239917][ T841] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 831.391296][ T841] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 831.394833][ T841] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 831.398032][ T841] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 831.401089][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.405572][T23275] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 831.409758][ T841] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 831.611194][ T841] usb 6-1: USB disconnect, device number 58 [ 831.692589][T23285] overlayfs: failed to resolve './file1': -2 [ 832.005622][T23294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 832.065927][T23296] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3652'. [ 832.448809][T23298] FAULT_INJECTION: forcing a failure. [ 832.448809][T23298] name failslab, interval 1, probability 0, space 0, times 0 [ 832.453989][T23298] CPU: 3 UID: 0 PID: 23298 Comm: syz.5.3653 Not tainted syzkaller #0 PREEMPT(full) [ 832.454012][T23298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 832.454022][T23298] Call Trace: [ 832.454030][T23298] [ 832.454037][T23298] dump_stack_lvl+0x16c/0x1f0 [ 832.454059][T23298] should_fail_ex+0x512/0x640 [ 832.454084][T23298] ? __kmalloc_noprof+0xca/0x880 [ 832.454112][T23298] should_failslab+0xc2/0x120 [ 832.454135][T23298] __kmalloc_noprof+0xdd/0x880 [ 832.454160][T23298] ? __local_bh_enable_ip+0xa4/0x120 [ 832.454178][T23298] ? br_add_if+0x2c7/0x1b70 [ 832.454198][T23298] ? __pfx_br_add_slave+0x10/0x10 [ 832.454220][T23298] ? br_add_if+0x2c7/0x1b70 [ 832.454235][T23298] br_add_if+0x2c7/0x1b70 [ 832.454259][T23298] ? __pfx_br_add_slave+0x10/0x10 [ 832.454279][T23298] do_set_master+0x40f/0x730 [ 832.454300][T23298] ? netif_change_flags+0x80/0x160 [ 832.454319][T23298] do_setlink.constprop.0+0xbd8/0x4380 [ 832.454341][T23298] ? bpf_trace_run2+0x26b/0x590 [ 832.454361][T23298] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 832.454377][T23298] ? bpf_trace_run2+0x2ab/0x590 [ 832.454392][T23298] ? __pfx_bpf_trace_run2+0x10/0x10 [ 832.454421][T23298] ? __lock_acquire+0xb8a/0x1c90 [ 832.454448][T23298] ? rtnl_newlink+0x600/0x2000 [ 832.454463][T23298] ? __bpf_trace_contention_end+0xc9/0x110 [ 832.454485][T23298] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 832.454512][T23298] ? __pfx___mutex_trylock_common+0x10/0x10 [ 832.454536][T23298] ? __pfx___might_resched+0x10/0x10 [ 832.454556][T23298] ? rcu_is_watching+0x12/0xc0 [ 832.454574][T23298] ? trace_contention_end+0xdd/0x130 [ 832.454597][T23298] ? __mutex_lock+0x1c5/0x1060 [ 832.454615][T23298] ? __nla_validate_parse+0x600/0x2880 [ 832.454636][T23298] ? rcu_is_watching+0x12/0xc0 [ 832.454656][T23298] ? __pfx___mutex_lock+0x10/0x10 [ 832.454684][T23298] ? full_name_hash+0xbc/0x110 [ 832.454707][T23298] ? netdev_name_node_lookup+0x127/0x180 [ 832.454733][T23298] rtnl_newlink+0x1446/0x2000 [ 832.454761][T23298] ? __pfx_rtnl_newlink+0x10/0x10 [ 832.454784][T23298] ? kmem_cache_free+0x2d4/0x6c0 [ 832.454800][T23298] ? kfree_skbmem+0x1a4/0x1f0 [ 832.454826][T23298] ? kfree_skbmem+0x1a4/0x1f0 [ 832.454849][T23298] ? __lock_acquire+0x622/0x1c90 [ 832.454873][T23298] ? rcu_is_watching+0x12/0xc0 [ 832.454902][T23298] ? __pfx_rtnl_newlink+0x10/0x10 [ 832.454919][T23298] ? __pfx_rtnl_newlink+0x10/0x10 [ 832.454933][T23298] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 832.454953][T23298] ? __pfx_rtnl_newlink+0x10/0x10 [ 832.454970][T23298] rtnetlink_rcv_msg+0x95e/0xe90 [ 832.454991][T23298] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 832.455017][T23298] ? ref_tracker_free+0x37c/0x830 [ 832.455037][T23298] netlink_rcv_skb+0x158/0x420 [ 832.455055][T23298] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 832.455076][T23298] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 832.455103][T23298] ? netlink_deliver_tap+0x1ae/0xd30 [ 832.455127][T23298] netlink_unicast+0x5aa/0x870 [ 832.455149][T23298] ? __pfx_netlink_unicast+0x10/0x10 [ 832.455178][T23298] netlink_sendmsg+0x8c8/0xdd0 [ 832.455200][T23298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.455222][T23298] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 832.455251][T23298] ____sys_sendmsg+0xa98/0xc70 [ 832.455276][T23298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.455299][T23298] ? get_compat_msghdr+0x11a/0x170 [ 832.455335][T23298] ___sys_sendmsg+0x134/0x1d0 [ 832.455354][T23298] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.455382][T23298] ? find_held_lock+0x2b/0x80 [ 832.455414][T23298] __sys_sendmsg+0x16d/0x220 [ 832.455432][T23298] ? __pfx___sys_sendmsg+0x10/0x10 [ 832.455459][T23298] ? rcu_is_watching+0x12/0xc0 [ 832.455479][T23298] __do_fast_syscall_32+0x7c/0x300 [ 832.455502][T23298] do_fast_syscall_32+0x32/0x80 [ 832.455522][T23298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 832.455542][T23298] RIP: 0023:0xf7f64579 [ 832.455555][T23298] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 832.455571][T23298] RSP: 002b:00000000f545655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 832.455587][T23298] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 832.455599][T23298] RDX: 0000000000044810 RSI: 0000000000000000 RDI: 0000000000000000 [ 832.455608][T23298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 832.455617][T23298] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 832.455628][T23298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 832.455652][T23298] [ 833.366809][T23322] netlink: 14528 bytes leftover after parsing attributes in process `syz.6.3659'. [ 833.385501][T23322] cgroup: Unknown subsys name 'subj_user' [ 833.392434][T23322] hfsplus: unable to find HFS+ superblock [ 834.242606][T23338] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3665'. [ 834.408731][T23346] hub 8-0:1.0: USB hub found [ 834.410711][T23346] hub 8-0:1.0: 1 port detected [ 834.518921][T23352] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20001 [ 834.650662][T23356] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 834.652983][T23356] overlayfs: failed to set xattr on upper [ 834.659197][T23356] overlayfs: ...falling back to redirect_dir=nofollow. [ 834.662932][T23356] overlayfs: ...falling back to index=off. [ 834.665442][T23356] overlayfs: ...falling back to uuid=null. [ 834.667701][T23356] overlayfs: ...falling back to xino=off. [ 834.797554][T23353] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.800368][T23353] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.978159][T23353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.007318][T23353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.256422][T23336] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3664'. [ 835.270144][T14055] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.273124][T14055] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.280784][T14055] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.284569][T14055] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.435903][T23372] lo speed is unknown, defaulting to 1000 [ 835.437791][T23372] lo speed is unknown, defaulting to 1000 [ 835.440556][T23372] lo speed is unknown, defaulting to 1000 [ 835.452888][T23372] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 835.465368][T23372] lo speed is unknown, defaulting to 1000 [ 835.471140][T23372] lo speed is unknown, defaulting to 1000 [ 835.473111][T23376] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 835.474181][T23372] lo speed is unknown, defaulting to 1000 [ 835.480222][T23372] lo speed is unknown, defaulting to 1000 [ 835.498400][ T40] audit: type=1804 audit(1762411237.806:4059): pid=23372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3674" name="/newroot/61/bus" dev="tmpfs" ino=351 res=1 errno=0 [ 835.552723][T23381] siw: device registration error -23 [ 835.564080][ T40] audit: type=1804 audit(1762411237.876:4060): pid=23381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3677" name="/newroot/92/bus" dev="tmpfs" ino=508 res=1 errno=0 [ 835.757806][T23383] netlink: 'syz.6.3678': attribute type 10 has an invalid length. [ 835.760842][T23383] bond0: (slave wlan1): Opening slave failed [ 836.457763][T23398] devpts: Unknown parameter 'o„­ˆíÊÖbíHÓ*ð' [ 836.744469][T23403] lo speed is unknown, defaulting to 1000 [ 836.798355][T23408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3684'. [ 837.261107][T23416] hub 8-0:1.0: USB hub found [ 837.268681][T23416] hub 8-0:1.0: 1 port detected [ 837.808528][T23420] hub 8-0:1.0: USB hub found [ 837.810961][T23420] hub 8-0:1.0: 1 port detected [ 838.244115][T23424] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.3690'. [ 838.264193][T23424] cgroup: Unknown subsys name 'subj_user' [ 838.268593][T23424] hfsplus: unable to find HFS+ superblock [ 838.484326][T23432] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3692'. [ 838.597703][T23438] binder: 23435:23438 ioctl 400c620e 80000540 returned -22 [ 838.891671][T23445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3696'. [ 839.214101][T23450] fuse: Bad value for 'fd' [ 839.252171][T23450] 9pnet: Could not find request transport: xen [ 839.498420][T23461] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3699'. [ 840.091761][T14045] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.193495][T14045] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.285208][T14045] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.340952][T23474] 9pnet_fd: Insufficient options for proto=fd [ 840.448712][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 840.456547][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 840.460738][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 840.474673][T14045] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.479584][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 840.486551][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 840.497164][T18184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 840.502147][T18184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 840.505274][T18184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 840.508634][T18184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 840.514330][T18184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 840.595543][T23481] hub 8-0:1.0: USB hub found [ 840.600616][T23481] hub 8-0:1.0: 1 port detected [ 840.696127][T23484] netlink: 'syz.5.3708': attribute type 1 has an invalid length. [ 840.717049][T23484] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 840.721442][T23484] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 840.772392][T23486] gretap1: entered promiscuous mode [ 840.775520][T23486] bond1: (slave gretap1): making interface the new active one [ 840.778135][T23486] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 840.814438][T23484] macvlan2: entered promiscuous mode [ 840.817274][T23484] macvlan2: entered allmulticast mode [ 840.821141][T23484] bond1: entered promiscuous mode [ 840.823772][T23484] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 840.827958][T23484] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 840.833375][T23484] bond1: left promiscuous mode [ 840.854869][T23477] lo speed is unknown, defaulting to 1000 [ 840.864155][T14045] bridge_slave_1: left allmulticast mode [ 840.866080][T14045] bridge_slave_1: left promiscuous mode [ 840.868005][T14045] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.872697][T14045] bridge_slave_0: left allmulticast mode [ 840.874893][T14045] bridge_slave_0: left promiscuous mode [ 840.876837][T14045] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.311223][T23496] overlayfs: conflicting lowerdir path [ 841.326832][T14045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.333226][T14045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.339684][T14045] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 841.345580][T14045] bond0 (unregistering): Released all slaves [ 841.363726][T23497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3710'. [ 841.595348][T23477] chnl_net:caif_netlink_parms(): no params data found [ 841.713255][T23477] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.716181][T23477] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.718704][T23477] bridge_slave_0: entered allmulticast mode [ 841.722987][T23477] bridge_slave_0: entered promiscuous mode [ 841.726704][T23477] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.729195][T23477] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.731646][T23477] bridge_slave_1: entered allmulticast mode [ 841.734402][T23477] bridge_slave_1: entered promiscuous mode [ 841.772886][T23477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.782061][T23477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.887634][T14045] hsr_slave_0: left promiscuous mode [ 841.892916][T14045] hsr_slave_1: left promiscuous mode [ 841.895759][T14045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.898814][T14045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.902392][T14045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.904871][T14045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.932054][T14045] veth1_macvtap: left promiscuous mode [ 841.933916][T14045] veth0_macvtap: left promiscuous mode [ 841.935725][T14045] veth1_vlan: left promiscuous mode [ 841.937464][T14045] veth0_vlan: left promiscuous mode [ 841.939945][T23518] FAULT_INJECTION: forcing a failure. [ 841.939945][T23518] name failslab, interval 1, probability 0, space 0, times 0 [ 841.944404][T23518] CPU: 3 UID: 0 PID: 23518 Comm: syz.6.3712 Not tainted syzkaller #0 PREEMPT(full) [ 841.944418][T23518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 841.944437][T23518] Call Trace: [ 841.944442][T23518] [ 841.944446][T23518] dump_stack_lvl+0x16c/0x1f0 [ 841.944461][T23518] should_fail_ex+0x512/0x640 [ 841.944478][T23518] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 841.944491][T23518] should_failslab+0xc2/0x120 [ 841.944505][T23518] kmem_cache_alloc_node_noprof+0x78/0x770 [ 841.944516][T23518] ? __alloc_skb+0x2b2/0x380 [ 841.944535][T23518] ? __alloc_skb+0x2b2/0x380 [ 841.944550][T23518] __alloc_skb+0x2b2/0x380 [ 841.944565][T23518] ? __pfx___alloc_skb+0x10/0x10 [ 841.944583][T23518] ? __pfx___might_resched+0x10/0x10 [ 841.944597][T23518] netlink_alloc_large_skb+0x69/0x140 [ 841.944609][T23518] netlink_sendmsg+0x698/0xdd0 [ 841.944623][T23518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.944636][T23518] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 841.944654][T23518] ____sys_sendmsg+0xa98/0xc70 [ 841.944669][T23518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.944681][T23518] ? get_compat_msghdr+0x11a/0x170 [ 841.944704][T23518] ___sys_sendmsg+0x134/0x1d0 [ 841.944715][T23518] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.944732][T23518] ? find_held_lock+0x2b/0x80 [ 841.944752][T23518] __sys_sendmsg+0x16d/0x220 [ 841.944762][T23518] ? __pfx___sys_sendmsg+0x10/0x10 [ 841.944778][T23518] ? rcu_is_watching+0x12/0xc0 [ 841.944792][T23518] __do_fast_syscall_32+0x7c/0x300 [ 841.944812][T23518] do_fast_syscall_32+0x32/0x80 [ 841.944830][T23518] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 841.944849][T23518] RIP: 0023:0xf709d579 [ 841.944868][T23518] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 841.944884][T23518] RSP: 002b:00000000f546c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 841.944899][T23518] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800000c0 [ 841.944908][T23518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 841.944916][T23518] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 841.944925][T23518] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 841.944934][T23518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 841.944954][T23518] [ 842.580312][T18184] Bluetooth: hci1: command tx timeout [ 842.923017][T14045] team0 (unregistering): Port device team_slave_1 removed [ 843.018416][T14045] team0 (unregistering): Port device team_slave_0 removed [ 843.668383][T23477] team0: Port device team_slave_0 added [ 843.674830][T23477] team0: Port device team_slave_1 added [ 843.677973][ T7192] lo speed is unknown, defaulting to 1000 [ 843.679880][ T7192] infiniband syz2: ib_query_port failed (-19) [ 843.732131][T23477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.734873][T23477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.742911][T23477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.753362][T23477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.755555][T23477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.763928][T23477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.775424][T23529] ip6gre1: entered allmulticast mode [ 843.781568][T14061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 843.859717][T23477] hsr_slave_0: entered promiscuous mode [ 843.864598][T23477] hsr_slave_1: entered promiscuous mode [ 843.867088][T23477] debugfs: 'hsr0' already exists in 'hsr' [ 843.868880][T23477] Cannot create hsr debugfs directory [ 843.999697][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3717'. [ 844.147599][T23553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3719'. [ 844.244850][T23553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 844.268922][T23477] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 844.273651][T23477] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 844.281515][T23477] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 844.286534][T23477] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 844.345384][T23477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.372320][T23477] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.381325][T14045] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.383589][T14045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.386813][T14045] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.389024][T14045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.658870][T23477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.664490][T18184] Bluetooth: hci1: command tx timeout [ 844.799692][T23477] veth0_vlan: entered promiscuous mode [ 844.805001][T23477] veth1_vlan: entered promiscuous mode [ 844.823012][T23477] veth0_macvtap: entered promiscuous mode [ 844.826894][T23477] veth1_macvtap: entered promiscuous mode [ 844.838269][T23477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.845898][T23477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.871954][T14059] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.875811][T14059] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.882283][T14059] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.886124][T14059] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.930853][T14057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.933718][T14057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.946347][T14059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.948819][T14059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.374588][T23593] hub 8-0:1.0: USB hub found [ 845.377090][T23593] hub 8-0:1.0: 1 port detected [ 845.625366][T23603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3724'. [ 845.653665][T23603] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3724'. [ 846.240442][ T6122] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 846.409974][ T6122] usb 11-1: Using ep0 maxpacket: 16 [ 846.412979][ T6122] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.417710][ T6122] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 846.420727][ T6122] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.423986][ T6122] usb 11-1: Product: syz [ 846.425453][ T6122] usb 11-1: Manufacturer: syz [ 846.427912][ T6122] usb 11-1: SerialNumber: syz [ 846.486910][T23615] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3728'. [ 846.638213][T23609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.643678][T23609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.740346][T18184] Bluetooth: hci1: command tx timeout [ 846.813631][T23619] hub 8-0:1.0: USB hub found [ 846.830847][T23619] hub 8-0:1.0: 1 port detected [ 847.540053][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 848.116259][T23626] hub 8-0:1.0: USB hub found [ 848.118448][T23626] hub 8-0:1.0: 1 port detected [ 848.775849][T23636] hub 8-0:1.0: USB hub found [ 848.778159][T23636] hub 8-0:1.0: 1 port detected [ 848.820261][T18184] Bluetooth: hci1: command tx timeout [ 848.875869][T23634] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 849.005379][ T29] usb 11-1: USB disconnect, device number 8 [ 849.549880][ T29] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 849.701689][ T29] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 849.704793][ T29] usb 11-1: config 0 interface 0 has no altsetting 0 [ 849.711103][ T29] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 849.713927][ T29] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 849.716461][ T29] usb 11-1: Product: syz [ 849.717958][ T29] usb 11-1: Manufacturer: syz [ 849.719440][ T29] usb 11-1: SerialNumber: syz [ 849.722548][ T29] usb 11-1: config 0 descriptor?? [ 849.726707][ T29] usb 11-1: selecting invalid altsetting 0 [ 849.935109][T23644] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 849.942827][T23644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.947505][T23644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.958199][T23644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.963063][T23644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.970928][T23644] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 849.974216][T11568] usb 11-1: USB disconnect, device number 9 [ 850.114817][ T40] audit: type=1326 audit(1762411252.426:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.1.3742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 850.117974][T23664] loop6: detected capacity change from 0 to 63 [ 850.122035][ T40] audit: type=1326 audit(1762411252.426:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.1.3742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 850.124764][T23664] buffer_io_error: 56 callbacks suppressed [ 850.124778][T23664] Buffer I/O error on dev loop6, logical block 0, async page read [ 850.132767][ T40] audit: type=1326 audit(1762411252.426:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.1.3742" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 850.135006][T23664] Buffer I/O error on dev loop6, logical block 0, async page read [ 850.135956][ T40] audit: type=1326 audit(1762411252.426:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.1.3742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 850.145081][T23664] Buffer I/O error on dev loop6, logical block 0, async page read [ 850.145170][T23664] Buffer I/O error on dev loop6, logical block 0, async page read [ 850.156402][ T40] audit: type=1326 audit(1762411252.426:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.1.3742" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 850.156427][ T40] audit: type=1326 audit(1762411252.426:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.1.3742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 850.156448][ T40] audit: type=1326 audit(1762411252.426:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.1.3742" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 850.156468][ T40] audit: type=1326 audit(1762411252.426:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.1.3742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 850.156489][ T40] audit: type=1326 audit(1762411252.426:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.1.3742" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 850.156510][ T40] audit: type=1326 audit(1762411252.426:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.1.3742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 850.212298][T23664] Buffer I/O error on dev loop6, logical block 0, async page read [ 850.215095][T23664] Buffer I/O error on dev loop6, logical block 0, async page read [ 850.217698][T23664] Buffer I/O error on dev loop6, logical block 0, async page read [ 850.221501][T23664] Buffer I/O error on dev loop6, logical block 0, async page read [ 850.224148][T23664] ldm_validate_partition_table(): Disk read failed. [ 850.226239][T23664] Buffer I/O error on dev loop6, logical block 0, async page read [ 850.228714][T23664] Buffer I/O error on dev loop6, logical block 0, async page read [ 850.231576][T23664] Dev loop6: unable to read RDB block 0 [ 850.233548][T23664] loop6: unable to read partition table [ 850.240162][T23664] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 850.583220][T23679] bridge_slave_0: left allmulticast mode [ 850.585175][T23679] bridge_slave_0: left promiscuous mode [ 850.587311][T23679] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.592196][T23679] bridge_slave_1: left allmulticast mode [ 850.594005][T23679] bridge_slave_1: left promiscuous mode [ 850.595872][T23679] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.610428][T23679] bond0: (slave bond_slave_0): Releasing backup interface [ 850.615886][T23679] bond0: (slave bond_slave_1): Releasing backup interface [ 850.630957][T23679] team0: Port device team_slave_0 removed [ 850.634721][T23679] team0: Port device team_slave_1 removed [ 850.637111][T23679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.641027][T23679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.644051][T23679] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 850.682475][T23681] sp0: Synchronizing with TNC [ 850.831474][T23687] ubi31: attaching mtd0 [ 850.851081][T23687] ubi31: scanning is finished [ 850.853338][T23687] ubi31: empty MTD device detected [ 850.979917][T23689] hub 8-0:1.0: USB hub found [ 850.982474][T23689] hub 8-0:1.0: 1 port detected [ 851.381458][T23687] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 851.401571][T23687] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 851.427445][T23687] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 851.470973][T23687] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 851.473670][T23687] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 851.478197][T23687] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 851.519367][T23687] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 305501260 [ 851.529862][T23687] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 851.541591][T23693] ubi31: background thread "ubi_bgt31d" started, PID 23693 [ 851.959116][T23704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3753'. [ 852.006916][T23706] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3754'. [ 852.009758][T23706] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3754'. [ 852.012969][T23706] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3754'. [ 852.467085][T23736] hub 8-0:1.0: USB hub found [ 852.477517][T23736] hub 8-0:1.0: 1 port detected [ 852.662823][T23740] hub 8-0:1.0: USB hub found [ 852.670219][T23740] hub 8-0:1.0: 1 port detected [ 852.892545][T23738] syzkaller1: entered promiscuous mode [ 852.900562][T23738] syzkaller1: entered allmulticast mode [ 852.912344][T23738] program syz.6.3759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 853.719774][T23748] ubi: mtd0 is already attached to ubi31 [ 853.891477][T23751] netlink: 'syz.6.3767': attribute type 3 has an invalid length. [ 854.008410][T23753] netlink: 'syz.6.3768': attribute type 1 has an invalid length. [ 854.027448][T23753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 854.046695][T23753] bond1: (slave ip6gretap1): making interface the new active one [ 854.050872][T23753] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 854.456063][T23767] hub 8-0:1.0: USB hub found [ 854.458438][T23767] hub 8-0:1.0: 1 port detected [ 854.563766][T23768] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3772'. [ 854.609890][ T61] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 854.763272][T23761] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 854.793678][ T61] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 854.797098][ T61] usb 10-1: can't read configurations, error -71 [ 855.238313][T23775] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 855.240340][T23775] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 855.242912][T23775] vhci_hcd vhci_hcd.0: Device attached [ 855.459995][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 856.079270][T23776] vhci_hcd: connection closed [ 856.079555][T14055] vhci_hcd: stop threads [ 856.083432][T14055] vhci_hcd: release socket [ 856.084910][T14055] vhci_hcd: disconnect device [ 856.338232][ T29] vhci_hcd: vhci_device speed not set [ 856.410493][T23790] ptrace attach of "/syz-executor exec"[21989] was attempted by ""[23790] [ 856.777476][T23818] netlink: 'syz.7.3780': attribute type 12 has an invalid length. [ 857.631658][T23836] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3784'. [ 858.249729][T23842] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 858.252521][T23842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 858.265655][T23842] vhci_hcd vhci_hcd.0: Device attached [ 858.329171][T23855] ip6t_REJECT: ECHOREPLY is not supported [ 858.531850][ T841] usb 49-1: new low-speed USB device number 4 using vhci_hcd [ 858.582209][T23844] vhci_hcd: connection reset by peer [ 858.590760][T14045] vhci_hcd: stop threads [ 858.592298][T14045] vhci_hcd: release socket [ 858.594919][T14045] vhci_hcd: disconnect device [ 860.577730][T23880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3796'. [ 860.857177][T23886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.861210][T23886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.895948][T23886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.898299][T23886] batman_adv: batadv0: Removing interface: batadv_slave_1 ˆÊE µe,ʬª¬'N!N" ¡+"€¨ ü®¢ŒC{“]^ýî;6"ŒÈ é&I0ŒLr¯G£Ö23?