last executing test programs: 11m14.709702703s ago: executing program 2 (id=257): r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r10, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xa2d7}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x10341, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x17, &(0x7f0000000b00)={&(0x7f0000001000)={[{&(0x7f0000000080)="7e9d9bcce9220f4c59c6733a78c26b705cb681a5e57944", 0x17, 0x1}, {&(0x7f0000000600)="211af783354fc62308d5aad2c1527a8f14d848a4bac050da1f770cbfa561021c9bd0196a9550c379788f3d114a3a2dc65e5e65a45d28064f7cda089f13745a14a98bfdb0bff959e1f30f22929498dc682602a14fe0077d69d2bae1a1dd42fd59448ed9d56c42f943cedc47174911bd3b6fc9a048aaae1b568a19cdb6173d66464dcc04c3acc6e19d35297c88b13aa9c3fbc61fe4ff4130f64462d3c46e7fffb87d4a71c294625d597e6d2cda34a14b856e295c6ffaf36522a6dee32e3c6ac6538d72ad016fd03612baae4fe8dea9d488f40cc78a2fc4886fd335fc6f901f598403e2ea01b8f96a87d776acbaed2d", 0xee}, {&(0x7f0000000700)="c67578236ebad7fafe5fb9c785ebf05ba141f92c9a86ddcc14e670d3d63eda3127388002a637ef8bc53f50ca8ebbb547462d23336c17a5fd0c083d0895f3feb78f6c3cfa5f4f7c3f9e74117ada993c45fbe84fd55c4a3626981fa32a9f5d63d7de299e876f58549972ba11d7e0f04ae0c7d7723ac838b4c6e4fba660252c4c018aeb4d347ac8ef5b2f74", 0x8a}, {&(0x7f0000000a80)="783378f4036306fb12269981a329f86383e9f4f1e55e3aefeb3d4ca6708a8f46ac2ed0dafe7f1c02d085cca8be1825c4e348c3146f642241bfb68a2fdae91c84bf739978469ccf91f5f8a28b8153cbf74c48fd", 0x53, 0x3}]}, 0x4, 0x1}, 0x1) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r7) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r11, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x48}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x7fff, 0xffffffff, 0x18000000]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000045) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r12, 0x0) r13 = dup(r5) r14 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r14, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r13, 0x10f, 0x84, &(0x7f0000000540), &(0x7f00000007c0)=0x4) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r14, &(0x7f0000000200)={0xc, {0x7, "20000003000000"}}, 0xd) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x80000255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f3f, 0x2, 0x2100, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x19b, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1f, 0x32a0, 0x2, 0x250, 0x0, r13}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 11m13.716557386s ago: executing program 2 (id=262): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)={0x18, 0x36, 0x200, 0xfffffffe, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x7}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0), &(0x7f0000000280), &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x6e, &(0x7f00000190c0)=ANY=[@ANYBLOB="a1be00"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)=0x18) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r5, 0x0) 11m12.387314371s ago: executing program 2 (id=272): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000140)='pids.max\x00', 0x2, 0x0) preadv2(r4, &(0x7f0000000800)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1, 0x2, 0x3, 0x13) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0x100, 0x4, 0x0, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x6]}) close_range(r1, 0xffffffffffffffff, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfedd) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x3, 'none\x00', 0x0, 0x7ff, 0x1}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000600)={'pcl818\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x15, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) 11m12.245390452s ago: executing program 2 (id=273): syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c4800905020210020200000905820000000000"], 0x0) get_mempolicy(0x0, &(0x7f0000000440), 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./dev\x00', 0x6800, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket(0xa, 0x3, 0x7) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x0) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r1, 0x6f44, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=@alg={0x108, 0x10, 0x800, 0x70bd2c, 0x25dfdbff, {{'xts-serpent-avx2\x00'}, '\x00', '\x00', 0x2400, 0x2400}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0xc6e}, {0x8, 0x1, 0x200}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x5, 0xffffffc0, 0x241d, 0x8, "2d5157854e0a1e37a2c83e0fab035d8445e39c"}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x700, 0x0, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0xfffffffffffffffc, {}, 0xfe}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r5, 0x0, &(0x7f0000000100)) 11m10.603113118s ago: executing program 2 (id=281): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000140)='pids.max\x00', 0x2, 0x0) preadv2(r4, &(0x7f0000000800)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1, 0x2, 0x3, 0x13) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0x100, 0x4, 0x0, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x6]}) close_range(r1, 0xffffffffffffffff, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfedd) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x3, 'none\x00', 0x0, 0x7ff, 0x1}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000600)={'pcl818\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x15, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) 11m7.285830084s ago: executing program 2 (id=289): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) r1 = syz_open_dev$mtd(&(0x7f0000000080), 0x99c, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140), 0xfe80, 0x400100) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000003000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ba1a00000000eab5000000000000000000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r7, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) write$qrtrtun(r9, &(0x7f00000009c0)="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", 0x1000) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r10, 0x0, 0x0, 0xc190, &(0x7f0000000040)={0x11, 0x88a8, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000340)={r12, 0x5, 0x1, 0xffffffc0, 0x4, 0x9, 0x6}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="06a00000000000000c001a800800048004000180"], 0x2c}}, 0x0) ioctl$MEMGETOOBSEL(r1, 0x80c84d0a, 0x0) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r14, @ANYBLOB="04000104ab55129faf48d111e75709fecda4"], 0x9) 11m7.090924845s ago: executing program 32 (id=289): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) r1 = syz_open_dev$mtd(&(0x7f0000000080), 0x99c, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140), 0xfe80, 0x400100) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000003000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ba1a00000000eab5000000000000000000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r7, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) write$qrtrtun(r9, &(0x7f00000009c0)="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", 0x1000) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r10, 0x0, 0x0, 0xc190, &(0x7f0000000040)={0x11, 0x88a8, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000340)={r12, 0x5, 0x1, 0xffffffc0, 0x4, 0x9, 0x6}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="06a00000000000000c001a800800048004000180"], 0x2c}}, 0x0) ioctl$MEMGETOOBSEL(r1, 0x80c84d0a, 0x0) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r14, @ANYBLOB="04000104ab55129faf48d111e75709fecda4"], 0x9) 7m0.936167641s ago: executing program 1 (id=1447): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000200)='efivarfs\x00', 0x200020, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003ac0), 0x189500, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4605c8a4c48f000000000000000200030009000000ca020000380000005e02000006040000ebff20000400f8ff1e0400020000000051e57464142700000cf2000008000000e69c000006000000030000000800000051e57464"], 0xb8) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x400c805}, 0x4008094) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000530400022cbd7000fddbdf25a7fbddd18d6f2e355ed862bac22c3e87ebc6d024ac5bd6f7d008757456ff933d21a2f81bafc5a45b3444f600"], 0x40}, 0x1, 0x0, 0x0, 0xc000010}, 0xc080) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(0x0, 0x40, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) renameat(r4, &(0x7f0000000080)='./file1\x00', r4, &(0x7f0000000000)='./file0\x00') r6 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) ioctl$NBD_DISCONNECT(r6, 0xab08) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000100)=0x60) 6m59.426137917s ago: executing program 1 (id=1455): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c0100001000130428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x804) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x190, 0x4) write(r3, &(0x7f0000000000)="01", 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(&(0x7f0000000340)='./file0/file2\x00', &(0x7f0000000380), &(0x7f0000000240)=@v2={0x2000000, [{0x6, 0xa}, {0x65}]}, 0x3, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x181000, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1f) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000280)={[0x1000, 0x4000, 0xeeefe000, 0xdddd0000], 0x8, 0xc, 0x7}) msgsnd(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="c962b704c04c4d1c7bede68b9f4209893b21a1ac12de1142c35f8ce7d91f15f46d76736837000000000000350ca724d73c28d1a3241ba3f5399ca0c3273b7d1e631c20edae885e903f66e358fbea0bad0e81a8aaf264bbeeaa15bcb011792e299eb5531000ff390d2c1aad39032ea6ebf71530ae3514d4e72b22da518a23582f24387cfbc082744f0ec50f48d36cdb8354eb918367603ac84602c99303d5bd37957003fc2034746cb80000002c4e5811421364846ffb88255b4b028678991ecfa72d669fc0c7849218e6aa318b687f7f90f674cd63aca56bb9f20890b572129ff4aec498c57d7e45e08d1551090efe02bcd6b7c3"], 0x8, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x7f4a, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x5) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000021c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x11, r3, 0xffffc000) sigaltstack(&(0x7f00000014c0)={0x0, 0x80000000}, 0x0) read$FUSE(r2, &(0x7f0000002440)={0x2020}, 0x2020) 6m59.175445064s ago: executing program 1 (id=1456): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) listen(r2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000003240)={0x28, 0x0, 0x0, {{0x3, 0x4, 0x2}}}, 0x28) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000380)) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x5c, 0x0) r3 = accept4$inet(r0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d4", 0x85) r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f0000000280)={0x1, 0x9, 0x7, 0x8}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064d1, &(0x7f0000000040)={0x1e, 0x0, 0x0}) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f100000027"], 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1d97030098a2040008000a00", @ANYRES32, @ANYBLOB="140012800c0001006d616376746170000400028008002900354b02"], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000ffdbdf250c000000180001801400020076657468315f746f5f6261746164760018000380140003800c"], 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r10, 0x8}, &(0x7f0000000140)=0x8) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) dup3(r13, 0xffffffffffffffff, 0xd4d91f90e84acc88) 6m58.296698971s ago: executing program 1 (id=1460): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000040)='./file2\x00', 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r2) 6m56.026105117s ago: executing program 1 (id=1465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x30, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="2e00000011008b88040f80ee59ac9904130800483f0000005e2980421803001825800000000f0000ea7f2e0c0012", 0x2e}], 0x1}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000), 0x8) 6m55.644484927s ago: executing program 1 (id=1468): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "6f449e", 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8ed, 0x0, 0x6}}}}}}}}, 0x4e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r0, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) 6m55.559504165s ago: executing program 33 (id=1468): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "6f449e", 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8ed, 0x0, 0x6}}}}}}}}, 0x4e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r0, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) 2m54.359631592s ago: executing program 5 (id=2669): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xb8c) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:1d.7/remove\x00', 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000ffd000/0x3000)=nil}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfef", 0x4}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xe}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x18}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x32}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffffd, 0xf, 0xf, 0x8, 0x80, 0x10004, 0x3, 0x8, 0x3, 0x1, 0x5, 0x0, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x107, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x28, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x1000, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x2000000, 0x5, 0x0, 0x4, 0x0, 0x1008008, 0x400, 0x80, 0x0, 0x7, 0x6, 0x6, 0x80000000, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0xffffffff, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x0, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x9, 0x4, 0x9, 0x7, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x3, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x7, 0x20061c, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x9, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0xa, 0x3, 0x5, 0x4, 0x3c484551], [0x6, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x2, 0x2, 0xfefffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x200, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000100)={0x3, "f13826"}, 0x4) write(r8, &(0x7f0000000800)='1', 0x1) 2m52.433156723s ago: executing program 5 (id=2672): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001d00)=[{&(0x7f00000000c0)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000d00)='P', 0x1}], 0x1, &(0x7f0000000340)=[@init={0x14, 0x84, 0x0, {0x31, 0x9, 0x4, 0xa0}}, @dstaddrv6={0x1c, 0x84, 0x8, @loopback}], 0x30, 0x24004884}], 0x1, 0x4040044) r1 = syz_open_procfs(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80104132, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x12, 0x43, 0x0, @loopback}}}}}, 0x0) sendmsg(r9, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c01000010000100feffffff00010000fe880000000000000000000000000001ff020000000000000000000000000001000100004e23000000000020620000001275ae995a051a57f789860bafa6519dd8719479a80d9f8c6e62351f9267420dcc022f8e8cbc8d6ab3709a337574c9cb7f00971634442ccce19d22bf20f38bce45392407f0cf4c78600f79cb380a666f2831633d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000104d46c00000020010000000000000000000000000002010800000000000000000000000000000400000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000fffffffffffffffd00000000000000001f0000000000000007000000000000000200000005000000000000002bbd7000000000000200010020000000480003006c7a6a6800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002006374732d6362632d6165732d636500"/308], 0x17c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r7, 0x5eae78d9c54e9d3f, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f94b54cce6396c3599431c882366da01"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1000000}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r5) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00052abd7000fbdbdf250100000008000100030000000800020002000000189b7d2e5601229ec1e76653c0354fa8d54651eefe01d92dc7cffc58d533b90959a34ea9831e3536f37d684f1483eba287d91840db2348960de0578182284787867b1c536f617ffdc265659ca626ea54b5fa3dd68b9047d44df207813a91f43a6ae500cfce447421c2"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10000) syz_genetlink_get_family_id$ieee802154(0x0, r5) 