last executing test programs: 5m32.652487447s ago: executing program 2 (id=34): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000019640)={0xffffffffffffffff, 0xe0, &(0x7f0000019540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000019340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, 0x0, 0x0, 0x10, &(0x7f0000019300), &(0x7f0000000240), 0xffffffffffffffd5, 0x24, 0x8, 0x8, &(0x7f0000019400)}}, 0xfffffffffffffe1d) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x104) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="3943000000000000000001"], 0x14}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) dup3(r4, r8, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) openat$ptp0(0xffffffffffffff9c, &(0x7f0000019380), 0x107000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@deltfilter={0x23e8, 0x2d, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x8, 0x4}, {0xc, 0xf}, {0xfff2, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0xffffff7f}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_fw={{0x7}, {0x23a4, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_ACT={0x1e8, 0x4, [@m_xt={0x1e4, 0x1f, 0x0, 0x0, {{0x7}, {0xf4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6bc4}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3f, 0x6, {0x6, 'nat\x00', 0x7, 0x3, "162c2afed7f1ab1fba5409144ec75a183b5ffb6a99"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xca, 0x6, "60bfdffef33e2eec3727cddbe864f7dd73453510d51bb8c966653cc57b18ddfa3c5bf719f8f05114ccd3b9e80e58189caf7511ee3d39ae3dbf20fb0b1c994857b16a7e276099e26f8ddf14c82572bebfe6eba7841b1f9cc76e2dd5d3eb0516bfa862088b042ff27f7486b04ef87129b5a5aa2dc52d20c15067c1a1917898db85060ec3568f0b313e0fc95e6fcd9108685850adcc76dd400968c116bacfab7f3eb000061e31dc18342df0b6da942c980071e8a5a64096e66aa6b004ba184298441ad6f9d494e5"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FW_ACT={0x1554, 0x4, [@m_mpls={0x10bc, 0x16, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x40, 0x8, 0x8, 0x2}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x80}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xa, 0xc4d6, 0x10000000, 0x5, 0x1}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x3, 0x2, 0x8001, 0x101}, 0x1}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x5cb6426f7a4dd8b2}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x98, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xf04, 0x2666, 0x7, 0x5, 0x8000}}]}, {0x4a, 0x6, "dc89c12e22409d046af4eb4477328ff7eeee4f45739133a8a6eb6c72ffbc0629a091b1abb604c193060b58d00af1a41d26e84841643d4ab457a090a1e77f786187579825849d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x1f8, 0x14, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffff8000, 0x6, 0x1, 0x1, 0x6}, @empty, @private=0xa010102, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4b13, 0x3, 0x4, 0x1000, 0x2}, @loopback, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x752, 0x3, 0x3, 0x7}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x80000001, 0x20000000, 0x8000, 0x3}, @empty, @local, 0x7f8000ff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x7, 0xf, 0x5}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x1, 0x9, 0x10}, @multicast1, @rand_addr=0x64010100, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x32, 0xffffffff, 0x8, 0x7, 0x3}, @broadcast, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0xffffffffffffffff, 0x5, 0x4}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x8d, 0x6, "aadfb4485ec4fac2a88dbb3b781fddfe117c7dc0c8eb338e62f988d10b51e0b5d09cbf38b2f0c0fdffc1f45799ce4be196f877d82cb4c4eb846bc3c21674cbd9286d4b75fbe1f3616717abcdc423b91b3490c790473d1e5bc25d6a5e3fc64b0ef1de4f983f8eb60aeecbaf5e7d86f1f3981c3f6cde6e76d01de05cad9bf7d107072da89b3841f8eca2"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x100, 0x8, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0xc9, 0x6, "ee59c5f1b1512a13255f98ca78592149eda7d9aac3cb421e8839be0b8dda6aa8460aada54de53d2b24c07015cd992fca237520dbceb2a64e432cc24980745a586f94bbeca1a1e1de65f6d8947a796bc75aa3c31a287e10e59ed60ba6d3babfd790218441e9b137c324e278df47725ad495d957cdfaed04e3a4de9e93eec1822c38981a94252e9f14f15fc6938f024768feb3124f9be319249f9d7aff3c9c05d695e9e080960bf3eccf4daeba5e0bfc6effbb3722821202ed4b19682ffb1b2bd463fd214df5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x104, 0x19, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0xca, 0x6, "eb13bcbe188ebb0c5e2f2304342a5cb8c305dda009732e5f28d1f852ed6daa3eab8e7eddfaea42bba33c7e684c72eea36e15661fa2ade0e0c0b83e7791bbed27b8cb9c6a720ec6321da73636976dbee4d15501a4a0fc7ed2cf82b2b98cc1a20c6c90353560fbfe3c4cb6ff6a224f3e6fb790c7c3add4f7299f559cbe7b7810b819c59e811c6ee39093c4f8212e648bfbca3521ef7c3421440659861a644ac5f392040017c20cd261eb2f0d893e24a81cec466e67c068081ceb6df64c7da36b2067a6fda66b8d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x1}}, @TCA_FW_MASK={0x8, 0x5, 0x7ff}, @TCA_FW_INDEV={0x14, 0x3, 'ipvlan0\x00'}, @TCA_FW_POLICE={0xc30, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0xfffffff9, 0x1, 0x3f8, 0x32, 0x4, 0x5, 0x7, 0x6, 0x4, 0x1c0, 0x0, 0x1, 0x9, 0x1, 0x10000, 0x1, 0x44, 0xed0a, 0x4d0c, 0x2, 0x7, 0x10, 0x7fff, 0x2, 0x3, 0x9, 0x9, 0x5, 0x4, 0x80000000, 0x5, 0xffffff7f, 0x1, 0x3, 0xfffffff6, 0x81, 0x9, 0x1, 0x6, 0x9, 0x2, 0xca4, 0x7ff, 0xa6e, 0x1ad, 0x8, 0x4227390c, 0x8, 0x101, 0x101, 0x800, 0x0, 0xfffffffc, 0x35, 0x7a, 0x8, 0x8, 0x5, 0x3, 0x5734, 0x10, 0x2, 0x8, 0x0, 0xfff, 0x75c, 0xed2, 0x5, 0x5cba, 0x3ff, 0xc4e, 0x1, 0xffffffff, 0x5, 0x1ff, 0x0, 0x5, 0x0, 0xb7, 0x0, 0x20005bde, 0x8, 0x8, 0x5, 0xd, 0xffffe400, 0x9, 0x2, 0x2, 0x9, 0x20000000, 0x9c3, 0x0, 0x2, 0x10001, 0xffff1968, 0x0, 0x2, 0x7, 0x2, 0x3, 0x81, 0x6, 0x7, 0x6, 0x7, 0x29c2, 0x396, 0x6, 0x1, 0x7fff, 0xb, 0xf, 0xa02, 0x2, 0x7, 0x8914, 0x497c135f, 0xb15, 0x4, 0xa0, 0x2, 0x3, 0x7, 0x8, 0x93, 0x0, 0x81, 0x83, 0x9, 0x80, 0x7, 0x7, 0x1, 0xfffffffb, 0x6, 0xfffffe00, 0xffffffff, 0x8, 0xb9, 0x33f, 0x0, 0x0, 0x6, 0xb60, 0x6, 0xa26, 0xffff18e7, 0x3, 0x8, 0x3, 0x3ff, 0x8, 0x3, 0x3, 0x400000, 0xa5e, 0xfa7f, 0x8, 0xff, 0x80000000, 0x1, 0x4, 0x2, 0x8, 0x80, 0xfffffff7, 0xffffffff, 0x5d49, 0x9, 0x1, 0xcf77, 0x4, 0x0, 0x6, 0x7ea4, 0x1, 0x6, 0x3, 0x8, 0x4, 0xfffffff9, 0x8, 0x4, 0xb, 0x8, 0xfffffffd, 0x8, 0x1, 0x2, 0x2, 0x99a, 0x9b, 0x80000001, 0x101, 0x1, 0xf8, 0x3e, 0x1, 0x10, 0x81, 0x6, 0xa8e, 0x1, 0x1f6, 0x3, 0x5, 0x6, 0x9, 0x7, 0x1, 0x889, 0x1, 0x8001, 0xfff, 0x800, 0x6, 0x8, 0x8, 0x40, 0x8c, 0xc0, 0x6, 0x8, 0x4, 0x2, 0x6, 0x1, 0xfffffffd, 0x11d27579, 0x3, 0x4, 0x2, 0x9, 0x1, 0x1, 0x9, 0xffffffff, 0x400, 0xfffffffb, 0x80ca, 0x8001, 0x9, 0x100, 0x5, 0x9, 0xffffffff, 0x7, 0x9fd, 0x8, 0x40, 0x25, 0xa1, 0xccf2, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xe0000000, 0xffffffb6, 0x2, 0x3, 0x9, 0xffff0000, 0x2db, 0xfffffffd, 0x1, 0x8000, 0x9, 0xffffffff, 0x9, 0x3, 0x0, 0x1, 0xffffa0d4, 0xfffffffa, 0x4, 0x9, 0x7, 0x200, 0x9, 0x2, 0x5, 0xcf, 0xffff, 0x9, 0x63b, 0x1, 0x1000, 0x7, 0x1, 0x1, 0x5, 0x1, 0x405ec66, 0x9950, 0x31, 0x0, 0x83, 0x4, 0x1, 0x2, 0x29, 0x8, 0x800, 0x9, 0x7, 0x1, 0xac, 0x5, 0x658a1215, 0x3, 0x3, 0x8000, 0x9be, 0x0, 0x4, 0xfffffffe, 0x7, 0x6, 0x3, 0x6379, 0x4, 0x6, 0x10, 0x0, 0x4e3, 0x2, 0x3ff, 0x6, 0x914, 0xffff3d61, 0x70, 0xdd0, 0x746, 0x95, 0x1, 0x3, 0x7fffffff, 0x2ff, 0x1ff, 0xfffffffa, 0xf8f5, 0x5, 0x4, 0x6, 0x1, 0x7, 0x9f5, 0x8, 0x8c71, 0x3, 0x3ff, 0x7ff, 0x100, 0x7f, 0x7, 0x8000, 0x0, 0x80, 0xfff, 0x8, 0x7, 0x0, 0x2, 0xffffff4f, 0x7, 0x400, 0x10, 0x4, 0x1, 0x3, 0x8, 0xb07c, 0x4, 0x5, 0x4, 0x5, 0x81, 0x4, 0x6, 0x7ff, 0x3, 0x1, 0x1, 0x5, 0xf621, 0x800, 0x81, 0x3, 0x2000000, 0xfffffff8, 0xd76, 0xffffffff, 0x0, 0x4, 0x80000000, 0x3, 0xd, 0x4, 0x80000000, 0x40, 0x8, 0x80000000, 0xf, 0x7, 0x4, 0x3, 0x2, 0x3, 0x9, 0xa34, 0x555, 0x9, 0xafc6, 0x0, 0xff, 0x3, 0x400, 0xc2, 0x24, 0x10, 0x8000, 0xb7b7, 0xa, 0x2, 0xff, 0x4c41, 0xf, 0x5, 0x40, 0x6776, 0x2, 0x10, 0x7, 0x5, 0x0, 0x3, 0x951, 0x4, 0x3, 0x168a, 0xfff, 0xfff, 0x7, 0xc, 0x7, 0x9, 0x6, 0x8, 0x7, 0x2c, 0xfffffffd, 0x400, 0x4, 0x7fffffff, 0xfffffffc, 0xffff, 0x0, 0x7f, 0x6, 0x40, 0x1, 0x25, 0xd448, 0x4, 0x10000, 0x5b, 0x7, 0x595a, 0x8, 0x7, 0x7, 0xfe, 0x0, 0x271d, 0x7, 0xb, 0x69c, 0x0, 0x8, 0x2, 0x1, 0x5, 0xfffffff8, 0x2, 0x1, 0x101, 0x3, 0x1, 0xeca1, 0x7, 0x1000, 0xc1, 0x80000000, 0x0, 0xb2, 0x3, 0x3, 0x8, 0x9, 0x8001, 0xa, 0x4, 0xfffff001, 0x5, 0x7, 0x1, 0xd117, 0xe4e, 0x200, 0x4, 0x400, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x2, 0xef2e, 0x4f, 0x1fd, 0xe8db, 0x1ff, 0x2, 0x8, 0x0, 0x4, 0x59fd, 0xd, 0x995, 0x0, 0x4, 0x0, 0x8000, 0x5, 0x4a, 0x5, 0x2, 0x4, 0xaf, 0x7, 0x1, 0x0, 0x80000001, 0x8, 0x1, 0x6, 0x0, 0x3, 0x1, 0x10000, 0x4, 0x5, 0x2, 0x8, 0x3, 0xfffffffe, 0xffff, 0x9d, 0x9, 0x1, 0x9, 0x3, 0x56, 0x2, 0x7, 0x7fffffff, 0x8, 0xb, 0xf815, 0x8, 0xfffffe5f, 0x9, 0x800, 0x7, 0x8, 0x5, 0x7fffffff, 0x2, 0x3, 0x2, 0x9, 0xff, 0x3, 0x4, 0x3, 0x2, 0xffffffff, 0x7, 0x7b6, 0xfffffeff, 0xe, 0xa8b, 0x4, 0x0, 0x80000000, 0x4, 0x100fff, 0xffff, 0x0, 0x7fff, 0x5a6c, 0x8, 0x9, 0x7, 0x7ff, 0x10, 0x9, 0x9, 0x0, 0x2, 0x8, 0xffff0001, 0x3, 0x6be, 0x2, 0x9, 0x9, 0x9, 0x2, 0xda, 0xfffffffe, 0x7, 0x4, 0x8, 0xfffffff8, 0x66c, 0x1, 0x9, 0x8, 0xab, 0x10000, 0x8001, 0x9, 0xffff, 0x647f, 0x0, 0xffffff7f, 0x2, 0x76d21108, 0x4, 0x7, 0xfffff001, 0xbc6, 0xfffffffb, 0xa29, 0x5, 0x7ff, 0x7, 0xfff, 0x2, 0x0, 0x3, 0x9, 0xff, 0x7, 0x0, 0x4, 0x9, 0x7ff, 0x6, 0x9, 0x3, 0x80000000, 0xf, 0x3, 0x6, 0x5, 0x80000000, 0x0, 0x200, 0x2, 0x9, 0x75, 0x1, 0x3, 0x5, 0x0, 0x3511, 0x9, 0x5, 0x6, 0x8000, 0x7, 0x7fff, 0x4, 0x9, 0xa7e, 0x1, 0x4, 0x2, 0x2, 0x8, 0x101, 0x4, 0x2, 0x1, 0xa1c8, 0x3b0, 0x3, 0x2, 0x40, 0xf, 0x6, 0x4d7, 0x1, 0x4, 0xfff, 0x80, 0x5b2d, 0x3, 0x1, 0x7, 0xb7, 0x0, 0x4, 0x7, 0x9, 0x2, 0x4, 0x10, 0x9, 0xa, 0x5, 0x8f07, 0x3, 0x6, 0x0, 0xcf7, 0x401, 0x8001, 0x5, 0x40, 0x8, 0x6, 0x8000000, 0x8, 0x5, 0x4, 0x5, 0x101, 0x5, 0x1ff, 0x4a, 0x0, 0x7fff, 0x6, 0xf9, 0x8, 0x26, 0x1, 0x9eb1, 0x80000001, 0x9, 0x7, 0x1, 0x6, 0xfffffffe, 0xd2, 0x6, 0x2fbb9000, 0xfa, 0xeb, 0x2, 0x7, 0x8, 0x9, 0x6, 0x1, 0x5, 0x1, 0x8af0]}]}]}}]}, 0x23e8}, 0x1, 0x0, 0x0, 0x40}, 0x4048051) 5m30.701902442s ago: executing program 2 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) open(&(0x7f00000002c0)='./file0\x00', 0x1c1042, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, 0xffffffffffffffff, 0xce9e1000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000008cc4f02f987f10a60000000006000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsopen(&(0x7f0000000080)='binder\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000007c0)="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", 0xffffff91, 0x0, 0x0, 0xfffffffffffffefa) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="69b8a907dafe6d72ea33d8f8f1ab82e872853aa642"], 0x118) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) 5m29.462663785s ago: executing program 2 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f00000000c0)='\x00', 0x1) shutdown(r3, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500005c0000000000119078000000000000000000004e21004890780300000000000000955aec9ef39911c4e608778212119fd3c62597a2d165de62580c51040000004a8be03c1f996ab79eb3b71dc477351f542ce9232f00000000"], 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, r1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000633000/0x3000)=nil, 0x3000, 0x4, 0x50, r4, 0x3b90c000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x4c6c02, 0x80) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000100)=0x7) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='geneve0\x00', 0x10) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x189841, 0x11) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x1000, 0x9, 0x12}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) 5m27.65149314s ago: executing program 2 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x1c1042, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000008cc4f02f987f10a60000000006000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x6, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000080), 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f00000007c0)="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", 0xffffff91, 0x0, 0x0, 0xfffffffffffffefa) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="69b8a907dafe6d72ea33d8f8f1ab82e872853aa642"], 0x118) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) socket$inet6_udp(0xa, 0x2, 0x0) 5m26.770627844s ago: executing program 2 (id=53): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x2284, &(0x7f0000000080)=@manufact={0x4, 0x1, 0x800, "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"}) r1 = gettid() iopl(0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x200052, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0xf, 0x3}, 0xc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x10, @time={0x9, 0x5}, 0xec, {0x7, 0xee}, 0x9, 0x0, 0x40}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006f020000000000000000000000000002"]) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) ftruncate(r7, 0xb7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x4010, r7}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m26.215261922s ago: executing program 2 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x1c1042, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000008cc4f02f987f10a60000000006000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x6, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000080), 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f00000007c0)="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", 0xffffff91, 0x0, 0x0, 0xfffffffffffffefa) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="69b8a907dafe6d72ea33d8f8f1ab82e872853aa642"], 0x118) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) socket$inet6_udp(0xa, 0x2, 0x0) 5m11.219835452s ago: executing program 32 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x1c1042, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000008cc4f02f987f10a60000000006000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x6, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000080), 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f00000007c0)="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", 0xffffff91, 0x0, 0x0, 0xfffffffffffffefa) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="69b8a907dafe6d72ea33d8f8f1ab82e872853aa642"], 0x118) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) socket$inet6_udp(0xa, 0x2, 0x0) 3m47.818512878s ago: executing program 4 (id=639): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400002c08001700", @ANYRES32=r2], 0x1c}, 0x1, 0x3000000, 0x0, 0x2000808}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x30, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xa}]}, 0x30}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000003c0)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4000041) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000600)={0xa0000013}) epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0x400) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x17, 0x3, 0x0, 0xfffffffffffffdd7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m47.122503125s ago: executing program 4 (id=645): r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_io_uring_setup(0x7667, &(0x7f00000002c0)={0x0, 0x0, 0x13580}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x0, 0x1, r3, 0x0, &(0x7f0000002880)={0x0, 0x0, 0x0}}) io_uring_enter(r4, 0x6256, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setrlimit(0xb, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000010000009704850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0xd, 0x0, &(0x7f0000000040)="61df7171eacb756017e19ad4e326376483d4fd582bc88406d5722780b605a7", 0x0, 0x22f00, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4c) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r8, @ANYBLOB="000225bd7000fbdbdf25070000000800060004000000080006000100000028000280140001000000000000000000000000000000000106000b000a00000006000e004e220000"], 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 3m46.935992938s ago: executing program 4 (id=646): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/'], 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="91d933c07350f0053b47da9ca8a6293e061c769ec49d83a9d90c60c2783efe244e13d3053082cb001d1e562331ef9a1410aa7a32e1bef98de8e9e62689a06ad2b68234e3049e77356b98b288bd27c4e48816bd4841957d61ff64d8b031887e023b353b2d5a7a64c89c35d2a09819a784ce5446f9a2a455aa7e1fc48495c35d954f2a034bc2bed247c4e39348609dac31dc9eb9f2d747369c45bf91545e0f018abb0172786085fe40ae1f50a34678ae48b3bb57200efcbe04406a072cf9337f43da54886a878d", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="18c3e541d014150022fd0100ffdbdf250800a9677ad20100000000f1c78e9ba83111319c670dafd4fa1b00"], 0x18}, 0x1, 0x0, 0x0, 0x20000814}, 0x400d0) 3m46.672980566s ago: executing program 4 (id=647): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0xa00, 0x32}, @in6=@mcast2, {}, {}, {}, 0x70bd2b, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) r1 = openat$cachefiles(0xffffff9c, &(0x7f0000002e00), 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = syz_io_uring_setup(0x2278, &(0x7f0000000240)={0x0, 0xde30, 0x2000, 0x0, 0x30e, 0x0, r1}, &(0x7f00000004c0), 0x0) r4 = syz_io_uring_setup(0x6f28, &(0x7f0000000580)={0x0, 0x835, 0x13580, 0x0, 0x200000, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$FICLONE(r4, 0x40049409, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r8 = socket(0x10, 0x3, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0xa, 0xffff}, {0xb, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 3m46.159941357s ago: executing program 4 (id=651): openat$dsp1(0xffffffffffffff9c, 0x0, 0x2202, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '\x00'}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pwritev(r6, &(0x7f00000008c0)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000140), 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x80207450, &(0x7f00000019c0)) 3m43.130380415s ago: executing program 4 (id=677): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x80002) ppoll(&(0x7f00000000c0)=[{r0, 0x2}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) process_vm_readv(r1, &(0x7f0000000040), 0x0, &(0x7f0000001700)=[{&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000180)=""/120, 0x78}, {&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000300)=""/168, 0xa8}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/162, 0xa2}, {&(0x7f0000001480)=""/112, 0x70}, {&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/222, 0xde}], 0x9, 0x0) 3m28.138337687s ago: executing program 33 (id=677): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x80002) ppoll(&(0x7f00000000c0)=[{r0, 0x2}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) process_vm_readv(r1, &(0x7f0000000040), 0x0, &(0x7f0000001700)=[{&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000180)=""/120, 0x78}, {&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000300)=""/168, 0xa8}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/162, 0xa2}, {&(0x7f0000001480)=""/112, 0x70}, {&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/222, 0xde}], 0x9, 0x0) 2m31.75769038s ago: executing program 1 (id=1219): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x58df, &(0x7f0000000300)={0x0, 0x4beb, 0x2, 0x3, 0x107, 0x0, r3}, &(0x7f0000000380), &(0x7f00000003c0)) syz_open_dev$media(&(0x7f0000000180), 0x80000000d, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x9, 0x3, 0x0, 0x80000001, 0x0, 0x1, 0x2}, 