¨›‡½ie=Rtåž´¾ÔHð;‚k—–ÀÝY¸º®'Üšó;AlRHô/ûd«‘¥a¿^o*OYa§K÷ª¥àXª=0lbÝÃXÏñžYþ!2­‚YíJaPPÛTð¤µ{Û,ƒä!Xš¸Ä¡éÿ ¸e.›Ï“tZšiâÑ¡Îý!ÄK0(„»‡ºJíF¤Ã!|²Qž½›žÍŠ–¯@» ÃÛÓ°)-â‰Á»b ˆn§õÂH¦L~] |ªq)›qѨBãbT]è[¯[ób‹Â…ò¹6.sÏ,ÆèdLŠ!‰4Þ¬÷'‰•ÖOôø„3V“ÍóiÉ:`üïígk” h: #°¬J%²¸9¤i\†NÔ½¨… ‹—-&Ü®òE¿ÀŸ˜ pØL“hƒ+ŠÑÈÊ–)æcuËøë½¢kI”s’Óð[·ú/UÒ«°háwfÕ&„deF®x‡g¿Wb‚ÚoYcÀ"êPò5¿HdRØãgYÑ%2¹Ãªo´„_?§Ç§MC¿À²ÈãÿK‘Wû~cù,é]ëó¬!¥‡´·_q‡É¶46†}BÖ©«øÛSdÌ´±ºO˜©Ã£ÌD=Ó¶yVª¦žâö¼¦¡ ¼‚Ñ€³ÓJf•Žºšì¹zl{ý*ÃÛYaUæ[ië¾ø;HÝ{¨±Dï4v=}V3¾ó¯íoûèh©$Wùgʘ¿&ÄíçU!£µ ªLÛØj2}Ñ;£ÇÀÏ‘§‘ÊÛ=Î) Æa•”Fcƒ ÔD•n‡S>_ºDO5³=?ÇE\-™cÆä-t”Ïhø‚n\1²<¼L[\ýOiÀ¼Œ$)™q6j‰r£öèïp1^£ÚÃo {˜åÏ\*‚ßÉ¢š ^œ/G-ï@ÇÄ/…¹ÑI~ÑšºO„s»ü£ WÒ†•/ë‰UÅ'^\ô²í«þ|Ÿs ^xÿóH·Ô±"‚ŽUŸÞ _1_vúÓükÝHú“píÑ›„Hð9-étUqEôÃÕ€Þ`vU='ó%×÷§n¦ÚÜ4ÕBMÁÏ—œtÿ×J4¨ZWÐÄÆ]õ¢´yº9L5Ö¦o”áF›²}rýñ%=m¿…Áõ·ã@D®E˜Û_üì” içší׉"§—6˜*sPžNÖ;ªSÌJ[QÄŠ„aï¿Ìßvt½„@Ñ`„^)JV¾ÌïŒ^¶¬žXÔ‚nuÅÏîºuŒëH"Ôü Îö¥AüÓf 6ñò)ÉuöŸ`Ù5M¹3 0ebËgºz³…šU*{{g)Wùº²®j3 `»å¿–½ù¶z&]6yi¸·é4¤¾§mîåÍöçS®ó1_ƒHe‰2˜°ÿ1ô7¤Ê]èýì†Ûs$C}u¹ °0‚¨ÊG\Ùâ¡7YT›ì¯¼å56vøõð¹ÉõnÇYbž;j9:?é¹Ç7*.!½šáŒÇÈrkþôѾEÑñìœgš]Ü{º#Èr®òË÷殟ô¥µÏ–Å')°¡­]κ³BçŸ3r®¤Í¯+búåÈ7Ý·Ö=³Åúƒ,ØU<ÒGv»8ÛàÎC‹u©ôUÕhgÇ.¯/ÐS°Bõ šÝ]¤¡œ2ÍUÙ^p›uð+Ë´GU*Ž4Ó’Ÿ‚ 1ìÕU«Æ' }>VãðJ…6ºÎÓôCÃïb Êšòªz–`èØŒîæ&6cü­0p×µ(Õç 5>°…Öe¿öPŽ­*y¼PÝu4Ä2a/\œîWj~'°&ß.g³¼Z%Ú˯}¨­íü¬™IÇ—wÙΊAƒ–,hÑgzzKüô8^#9ˆ€ºj&(­C„´šI¦°ÜÍÃÜ-žŸƒ (ÄlÚµýêVî]SÒfÇb_òð1šÊ`_·m‘¹DfígغÆZ‡ò· íÞu?±&-òKŸï&Ö¢¸iÇ«aQ.º ‘÷Ÿéµ.hd|‰Žjó½®ÿ£IWopÅGbŸÁKxÚ3§gÓ®Dy¼î'_wô_„DÊ“£œ$°¯ƒ©%´Àæ&Ýaǽb‹’ {`ÞwlÌYÈÑÒgÖÜQB•ù–Eäü¾ýÙ¹‰µ `ò&”_hÝ×µœK‚¼MQÒ©_4Ò_6Ç6¿µdP³|½Úä‘#Æ ‚eÄ„ýòLóW¶=7Ý™SÓÂÖ%ß–o·xRœ¦È‡ãâ;ºz¤TÞ?x6/Èzik×ÙÃ'~É£à»'w«÷4ÖòŽÏÔÊñå¯X`QLTÔ+!ám!ûƒ8 y½¯ðœ~ô>öøs¹O~ǃ}pJl¬®ÄXawh96„m™à1ÊkwnV¢óšfÕNVQòœžqÁ3ˆ5¨$îng‘W&¥¤š1TߺIaº‚YbƒYª· Ó'ü2L/§ýÍ—ZŽœdrêá>Uî˜OœcÂÃ$â½ƒÈ îQ=« Ê7°Ëby‹­#†èD|9àDMœ¿9¯L£Jwêß¹”, u¼ªØïßitѹ<¢Òɽ ºü--©â¾ý;’u¼ ¤|ª³ªLeu:xabk:Zª‚ý§È5‘U¢™„7†i@Ð",¶²ÜhÁb>CoK°Á£ZN‡KNÔaŠÛœHI Š;ZjíÜí_1&Âó !20>å[ 861.116309][ T61] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 861.118671][ T61] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 861.124202][ T61] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 861.126511][ T61] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 861.128808][ T61] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 861.137193][ T61] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 861.139496][ T61] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 861.141961][ T61] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 861.144254][ T61] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 861.146556][ T61] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 861.179820][ T61] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 861.341813][T23901] fido_id[23901]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 861.883053][T11568] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 861.997245][T23920] hub 8-0:1.0: USB hub found [ 861.999505][T23920] hub 8-0:1.0: 1 port detected [ 862.032336][T11568] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 862.035890][T11568] usb 12-1: config 0 interface 0 has no altsetting 0 [ 862.041643][T11568] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 862.044760][T11568] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 862.047614][T11568] usb 12-1: Product: syz [ 862.049285][T11568] usb 12-1: Manufacturer: syz [ 862.051812][T11568] usb 12-1: SerialNumber: syz [ 862.055372][T11568] usb 12-1: config 0 descriptor?? [ 862.061477][T11568] usb 12-1: selecting invalid altsetting 0 [ 862.091254][ T61] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 862.241491][ T61] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 862.245635][ T61] usb 10-1: config 0 interface 0 has no altsetting 0 [ 862.249518][ T61] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 862.253449][ T61] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 862.256828][ T61] usb 10-1: Product: syz [ 862.258601][ T61] usb 10-1: Manufacturer: syz [ 862.260670][ T61] usb 10-1: SerialNumber: syz [ 862.268262][T23912] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 862.270327][ T61] usb 10-1: config 0 descriptor?? [ 862.278047][ T61] usb 10-1: selecting invalid altsetting 0 [ 862.279665][T23912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.286931][T23912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.295686][ T7973] usb 12-1: USB disconnect, device number 2 [ 862.478242][ T8264] usb 10-1: USB disconnect, device number 10 [ 863.069160][T23927] binder: 23921:23927 unknown command 0 [ 863.072060][T23927] binder: 23921:23927 ioctl c0306201 80000680 returned -22 [ 863.088663][T23928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3812'. [ 863.699963][ T841] vhci_hcd: vhci_device speed not set [ 863.970288][T23934] FAULT_INJECTION: forcing a failure. [ 863.970288][T23934] name failslab, interval 1, probability 0, space 0, times 0 [ 863.974600][T23934] CPU: 1 UID: 0 PID: 23934 Comm: syz.6.3815 Not tainted syzkaller #0 PREEMPT(full) [ 863.974621][T23934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 863.974631][T23934] Call Trace: [ 863.974637][T23934] [ 863.974643][T23934] dump_stack_lvl+0x16c/0x1f0 [ 863.974664][T23934] should_fail_ex+0x512/0x640 [ 863.974681][T23934] ? __kmalloc_noprof+0xca/0x880 [ 863.974699][T23934] should_failslab+0xc2/0x120 [ 863.974714][T23934] __kmalloc_noprof+0xdd/0x880 [ 863.974729][T23934] ? __kernel_text_address+0xd/0x40 [ 863.974739][T23934] ? unwind_get_return_address+0x59/0xa0 [ 863.974751][T23934] ? constrain_params_by_rules+0x175/0xca0 [ 863.974768][T23934] ? constrain_params_by_rules+0x175/0xca0 [ 863.974799][T23934] constrain_params_by_rules+0x175/0xca0 [ 863.974818][T23934] ? stack_trace_save+0x8e/0xc0 [ 863.974833][T23934] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 863.974851][T23934] ? __kasan_kmalloc+0xaa/0xb0 [ 863.974862][T23934] ? snd_pcm_oss_change_params_locked+0x6f4/0x3a30 [ 863.974877][T23934] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 863.974890][T23934] ? snd_pcm_oss_write+0x4c2/0xa10 [ 863.974909][T23934] ? snd_interval_refine+0x2fa/0x580 [ 863.974927][T23934] snd_pcm_hw_refine+0x7de/0xad0 [ 863.974944][T23934] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 863.974965][T23934] ? snd_interval_refine+0x2fa/0x580 [ 863.974977][T23934] snd_pcm_oss_change_params_locked+0x2093/0x3a30 [ 863.974994][T23934] ? preempt_count_sub+0x97/0x160 [ 863.975007][T23934] ? __mutex_lock+0x1c5/0x1060 [ 863.975020][T23934] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 863.975045][T23934] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 863.975061][T23934] snd_pcm_oss_write+0x4c2/0xa10 [ 863.975076][T23934] ? bpf_lsm_file_permission+0x9/0x10 [ 863.975088][T23934] ? security_file_permission+0x71/0x210 [ 863.975102][T23934] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 863.975116][T23934] vfs_write+0x2a0/0x11d0 [ 863.975131][T23934] ? __pfx_vfs_write+0x10/0x10 [ 863.975141][T23934] ? find_held_lock+0x2b/0x80 [ 863.975152][T23934] ? __fget_files+0x204/0x3c0 [ 863.975165][T23934] ? __fget_files+0x20e/0x3c0 [ 863.975174][T23934] ? handle_mm_fault+0x1e0/0xd10 [ 863.975193][T23934] ksys_write+0x12a/0x250 [ 863.975204][T23934] ? __pfx_ksys_write+0x10/0x10 [ 863.975217][T23934] ? rcu_is_watching+0x12/0xc0 [ 863.975230][T23934] __do_fast_syscall_32+0x7c/0x300 [ 863.975244][T23934] do_fast_syscall_32+0x32/0x80 [ 863.975257][T23934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 863.975270][T23934] RIP: 0023:0xf709d579 [ 863.975278][T23934] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 863.975289][T23934] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 863.975299][T23934] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 863.975306][T23934] RDX: 000000000000fdbc RSI: 0000000000000000 RDI: 0000000000000000 [ 863.975312][T23934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 863.975318][T23934] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 863.975324][T23934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 863.975338][T23934] [ 863.979591][T23936] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3814'. [ 864.060474][T23940] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3816'. [ 864.098916][T23940] nbd: must specify a size in bytes for the device [ 864.360101][ T8264] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 864.497388][T23954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3819'. [ 864.543597][ T8264] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 864.547090][ T8264] usb 12-1: config 0 interface 0 has no altsetting 0 [ 864.561561][ T8264] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 864.565375][ T8264] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 864.568688][ T8264] usb 12-1: Product: syz [ 864.570592][ T8264] usb 12-1: Manufacturer: syz [ 864.572565][ T8264] usb 12-1: SerialNumber: syz [ 864.576412][ T8264] usb 12-1: config 0 descriptor?? [ 864.581280][ T8264] usb 12-1: selecting invalid altsetting 0 [ 864.782699][T23949] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 864.788195][ T7973] usb 12-1: USB disconnect, device number 3 [ 865.598013][T23965] hub 8-0:1.0: USB hub found [ 865.599986][T23965] hub 8-0:1.0: 1 port detected [ 865.666583][T23966] ptrace attach of "/syz-executor exec"[22095] was attempted by ""[23966] [ 866.319865][ T7973] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 866.342367][T23982] hub 8-0:1.0: USB hub found [ 866.344966][T23982] hub 8-0:1.0: 1 port detected [ 866.489965][ T7973] usb 6-1: Using ep0 maxpacket: 16 [ 866.495238][ T7973] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 866.498612][ T7973] usb 6-1: config 0 has no interface number 0 [ 866.504910][ T7973] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 866.508621][ T7973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.512123][ T7973] usb 6-1: Product: syz [ 866.513836][ T7973] usb 6-1: Manufacturer: syz [ 866.515739][ T7973] usb 6-1: SerialNumber: syz [ 866.520290][ T7973] usb 6-1: config 0 descriptor?? [ 866.524470][ T7973] hub 6-1:0.132: bad descriptor, ignoring hub [ 866.526750][ T7973] hub 6-1:0.132: probe with driver hub failed with error -5 [ 866.532270][ T7973] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.132/input/input82 [ 867.419917][ T7973] usb 11-1: new full-speed USB device number 10 using dummy_hcd [ 867.441593][T23994] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3832'. [ 867.581044][ T7973] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 867.584175][ T7973] usb 11-1: config 0 interface 0 has no altsetting 0 [ 867.587833][ T7973] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 867.590915][ T7973] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 867.593493][ T7973] usb 11-1: Product: syz [ 867.594848][ T7973] usb 11-1: Manufacturer: syz [ 867.596366][ T7973] usb 11-1: SerialNumber: syz [ 867.599088][ T7973] usb 11-1: config 0 descriptor?? [ 867.606809][ T7973] usb 11-1: selecting invalid altsetting 0 [ 867.814301][T23993] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 867.823713][ T10] usb 11-1: USB disconnect, device number 10 [ 868.047288][T23998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3834'. [ 868.119118][T24002] FAULT_INJECTION: forcing a failure. [ 868.119118][T24002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.123746][T24002] CPU: 2 UID: 0 PID: 24002 Comm: syz.7.3836 Not tainted syzkaller #0 PREEMPT(full) [ 868.123760][T24002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 868.123767][T24002] Call Trace: [ 868.123771][T24002] [ 868.123775][T24002] dump_stack_lvl+0x16c/0x1f0 [ 868.123791][T24002] should_fail_ex+0x512/0x640 [ 868.123810][T24002] _copy_from_user+0x2e/0xd0 [ 868.123827][T24002] memdup_user+0x6b/0xe0 [ 868.123840][T24002] strndup_user+0x78/0xe0 [ 868.123852][T24002] __ia32_sys_mount+0x17f/0x310 [ 868.123866][T24002] ? __pfx___ia32_sys_mount+0x10/0x10 [ 868.123879][T24002] ? rcu_is_watching+0x12/0xc0 [ 868.123894][T24002] __do_fast_syscall_32+0x7c/0x300 [ 868.123908][T24002] do_fast_syscall_32+0x32/0x80 [ 868.123927][T24002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 868.123941][T24002] RIP: 0023:0xf700d579 [ 868.123949][T24002] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 868.123960][T24002] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 868.123970][T24002] RAX: ffffffffffffffda RBX: 00000000800013c0 RCX: 0000000080001400 [ 868.123990][T24002] RDX: 0000000080001440 RSI: 0000000000000800 RDI: 00000000800002c0 [ 868.123996][T24002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 868.124002][T24002] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 868.124008][T24002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 868.124022][T24002] [ 869.249987][ T60] usb 6-1: USB disconnect, device number 59 [ 