2m51.281081855s ago: executing program 5 (id=2677): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xb8c) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:1d.7/remove\x00', 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000ffd000/0x3000)=nil}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfef", 0x4}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xe}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x18}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x32}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffffd, 0xf, 0xf, 0x8, 0x80, 0x10004, 0x3, 0x8, 0x3, 0x1, 0x5, 0x0, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x107, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x28, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x1000, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x2000000, 0x5, 0x0, 0x4, 0x0, 0x1008008, 0x400, 0x80, 0x0, 0x7, 0x6, 0x6, 0x80000000, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0xffffffff, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x0, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x9, 0x4, 0x9, 0x7, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x3, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x7, 0x20061c, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x9, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0xa, 0x3, 0x5, 0x4, 0x3c484551], [0x6, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x2, 0x2, 0xfefffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x200, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000100)={0x3, "f13826"}, 0x4) write(r8, &(0x7f0000000800)='1', 0x1) 2m48.906862723s ago: executing program 5 (id=2687): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x3ae, 0x0, 0x7f}]}) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x42400) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x2000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2m47.193405136s ago: executing program 5 (id=2692): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async, rerun: 32) msgget(0x3, 0x710) (async, rerun: 32) msgctl$IPC_RMID(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x224001, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x9, 0x3, {{0x14, 0x4, 0x3, 0x3b, 0x50, 0x67, 0x0, 0xf, 0x29, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x2c, 0x9b, 0x1, 0x9, [{@rand_addr=0x64010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7ceb4910}, {@remote, 0x101}, {@broadcast, 0x101}, {@private=0xa010101, 0x4e9}]}, @timestamp={0x44, 0x10, 0x92, 0x0, 0x7, [0x7, 0x4, 0x200]}]}}}}}) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_ublk_setup_io_uring(0x6607, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r7, r6, &(0x7f0000000480)={0x0, 0x18ee, 0x101f, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r5, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)=ANY=[]) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, 0x0, &(0x7f0000000180)) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) (async) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000140)=0xfffffffe) 2m46.922509328s ago: executing program 5 (id=2694): sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x3f9, 0x300, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24000011}, 0x6000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff00000000080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2m31.893614033s ago: executing program 34 (id=2694): sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x3f9, 0x300, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24000011}, 0x6000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff00000000080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1m30.827821297s ago: executing program 0 (id=3165): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x30000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) futex$unlock_pi_list32(0x0, 0x687, 0x26, 0x0, 0x0, 0x5) r3 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ppoll(&(0x7f0000000180)=[{r0, 0x300}, {r1, 0x1}, {r1, 0x8000}, {r3, 0xe0}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x4, 0x2]}, 0x8) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f353163030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b233807200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bde7095d6a345badc56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76ea0270e4c10d64cd5a62427264f2377fe763c434708337c8de98f371bb943a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa7ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad046581927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fc83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad83872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02b7fa64b6de3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba300004e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f08df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b00000000000000017809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac3fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2102596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb90372927db6ff959c0837d2e7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d050000008926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023dd0000000400", 0x1000}}, 0x1006) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000f0ff0001000084ffffffff0000000003000000000000400000000000000002000000000000000000000006020000000000"], 0x0, 0x4a}, 0x28) sched_rr_get_interval(r4, &(0x7f0000000080)) fanotify_mark(0xffffffffffffffff, 0x10, 0x40001010, 0xffffffffffffffff, 0x0) 1m29.954879012s ago: executing program 0 (id=3174): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7, 0xc9, 0x3}}}, 0x8) ptrace$pokeuser(0x6, 0x0, 0x118, 0x137db) syz_open_dev$loop(0x0, 0xffffffffffffffff, 0xa080) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x58, r0, 0x200, 0x0, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x58}}, 0x0) 1m29.217816661s ago: executing program 0 (id=3178): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) socket$netlink(0x10, 0x3, 0xb) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x802154}, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) r3 = socket$inet_icmp(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) bind$inet(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x9c, 0x3, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x100003}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xffffffc0}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x85}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000011) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000440)='l@\xd8$n\x18c\x91 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xc, 0x80c5, "0800080001000000"}]}, 0x38}}, 0x0) setuid(0xee01) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setpgid(0x0, r2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 14.701454635s ago: executing program 3 (id=3516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x300, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) 14.643352948s ago: executing program 3 (id=3517): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x1bd, @loopback}, 0x10) listen(r2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000003240)={0x28, 0x0, 0x0, {{0x3, 0x4, 0x2}}}, 0x28) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000380)) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x5c, 0x0) r3 = accept4$inet(r0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d4", 0x85) r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f0000000280)={0x1, 0x9, 0x7, 0x8}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064d1, &(0x7f0000000040)={0x1e, 0x0, 0x0}) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r8, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) sendmsg$nl_route(r1, 0x0, 0x8000002) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="01002bbd7000ffdbdf250c000000180001801400020076657468315f746f5f6261746164760018000380140003800c"], 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r10, 0x8}, &(0x7f0000000140)=0x8) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) dup3(r13, 0xffffffffffffffff, 0xd4d91f90e84acc88) 13.758378428s ago: executing program 3 (id=3521): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000001000)=ANY=[@ANYBLOB="0b0000007379ff300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000069d06751000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040005007b0500000a03000003000000a9000000"], 0x11c) write$UHID_CREATE2(r2, &(0x7f0000001140)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000006bdd7d83aedc10af0000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000600000300000000f8ffffff"], 0x118) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000080)=0x2, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000040)={0xe, 0x100, 0x9, 0xbc4a42eb, 0x67cd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x0, 0xe000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, 0x0, 0x0, 0x400040, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x108) setsockopt$sock_int(r6, 0x1, 0x2b, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f00000001c0)=@riscv64_v={0x8030000009000012, &(0x7f0000000180)=0xdac5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80000, 0xff) 13.38741742s ago: executing program 3 (id=3525): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = semget$private(0x0, 0x1, 0xc) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000140)=""/105) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=@newtfilter={0x8b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xffffffffffffff03, 0x2, [@TCA_MATCHALL_ACT={0x880, 0x2, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x531f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x8, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x105, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x7f]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffff0003, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0xd, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x7, 0x6, 0x9, 0x1000, 0xb3000, 0x0, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x3, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0x0, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x0, 0x5, {0x4, 0xa}}, @TCA_RATE={0x0, 0x5, {0x5, 0x8}}, @filter_kind_options=@f_flow={{}, {0x0, 0x2, [@TCA_FLOW_EMATCHES={0x0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0xf1d}}, @TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x0, 0x1, 0x0, 0x0, {{0x6}, {0x5, 0x1, 0x1dbf, 0x800}}}, @TCF_EM_META={0x0, 0x2, 0x0, 0x0, {{0xecfc, 0x4, 0x4420}, [@TCA_EM_META_HDR={0x0, 0x1, {{0x5, 0x2, 0x1}, {0x6, 0x9b}}}, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_VAR="e1b44c310a60833267ee"]}, @TCA_EM_META_HDR={0x0, 0x1, {{0x2, 0x7f}, {0x7, 0x8}}}, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="dd49", @TCF_META_TYPE_VAR="4d9fb44224d5f2", @TCF_META_TYPE_VAR="6d19e3", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="846dd93d49a79fb73573", @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_CANID={0x0, 0x2, 0x0, 0x0, {{0x600, 0x7, 0x2}, {{}, {0x0, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x0, 0x3, 0x0, 0x0, {{0x1000}, {0x7, 0x0, 0x2, 'S'}}}, @TCF_EM_CANID={0x0, 0x5, 0x0, 0x0, {{0xf, 0x7, 0xe}, {{}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x0, 0x1, 0x0, 0x0, {{0x3230, 0x3, 0xfff8}, {0x2, 0x9af, 0x2, 0x400}}}, @TCF_EM_IPSET={0x0, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x9}, {0x2, 0x4}}}, @TCF_EM_CMP={0x0, 0x3, 0x0, 0x0, {{0xfff9, 0x1, 0x100}, {0x1, 0x7ccc, 0x6, 0x2, 0x8, 0x2, 0x1}}}, @TCF_EM_IPSET={0x0, 0x3, 0x0, 0x0, {{0xfffb, 0x8, 0x2}, {0x0, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x0, 0x1, 0x0, 0x0, {{0x648b, 0x3, 0x8}, {0x2, 0xfffffffd, 0x1, 0xe0}}}]}]}]}}, @TCA_CHAIN={0x0, 0xb, 0x9}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13.106441704s ago: executing program 3 (id=3530): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/110, 0x6e}, {0x0, 0x34}], 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x1c) 13.023781347s ago: executing program 36 (id=3530): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/110, 0x6e}, {0x0, 0x34}], 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x1c) 10.45009026s ago: executing program 8 (id=3541): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000002000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904000005ff00000007058102400001070501024000010705830240000107050302"], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)='sLr', 0x3) ppoll(&(0x7f0000000100)=[{r1}], 0x1, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010101000000000000000000000000000004d56c000000fc02000000000000000000000000000007000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcfdffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000050000ffff000000fefffffffc030000000000007e000000053500000a00010020000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000800220002"], 0x13c}}, 0x844) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x14c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x2, 0x2) ioctl$PPPIOCGIDLE(r0, 0x8008743f, &(0x7f0000000080)) 9.04028886s ago: executing program 6 (id=3546): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) timer_create(0x6, &(0x7f0000000500)={0x0, 0x32, 0x1, @thr={&(0x7f0000000540)="a3f71f87fbc4fc2270c56e5660a74c24fb0848fd39d95d0c900830b3fe11b898d324cd3b330fa414fb", &(0x7f0000000580)="50cf4674dd8e2419df6b2319395c50a3418a68b13e4b4b537e08628fbedbb3cf713e4c125e29eb7170a4f02c92047b3bef27411389e2cc0beeecd57569a5233802ba55e2d3e9307a343041468926871029d61dee8555b0272f68d37d35a88858705c8b684ebbedc9fee58d3dc84b46afc71979d9305b7a0b2b61589fff04324dbf03249f3c6db5e2646e1e7571a9b2fcf8c7a643eda80e1c04bdb3f83f635ac29fe9eaaccee8caa083a6f77aff95247be081164aff27dd18b56cc719d675e98f7197477c72bc"}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) unshare(0x10000) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000003c0)={0x0, 0x3, [0x8000000000008, 0x7, 0x7, 0x7, 0x28, 0x2]}) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xc3) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xe2) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000380)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x5, 0x3fb, 0x1, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x81) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000000000300"/26], 0x0, 0x1a, 0x0, 0x8}, 0x28) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="94", 0x1, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r8}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r7) openat$kvm(0xffffff9c, &(0x7f0000000240), 0x400001, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "9d0469f0363c7fe68df0ca2c3fcd35e8b913a5fd7007839a30627ca3fc21de2f3341508029fcba822a113472e02fbdcb84107c5fd8bac17aa09921ad30a9e816", 0x32}, 0x48, r7) 8.291478871s ago: executing program 7 (id=3547): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="c8ed0ec2aff22b790000000000000000", 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xc, 0x80c5, "0800080001000000"}]}, 0x38}}, 0x0) setuid(0xee01) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setpgid(0x0, r2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 7.381134987s ago: executing program 8 (id=3548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) 7.375715376s ago: executing program 6 (id=3556): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0xd, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x10000, 0x0, 0x1, 0x44040, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r4, 0x0, 0x0}, 0x10) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8010, 0x3b, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r8, 0x1, 0x6, 0x0, 0x0) sendmmsg(r8, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000006e80000080004007f0000010f000700756e636f6e66696e65640000080005007f000001"], 0x44}}, 0x0) 6.933725438s ago: executing program 8 (id=3549): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="f7", @ANYRESDEC], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x41000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$char_usb(r1, 0x0, 0xb3) socket$packet(0x11, 