0x0, &(0x7f0000000680)={0xfff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x15, 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000900000000000000f8ffffff2b344000ffffffff95000000000000004badfa1eb500d2032444d50dd025459c36318de5e7b2d27fffcac495b2be"], &(0x7f0000001280)='GPL\x00', 0x7, 0x9f, &(0x7f0000001380)=""/159, 0x41100, 0x45, '\x00', r4, @sk_reuseport=0x28, r5, 0x8, &(0x7f0000001500)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x3, 0xf, 0x1ff, 0x5}, 0x10, 0x0, r3, 0x4, 0x0, &(0x7f0000001580)=[{0x3, 0x1, 0x8, 0x7}, {0x2, 0x3, 0xf, 0x7}, {0x1, 0x3, 0xd, 0x9}, {0x1, 0x1, 0x5, 0x6}], 0x10, 0x0, @void, @value}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f00000000c0), 0x2c8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8, 0x9}]}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r7, &(0x7f0000000280)=""/4096, 0x1000) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x2000000}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="190000000400000008000000ffffff7f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x6, &(0x7f0000002000)={0x1}) 2m31.628141891s ago: executing program 1 (id=1226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000083c0)=""/102354, 0x1904d) creat(&(0x7f0000001200)='./file0\x00', 0x41) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x1, 0x61f285}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r8, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r7, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r7, r4, 0x0) socket(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/4082, 0xff2, 0x9) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001240)=ANY=[@ANYBLOB="0b6e61740000000000000000000000000000000000000000000000000000000088c143ee00de"], &(0x7f0000001740)=0x25) socket$inet_udplite(0x2, 0x2, 0x88) listen(r2, 0x0) r9 = syz_open_procfs(r6, &(0x7f0000001280)='net/nfsfs\x00') preadv(r9, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0x1ef, 0x0) 2m30.749948307s ago: executing program 1 (id=1236): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "59416d570165203d41bec7080089122c000004002231a11000000900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000040)={0x4, 0xb, {0x0}, {}, 0x87b, 0xa}) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/ip_mr_vif\x00') ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000280)={"f60d510b3b73e0ec03f89a44000000c6620000000000000000000000254700", r1, 0xffffffffffffffff}) r5 = dup(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x801, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21514}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r9, 0x1}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) sendmsg$can_j1939(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4}, 0x4c8c0) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x4000) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r12}}) 2m30.650001722s ago: executing program 1 (id=1237): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000100)=@arm64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='thermal_power_cpu_get_power\x00', r2, 0x0, 0x101}, 0x18) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x3}, 0x4) 2m30.649708842s ago: executing program 1 (id=1238): mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r2, 0x301}, 0x14}}, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x10) chdir(&(0x7f0000000140)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000002540)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="3af89d173a99"]) 2m30.539960118s ago: executing program 1 (id=1239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x800, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 2m15.577548432s ago: executing program 34 (id=1239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x800, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 4.640852097s ago: executing program 0 (id=2325): socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r5, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.561001704s ago: executing program 3 (id=2326): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000640)=ANY=[@ANYBLOB="18190000000000000000000000000000181100006398a86db93f4442c043ccfdadfa350d74d30a8405b6c48baf99737a8f82239898096f8d00e86af8c1ad60bd4178770ef49e7420489d38a929573f065733f16474b9759858ec9fce993878ad99b2b5420fc23393523182de45001a93c2245ac3cf782f95ba9459c2995c3043c55db32ab2684008f48d184247440aa00f484d86ce034036f1d4914ed50cfac36a0c9113a3c2f0ac8aafcb32879037414f5bd3e587d76169f358686b3705000000cbbd6f38959eacbd8b848df9c429f92a59", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000690000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='cachefiles_mark_active\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 4.555916902s ago: executing program 3 (id=2327): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) getpid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r2, &(0x7f0000001ac0)=@sco={0x1f, @none}, &(0x7f0000001b40)=0x80) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x8d, 0x2, 0x1}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001ac0), 0x0, &(0x7f0000000380)=""/74, 0x4a}, 0x1}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/53, 0x35}, {&(0x7f0000000240)=""/4, 0x4}, {&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f0000001b80)=""/129, 0x81}, {&(0x7f00000007c0)=""/51, 0x33}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f0000000800)=""/69, 0x45}, {&(0x7f0000000400)=""/50, 0x32}], 0x8}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000880)=""/161, 0xa1}], 0x1, &(0x7f0000001980)=""/176, 0xb0}, 0x10001}], 0x3, 0x36000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xfffffffffffffd91, &(0x7f0000000440)={&(0x7f0000001c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRES64=r4, @ANYBLOB="27cc3f5bd2da2586e2d45b7bdc2b328412abc7755ec8c473f097a8deb1aa4e36a65ffd9391c6dda30dc9ca6a787a31fd351c770432d9452af74dbac673e8754e3901cd72f7a64bc99ca7fc8808582a6b10a63adaa6eaa9de1f5828942c5f46f18a355c486a1ed8dd9c3115ea3ca610fca30d0f2ab62523a30558ac6474f1b3d4eca26b7cdf437e1f990dc751aacd21acbc729ccabca5c32de07756787993d029b126898172fa5767b2eea16576fa7561c6e11e0777a7977f5bd0be367e9ebb141d3e2b2080688158b5dada844571a52b90a52748f0407477326310e3e21aa84cd66cbfcced62b8f4c15029cc03182227251e40adcb44e9"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.699960764s ago: executing program 3 (id=2330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x800, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 3.511041502s ago: executing program 3 (id=2331): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x1c1042, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, 0xffffffffffffffff, 0xce9e1000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000008cc4f02f987f10a60000000006000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsopen(&(0x7f0000000080)='binder\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000007c0)="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", 0x21c, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="69b8a907dafe6d72ea33d8f8f1ab82e872853aa642"], 0x118) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) 3.339615484s ago: executing program 6 (id=2332): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x1c1042, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, 0xffffffffffffffff, 0xce9e1000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000008cc4f02f987f10a60000000006000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsopen(&(0x7f0000000080)='binder\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000007c0)="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", 0x21c, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="69b8a907dafe6d72ea33d8f8f1ab82e872853aa642"], 0x118) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) 2.380845051s ago: executing program 6 (id=2335): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000004c0)="b9", 0x1) sendto$inet(r0, &(0x7f0000000080)="d5", 0x1, 0x600, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 2.257327761s ago: executing program 5 (id=2336): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x2, [@volatile={0x7, 0x0, 0x0, 0x9, 0x5}, @struct={0x8, 0x6, 0x0, 0x4, 0x1, 0x6, [{0x8, 0x0, 0x7}, {0x4, 0x3, 0xfffffff3}, {0xc, 0x4, 0x5}, {0x10, 0x3, 0xb052}, {0xc, 0x0, 0x101}, {0xa, 0x5, 0x5}]}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x2}, @enum64={0x5, 0x2, 0x0, 0x13, 0x1, 0x0, [{0x10, 0xec000000, 0x7}, {0x2, 0x1000, 0x6}]}]}}, 0x0, 0xba, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r4 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000082001004200000008000300", @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000100)={0x1}, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) write$binfmt_misc(r8, &(0x7f0000000240)="10af4b51f4dcda7cca07db3582cc9f7a8afe5dc855434158e4ae06bf85b1d1850286229945d5c9aa6fd63be344530c48de44b1267afc810075fb1f9fb6e6e0f8183d905cbe6a1bd65b6ab4cd76df417698c42fe64a04ebf70a5b6e49ef8ccfc8613b25c3a265c67c970365e6a2b0f56031f144fcf1c97613634685debb91bb", 0x7f) getdents64(r8, 0x0, 0x18) getdents64(r8, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000140)="bfc71ca48b7e37ff225bcf972b61fde24717c473ace9f51513581ac4583609fbc56837d3c73d4acfacb12f8d425c54580e196ec2625652a45c486f2a5ba4951cde9d453069ab191e6ee7f48678dd73e728bd51002513c9b5aac9aaefc42d09e85597e77665eac6b0f7b0ecaf36623ca484c5a0478291a68c75b906d895210b4ff7b8", 0x82, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) ioctl$SCSI_IOCTL_SYNC(r8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.140958019s ago: executing program 5 (id=2337): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000080)=[{{0x0, 0xfff0, &(0x7f0000000140)=[{&(0x7f0000000a40)=""/143, 0x8f}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)={0x80, 0x15, 0x4, 0x70bd2b, 0x25dfdbff, "", [@typed={0x51, 0x147, 0x0, 0x0, @binary="41f977d36c31665c1f0656c7ebc5bb7d5b573cf79138acef2f0c0775e0dbe867b6e06638f88106179029d981d4d2c24a774a61590bbb773b86fb778993f351d5b642bfa07bd451227401e6c919"}, @nested={0x19, 0x89, 0x0, 0x1, [@generic="d665c67da487d0ed1cd18e22119a301ba9ba86f5aa"]}]}, 0x80}], 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) 1.82079202s ago: executing program 0 (id=2338): r0 = openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x12140, 0x101) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x24) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="10"], 0x10) (async) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) (async) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.820578665s ago: executing program 0 (id=2339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x800, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1.750646061s ago: executing program 0 (id=2340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000003080101000000000000000006000005000300ff0000000c0004800800014000000000060002400000000000"], 0x30}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4c8203, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="183c0f628903cccb68cf89051a1ba3836f00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x4, 0xffffffbe, 0x0, 0x0, 0x4000001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1) socket$inet6(0xa, 0x1, 0x100) close(r7) socket$netlink(0x10, 0x3, 0x4) 1.440889604s ago: executing program 6 (id=2341): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x9f9, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc04c5609, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x0, 0x0, 0x9, 0x0, 0x8, 0x2, "b248c8ea"}}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x8, 0x4) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockname(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000", 0x17}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a47502b4207297de026ed4ea30bef60af76f2b26e1a2768a7226f918253314511129725d1bdaaf35826dc04373837263fdf17c4b2639c8819e6d203132318162b1501b0ff936", 0x8a}, {&(0x7f0000000200)="57247d533633c256b37c6a4aedc53a12d585f860d01b94eb8637345f22ac54c74196f711", 0x24}, {&(0x7f0000000240)="be1ac182feb197b37fadc7e8ad4b3a9a9b791e900ba3d654bb44d4402987f407bdbcefe93f535279", 0x28}, {&(0x7f00000004c0)="91f0807b6afddf80750c5a560c2081f08de8a721aa5e3cfd5a6bc6cabda994bf8693656d03e1ecd9d468f2d4bb42292991d19fba6097597c9e6f16fdcb2b551f2bfeaaf98a60bc01df68984cf336e2d257b29840e3adfa847b5f420ea7b5e4d1545ae88f63dfbb3ecdfa6633997cbaaa79e2ada80941", 0x76}, {0x0}], 0x8}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x12) 1.28094467s ago: executing program 5 (id=2342): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(r0, &(0x7f0000000440)='./bus\x00', 0x41) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x7d768ae1aa3592ce, &(0x7f0000000040)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000280)='./file1\x00') chdir(&(0x7f00000000c0)='./bus\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000026aca4eb00000000000018010000202070250000000000202020c31af8ffa1000000bfa100000000000007ecfffffffeefffb702000008000000b70300000000000085000000c70000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.280656424s ago: executing program 5 (id=2343): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) tee(0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x25ed91b8b215948b) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000c80)}, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='1', 0xfef82e96) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r5 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0xa, &(0x7f0000000000)=0x3, 0x4) r7 = syz_open_pts(r0, 0x0) r8 = dup3(r7, r0, 0x0) ioctl$TCSETSW2(r8, 0x5437, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x1, 0x84) 750.816266ms ago: executing program 5 (id=2344): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x2, [@volatile={0x7, 0x0, 0x0, 0x9, 0x5}, @struct={0x8, 0x6, 0x0, 0x4, 0x1, 0x6, [{0x8, 0x0, 0x7}, {0x4, 0x3, 0xfffffff3}, {0xc, 0x4, 0x5}, {0x10, 0x3, 0xb052}, {0xc, 0x0, 0x101}, {0xa, 0x5, 0x5}]}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x2}, @enum64={0x5, 0x2, 0x0, 0x13, 0x1, 0x0, [{0x10, 0xec000000, 0x7}, {0x2, 0x1000, 0x6}]}]}}, 0x0, 0xba, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000082001004200000008000300", @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000100)={0x1}, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) write$binfmt_misc(r8, &(0x7f0000000240)="10af4b51f4dcda7cca07db3582cc9f7a8afe5dc855434158e4ae06bf85b1d1850286229945d5c9aa6fd63be344530c48de44b1267afc810075fb1f9fb6e6e0f8183d905cbe6a1bd65b6ab4cd76df417698c42fe64a04ebf70a5b6e49ef8ccfc8613b25c3a265c67c970365e6a2b0f56031f144fcf1c97613634685debb91bb", 0x7f) getdents64(r8, 0x0, 0x18) getdents64(r8, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000140)="bfc71ca48b7e37ff225bcf972b61fde24717c473ace9f51513581ac4583609fbc56837d3c73d4acfacb12f8d425c54580e196ec2625652a45c486f2a5ba4951cde9d453069ab191e6ee7f48678dd73e728bd51002513c9b5aac9aaefc42d09e85597e77665eac6b0f7b0ecaf36623ca484c5a0478291a68c75b906d895210b4ff7b8", 0x82, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) ioctl$SCSI_IOCTL_SYNC(r8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 699.328251ms ago: executing program 5 (id=2345): socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r5, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 550.604501ms ago: executing program 6 (id=2346): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0xffffffffffffffbe, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x6, &(0x7f0000000040), 0x0, 0x0, 0x1, 0x46, 0x0, 0x5}) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lseek(0xffffffffffffffff, 0xffffffffffffeffa, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$P9_RLERRORu(r3, 0x0, 0x0) 550.395915ms ago: executing program 6 (id=2347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x800, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 488.519135ms ago: executing program 6 (id=2348): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1420420}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x0, &(0x7f0000000040)}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xff8, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x1e}}}], 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) 359.770911ms ago: executing program 3 (id=2333): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0xa00, 0x32}, @in6=@mcast2, {}, {}, {}, 0x70bd2b, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) r1 = openat$cachefiles(0xffffff9c, &(0x7f0000002e00), 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = syz_io_uring_setup(0x2278, &(0x7f0000000240)={0x0, 0xde30, 0x2000, 0x0, 0x30e, 0x0, r1}, &(0x7f00000004c0), 0x0) r4 = syz_io_uring_setup(0x6f28, &(0x7f0000000580)={0x0, 0x835, 0x13580, 0x0, 0x200000, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$FICLONE(r4, 0x40049409, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r8 = socket(0x10, 0x3, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) gettid() ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched_retired(r1, 0x0, 0x801) 80.755985ms ago: executing program 0 (id=2349): getxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000071c0), 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/195}], 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0xfffffff3}}], 0x10}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_emit_vhci(0x0, 0x7) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040d0409009604"], 0x7) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1f, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r7 = dup2(r5, r6) writev(r4, &(0x7f0000000580)=[{&(0x7f00000002c0)="b769b5", 0x3}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000440)="2d012ae14d97b49d69bb508dec5714fe9e0998bedf56f2b3c4d72b01ed2cc16403", 0x21}, {&(0x7f0000000480)}, {&(0x7f0000000500)="c0c635f609ac102524424af14865dda3268cf7689ac66cf1c8f9556a959c8edc3f665791f77c5af6a111ff1a701964a5524ea2df0f57321be2ac1bc23d4605db85c6b3dc06021ca570cc32d814b60494f125ff22efed0f1668f643bfd286608fff1299b223fdfef14fd801f015e4d27303f399bb364eeeca5a8c738569", 0x7d}, {&(0x7f0000001780)="e8f2ee2c0c5fe6cb9d3640cf207ab2be9e69db6df773420341fee8c2c4dfe65f473ab74c20c5c81486b71f9094ce37596a877f838a8194c8084bf76bc70137", 0x3f}], 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r8, &(0x7f00000003c0)={0xa, 0x0, 0x1000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r8, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) 565.481µs ago: executing program 0 (id=2350): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000c000000000000000000006533e203e9ee5b2648be7433f0"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getpid() r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0xc0086202, &(0x7f0000000440)=0x2) r10 = socket(0xf, 0x80805, 0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0xffff}, 0x90) landlock_create_ruleset(&(0x7f0000000300)={0x1006, 0x3}, 0x18, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0x454e, 0x4) bind$inet(r6, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0xe21, @multicast2}, 0x10) sendmmsg(r6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) 0s ago: executing program 3 (id=2351): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400002c08001700"], 0x1c}, 0x1, 0x3000000, 0x0, 0x2000808}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x30, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xa}]}, 