869.550732][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.552788][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.589050][T24023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3841'. [ 870.654430][T24024] ptrace attach of "/syz-executor exec"[22095] was attempted by ""[24024] [ 871.107867][T24030] hub 8-0:1.0: USB hub found [ 871.177420][T24030] hub 8-0:1.0: 1 port detected [ 871.459909][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 871.495074][T24035] netlink: 'syz.6.3844': attribute type 2 has an invalid length. [ 871.789392][T24042] FAULT_INJECTION: forcing a failure. [ 871.789392][T24042] name failslab, interval 1, probability 0, space 0, times 0 [ 871.794144][T24042] CPU: 2 UID: 0 PID: 24042 Comm: syz.1.3846 Not tainted syzkaller #0 PREEMPT(full) [ 871.794159][T24042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 871.794165][T24042] Call Trace: [ 871.794170][T24042] [ 871.794175][T24042] dump_stack_lvl+0x16c/0x1f0 [ 871.794190][T24042] should_fail_ex+0x512/0x640 [ 871.794206][T24042] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 871.794220][T24042] should_failslab+0xc2/0x120 [ 871.794234][T24042] kmem_cache_alloc_node_noprof+0x78/0x770 [ 871.794244][T24042] ? __alloc_skb+0x2b2/0x380 [ 871.794263][T24042] ? __alloc_skb+0x2b2/0x380 [ 871.794278][T24042] ? __pfx_netlink_insert+0x10/0x10 [ 871.794288][T24042] __alloc_skb+0x2b2/0x380 [ 871.794303][T24042] ? __pfx___alloc_skb+0x10/0x10 [ 871.794320][T24042] ? netlink_autobind.isra.0+0x158/0x370 [ 871.794334][T24042] netlink_alloc_large_skb+0x69/0x140 [ 871.794346][T24042] netlink_sendmsg+0x698/0xdd0 [ 871.794359][T24042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.794372][T24042] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 871.794390][T24042] ____sys_sendmsg+0xa98/0xc70 [ 871.794403][T24042] ? btrfs_use_block_rsv+0x830/0x860 [ 871.794418][T24042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 871.794430][T24042] ? get_compat_msghdr+0x11a/0x170 [ 871.794454][T24042] ___sys_sendmsg+0x134/0x1d0 [ 871.794465][T24042] ? __pfx____sys_sendmsg+0x10/0x10 [ 871.794481][T24042] ? find_held_lock+0x2b/0x80 [ 871.794501][T24042] __sys_sendmsg+0x16d/0x220 [ 871.794511][T24042] ? __pfx___sys_sendmsg+0x10/0x10 [ 871.794527][T24042] ? rcu_is_watching+0x12/0xc0 [ 871.794540][T24042] __do_fast_syscall_32+0x7c/0x300 [ 871.794554][T24042] do_fast_syscall_32+0x32/0x80 [ 871.794567][T24042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 871.794581][T24042] RIP: 0023:0xf705d579 [ 871.794595][T24042] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 871.794606][T24042] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 871.794616][T24042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 871.794622][T24042] RDX: 0000000004040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 871.794629][T24042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 871.794635][T24042] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 871.794640][T24042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 871.794666][T24042] [ 871.903166][T24046] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3845'. [ 873.648578][T24069] hub 8-0:1.0: USB hub found [ 873.650889][T24069] hub 8-0:1.0: 1 port detected [ 874.837069][T24085] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3856'. [ 875.172863][T24093] hub 8-0:1.0: USB hub found [ 875.175400][T24093] hub 8-0:1.0: 1 port detected [ 875.474182][T24091] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 875.476273][T24091] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 875.479238][T24091] vhci_hcd vhci_hcd.0: Device attached [ 875.635526][T24092] vhci_hcd: connection closed [ 875.635862][T14042] vhci_hcd: stop threads [ 875.639026][T14042] vhci_hcd: release socket [ 875.640991][T14042] vhci_hcd: disconnect device [ 875.659905][ T8264] vhci_hcd: vhci_device speed not set [ 876.765543][T24122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3868'. [ 877.740236][T24124] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 877.742628][T24124] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 877.745944][T24128] vhci_hcd: connection closed [ 877.745988][T24124] vhci_hcd vhci_hcd.0: Device attached [ 877.747298][T24131] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3869'. [ 877.749140][T14052] vhci_hcd: stop threads [ 877.754796][T14052] vhci_hcd: release socket [ 877.756374][T14052] vhci_hcd: disconnect device [ 878.043623][T24138] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3870'. [ 878.213753][T24141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3871'. [ 882.033476][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3885'. [ 882.037098][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3885'. [ 882.089083][T24181] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3884'. [ 882.099025][T24181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3884'. [ 882.445309][T24196] hub 8-0:1.0: USB hub found [ 882.447146][T24196] hub 8-0:1.0: 1 port detected [ 886.975482][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 886.975493][ T40] audit: type=1326 audit(1762411289.286:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.6.3894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 887.084779][ T40] audit: type=1326 audit(1762411289.286:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.6.3894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 887.100395][ T40] audit: type=1326 audit(1762411289.296:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.6.3894" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 887.107593][ T40] audit: type=1326 audit(1762411289.296:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.6.3894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 887.114947][ T40] audit: type=1326 audit(1762411289.296:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.6.3894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 887.122006][ T40] audit: type=1326 audit(1762411289.296:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.6.3894" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 887.128806][ T40] audit: type=1326 audit(1762411289.296:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.6.3894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 887.139410][ T40] audit: type=1326 audit(1762411289.296:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.6.3894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 887.146599][ T40] audit: type=1326 audit(1762411289.296:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.6.3894" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 887.154881][ T40] audit: type=1326 audit(1762411289.296:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.6.3894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 887.593669][T24248] hub 8-0:1.0: USB hub found [ 887.597452][T24248] hub 8-0:1.0: 1 port detected [ 888.151994][T24258] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 888.154083][T24258] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 888.156741][T24258] vhci_hcd vhci_hcd.0: Device attached [ 888.198437][T24257] hub 8-0:1.0: USB hub found [ 888.200831][T24257] hub 8-0:1.0: 1 port detected [ 888.284792][T24259] vhci_hcd: connection closed [ 888.290227][T14042] vhci_hcd: stop threads [ 888.294157][T14042] vhci_hcd: release socket [ 888.296027][T14042] vhci_hcd: disconnect device [ 889.340241][T24280] hub 8-0:1.0: USB hub found [ 889.342375][T24280] hub 8-0:1.0: 1 port detected [ 889.672796][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3911'. [ 889.684724][T24284] 9pnet_fd: Insufficient options for proto=fd [ 890.091546][T24290] hub 8-0:1.0: USB hub found [ 890.093742][T24290] hub 8-0:1.0: 1 port detected [ 891.228975][T24300] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3917'. [ 891.827913][T24307] hub 8-0:1.0: USB hub found [ 891.830291][T24307] hub 8-0:1.0: 1 port detected [ 892.609465][T24312] hub 8-0:1.0: USB hub found [ 892.613877][T24312] hub 8-0:1.0: 1 port detected [ 893.093630][T24323] hub 8-0:1.0: USB hub found [ 893.098342][T24323] hub 8-0:1.0: 1 port detected [ 893.131626][T24324] hub 8-0:1.0: USB hub found [ 893.133782][T24324] hub 8-0:1.0: 1 port detected [ 893.365708][T24328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3924'. [ 894.159513][ T7973] IPVS: starting estimator thread 0... [ 894.162894][T24333] hub 8-0:1.0: USB hub found [ 894.165784][T24333] hub 8-0:1.0: 1 port detected [ 894.250277][T24340] IPVS: using max 42 ests per chain, 100800 per kthread [ 894.711998][T24344] FAULT_INJECTION: forcing a failure. [ 894.711998][T24344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.716699][T24344] CPU: 3 UID: 0 PID: 24344 Comm: syz.6.3929 Not tainted syzkaller #0 PREEMPT(full) [ 894.716715][T24344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 894.716722][T24344] Call Trace: [ 894.716728][T24344] [ 894.716733][T24344] dump_stack_lvl+0x16c/0x1f0 [ 894.716752][T24344] should_fail_ex+0x512/0x640 [ 894.716771][T24344] _copy_to_user+0x32/0xd0 [ 894.716788][T24344] simple_read_from_buffer+0xcb/0x170 [ 894.716807][T24344] proc_fail_nth_read+0x197/0x240 [ 894.716820][T24344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 894.716832][T24344] ? rw_verify_area+0xcf/0x6c0 [ 894.716842][T24344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 894.716853][T24344] vfs_read+0x1e4/0xcf0 [ 894.716867][T24344] ? __pfx_vfs_read+0x10/0x10 [ 894.716877][T24344] ? find_held_lock+0x2b/0x80 [ 894.716893][T24344] ? __fget_files+0x20e/0x3c0 [ 894.716907][T24344] ksys_read+0x12a/0x250 [ 894.716918][T24344] ? __pfx_ksys_read+0x10/0x10 [ 894.716930][T24344] ? rcu_is_watching+0x12/0xc0 [ 894.716943][T24344] __do_fast_syscall_32+0x7c/0x300 [ 894.716958][T24344] do_fast_syscall_32+0x32/0x80 [ 894.716971][T24344] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 894.716985][T24344] RIP: 0023:0xf709d579 [ 894.716994][T24344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 894.717004][T24344] RSP: 002b:00000000f548d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 894.717014][T24344] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f548d620 [ 894.717021][T24344] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 894.717027][T24344] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 894.717033][T24344] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 894.717039][T24344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 894.717053][T24344] [ 894.859487][T24347] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3930'. [ 894.962152][T24352] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 894.964548][T24352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 894.967677][T24352] vhci_hcd vhci_hcd.0: Device attached [ 895.717810][T24353] vhci_hcd: connection closed [ 895.718324][T14057] vhci_hcd: stop threads [ 895.721488][T14057] vhci_hcd: release socket [ 895.722986][T14057] vhci_hcd: disconnect device [ 895.800116][ T8264] vhci_hcd: vhci_device speed not set [ 896.019990][ T7973] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 896.159990][T24363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3935'. [ 896.181490][ T7973] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 896.185422][ T7973] usb 12-1: config 0 interface 0 has no altsetting 0 [ 896.235214][ T7973] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 896.239192][ T7973] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 896.244489][ T7973] usb 12-1: Product: syz [ 896.247256][ T7973] usb 12-1: Manufacturer: syz [ 896.249552][ T7973] usb 12-1: SerialNumber: syz [ 896.253946][ T7973] usb 12-1: config 0 descriptor?? [ 896.269630][ T7973] usb 12-1: selecting invalid altsetting 0 [ 896.463377][ T7973] usb 12-1: USB disconnect, device number 4 [ 896.561313][T24371] hub 8-0:1.0: USB hub found [ 896.563460][T24371] hub 8-0:1.0: 1 port detected [ 897.194443][T24378] IPVS: set_ctl: invalid protocol: 43 172.30.1.2:20001 [ 897.483120][T24379] ptrace attach of "/syz-executor exec"[23477] was attempted by ""[24379] [ 897.537629][T24387] hub 8-0:1.0: USB hub found [ 897.539633][T24387] hub 8-0:1.0: 1 port detected [ 898.432505][T24396] netlink: 'syz.5.3951': attribute type 1 has an invalid length. [ 898.434931][T24396] netlink: 'syz.5.3951': attribute type 7 has an invalid length. [ 898.437415][T24396] netlink: 'syz.5.3951': attribute type 8 has an invalid length. [ 898.439892][T24396] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3951'. [ 898.640174][T24402] hub 8-0:1.0: USB hub found [ 898.642434][T24402] hub 8-0:1.0: 1 port detected [ 899.130570][ T24] usb 11-1: new full-speed USB device number 11 using dummy_hcd [ 899.299289][ T24] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 899.310314][ T24] usb 11-1: config 0 interface 0 has no altsetting 0 [ 899.317867][ T24] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 899.328877][ T24] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 899.332370][ T24] usb 11-1: Product: syz [ 899.333890][ T24] usb 11-1: Manufacturer: syz [ 899.335543][ T24] usb 11-1: SerialNumber: syz [ 899.351261][ T24] usb 11-1: config 0 descriptor?? [ 899.365232][ T24] usb 11-1: selecting invalid altsetting 0 [ 899.615849][ T24] usb 11-1: USB disconnect, device number 11 [ 899.935770][T24422] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 899.938006][T24422] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 899.941320][T24422] vhci_hcd vhci_hcd.0: Device attached [ 899.973666][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 899.973723][ T40] audit: type=1800 audit(1762411302.286:4124): pid=24422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3946" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 900.229970][ T29] usb 52-1: SetAddress Request (2) to port 0 [ 900.232600][ T29] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 900.256823][T24423] vhci_hcd: connection closed [ 900.257181][T14059] vhci_hcd: stop threads [ 900.263958][T14059] vhci_hcd: release socket [ 900.265512][T14059] vhci_hcd: disconnect device [ 900.577246][T24429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3949'. [ 901.460337][T24442] ptrace attach of "/syz-executor exec"[21989] was attempted by ""[24442] [ 901.509894][ T7973] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 