0x3, 0x300) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) 5.101356406s ago: executing program 8 (id=3550): syz_open_dev$evdev(&(0x7f0000000180), 0x800000000000070, 0x1e1082) syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0x8000, 0x2, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7, 0xc9, 0x3}}}, 0x8) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x118, 0x137db) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) syz_open_dev$loop(&(0x7f0000000080), 0xffffffffffffffff, 0xa080) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x58, r8, 0x200, 0x0, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x58}}, 0x0) 4.710777492s ago: executing program 7 (id=3551): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x6, 0x2, 0x0, 0x6, 0x808, 0x4003}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 3.645794738s ago: executing program 8 (id=3552): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xb8c) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:1d.7/remove\x00', 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000ffd000/0x3000)=nil}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdf", 0x3}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xe}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x18}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x32}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffffd, 0xf, 0xf, 0x8, 0x80, 0x10004, 0x3, 0x8, 0x3, 0x1, 0x5, 0x0, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x107, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x28, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x1000, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x2000000, 0x5, 0x0, 0x4, 0x0, 0x1008008, 0x400, 0x80, 0x0, 0x7, 0x6, 0x6, 0x80000000, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0xffffffff, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x0, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x9, 0x4, 0x9, 0x7, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x3, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x7, 0x20061c, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x9, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0xa, 0x3, 0x5, 0x4, 0x3c484551], [0x6, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x2, 0x2, 0xfefffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x200, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000100)={0x3, "f13826"}, 0x4) write(r8, &(0x7f0000000800)='1', 0x1) 1.891198736s ago: executing program 7 (id=3553): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000011000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b7050000080000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 1.878419689s ago: executing program 6 (id=3554): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x4800f) dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000000)='2', 0x1, 0x4fed0) socket$inet_sctp(0x2, 0x4, 0x84) lseek(r3, 0x2d33, 0x3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x70, r5, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x83c}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffc01}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r6, &(0x7f0000001dc0)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000900)="adb5dc1d0bf8e25edf7434d92b062b5e9e6a54d59400e940414ea7ed35f92ab33b4cd9ca789385ddacffd1a2c7be4782a5dd69bea55f5bb7ac4c8699101903464ea72986be4c28725acf41566b880748c84391503a7087d2c8af4629cbeb7c2f0089cbf5922b341c7145cbf51dc4275ace344d52b92faf005bec93d3e48f026a8913f4787b4964b8b2cc2140ee462c8cda28b4dff9f38bb5abeae901f4e61e884be1e2a620f99892122f4b6c52253fe2df7ccd73144f14efd108899bb5619fe7b0de93c7c5163b895c81590eb760fdb718fe1406824b5d6f1ca9be63701d8421c5", 0x19}, {&(0x7f0000000a00)="e31d21b07ab7e1c5aa8bbbfaa3933d4acc8bb63149e17da2ff18018dfa19dab0a9bc20591cdc7e26ce0114b2a3f6d1c90607a7cf0947c79dfb5fb4d3f262b9e52edd26e1b549d0080f57ff3f5f6de2ac6cdcee27f9e58880101db989beeb327fc537c45a504431fce381d63f8f1e95031f8081f5ee9b8b39646e299086c0d32a18b2ae3f0c090228aee9dcd8d1d8f58983eccc38e52e560484e42db102676597c22d8ae870b6675a3b5dff58cc814d8a9a3c54b98efcdb77aacc9e1d1d19b7303f379b549f", 0xc5}], 0x2, &(0x7f0000002980)=[{0x3c, 0x88, 0x4, "818f162e6927b58897fc03b68393cea61d78ed7b31f13115dc679e64431b3549c1278ad29f16b006e1a5b71ec4"}, {0xc0, 0x117, 0x9, "3ca19ec19da5ca37e293d645654864017c3ce61b43d68cfbe05d4bdc7a8e919ae746cfe7bbb9bf599a2d0fa852e71822955979c6998b562970a31378ee9e79cc88c4f21516cb20340456381aa3bf88afaf159e113b53558b3324f555bb0521e6ce97af80215ee913b0e479191ebb8adf41614b74694a9c2f7d29eb49c3308c22a5b0773873f5cc54cceefb18d68296ad8c96dca9749fb4d10691aaa1a4d3b5603c9079389c777e9a097b3111f774b382aeb7ce"}, {0xec, 0x10b, 0x3, "364cfe7d944e6347e4a3ad6e3724209472361a44bad5025ed091b2fd665a96d1a108aadde3663051093dc27e2a7865814f15803380667a92ddbe649a0174f3ac128d5cdc93bbce6bfebe3b5d8f84b2ac03b30bd1c5ec7fa343c5c3d074a50691d19a89415f1b63e8b7ebdc0fcf2f53651644f33acff6ad7a827ed595238a9101609e78204c7177dba00da287dfc0bd37510f9651aa897e12dbaf3d56b4d0f0fb696a146aa9b9314f8620e041646dd7d25d0439e85c91c85bd208a5330901569845898cf3f40441453250a3d64c323311612bebd678a2d9f15924aa7aada345"}, {0x64, 0x0, 0x2, "8c210cff33f59577e387568958772658b970e090bf2d8b8f2a250408b4f54beb5f3631559f4fcfe4d219c54f646b1b3db55e64cb7642e1583559ee46ed2e250c0800000000000000bb270e1a0e3672fd555bae442e22bd"}, {0x100c, 0x1, 0x5, "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"}], 0x1258}}], 0x1, 0x804) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x401}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041094}, 0x40890) recvmmsg(r6, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) listns(0x0, 0x0, 0x0, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x6}], 0x1c) 1.820642416s ago: executing program 4 (id=3555): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x1bd, @loopback}, 0x10) listen(r2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000003240)={0x28, 0x0, 0x0, {{0x3, 0x4, 0x2}}}, 0x28) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000380)) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x5c, 0x0) r3 = accept4$inet(r0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d4", 0x85) r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f0000000280)={0x1, 0x9, 0x7, 0x8}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064d1, &(0x7f0000000040)={0x1e, 0x0, 0x0}) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r8, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) sendmsg$nl_route(r1, 0x0, 0x8000002) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000ffdbdf250c000000180001801400020076657468315f746f5f6261746164760018000380140003800c"], 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r10, 0x8}, &(0x7f0000000140)=0x8) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) dup3(r13, 0xffffffffffffffff, 0xd4d91f90e84acc88) 1.769467711s ago: executing program 7 (id=3557): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000150001000000001a000000000b000000080002000ab13d"], 0x1c}}, 0x20000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = syz_ublk_setup_io_uring(0x3697, &(0x7f0000000040)={0x0, 0xa264, 0x1, 0x1, 0x1b8}, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='vers\x00', &(0x7f00000002c0)='1.0\x00', 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0x80, 0x1df, 0x81}) ioctl$SG_BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x3800) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0xbfffffff, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file1\x00', &(0x7f00000020c0), 0x412, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYBLOB, @ANYRES32=0x0]) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20000002}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x4, 0xffffffffffffffff, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f00000000c0)="640031f3749ef44eac6a55e47e941e001cdc6541e0e0c004e7a1ae96cd7bd4e13fcc63dd6815b977a07b2fcff849128e", &(0x7f0000000100)=""/20, &(0x7f0000000180)="6b51f4f91721372eb0e77d8f71d4d55980606b37aeeb69232f518524558aec45eaf298aac5ba7115", &(0x7f00000001c0)="6f0875ab2a27bd3b9c5b06d74f7ec4d8dcc97d38149c12d7be9866f6a2dd76bf150ce871c97a27e983631d8e2ca41a4508e502e2968cb7fc15fc27feaed3ffad", 0x8, r2, 0x4}, 0x38) 1.307357741s ago: executing program 8 (id=3558): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xb8c) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:1d.7/remove\x00', 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000ffd000/0x3000)=nil}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000240), 0x0, 0x1000, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xe}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x18}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x32}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffffd, 0xf, 0xf, 0x8, 0x80, 0x10004, 0x3, 0x8, 0x3, 0x1, 0x5, 0x0, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x107, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x28, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x1000, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x2000000, 0x5, 0x0, 0x4, 0x0, 0x1008008, 0x400, 0x80, 0x0, 0x7, 0x6, 0x6, 0x80000000, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0xffffffff, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x0, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x9, 0x4, 0x9, 0x7, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x3, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x7, 0x20061c, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x9, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0xa, 0x3, 0x5, 0x4, 0x3c484551], [0x6, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x2, 0x2, 0xfefffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x200, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000100)={0x3, "f13826"}, 0x4) write(r8, &(0x7f0000000800)='1', 0x1) 1.228287654s ago: executing program 7 (id=3559): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad185b4f4599c90a, 0x0}, &(0x7f0000000500)=0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r9, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1fd}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) r12 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r12, 0x0, 0x81, &(0x7f0000002200)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x6, 0xa1, 0x5, 0x0, 0x80000000], 0x3, 0x0, 0x0, [{}, {}, {}]}, 0x80) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r14, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x496}) ioctl$KVM_SET_GSI_ROUTING(r14, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x5, 0x0, 0x0, @adapter={0xfffffffffffffffb, 0xffffffff, 0x4, 0x1, 0x5}}]}) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r15, 0x0, 0x49, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r16 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x7) ioctl$KVM_IRQ_LINE_STATUS(r16, 0xc008ae67, &(0x7f0000000000)={0x0, 0x4}) syz_ublk_setup_queues(r11, r5, &(0x7f0000000180)={0x0, 0x2000001, 0x0, 0x3, 0x252, 0x0, r11}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x80000, 0x1, 0x2401f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x60, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x48) 1.027474443s ago: executing program 7 (id=3560): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="c8ed0ec2aff22b790000000000000000", 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xc, 0x80c5, "0800080001000000"}]}, 0x38}}, 0x0) setuid(0xee01) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setpgid(0x0, r2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 887.419454ms ago: executing program 6 (id=3561): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) (async) socket$nl_crypto(0x10, 0x3, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000200)={0x1, 0x2, 0x9, 0x2, 0xffffff6f, 0x401}) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x16) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10, 0x0}, 0x30004001) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mmap$snddsp(&(0x7f0000f4f000/0x2000)=nil, 0x2000, 0x3000005, 0x40010, 0xffffffffffffffff, 0x10000) r5 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) (async) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 886.590579ms ago: executing program 4 (id=3562): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x6, 0x2, 0x0, 0x6, 0x808, 0x4003}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 768.487519ms ago: executing program 4 (id=3563): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) (async) close(0x3) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002002000ffff000005"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1009, r1}, 0x38) 391.444757ms ago: executing program 4 (id=3564): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf={0xba, &(0x7f0000000100)="7a54db5eb7c0fccde9e011fb1f9d76528eeac322922da984a75707e5f4176fcc8d7ef5bef1484d73986a97e5858bbb3da1be4f777fa49d49fd9b9df135fb621bea575c27333beb6fbf199cda9db5687c648e21d00be282d7a283ccd78b93506965fec8f8a2a4599d0616ee60fe34c48aa30806c0c0256b173cf3195ad8cfd30444a2e17dbcc6efb9c082b5c0da39201f95008c576415c206351c1349954be50faa47e66178e452f8c97029ae39b2df56b887c342da7dc454502b"}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x6, 0x9, 0x7, 0xfffffffffffffffa, 0x1, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000002c0), 0x0, 0x40c0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') write$cgroup_int(r5, &(0x7f0000000080)=0x80000000001c0, 0x12) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2, 0x4, 0x1, 0xfffffff9, r3}) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf={0xba, &(0x7f0000000100)="7a54db5eb7c0fccde9e011fb1f9d76528eeac322922da984a75707e5f4176fcc8d7ef5bef1484d73986a97e5858bbb3da1be4f777fa49d49fd9b9df135fb621bea575c27333beb6fbf199cda9db5687c648e21d00be282d7a283ccd78b93506965fec8f8a2a4599d0616ee60fe34c48aa30806c0c0256b173cf3195ad8cfd30444a2e17dbcc6efb9c082b5c0da39201f95008c576415c206351c1349954be50faa47e66178e452f8c97029ae39b2df56b887c342da7dc454502b"}) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x6, 0x9, 0x7, 0xfffffffffffffffa, 0x1}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) sendmmsg$unix(r4, &(0x7f00000002c0), 0x0, 0x40c0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') (async) write$cgroup_int(r5, &(0x7f0000000080)=0x80000000001c0, 0x12) (async) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2, 0x4, 0x1, 0xfffffff9, r3}) (async) 391.161082ms ago: executing program 6 (id=3565): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@private2}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x2c, 0x17, {0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x164}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x200003, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r3, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) write(r1, &(0x7f0000000400)='655', 0x3) r4 = openat(r1, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r4, &(0x7f0000000a40)='active', 0x6) 321.364931ms ago: executing program 4 (id=3566): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000039c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x76, 0x15100020, 0x3, 0x7, 0x9, 0x4, 0x0, 0x0, 0x8, 0x400000ff}}, 0x50) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x94) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r5, 0x25, 0x2, @val=@netkit={@void, @value=r4}}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c40)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r6, 0x0, 0x0}, 0x10) (fail_nth: 3) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000440)="fbd2e9", 0x3}], 0x1) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[], 0xfffd) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000100), &(0x7f0000000200)=0x4) 258.347428ms ago: executing program 6 (id=3567): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000100)={"e5ed98682194f85d60e3b4266703a3afe09b0167ccbeb6b35e0c2699ce7f", 0x7cab010f, 0xcb9, 0x6, [0x1, 0x522, 0x6, 0x37c, 0x4, 0x3, 0x3ff, 0x0, 0x9b, 0x2, 0x2, 0x8, 0x7, 0x8, 0x8, 0x7, 0x6, 0x6]}) write(r0, &(0x7f0000000200)='md0', 0x3) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@n={0x1, 0x1, @SEQ_NOTEON=@special, 