0x30}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000003c0)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4000041) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000600)={0xa0000013}) epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0x400) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x17, 0x3, 0x0, 0xfffffffffffffdd7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 4][ T6403] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 319.867616][ T6403] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 319.871523][ T6403] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.876438][ T6403] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.879725][ T6403] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.884290][ T6403] usb 8-1: config 0 descriptor?? [ 319.886635][T12280] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 319.907036][ T8520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 319.910188][ T8520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 319.913357][ T8520] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.916702][ T8520] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.919083][ T8520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.922414][ T8520] usb 5-1: config 0 descriptor?? [ 319.924390][T12282] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 320.024570][T12290] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 320.177752][T12301] ERROR: Out of memory at tomoyo_memory_ok. [ 320.294813][ T6403] plantronics 0003:047F:FFFF.002D: ignoring exceeding usage max [ 320.297721][ T6403] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 320.302304][ T6403] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 320.346544][ T8520] plantronics 0003:047F:FFFF.002E: ignoring exceeding usage max [ 320.349635][ T8520] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 320.355913][ T8520] plantronics 0003:047F:FFFF.002E: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 321.607153][ T8520] usb 5-1: USB disconnect, device number 44 [ 322.185332][T12324] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1919'. [ 322.188666][T12324] netlink: 'syz.0.1919': attribute type 2 has an invalid length. [ 322.190685][T12324] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1919'. [ 322.224587][T12335] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 322.242163][T12337] bridge0: left allmulticast mode [ 322.322528][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1927'. [ 322.324960][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1927'. [ 322.642481][ T6403] usb 8-1: reset high-speed USB device number 47 using dummy_hcd [ 322.811609][T12344] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 323.287154][ T1478] usb 8-1: USB disconnect, device number 47 [ 323.329948][T12358] vivid-000: ================= START STATUS ================= [ 323.332009][T12358] vivid-000: Test Pattern: 75% Colorbar [ 323.334381][T12358] vivid-000: Fill Percentage of Frame: 100 [ 323.335975][T12358] vivid-000: Horizontal Movement: Move Right Slow [ 323.337692][T12358] vivid-000: Vertical Movement: No Movement [ 323.339283][T12358] vivid-000: OSD Text Mode: All [ 323.340555][T12358] vivid-000: Show Border: false [ 323.341844][T12358] vivid-000: Show Square: false [ 323.343436][T12358] vivid-000: Sensor Flipped Horizontally: false [ 323.345085][T12358] vivid-000: Sensor Flipped Vertically: false [ 323.346682][T12358] vivid-000: Insert SAV Code in Image: false [ 323.348270][T12358] vivid-000: Insert EAV Code in Image: false [ 323.349852][T12358] vivid-000: Insert Video Guard Band: false [ 323.351442][T12358] vivid-000: Reduced Framerate: false [ 323.352968][T12358] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 323.354987][T12358] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 323.357033][T12358] vivid-000: Enable Capture Cropping: true [ 323.358583][T12358] vivid-000: Enable Capture Composing: true [ 323.360160][T12358] vivid-000: Enable Capture Scaler: true [ 323.361648][T12358] vivid-000: Timestamp Source: End of Frame [ 323.364010][T12358] vivid-000: Colorspace: Rec. 709 [ 323.365318][T12358] vivid-000: Transfer Function: Default [ 323.366793][T12358] vivid-000: Y'CbCr Encoding: Default [ 323.368242][T12358] vivid-000: HSV Encoding: Hue 0-179 [ 323.369644][T12358] vivid-000: Quantization: Default [ 323.371005][T12358] vivid-000: Apply Alpha To Red Only: false [ 323.372626][T12358] vivid-000: Standard Aspect Ratio: 4x3 [ 323.374109][T12358] vivid-000: DV Timings Signal Mode: Current DV Timings [ 323.375921][T12358] vivid-000: DV Timings: 640x480p59 inactive [ 323.377511][T12358] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 323.379417][T12358] vivid-000: Maximum EDID Blocks: 2 [ 323.380794][T12358] vivid-000: Limited RGB Range (16-235): true [ 323.382899][T12358] vivid-000: Rx RGB Quantization Range: Automatic [ 323.382930][T12358] vivid-000: Power Present: 0x00000001 [ 323.382945][T12358] tpg source WxH: 38304x23940 (HSV) [ 323.382958][T12358] tpg field: 7 [ 323.382963][T12358] tpg crop: 38304x23940@0x0 [ 323.382971][T12358] tpg compose: 38304x11970@0x0 [ 323.382979][T12358] tpg colorspace: 3 [ 323.382983][T12358] tpg transfer function: 0/0 [ 323.382989][T12358] tpg HSV encoding: 0/0 [ 323.382994][T12358] tpg quantization: 0/0 [ 323.383000][T12358] tpg RGB range: 0/1 [ 323.383005][T12358] vivid-000: ================== END STATUS ================== [ 323.507529][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1932'. [ 323.874408][T12369] x_tables: duplicate underflow at hook 1 [ 324.152160][T12379] tmpfs: Bad value for 'mpol' [ 324.185493][T12379] siw: device registration error -23 [ 324.189279][T12379] smc: removing ib device syz1 [ 324.201662][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1941'. [ 324.487836][T12399] can: request_module (can-proto-0) failed. [ 324.553584][ T6211] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 324.716980][ T6403] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 324.723001][ T6211] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 324.726779][ T6211] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 324.730549][ T6211] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 324.735140][ T6211] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.738432][ T6211] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.739887][T12411] __nla_validate_parse: 1 callbacks suppressed [ 324.740157][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'. [ 324.740285][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1949'. [ 324.742601][ T6211] usb 10-1: config 0 descriptor?? [ 324.750862][T12386] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 324.865287][ T6403] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 324.869779][ T6403] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.873420][ T6403] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.877667][ T6403] usb 8-1: config 0 descriptor?? [ 324.881844][ T6403] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 324.952253][T12417] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1950'. [ 324.954765][T12417] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.1950'. [ 325.177126][ T6211] plantronics 0003:047F:FFFF.002F: ignoring exceeding usage max [ 325.180330][ T6211] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 325.183801][ T6211] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 325.382936][T12421] sp0: Synchronizing with TNC [ 326.405197][T12438] netlink: 'syz.0.1956': attribute type 30 has an invalid length. [ 327.132269][ T8520] IPVS: starting estimator thread 0... [ 327.138311][T12446] usb usb9: usbfs: process 12446 (syz.5.1958) did not claim interface 0 before use [ 327.222856][T12447] IPVS: using max 34 ests per chain, 81600 per kthread [ 327.285294][ T1478] usb 10-1: USB disconnect, device number 19 [ 327.509908][ T4299] usb 8-1: USB disconnect, device number 48 [ 327.512525][ T65] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 327.515331][ T5955] Bluetooth: hci0: command 0x1003 tx timeout [ 327.577846][T12456] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1960'. [ 327.580774][T12456] netlink: 'syz.5.1960': attribute type 10 has an invalid length. [ 327.728055][ T39] kauditd_printk_skb: 139 callbacks suppressed [ 327.728355][ T39] audit: type=1326 audit(328.052:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 327.741986][ T39] audit: type=1326 audit(328.052:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 327.750607][ T39] audit: type=1326 audit(328.062:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 327.752046][T12458] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1961'. [ 327.756527][ T39] audit: type=1326 audit(328.062:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 327.765618][ T39] audit: type=1326 audit(328.062:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 327.771338][ T39] audit: type=1326 audit(328.072:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 327.777011][ T39] audit: type=1326 audit(328.072:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 327.782841][ T39] audit: type=1326 audit(328.072:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 327.790141][ T39] audit: type=1326 audit(328.072:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 327.807661][ T39] audit: type=1326 audit(328.072:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 327.810109][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1962'. [ 328.313460][T12465] lo: entered allmulticast mode [ 328.322552][T12465] tunl0: entered allmulticast mode [ 328.327753][T12465] gre0: entered allmulticast mode [ 328.343616][T12465] gretap0: entered allmulticast mode [ 328.348559][T12465] erspan0: entered allmulticast mode [ 328.359839][T12465] ip_vti0: entered allmulticast mode [ 328.364958][T12465] ip6_vti0: entered allmulticast mode [ 328.370075][T12465] sit0: entered allmulticast mode [ 328.381735][T12465] ip6tnl0: entered allmulticast mode [ 328.389319][T12465] ip6gre0: entered allmulticast mode [ 328.408572][T12465] syz_tun: entered allmulticast mode [ 328.417111][T12468] FAULT_INJECTION: forcing a failure. [ 328.417111][T12468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.421917][T12468] CPU: 1 UID: 0 PID: 12468 Comm: syz.5.1963 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 328.425786][T12468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 328.429638][T12468] Call Trace: [ 328.430875][T12468] [ 328.431970][T12468] dump_stack_lvl+0x16c/0x1f0 [ 328.433687][T12468] should_fail_ex+0x497/0x5b0 [ 328.435435][T12468] _copy_from_user+0x2e/0xd0 [ 328.437123][T12468] kstrtouint_from_user+0xd7/0x1c0 [ 328.439020][T12468] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 328.441129][T12468] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 328.443205][T12468] proc_fail_nth_write+0x84/0x250 [ 328.445065][T12468] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 328.447170][T12468] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 328.449210][T12468] vfs_write+0x24c/0x1150 [ 328.450829][T12468] ? __fget_files+0x23a/0x3f0 [ 328.452553][T12468] ? fdget_pos+0x24c/0x360 [ 328.454197][T12468] ? __pfx_lock_release+0x10/0x10 [ 328.456060][T12468] ? trace_lock_acquire+0x14a/0x1d0 [ 328.457973][T12468] ? __pfx_vfs_write+0x10/0x10 [ 328.459745][T12468] ? __pfx___mutex_lock+0x10/0x10 [ 328.461586][T12468] ? __fget_files+0x244/0x3f0 [ 328.463344][T12468] ksys_write+0x12f/0x260 [ 328.464948][T12468] ? __pfx_ksys_write+0x10/0x10 [ 328.466754][T12468] __do_fast_syscall_32+0x73/0x120 [ 328.468624][T12468] do_fast_syscall_32+0x32/0x80 [ 328.470397][T12468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.472637][T12468] RIP: 0023:0xf7fb5579 [ 328.474116][T12468] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 328.480958][T12468] RSP: 002b:00000000f55f4590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 328.483960][T12468] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000f55f4620 [ 328.486813][T12468] RDX: 0000000000000001 RSI: 00000000f743cff4 RDI: 0000000000000000 [ 328.489656][T12468] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 328.492458][T12468] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 328.494908][T12468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.497334][T12468] [ 328.498528][T12465] ip6gretap0: entered allmulticast mode [ 328.537844][T12465] vcan0: entered allmulticast mode [ 328.543324][T12465] bond0: entered allmulticast mode [ 328.544936][T12465] bond_slave_0: entered allmulticast mode [ 328.546493][T12465] bond_slave_1: entered allmulticast mode [ 328.548141][T12465] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 328.557213][T12465] team0: entered allmulticast mode [ 328.558744][T12465] team_slave_0: entered allmulticast mode [ 328.560313][T12465] team_slave_1: entered allmulticast mode [ 328.568146][T12465] dummy0: entered allmulticast mode [ 328.663023][T12465] nlmon0: entered allmulticast mode [ 328.666940][T12465] caif0: entered allmulticast mode [ 328.753303][T12465] batadv0: entered allmulticast mode [ 328.761343][T12465] veth0: entered allmulticast mode [ 328.771071][T12465] veth1: entered allmulticast mode [ 328.780594][T12465] wg0: entered allmulticast mode [ 328.789178][T12465] wg1: entered allmulticast mode [ 328.796685][T12465] wg2: entered allmulticast mode [ 328.813391][T12465] veth0_to_bridge: entered allmulticast mode [ 328.825537][T12465] veth1_to_bridge: entered allmulticast mode [ 328.838369][T12465] veth0_to_bond: entered allmulticast mode [ 328.849644][T12465] veth1_to_bond: entered allmulticast mode [ 328.859650][T12465] veth0_to_team: entered allmulticast mode [ 328.869104][T12465] veth1_to_team: entered allmulticast mode [ 328.880681][T12465] veth0_to_batadv: entered allmulticast mode [ 328.888170][T12465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.891939][T12465] batadv_slave_0: entered allmulticast mode [ 328.898359][T12465] veth1_to_batadv: entered allmulticast mode [ 328.904556][T12465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.908004][T12465] batadv_slave_1: entered allmulticast mode [ 328.913188][T12465] xfrm0: entered allmulticast mode [ 328.918565][T12465] veth0_to_hsr: entered allmulticast mode [ 328.924178][T12465] hsr_slave_0: entered allmulticast mode [ 328.928826][T12465] veth1_to_hsr: entered allmulticast mode [ 328.932500][T12465] hsr_slave_1: entered allmulticast mode [ 328.936874][T12465] hsr0: entered allmulticast mode [ 328.944125][T12465] veth1_virt_wifi: entered allmulticast mode [ 328.949546][T12465] veth0_virt_wifi: entered allmulticast mode [ 328.954669][T12465] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 328.958887][T12465] veth1_vlan: entered allmulticast mode [ 328.966382][T12465] veth0_vlan: entered allmulticast mode [ 328.978375][T12465] vlan0: entered allmulticast mode [ 328.980089][T12465] vlan1: entered allmulticast mode [ 328.984434][T12465] macvlan0: entered allmulticast mode [ 328.990740][T12465] macvlan1: entered allmulticast mode [ 328.995525][T12465] ipvlan0: entered allmulticast mode [ 328.997468][T12465] ipvlan1: entered allmulticast mode [ 329.001194][T12465] veth1_macvtap: entered allmulticast mode [ 329.009539][T12465] veth0_macvtap: entered allmulticast mode [ 329.016078][T12465] macvtap0: entered allmulticast mode [ 329.026193][T12465] macsec0: entered allmulticast mode [ 329.032717][T12465] geneve0: entered allmulticast mode [ 329.037960][T12465] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.040243][T12465] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.042672][T12465] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.045289][T12465] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.047739][T12465] geneve1: entered allmulticast mode [ 329.052789][T12465] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 329.057372][T12465] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 329.061802][T12465] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 329.066229][T12465] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 329.068263][T12465] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 329.070239][T12465] mac80211_hwsim hwsim33 wlan2: entered allmulticast mode [ 329.072202][T12465] mac80211_hwsim hwsim35 wlan3: entered allmulticast mode [ 329.074507][T12465] mac80211_hwsim hwsim36 wlan4: entered allmulticast mode [ 329.077293][T12465] mac80211_hwsim hwsim40 wlan5: entered allmulticast mode [ 329.080027][T12465] mac80211_hwsim hwsim42 wlan6: entered allmulticast mode [ 329.082815][T12465] mac80211_hwsim hwsim43 wlan7: entered allmulticast mode [ 329.085598][T12465] mac80211_hwsim hwsim44 wlan8: entered allmulticast mode [ 329.089666][T12465] bridge1: entered allmulticast mode [ 329.095148][T12465] mac80211_hwsim hwsim49 wlan9: entered allmulticast mode [ 329.098501][T12475] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1965'. [ 329.100979][T12476] netlink: 'syz.3.1965': attribute type 10 has an invalid length. [ 329.170761][T12480] FAULT_INJECTION: forcing a failure. [ 329.170761][T12480] name failslab, interval 1, probability 0, space 0, times 0 [ 329.176142][T12480] CPU: 3 UID: 0 PID: 12480 Comm: syz.5.1967 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 329.179774][T12480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 329.183373][T12480] Call Trace: [ 329.184500][T12480] [ 329.185462][T12480] dump_stack_lvl+0x16c/0x1f0 [ 329.186956][T12480] should_fail_ex+0x497/0x5b0 [ 329.188454][T12480] ? fs_reclaim_acquire+0xae/0x150 [ 329.190165][T12480] should_failslab+0xc2/0x120 [ 329.191721][T12480] __kmalloc_node_track_caller_noprof+0xcf/0x440 [ 329.193970][T12480] ? kstrdup_const+0x63/0x80 [ 329.195518][T12480] kstrdup+0x3c/0x80 [ 329.196771][T12480] kstrdup_const+0x63/0x80 [ 329.198228][T12480] __kernfs_new_node+0x9c/0x890 [ 329.199872][T12480] ? __pfx___kernfs_new_node+0x10/0x10 [ 329.201612][T12480] ? __pfx_lock_release+0x10/0x10 [ 329.203228][T12480] ? kernfs_add_one+0x39d/0x520 [ 329.204820][T12480] ? lock_acquire.part.0+0x11b/0x380 [ 329.206514][T12480] ? find_held_lock+0x2d/0x110 [ 329.208060][T12480] kernfs_new_node+0x186/0x240 [ 329.209588][T12480] kernfs_create_link+0xcc/0x240 [ 329.211192][T12480] sysfs_do_create_link_sd+0x90/0x140 [ 329.212928][T12480] sysfs_create_link+0x61/0xc0 [ 329.214446][T12480] device_add+0x62e/0x1a70 [ 329.215897][T12480] ? __pfx_device_add+0x10/0x10 [ 329.217483][T12480] ? __init_waitqueue_head+0xca/0x150 [ 329.219216][T12480] tty_register_device_attr+0x38f/0x7c0 [ 329.220989][T12480] ? __pfx_tty_register_device_attr+0x10/0x10 [ 329.222927][T12480] ? lockdep_init_map_type+0x16d/0x7d0 [ 329.224659][T12480] ? tty_port_init+0x156/0x1c0 [ 329.226179][T12480] gsm_activate_mux+0x157/0x2e0 [ 329.227781][T12480] gsmld_ioctl+0x8cc/0x1700 [ 329.229183][T12480] ? __pfx_gsmld_ioctl+0x10/0x10 [ 329.230788][T12480] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 329.232681][T12480] ? __pfx_gsmld_ioctl+0x10/0x10 [ 329.234273][T12480] tty_compat_ioctl+0x427/0x4d0 [ 329.235841][T12480] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 329.237573][T12480] __do_compat_sys_ioctl+0x259/0x2b0 [ 329.239239][T12480] __do_fast_syscall_32+0x73/0x120 [ 329.240558][T12480] do_fast_syscall_32+0x32/0x80 [ 329.241808][T12480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.243437][T12480] RIP: 0023:0xf7fb5579 [ 329.244489][T12480] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 329.249408][T12480] RSP: 002b:00000000f573655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 329.251558][T12480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000404c4701 [ 329.253580][T12480] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.255552][T12480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.257605][T12480] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 329.259647][T12480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.261688][T12480] [ 329.537655][T12501] sp0: Synchronizing with TNC [ 330.292156][T12512] fuse: Unknown parameter 'grou00000000000000000000' [ 330.345063][T12514] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.1976'. [ 330.652866][T12515] syz.0.1976: attempt to access beyond end of device [ 330.652866][T12515] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 330.657195][T12515] SQUASHFS error: Failed to read block 0x0: -5 [ 330.658963][T12515] unable to read squashfs_super_block [ 331.662501][ T5969] Bluetooth: hci0: command 0x1003 tx timeout [ 331.662967][ T65] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 332.189795][T12557] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1982'. [ 332.192866][T12557] netlink: 'syz.3.1982': attribute type 10 has an invalid length. [ 332.850033][T12576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1984'. [ 333.126031][T12560] cgroup: fork rejected by pids controller in /syz5 [ 333.182526][ T5958] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 333.366327][ T5958] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.370317][ T5958] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 333.420426][T12640] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1987'. [ 333.423639][T12640] netlink: 'syz.6.1987': attribute type 10 has an invalid length. [ 333.432507][ T65] Bluetooth: hci5: command 0x1003 tx timeout [ 333.435976][ T5955] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 333.517402][ T5958] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 333.520144][ T5958] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.663117][ T5958] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.665493][ T5958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.681356][ T5958] usb 8-1: config 0 descriptor?? [ 333.746500][T12643] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 333.848471][T12646] fuse: Unknown parameter 'group_i00000000000000000000' [ 334.103222][ T5958] usbhid 8-1:0.0: can't add hid device: -71 [ 334.105417][ T5958] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 334.112576][ T5958] usb 8-1: USB disconnect, device number 49 [ 334.372488][T12655] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1992'. [ 334.375517][T12655] netlink: 'syz.6.1992': attribute type 10 has an invalid length. [ 334.621347][T12657] netlink: 'syz.3.1993': attribute type 3 has an invalid length. [ 334.892671][ T6403] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 334.896448][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1997'. [ 335.027713][T12672] fuse: Unknown parameter 'group_i00000000000000000000' [ 335.042461][ T6403] usb 8-1: Using ep0 maxpacket: 16 [ 335.048320][ T6403] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.050992][ T6403] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 335.053427][ T6403] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.056283][ T6403] usb 8-1: config 0 descriptor?? [ 335.059500][ T6403] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input20 [ 335.082710][ T56] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 335.252665][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 335.261822][ T56] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 335.266070][ T56] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 335.269551][ T56] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 335.273339][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 335.277046][ T56] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 335.280219][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 335.284888][ T56] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 335.288196][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.357730][ T56] usb 5-1: config 0 descriptor?? [ 335.569991][ T56] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 335.579646][ T56] usb 5-1: USB disconnect, device number 45 [ 335.588776][ T56] usblp0: removed [ 336.043035][T12696] FAULT_INJECTION: forcing a failure. [ 336.043035][T12696] name failslab, interval 1, probability 0, space 0, times 0 [ 336.046522][T12696] CPU: 0 UID: 0 PID: 12696 Comm: syz.6.2005 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 336.049378][T12696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 336.052123][T12696] Call Trace: [ 336.052994][T12696] [ 336.053801][T12696] dump_stack_lvl+0x16c/0x1f0 [ 336.055033][T12696] should_fail_ex+0x497/0x5b0 [ 336.056257][T12696] ? fs_reclaim_acquire+0xae/0x150 [ 336.057612][T12696] should_failslab+0xc2/0x120 [ 336.058851][T12696] __kmalloc_node_noprof+0xd1/0x440 [ 336.060204][T12696] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 336.061626][T12696] ? lockdep_init_map_type+0x16d/0x7d0 [ 336.063057][T12696] __kvmalloc_node_noprof+0xad/0x1a0 [ 336.064446][T12696] bucket_table_alloc.isra.0+0x86/0x460 [ 336.065874][T12696] ? __raw_spin_lock_init+0x3a/0x110 [ 336.067238][T12696] rhashtable_init_noprof+0x43b/0x7d0 [ 336.068612][T12696] ? __init_waitqueue_head+0xca/0x150 [ 336.070008][T12696] rhltable_init_noprof+0x20/0x60 [ 336.071324][T12696] sta_info_init+0x5f/0x160 [ 336.072508][T12696] ieee80211_alloc_hw_nm+0x840/0x2260 [ 336.072605][ T4299] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 336.073892][T12696] ? __local_bh_enable_ip+0xa4/0x120 [ 336.073914][T12696] mac80211_hwsim_new_radio+0x201/0x56c0 [ 336.073940][T12696] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 336.073955][T12696] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 336.073970][T12696] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 336.084077][T12696] hwsim_new_radio_nl+0xb42/0x12b0 [ 336.085456][T12696] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 336.086915][T12696] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 336.088826][T12696] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 336.090745][T12696] genl_family_rcv_msg_doit+0x202/0x2f0 [ 336.092195][T12696] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 336.093784][T12696] ? bpf_lsm_capable+0x9/0x10 [ 336.095020][T12696] ? security_capable+0x7e/0x260 [ 336.096314][T12696] ? ns_capable+0xd7/0x110 [ 336.097494][T12696] genl_rcv_msg+0x565/0x800 [ 336.098688][T12696] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.100016][T12696] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 336.101461][T12696] netlink_rcv_skb+0x165/0x410 [ 336.102711][T12696] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.104085][T12696] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.105472][T12696] ? down_read+0xc9/0x330 [ 336.106604][T12696] ? __pfx_down_read+0x10/0x10 [ 336.107868][T12696] ? rcu_is_watching+0x12/0xc0 [ 336.109115][T12696] genl_rcv+0x28/0x40 [ 336.110162][T12696] netlink_unicast+0x53c/0x7f0 [ 336.111424][T12696] ? __pfx_netlink_unicast+0x10/0x10 [ 336.112793][T12696] ? __phys_addr_symbol+0x30/0x80 [ 336.114101][T12696] ? __check_object_size+0x488/0x710 [ 336.115478][T12696] netlink_sendmsg+0x8b8/0xd70 [ 336.116728][T12696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.118112][T12696] ____sys_sendmsg+0x9ae/0xb40 [ 336.119363][T12696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.120724][T12696] ? get_compat_msghdr+0x11b/0x170 [ 336.122045][T12696] ? __pfx___lock_acquire+0x10/0x10 [ 336.123389][T12696] ___sys_sendmsg+0x135/0x1e0 [ 336.124602][T12696] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.125951][T12696] ? lock_acquire+0x2f/0xb0 [ 336.127268][T12696] ? __fget_files+0x40/0x3f0 [ 336.128540][T12696] ? fdget+0x176/0x210 [ 336.129594][T12696] __sys_sendmsg+0x117/0x1f0 [ 336.130805][T12696] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.132121][T12696] ? __fget_files+0x244/0x3f0 [ 336.133350][T12696] __do_fast_syscall_32+0x73/0x120 [ 336.134676][T12696] do_fast_syscall_32+0x32/0x80 [ 336.135941][T12696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.137579][T12696] RIP: 0023:0xf7fbf579 [ 336.138638][T12696] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 336.143612][T12696] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 336.145765][T12696] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 336.147818][T12696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.149865][T12696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.151918][T12696] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 336.153958][T12696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.156014][T12696] [ 336.222409][ T8520] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 336.224931][ T4299] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.229804][ T4299] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 336.233505][ T4299] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 336.236871][ T4299] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.241645][ T4299] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.246019][ T4299] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.255509][ T4299] usb 10-1: config 0 descriptor?? [ 336.402514][ T8520] usb 5-1: device descriptor read/64, error -71 [ 336.453100][T12702] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2007'. [ 336.456292][T12702] netlink: 'syz.6.2007': attribute type 10 has an invalid length. [ 336.653710][ T8520] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 336.739721][ T4299] usbhid 10-1:0.0: can't add hid device: -71 [ 336.741712][ T4299] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 336.744934][ T4299] usb 10-1: USB disconnect, device number 20 [ 336.783747][ T8520] usb 5-1: device descriptor read/64, error -71 [ 336.892574][ T8520] usb usb5-port1: attempt power cycle [ 337.158560][T12704] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 337.232453][ T8520] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 337.259008][ T8520] usb 5-1: device descriptor read/8, error -71 [ 337.428882][T12716] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2009'. [ 337.432577][T12716] netlink: 'syz.6.2009': attribute type 10 has an invalid length. [ 337.684954][ T5355] bcm5974 8-1:0.0: could not read from device [ 337.693217][ T5355] bcm5974 8-1:0.0: could not read from device [ 337.700216][ T5355] bcm5974 8-1:0.0: could not read from device [ 337.700797][ T6403] usb 8-1: USB disconnect, device number 50 [ 337.706694][ T5355] bcm5974 8-1:0.0: could not read from device [ 337.782441][ T8520] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 337.803718][ T8520] usb 5-1: device descriptor read/8, error -71 [ 337.912601][ T8520] usb usb5-port1: unable to enumerate USB device [ 338.077885][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2016'. [ 338.232906][ T8520] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 338.493036][ T8520] usb 5-1: Using ep0 maxpacket: 32 [ 338.495888][ T8520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.498672][ T8520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.501284][ T8520] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 338.503790][ T8520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.506986][ T8520] usb 5-1: config 0 descriptor?? [ 338.618427][T12742] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2017'. [ 338.621565][T12742] netlink: 'syz.3.2017': attribute type 10 has an invalid length. [ 338.854949][T12748] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2018'. [ 338.859274][T12748] netlink: 'syz.6.2018': attribute type 10 has an invalid length. [ 338.917263][ T8520] savu 0003:1E7D:2D5A.0030: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 339.186811][ T56] usb 5-1: USB disconnect, device number 50 [ 339.672838][ T63] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 339.729206][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2027'. [ 339.853625][ T63] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 339.856258][ T63] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 339.859250][ T63] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 339.863386][ T63] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 339.867458][ T63] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 339.871201][ T63] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.873681][ T63] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.876813][ T63] usb 10-1: config 0 descriptor?? [ 339.878616][T12762] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 340.352595][ T63] plantronics 0003:047F:FFFF.0031: unknown main item tag 0xd [ 340.356670][ T63] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 340.360372][ T63] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 340.375346][T12783] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2028'. [ 340.379715][T12783] netlink: 'syz.0.2028': attribute type 10 has an invalid length. [ 340.869923][T12787] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2029'. [ 340.951637][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2029'. [ 341.008139][T12786] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 341.260280][T12793] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2030'. [ 341.265234][T12793] netlink: 'syz.0.2030': attribute type 10 has an invalid length. [ 341.802633][ T4299] usb 10-1: reset high-speed USB device number 21 using dummy_hcd [ 342.514134][T12804] bridge_slave_1 (unregistering): left promiscuous mode [ 342.516030][T12804] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.980887][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2038'. [ 343.213064][ T6211] usb 10-1: USB disconnect, device number 21 [ 343.789452][ T39] kauditd_printk_skb: 41 callbacks suppressed [ 343.789461][ T39] audit: type=1326 audit(344.112:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12830 comm="syz.5.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 343.796374][T12831] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2041'. [ 343.800565][ T39] audit: type=1326 audit(344.122:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12830 comm="syz.5.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 343.806087][ T39] audit: type=1326 audit(344.122:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12830 comm="syz.5.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 343.811512][ T39] audit: type=1326 audit(344.122:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12830 comm="syz.5.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 343.819224][ T39] audit: type=1326 audit(344.122:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12830 comm="syz.5.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 343.825241][ T39] audit: type=1326 audit(344.122:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12830 comm="syz.5.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 343.832442][ T39] audit: type=1326 audit(344.122:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12830 comm="syz.5.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 343.842419][ T39] audit: type=1326 audit(344.122:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12830 comm="syz.5.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 343.857971][ T39] audit: type=1326 audit(344.122:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12830 comm="syz.5.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 343.863974][ T39] audit: type=1326 audit(344.122:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12830 comm="syz.5.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 343.938742][T12837] netlink: 'syz.0.2044': attribute type 2 has an invalid length. [ 343.966104][T12839] netlink: 'syz.6.2046': attribute type 11 has an invalid length. [ 344.032011][T12850] netlink: 'syz.3.2050': attribute type 2 has an invalid length. [ 344.092923][ T6211] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 344.131709][T12856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2052'. [ 344.244303][ T6211] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 344.248345][ T6211] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 344.252090][ T6211] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 344.259645][ T6211] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.263258][ T6211] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.265593][ T6211] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.269326][ T6211] usb 10-1: config 0 descriptor?? [ 344.436760][T12881] ubi0: attaching mtd0 [ 344.441639][T12881] ubi0: scanning is finished [ 344.546555][T12881] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 344.549115][T12881] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 344.551640][T12881] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 344.553996][T12881] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 344.555979][T12881] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 344.557774][T12881] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 344.559846][T12881] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2801083970 [ 344.562509][T12881] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 344.565068][T12884] ubi0: background thread "ubi_bgt0d" started, PID 12884 [ 344.612468][ T4299] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 344.680752][ T6211] usbhid 10-1:0.0: can't add hid device: -71 [ 344.683195][ T6211] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 344.687343][ T6211] usb 10-1: USB disconnect, device number 22 [ 344.762476][ T4299] usb 8-1: Using ep0 maxpacket: 8 [ 344.765589][ T4299] usb 8-1: config 0 has no interfaces? [ 344.767131][ T4299] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 344.769480][ T4299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.772572][ T4299] usb 8-1: config 0 descriptor?? [ 344.977195][T12877] overlay: filesystem on ./bus not supported as upperdir [ 344.990553][ T6211] usb 8-1: USB disconnect, device number 51 [ 345.018178][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2061'. [ 345.020516][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2061'. [ 345.092218][T12901] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2062'. [ 345.294230][T12907] devtmpfs: Unknown parameter 'usrquota' [ 345.479637][T12919] fuse: Bad value for 'fd' [ 345.598433][T12927] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2071'. [ 345.665943][T12929] sp0: Synchronizing with TNC [ 345.677726][ T65] Bluetooth: hci0: sending frame failed (-49) [ 345.680581][ T5955] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 346.158533][T12939] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2073'. [ 346.161364][T12939] netlink: 'syz.3.2073': attribute type 10 has an invalid length. [ 346.353407][T12942] fuse: Bad value for 'fd' [ 346.889031][T12950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2080'. [ 347.235231][T12980] netlink: 'syz.5.2087': attribute type 4 has an invalid length. [ 347.237714][T12980] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.2087'. [ 347.471005][T12986] netlink: 'syz.5.2088': attribute type 10 has an invalid length. [ 348.182607][ T6403] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 348.328556][T13001] FAULT_INJECTION: forcing a failure. [ 348.328556][T13001] name failslab, interval 1, probability 0, space 0, times 0 [ 348.331799][T13001] CPU: 2 UID: 0 PID: 13001 Comm: syz.6.2094 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 