901.640166][ T7973] usb 6-1: device descriptor read/64, error -71 [ 901.883588][ T7973] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 902.009944][ T7973] usb 6-1: device descriptor read/64, error -71 [ 902.121293][ T7973] usb usb6-port1: attempt power cycle [ 902.167969][T24455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3960'. [ 902.243966][T24456] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 902.246746][T24456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 902.251526][T24456] vhci_hcd vhci_hcd.0: Device attached [ 902.479958][ T7973] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 902.499945][ T841] usb 49-1: new low-speed USB device number 6 using vhci_hcd [ 902.502808][ T7973] usb 6-1: device descriptor read/8, error -71 [ 902.752025][ T7973] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 902.800664][ T7973] usb 6-1: device descriptor read/8, error -71 [ 902.820342][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 902.831602][T24457] vhci_hcd: connection reset by peer [ 902.834211][T14057] vhci_hcd: stop threads [ 902.836028][T14057] vhci_hcd: release socket [ 902.837874][T14057] vhci_hcd: disconnect device [ 902.920304][ T7973] usb usb6-port1: unable to enumerate USB device [ 903.300054][T18184] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 903.416220][T24470] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3964'. [ 903.419697][T24470] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3964'. [ 903.438934][T24470] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3964'. [ 903.442096][T24470] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3964'. [ 903.482119][T24470] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3964'. [ 903.485524][T24470] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3964'. [ 903.637560][T24476] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3963'. [ 904.139929][ T7973] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 904.289932][ T7973] usb 12-1: Using ep0 maxpacket: 16 [ 904.292863][ T7973] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.296220][ T7973] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.299399][ T7973] usb 12-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 904.304769][ T7973] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.308702][ T7973] usb 12-1: config 0 descriptor?? [ 904.720086][ T7973] usbhid 12-1:0.0: can't add hid device: -32 [ 904.720646][T24490] ptrace attach of "/syz-executor exec"[21989] was attempted by ""[24490] [ 904.723046][T24482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3967'. [ 904.728834][ T7973] usbhid 12-1:0.0: probe with driver usbhid failed with error -32 [ 904.747461][T24482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 904.815657][T24495] binder: 24481:24495 ioctl c0306201 800002c0 returned -14 [ 904.856329][T24482] bond1 (unregistering): Released all slaves [ 904.965412][ T7973] usb 12-1: USB disconnect, device number 5 [ 905.170574][T24503] ptrace attach of "/syz-executor exec"[22095] was attempted by ""[24503] [ 905.309988][ T29] usb 52-1: device descriptor read/8, error -110 [ 905.716910][ T29] usb usb52-port1: attempt power cycle [ 905.747606][T24516] __nla_validate_parse: 1 callbacks suppressed [ 905.747622][T24516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3974'. [ 906.360410][ T29] usb usb52-port1: unable to enumerate USB device [ 906.669259][T24525] hub 8-0:1.0: USB hub found [ 906.671701][T24525] hub 8-0:1.0: 1 port detected [ 906.715442][T24527] FAULT_INJECTION: forcing a failure. [ 906.715442][T24527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.719712][T24527] CPU: 0 UID: 0 PID: 24527 Comm: syz.1.3981 Not tainted syzkaller #0 PREEMPT(full) [ 906.719739][T24527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 906.719746][T24527] Call Trace: [ 906.719751][T24527] [ 906.719755][T24527] dump_stack_lvl+0x16c/0x1f0 [ 906.719772][T24527] should_fail_ex+0x512/0x640 [ 906.719803][T24527] _copy_to_user+0x32/0xd0 [ 906.719821][T24527] simple_read_from_buffer+0xcb/0x170 [ 906.719839][T24527] proc_fail_nth_read+0x197/0x240 [ 906.719852][T24527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 906.719864][T24527] ? rw_verify_area+0xcf/0x6c0 [ 906.719874][T24527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 906.719885][T24527] vfs_read+0x1e4/0xcf0 [ 906.719900][T24527] ? __pfx_vfs_read+0x10/0x10 [ 906.719909][T24527] ? find_held_lock+0x2b/0x80 [ 906.719925][T24527] ? __fget_files+0x20e/0x3c0 [ 906.719939][T24527] ksys_read+0x12a/0x250 [ 906.719951][T24527] ? __pfx_ksys_read+0x10/0x10 [ 906.719963][T24527] ? rcu_is_watching+0x12/0xc0 [ 906.719977][T24527] __do_fast_syscall_32+0x7c/0x300 [ 906.719991][T24527] do_fast_syscall_32+0x32/0x80 [ 906.720004][T24527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 906.720017][T24527] RIP: 0023:0xf705d579 [ 906.720026][T24527] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 906.720037][T24527] RSP: 002b:00000000f544d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 906.720047][T24527] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f544d620 [ 906.720054][T24527] RDX: 000000000000000f RSI: 00000000f73f6ff4 RDI: 0000000000000000 [ 906.720060][T24527] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 906.720066][T24527] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 906.720072][T24527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 906.720085][T24527] [ 907.016105][T24535] netlink: 'syz.1.3984': attribute type 4 has an invalid length. [ 907.610533][ T841] vhci_hcd: vhci_device speed not set [ 907.750187][ T840] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 907.757419][T24552] hub 8-0:1.0: USB hub found [ 907.763950][T24552] hub 8-0:1.0: 1 port detected [ 907.776226][T24551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3987'. [ 907.902061][ T840] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.906381][ T840] usb 6-1: config 0 has no interfaces? [ 907.908746][ T840] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 907.912770][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.918168][ T840] usb 6-1: config 0 descriptor?? [ 908.342311][ T840] usb 6-1: string descriptor 0 read error: -71 [ 908.348277][ T840] usb 6-1: USB disconnect, device number 64 [ 908.447489][T24558] hub 8-0:1.0: USB hub found [ 908.449776][T24558] hub 8-0:1.0: 1 port detected [ 908.707303][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3990'. [ 908.718110][T24567] macvlan2: entered allmulticast mode [ 908.721197][T24567] veth1_vlan: entered allmulticast mode [ 908.725855][T24567] veth1_vlan: left allmulticast mode [ 908.765105][T24569] /dev/nullb0: Can't open blockdev [ 910.579917][T18184] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 910.850345][T24592] hub 8-0:1.0: USB hub found [ 910.852297][T24592] hub 8-0:1.0: 1 port detected [ 911.054722][T24594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3999'. [ 911.408482][T24600] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.499163][T24600] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.572943][T24600] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.703571][T24600] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.811260][T14061] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.824813][T14061] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.837781][T14061] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.847620][T14042] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.336794][T24621] FAULT_INJECTION: forcing a failure. [ 912.336794][T24621] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 912.341022][T24621] CPU: 1 UID: 0 PID: 24621 Comm: syz.1.4010 Not tainted syzkaller #0 PREEMPT(full) [ 912.341037][T24621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 912.341044][T24621] Call Trace: [ 912.341047][T24621] [ 912.341052][T24621] dump_stack_lvl+0x16c/0x1f0 [ 912.341067][T24621] should_fail_ex+0x512/0x640 [ 912.341086][T24621] should_fail_alloc_page+0xe7/0x130 [ 912.341101][T24621] prepare_alloc_pages+0x3c2/0x610 [ 912.341117][T24621] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 912.341130][T24621] ? rcu_is_watching+0x12/0xc0 [ 912.341142][T24621] ? trace_mm_page_alloc+0x11f/0x1a0 [ 912.341156][T24621] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 912.341168][T24621] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 912.341181][T24621] ? is_bpf_text_address+0x8a/0x1a0 [ 912.341202][T24621] ? bpf_ksym_find+0x124/0x1c0 [ 912.341214][T24621] ? is_bpf_text_address+0x94/0x1a0 [ 912.341229][T24621] ? kernel_text_address+0x8d/0x100 [ 912.341246][T24621] ? __kernel_text_address+0xd/0x40 [ 912.341255][T24621] ? unwind_get_return_address+0x59/0xa0 [ 912.341270][T24621] alloc_pages_bulk_noprof+0x71c/0x1410 [ 912.341281][T24621] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 912.341300][T24621] ? policy_nodemask+0xea/0x4e0 [ 912.341315][T24621] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 912.341327][T24621] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 912.341346][T24621] kasan_populate_vmalloc+0x112/0x2d0 [ 912.341358][T24621] ? alloc_vmap_area+0x8b5/0x29e0 [ 912.341373][T24621] alloc_vmap_area+0x960/0x29e0 [ 912.341392][T24621] ? __pfx_alloc_vmap_area+0x10/0x10 [ 912.341408][T24621] __get_vm_area_node+0x1ca/0x330 [ 912.341425][T24621] __vmalloc_node_range_noprof+0x271/0x1480 [ 912.341440][T24621] ? bpf_check+0x1bf/0xbdd0 [ 912.341457][T24621] ? find_held_lock+0x2b/0x80 [ 912.341468][T24621] ? bpf_check+0x1bf/0xbdd0 [ 912.341482][T24621] ? rcu_is_watching+0x12/0xc0 [ 912.341492][T24621] ? ___kmalloc_large_node+0x114/0x160 [ 912.341508][T24621] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 912.341523][T24621] ? rcu_is_watching+0x12/0xc0 [ 912.341535][T24621] ? rcu_is_watching+0x12/0xc0 [ 912.341545][T24621] ? trace_kmalloc+0x2b/0xd0 [ 912.341557][T24621] ? __kvmalloc_node_noprof.cold+0x61/0x66 [ 912.341575][T24621] ? bpf_check+0x1bf/0xbdd0 [ 912.341593][T24621] __vmalloc_node_noprof+0xad/0xf0 [ 912.341612][T24621] ? bpf_check+0x1bf/0xbdd0 [ 912.341632][T24621] bpf_check+0x1bf/0xbdd0 [ 912.341651][T24621] ? __lock_acquire+0x622/0x1c90 [ 912.341670][T24621] ? css_rstat_updated+0x1c2/0x510 [ 912.341686][T24621] ? __pfx_css_rstat_updated+0x10/0x10 [ 912.341707][T24621] ? __lock_acquire+0xb8a/0x1c90 [ 912.341731][T24621] ? __pfx_bpf_check+0x10/0x10 [ 912.341759][T24621] ? find_held_lock+0x2b/0x80 [ 912.341778][T24621] ? rcu_is_watching+0x12/0xc0 [ 912.341793][T24621] ? ktime_get_with_offset+0x26e/0x3b0 [ 912.341814][T24621] ? __asan_memset+0x23/0x50 [ 912.341828][T24621] ? lsm_blob_alloc+0x2b/0x90 [ 912.341847][T24621] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 912.341871][T24621] bpf_prog_load+0x112e/0x2850 [ 912.341891][T24621] ? __pfx_bpf_prog_load+0x10/0x10 [ 912.341903][T24621] ? __lock_acquire+0xb8a/0x1c90 [ 912.341946][T24621] __sys_bpf+0x3e72/0x4980 [ 912.341964][T24621] ? __pfx___sys_bpf+0x10/0x10 [ 912.341977][T24621] ? find_held_lock+0x2b/0x80 [ 912.341997][T24621] ? find_held_lock+0x2b/0x80 [ 912.342017][T24621] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 912.342050][T24621] ? fput+0x9b/0xd0 [ 912.342071][T24621] ? ksys_write+0x1ac/0x250 [ 912.342086][T24621] ? __pfx_ksys_write+0x10/0x10 [ 912.342108][T24621] __ia32_sys_bpf+0x76/0xe0 [ 912.342126][T24621] __do_fast_syscall_32+0x7c/0x300 [ 912.342149][T24621] do_fast_syscall_32+0x32/0x80 [ 912.342169][T24621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 912.342195][T24621] RIP: 0023:0xf705d579 [ 912.342207][T24621] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 912.342221][T24621] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 912.342237][T24621] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000600 [ 912.342246][T24621] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 912.342252][T24621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 912.342258][T24621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 912.342264][T24621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 912.342277][T24621] [ 912.342306][T24621] syz.1.4010: vmalloc error: size 264, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 912.485884][T24621] CPU: 0 UID: 0 PID: 24621 Comm: syz.1.4010 Not tainted syzkaller #0 PREEMPT(full) [ 912.485899][T24621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 912.485906][T24621] Call Trace: [ 912.485910][T24621] [ 912.485914][T24621] dump_stack_lvl+0x16c/0x1f0 [ 912.485930][T24621] warn_alloc+0x248/0x3a0 [ 912.485952][T24621] ? __pfx_warn_alloc+0x10/0x10 [ 912.485966][T24621] ? kfree+0x2b8/0x6d0 [ 912.485974][T24621] ? __get_vm_area_node+0x2cd/0x330 [ 912.485991][T24621] ? __get_vm_area_node+0x2cd/0x330 [ 912.486004][T24621] ? __get_vm_area_node+0x208/0x330 [ 912.486021][T24621] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 912.486039][T24621] ? find_held_lock+0x2b/0x80 [ 912.486051][T24621] ? bpf_check+0x1bf/0xbdd0 [ 912.486066][T24621] ? rcu_is_watching+0x12/0xc0 [ 912.486077][T24621] ? ___kmalloc_large_node+0x114/0x160 [ 912.486093][T24621] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 912.486108][T24621] ? rcu_is_watching+0x12/0xc0 [ 912.486119][T24621] ? rcu_is_watching+0x12/0xc0 [ 912.486130][T24621] ? trace_kmalloc+0x2b/0xd0 [ 912.486142][T24621] ? __kvmalloc_node_noprof.cold+0x61/0x66 [ 912.486158][T24621] ? bpf_check+0x1bf/0xbdd0 [ 912.486172][T24621] __vmalloc_node_noprof+0xad/0xf0 [ 912.486187][T24621] ? bpf_check+0x1bf/0xbdd0 [ 912.486202][T24621] bpf_check+0x1bf/0xbdd0 [ 912.486216][T24621] ? __lock_acquire+0x622/0x1c90 [ 912.486231][T24621] ? css_rstat_updated+0x1c2/0x510 [ 912.486243][T24621] ? __pfx_css_rstat_updated+0x10/0x10 [ 912.486258][T24621] ? __lock_acquire+0xb8a/0x1c90 [ 912.486274][T24621] ? __pfx_bpf_check+0x10/0x10 [ 912.486291][T24621] ? find_held_lock+0x2b/0x80 [ 912.486303][T24621] ? rcu_is_watching+0x12/0xc0 [ 912.486313][T24621] ? ktime_get_with_offset+0x26e/0x3b0 [ 912.486327][T24621] ? __asan_memset+0x23/0x50 [ 912.486337][T24621] ? lsm_blob_alloc+0x2b/0x90 [ 912.486350][T24621] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 912.486367][T24621] bpf_prog_load+0x112e/0x2850 [ 