0x40}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000380)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='65536', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='ppl', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r7, &(0x7f0000000c00)='./nfsd\x00', 0x2, 0x80) write(r6, &(0x7f0000000580)='1:0', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r8, &(0x7f00000007c0)='0', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r9, &(0x7f0000000a40)='active', 0x6) 0s ago: executing program 4 (id=3568): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000150001000000001a000000000b000000080002000ab13d"], 0x1c}}, 0x20000080) kernel console output (not intermixed with test programs): rsing attributes in process `syz.4.3298'. [ 716.774390][ T3271] usb 12-1: Using ep0 maxpacket: 32 [ 716.775729][ T3271] usb 12-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 716.776595][ T3271] usb 12-1: config 0 has an invalid interface number: 196 but max is 0 [ 716.776613][ T3271] usb 12-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 716.776622][ T3271] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.776632][ T3271] usb 12-1: config 0 has no interface number 0 [ 716.776649][ T3271] usb 12-1: config 0 interface 196 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 716.776663][ T3271] usb 12-1: config 0 interface 196 has no altsetting 0 [ 716.778413][ T3271] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.778425][ T3271] usb 12-1: Product: syz [ 716.778433][ T3271] usb 12-1: Manufacturer: syz [ 716.778440][ T3271] usb 12-1: SerialNumber: syz [ 716.779936][ T3271] usb 12-1: config 0 descriptor?? [ 717.004040][T17697] FAULT_INJECTION: forcing a failure. [ 717.004040][T17697] name failslab, interval 1, probability 0, space 0, times 0 [ 717.004071][T17697] CPU: 0 UID: 0 PID: 17697 Comm: syz.7.3292 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.004109][T17697] Tainted: [L]=SOFTLOCKUP [ 717.004116][T17697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 717.004127][T17697] Call Trace: [ 717.004133][T17697] [ 717.004141][T17697] dump_stack_lvl+0x100/0x190 [ 717.004165][T17697] should_fail_ex.cold+0x5/0xa [ 717.004188][T17697] should_failslab+0xc2/0x120 [ 717.004211][T17697] kmem_cache_alloc_noprof+0x92/0x6a0 [ 717.004233][T17697] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 717.004258][T17697] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 717.004281][T17697] idr_get_free+0x52e/0xa00 [ 717.004314][T17697] idr_alloc_u32+0x1ac/0x320 [ 717.004341][T17697] ? __pfx_idr_alloc_u32+0x10/0x10 [ 717.004364][T17697] ? __pfx___debug_object_init+0x10/0x10 [ 717.004392][T17697] idr_alloc+0xc0/0x130 [ 717.004415][T17697] ? __pfx_idr_alloc+0x10/0x10 [ 717.004439][T17697] ? lockdep_init_map_type+0x5c/0x250 [ 717.004465][T17697] loop_add+0x1fe/0xb60 [ 717.004483][T17697] ? __pfx_loop_add+0x10/0x10 [ 717.004515][T17697] ? __fget_files+0x34/0x3d0 [ 717.004540][T17697] ? find_held_lock+0x2b/0x80 [ 717.004555][T17697] ? __fget_files+0x215/0x3d0 [ 717.004568][T17697] loop_control_ioctl+0xae/0x620 [ 717.004582][T17697] ? __pfx_loop_control_ioctl+0x10/0x10 [ 717.004598][T17697] ? __pfx_loop_control_ioctl+0x10/0x10 [ 717.004611][T17697] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 717.004631][T17697] __do_fast_syscall_32+0x13a/0x8b0 [ 717.004648][T17697] ? lockdep_hardirqs_on+0x7d/0x110 [ 717.004665][T17697] do_fast_syscall_32+0x32/0x70 [ 717.004683][T17697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 717.004696][T17697] RIP: 0023:0xf7fe2fec [ 717.004710][T17697] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 717.004715][T17697] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 717.004727][T17697] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000004c80 [ 717.004734][T17697] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.004740][T17697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 717.004747][T17697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.004753][T17697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 717.004767][T17697] [ 717.263877][ T3271] usb 12-1: USB disconnect, device number 2 [ 717.420232][T17710] CIFS: VFS: cifs_mount failed w/return code = -112 [ 717.567448][T17724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3302'. [ 718.787667][ T5886] usb 46-1: device descriptor read/8, error -110 [ 718.930652][T17730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3303'. [ 719.010289][ T5834] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 719.206072][ T5886] usb usb46-port1: attempt power cycle [ 719.384049][ T3271] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 719.489510][ T5834] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 719.511594][ T5834] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 719.511624][ T5834] usb 11-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 719.511640][ T5834] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 719.511663][ T5834] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 719.518007][ T5834] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 719.518022][ T5834] usb 11-1: Product: syz [ 719.518030][ T5834] usb 11-1: Manufacturer: syz [ 719.520453][ T5834] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 719.536360][ T3271] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 719.542232][ T3271] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 719.542249][ T3271] usb 8-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 719.542260][ T3271] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 719.542279][ T3271] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 719.547300][ T3271] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 719.547316][ T3271] usb 8-1: Product: syz [ 719.547325][ T3271] usb 8-1: Manufacturer: syz [ 719.550214][ T3271] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 719.596892][T17741] input: syz0 as /devices/virtual/input/input47 [ 719.784628][ T5886] usb usb46-port1: unable to enumerate USB device [ 719.911099][T17749] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3309'. [ 719.965022][ T5746] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 720.593142][T17752] FAULT_INJECTION: forcing a failure. [ 720.593142][T17752] name failslab, interval 1, probability 0, space 0, times 0 [ 720.593166][T17752] CPU: 0 UID: 0 PID: 17752 Comm: syz.3.3311 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.593182][T17752] Tainted: [L]=SOFTLOCKUP [ 720.593186][T17752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 720.593193][T17752] Call Trace: [ 720.593198][T17752] [ 720.593203][T17752] dump_stack_lvl+0x100/0x190 [ 720.593222][T17752] should_fail_ex.cold+0x5/0xa [ 720.593236][T17752] should_failslab+0xc2/0x120 [ 720.593252][T17752] __kmalloc_cache_noprof+0x91/0x6d0 [ 720.593270][T17752] ? assoc_array_insert+0x262/0x32c0 [ 720.593289][T17752] assoc_array_insert+0x262/0x32c0 [ 720.593304][T17752] ? __key_instantiate_and_link+0x139/0x500 [ 720.593326][T17752] ? __pfx_assoc_array_insert+0x10/0x10 [ 720.593340][T17752] ? __pfx___might_resched+0x10/0x10 [ 720.593354][T17752] ? keyring_free_preparse+0x9/0x10 [ 720.593374][T17752] ? down_write+0x146/0x1f0 [ 720.593388][T17752] __key_link_begin+0xf5/0x260 [ 720.593401][T17752] key_link+0x103/0x390 [ 720.593414][T17752] ? __pfx_key_link+0x10/0x10 [ 720.593427][T17752] ? keyring_alloc+0x8e/0xc0 [ 720.593439][T17752] call_sbin_request_key+0x3dd/0xd90 [ 720.593458][T17752] ? __pfx_call_sbin_request_key+0x10/0x10 [ 720.593473][T17752] ? key_instantiate_and_link+0x39d/0x4b0 [ 720.593490][T17752] ? key_alloc+0xbb4/0x1310 [ 720.593506][T17752] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 720.593532][T17752] ? request_key_auth_new+0x6b9/0xa00 [ 720.593550][T17752] ? __pfx_request_key_auth_new+0x10/0x10 [ 720.593571][T17752] ? __pfx_call_sbin_request_key+0x10/0x10 [ 720.593588][T17752] request_key_and_link+0x1115/0x1330 [ 720.593606][T17752] ? __pfx_request_key_and_link+0x10/0x10 [ 720.593621][T17752] ? __pfx___might_resched+0x10/0x10 [ 720.593638][T17752] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 720.593656][T17752] ? __pfx_keyring_search_iterator+0x10/0x10 [ 720.593669][T17752] ? _copy_from_user+0x59/0xd0 [ 720.593685][T17752] __do_sys_request_key+0x2a2/0x3c0 [ 720.593700][T17752] ? __pfx___do_sys_request_key+0x10/0x10 [ 720.593718][T17752] __do_fast_syscall_32+0x13a/0x8b0 [ 720.593737][T17752] do_fast_syscall_32+0x32/0x70 [ 720.593754][T17752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 720.593767][T17752] RIP: 0023:0xf700efec [ 720.593780][T17752] Code: Unable to access opcode bytes at 0xf700efc2. [ 720.593785][T17752] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 000000000000011f [ 720.593797][T17752] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080001ffb [ 720.593803][T17752] RDX: 0000000080001fee RSI: 00000000fffffffe RDI: 0000000000000000 [ 720.593810][T17752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 720.593816][T17752] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 720.593823][T17752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 720.593837][T17752] [ 720.881924][T17754] CIFS: Attempting to mount //127.0.0.1/share [ 720.882298][T17754] CIFS: VFS: Error connecting to socket. Aborting operation. [ 720.882316][T17754] CIFS: VFS: cifs_mount failed w/return code = -101 [ 720.949710][T17754] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3310'. [ 721.291299][T17763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.291557][T17763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.311009][T17763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.311214][T17763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.312326][T17758] gre0: Caught tx_queue_len zero misconfig [ 721.323848][T17763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.324180][T17763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.341042][T17763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.341243][T17763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.360057][T17763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.366848][T17763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.541135][ T62] usb 8-1: USB disconnect, device number 85 [ 721.663940][ T3271] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 721.794028][ T3271] usb 12-1: device descriptor read/64, error -71 [ 722.037218][ T3271] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 722.175210][ T3271] usb 12-1: device descriptor read/64, error -71 [ 722.284095][ T3271] usb usb12-port1: attempt power cycle [ 722.606657][ T5602] usb 11-1: USB disconnect, device number 16 [ 722.617461][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 722.617473][ T43] audit: type=1326 audit(1790602588.964:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.3.3318" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x0 [ 722.626770][ T3271] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 722.644538][ T3271] usb 12-1: device descriptor read/8, error -71 [ 722.720415][ T43] audit: type=1326 audit(1790602589.074:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.3.3318" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efec code=0x0 [ 722.884305][ T3271] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 722.904319][ T3271] usb 12-1: device descriptor read/8, error -71 [ 722.984199][ T5602] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 723.002337][T17787] jffs2: notice: (17787) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 723.014211][ T3271] usb usb12-port1: unable to enumerate USB device [ 723.017750][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3320'. [ 723.020371][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3320'. [ 723.076085][T17794] CIFS: Attempting to mount //127.0.0.1/share [ 723.133741][T17796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3321'. [ 723.156646][ T5602] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 723.157660][ T5602] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 723.157680][ T5602] usb 11-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 723.157695][ T5602] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 723.157726][ T5602] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 723.159415][ T5602] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 723.159434][ T5602] usb 11-1: Product: syz [ 723.159445][ T5602] usb 11-1: Manufacturer: syz [ 723.165160][ T5602] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 723.620857][T17803] netlink: 'syz.3.3324': attribute type 2 has an invalid length. [ 723.620878][T17803] netlink: 'syz.3.3324': attribute type 7 has an invalid length. [ 723.627527][T17803] Uý: entered promiscuous mode [ 723.818439][ T3271] usb 11-1: USB disconnect, device number 17 [ 723.912900][T17794] CIFS: VFS: cifs_mount failed w/return code = -512 [ 724.143201][T17812] CIFS: Attempting to mount //127.0.0.1/share [ 724.143555][T17812] CIFS: VFS: Error connecting to socket. Aborting operation. [ 724.143574][T17812] CIFS: VFS: cifs_mount failed w/return code = -101 [ 724.143926][ T5834] usb 8-1: new low-speed USB device number 86 using dummy_hcd [ 724.295795][ T5834] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 724.299131][ T5834] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.299200][ T5834] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 724.299460][ T5834] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.299637][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.333558][ T5834] hub 8-1:1.0: bad descriptor, ignoring hub [ 724.333659][ T5834] hub 8-1:1.0: probe with driver hub failed with error -5 [ 724.340349][ T5834] cdc_wdm 8-1:1.0: skipping garbage [ 724.340384][ T5834] cdc_wdm 8-1:1.0: skipping garbage [ 724.354569][ T5834] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 724.434181][ T3271] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 724.583823][ T3271] usb 11-1: Using ep0 maxpacket: 32 [ 724.584412][ T3271] usb 11-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 724.585307][ T3271] usb 11-1: config 0 has an invalid interface number: 196 but max is 0 [ 724.585320][ T3271] usb 11-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 724.585330][ T3271] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.585339][ T3271] usb 11-1: config 0 has no interface number 0 [ 724.585364][ T3271] usb 11-1: config 0 interface 196 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 724.585378][ T3271] usb 11-1: config 0 interface 196 has no altsetting 0 [ 724.587098][ T3271] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.587111][ T3271] usb 11-1: Product: syz [ 724.587118][ T3271] usb 11-1: Manufacturer: syz [ 724.587125][ T3271] usb 11-1: SerialNumber: syz [ 724.588288][ T3271] usb 11-1: config 0 descriptor?? [ 724.683263][T17816] FAULT_INJECTION: forcing a failure. [ 724.683263][T17816] name failslab, interval 1, probability 0, space 0, times 0 [ 724.683286][T17816] CPU: 0 UID: 0 PID: 17816 Comm: syz.4.3328 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.683305][T17816] Tainted: [L]=SOFTLOCKUP [ 724.683309][T17816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 724.683316][T17816] Call Trace: [ 724.683320][T17816] [ 724.683325][T17816] dump_stack_lvl+0x100/0x190 [ 724.683360][T17816] should_fail_ex.cold+0x5/0xa [ 724.683376][T17816] should_failslab+0xc2/0x120 [ 724.683392][T17816] kmem_cache_alloc_noprof+0x92/0x6a0 [ 724.683404][T17816] ? dev_queue_xmit_nit+0x38/0xa60 [ 724.683420][T17816] ? skb_clone+0x190/0x400 [ 724.683437][T17816] skb_clone+0x190/0x400 [ 724.683452][T17816] dev_queue_xmit_nit+0x255/0xa60 [ 724.683470][T17816] dev_hard_start_xmit+0x2f5/0x760 [ 724.683485][T17816] __dev_queue_xmit+0x1bbf/0x4970 [ 724.683502][T17816] ? __pfx___dev_queue_xmit+0x10/0x10 [ 724.683521][T17816] ? rcu_is_watching+0x13/0xc0 [ 724.683533][T17816] ? trace_kmem_cache_alloc+0xdd/0x100 [ 724.683548][T17816] ? __asan_memcpy+0x3c/0x60 [ 724.683559][T17816] ? __asan_memcpy+0x3c/0x60 [ 724.683570][T17816] ? __skb_clone+0x570/0x760 [ 724.683585][T17816] netlink_deliver_tap+0xa4d/0xcc0 [ 724.683615][T17816] netlink_unicast+0x6a5/0x850 [ 724.683630][T17816] ? __pfx_netlink_unicast+0x10/0x10 [ 724.683647][T17816] netlink_ack+0x655/0xb80 [ 724.683664][T17816] netlink_rcv_skb+0x333/0x420 [ 