348.334611][T13001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 348.337450][T13001] Call Trace: [ 348.338344][T13001] [ 348.339141][T13001] dump_stack_lvl+0x16c/0x1f0 [ 348.340398][T13001] should_fail_ex+0x497/0x5b0 [ 348.341652][T13001] ? fs_reclaim_acquire+0xae/0x150 [ 348.343014][T13001] should_failslab+0xc2/0x120 [ 348.344268][T13001] __kmalloc_node_noprof+0xd1/0x440 [ 348.345649][T13001] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 348.347088][T13001] __kvmalloc_node_noprof+0xad/0x1a0 [ 348.348457][T13001] alloc_netdev_mqs+0xc29/0x12a0 [ 348.349782][T13001] rtnl_create_link+0xbed/0xf10 [ 348.351095][T13001] __rtnl_newlink+0x10b3/0x1920 [ 348.352398][T13001] ? __pfx___rtnl_newlink+0x10/0x10 [ 348.353773][T13001] rtnl_newlink+0x67/0xa0 [ 348.354927][T13001] ? __pfx_rtnl_newlink+0x10/0x10 [ 348.356264][T13001] rtnetlink_rcv_msg+0x3c7/0xea0 [ 348.357582][T13001] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.359012][T13001] ? __pfx___dev_queue_xmit+0x10/0x10 [ 348.360444][T13001] netlink_rcv_skb+0x165/0x410 [ 348.361716][T13001] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.363200][T13001] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.364620][T13001] ? netlink_deliver_tap+0x1ae/0xcf0 [ 348.366030][T13001] netlink_unicast+0x53c/0x7f0 [ 348.367322][T13001] ? __pfx_netlink_unicast+0x10/0x10 [ 348.368726][T13001] ? __phys_addr_symbol+0x30/0x80 [ 348.370066][T13001] ? __check_object_size+0x488/0x710 [ 348.371484][T13001] netlink_sendmsg+0x8b8/0xd70 [ 348.372754][T13001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.374114][T13001] ____sys_sendmsg+0x9ae/0xb40 [ 348.375441][T13001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.376832][T13001] ? get_compat_msghdr+0x11b/0x170 [ 348.378191][T13001] ? __pfx___lock_acquire+0x10/0x10 [ 348.379573][T13001] ___sys_sendmsg+0x135/0x1e0 [ 348.380825][T13001] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.382195][T13001] ? lock_acquire+0x2f/0xb0 [ 348.383291][T13001] ? __fget_files+0x40/0x3f0 [ 348.384527][T13001] ? fdget+0x176/0x210 [ 348.385626][T13001] __sys_sendmsg+0x117/0x1f0 [ 348.386870][T13001] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.388241][T13001] ? __fget_files+0x244/0x3f0 [ 348.389517][T13001] __do_fast_syscall_32+0x73/0x120 [ 348.390890][T13001] do_fast_syscall_32+0x32/0x80 [ 348.392174][T13001] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.393824][T13001] RIP: 0023:0xf7fbf579 [ 348.394886][T13001] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 348.399762][T13001] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 348.401905][T13001] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 348.403935][T13001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.405968][T13001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.408002][T13001] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 348.410007][T13001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.412022][T13001] [ 348.431036][ T6403] usb 5-1: Using ep0 maxpacket: 8 [ 348.437681][T13002] __nla_validate_parse: 3 callbacks suppressed [ 348.437718][T13002] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2093'. [ 348.443072][T13002] netlink: 'syz.5.2093': attribute type 10 has an invalid length. [ 348.453116][ T6403] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 348.455403][ T6403] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.457995][ T6403] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.460724][ T6403] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.463969][ T6403] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.467192][ T6403] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 348.469550][ T6403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.478506][T13006] FAULT_INJECTION: forcing a failure. [ 348.478506][T13006] name failslab, interval 1, probability 0, space 0, times 0 [ 348.482515][T13006] CPU: 2 UID: 0 PID: 13006 Comm: syz.6.2096 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 348.485230][T13006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 348.487986][T13006] Call Trace: [ 348.488869][T13006] [ 348.489609][T13006] dump_stack_lvl+0x16c/0x1f0 [ 348.490830][T13006] should_fail_ex+0x497/0x5b0 [ 348.492002][T13006] ? fs_reclaim_acquire+0xae/0x150 [ 348.493305][T13006] should_failslab+0xc2/0x120 [ 348.494523][T13006] __kmalloc_node_track_caller_noprof+0xcf/0x440 [ 348.496173][T13006] ? vfs_parse_fs_string+0xc4/0x150 [ 348.497531][T13006] ? vfs_parse_fs_string+0xf6/0x150 [ 348.498888][T13006] kmemdup_nul+0x34/0xb0 [ 348.499985][T13006] vfs_parse_fs_string+0xc4/0x150 [ 348.501299][T13006] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 348.502742][T13006] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 348.504312][T13006] vfs_parse_monolithic_sep+0x171/0x1f0 [ 348.505765][T13006] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 348.507334][T13006] ? __pfx_tracefs_init_fs_context+0x10/0x10 [ 348.508895][T13006] ? alloc_fs_context+0x59b/0x9c0 [ 348.510208][T13006] path_mount+0xb1c/0x1f10 [ 348.511373][T13006] ? kmem_cache_free+0x152/0x4b0 [ 348.512671][T13006] ? __pfx_path_mount+0x10/0x10 [ 348.513905][T13006] ? putname+0x12e/0x170 [ 348.514987][T13006] __ia32_sys_mount+0x292/0x310 [ 348.516228][T13006] ? __pfx___ia32_sys_mount+0x10/0x10 [ 348.517632][T13006] __do_fast_syscall_32+0x73/0x120 [ 348.518966][T13006] do_fast_syscall_32+0x32/0x80 [ 348.520219][T13006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.521852][T13006] RIP: 0023:0xf7fbf579 [ 348.522892][T13006] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 348.527790][T13006] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 348.529936][T13006] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000040 [ 348.531953][T13006] RDX: 0000000000000000 RSI: 0000000002204c3b RDI: 0000000020001040 [ 348.533959][T13006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.535964][T13006] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 348.538002][T13006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.540022][T13006] [ 348.624841][T13011] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2098'. [ 348.686386][ T6403] usb 5-1: usb_control_msg returned -32 [ 348.687914][ T6403] usbtmc 5-1:16.0: can't read capabilities [ 349.072517][ T6403] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 349.296107][T13024] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2101'. [ 349.300427][T13024] netlink: 'syz.5.2101': attribute type 10 has an invalid length. [ 349.513721][ T6403] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.516710][ T6403] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.519337][ T6403] usb 11-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 349.521757][ T6403] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.525347][ T6403] usb 11-1: config 0 descriptor?? [ 349.937123][ T6403] cm6533_jd 0003:0D8C:0022.0032: unknown main item tag 0x0 [ 349.939353][ T6403] cm6533_jd 0003:0D8C:0022.0032: unknown main item tag 0x0 [ 349.943046][ T6403] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0D8C:0022.0032/input/input22 [ 349.952725][ T6403] cm6533_jd 0003:0D8C:0022.0032: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 350.501153][ T39] kauditd_printk_skb: 328 callbacks suppressed [ 350.501164][ T39] audit: type=1326 audit(350.822:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 350.508302][ T39] audit: type=1326 audit(350.822:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 350.513422][ T39] audit: type=1326 audit(350.832:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 350.518712][ T39] audit: type=1326 audit(350.832:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 350.524010][ T39] audit: type=1326 audit(350.832:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 350.529275][ T39] audit: type=1326 audit(350.832:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 350.530470][T13043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2107'. [ 350.534467][ T39] audit: type=1326 audit(350.832:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 350.534487][ T39] audit: type=1326 audit(350.832:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 350.534503][ T39] audit: type=1326 audit(350.832:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 350.534519][ T39] audit: type=1326 audit(350.832:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 350.865808][ T105] usb 5-1: USB disconnect, device number 51 [ 351.192572][ T105] usb 11-1: reset high-speed USB device number 13 using dummy_hcd [ 351.622182][T13100] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2111'. [ 351.625086][T13100] netlink: 'syz.5.2111': attribute type 10 has an invalid length. [ 352.207287][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2112'. [ 352.211315][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2112'. [ 352.855820][ T6211] usb 11-1: USB disconnect, device number 13 [ 353.596710][T13121] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2116'. [ 353.636399][T13125] fuse: Invalid rootmode [ 353.675235][T13130] hub 6-0:1.0: USB hub found [ 353.676583][T13130] hub 6-0:1.0: 1 port detected [ 353.886014][T13140] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2121'. [ 353.889156][T13140] netlink: 'syz.5.2121': attribute type 10 has an invalid length. [ 354.105416][T13149] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 354.107521][T13149] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 354.294289][T13160] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2127'. [ 354.333737][T13164] fuse: Bad value for 'rootmode' [ 354.585933][T13181] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2132'. [ 354.588646][T13181] netlink: 'syz.6.2132': attribute type 10 has an invalid length. [ 354.967021][T13186] netlink: 184472 bytes leftover after parsing attributes in process `syz.3.2136'. [ 355.062584][ T1478] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 355.110398][T13188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2136'. [ 355.113237][T13188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2136'. [ 355.216684][ T1478] usb 10-1: Using ep0 maxpacket: 8 [ 355.224158][ T1478] usb 10-1: config 0 has no interfaces? [ 355.225848][ T1478] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 355.228503][ T1478] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.279206][ T1478] usb 10-1: config 0 descriptor?? [ 355.635423][T13207] block nbd0: not configured, cannot reconfigure [ 355.812467][ T5958] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 355.853546][ T39] kauditd_printk_skb: 125 callbacks suppressed [ 355.853560][ T39] audit: type=1326 audit(356.182:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.3.2145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 355.861232][ T39] audit: type=1326 audit(356.182:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.3.2145" exe="/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 355.866798][ T39] audit: type=1326 audit(356.182:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.3.2145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 355.868136][T13215] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2146'. [ 355.872275][ T39] audit: type=1326 audit(356.182:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.3.2145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 355.880188][ T39] audit: type=1326 audit(356.182:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.3.2145" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 355.885725][ T39] audit: type=1326 audit(356.182:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.3.2145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 355.891109][ T39] audit: type=1326 audit(356.182:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.3.2145" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 355.895233][T13214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2145'. [ 355.896797][ T39] audit: type=1326 audit(356.182:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.3.2145" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 355.896827][ T39] audit: type=1326 audit(356.182:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.3.2145" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 355.896855][ T39] audit: type=1326 audit(356.182:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.3.2145" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 355.963909][ T5958] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.966598][ T5958] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.969243][ T5958] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 355.971435][ T5958] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.975081][ T5958] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.978021][ T5958] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.981017][ T5958] usb 11-1: config 0 descriptor?? [ 356.200712][T13234] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.2147'. [ 356.203466][T13234] net_ratelimit: 10 callbacks suppressed [ 356.203502][T13234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.595665][ T5958] usbhid 11-1:0.0: can't add hid device: -71 [ 356.597258][ T5958] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 356.599861][ T5958] usb 11-1: USB disconnect, device number 14 [ 357.155634][T13261] fuse: Unknown parameter 'use00000000000000000000' [ 357.343024][T13263] block nbd3: NBD_DISCONNECT [ 357.348035][T13263] block nbd3: Disconnected due to user request. [ 357.349398][T13266] netlink: 'syz.6.2158': attribute type 10 has an invalid length. [ 357.350516][T13263] block nbd3: shutting down sockets [ 357.353646][ T4299] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 357.523703][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.526656][ T4299] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.529957][ T4299] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.532325][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.535281][ T4299] usb 5-1: config 0 descriptor?? [ 357.685192][ T6211] usb 10-1: USB disconnect, device number 23 [ 357.942967][ T4299] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 357.944926][ T4299] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 357.947066][ T4299] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 357.949855][ T4299] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 358.204662][ T6403] usb 5-1: USB disconnect, device number 52 [ 358.262450][ T4299] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 358.414609][ T4299] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.418863][ T4299] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 358.422950][ T4299] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 358.426424][ T4299] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 358.431021][ T4299] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.434223][ T4299] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.438676][ T4299] usb 11-1: config 0 descriptor?? [ 358.834063][T13290] __nla_validate_parse: 2 callbacks suppressed [ 358.834079][T13290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2168'. [ 358.856208][T13292] fuse: Unknown parameter 'use00000000000000000000' [ 359.057325][ T4299] usbhid 11-1:0.0: can't add hid device: -71 [ 359.058975][ T4299] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 359.061638][ T4299] usb 11-1: USB disconnect, device number 15 [ 359.087984][T13310] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2170'. [ 359.090995][T13310] netlink: 'syz.0.2170': attribute type 10 has an invalid length. [ 359.638589][T13316] sp0: Synchronizing with TNC [ 359.842870][T13319] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2176'. [ 359.846037][T13319] netlink: 'syz.5.2176': attribute type 10 has an invalid length. [ 360.049248][T13323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2179'. [ 360.332561][ T4299] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 360.425946][T13334] syz_tun: entered promiscuous mode [ 360.427747][T13334] batadv_slave_1: entered promiscuous mode [ 360.429694][T13334] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 360.431649][T13334] Cannot create hsr debugfs directory [ 360.458223][T13330] netfs: Couldn't get user pages (rc=-14) [ 360.462410][ T4299] usb 5-1: device descriptor read/64, error -71 [ 360.575728][T13341] fuse: Unknown parameter 'user_i00000000000000000000' [ 360.702465][ T4299] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 360.722493][ T105] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 360.779870][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2188'. [ 360.832440][ T4299] usb 5-1: device descriptor read/64, error -71 [ 360.883883][ T105] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.886909][ T105] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 360.889871][ T105] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 360.892513][ T105] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 360.895906][ T105] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 360.898300][ T105] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.901111][ T105] usb 10-1: config 0 descriptor?? [ 360.952923][ T4299] usb usb5-port1: attempt power cycle [ 361.292436][ T4299] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 361.312978][ T4299] usb 5-1: device descriptor read/8, error -71 [ 361.509179][ T105] usbhid 10-1:0.0: can't add hid device: -71 [ 361.511164][ T105] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 361.514026][ T105] usb 10-1: USB disconnect, device number 24 [ 361.553132][ T4299] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 361.573106][ T4299] usb 5-1: device descriptor read/8, error -71 [ 361.672468][ T5955] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 361.672535][ T65] Bluetooth: hci0: command 0x1003 tx timeout [ 361.694963][ T4299] usb usb5-port1: unable to enumerate USB device [ 361.766183][T13357] FAULT_INJECTION: forcing a failure. [ 361.766183][T13357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.769537][T13357] CPU: 1 UID: 0 PID: 13357 Comm: syz.3.2190 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 361.772293][T13357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 361.775002][T13357] Call Trace: [ 361.775877][T13357] [ 361.776661][T13357] dump_stack_lvl+0x16c/0x1f0 [ 361.777904][T13357] should_fail_ex+0x497/0x5b0 [ 361.779195][T13357] _copy_to_user+0x32/0xd0 [ 361.780394][T13357] simple_read_from_buffer+0xd0/0x160 [ 361.781801][T13357] proc_fail_nth_read+0x198/0x270 [ 361.783129][T13357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.784568][T13357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.786015][T13357] vfs_read+0x1df/0xbe0 [ 361.787117][T13357] ? __fget_files+0x23a/0x3f0 [ 361.788347][T13357] ? fdget_pos+0x24c/0x360 [ 361.789524][T13357] ? __pfx_lock_release+0x10/0x10 [ 361.790852][T13357] ? trace_lock_acquire+0x14a/0x1d0 [ 361.792210][T13357] ? __pfx_vfs_read+0x10/0x10 [ 361.793434][T13357] ? __pfx___mutex_lock+0x10/0x10 [ 361.794763][T13357] ? __fget_files+0x244/0x3f0 [ 361.796003][T13357] ksys_read+0x12f/0x260 [ 361.797125][T13357] ? __pfx_ksys_read+0x10/0x10 [ 361.798383][T13357] __do_fast_syscall_32+0x73/0x120 [ 361.799727][T13357] do_fast_syscall_32+0x32/0x80 [ 361.800995][T13357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.802640][T13357] RIP: 0023:0xf7f21579 [ 361.803733][T13357] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 361.808694][T13357] RSP: 002b:00000000f56a6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 361.810868][T13357] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56a6620 [ 361.813012][T13357] RDX: 000000000000000f RSI: 00000000f73acff4 RDI: 0000000000000000 [ 361.815075][T13357] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 361.817763][T13357] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 361.820445][T13357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.822801][T13357] [ 362.034732][T13370] fuse: Unknown parameter 'user_i00000000000000000000' [ 362.101928][ T39] kauditd_printk_skb: 200 callbacks suppressed [ 362.101944][ T39] audit: type=1326 audit(362.422:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.5.