912.486381][T24621] ? __pfx_bpf_prog_load+0x10/0x10 [ 912.486390][T24621] ? __lock_acquire+0xb8a/0x1c90 [ 912.486418][T24621] __sys_bpf+0x3e72/0x4980 [ 912.486431][T24621] ? __pfx___sys_bpf+0x10/0x10 [ 912.486440][T24621] ? find_held_lock+0x2b/0x80 [ 912.486453][T24621] ? find_held_lock+0x2b/0x80 [ 912.486467][T24621] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 912.486487][T24621] ? fput+0x9b/0xd0 [ 912.486506][T24621] ? ksys_write+0x1ac/0x250 [ 912.486517][T24621] ? __pfx_ksys_write+0x10/0x10 [ 912.486530][T24621] __ia32_sys_bpf+0x76/0xe0 [ 912.486542][T24621] __do_fast_syscall_32+0x7c/0x300 [ 912.486555][T24621] do_fast_syscall_32+0x32/0x80 [ 912.486568][T24621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 912.486581][T24621] RIP: 0023:0xf705d579 [ 912.486590][T24621] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 912.486601][T24621] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 912.486611][T24621] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000600 [ 912.486618][T24621] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 912.486624][T24621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 912.486630][T24621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 912.486636][T24621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 912.486649][T24621] [ 912.486664][T24621] Mem-Info: [ 912.594713][T24621] active_anon:1424 inactive_anon:2851 isolated_anon:0 [ 912.594713][T24621] active_file:5067 inactive_file:13754 isolated_file:0 [ 912.594713][T24621] unevictable:1768 dirty:377 writeback:0 [ 912.594713][T24621] slab_reclaimable:6730 slab_unreclaimable:60820 [ 912.594713][T24621] mapped:25490 shmem:2531 pagetables:2020 [ 912.594713][T24621] sec_pagetables:334 bounce:0 [ 912.594713][T24621] kernel_misc_reclaimable:0 [ 912.594713][T24621] free:52959 free_pcp:17704 free_cma:0 [ 912.608461][T24621] Node 0 active_anon:36kB inactive_anon:248kB active_file:0kB inactive_file:144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2200kB dirty:4kB writeback:0kB shmem:7336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8080kB pagetables:2208kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB [ 912.617953][T24621] Node 1 active_anon:5660kB inactive_anon:11156kB active_file:20268kB inactive_file:54872kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99760kB dirty:1504kB writeback:0kB shmem:2788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6444kB pagetables:5772kB sec_pagetables:184kB all_unreclaimable? no Balloon:0kB [ 912.627745][T24621] Node 0 DMA free:2076kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:100kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:344kB local_pcp:144kB free_cma:0kB [ 912.638078][T24621] lowmem_reserve[]: 0 294 294 294 294 [ 912.640489][T24621] Node 0 DMA32 free:21164kB boost:4096kB min:17544kB low:20904kB high:24264kB reserved_highatomic:2048KB free_highatomic:1952KB active_anon:36kB inactive_anon:248kB active_file:0kB inactive_file:144kB unevictable:3536kB writepending:4kB zspages:1476kB present:1032196kB managed:301156kB mlocked:0kB bounce:0kB free_pcp:10340kB local_pcp:3896kB free_cma:0kB [ 912.658164][T24621] lowmem_reserve[]: 0 0 0 0 0 [ 912.660408][T24621] Node 1 DMA32 free:188596kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5560kB inactive_anon:11156kB active_file:20268kB inactive_file:54872kB unevictable:3536kB writepending:1504kB zspages:4544kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:62052kB local_pcp:24328kB free_cma:0kB [ 912.673397][T24621] lowmem_reserve[]: 0 0 0 0 0 [ 912.675246][T24621] Node 0 DMA: 17*4kB (UM) 13*8kB (UM) 11*16kB (UM) 8*32kB (U) 1*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2076kB [ 912.681180][T24621] Node 0 DMA32: 345*4kB (UMEH) 343*8kB (UMEH) 143*16kB (UMEH) 111*32kB (UMEH) 61*64kB (UMEH) 21*128kB (UMEH) 12*256kB (UMH) 1*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 21164kB [ 912.687667][T24621] Node 1 DMA32: 1459*4kB (UME) 309*8kB (UME) 555*16kB (UME) 279*32kB (UME) 467*64kB (UME) 135*128kB (UME) 104*256kB (UME) 65*512kB (UME) 48*1024kB (UME) 3*2048kB (ME) 0*4096kB = 188484kB [ 912.693853][T24621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.697105][T24621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 912.700424][T24621] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.703566][T24621] Node 1 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 912.706697][T24621] 22721 total pagecache pages [ 912.708523][T24621] 1373 pages in swap cache [ 912.710697][T24621] Free swap = 97992kB [ 912.712323][T24621] Total swap = 124996kB [ 912.713958][T24621] 524155 pages RAM [ 912.715435][T24621] 0 pages HighMem/MovableOnly [ 912.717383][T24621] 207971 pages reserved [ 912.719019][T24621] 0 pages cma reserved [ 912.825599][ T40] audit: type=1326 audit(1762411315.136:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.1.4015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 912.848459][ T40] audit: type=1326 audit(1762411315.146:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.1.4015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 912.856677][ T40] audit: type=1326 audit(1762411315.146:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.1.4015" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 912.865687][ T40] audit: type=1326 audit(1762411315.146:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.1.4015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 912.874546][ T40] audit: type=1326 audit(1762411315.146:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.1.4015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 912.883137][ T40] audit: type=1326 audit(1762411315.146:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.1.4015" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 912.892646][ T40] audit: type=1326 audit(1762411315.146:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.1.4015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 912.899979][ T40] audit: type=1326 audit(1762411315.146:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.1.4015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 912.906308][ T40] audit: type=1326 audit(1762411315.146:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.1.4015" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 912.914140][ T40] audit: type=1326 audit(1762411315.146:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.1.4015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 913.019947][ T9] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 913.047205][T24649] hub 8-0:1.0: USB hub found [ 913.049625][T24649] hub 8-0:1.0: 1 port detected [ 913.169921][ T9] usb 10-1: device descriptor read/64, error -71 [ 913.409905][ T9] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 913.539929][ T9] usb 10-1: device descriptor read/64, error -71 [ 913.650111][ T9] usb usb10-port1: attempt power cycle [ 913.776530][T24653] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4020'. [ 913.808656][T24656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4018'. [ 913.912679][T24658] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 913.914776][T24658] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 913.917314][T24658] vhci_hcd vhci_hcd.0: Device attached [ 914.009168][ T9] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 914.047000][ T9] usb 10-1: device descriptor read/8, error -71 [ 914.239930][ T10] usb 39-1: new low-speed USB device number 8 using vhci_hcd [ 914.320027][ T9] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 914.341931][ T9] usb 10-1: device descriptor read/8, error -71 [ 914.470138][ T9] usb usb10-port1: unable to enumerate USB device [ 914.596074][T24664] hub 8-0:1.0: USB hub found [ 914.598430][T24664] hub 8-0:1.0: 1 port detected [ 914.653194][T24659] vhci_hcd: connection reset by peer [ 914.655090][T14057] vhci_hcd: stop threads [ 914.656489][T14057] vhci_hcd: release socket [ 914.658106][T14057] vhci_hcd: disconnect device [ 915.498695][ T5948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 915.505219][ T5948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 915.508527][ T5948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 915.512609][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 915.515408][ T5948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 915.695348][T14057] smc: removing ib device syz1 [ 915.708046][T24676] chnl_net:caif_netlink_parms(): no params data found [ 915.948639][T24676] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.964135][T24676] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.966556][T24676] bridge_slave_0: entered allmulticast mode [ 915.972999][T24676] bridge_slave_0: entered promiscuous mode [ 915.977272][T24676] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.979544][T24676] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.986508][T24676] bridge_slave_1: entered allmulticast mode [ 915.996128][T24676] bridge_slave_1: entered promiscuous mode [ 916.018850][T24691] hub 8-0:1.0: USB hub found [ 916.021148][T24691] hub 8-0:1.0: 1 port detected [ 916.085304][T24676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.096056][T24676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.187920][T24676] team0: Port device team_slave_0 added [ 916.193123][T24676] team0: Port device team_slave_1 added [ 916.253027][T24676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.255263][T24676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.264511][T24676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.269179][T24676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.271754][T24676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.279734][T24676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.323022][T24676] hsr_slave_0: entered promiscuous mode [ 916.325529][T24676] hsr_slave_1: entered promiscuous mode [ 916.327625][T24676] debugfs: 'hsr0' already exists in 'hsr' [ 916.329483][T24676] Cannot create hsr debugfs directory [ 916.533068][T24695] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 916.535135][T24695] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 916.542986][T24695] vhci_hcd vhci_hcd.0: Device attached [ 916.859871][ T6122] usb 50-1: SetAddress Request (14) to port 0 [ 916.861847][ T6122] usb 50-1: new SuperSpeed USB device number 14 using vhci_hcd [ 917.179563][T14057] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 917.186112][T14057] bond0 (unregistering): Released all slaves [ 917.296815][T14057] bond1 (unregistering): (slave veth3): Releasing active interface [ 917.297650][T14057] bond1 (unregistering): Released all slaves [ 917.307788][T14057] bond2 (unregistering): Released all slaves [ 917.414858][T14057] bond3 (unregistering): Released all slaves [ 917.420950][T14057] bond4 (unregistering): Released all slaves [ 917.429175][T14057] bond5 (unregistering): Released all slaves [ 917.534888][T24696] vhci_hcd: connection reset by peer [ 917.538002][T14052] vhci_hcd: stop threads [ 917.538013][T14052] vhci_hcd: release socket [ 917.538058][T14052] vhci_hcd: disconnect device [ 917.551372][ T5948] Bluetooth: hci4: command tx timeout [ 917.939033][T14057] hsr_slave_0: left promiscuous mode [ 917.941230][T14057] hsr_slave_1: left promiscuous mode [ 918.013591][ T5987] usb 12-1: new full-speed USB device number 6 using dummy_hcd [ 918.139900][ T5987] usb 12-1: device descriptor read/64, error -71 [ 918.407327][ T5987] usb 12-1: new full-speed USB device number 7 using dummy_hcd [ 918.443199][T24729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4036'. [ 918.539950][ T5987] usb 12-1: device descriptor read/64, error -71 [ 918.650445][ T5987] usb usb12-port1: attempt power cycle [ 918.989997][ T5987] usb 12-1: new full-speed USB device number 8 using dummy_hcd [ 919.020681][ T5987] usb 12-1: device descriptor read/8, error -71 [ 919.129945][T24731] FAULT_INJECTION: forcing a failure. [ 919.129945][T24731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.135246][T24731] CPU: 1 UID: 0 PID: 24731 Comm: syz.6.4037 Not tainted syzkaller #0 PREEMPT(full) [ 919.135270][T24731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 919.135280][T24731] Call Trace: [ 919.135287][T24731] [ 919.135295][T24731] dump_stack_lvl+0x16c/0x1f0 [ 919.135320][T24731] should_fail_ex+0x512/0x640 [ 919.135351][T24731] _copy_to_user+0x32/0xd0 [ 919.135380][T24731] simple_read_from_buffer+0xcb/0x170 [ 919.135409][T24731] proc_fail_nth_read+0x197/0x240 [ 919.135429][T24731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 919.135449][T24731] ? rw_verify_area+0xcf/0x6c0 [ 919.135465][T24731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 919.135482][T24731] vfs_read+0x1e4/0xcf0 [ 919.135505][T24731] ? __pfx_vfs_read+0x10/0x10 [ 919.135520][T24731] ? find_held_lock+0x2b/0x80 [ 919.135545][T24731] ? __fget_files+0x20e/0x3c0 [ 919.135571][T24731] ksys_read+0x12a/0x250 [ 919.135589][T24731] ? __pfx_ksys_read+0x10/0x10 [ 919.135607][T24731] ? fput+0x9b/0xd0 [ 919.135628][T24731] ? rcu_is_watching+0x12/0xc0 [ 919.135651][T24731] __do_fast_syscall_32+0x7c/0x300 [ 919.135676][T24731] do_fast_syscall_32+0x32/0x80 [ 919.135697][T24731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 919.135719][T24731] RIP: 0023:0xf709d579 [ 919.135733][T24731] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 919.135749][T24731] RSP: 002b:00000000f548d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 919.135767][T24731] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d620 [ 919.135778][T24731] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 919.135788][T24731] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 919.135798][T24731] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 919.135809][T24731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 919.135831][T24731] [ 919.269918][ T5987] usb 12-1: new full-speed USB device number 9 using dummy_hcd [ 919.300688][ T5987] usb 12-1: device descriptor read/8, error -71 [ 919.369928][ T10] vhci_hcd: vhci_device speed not set [ 919.411928][ T5987] usb usb12-port1: unable to enumerate USB device [ 919.530346][T24676] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 