724.683677][T17816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 724.683694][T17816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 724.683712][T17816] ? netlink_deliver_tap+0x1ae/0xcc0 [ 724.683726][T17816] netlink_unicast+0x585/0x850 [ 724.683741][T17816] ? __pfx_netlink_unicast+0x10/0x10 [ 724.683758][T17816] netlink_sendmsg+0x8b0/0xda0 [ 724.683773][T17816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 724.683787][T17816] ? apparmor_socket_sendmsg+0x165/0x280 [ 724.683804][T17816] ____sys_sendmsg+0xa4d/0xbe0 [ 724.683814][T17816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 724.683828][T17816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 724.683842][T17816] ? _kstrtoull+0x144/0x200 [ 724.683857][T17816] ? __pfx__kstrtoull+0x10/0x10 [ 724.683874][T17816] ___sys_sendmsg+0x190/0x1e0 [ 724.683887][T17816] ? __pfx____sys_sendmsg+0x10/0x10 [ 724.683898][T17816] ? __lock_acquire+0x5c0/0x1f40 [ 724.683917][T17816] ? __fget_files+0x34/0x3d0 [ 724.683939][T17816] __sys_sendmmsg+0x309/0x440 [ 724.683955][T17816] ? __pfx___sys_sendmmsg+0x10/0x10 [ 724.683970][T17816] ? find_held_lock+0x2b/0x80 [ 724.683985][T17816] ? __mutex_unlock_slowpath+0x35d/0x930 [ 724.684009][T17816] ? fput+0x7c/0x100 [ 724.684023][T17816] ? ksys_write+0x1ac/0x250 [ 724.684036][T17816] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 724.684047][T17816] ? lockdep_hardirqs_on+0x7d/0x110 [ 724.684063][T17816] __do_fast_syscall_32+0x13a/0x8b0 [ 724.684079][T17816] ? lockdep_hardirqs_on+0x7d/0x110 [ 724.684096][T17816] do_fast_syscall_32+0x32/0x70 [ 724.684113][T17816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 724.684127][T17816] RIP: 0023:0xf705efec [ 724.684145][T17816] Code: Unable to access opcode bytes at 0xf705efc2. [ 724.684150][T17816] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 724.684161][T17816] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 724.684168][T17816] RDX: 00000000000001f2 RSI: 000000000000fff0 RDI: 0000000000000000 [ 724.684175][T17816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 724.684182][T17816] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 724.684188][T17816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 724.684202][T17816] [ 724.696084][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3324'. [ 725.160163][T17819] FAULT_INJECTION: forcing a failure. [ 725.160163][T17819] name failslab, interval 1, probability 0, space 0, times 0 [ 725.160936][T17819] CPU: 3 UID: 0 PID: 17819 Comm: syz.6.3327 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.160965][T17819] Tainted: [L]=SOFTLOCKUP [ 725.160969][T17819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 725.160976][T17819] Call Trace: [ 725.160981][T17819] [ 725.160985][T17819] dump_stack_lvl+0x100/0x190 [ 725.161004][T17819] should_fail_ex.cold+0x5/0xa [ 725.161032][T17819] should_failslab+0xc2/0x120 [ 725.161047][T17819] kmem_cache_alloc_noprof+0x92/0x6a0 [ 725.161061][T17819] ? get_random_u64+0x434/0x7c0 [ 725.161073][T17819] ? alloc_task_exec_state+0x23/0x300 [ 725.161088][T17819] alloc_task_exec_state+0x23/0x300 [ 725.161101][T17819] task_exec_state_copy+0x70/0x150 [ 725.161114][T17819] copy_process+0xf34/0x8370 [ 725.161130][T17819] ? do_raw_spin_lock+0x128/0x260 [ 725.161150][T17819] ? __lock_acquire+0x5c0/0x1f40 [ 725.161170][T17819] ? __pfx_copy_process+0x10/0x10 [ 725.161187][T17819] ? trace_hrtimer_start+0x77/0x220 [ 725.161201][T17819] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 725.161218][T17819] kernel_clone+0x176/0x9d0 [ 725.161236][T17819] ? __pfx_kernel_clone+0x10/0x10 [ 725.161253][T17819] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 725.161274][T17819] ? trace_sched_exit_tp+0x120/0x160 [ 725.161285][T17819] ? __schedule+0x126b/0x6920 [ 725.161299][T17819] ? lock_acquire+0x1d1/0x380 [ 725.161316][T17819] __do_compat_sys_ia32_clone+0xd4/0x120 [ 725.161333][T17819] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 725.161356][T17819] ? xfd_validate_state+0x129/0x190 [ 725.161377][T17819] __do_fast_syscall_32+0x13a/0x8b0 [ 725.161395][T17819] ? lockdep_hardirqs_on+0x7d/0x110 [ 725.161423][T17819] do_fast_syscall_32+0x32/0x70 [ 725.161441][T17819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 725.161455][T17819] RIP: 0023:0xf6fcefec [ 725.161469][T17819] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 725.161474][T17819] RSP: 002b:00000000f539c4bc EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 725.161485][T17819] RAX: ffffffffffffffda RBX: 0000000020b84211 RCX: 0000000000000000 [ 725.161492][T17819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 725.161499][T17819] RBP: 00000000f73c5018 R08: 0000000000000000 R09: 0000000000000000 [ 725.161505][T17819] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 725.161512][T17819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 725.161525][T17819] [ 725.894131][ T3271] usb 11-1: USB disconnect, device number 18 [ 726.123210][T17830] comedi comedi3: comedi_config --init_data is deprecated [ 726.193997][ T5809] usb 8-1: USB disconnect, device number 86 [ 726.204495][T17833] bond1: entered allmulticast mode [ 726.204716][T17833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 726.396154][ T3271] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 726.594458][ T3271] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 726.595393][ T3271] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 726.595412][ T3271] usb 9-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 726.595427][ T3271] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 726.595457][ T3271] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.596698][ T3271] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 726.596711][ T3271] usb 9-1: Product: syz [ 726.596718][ T3271] usb 9-1: Manufacturer: syz [ 726.599933][ T3271] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 726.657361][T17838] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 726.657380][T17838] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 726.657434][T17838] vhci_hcd vhci_hcd.0: Device attached [ 726.941715][T17844] CIFS: Attempting to mount //127.0.0.1/share [ 726.943661][ T3271] usb 50-1: SetAddress Request (2) to port 0 [ 726.943694][ T3271] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 726.999580][T17846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'. [ 726.999654][T17846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.014224][T17849] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3335'. [ 727.035748][T17846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.439897][T17839] vhci_hcd: connection reset by peer [ 727.464348][ T13] vhci_hcd vhci_hcd.6: stop threads [ 727.464364][ T13] vhci_hcd vhci_hcd.6: release socket [ 727.464542][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 727.764326][T17844] CIFS: VFS: cifs_mount failed w/return code = -512 [ 727.883036][T17862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.886211][T17862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.210721][ T5886] usb 9-1: USB disconnect, device number 78 [ 728.523556][T14292] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 728.673664][T14292] usb 11-1: Using ep0 maxpacket: 32 [ 728.674142][T14292] usb 11-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 728.674956][T14292] usb 11-1: config 0 has an invalid interface number: 196 but max is 0 [ 728.674980][T14292] usb 11-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 728.674989][T14292] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.674998][T14292] usb 11-1: config 0 has no interface number 0 [ 728.675015][T14292] usb 11-1: config 0 interface 196 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 728.675029][T14292] usb 11-1: config 0 interface 196 has no altsetting 0 [ 728.679055][T14292] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.679068][T14292] usb 11-1: Product: syz [ 728.679075][T14292] usb 11-1: Manufacturer: syz [ 728.679083][T14292] usb 11-1: SerialNumber: syz [ 728.680340][T14292] usb 11-1: config 0 descriptor?? [ 728.945796][T17871] FAULT_INJECTION: forcing a failure. [ 728.945796][T17871] name failslab, interval 1, probability 0, space 0, times 0 [ 728.945816][T17871] CPU: 0 UID: 0 PID: 17871 Comm: syz.6.3342 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.945832][T17871] Tainted: [L]=SOFTLOCKUP [ 728.945837][T17871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 728.945843][T17871] Call Trace: [ 728.945847][T17871] [ 728.945852][T17871] dump_stack_lvl+0x100/0x190 [ 728.945887][T17871] should_fail_ex.cold+0x5/0xa [ 728.945904][T17871] should_failslab+0xc2/0x120 [ 728.945932][T17871] kmem_cache_alloc_noprof+0x92/0x6a0 [ 728.945945][T17871] ? get_random_u64+0x434/0x7c0 [ 728.945957][T17871] ? alloc_task_exec_state+0x23/0x300 [ 728.945972][T17871] alloc_task_exec_state+0x23/0x300 [ 728.945984][T17871] task_exec_state_copy+0x70/0x150 [ 728.945997][T17871] copy_process+0xf34/0x8370 [ 728.946015][T17871] ? __lock_acquire+0x5c0/0x1f40 [ 728.946048][T17871] ? __pfx_copy_process+0x10/0x10 [ 728.946066][T17871] ? get_pid_task+0x2a/0x250 [ 728.946078][T17871] ? get_pid_task+0xfc/0x250 [ 728.946089][T17871] ? get_pid_task+0xfc/0x250 [ 728.946103][T17871] kernel_clone+0x176/0x9d0 [ 728.946120][T17871] ? proc_fail_nth_write+0x9f/0x220 [ 728.946132][T17871] ? __pfx_kernel_clone+0x10/0x10 [ 728.946152][T17871] ? find_held_lock+0x2b/0x80 [ 728.946164][T17871] ? ksys_write+0x190/0x250 [ 728.946175][T17871] ? ksys_write+0x190/0x250 [ 728.946186][T17871] ? lock_acquire+0x1d1/0x380 [ 728.946202][T17871] __do_compat_sys_ia32_clone+0xd4/0x120 [ 728.946219][T17871] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 728.946241][T17871] ? fput+0x7c/0x100 [ 728.946255][T17871] ? ksys_write+0x1ac/0x250 [ 728.946265][T17871] ? __pfx_ksys_write+0x10/0x10 [ 728.946279][T17871] __do_fast_syscall_32+0x13a/0x8b0 [ 728.946297][T17871] ? lockdep_hardirqs_on+0x7d/0x110 [ 728.946314][T17871] do_fast_syscall_32+0x32/0x70 [ 728.946331][T17871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 728.946345][T17871] RIP: 0023:0xf6fcefec [ 728.946357][T17871] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 728.946363][T17871] RSP: 002b:00000000f53bd4bc EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 728.946374][T17871] RAX: ffffffffffffffda RBX: 0000000008100411 RCX: 0000000000000000 [ 728.946381][T17871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 728.946388][T17871] RBP: 00000000f73c4f80 R08: 0000000000000000 R09: 0000000000000000 [ 728.946394][T17871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.946401][T17871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 728.946414][T17871] [ 728.951780][T14292] usb 11-1: USB disconnect, device number 19 [ 729.193641][ T62] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 729.343675][ T62] usb 9-1: Using ep0 maxpacket: 32 [ 729.345339][ T62] usb 9-1: unable to get BOS descriptor or descriptor too short [ 729.345363][ T62] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 729.348844][ T62] usb 9-1: string descriptor 0 read error: -22 [ 729.348931][ T62] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.352740][ T62] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 729.352781][ T62] dw2102: su3000_power_ctrl: 1, initialized 0 [ 729.352796][ T62] dvb-usb: bulk message failed: -22 (2/0) [ 729.359019][ T62] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 729.359444][ T62] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 729.359467][ T62] usb 9-1: media controller created [ 729.359480][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 729.359487][ T62] dw2102: i2c transfer failed. [ 729.359494][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 729.359500][ T62] dw2102: i2c transfer failed. [ 729.359506][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 729.359512][ T62] dw2102: i2c transfer failed. [ 729.359518][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 729.359533][ T62] dw2102: i2c transfer failed. [ 729.359539][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 729.359545][ T62] dw2102: i2c transfer failed. [ 729.359551][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 729.359557][ T62] dw2102: i2c transfer failed. [ 729.359561][ T62] dvb-usb: MAC address: 02:02:02:02:02:02 [ 729.364314][ T62] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 729.369381][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 729.369392][ T62] dw2102: command 0x0e transfer failed. [ 729.369397][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 729.369403][ T62] dw2102: command 0x0e transfer failed. [ 729.673535][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 729.673555][ T62] dw2102: command 0x0e transfer failed. [ 729.673560][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 729.673567][ T62] dw2102: command 0x0e transfer failed. [ 729.673571][ T62] dvb-usb: bulk message failed: -22 (1/0) [ 729.673577][ T62] dw2102: command 0x51 transfer failed. [ 729.675180][T17890] dvb-usb: bulk message failed: -22 (4/0) [ 729.675194][T17890] dw2102: i2c transfer failed. [ 729.720914][ T62] DVB: Unable to find symbol ds3000_attach() [ 729.720927][ T62] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 729.753755][ T1712] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 729.813662][ T62] rc_core: IR keymap rc-su3000 not found [ 729.813674][ T62] Registered IR keymap rc-empty [ 729.814199][ T62] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 729.815040][ T62] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input48 [ 729.818412][ T62] dvb-usb: schedule remote query interval to 150 msecs. [ 729.818431][ T62] dw2102: su3000_power_ctrl: 0, initialized 1 [ 729.818438][ T62] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 729.914037][ T1712] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 729.914880][ T1712] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 729.914893][ T1712] usb 11-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 729.914903][ T1712] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 729.914922][ T1712] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 729.916671][ T1712] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 729.916684][ T1712] usb 11-1: Product: syz [ 729.916691][ T1712] usb 11-1: Manufacturer: syz [ 729.920544][ T1712] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 729.975210][ T1712] dvb-usb: bulk message failed: -22 (1/0) [ 729.975225][ T1712] dw2102: i2c transfer failed. [ 730.143754][ T1712] dvb-usb: bulk message failed: -22 (1/0) [ 730.143768][ T1712] dw2102: i2c transfer failed. [ 730.320254][ T1712] dvb-usb: bulk message failed: -22 (1/0) [ 730.320271][ T1712] dw2102: i2c transfer failed. [ 730.475333][ T1712] dvb-usb: bulk message failed: -22 (1/0) [ 730.475353][ T1712] dw2102: i2c transfer failed. [ 730.635526][ T62] dvb-usb: bulk message failed: -22 (1/0) [ 730.635547][ T62] dw2102: i2c transfer failed. [ 730.791740][T17900] CIFS: Attempting to mount //127.0.0.1/share [ 730.792101][T17900] CIFS: VFS: Error connecting to socket. Aborting operation. [ 730.792120][T17900] CIFS: VFS: cifs_mount failed w/return code = -101 [ 730.793544][ T1712] dvb-usb: bulk message failed: -22 (1/0) [ 730.793556][ T1712] dw2102: i2c transfer failed. [ 730.807344][T17900] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3349'. [ 730.957787][ T62] dvb-usb: bulk message failed: -22 (1/0) [ 730.957801][ T62] dw2102: i2c transfer failed. [ 730.961031][T17910] Invalid ELF header type: 3 != 1 [ 730.980780][T17905] syzkaller0: entered promiscuous mode [ 730.980796][T17905] syzkaller0: entered allmulticast mode [ 731.020157][T14292] hid-generic 0009:046D:C082.0009: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 731.123396][ T1712] dvb-usb: bulk message failed: -22 (1/0) [ 731.123411][ T1712] dw2102: i2c transfer failed. [ 731.283480][ T1712] dvb-usb: bulk message failed: -22 (1/0) [ 731.283495][ T1712] dw2102: i2c transfer failed. [ 731.443388][ T1712] dvb-usb: bulk message failed: -22 (1/0) [ 731.443403][ T1712] dw2102: i2c transfer failed. [ 731.613416][ T1712] dvb-usb: bulk message failed: -22 (1/0) [ 731.613432][ T1712] dw2102: i2c transfer failed. [ 