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 362.112102][ T39] audit: type=1326 audit(362.422:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.5.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 362.116913][T13379] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2197'. [ 362.118591][ T39] audit: type=1326 audit(362.442:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.5.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 362.127699][ T39] audit: type=1326 audit(362.442:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.5.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 362.135067][ T39] audit: type=1326 audit(362.442:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.5.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 362.141301][ T39] audit: type=1326 audit(362.442:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.5.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 362.147492][ T39] audit: type=1326 audit(362.442:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.5.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 362.153677][ T39] audit: type=1326 audit(362.442:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.5.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 362.161117][ T39] audit: type=1326 audit(362.442:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.5.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 362.168554][ T39] audit: type=1326 audit(362.442:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.5.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 362.305755][T13391] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 362.439223][T13398] 9pnet_fd: Insufficient options for proto=fd [ 362.465780][T13401] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2205'. [ 362.492917][T13404] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2206'. [ 362.495474][T13404] FAULT_INJECTION: forcing a failure. [ 362.495474][T13404] name failslab, interval 1, probability 0, space 0, times 0 [ 362.499087][T13404] CPU: 3 UID: 0 PID: 13404 Comm: syz.6.2206 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 362.501801][T13404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 362.504324][T13404] Call Trace: [ 362.505121][T13404] [ 362.505824][T13404] dump_stack_lvl+0x16c/0x1f0 [ 362.507018][T13404] should_fail_ex+0x497/0x5b0 [ 362.508123][T13404] ? fs_reclaim_acquire+0xae/0x150 [ 362.509327][T13404] should_failslab+0xc2/0x120 [ 362.510434][T13404] __kmalloc_node_noprof+0xd1/0x440 [ 362.511663][T13404] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 362.512961][T13404] __kvmalloc_node_noprof+0xad/0x1a0 [ 362.514285][T13404] alloc_netdev_mqs+0xc29/0x12a0 [ 362.515486][T13404] rtnl_create_link+0xbed/0xf10 [ 362.516674][T13404] __rtnl_newlink+0x10b3/0x1920 [ 362.518089][T13404] ? __pfx___rtnl_newlink+0x10/0x10 [ 362.519329][T13404] rtnl_newlink+0x67/0xa0 [ 362.520341][T13404] ? __pfx_rtnl_newlink+0x10/0x10 [ 362.521520][T13404] rtnetlink_rcv_msg+0x3c7/0xea0 [ 362.522688][T13404] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.523929][T13404] ? __pfx___dev_queue_xmit+0x10/0x10 [ 362.525190][T13404] netlink_rcv_skb+0x165/0x410 [ 362.526312][T13404] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.527594][T13404] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.528838][T13404] ? netlink_deliver_tap+0x1ae/0xcf0 [ 362.530080][T13404] netlink_unicast+0x53c/0x7f0 [ 362.531463][T13404] ? __pfx_netlink_unicast+0x10/0x10 [ 362.532978][T13404] ? __phys_addr_symbol+0x30/0x80 [ 362.534426][T13404] ? __check_object_size+0x488/0x710 [ 362.535967][T13404] netlink_sendmsg+0x8b8/0xd70 [ 362.537327][T13404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.538628][T13404] ____sys_sendmsg+0x9ae/0xb40 [ 362.539769][T13404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.541020][T13404] ? get_compat_msghdr+0x11b/0x170 [ 362.542241][T13404] ? __pfx___lock_acquire+0x10/0x10 [ 362.543489][T13404] ___sys_sendmsg+0x135/0x1e0 [ 362.544603][T13404] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.545827][T13404] ? lock_acquire+0x2f/0xb0 [ 362.547031][T13404] ? __fget_files+0x40/0x3f0 [ 362.548175][T13404] ? fdget+0x176/0x210 [ 362.549145][T13404] __sys_sendmsg+0x117/0x1f0 [ 362.550234][T13404] ? __pfx___sys_sendmsg+0x10/0x10 [ 362.551453][T13404] ? __fget_files+0x244/0x3f0 [ 362.552578][T13404] __do_fast_syscall_32+0x73/0x120 [ 362.553832][T13404] do_fast_syscall_32+0x32/0x80 [ 362.555031][T13404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 362.556527][T13404] RIP: 0023:0xf7fbf579 [ 362.557506][T13404] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 362.562073][T13404] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 362.564058][T13404] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340 [ 362.565912][T13404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 362.567949][T13404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 362.569895][T13404] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 362.571776][T13404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 362.573643][T13404] [ 362.608002][T13407] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2207'. [ 362.942478][ T4299] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 363.093889][ T4299] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.097187][ T4299] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 363.100192][ T4299] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.102308][ T4299] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.107185][ T4299] usb 11-1: config 0 descriptor?? [ 363.376270][T13431] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2215'. [ 363.379238][T13431] netlink: 'syz.0.2215': attribute type 10 has an invalid length. [ 363.515246][ T4299] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 363.517550][ T4299] plantronics 0003:047F:FFFF.0034: No inputs registered, leaving [ 363.520542][ T4299] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 363.958804][T13433] ptrace attach of "/syz-executor exec"[8756] was attempted by "/syz-executor exec"[13433] [ 364.033336][ T1478] usb 11-1: USB disconnect, device number 16 [ 364.596202][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2218'. [ 364.928335][T13452] openvswitch: netlink: Actions may not be safe on all matching packets [ 365.737973][T13472] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2225'. [ 365.740853][T13472] netlink: 'syz.6.2225': attribute type 10 has an invalid length. [ 366.511295][T13479] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2227'. [ 366.514886][T13479] netlink: 'syz.0.2227': attribute type 10 has an invalid length. [ 366.539497][T13482] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 366.566984][T13484] netlink: 'syz.6.2229': attribute type 10 has an invalid length. [ 366.573103][T13484] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.575190][T13484] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.581351][T13484] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.583251][T13484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.585214][T13484] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.587443][T13484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.592509][T13484] bridge0: entered promiscuous mode [ 366.594785][T13484] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 366.850757][T13492] kvm: kvm [13491]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 367.077333][T13500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2233'. [ 367.114526][T13503] FAULT_INJECTION: forcing a failure. [ 367.114526][T13503] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.118685][T13503] CPU: 1 UID: 0 PID: 13503 Comm: syz.0.2235 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 367.121496][T13503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 367.124276][T13503] Call Trace: [ 367.125142][T13503] [ 367.125933][T13503] dump_stack_lvl+0x16c/0x1f0 [ 367.127179][T13503] should_fail_ex+0x497/0x5b0 [ 367.128444][T13503] ? fs_reclaim_acquire+0xae/0x150 [ 367.129825][T13503] should_fail_alloc_page+0xe7/0x130 [ 367.131263][T13503] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 367.132911][T13503] __alloc_pages_noprof+0x190/0x25a0 [ 367.134357][T13503] ? __lock_acquire+0xbdd/0x3ce0 [ 367.135735][T13503] ? __pfx_mark_lock+0x10/0x10 [ 367.137037][T13503] ? hlock_class+0x4e/0x130 [ 367.138267][T13503] ? mark_lock+0xb5/0xc60 [ 367.139441][T13503] ? mark_lock+0xb5/0xc60 [ 367.140612][T13503] ? hlock_class+0x4e/0x130 [ 367.141838][T13503] ? __pfx_mark_lock+0x10/0x10 [ 367.143142][T13503] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 367.144836][T13503] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.146374][T13503] ? policy_nodemask+0xea/0x4e0 [ 367.147676][T13503] alloc_pages_mpol_noprof+0x2c9/0x610 [ 367.149134][T13503] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 367.150696][T13503] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 367.152159][T13503] folio_alloc_mpol_noprof+0x36/0xd0 [ 367.153580][T13503] vma_alloc_folio_noprof+0xee/0x1b0 [ 367.155011][T13503] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 367.156598][T13503] ? find_held_lock+0x2d/0x110 [ 367.157904][T13503] do_pte_missing+0x202d/0x3e70 [ 367.159237][T13503] ? rcu_is_watching+0x12/0xc0 [ 367.160534][T13503] __handle_mm_fault+0x100a/0x2a10 [ 367.161931][T13503] ? __pfx___handle_mm_fault+0x10/0x10 [ 367.163536][T13503] ? __pfx_lock_release+0x10/0x10 [ 367.164893][T13503] ? follow_page_pte+0x50d/0x1eb0 [ 367.166251][T13503] handle_mm_fault+0x3fa/0xaa0 [ 367.167564][T13503] __get_user_pages+0x8d9/0x3b50 [ 367.168909][T13503] ? __pfx___get_user_pages+0x10/0x10 [ 367.170381][T13503] ? down_read_killable+0xcc/0x380 [ 367.171784][T13503] ? __pfx_down_read_killable+0x10/0x10 [ 367.173281][T13503] get_user_pages_unlocked+0x1c2/0x780 [ 367.174758][T13503] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 367.176366][T13503] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 367.178002][T13503] ? __pfx___might_resched+0x10/0x10 [ 367.179440][T13503] ? __pfx_mark_lock+0x10/0x10 [ 367.180734][T13503] hva_to_pfn+0x2da/0xea0 [ 367.181903][T13503] ? __pfx_hva_to_pfn+0x10/0x10 [ 367.183305][T13503] ? xa_load+0x14a/0x2c0 [ 367.184446][T13503] ? __pfx_lock_release+0x10/0x10 [ 367.185806][T13503] ? xas_load+0x49/0x5b0 [ 367.186957][T13503] ? xa_load+0xc8/0x2c0 [ 367.188089][T13503] ? xa_load+0x154/0x2c0 [ 367.189238][T13503] ? __pfx_xa_load+0x10/0x10 [ 367.190502][T13503] __gfn_to_pfn_memslot+0x23f/0x570 [ 367.191904][T13503] kvm_faultin_pfn+0x48c/0x1db0 [ 367.193224][T13503] ? const_folio_flags+0x71/0x1f0 [ 367.194597][T13503] ? __pfx_kvm_faultin_pfn+0x10/0x10 [ 367.196016][T13503] ? kvm_tdp_page_fault+0x21a/0x350 [ 367.197426][T13503] ? __pfx_folio_mark_accessed+0x10/0x10 [ 367.198940][T13503] ? __kvm_mmu_topup_memory_cache+0x330/0x600 [ 367.200573][T13503] ? lock_acquire+0x2f/0xb0 [ 367.201809][T13503] ? kvm_pfn_to_refcounted_page+0x10a/0x5e0 [ 367.203419][T13503] kvm_tdp_page_fault+0x182/0x350 [ 367.204786][T13503] kvm_mmu_do_page_fault+0x59f/0x6a0 [ 367.206221][T13503] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 367.207800][T13503] ? mark_lock+0xb5/0xc60 [ 367.208981][T13503] ? hlock_class+0x4e/0x130 [ 367.210271][T13503] kvm_mmu_page_fault+0x214/0x1b70 [ 367.211833][T13503] ? __pfx___lock_acquire+0x10/0x10 [ 367.213246][T13503] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 367.214758][T13503] ? __pfx_mark_lock+0x10/0x10 [ 367.216071][T13503] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 367.217598][T13503] handle_ept_violation+0x1f0/0x510 [ 367.219020][T13503] ? __pfx_handle_ept_violation+0x10/0x10 [ 367.220563][T13503] vmx_handle_exit+0x733/0x1ed0 [ 367.221890][T13503] vcpu_run+0x2aa3/0x4c90 [ 367.223079][T13503] ? __pfx_vcpu_run+0x10/0x10 [ 367.224364][T13503] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 367.225882][T13503] ? rcu_is_watching+0x10/0xc0 [ 367.227196][T13503] ? trace_lock_acquire+0x14a/0x1d0 [ 367.228600][T13503] ? __local_bh_enable_ip+0xa4/0x120 [ 367.230016][T13503] ? kvm_arch_vcpu_ioctl_run+0x14d/0x1730 [ 367.231570][T13503] ? lock_acquire+0x2f/0xb0 [ 367.232842][T13503] ? kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 367.234390][T13503] kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 367.235894][T13503] kvm_vcpu_ioctl+0x6c7/0x1510 [ 367.237211][T13503] ? tomoyo_path_number_perm+0x467/0x5b0 [ 367.238738][T13503] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 367.240148][T13503] ? tomoyo_path_number_perm+0x190/0x5b0 [ 367.241660][T13503] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 367.243292][T13503] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.244886][T13503] ? do_vfs_ioctl+0x513/0x1950 [ 367.246188][T13503] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 367.247577][T13503] ? trace_lock_acquire+0x14a/0x1d0 [ 367.248991][T13503] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 367.250430][T13503] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 367.252019][T13503] ? __fget_files+0x244/0x3f0 [ 367.253301][T13503] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 367.254890][T13503] __do_compat_sys_ioctl+0x259/0x2b0 [ 367.256327][T13503] __do_fast_syscall_32+0x73/0x120 [ 367.257726][T13503] do_fast_syscall_32+0x32/0x80 [ 367.259054][T13503] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.260759][T13503] RIP: 0023:0xf7fa5579 [ 367.261873][T13503] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 367.267152][T13503] RSP: 002b:00000000f572655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 367.269350][T13503] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000000ae80 [ 367.271516][T13503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.273631][T13503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 367.275756][T13503] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 367.277873][T13503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.280001][T13503] [ 367.311106][T13503] kvm: kvm [13502]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 367.387518][T13507] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2236'. [ 367.645494][T13518] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2237'. [ 367.648669][T13518] netlink: 'syz.6.2237': attribute type 10 has an invalid length. [ 367.762574][ T5958] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 367.905071][ T39] kauditd_printk_skb: 136 callbacks suppressed [ 367.905081][ T39] audit: type=1326 audit(368.232:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.0.2243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 367.912850][ T5958] usb 8-1: Using ep0 maxpacket: 8 [ 367.913887][ T39] audit: type=1326 audit(368.242:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.0.2243" exe="/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 367.915324][ T5958] usb 8-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 367.918247][T13524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2243'. [ 367.920427][ T39] audit: type=1326 audit(368.242:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.0.2243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 367.922227][ T5958] usb 8-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 367.925895][ T5958] usb 8-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 367.932676][ T39] audit: type=1326 audit(368.242:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.0.2243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 367.932910][ T5958] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.936583][ T39] audit: type=1326 audit(368.242:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.0.2243" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 367.940633][ T5958] usb 8-1: Product: syz [ 367.940643][ T5958] usb 8-1: Manufacturer: syz [ 367.940650][ T5958] usb 8-1: SerialNumber: syz [ 367.943911][ T5958] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 367.948242][T13529] fuse: Bad value for 'fd' [ 367.948431][ T39] audit: type=1326 audit(368.242:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.0.2243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 367.948450][ T39] audit: type=1326 audit(368.242:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.0.2243" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 367.948465][ T39] audit: type=1326 audit(368.242:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.0.2243" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 367.948480][ T39] audit: type=1326 audit(368.242:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.0.2243" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 367.948495][ T39] audit: type=1326 audit(368.242:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.0.2243" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 367.949469][ T5958] dvb-usb: bulk message failed: -22 (3/0) [ 368.005998][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 368.008782][ T5958] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 368.012102][ T5958] usb 8-1: media controller created [ 368.021170][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.029566][ T5958] dvb-usb: bulk message failed: -22 (6/0) [ 368.031348][ T5958] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 368.035330][ T5958] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input25 [ 368.038827][ T5958] dvb-usb: schedule remote query interval to 150 msecs. [ 368.040661][ T5958] dvb-usb: bulk message failed: -22 (3/0) [ 368.045467][T13538] binder: 13537:13538 unknown command 0 [ 368.047555][T13538] binder: 13537:13538 ioctl c0306201 20000600 returned -22 [ 368.052397][ T5958] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 368.148034][ T105] usb 8-1: USB disconnect, device number 52 [ 368.168685][ T105] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 368.175209][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2252'. [ 368.306533][T13549] FAULT_INJECTION: forcing a failure. [ 368.306533][T13549] name failslab, interval 1, probability 0, space 0, times 0 [ 368.311269][T13549] CPU: 3 UID: 0 PID: 13549 Comm: syz.5.2253 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 368.315272][T13549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 368.318125][T13549] Call Trace: [ 368.319035][T13549] [ 368.319824][T13549] dump_stack_lvl+0x16c/0x1f0 [ 368.321070][T13549] should_fail_ex+0x497/0x5b0 [ 368.322349][T13549] ? fs_reclaim_acquire+0xae/0x150 [ 368.323722][T13549] should_failslab+0xc2/0x120 [ 368.324970][T13549] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 368.326383][T13549] ? copy_mm+0x2c2/0x2410 [ 368.327552][T13549] copy_mm+0x2c2/0x2410 [ 368.328657][T13549] ? lock_acquire.part.0+0x11b/0x380 [ 