919.534660][T24676] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 919.538735][T24676] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 919.544046][T24676] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 919.597455][T24676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.620968][T24676] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.625839][T14044] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.628349][T14044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.629914][ T5948] Bluetooth: hci4: command tx timeout [ 919.634884][T14044] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.637800][T14044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.743013][T24676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.778555][T24676] veth0_vlan: entered promiscuous mode [ 919.784385][T24676] veth1_vlan: entered promiscuous mode [ 919.797497][T24676] veth0_macvtap: entered promiscuous mode [ 919.802024][T24676] veth1_macvtap: entered promiscuous mode [ 919.811053][T24676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.813422][T24754] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4042'. [ 919.816791][T24676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.823185][T14045] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.826062][T14045] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.828817][T14045] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.833506][T14045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.854710][T14057] IPVS: stop unused estimator thread 0... [ 919.875152][T14044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.877768][T14044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.894839][T14044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.897332][T14044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.159222][T24762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4043'. [ 920.228982][T24763] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 920.231084][T24763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 920.233791][T24763] vhci_hcd vhci_hcd.0: Device attached [ 920.542214][ T10] usb 39-1: new low-speed USB device number 9 using vhci_hcd [ 921.078522][T24764] vhci_hcd: connection reset by peer [ 921.091735][T14061] vhci_hcd: stop threads [ 921.093170][T14061] vhci_hcd: release socket [ 921.094677][T14061] vhci_hcd: disconnect device [ 921.420278][T24768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4044'. [ 921.700520][ T5948] Bluetooth: hci4: command tx timeout [ 921.725462][T24788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4053'. [ 921.804467][T24790] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 921.806620][T24790] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 921.809374][T24790] vhci_hcd vhci_hcd.0: Device attached [ 921.836465][T24789] hub 8-0:1.0: USB hub found [ 921.838960][T24789] hub 8-0:1.0: 1 port detected [ 921.940034][ T6122] usb 50-1: device descriptor read/8, error -110 [ 922.261893][T24795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4049'. [ 922.343028][ T6122] usb usb50-port1: attempt power cycle [ 922.470009][ T24] usb 49-1: new low-speed USB device number 7 using vhci_hcd [ 922.752777][T24791] vhci_hcd: connection reset by peer [ 922.754705][T14044] vhci_hcd: stop threads [ 922.756078][T14044] vhci_hcd: release socket [ 922.757544][T14044] vhci_hcd: disconnect device [ 922.931315][T24806] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4057'. [ 922.979661][T24808] ptrace attach of "/syz-executor exec"[23477] was attempted by ""[24808] [ 923.011330][T24809] ptrace attach of "/syz-executor exec"[21989] was attempted by ""[24809] [ 923.779874][ T5948] Bluetooth: hci4: command tx timeout [ 923.813912][T24826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4062'. [ 923.888189][T24829] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 923.890823][T24829] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 923.894407][T24829] vhci_hcd vhci_hcd.0: Device attached [ 924.144768][ T5987] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 924.378064][T24838] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4064'. [ 924.671385][T24831] vhci_hcd: connection reset by peer [ 924.675401][T14059] vhci_hcd: stop threads [ 924.676883][T14059] vhci_hcd: release socket [ 924.680266][T14059] vhci_hcd: disconnect device [ 925.352770][T24835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4063'. [ 925.449005][T24845] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4065'. [ 925.581777][T14059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.584275][T14059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.653221][T24846] hub 8-0:1.0: USB hub found [ 925.658092][T24846] hub 8-0:1.0: 1 port detected [ 925.689961][ T10] vhci_hcd: vhci_device speed not set [ 926.183492][T24854] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4068'. [ 926.253701][T24855] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 926.256486][T24855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 926.260138][T24855] vhci_hcd vhci_hcd.0: Device attached [ 926.521831][ T840] usb 51-1: new low-speed USB device number 4 using vhci_hcd [ 927.094338][T24856] vhci_hcd: connection reset by peer [ 927.096329][T14051] vhci_hcd: stop threads [ 927.097537][T14051] vhci_hcd: release socket [ 927.099107][T14051] vhci_hcd: disconnect device [ 927.171491][T24871] ptrace attach of "/syz-executor exec"[21989] was attempted by ""[24871] [ 927.220711][T24872] ptrace attach of "/syz-executor exec"[22095] was attempted by ""[24872] [ 927.619921][ T24] vhci_hcd: vhci_device speed not set [ 927.860412][T24887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4074'. [ 928.011014][T24891] hub 8-0:1.0: USB hub found [ 928.012968][T24891] hub 8-0:1.0: 1 port detected [ 928.079200][T24892] hub 8-0:1.0: USB hub found [ 928.081535][T24892] hub 8-0:1.0: 1 port detected [ 928.208109][T24895] hub 8-0:1.0: USB hub found [ 928.210664][T24895] hub 8-0:1.0: 1 port detected [ 928.950626][ T6122] usb usb50-port1: unable to enumerate USB device [ 929.278012][T24904] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4080'. [ 929.299957][ T5987] vhci_hcd: vhci_device speed not set [ 929.349537][T14052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.355113][T14052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.131759][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.134472][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.275104][T24922] hub 8-0:1.0: USB hub found [ 931.280321][T24922] hub 8-0:1.0: 1 port detected [ 931.869915][ T840] vhci_hcd: vhci_device speed not set [ 932.354934][T24939] hub 8-0:1.0: USB hub found [ 932.357246][T24939] hub 8-0:1.0: 1 port detected [ 933.082229][T24955] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4095'. [ 933.085245][T24955] FAULT_INJECTION: forcing a failure. [ 933.085245][T24955] name failslab, interval 1, probability 0, space 0, times 0 [ 933.089670][T24955] CPU: 3 UID: 0 PID: 24955 Comm: syz.6.4095 Not tainted syzkaller #0 PREEMPT(full) [ 933.089685][T24955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 933.089692][T24955] Call Trace: [ 933.089697][T24955] [ 933.089701][T24955] dump_stack_lvl+0x16c/0x1f0 [ 933.089718][T24955] should_fail_ex+0x512/0x640 [ 933.089735][T24955] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 933.089749][T24955] should_failslab+0xc2/0x120 [ 933.089764][T24955] __kvmalloc_node_noprof+0x141/0x9c0 [ 933.089789][T24955] ? nf_hook_entries_grow+0x28f/0x860 [ 933.089812][T24955] ? nf_hook_entries_grow+0x28f/0x860 [ 933.089827][T24955] nf_hook_entries_grow+0x28f/0x860 [ 933.089843][T24955] ? __pfx__printk+0x10/0x10 [ 933.089864][T24955] __nf_register_net_hook+0x1cd/0x730 [ 933.089877][T24955] nf_register_net_hook+0x109/0x160 [ 933.089887][T24955] nf_register_net_hooks+0x5d/0xd0 [ 933.089899][T24955] ila_xlat_nl_cmd_add_mapping+0x8c2/0x3260 [ 933.089918][T24955] ? rcu_is_watching+0x12/0xc0 [ 933.089931][T24955] ? __pfx_ila_xlat_nl_cmd_add_mapping+0x10/0x10 [ 933.089948][T24955] ? __nla_parse+0x40/0x60 [ 933.089961][T24955] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 933.089976][T24955] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 933.089994][T24955] genl_family_rcv_msg_doit+0x209/0x2f0 [ 933.090009][T24955] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 933.090021][T24955] ? rcu_is_watching+0x12/0xc0 [ 933.090037][T24955] ? bpf_lsm_capable+0x9/0x10 [ 933.090051][T24955] ? security_capable+0x7e/0x260 [ 933.090069][T24955] genl_rcv_msg+0x55c/0x800 [ 933.090084][T24955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 933.090097][T24955] ? __pfx_ila_xlat_nl_cmd_add_mapping+0x10/0x10 [ 933.090118][T24955] netlink_rcv_skb+0x158/0x420 [ 933.090129][T24955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 933.090143][T24955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 933.090160][T24955] ? netlink_deliver_tap+0x1ae/0xd30 [ 933.090172][T24955] genl_rcv+0x28/0x40 [ 933.090183][T24955] netlink_unicast+0x5aa/0x870 [ 933.090197][T24955] ? __pfx_netlink_unicast+0x10/0x10 [ 933.090214][T24955] netlink_sendmsg+0x8c8/0xdd0 [ 933.090228][T24955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.090245][T24955] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 933.090263][T24955] ____sys_sendmsg+0xa98/0xc70 [ 933.090280][T24955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 933.090292][T24955] ? get_compat_msghdr+0x11a/0x170 [ 933.090316][T24955] ___sys_sendmsg+0x134/0x1d0 [ 933.090327][T24955] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.090345][T24955] ? find_held_lock+0x2b/0x80 [ 933.090365][T24955] __sys_sendmsg+0x16d/0x220 [ 933.090376][T24955] ? __pfx___sys_sendmsg+0x10/0x10 [ 933.090393][T24955] ? rcu_is_watching+0x12/0xc0 [ 933.090406][T24955] __do_fast_syscall_32+0x7c/0x300 [ 933.090421][T24955] do_fast_syscall_32+0x32/0x80 [ 933.090434][T24955] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 933.090447][T24955] RIP: 0023:0xf709d579 [ 933.090456][T24955] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 933.090466][T24955] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 933.090477][T24955] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 933.090484][T24955] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 933.090490][T24955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 933.090495][T24955] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 933.090501][T24955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 933.090516][T24955] [ 934.095521][T24975] netlink: 'syz.5.4102': attribute type 1 has an invalid length. [ 934.099126][T24977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4101'. [ 934.461262][T24987] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4098'. [ 934.508000][T24991] xt_connbytes: Forcing CT accounting to be enabled [ 934.510428][T24991] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 934.571797][T24993] hub 8-0:1.0: USB hub found [ 934.574235][T24993] hub 8-0:1.0: 1 port detected [ 935.096993][T24996] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4106'. [ 935.163195][T24997] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 935.165269][T24997] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 935.180777][T24997] vhci_hcd vhci_hcd.0: Device attached [ 935.500922][ T5987] usb 51-1: new low-speed USB device number 5 using vhci_hcd [ 935.584452][T25004] hub 8-0:1.0: USB hub found [ 935.586529][T25004] hub 8-0:1.0: 1 port detected [ 936.019671][T24998] vhci_hcd: connection reset by peer [ 936.024136][T14044] vhci_hcd: stop threads [ 936.025888][T14044] vhci_hcd: release socket [ 936.034411][T14044] vhci_hcd: disconnect device [ 936.575360][T25012] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4110'. [ 936.637296][T25014] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 936.639596][T25014] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 936.643044][T25014] vhci_hcd vhci_hcd.0: Device attached [ 936.762193][T25019] ================================================================== [ 936.765094][T25019] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 936.767941][T25019] Read of size 8 at addr ffff88804bb87a30 by task syz.5.4111/25019 [ 936.771807][T25019] [ 936.772887][T25019] CPU: 0 UID: 0 PID: 25019 Comm: syz.5.4111 Not tainted syzkaller #0 PREEMPT(full) [ 936.772902][T25019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 936.772910][T25019] Call Trace: [ 936.772915][T25019] [ 936.772920][T25019] dump_stack_lvl+0x116/0x1f0 [ 936.772935][T25019] print_report+0xcd/0x630 [ 936.772951][T25019] ? __virt_addr_valid+0x81/0x610 [ 936.772965][T25019] ? __phys_addr+0xe8/0x180 [ 936.772980][T25019] ? sysfs_remove_file_ns+0x63/0x70 [ 936.772991][T25019] kasan_report+0xe0/0x110 [ 936.773004][T25019] ? sysfs_remove_file_ns+0x63/0x70 [ 936.773017][T25019] sysfs_remove_file_ns+0x63/0x70 [ 936.773029][T25019] driver_remove_file+0x4a/0x60 [ 936.773046][T25019] bus_remove_driver+0x224/0x2c0 [ 936.773059][T25019] driver_unregister+0x76/0xb0 [ 936.773073][T25019] comedi_device_detach_locked+0x12f/0xa50 [ 936.773092][T25019] do_devconfig_ioctl+0x555/0x710 [ 936.773103][T25019] ? __mutex_lock+0x1c5/0x1060 [ 936.773118][T25019] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 936.773133][T25019] ? kasan_save_stack+0x42/0x60 [ 936.773144][T25019] ? kasan_save_stack+0x33/0x60 [ 936.773155][T25019] ? kasan_save_track+0x14/0x30 [ 936.773166][T25019] ? __kasan_save_free_info+0x3b/0x60 [ 936.773174][T25019] ? __kasan_slab_free+0x5f/0x80 [ 936.773186][T25019] ? kfree+0x2b8/0x6d0 [ 936.773194][T25019] ? tomoyo_path_number_perm+0x470/0x580 [ 936.773211][T25019] ? security_file_ioctl_compat+0x9b/0x240 [ 936.773222][T25019] comedi_unlocked_ioctl+0x165d/0x2f00 [ 936.773238][T25019] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 936.773256][T25019] ? kasan_quarantine_put+0x10a/0x240 [ 936.773272][T25019] ? lockdep_hardirqs_on+0x7c/0x110 [ 936.773285][T25019] ? find_held_lock+0x2b/0x80 [ 936.773297][T25019] ? tomoyo_path_number_perm+0x295/0x580 [ 936.773315][T25019] ? tomoyo_path_number_perm+0x18d/0x580 [ 936.773333][T25019] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 936.773351][T25019] comedi_compat_ioctl+0x1d0/0x990 [ 936.773366][T25019] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 936.773380][T25019] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 936.773398][T25019] ? do_vfs_ioctl+0x128/0x14f0 [ 936.773413][T25019] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 936.773437][T25019] ? find_held_lock+0x2b/0x80 [ 936.773451][T25019] ? hook_file_ioctl_common+0x145/0x410 [ 936.773471][T25019] ? __fget_files+0x20e/0x3c0 [ 936.773485][T25019] ? __ia32_compat_sys_openat+0x100/0x210 [ 936.773511][T25019] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 936.773530][T25019] __ia32_compat_sys_ioctl+0x242/0x370 [ 936.773553][T25019] __do_fast_syscall_32+0x7c/0x300 [ 936.773574][T25019] do_fast_syscall_32+0x32/0x80 [ 936.773591][T25019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 936.773605][T25019] RIP: 0023:0xf7f64579 [ 936.773613][T25019] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 936.773624][T25019] RSP: 002b:00000000f545655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 936.773634][T25019] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 936.773641][T25019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 936.773647][T25019] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 936.773653][T25019] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 936.773659][T25019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 936.773669][T25019] [ 936.773673][T25019] [ 936.883653][T25019] Allocated by task 23647: [ 936.885093][T25019] kasan_save_stack+0x33/0x60 [ 936.886594][T25019] kasan_save_track+0x14/0x30 [ 936.888290][T25019] __kasan_kmalloc+0xaa/0xb0 [ 936.890115][T25019] fuse_io_alloc+0x47/0x150 [ 936.891937][T25019] fuse_direct_io+0x194d/0x24f0 [ 936.893854][T25019] fuse_direct_IO+0x624/0xf40 [ 936.895693][T25019] generic_file_direct_write+0x19a/0x410 SYZFAIL: failed to recv rpc [ 936.897889][T25019] fuse_file_write_iter+0x793/0x990 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 936.900017][T25019] vfs_write+0x7d3/0x11d0 [ 936.901868][T25019] ksys_write+0x12a/0x250 [ 936.903472][T25019] __do_fast_syscall_32+0x7c/0x300 [ 936.905179][T25019] do_fast_syscall_32+0x32/0x80 [ 936.906785][T25019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 936.908822][T25019] [ 936.909629][T25019] Freed by task 23647: [ 936.910922][T25019] kasan_save_stack+0x33/0x60 [ 936.912502][T25019] kasan_save_track+0x14/0x30 [ 936.914019][T25019] __kasan_save_free_info+0x3b/0x60 [ 936.915672][T25019] __kasan_slab_free+0x5f/0x80 [ 936.917232][T25019] kfree+0x2b8/0x6d0 [ 936.918495][T25019] fuse_async_req_send+0x217/0x290 [ 936.920135][T25019] fuse_direct_io+0x1a3b/0x24f0 [ 936.921690][T25019] fuse_direct_IO+0x624/0xf40 [ 936.923214][T25019] generic_file_direct_write+0x19a/0x410 [ 936.925026][T25019] fuse_file_write_iter+0x793/0x990 [ 936.926690][T25019] vfs_write+0x7d3/0x11d0 [ 936.928087][T25019] ksys_write+0x12a/0x250 [ 936.929490][T25019] __do_fast_syscall_32+0x7c/0x300 [ 936.931118][T25019] do_fast_syscall_32+0x32/0x80 [ 936.932687][T25019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 936.934715][T25019] [ 936.935487][T25019] The buggy address belongs to the object at ffff88804bb87a00 [ 936.935487][T25019] which belongs to the cache kmalloc-256 of size 256 [ 936.939853][T25019] The buggy address is located 48 bytes inside of [ 936.939853][T25019] freed 256-byte region [ffff88804bb87a00, ffff88804bb87b00) [ 936.944146][T25019] [ 936.944941][T25019] The buggy address belongs to the physical page: [ 936.946983][T25019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804bb87e00 pfn:0x4bb86 [ 936.950194][T25019] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 936.952909][T25019] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 936.955624][T25019] page_type: f5(slab) [ 936.956940][T25019] raw: 04fff00000000240 ffff88801b442b40 ffffea00013f4810 ffffea0001370e10 [ 936.959645][T25019] raw: ffff88804bb87e00 0000000000100002 00000000f5000000 0000000000000000 [ 936.962393][T25019] head: 04fff00000000240 ffff88801b442b40 ffffea00013f4810 ffffea0001370e10 [ 936.965126][T25019] head: ffff88804bb87e00 0000000000100002 00000000f5000000 0000000000000000 [ 936.967854][T25019] head: 04fff00000000001 ffffea00012ee181 00000000ffffffff 00000000ffffffff [ 936.970611][T25019] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 936.973376][T25019] page dumped because: kasan: bad access detected [ 936.975421][T25019] page_owner tracks the page as allocated [ 936.977262][T25019] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5938, tgid 5938 (syz-executor), ts 49231285921, free_ts 47722852950 [ 936.983877][T25019] post_alloc_hook+0x1c0/0x230 [ 936.985427][T25019] get_page_from_freelist+0x10a3/0x3a30 [ 936.987183][T25019] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 936.989104][T25019] alloc_pages_mpol+0x1fb/0x550 [ 936.990685][T25019] new_slab+0x24a/0x360 [ 936.992056][T25019] ___slab_alloc+0xdae/0x1a60 [ 936.993589][T25019] __slab_alloc.constprop.0+0x63/0x110 [ 936.995321][T25019] __kmalloc_noprof+0x501/0x880 [ 936.996914][T25019] fib_create_info+0x53f/0x46b0 [ 936.998504][T25019] fib_table_insert+0x177/0x1c40 [ 937.000093][T25019] fib_magic+0x4d4/0x5c0 [ 937.001409][T25019] fib_add_ifaddr+0x16d/0x580 [ 937.002918][T25019] fib_netdev_event+0x38a/0x710 [ 937.004487][T25019] notifier_call_chain+0xbc/0x410 [ 937.006102][T25019] call_netdevice_notifiers_info+0xbe/0x140 [ 937.007979][T25019] __dev_notify_flags+0x12c/0x2e0 [ 937.009644][T25019] page last free pid 5943 tgid 5943 stack trace: [ 937.011626][T25019] __free_frozen_pages+0x7df/0x1160 [ 937.013334][T25019] __put_partials+0x130/0x170 [ 937.014842][T25019] qlist_free_all+0x4d/0x120 [ 937.016344][T25019] kasan_quarantine_reduce+0x195/0x1e0 [ 937.018085][T25019] __kasan_slab_alloc+0x69/0x90 [ 937.019640][T25019] __kmalloc_cache_noprof+0x274/0x780 [ 937.021361][T25019] kobject_uevent_env+0x265/0x1870 [ 937.022997][T25019] __kobject_del+0x168/0x1f0 [ 937.024493][T25019] kobject_put+0x327/0x5a0 [ 937.025938][T25019] netdev_queue_update_kobjects+0x4e5/0x720 [ 937.027835][T25019] netif_set_real_num_tx_queues+0x151/0x870 [ 937.029737][T25019] veth_init_queues+0xe1/0x190 [ 937.031277][T25019] veth_newlink+0x4f3/0xa00 [ 937.032759][T25019] rtnl_newlink+0xc45/0x2000 [ 937.034242][T25019] rtnetlink_rcv_msg+0x95e/0xe90 [ 937.035827][T25019] netlink_rcv_skb+0x158/0x420 [ 937.037402][T25019] [ 937.038166][T25019] Memory state around the buggy address: [ 937.039930][T25019] ffff88804bb87900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 937.042504][T25019] ffff88804bb87980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 937.045047][T25019] >ffff88804bb87a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 937.047592][T25019] ^ [ 937.049404][T25019] ffff88804bb87a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 937.051959][T25019] ffff88804bb87b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 937.054508][T25019] ================================================================== [ 937.089990][T25019] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 937.092344][T25019] CPU: 0 UID: 0 PID: 25019 Comm: syz.5.4111 Not tainted syzkaller #0 PREEMPT(full) [ 937.095251][T25019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 937.098657][T25019] Call Trace: [ 937.099729][T25019] [ 937.100719][T25019] dump_stack_lvl+0x3d/0x1f0 [ 937.102238][T25019] vpanic+0x640/0x6f0 [ 937.103534][T25019] panic+0xca/0xd0 [ 937.104761][T25019] ? __pfx_panic+0x10/0x10 [ 937.106213][T25019] ? sysfs_remove_file_ns+0x63/0x70 [ 937.107892][T25019] ? preempt_schedule_common+0x44/0xc0 [ 937.109670][T25019] ? preempt_schedule_thunk+0x16/0x30 [ 937.111385][T25019] check_panic_on_warn+0xab/0xb0 [ 937.113015][T25019] end_report+0x107/0x170 [ 937.114406][T25019] kasan_report+0xee/0x110 [ 937.115842][T25019] ? sysfs_remove_file_ns+0x63/0x70 [ 937.117524][T25019] sysfs_remove_file_ns+0x63/0x70 [ 937.119133][T25019] driver_remove_file+0x4a/0x60 [ 937.120719][T25019] bus_remove_driver+0x224/0x2c0 [ 937.122301][T25019] driver_unregister+0x76/0xb0 [ 937.123831][T25019] comedi_device_detach_locked+0x12f/0xa50 [ 937.125693][T25019] do_devconfig_ioctl+0x555/0x710 [ 937.127433][T25019] ? __mutex_lock+0x1c5/0x1060 [ 937.129074][T25019] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 937.130840][T25019] ? kasan_save_stack+0x42/0x60 [ 937.132422][T25019] ? kasan_save_stack+0x33/0x60 [ 937.133973][T25019] ? kasan_save_track+0x14/0x30 [ 937.135530][T25019] ? __kasan_save_free_info+0x3b/0x60 [ 937.137422][T25019] ? __kasan_slab_free+0x5f/0x80 [ 937.139036][T25019] ? kfree+0x2b8/0x6d0 [ 937.140366][T25019] ? tomoyo_path_number_perm+0x470/0x580 [ 937.142160][T25019] ? security_file_ioctl_compat+0x9b/0x240 [ 937.144004][T25019] comedi_unlocked_ioctl+0x165d/0x2f00 [ 937.145747][T25019] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 937.147627][T25019] ? kasan_quarantine_put+0x10a/0x240 [ 937.149366][T25019] ? lockdep_hardirqs_on+0x7c/0x110 [ 937.151021][T25019] ? find_held_lock+0x2b/0x80 [ 937.152566][T25019] ? tomoyo_path_number_perm+0x295/0x580 [ 937.154372][T25019] ? tomoyo_path_number_perm+0x18d/0x580 [ 937.156159][T25019] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 937.158059][T25019] comedi_compat_ioctl+0x1d0/0x990 [ 937.159715][T25019] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 937.161520][T25019] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 937.163423][T25019] ? do_vfs_ioctl+0x128/0x14f0 [ 937.164950][T25019] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 937.166557][T25019] ? find_held_lock+0x2b/0x80 [ 937.168064][T25019] ? hook_file_ioctl_common+0x145/0x410 [ 937.169865][T25019] ? __fget_files+0x20e/0x3c0 [ 937.171371][T25019] ? __ia32_compat_sys_openat+0x100/0x210 [ 937.173193][T25019] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 937.174993][T25019] __ia32_compat_sys_ioctl+0x242/0x370 [ 937.176742][T25019] __do_fast_syscall_32+0x7c/0x300 [ 937.178374][T25019] do_fast_syscall_32+0x32/0x80 [ 937.179929][T25019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 937.181988][T25019] RIP: 0023:0xf7f64579 [ 937.183299][T25019] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 937.189378][T25019] RSP: 002b:00000000f545655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 937.192044][T25019] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 937.194564][T25019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 937.197085][T25019] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 937.199577][T25019] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 937.202116][T25019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 937.204635][T25019] [ 937.206267][T25019] Kernel Offset: disabled [ 937.207653][T25019] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:42:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85267f35 RDI=ffffffff9adc2de0 RBP=ffffffff9adc2da0 RSP=ffffc900035af1f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9adc2da0 R15=ffffffff85267ed0 RIP=ffffffff85267f5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097810000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7320bb4 CR3=0000000020ae4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b242520 RCX=ffffffff81b06901 RDX=ffff888067aaa480 RSI=ffffffff81b068db RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900035cf878 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed10056484a5 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81b068dd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097910000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000580c54c0 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000008000008fd RBX=ffff888023984900 RCX=0000000000000830 RDX=0000000000000008 RSI=00000000000000fd RDI=0000000000000008 RBP=0000000000000010 RSP=ffffc90004f87798 R8 =0000000000000000 R9 =fffffbfff210475a R10=ffffffff90823ad7 R11=0000000000000001 R12=1ffff920009f0ef4 R13=0000000000000004 R14=0000000000000003 R15=ffffc90004f877c0 RIP=ffffffff816a3ae8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097a10000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fe3ae78f40 CR3=000000006769b000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=d0030729dbae583b 4c790b2aba9149e3 d0030729dbae583b 4c790b2aba9149e3 d0030729dbae583b 4c790b2aba9149e3 d0030729dbae583b 4c790b2aba9149e3 ZMM18=be48200e95ec55f8 a63e7bf60fe1c8ac be48200e95ec55f8 a63e7bf60fe1c8ac be48200e95ec55f8 a63e7bf60fe1c8ac be48200e95ec55f8 a63e7bf60fe1c8ac ZMM19=111c000000000000 0000000000000004 111c000000000000 0000000000000003 111c000000000000 0000000000000002 111c000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0288030fffffffff 020280030fffffff ff02020800000800 0208007c08000a01 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4cd4048182080010 0800028002060175 d0002330302f2330 302f6273752f7375 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 622f7665642f01ff ffffffffffffffd5 0802800300080006 0800200800060171 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae08000803000800 0003088002188182 d4a4080001000008 0806060129820008 ZMM25=a63e7bf6a63e7bf6 a63e7bf6a63e7bf6 a63e7bf6a63e7bf6 a63e7bf6a63e7bf6 a63e7bf6a63e7bf6 a63e7bf6a63e7bf6 a63e7bf6a63e7bf6 a63e7bf6a63e7bf6 ZMM26=95ec55f895ec55f8 95ec55f895ec55f8 95ec55f895ec55f8 95ec55f895ec55f8 95ec55f895ec55f8 95ec55f895ec55f8 95ec55f895ec55f8 95ec55f895ec55f8 ZMM27=be48200ebe48200e be48200ebe48200e be48200ebe48200e be48200ebe48200e be48200ebe48200e be48200ebe48200e be48200ebe48200e be48200ebe48200e ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=101c0000101c0000 101c0000101c0000 101c0000101c0000 101c0000101c0000 101c0000101c0000 101c0000101c0000 101c0000101c0000 101c0000101c0000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff8e3c45e0 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8e3c45e0 RBP=0000000000000002 RSP=ffffc90004ea7008 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=000000000008bc7a R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8198664f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097b10000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000e01c CR3=000000006769b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000