731.773389][ T62] dvb-usb: bulk message failed: -22 (1/0) [ 731.773404][ T62] dw2102: i2c transfer failed. [ 731.943427][ T62] dvb-usb: bulk message failed: -22 (1/0) [ 731.943442][ T62] dw2102: i2c transfer failed. [ 731.991528][ T3271] usb 50-1: device descriptor read/8, error -110 [ 732.075138][ T5809] usb 9-1: USB disconnect, device number 79 [ 732.142909][ T5886] usb 11-1: USB disconnect, device number 20 [ 732.182632][ T5809] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 732.198953][T17919] futex_atomic_op_inuser: 24 callbacks suppressed [ 732.198966][T17919] futex_wake_op: syz.6.3354 tries to shift op by 144; fix this program [ 732.416488][ T3271] usb usb50-port1: attempt power cycle [ 732.617553][T17935] netlink: 'syz.3.3358': attribute type 39 has an invalid length. [ 732.754584][T17942] CIFS: Attempting to mount //127.0.0.1/share [ 732.754969][T17942] CIFS: VFS: Error connecting to socket. Aborting operation. [ 732.756352][T17942] CIFS: VFS: cifs_mount failed w/return code = -101 [ 732.777373][T17942] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3360'. [ 732.993769][ T3271] usb usb50-port1: unable to enumerate USB device [ 733.329439][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3362'. [ 733.329671][T17950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3362'. [ 733.342237][T17952] netlink: 'syz.3.3362': attribute type 21 has an invalid length. [ 733.342251][T17952] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3362'. [ 733.342291][T17952] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3362'. [ 733.478147][T17954] FAULT_INJECTION: forcing a failure. [ 733.478147][T17954] name failslab, interval 1, probability 0, space 0, times 0 [ 733.478169][T17954] CPU: 0 UID: 0 PID: 17954 Comm: syz.3.3363 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.478185][T17954] Tainted: [L]=SOFTLOCKUP [ 733.478190][T17954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 733.478196][T17954] Call Trace: [ 733.478201][T17954] [ 733.478206][T17954] dump_stack_lvl+0x100/0x190 [ 733.478225][T17954] should_fail_ex.cold+0x5/0xa [ 733.478240][T17954] should_failslab+0xc2/0x120 [ 733.478255][T17954] __kmalloc_noprof+0xfc/0x840 [ 733.478268][T17954] ? rcu_is_watching+0x13/0xc0 [ 733.478279][T17954] ? tomoyo_realpath_from_path+0xb6/0x690 [ 733.478294][T17954] tomoyo_realpath_from_path+0xb6/0x690 [ 733.478309][T17954] tomoyo_path_number_perm+0x23c/0x580 [ 733.478324][T17954] ? tomoyo_path_number_perm+0x22e/0x580 [ 733.478341][T17954] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 733.478358][T17954] ? get_pid_task+0x106/0x250 [ 733.478373][T17954] ? __lock_acquire+0x5c0/0x1f40 [ 733.478395][T17954] ? __fget_files+0x34/0x3d0 [ 733.478421][T17954] ? find_held_lock+0x2b/0x80 [ 733.478434][T17954] ? __fget_files+0x215/0x3d0 [ 733.478445][T17954] ? hook_file_ioctl_common+0x140/0x440 [ 733.478461][T17954] ? __fget_files+0x215/0x3d0 [ 733.478475][T17954] ? __fget_files+0x21f/0x3d0 [ 733.478490][T17954] security_file_ioctl_compat+0xd3/0x230 [ 733.478507][T17954] __ia32_compat_sys_ioctl+0xc2/0x360 [ 733.478531][T17954] __do_fast_syscall_32+0x13a/0x8b0 [ 733.478548][T17954] ? lockdep_hardirqs_on+0x7d/0x110 [ 733.478565][T17954] do_fast_syscall_32+0x32/0x70 [ 733.478583][T17954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 733.478597][T17954] RIP: 0023:0xf700efec [ 733.478610][T17954] Code: Unable to access opcode bytes at 0xf700efc2. [ 733.478615][T17954] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 733.478627][T17954] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008048ae66 [ 733.478634][T17954] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 733.478640][T17954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 733.478647][T17954] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 733.478653][T17954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 733.478667][T17954] [ 733.479860][T17954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 734.336188][T17970] FAULT_INJECTION: forcing a failure. [ 734.336188][T17970] name failslab, interval 1, probability 0, space 0, times 0 [ 734.336210][T17970] CPU: 0 UID: 0 PID: 17970 Comm: syz.7.3367 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.336226][T17970] Tainted: [L]=SOFTLOCKUP [ 734.336230][T17970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 734.336237][T17970] Call Trace: [ 734.336242][T17970] [ 734.336247][T17970] dump_stack_lvl+0x100/0x190 [ 734.336266][T17970] should_fail_ex.cold+0x5/0xa [ 734.336282][T17970] should_failslab+0xc2/0x120 [ 734.336298][T17970] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 734.336313][T17970] ? __d_alloc+0x35/0xa50 [ 734.336330][T17970] __d_alloc+0x35/0xa50 [ 734.336345][T17970] d_alloc_pseudo+0x1c/0xc0 [ 734.336362][T17970] alloc_file_pseudo+0x118/0x290 [ 734.336378][T17970] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 734.336399][T17970] ? mas_preallocate+0x528/0xee0 [ 734.336420][T17970] __shmem_file_setup+0x205/0x460 [ 734.336436][T17970] ? __pfx___shmem_file_setup+0x10/0x10 [ 734.336453][T17970] ? vm_area_alloc+0x1f/0x160 [ 734.336470][T17970] shmem_zero_setup+0x96/0x1b0 [ 734.336489][T17970] __mmap_region+0x2692/0x32c0 [ 734.336512][T17970] ? __pfx___mmap_region+0x10/0x10 [ 734.336539][T17970] ? find_held_lock+0x2b/0x80 [ 734.336550][T17970] ? process_measurement+0x4c8/0x2350 [ 734.336568][T17970] ? do_raw_spin_lock+0x128/0x260 [ 734.336590][T17970] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 734.336613][T17970] ? find_held_lock+0x2b/0x80 [ 734.336645][T17970] mmap_region+0x3db/0x6d0 [ 734.336656][T17970] ? rcu_is_watching+0x13/0xc0 [ 734.336668][T17970] ? __pfx_mmap_region+0x10/0x10 [ 734.336681][T17970] ? cap_mmap_addr+0x4b/0x120 [ 734.336696][T17970] ? bpf_lsm_mmap_addr+0x9/0x30 [ 734.336712][T17970] ? security_mmap_addr+0x71/0x1e0 [ 734.336729][T17970] ? __get_unmapped_area+0x255/0x3e0 [ 734.336744][T17970] do_mmap+0x12c7/0x1c30 [ 734.336761][T17970] ? lock_acquire+0x1d1/0x380 [ 734.336775][T17970] ? __pfx_do_mmap+0x10/0x10 [ 734.336789][T17970] ? futex_wait+0x11e/0x370 [ 734.336805][T17970] ? __pfx_down_write_killable+0x10/0x10 [ 734.336819][T17970] vm_mmap_pgoff+0x28d/0x470 [ 734.336833][T17970] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 734.336846][T17970] ? __pfx_do_futex+0x10/0x10 [ 734.336862][T17970] ksys_mmap_pgoff+0xe4/0x610 [ 734.336876][T17970] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 734.336893][T17970] __do_fast_syscall_32+0x13a/0x8b0 [ 734.336912][T17970] do_fast_syscall_32+0x32/0x70 [ 734.336930][T17970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 734.336944][T17970] RIP: 0023:0xf7fe2fec [ 734.336956][T17970] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 734.336962][T17970] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 734.336973][T17970] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000c00000 [ 734.336980][T17970] RDX: 0000000002000007 RSI: 000000000401d031 RDI: 00000000ffffffff [ 734.336987][T17970] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 734.336994][T17970] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 734.337000][T17970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 734.337014][T17970] [ 734.366625][T17970] FAULT_INJECTION: forcing a failure. [ 734.366625][T17970] name failslab, interval 1, probability 0, space 0, times 0 [ 734.366645][T17970] CPU: 0 UID: 0 PID: 17970 Comm: syz.7.3367 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.366661][T17970] Tainted: [L]=SOFTLOCKUP [ 734.366665][T17970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 734.366672][T17970] Call Trace: [ 734.366676][T17970] [ 734.366681][T17970] dump_stack_lvl+0x100/0x190 [ 734.366700][T17970] should_fail_ex.cold+0x5/0xa [ 734.366714][T17970] should_failslab+0xc2/0x120 [ 734.366730][T17970] __kmalloc_noprof+0xfc/0x840 [ 734.366743][T17970] ? rcu_is_watching+0x13/0xc0 [ 734.366755][T17970] ? tomoyo_realpath_from_path+0xb6/0x690 [ 734.366771][T17970] tomoyo_realpath_from_path+0xb6/0x690 [ 734.366785][T17970] tomoyo_path_number_perm+0x23c/0x580 [ 734.366800][T17970] ? tomoyo_path_number_perm+0x22e/0x580 [ 734.366816][T17970] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 734.366831][T17970] ? futex_wait+0x11e/0x370 [ 734.366849][T17970] ? __lock_acquire+0x5c0/0x1f40 [ 734.366870][T17970] ? __fget_files+0x34/0x3d0 [ 734.366882][T17970] ? find_held_lock+0x2b/0x80 [ 734.366893][T17970] ? __fget_files+0x215/0x3d0 [ 734.366904][T17970] ? hook_file_ioctl_common+0x140/0x440 [ 734.366920][T17970] ? __fget_files+0x215/0x3d0 [ 734.366934][T17970] ? __fget_files+0x21f/0x3d0 [ 734.366948][T17970] security_file_ioctl_compat+0xd3/0x230 [ 734.366965][T17970] __ia32_compat_sys_ioctl+0xc2/0x360 [ 734.366984][T17970] __do_fast_syscall_32+0x13a/0x8b0 [ 734.367002][T17970] ? lockdep_hardirqs_on+0x7d/0x110 [ 734.367018][T17970] do_fast_syscall_32+0x32/0x70 [ 734.367053][T17970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 734.367068][T17970] RIP: 0023:0xf7fe2fec [ 734.367082][T17970] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 734.367087][T17970] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 734.367100][T17970] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000004090ae82 [ 734.367108][T17970] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 734.367114][T17970] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 734.367121][T17970] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 734.367127][T17970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 734.367141][T17970] [ 734.369453][T17970] ERROR: Out of memory at tomoyo_realpath_from_path. [ 734.493374][T17974] CIFS: Attempting to mount //127.0.0.1/share [ 734.564709][T17976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3370'. [ 734.865227][ T5602] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 735.033778][ T5602] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 735.036742][ T5602] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 735.036758][ T5602] usb 12-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 735.036769][ T5602] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 735.036788][ T5602] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 735.038043][ T5602] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 735.038056][ T5602] usb 12-1: Product: syz [ 735.038063][ T5602] usb 12-1: Manufacturer: syz [ 735.042564][ T5602] cdc_wdm 12-1:1.0: probe with driver cdc_wdm failed with error -22 [ 735.253988][ T5746] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 735.323503][T17974] CIFS: VFS: cifs_mount failed w/return code = -112 [ 735.373319][ T3271] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 735.465042][T17986] FAULT_INJECTION: forcing a failure. [ 735.465042][T17986] name failslab, interval 1, probability 0, space 0, times 0 [ 735.465065][T17986] CPU: 0 UID: 0 PID: 17986 Comm: syz.4.3374 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.465082][T17986] Tainted: [L]=SOFTLOCKUP [ 735.465086][T17986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 735.465093][T17986] Call Trace: [ 735.465097][T17986] [ 735.465102][T17986] dump_stack_lvl+0x100/0x190 [ 735.465121][T17986] should_fail_ex.cold+0x5/0xa [ 735.465136][T17986] should_failslab+0xc2/0x120 [ 735.465165][T17986] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 735.465180][T17986] ? __alloc_skb+0x140/0x710 [ 735.465197][T17986] __alloc_skb+0x140/0x710 [ 735.465209][T17986] ? __alloc_skb+0x5b7/0x710 [ 735.465222][T17986] ? __pfx___alloc_skb+0x10/0x10 [ 735.465235][T17986] ? genl_rcv_msg+0x4be/0x800 [ 735.465254][T17986] netlink_ack+0x117/0xb80 [ 735.465267][T17986] ? __lock_acquire+0x5c0/0x1f40 [ 735.465286][T17986] netlink_rcv_skb+0x333/0x420 [ 735.465299][T17986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.465314][T17986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 735.465333][T17986] ? netlink_deliver_tap+0x1ae/0xcc0 [ 735.465348][T17986] genl_rcv+0x28/0x40 [ 735.465360][T17986] netlink_unicast+0x585/0x850 [ 735.465375][T17986] ? __pfx_netlink_unicast+0x10/0x10 [ 735.465388][T17986] ? aa_sk_perm+0x389/0xab0 [ 735.465409][T17986] netlink_sendmsg+0x8b0/0xda0 [ 735.465425][T17986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.465440][T17986] ? apparmor_socket_sendmsg+0x165/0x280 [ 735.465456][T17986] ____sys_sendmsg+0xa4d/0xbe0 [ 735.465466][T17986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.465481][T17986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.465498][T17986] ___sys_sendmsg+0x190/0x1e0 [ 735.465510][T17986] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.465529][T17986] ? find_held_lock+0x2b/0x80 [ 735.465550][T17986] __sys_sendmsg+0x160/0x210 [ 735.465565][T17986] ? __pfx___sys_sendmsg+0x10/0x10 [ 735.465584][T17986] ? __pfx_ksys_write+0x10/0x10 [ 735.465599][T17986] __do_fast_syscall_32+0x13a/0x8b0 [ 735.465616][T17986] ? lockdep_hardirqs_on+0x7d/0x110 [ 735.465633][T17986] do_fast_syscall_32+0x32/0x70 [ 735.465650][T17986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 735.465664][T17986] RIP: 0023:0xf705efec [ 735.465678][T17986] Code: Unable to access opcode bytes at 0xf705efc2. [ 735.465683][T17986] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 735.465694][T17986] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000bc0 [ 735.465701][T17986] RDX: 0000000004044802 RSI: 0000000000000000 RDI: 0000000000000000 [ 735.465708][T17986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 735.465714][T17986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.465721][T17986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 735.465735][T17986] [ 735.522786][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3375'. [ 735.524928][ T3271] usb 8-1: Using ep0 maxpacket: 8 [ 735.525402][ T3271] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 735.532203][ T3271] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 735.532222][ T3271] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 735.532235][ T3271] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 735.532248][ T3271] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.532270][ T3271] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.667819][T17990] FAULT_INJECTION: forcing a failure. [ 735.667819][T17990] name failslab, interval 1, probability 0, space 0, times 0 [ 735.667893][T17990] CPU: 0 UID: 0 PID: 17990 Comm: syz.4.3376 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.667911][T17990] Tainted: [L]=SOFTLOCKUP [ 735.667916][T17990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 735.667922][T17990] Call Trace: [ 735.667927][T17990] [ 735.667931][T17990] dump_stack_lvl+0x100/0x190 [ 735.667950][T17990] should_fail_ex.cold+0x5/0xa [ 735.667965][T17990] should_failslab+0xc2/0x120 [ 735.667980][T17990] __kmalloc_cache_noprof+0x91/0x6d0 [ 735.668009][T17990] ? x509_cert_parse+0xfc/0x910 [ 735.668027][T17990] x509_cert_parse+0xfc/0x910 [ 735.668041][T17990] x509_key_preparse+0x65/0x9c0 [ 735.668057][T17990] asymmetric_key_preparse+0xce/0x1d0 [ 735.668068][T17990] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 735.668079][T17990] __key_create_or_update+0x463/0xe30 [ 735.668100][T17990] ? __pfx___key_create_or_update+0x10/0x10 [ 735.668119][T17990] ? lookup_user_key+0x3f3/0x1300 [ 735.668141][T17990] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 735.668160][T17990] key_create_or_update+0x42/0x60 [ 735.668179][T17990] __do_sys_add_key+0x2e8/0x460 [ 735.668193][T17990] ? __pfx___do_sys_add_key+0x10/0x10 [ 735.668205][T17990] ? fput+0x7c/0x100 [ 735.668220][T17990] ? __pfx_ksys_write+0x10/0x10 [ 735.668235][T17990] __do_fast_syscall_32+0x13a/0x8b0 [ 735.668252][T17990] ? lockdep_hardirqs_on+0x7d/0x110 [ 735.668269][T17990] do_fast_syscall_32+0x32/0x70 [ 735.668286][T17990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 735.668300][T17990] RIP: 0023:0xf705efec [ 735.668313][T17990] Code: Unable to access opcode bytes at 0xf705efc2. [ 735.668318][T17990] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 735.668329][T17990] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 735.668336][T17990] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 735.668343][T17990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 