368.330073][T13549] ? __pfx_copy_mm+0x10/0x10 [ 368.330675][T13552] fuse: Bad value for 'fd' [ 368.331314][T13549] ? copy_process+0x3c7d/0x6ee0 [ 368.334277][T13549] ? __pfx_lock_release+0x10/0x10 [ 368.335633][T13549] ? lockdep_init_map_type+0x16d/0x7d0 [ 368.337089][T13549] ? __raw_spin_lock_init+0x3a/0x110 [ 368.338486][T13549] copy_process+0x3e43/0x6ee0 [ 368.339808][T13549] ? __pfx_copy_process+0x10/0x10 [ 368.341142][T13549] ? find_held_lock+0x2d/0x110 [ 368.342411][T13549] kernel_clone+0xfd/0x960 [ 368.343599][T13549] ? __pfx_kernel_clone+0x10/0x10 [ 368.344928][T13549] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 368.346513][T13549] __do_compat_sys_ia32_clone+0xb7/0x100 [ 368.347991][T13549] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 368.349634][T13549] __do_fast_syscall_32+0x73/0x120 [ 368.350995][T13549] do_fast_syscall_32+0x32/0x80 [ 368.352277][T13549] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 368.353944][T13549] RIP: 0023:0xf7fb5579 [ 368.355049][T13549] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 368.360083][T13549] RSP: 002b:00000000f573650c EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 368.362268][T13549] RAX: ffffffffffffffda RBX: 0000000081088000 RCX: 0000000000000000 [ 368.364810][T13549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 368.367045][T13549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.369190][T13549] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 368.371271][T13549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.373344][T13549] [ 368.378956][T13554] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 368.594365][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2260'. [ 368.598801][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2260'. [ 368.856527][T13576] input: syz1 as /devices/virtual/input/input26 [ 368.998847][ T9007] bond0: (slave syz_tun): Releasing backup interface [ 368.999585][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.008282][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.012887][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.015924][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.023092][ T65] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 369.025152][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.031465][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.033795][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.036330][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.042795][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.045021][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 369.047093][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.080044][T13587] fuse: Bad value for 'fd' [ 369.126930][T13579] chnl_net:caif_netlink_parms(): no params data found [ 369.218483][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.221270][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.237543][T13579] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.239498][T13579] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.241303][T13579] bridge_slave_0: entered allmulticast mode [ 369.243528][T13579] bridge_slave_0: entered promiscuous mode [ 369.246029][T13579] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.247906][T13579] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.249714][T13579] bridge_slave_1: entered allmulticast mode [ 369.251704][T13579] bridge_slave_1: entered promiscuous mode [ 369.277947][T13579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.281594][T13579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.331413][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.334587][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.347142][T13579] team0: Port device team_slave_0 added [ 369.350020][T13579] team0: Port device team_slave_1 added [ 369.408353][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.410896][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.415871][T13579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.423272][T13579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.429885][T13579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.434382][T13579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.436505][T13579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.444283][T13579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.477358][T13579] hsr_slave_0: entered promiscuous mode [ 369.483416][T13579] hsr_slave_1: entered promiscuous mode [ 369.485562][T13579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.487498][T13579] Cannot create hsr debugfs directory [ 369.535333][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.538234][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.656941][ T12] bridge_slave_0: left allmulticast mode [ 369.658924][ T12] bridge_slave_0: left promiscuous mode [ 369.660569][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.668531][ T12] bridge_slave_1: left allmulticast mode [ 369.670203][ T12] bridge_slave_1: left promiscuous mode [ 369.672095][ T12] bridge1: port 1(bridge_slave_1) entered disabled state [ 369.708259][ T12] gretap0: left allmulticast mode [ 369.709665][ T12] gretap0: left promiscuous mode [ 369.796353][T13628] FAULT_INJECTION: forcing a failure. [ 369.796353][T13628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 369.800398][T13628] CPU: 2 UID: 0 PID: 13628 Comm: syz.5.2279 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 369.803253][T13628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 369.806067][T13628] Call Trace: [ 369.806958][T13628] [ 369.807692][T13628] dump_stack_lvl+0x16c/0x1f0 [ 369.809186][T13628] should_fail_ex+0x497/0x5b0 [ 369.810805][T13628] ? fs_reclaim_acquire+0xae/0x150 [ 369.812575][T13628] should_fail_alloc_page+0xe7/0x130 [ 369.814695][T13628] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 369.816762][T13628] __alloc_pages_noprof+0x190/0x25a0 [ 369.818597][T13628] ? __pfx_mark_lock+0x10/0x10 [ 369.820150][T13628] ? hlock_class+0x4e/0x130 [ 369.821417][T13628] ? mark_lock+0xb5/0xc60 [ 369.822937][T13628] ? mark_lock+0xb5/0xc60 [ 369.824451][T13628] ? hlock_class+0x4e/0x130 [ 369.826094][T13628] ? __pfx_mark_lock+0x10/0x10 [ 369.827783][T13628] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 369.829765][T13628] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 369.831899][T13628] ? policy_nodemask+0xea/0x4e0 [ 369.833386][T13628] alloc_pages_mpol_noprof+0x2c9/0x610 [ 369.834796][T13628] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 369.836417][T13628] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 369.837938][T13628] folio_alloc_mpol_noprof+0x36/0xd0 [ 369.839377][T13628] vma_alloc_folio_noprof+0xee/0x1b0 [ 369.840817][T13628] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 369.842399][T13628] ? find_held_lock+0x2d/0x110 [ 369.843680][T13628] do_pte_missing+0x202d/0x3e70 [ 369.844993][T13628] ? rcu_is_watching+0x12/0xc0 [ 369.846278][T13628] __handle_mm_fault+0x100a/0x2a10 [ 369.847596][T13628] ? __pfx___handle_mm_fault+0x10/0x10 [ 369.848999][T13628] ? __pfx_lock_release+0x10/0x10 [ 369.850317][T13628] ? follow_page_pte+0x50d/0x1eb0 [ 369.851668][T13628] handle_mm_fault+0x3fa/0xaa0 [ 369.852953][T13628] __get_user_pages+0x8d9/0x3b50 [ 369.854291][T13628] ? __pfx___get_user_pages+0x10/0x10 [ 369.855724][T13628] ? down_read_killable+0xcc/0x380 [ 369.857103][T13628] ? __pfx_down_read_killable+0x10/0x10 [ 369.858580][T13628] get_user_pages_unlocked+0x1c2/0x780 [ 369.860043][T13628] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 369.861636][T13628] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 369.863147][T13628] ? __pfx___might_resched+0x10/0x10 [ 369.864541][T13628] ? __pfx_mark_lock+0x10/0x10 [ 369.865814][T13628] hva_to_pfn+0x2da/0xea0 [ 369.867107][T13628] ? __pfx_hva_to_pfn+0x10/0x10 [ 369.868788][T13628] ? xa_load+0x14a/0x2c0 [ 369.870045][T13628] ? __pfx_lock_release+0x10/0x10 [ 369.871647][T13628] ? xas_load+0x49/0x5b0 [ 369.873122][T13628] ? xa_load+0xc8/0x2c0 [ 369.874567][T13628] ? xa_load+0x154/0x2c0 [ 369.875742][T13628] ? __pfx_xa_load+0x10/0x10 [ 369.877000][T13628] __gfn_to_pfn_memslot+0x23f/0x570 [ 369.878390][T13628] kvm_faultin_pfn+0x48c/0x1db0 [ 369.879711][T13628] ? const_folio_flags+0x71/0x1f0 [ 369.881064][T13628] ? __pfx_kvm_faultin_pfn+0x10/0x10 [ 369.882495][T13628] ? kvm_tdp_page_fault+0x21a/0x350 [ 369.883931][T13628] ? __pfx_folio_mark_accessed+0x10/0x10 [ 369.885830][T13628] ? __kvm_mmu_topup_memory_cache+0x330/0x600 [ 369.887591][T13628] ? lock_acquire+0x2f/0xb0 [ 369.888816][T13628] ? kvm_pfn_to_refcounted_page+0x10a/0x5e0 [ 369.890395][T13628] kvm_tdp_page_fault+0x182/0x350 [ 369.891758][T13628] kvm_mmu_do_page_fault+0x59f/0x6a0 [ 369.893152][T13628] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 369.894709][T13628] ? mark_lock+0xb5/0xc60 [ 369.895878][T13628] ? hlock_class+0x4e/0x130 [ 369.897110][T13628] kvm_mmu_page_fault+0x214/0x1b70 [ 369.898488][T13628] ? __pfx___lock_acquire+0x10/0x10 [ 369.899860][T13628] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 369.901227][T13628] ? __pfx_mark_lock+0x10/0x10 [ 369.902493][T13628] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 369.903984][T13628] handle_ept_violation+0x1f0/0x510 [ 369.905352][T13628] ? __pfx_handle_ept_violation+0x10/0x10 [ 369.906842][T13628] vmx_handle_exit+0x733/0x1ed0 [ 369.908122][T13628] vcpu_run+0x2aa3/0x4c90 [ 369.909268][T13628] ? __pfx_vcpu_run+0x10/0x10 [ 369.910510][T13628] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 369.911961][T13628] ? rcu_is_watching+0x10/0xc0 [ 369.913218][T13628] ? trace_lock_acquire+0x14a/0x1d0 [ 369.914564][T13628] ? __local_bh_enable_ip+0xa4/0x120 [ 369.915917][T13628] ? kvm_arch_vcpu_ioctl_run+0x14d/0x1730 [ 369.917419][T13628] ? lock_acquire+0x2f/0xb0 [ 369.918634][T13628] ? kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 369.920072][T13628] kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 369.921431][T13628] kvm_vcpu_ioctl+0x6c7/0x1510 [ 369.922665][T13628] ? tomoyo_path_number_perm+0x467/0x5b0 [ 369.924125][T13628] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 369.925437][T13628] ? tomoyo_path_number_perm+0x190/0x5b0 [ 369.927279][T13628] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 369.929207][T13628] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 369.931097][T13628] ? do_vfs_ioctl+0x513/0x1950 [ 369.932465][T13628] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 369.934184][T13628] ? trace_lock_acquire+0x14a/0x1d0 [ 369.935642][T13628] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 369.937045][T13628] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 369.938559][T13628] ? __fget_files+0x244/0x3f0 [ 369.939805][T13628] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 369.941476][T13628] __do_compat_sys_ioctl+0x259/0x2b0 [ 369.943315][T13628] __do_fast_syscall_32+0x73/0x120 [ 369.944654][T13628] do_fast_syscall_32+0x32/0x80 [ 369.945924][T13628] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 369.947581][T13628] RIP: 0023:0xf7fb5579 [ 369.948648][T13628] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 369.953696][T13628] RSP: 002b:00000000f573655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 369.956048][T13628] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000000ae80 [ 369.958144][T13628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.960236][T13628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.962314][T13628] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 369.964408][T13628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.966660][T13628] [ 370.155379][T13636] __nla_validate_parse: 4 callbacks suppressed [ 370.155389][T13636] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2281'. [ 370.352251][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2282'. [ 370.511924][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.515984][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.534381][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 370.537094][ T12] bond0 (unregistering): Released all slaves [ 370.639842][ T12] tipc: Left network mode [ 370.728908][T13672] mac80211_hwsim hwsim24 ÿÿÿÿÿÿ: renamed from wlan1 [ 370.899691][T13688] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2294'. [ 371.013945][T13579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 371.017090][T13579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 371.019939][T13579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 371.023768][T13579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 371.102583][ T5955] Bluetooth: hci0: command tx timeout [ 371.134806][T13579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.151092][T13579] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.163761][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.165621][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.170685][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.172537][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.329309][T13579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.353723][T13695] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 371.356057][T13695] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 371.359568][T13695] Error parsing options; rc = [-22] [ 371.364849][T13695] syz.5.2297: attempt to access beyond end of device [ 371.364849][T13695] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 371.368302][T13695] SQUASHFS error: Failed to read block 0x0: -5 [ 371.369995][T13695] unable to read squashfs_super_block [ 371.378797][T13579] veth0_vlan: entered promiscuous mode [ 371.384237][T13579] veth1_vlan: entered promiscuous mode [ 371.414989][T13579] veth0_macvtap: entered promiscuous mode [ 371.435430][T13579] veth1_macvtap: entered promiscuous mode [ 371.442588][T13579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.445255][T13579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.447658][T13579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.450185][T13579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.453643][T13579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.456266][T13579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.458718][T13579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.461228][T13579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.464535][T13579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.470750][T13579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.473920][T13579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.476378][T13579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.478973][T13579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.481372][T13579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.484970][T13579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.488031][T13579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.490714][T13579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.493961][T13579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.498192][T13579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.500541][T13579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.503399][T13579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.505677][T13579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.546664][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.557311][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.607485][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.609537][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.758659][ T12] hsr_slave_0: left promiscuous mode [ 371.761094][ T12] hsr_slave_1: left promiscuous mode [ 371.770445][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 371.773136][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 371.775968][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.778048][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.780492][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.783776][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.810658][ T12] veth1_macvtap: left promiscuous mode [ 371.812838][ T12] veth0_macvtap: left promiscuous mode [ 371.814809][ T12] veth1_vlan: left promiscuous mode [ 372.191989][T13719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2301'. [ 372.825542][ T12] team0 (unregistering): Port device team_slave_1 removed [ 372.889141][ T12] team0 (unregistering): Port device team_slave_0 removed [ 373.185417][ T5955] Bluetooth: hci0: command tx timeout [ 373.408736][ T12] team0 (unregistering): Port device batadv0 removed [ 373.456230][T13710] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2299'. [ 373.458667][T13713] netlink: 'syz.3.2299': attribute type 10 has an invalid length. [ 373.492941][T13715] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2264'. [ 373.495817][T13711] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2300'. [ 373.498298][T13714] netlink: 'syz.5.2300': attribute type 10 has an invalid length. [ 373.500444][T13712] netlink: 'syz.0.2264': attribute type 10 has an invalid length. [ 373.518603][T13712] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 373.604548][T13733] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2305'. [ 373.894775][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'. [ 373.960300][T13761] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2310'. [ 373.963344][T13761] netlink: 'syz.3.2310': attribute type 10 has an invalid length. [ 374.454698][T13767] netlink: 'syz.0.2314': attribute type 10 has an invalid length. [ 374.683978][ T39] kauditd_printk_skb: 241 callbacks suppressed [ 374.683988][ T39] audit: type=1326 audit(375.012:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.5.2316" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x0 [ 375.106530][T13780] FAULT_INJECTION: forcing a failure. [ 375.106530][T13780] name failslab, interval 1, probability 0, space 0, times 0 [ 375.109823][T13780] CPU: 3 UID: 0 PID: 13780 Comm: syz.6.2319 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 375.112699][T13780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 375.115490][T13780] Call Trace: [ 375.116379][T13780] [ 375.117184][T13780] dump_stack_lvl+0x16c/0x1f0 [ 375.118448][T13780] should_fail_ex+0x497/0x5b0 [ 375.119689][T13780] ? fs_reclaim_acquire+0xae/0x150 [ 375.120978][T13780] should_failslab+0xc2/0x120 [ 375.122150][T13780] __kmalloc_cache_noprof+0x6b/0x310 [ 375.123468][T13780] ? __alloc_workqueue+0xd92/0x1810 [ 375.124800][T13780] __alloc_workqueue+0xd92/0x1810 [ 375.126134][T13780] ? __pfx_vsnprintf+0x10/0x10 [ 375.127402][T13780] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 375.128932][T13780] alloc_workqueue+0xd3/0x200 [ 375.130169][T13780] ? __pfx_alloc_workqueue+0x10/0x10 [ 375.131563][T13780] ? __pfx___debug_object_init+0x10/0x10 [ 375.133037][T13780] nci_register_device+0x221/0xb80 [ 375.134419][T13780] ? __pfx_nci_register_device+0x10/0x10 [ 375.135896][T13780] virtual_ncidev_open+0x141/0x220 [ 375.137262][T13780] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 375.138737][T13780] misc_open+0x35a/0x420 [ 375.139859][T13780] ? __pfx_misc_open+0x10/0x10 [ 375.141133][T13780] chrdev_open+0x237/0x6a0 [ 375.142278][T13780] ? __pfx_chrdev_open+0x10/0x10 [ 375.143560][T13780] ? security_file_open+0x62a/0x9d0 [ 375.144919][T13780] do_dentry_open+0x6ca/0x1530 [ 375.146164][T13780] ? __pfx_chrdev_open+0x10/0x10 [ 375.147500][T13780] ? inode_permission+0xdd/0x5f0 [ 