735.668349][T17990] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 735.668356][T17990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 735.668374][T17990] [ 735.750090][ T3271] usb 8-1: GET_CAPABILITIES returned 0 [ 735.750115][ T3271] usbtmc 8-1:16.0: can't read capabilities [ 735.832918][ T5602] usb 12-1: USB disconnect, device number 7 [ 735.853453][T17992] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 735.854154][T17992] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 735.904999][T17992] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 736.096828][T18013] devpts: Invalid uid '0x00000000ffffffff' [ 736.105114][T18013] i2c i2c-0: delete_device: Can't find device in list [ 736.187129][T18015] netlink: 'syz.6.3383': attribute type 1 has an invalid length. [ 736.187146][T18015] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3383'. [ 736.633239][T18021] gadgetfs: bound to dummy_udc driver [ 736.640262][ T43] audit: type=1800 audit(1790602602.995:1118): pid=18021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3384" name="ep1in-bulk" dev="gadgetfs" ino=115975 res=0 errno=0 [ 736.876203][ T5834] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 736.876495][ C3] gadgetfs: connected [ 736.876624][ T5834] gadgetfs: disconnected [ 737.015542][T18023] syzkaller0: entered promiscuous mode [ 737.015563][T18023] syzkaller0: entered allmulticast mode [ 737.027083][ C3] gadgetfs: connected [ 737.030277][ T5834] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 737.030870][ T5834] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 737.030890][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.060517][ C3] gadgetfs: configuration #1 [ 737.125003][T18017] gadgetfs: suspended from state 3 [ 737.125473][ T5602] usb 6-1: USB disconnect, device number 47 [ 737.128133][T18017] gadgetfs: disconnected [ 737.420623][T18035] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3391'. [ 737.532331][T18042] CIFS: Attempting to mount //127.0.0.1/share [ 737.893119][T11176] Bluetooth: hci1: command 0x2016 tx timeout [ 738.153025][ T5602] usb 8-1: USB disconnect, device number 87 [ 738.383395][T18042] CIFS: VFS: cifs_mount failed w/return code = -112 [ 738.893053][ T5834] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 739.101457][ T5834] usb 8-1: Using ep0 maxpacket: 8 [ 739.102195][ T5834] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 739.104766][ T5834] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 739.104781][ T5834] usb 8-1: config 0 has no interface number 0 [ 739.105266][ T5834] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 739.105291][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.128250][ T5834] usb 8-1: config 0 descriptor?? [ 739.140445][ T5834] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 739.313524][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3397'. [ 739.368515][T18064] netlink: 'syz.3.3398': attribute type 4 has an invalid length. [ 739.400440][ T5602] usb 8-1: USB disconnect, device number 88 [ 739.688117][T18088] FAULT_INJECTION: forcing a failure. [ 739.688117][T18088] name failslab, interval 1, probability 0, space 0, times 0 [ 739.688142][T18088] CPU: 0 UID: 0 PID: 18088 Comm: syz.6.3404 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.688158][T18088] Tainted: [L]=SOFTLOCKUP [ 739.688162][T18088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 739.688171][T18088] Call Trace: [ 739.688175][T18088] [ 739.688180][T18088] dump_stack_lvl+0x100/0x190 [ 739.688200][T18088] should_fail_ex.cold+0x5/0xa [ 739.688217][T18088] should_failslab+0xc2/0x120 [ 739.688235][T18088] __kmalloc_noprof+0xfc/0x840 [ 739.688249][T18088] ? sk_prot_alloc+0x10b/0x2a0 [ 739.688270][T18088] sk_prot_alloc+0x10b/0x2a0 [ 739.688290][T18088] sk_alloc+0x36/0xe80 [ 739.688305][T18088] mctp_pf_create+0xe8/0x360 [ 739.688319][T18088] __sock_create+0x339/0x860 [ 739.688333][T18088] __sys_socket+0x14d/0x260 [ 739.688345][T18088] ? xfd_validate_state+0x129/0x190 [ 739.688361][T18088] ? __pfx___sys_socket+0x10/0x10 [ 739.688378][T18088] __ia32_sys_socket+0x72/0xb0 [ 739.688390][T18088] ? lockdep_hardirqs_on+0x7d/0x110 [ 739.688406][T18088] __do_fast_syscall_32+0x13a/0x8b0 [ 739.688424][T18088] ? lockdep_hardirqs_on+0x7d/0x110 [ 739.688443][T18088] do_fast_syscall_32+0x32/0x70 [ 739.688462][T18088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.688477][T18088] RIP: 0023:0xf6fcefec [ 739.688491][T18088] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 739.688497][T18088] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 739.688508][T18088] RAX: ffffffffffffffda RBX: 000000000000002d RCX: 0000000000000002 [ 739.688516][T18088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 739.688523][T18088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 739.688529][T18088] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 739.688536][T18088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 739.688551][T18088] [ 739.974202][T11176] Bluetooth: hci1: command 0x2016 tx timeout [ 740.267343][ T43] audit: type=1326 audit(1790602606.625:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.7.3406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 740.268263][ T43] audit: type=1326 audit(1790602606.625:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.7.3406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 740.268393][ T43] audit: type=1326 audit(1790602606.625:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.7.3406" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 740.268516][ T43] audit: type=1326 audit(1790602606.625:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.7.3406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 740.270865][ T43] audit: type=1326 audit(1790602606.625:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.7.3406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 740.271002][ T43] audit: type=1326 audit(1790602606.625:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.7.3406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 740.271436][ T43] audit: type=1326 audit(1790602606.625:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.7.3406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 740.271568][ T43] audit: type=1326 audit(1790602606.625:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.7.3406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 740.271706][ T43] audit: type=1326 audit(1790602606.625:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.7.3406" exe="/syz-executor" sig=0 arch=40000003 syscall=287 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 741.616328][T18101] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 741.675346][T18107] netlink: 'syz.7.3410': attribute type 1 has an invalid length. [ 741.719454][T18109] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3411'. [ 741.719578][T18109] FAULT_INJECTION: forcing a failure. [ 741.719578][T18109] name fail_futex, interval 1, probability 0, space 0, times 0 [ 741.719595][T18109] CPU: 2 UID: 0 PID: 18109 Comm: syz.6.3411 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.719611][T18109] Tainted: [L]=SOFTLOCKUP [ 741.719615][T18109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 741.719622][T18109] Call Trace: [ 741.719626][T18109] [ 741.719631][T18109] dump_stack_lvl+0x100/0x190 [ 741.719649][T18109] should_fail_ex.cold+0x5/0xa [ 741.719664][T18109] get_futex_key+0x1d0/0x14f0 [ 741.719683][T18109] ? __pfx_get_futex_key+0x10/0x10 [ 741.719699][T18109] ? find_held_lock+0x2b/0x80 [ 741.719711][T18109] ? futex_wake+0x4ea/0x5e0 [ 741.719727][T18109] futex_wake+0xf4/0x5e0 [ 741.719738][T18109] ? futex_wait+0x11e/0x370 [ 741.719753][T18109] ? __pfx_futex_wake+0x10/0x10 [ 741.719767][T18109] ? rcu_read_lock_any_held+0x6a/0x90 [ 741.719780][T18109] ? find_held_lock+0x2b/0x80 [ 741.719794][T18109] do_futex+0x2b2/0x440 [ 741.719805][T18109] ? __pfx_do_futex+0x10/0x10 [ 741.719815][T18109] ? __fget_files+0x215/0x3d0 [ 741.719831][T18109] __ia32_sys_futex_time32+0x2f4/0x470 [ 741.719846][T18109] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 741.719858][T18109] ? __sys_setsockopt+0x139/0x190 [ 741.719878][T18109] __do_fast_syscall_32+0x13a/0x8b0 [ 741.719897][T18109] do_fast_syscall_32+0x32/0x70 [ 741.719914][T18109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 741.719929][T18109] RIP: 0023:0xf6fcefec [ 741.719942][T18109] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 741.719947][T18109] RSP: 002b:00000000f53bd5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 741.719959][T18109] RAX: ffffffffffffffda RBX: 00000000f73c4f8c RCX: 0000000000000081 [ 741.719966][T18109] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 741.719973][T18109] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 741.719980][T18109] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 741.719986][T18109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 741.719999][T18109] [ 741.792792][T14292] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 741.869214][T18123] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(838860804.0.0), cmd(9) [ 741.962776][T14292] usb 9-1: Using ep0 maxpacket: 16 [ 741.972982][T14292] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.40 [ 741.983019][T14292] usb 9-1: config 1 interface 0 altsetting 32 endpoint 0x2 has an invalid bInterval 29, changing to 8 [ 741.983038][T14292] usb 9-1: config 1 interface 0 has no altsetting 0 [ 742.050840][T14292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.050858][T14292] usb 9-1: Product: 뙔çšï¶¨î©ëµ®é«ë°©çˆ«î° îƒ¡âœ²í™¡æ’ⱊ蹑భ圱䯇詶囌â—奱ꬪ胆ﷰ䘶鋊⤲᪃䚟⟉䕂î¸à§©áš©ã¿¯î¤‡ì‰”⮈笟뾈á½ì‡’䶠焬ꕉ㙥ሮ팞伕૆Ζ幙ë ç½­ë£·ìŠ¶î‚¶Æ¿äŠ‚迌瑉å¦ç¹·ç™ë¼²å“룂㬿꾥僾胾ì§ì ïƒ±ê…·á¤¥ë¼´ä€²ï¶·ê²¶èˆâ†Ÿé‘‹í™“趃ﶪ龨褘鶎螃噘⨔дî‹ì£–肜臬ﵰ갇༩ë•ê‰–á¹ë°£ã€¡è‚’á’饴嬵韦 [ 742.050876][T14292] usb 9-1: Manufacturer: ч [ 742.050883][T14292] usb 9-1: SerialNumber: syz [ 742.062859][T11176] Bluetooth: hci1: command 0x2016 tx timeout [ 742.482913][T18138] FAULT_INJECTION: forcing a failure. [ 742.482913][T18138] name failslab, interval 1, probability 0, space 0, times 0 [ 742.482936][T18138] CPU: 3 UID: 0 PID: 18138 Comm: syz.3.3423 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.482958][T18138] Tainted: [L]=SOFTLOCKUP [ 742.482963][T18138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 742.482971][T18138] Call Trace: [ 742.482975][T18138] [ 742.482980][T18138] dump_stack_lvl+0x100/0x190 [ 742.483005][T18138] should_fail_ex.cold+0x5/0xa [ 742.483026][T18138] should_failslab+0xc2/0x120 [ 742.483048][T18138] __kmalloc_noprof+0xfc/0x840 [ 742.483067][T18138] ? arch_stack_walk+0xa6/0xf0 [ 742.483086][T18138] ? constrain_params_by_rules+0x175/0xd20 [ 742.483137][T18138] constrain_params_by_rules+0x175/0xd20 [ 742.483167][T18138] ? stack_trace_save+0x8e/0xc0 [ 742.483190][T18138] ? __pfx_stack_trace_save+0x10/0x10 [ 742.483214][T18138] ? stack_depot_save_flags+0x27/0x9f0 [ 742.483242][T18138] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 742.483270][T18138] ? kasan_save_track+0x14/0x30 [ 742.483291][T18138] ? __kasan_kmalloc+0xaa/0xb0 [ 742.483313][T18138] ? snd_pcm_oss_sync+0x265/0x840 [ 742.483337][T18138] ? snd_pcm_oss_release+0x238/0x300 [ 742.483362][T18138] ? __fput+0x3ff/0xb50 [ 742.483383][T18138] ? task_work_run+0x150/0x240 [ 742.483410][T18138] ? snd_interval_refine+0x2d0/0x580 [ 742.483434][T18138] snd_pcm_hw_refine+0x82a/0xb40 [ 742.483464][T18138] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 742.483497][T18138] ? kasan_save_track+0x14/0x30 [ 742.483517][T18138] ? __kasan_kmalloc+0xaa/0xb0 [ 742.483540][T18138] snd_pcm_hw_param_last+0x2b2/0x660 [ 742.483589][T18138] snd_pcm_hw_param_near.constprop.0+0x546/0x850 [ 742.483623][T18138] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 742.483656][T18138] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 742.483673][T18138] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 742.483695][T18138] snd_pcm_oss_change_params_locked+0x193a/0x39f0 [ 742.483734][T18138] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 742.483779][T18138] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 742.483808][T18138] snd_pcm_oss_sync+0x265/0x840 [ 742.483838][T18138] snd_pcm_oss_release+0x238/0x300 [ 742.483865][T18138] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 742.483892][T18138] __fput+0x3ff/0xb50 [ 742.483920][T18138] task_work_run+0x150/0x240 [ 742.483942][T18138] ? __pfx_task_work_run+0x10/0x10 [ 742.483966][T18138] ? __ia32_compat_sys_openat+0x12d/0x210 [ 742.484001][T18138] exit_to_user_mode_loop+0x1d8/0x700 [ 742.484030][T18138] ? rcu_is_watching+0x13/0xc0 [ 742.484052][T18138] __do_fast_syscall_32+0x59f/0x8b0 [ 742.484082][T18138] do_fast_syscall_32+0x32/0x70 [ 742.484109][T18138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 742.484134][T18138] RIP: 0023:0xf700efec [ 742.484155][T18138] Code: Unable to access opcode bytes at 0xf700efc2. [ 742.484162][T18138] RSP: 002b:00000000f53dc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 742.484180][T18138] RAX: ffffffffffffffea RBX: 00000000ffffff9c RCX: 0000000080000480 [ 742.484192][T18138] RDX: 00000000000a6f81 RSI: 0000000000000000 RDI: 0000000000000000 [ 742.484203][T18138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 742.484214][T18138] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 742.484224][T18138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 742.484249][T18138] [ 742.498405][T14292] usbhid 9-1:1.0: can't add hid device: -71 [ 742.498452][T14292] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 742.499753][T14292] usb 9-1: USB disconnect, device number 80 [ 742.549035][T18138] gfs2: error -5 reading superblock [ 742.617432][T18138] netlink: 'syz.3.3423': attribute type 21 has an invalid length. [ 742.617448][T18138] IPv6: NLM_F_CREATE should be specified when creating new route [ 743.243677][T18141] CIFS: Attempting to mount //127.0.0.1/share [ 743.244098][T18141] CIFS: VFS: Error connecting to socket. Aborting operation. [ 743.244119][T18141] CIFS: VFS: cifs_mount failed w/return code = -101 [ 743.487162][T18153] IPv6: NLM_F_CREATE should be specified when creating new route [ 743.698025][T18159] team0: Port device vlan0 added [ 743.734662][T18162] CacheFiles: No cache directory specified [ 743.755510][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3426'. [ 743.756463][T18162] netlink: 'syz.4.3426': attribute type 12 has an invalid length. [ 744.161914][T18166] CIFS: Attempting to mount //127.0.0.1/share [ 744.593852][ T5602] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 744.704642][T18188] futex_wake_op: syz.4.3434 tries to shift op by 144; fix this program [ 744.722784][ T5602] usb 11-1: device descriptor read/64, error -71 [ 744.982884][ T5602] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 745.020975][T18166] CIFS: VFS: cifs_mount failed w/return code = -112 [ 745.114578][ T5602] usb 11-1: device descriptor read/64, error -71 [ 745.183758][T18192] FAULT_INJECTION: forcing a failure. [ 745.183758][T18192] name failslab, interval 1, probability 0, space 0, times 0 [ 745.183794][T18192] CPU: 0 UID: 0 PID: 18192 Comm: syz.3.3436 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.183820][T18192] Tainted: [L]=SOFTLOCKUP [ 745.183827][T18192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 745.183839][T18192] Call Trace: [ 745.183846][T18192] [ 745.183854][T18192] dump_stack_lvl+0x100/0x190 [ 745.183885][T18192] should_fail_ex.cold+0x5/0xa [ 745.183909][T18192] should_failslab+0xc2/0x120 [ 745.183937][T18192] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 745.183960][T18192] ? __alloc_skb+0x5b7/0x710 [ 745.183984][T18192] ? __alloc_skb+0x140/0x710 [ 745.184019][T18192] __alloc_skb+0x140/0x710 [ 745.184042][T18192] ? __alloc_skb+0x5b7/0x710 [ 745.184065][T18192] ? __pfx___alloc_skb+0x10/0x10 [ 745.184096][T18192] netlink_alloc_large_skb+0x69/0x150 [ 745.184122][T18192] netlink_sendmsg+0x680/0xda0 [ 745.184149][T18192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.184174][T18192] ? apparmor_socket_sendmsg+0x165/0x280 [ 745.184204][T18192] __sys_sendto+0x48b/0x4e0 [ 745.184227][T18192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.184250][T18192] ? __pfx___sys_sendto+0x10/0x10 [ 