375.148811][T13780] vfs_open+0x82/0x3f0 [ 375.149876][T13780] ? may_open+0x1f2/0x400 [ 375.151003][T13780] path_openat+0x1e6a/0x2d60 [ 375.152205][T13780] ? __pfx_path_openat+0x10/0x10 [ 375.153461][T13780] ? __pfx___lock_acquire+0x10/0x10 [ 375.154807][T13780] do_filp_open+0x1dc/0x430 [ 375.156013][T13780] ? __pfx_do_filp_open+0x10/0x10 [ 375.157351][T13780] ? find_held_lock+0x2d/0x110 [ 375.158630][T13780] ? _raw_spin_unlock+0x28/0x50 [ 375.159913][T13780] ? alloc_fd+0x2d7/0x6c0 [ 375.161058][T13780] do_sys_openat2+0x17a/0x1e0 [ 375.162305][T13780] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.163672][T13780] ? __fget_files+0x244/0x3f0 [ 375.164863][T13780] __ia32_compat_sys_openat+0x16e/0x210 [ 375.166205][T13780] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 375.167718][T13780] ? ksys_write+0x1ad/0x260 [ 375.168920][T13780] __do_fast_syscall_32+0x73/0x120 [ 375.170260][T13780] do_fast_syscall_32+0x32/0x80 [ 375.171561][T13780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.173217][T13780] RIP: 0023:0xf7fbf579 [ 375.174222][T13780] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 375.179217][T13780] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 375.181341][T13780] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000080 [ 375.183415][T13780] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.185448][T13780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 375.187524][T13780] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 375.189588][T13780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.191668][T13780] [ 375.199710][T13782] overlayfs: missing 'lowerdir' [ 375.229384][T13787] __nla_validate_parse: 1 callbacks suppressed [ 375.229396][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2322'. [ 375.262595][ T5955] Bluetooth: hci0: command tx timeout [ 375.750811][T13806] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2323'. [ 375.756431][T13808] IPv6: Can't replace route, no match found [ 375.758118][T13806] netlink: 'syz.5.2323': attribute type 10 has an invalid length. [ 376.686339][T13821] overlayfs: missing 'lowerdir' [ 376.780636][T13824] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2329'. [ 376.783430][T13824] netlink: 'syz.5.2329': attribute type 10 has an invalid length. [ 377.023319][T13828] 9pnet_virtio: no channels available for device syz [ 377.342464][ T5955] Bluetooth: hci0: command tx timeout [ 377.427007][ T1407] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.721481][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.731627][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.737324][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.741785][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.745308][ T65] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 377.748076][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.855234][T12956] syz_tun (unregistering): left promiscuous mode [ 377.988853][T13833] chnl_net:caif_netlink_parms(): no params data found [ 378.063731][T13833] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.065633][T13833] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.067629][T13833] bridge_slave_0: entered allmulticast mode [ 378.069647][T13833] bridge_slave_0: entered promiscuous mode [ 378.071054][ T39] audit: type=1326 audit(378.392:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.5.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 378.072211][T13833] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.078555][T13833] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.078667][T13851] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2336'. [ 378.080612][T13833] bridge_slave_1: entered allmulticast mode [ 378.082419][ T39] audit: type=1326 audit(378.392:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.5.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 378.082501][ T39] audit: type=1326 audit(378.402:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.5.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 378.082568][ T39] audit: type=1326 audit(378.402:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.5.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 378.082648][ T39] audit: type=1326 audit(378.402:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.5.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 378.082825][ T39] audit: type=1326 audit(378.402:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.5.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 378.084821][T13833] bridge_slave_1: entered promiscuous mode [ 378.089789][ T39] audit: type=1326 audit(378.402:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.5.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 378.118380][ T39] audit: type=1326 audit(378.402:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.5.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 378.123630][ T39] audit: type=1326 audit(378.402:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.5.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 378.139465][T13833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.143736][T13833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.183854][T13833] team0: Port device team_slave_0 added [ 378.191901][T13833] team0: Port device team_slave_1 added [ 378.249430][ T76] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.269246][T13833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.271019][T13833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.277505][T13833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.281151][T13833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.283392][T13833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.289678][T13833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.313420][T13833] hsr_slave_0: entered promiscuous mode [ 378.316661][T13833] hsr_slave_1: entered promiscuous mode [ 378.318426][T13833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.320277][T13833] Cannot create hsr debugfs directory [ 378.340982][ T76] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.458203][ T76] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.532747][ T76] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.544962][T13863] overlayfs: missing 'lowerdir' [ 378.604823][ T76] bridge_slave_1: left allmulticast mode [ 378.606390][ T76] bridge_slave_1: left promiscuous mode [ 378.607899][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.610906][ T76] bridge_slave_0: left allmulticast mode [ 378.612946][ T76] bridge_slave_0: left promiscuous mode [ 378.614583][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.631376][T13866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2340'. [ 378.760101][ T76] team0: Port device geneve0 removed [ 378.905428][ T76] bond1 (unregistering): Released all slaves [ 379.083189][T13873] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2341'. [ 379.085975][T13873] netlink: 'syz.6.2341': attribute type 10 has an invalid length. [ 379.586644][T13833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.590149][T13833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.593564][T13833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.600182][T13833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.605496][T13879] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2344'. [ 379.659670][T13833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.673183][T13833] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.677423][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.679374][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.684210][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.686079][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.790947][T13833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.809042][T13894] overlayfs: missing 'lowerdir' [ 379.822029][T13833] veth0_vlan: entered promiscuous mode [ 379.827265][T13833] veth1_vlan: entered promiscuous mode [ 379.832701][ T5955] Bluetooth: hci1: command tx timeout [ 379.842163][T13833] veth0_macvtap: entered promiscuous mode [ 379.846195][T13833] veth1_macvtap: entered promiscuous mode [ 379.856311][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.859447][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.862084][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.865033][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.867984][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.870516][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.873110][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.875628][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.880293][T13833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.887253][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.889797][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.892169][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.895332][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.897698][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.900174][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.902599][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.905070][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.908176][T13833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.911357][T13833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.914385][T13833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.916616][T13833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.918736][T13833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.961442][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.964763][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.975167][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.977286][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.007718][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2333'. [ 380.152583][ T6012] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 380.312561][ T6012] usb 11-1: Using ep0 maxpacket: 8 [ 380.320492][ T6012] usb 11-1: config 0 has no interfaces? [ 380.322102][ T6012] usb 11-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 380.325273][ T6012] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.335312][ T6012] usb 11-1: config 0 descriptor?? [ 380.390401][T13909] sp0: Synchronizing with TNC [ 380.770610][ T76] tipc: Left network mode [ 380.780508][ T76] ------------[ cut here ]------------ [ 380.782012][ T76] WARNING: CPU: 3 PID: 76 at net/l2tp/l2tp_core.c:1881 l2tp_exit_net+0xf1/0x1a0 [ 380.784576][ T76] Modules linked in: [ 380.786153][ T76] CPU: 3 UID: 0 PID: 76 Comm: kworker/u32:4 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 380.790803][ T76] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 380.794141][ T76] Workqueue: netns cleanup_net [ 380.795721][ T76] RIP: 0010:l2tp_exit_net+0xf1/0x1a0 [ 380.797889][ T76] Code: 00 00 fc ff df 48 8d 6b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 9d 00 00 00 48 83 bb 88 00 00 00 00 74 6c e8 90 13 4d f7 90 <0f> 0b 90 e8 87 13 4d f7 48 89 ef 5b 5d 41 5c e9 ab f9 c4 00 e8 76 [ 380.804511][ T76] RSP: 0018:ffffc90000e2fba0 EFLAGS: 00010293 [ 380.806540][ T76] RAX: 0000000000000000 RBX: ffff88804e671800 RCX: ffffffff8b048af5 [ 380.808751][ T76] RDX: ffff88801f668000 RSI: ffffffff8a3f90e0 RDI: ffff88804e671888 [ 380.810804][ T76] RBP: ffff88804e671840 R08: 0000000000000007 R09: 0000000000000002 [ 380.812888][ T76] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000004000000 [ 380.814848][ T76] R13: ffffc90000e2fc38 R14: dffffc0000000000 R15: fffffbfff1fbd4c8 [ 380.816842][ T76] FS: 0000000000000000(0000) GS:ffff88802b700000(0000) knlGS:0000000000000000 [ 380.819333][ T76] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.820997][ T76] CR2: 000000002d5f5ff8 CR3: 000000005fa08000 CR4: 0000000000352ef0 [ 380.823325][ T76] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 380.825666][ T76] DR3: 00000000be70000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 380.827989][ T76] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 380.828887][ T76] [ 380.829844][ T76] ? __warn+0xea/0x3d0 [ 380.830958][ T76] ? l2tp_exit_net+0xf1/0x1a0 [ 380.832202][ T76] ? report_bug+0x3c0/0x580 [ 380.833487][ T76] ? handle_bug+0x54/0xa0 [ 380.834495][ T76] ? exc_invalid_op+0x17/0x50 [ 380.835714][ T76] ? asm_exc_invalid_op+0x1a/0x20 [ 380.837029][ T76] ? idr_destroy+0x55/0x2e0 [ 380.838215][ T76] ? l2tp_exit_net+0xf0/0x1a0 [ 380.839447][ T76] ? l2tp_exit_net+0xf1/0x1a0 [ 380.840672][ T76] ? __pfx_l2tp_exit_net+0x10/0x10 [ 380.842008][ T76] ops_exit_list+0xb0/0x180 [ 380.843259][ T76] cleanup_net+0x5b7/0xb40 [ 380.844421][ T76] ? __pfx_cleanup_net+0x10/0x10 [ 380.845719][ T76] ? trace_lock_acquire+0x14a/0x1d0 [ 380.847077][ T76] ? process_one_work+0x8bb/0x1b30 [ 380.848402][ T76] ? lock_acquire+0x2f/0xb0 [ 380.849583][ T76] ? process_one_work+0x8bb/0x1b30 [ 380.850923][ T76] process_one_work+0x958/0x1b30 [ 380.852220][ T76] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 380.853769][ T76] ? __pfx_process_one_work+0x10/0x10 [ 380.855164][ T76] ? assign_work+0x1a0/0x250 [ 380.856744][ T76] worker_thread+0x6c8/0xf00 [ 380.858145][ T76] ? __kthread_parkme+0x148/0x220 [ 380.859448][ T76] ? __pfx_worker_thread+0x10/0x10 [ 380.861048][ T76] kthread+0x2c1/0x3a0 [ 380.862106][ T76] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.863592][ T76] ? __pfx_kthread+0x10/0x10 [ 380.864778][ T76] ret_from_fork+0x45/0x80 [ 380.865926][ T76] ? __pfx_kthread+0x10/0x10 [ 380.867111][ T76] ret_from_fork_asm+0x1a/0x30 [ 380.868352][ T76] [ 380.869164][ T76] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 380.871026][ T76] CPU: 3 UID: 0 PID: 76 Comm: kworker/u32:4 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 380.874082][ T76] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 380.876818][ T76] Workqueue: netns cleanup_net [ 380.878049][ T76] Call Trace: [ 380.878910][ T76] [ 380.879672][ T76] dump_stack_lvl+0x3d/0x1f0 [ 380.880861][ T76] panic+0x71d/0x800 [ 380.881879][ T76] ? __pfx_panic+0x10/0x10 [ 380.883038][ T76] ? show_trace_log_lvl+0x29d/0x3d0 [ 380.884397][ T76] ? check_panic_on_warn+0x1f/0xb0 [ 380.885707][ T76] ? l2tp_exit_net+0xf1/0x1a0 [ 380.886951][ T76] check_panic_on_warn+0xab/0xb0 [ 380.888235][ T76] __warn+0xf6/0x3d0 [ 380.889252][ T76] ? l2tp_exit_net+0xf1/0x1a0 [ 380.890489][ T76] report_bug+0x3c0/0x580 [ 380.891615][ T76] handle_bug+0x54/0xa0 [ 380.892701][ T76] exc_invalid_op+0x17/0x50 [ 380.893875][ T76] asm_exc_invalid_op+0x1a/0x20 [ 380.895120][ T76] RIP: 0010:l2tp_exit_net+0xf1/0x1a0 [ 380.896463][ T76] Code: 00 00 fc ff df 48 8d 6b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 9d 00 00 00 48 83 bb 88 00 00 00 00 74 6c e8 90 13 4d f7 90 <0f> 0b 90 e8 87 13 4d f7 48 89 ef 5b 5d 41 5c e9 ab f9 c4 00 e8 76 [ 380.901364][ T76] RSP: 0018:ffffc90000e2fba0 EFLAGS: 00010293 [ 380.902915][ T76] RAX: 0000000000000000 RBX: ffff88804e671800 RCX: ffffffff8b048af5 [ 380.904933][ T76] RDX: ffff88801f668000 RSI: ffffffff8a3f90e0 RDI: ffff88804e671888 [ 380.906973][ T76] RBP: ffff88804e671840 R08: 0000000000000007 R09: 0000000000000002 [ 380.908975][ T76] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000004000000 [ 380.911005][ T76] R13: ffffc90000e2fc38 R14: dffffc0000000000 R15: fffffbfff1fbd4c8 [ 380.913004][ T76] ? idr_destroy+0x55/0x2e0 [ 380.914179][ T76] ? l2tp_exit_net+0xf0/0x1a0 [ 380.915396][ T76] ? __pfx_l2tp_exit_net+0x10/0x10 [ 380.916733][ T76] ops_exit_list+0xb0/0x180 [ 380.917942][ T76] cleanup_net+0x5b7/0xb40 [ 380.919145][ T76] ? __pfx_cleanup_net+0x10/0x10 [ 380.920453][ T76] ? trace_lock_acquire+0x14a/0x1d0 [ 380.921896][ T76] ? process_one_work+0x8bb/0x1b30 [ 380.923301][ T76] ? lock_acquire+0x2f/0xb0 [ 380.924468][ T76] ? process_one_work+0x8bb/0x1b30 [ 380.925796][ T76] process_one_work+0x958/0x1b30 [ 380.927081][ T76] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 380.928533][ T76] ? __pfx_process_one_work+0x10/0x10 [ 380.929911][ T76] ? assign_work+0x1a0/0x250 [ 380.931173][ T76] worker_thread+0x6c8/0xf00 [ 380.932358][ T76] ? __kthread_parkme+0x148/0x220 [ 380.933645][ T76] ? __pfx_worker_thread+0x10/0x10 [ 380.934974][ T76] kthread+0x2c1/0x3a0 [ 380.935986][ T76] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.937315][ T76] ? __pfx_kthread+0x10/0x10 [ 380.938503][ T76] ret_from_fork+0x45/0x80 [ 380.939633][ T76] ? __pfx_kthread+0x10/0x10 [ 380.940829][ T76] ret_from_fork_asm+0x1a/0x30 [ 380.942104][ T76] [ 380.943512][ T76] Kernel Offset: disabled [ 380.944667][ T76] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:45:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc900061e7b60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84b9dfa4 RDI=ffffc900061e7b60 RBP=ffffffff84b9df90 RSP=ffffc90000007f60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000007ff8 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc900061e7b28 RIP=ffffffff84b9dfcd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c242041 CR3=000000006a9ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000005dc00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88802b43ee80 RCX=0000000000000001 RDX=1ffff110053b196a RSI=0000000000000001 RDI=ffff88802b43fcb8 RBP=ffffc900061e78e0 RSP=ffffc900061e7748 R8 =ffff88802b53ee80 R9 =0000000000000000 R10=0000000000000000 R11=000000000000005d R12=0000000000000000 R13=ffff888029d8c880 R14=ffff888029d8c880 R15=ffff88802b53ee80 RIP=ffffffff8b1573e3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020027000 CR3=000000006a9ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000be70000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a04579b4e70b8aac 2f9b075c42e2ee1c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ece26ae52c694a89 b00dcb6891975770 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e43569f7fc57bc56 fd0329b6d029fec7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44f5657595cf395b af1ba0198dc7492b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000a940 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 70ca0000a18d2e02 0000e7690000e77c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 06080000b5c41e00 68521a0000f2ba00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9298000040b0aa9c 00e764c500e7611a ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000e79900000000 b53dea0000e7608b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 628e0e1c0aeb54ad 5a530676805c4213 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00eaaa7f101041ea fd507f8a38635f44 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000c8d807 RBX=0000000000000002 RCX=ffffffff8b148da9 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb136e0 RBP=ffffed10036ec000 RSP=ffffc90000487e08 R8 =0000000000000001 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801b760000 R14=ffffffff901cf288 R15=0000000000000000 RIP=ffffffff8b14a18f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055cc53f24280 CR3=000000005fa08000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000af000000000 0000002500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85046955 RDI=ffffffff9a644320 RBP=ffffffff9a6442e0 RSP=ffffc90000e2f508 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000036 R14=ffffffff850468f0 R15=0000000000000000 RIP=ffffffff8504697f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002d5f5ff8 CR3=000000005fa08000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000be70000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000