745.184281][T18192] ? lock_acquire+0x1d1/0x380 [ 745.184324][T18192] __ia32_compat_sys_socketcall+0x59a/0x770 [ 745.184349][T18192] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 745.184386][T18192] do_int80_emulation+0x166/0x650 [ 745.184418][T18192] asm_int80_emulation+0x1a/0x20 [ 745.184438][T18192] RIP: 0023:0xf71475ab [ 745.184455][T18192] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 745.184473][T18192] RSP: 002b:00000000f53fc34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 745.184491][T18192] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53fc3f4 [ 745.184503][T18192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 745.184515][T18192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 745.184526][T18192] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 745.184538][T18192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.184563][T18192] [ 745.232940][ T5602] usb usb11-port1: attempt power cycle [ 745.531478][T18203] syzkaller0: entered promiscuous mode [ 745.531498][T18203] syzkaller0: entered allmulticast mode [ 745.579699][ T5602] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 745.603328][ T5602] usb 11-1: device descriptor read/8, error -71 [ 745.842955][ T5602] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 745.874461][ T5602] usb 11-1: device descriptor read/8, error -71 [ 745.921715][T18212] tmpfs: Unknown parameter 'grpquota000000000000003' [ 745.998321][ T5602] usb usb11-port1: unable to enumerate USB device [ 746.010824][T18218] FAULT_INJECTION: forcing a failure. [ 746.010824][T18218] name failslab, interval 1, probability 0, space 0, times 0 [ 746.010852][T18218] CPU: 0 UID: 0 PID: 18218 Comm: syz.4.3445 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.010873][T18218] Tainted: [L]=SOFTLOCKUP [ 746.010879][T18218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 746.010887][T18218] Call Trace: [ 746.010893][T18218] [ 746.010899][T18218] dump_stack_lvl+0x100/0x190 [ 746.010922][T18218] should_fail_ex.cold+0x5/0xa [ 746.010941][T18218] should_failslab+0xc2/0x120 [ 746.010961][T18218] __kmalloc_noprof+0xfc/0x840 [ 746.010977][T18218] ? rcu_is_watching+0x13/0xc0 [ 746.010991][T18218] ? tomoyo_encode2+0xfb/0x3c0 [ 746.011010][T18218] tomoyo_encode2+0xfb/0x3c0 [ 746.011037][T18218] tomoyo_encode+0x29/0x50 [ 746.011051][T18218] tomoyo_realpath_from_path+0x18c/0x690 [ 746.011071][T18218] tomoyo_check_open_permission+0x2af/0x3c0 [ 746.011095][T18218] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 746.011123][T18218] ? hook_file_open+0x248/0x8e0 [ 746.011164][T18218] tomoyo_file_open+0x6b/0x90 [ 746.011182][T18218] security_file_open+0xb5/0x1e0 [ 746.011196][T18218] do_dentry_open+0x588/0x14d0 [ 746.011217][T18218] vfs_open+0x82/0x3f0 [ 746.011238][T18218] path_openat+0x19fa/0x2440 [ 746.011259][T18218] ? __pfx_path_openat+0x10/0x10 [ 746.011281][T18218] do_file_open+0x20e/0x430 [ 746.011299][T18218] ? __pfx_do_file_open+0x10/0x10 [ 746.011323][T18218] ? __pfx_kfree_link+0x10/0x10 [ 746.011367][T18218] ? _raw_spin_unlock+0x28/0x50 [ 746.011386][T18218] ? alloc_fd+0x471/0x7a0 [ 746.011409][T18218] do_sys_openat2+0x10f/0x1e0 [ 746.011429][T18218] ? __pfx_do_sys_openat2+0x10/0x10 [ 746.011448][T18218] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 746.011474][T18218] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 746.011494][T18218] __ia32_compat_sys_openat+0x12d/0x210 [ 746.011516][T18218] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 746.011549][T18218] do_int80_emulation+0x166/0x650 [ 746.011579][T18218] asm_int80_emulation+0x1a/0x20 [ 746.011600][T18218] RIP: 0023:0xf71975ab [ 746.011616][T18218] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 746.011633][T18218] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 746.011649][T18218] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7261b71 [ 746.011659][T18218] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 746.011667][T18218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 746.011676][T18218] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 746.011685][T18218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.011704][T18218] [ 746.011805][T18218] ERROR: Out of memory at tomoyo_realpath_from_path. [ 746.011909][T18218] FAULT_INJECTION: forcing a failure. [ 746.011909][T18218] name failslab, interval 1, probability 0, space 0, times 0 [ 746.011927][T18218] CPU: 0 UID: 0 PID: 18218 Comm: syz.4.3445 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.011946][T18218] Tainted: [L]=SOFTLOCKUP [ 746.011952][T18218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 746.011960][T18218] Call Trace: [ 746.011965][T18218] [ 746.011970][T18218] dump_stack_lvl+0x100/0x190 [ 746.011989][T18218] should_fail_ex.cold+0x5/0xa [ 746.012007][T18218] should_failslab+0xc2/0x120 [ 746.012031][T18218] __kvmalloc_node_noprof+0x113/0x9b0 [ 746.012048][T18218] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 746.012063][T18218] ? __kmalloc_cache_noprof+0x2c1/0x6d0 [ 746.012084][T18218] ? io_alloc_cache_init+0x38/0x170 [ 746.012101][T18218] io_alloc_cache_init+0x38/0x170 [ 746.012116][T18218] io_rsrc_cache_init+0x26/0x50 [ 746.012137][T18218] io_uring_setup.cold+0x4c0/0x1c5e [ 746.012159][T18218] ? rcu_read_lock_any_held+0x6a/0x90 [ 746.012175][T18218] ? find_held_lock+0x2b/0x80 [ 746.012190][T18218] ? __pfx_io_uring_setup+0x10/0x10 [ 746.012208][T18218] ? ksys_write+0x190/0x250 [ 746.012222][T18218] ? lock_acquire+0x1d1/0x380 [ 746.012247][T18218] ? __mutex_unlock_slowpath+0x35d/0x930 [ 746.012281][T18218] ? fput+0x7c/0x100 [ 746.012300][T18218] ? ksys_write+0x1ac/0x250 [ 746.012316][T18218] ? __pfx_ksys_write+0x10/0x10 [ 746.012334][T18218] __ia32_sys_io_uring_setup+0xc2/0x170 [ 746.012357][T18218] __do_fast_syscall_32+0x13a/0x8b0 [ 746.012381][T18218] ? lockdep_hardirqs_on+0x7d/0x110 [ 746.012400][T18218] do_fast_syscall_32+0x32/0x70 [ 746.012417][T18218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.012431][T18218] RIP: 0023:0xf705efec [ 746.012443][T18218] Code: Unable to access opcode bytes at 0xf705efc2. [ 746.012448][T18218] RSP: 002b:00000000f544d4bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 746.012459][T18218] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 0000000080000040 [ 746.012466][T18218] RDX: 0000000000000000 RSI: 00000000f544d514 RDI: 00000000f544d578 [ 746.012486][T18218] RBP: 00000000800000c0 R08: 0000000000000000 R09: 0000000000000000 [ 746.012492][T18218] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 746.012499][T18218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.012513][T18218] [ 746.134413][T18221] overlay: Unknown parameter 'fowner' [ 746.215650][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.334578][T18225] FAULT_INJECTION: forcing a failure. [ 746.334578][T18225] name failslab, interval 1, probability 0, space 0, times 0 [ 746.334609][T18225] CPU: 2 UID: 0 PID: 18225 Comm: syz.4.3447 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.334635][T18225] Tainted: [L]=SOFTLOCKUP [ 746.334642][T18225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 746.334652][T18225] Call Trace: [ 746.334659][T18225] [ 746.334666][T18225] dump_stack_lvl+0x100/0x190 [ 746.334696][T18225] should_fail_ex.cold+0x5/0xa [ 746.334720][T18225] should_failslab+0xc2/0x120 [ 746.334746][T18225] kmem_cache_alloc_noprof+0x92/0x6a0 [ 746.334768][T18225] ? security_file_alloc+0x34/0x2c0 [ 746.334802][T18225] security_file_alloc+0x34/0x2c0 [ 746.334829][T18225] init_file+0x95/0x480 [ 746.334855][T18225] alloc_empty_file+0x79/0x1c0 [ 746.334880][T18225] dentry_open+0x46/0xd0 [ 746.334905][T18225] acct_on+0x181/0xa00 [ 746.334928][T18225] ? __pfx_acct_on+0x10/0x10 [ 746.334949][T18225] ? bpf_lsm_capable+0x9/0x10 [ 746.334978][T18225] __ia32_sys_acct+0x80/0x1e0 [ 746.334993][T18225] ? lockdep_hardirqs_on+0x7d/0x110 [ 746.335014][T18225] __do_fast_syscall_32+0x13a/0x8b0 [ 746.335035][T18225] ? lockdep_hardirqs_on+0x7d/0x110 [ 746.335056][T18225] do_fast_syscall_32+0x32/0x70 [ 746.335077][T18225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.335095][T18225] RIP: 0023:0xf705efec [ 746.335112][T18225] Code: Unable to access opcode bytes at 0xf705efc2. [ 746.335118][T18225] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000033 [ 746.335132][T18225] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000000 [ 746.335142][T18225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 746.335150][T18225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 746.335158][T18225] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 746.335167][T18225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.335186][T18225] [ 746.503847][T18229] syzkaller0: entered promiscuous mode [ 746.503864][T18229] syzkaller0: entered allmulticast mode [ 747.022611][T17312] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 747.174373][T17312] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 747.176548][T17312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.176567][T17312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.176588][T17312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.233820][T17312] usb 8-1: config 0 descriptor?? [ 747.486421][T18233] /dev/sg0: Can't lookup blockdev [ 747.527223][T18232] Process accounting resumed [ 747.656465][T18231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.656683][T18231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.860759][T18231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.861000][T18231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.962595][T14292] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 748.113232][T14292] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 748.114449][T14292] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 748.114467][T14292] usb 11-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 748.114481][T14292] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 748.114512][T14292] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 748.211943][T14292] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 748.211960][T14292] usb 11-1: Product: syz [ 748.211967][T14292] usb 11-1: Manufacturer: syz [ 748.360293][T14292] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 749.271889][ T5602] usb 11-1: USB disconnect, device number 25 [ 749.624405][T18252] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 749.624416][T18252] PKCS7: Only support pkcs7_signedData type [ 749.628056][T18252] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3457'. [ 749.659553][T18256] FAULT_INJECTION: forcing a failure. [ 749.659553][T18256] name failslab, interval 1, probability 0, space 0, times 0 [ 749.659586][T18256] CPU: 3 UID: 0 PID: 18256 Comm: syz.7.3459 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.659614][T18256] Tainted: [L]=SOFTLOCKUP [ 749.659636][T18256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 749.659649][T18256] Call Trace: [ 749.659656][T18256] [ 749.659663][T18256] dump_stack_lvl+0x100/0x190 [ 749.659691][T18256] should_fail_ex.cold+0x5/0xa [ 749.659717][T18256] should_failslab+0xc2/0x120 [ 749.659740][T18256] __kmalloc_noprof+0xfc/0x840 [ 749.659758][T18256] ? __kasan_kmalloc+0xaa/0xb0 [ 749.659778][T18256] ? mpi_resize+0x1ac/0x250 [ 749.659805][T18256] mpi_resize+0x1ac/0x250 [ 749.659828][T18256] mpi_powm+0x9ff/0x1e50 [ 749.659860][T18256] ? __pfx_mpi_powm+0x10/0x10 [ 749.659881][T18256] ? mpi_free+0xc0/0x150 [ 749.659901][T18256] ? mpi_free+0xe1/0x150 [ 749.659919][T18256] ? kfree+0x22b/0x6d0 [ 749.659948][T18256] ? mpi_free+0xe6/0x150 [ 749.659971][T18256] rsa_enc+0x1fe/0x3b0 [ 749.659993][T18256] ? __pfx_rsa_enc+0x10/0x10 [ 749.660015][T18256] ? __virt_addr_valid+0x239/0x430 [ 749.660040][T18256] ? sg_init_one+0xf5/0x1b0 [ 749.660060][T18256] rsassa_pkcs1_verify+0x4eb/0xc20 [ 749.660092][T18256] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 749.660128][T18256] ? rsa_max_size+0xd/0x70 [ 749.660148][T18256] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 749.660176][T18256] public_key_verify_signature+0x5ee/0x910 [ 749.660200][T18256] ? __pfx_public_key_verify_signature+0x10/0x10 [ 749.660232][T18256] ? asymmetric_key_generate_id+0x7e/0x180 [ 749.660264][T18256] x509_check_for_self_signed+0x325/0x510 [ 749.660289][T18256] x509_cert_parse+0x60c/0x910 [ 749.660312][T18256] x509_key_preparse+0x65/0x9c0 [ 749.660337][T18256] asymmetric_key_preparse+0xce/0x1d0 [ 749.660354][T18256] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 749.660371][T18256] __key_create_or_update+0x463/0xe30 [ 749.660403][T18256] ? __pfx___key_create_or_update+0x10/0x10 [ 749.660430][T18256] ? lookup_user_key+0x3f3/0x1300 [ 749.660471][T18256] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 749.660499][T18256] ? __pfx_keyring_search_iterator+0x10/0x10 [ 749.660523][T18256] key_create_or_update+0x42/0x60 [ 749.660555][T18256] __do_sys_add_key+0x2e8/0x460 [ 749.660578][T18256] ? __pfx___do_sys_add_key+0x10/0x10 [ 749.660597][T18256] ? ksys_write+0x1ac/0x250 [ 749.660624][T18256] __do_fast_syscall_32+0x13a/0x8b0 [ 749.660651][T18256] ? lockdep_hardirqs_on+0x7d/0x110 [ 749.660678][T18256] do_fast_syscall_32+0x32/0x70 [ 749.660705][T18256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 749.660727][T18256] RIP: 0023:0xf7fe2fec [ 749.660748][T18256] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 749.660756][T18256] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 749.660774][T18256] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 749.660785][T18256] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 0000000008ebba2d [ 749.660797][T18256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 749.660809][T18256] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 749.660820][T18256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 749.660846][T18256] [ 749.674639][T18252] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3457'. [ 750.326414][T17312] usbhid 8-1:0.0: can't add hid device: -71 [ 750.326468][T17312] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 750.327856][T17312] usb 8-1: USB disconnect, device number 89 [ 750.429200][T18274] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 750.902529][T17312] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 751.053170][T17312] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 751.054093][T17312] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 751.054107][T17312] usb 9-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 751.054118][T17312] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 751.054137][T17312] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.055553][T17312] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 751.055566][T17312] usb 9-1: Product: syz [ 751.055573][T17312] usb 9-1: Manufacturer: syz [ 751.058350][T17312] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 751.553581][ T7791] nvmet: connect request for invalid subsystem t! [ 751.563752][T18285] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 751.873579][ T5809] usb 9-1: USB disconnect, device number 81 [ 752.089463][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3467'. [ 752.106641][T11176] Bluetooth: hci1: unexpected event for opcode 0x202d [ 752.717909][T18308] CIFS: Attempting to mount //127.0.0.1/share [ 752.718291][T18308] CIFS: VFS: Error connecting to socket. Aborting operation. [ 752.718316][T18308] CIFS: VFS: cifs_mount failed w/return code = -101 [ 752.777412][ T43] kauditd_printk_skb: 98 callbacks suppressed [ 752.777425][ T43] audit: type=1326 audit(1790602619.135:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18309 comm="syz.6.3474" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x0 [ 752.889315][ T43] audit: type=1326 audit(1790602619.245:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18309 comm="syz.6.3474" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefec code=0x0 [ 753.574555][ T5602] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 753.744909][ T5602] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 753.745830][ T5602] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 753.745845][ T5602] usb 8-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 753.745856][ T5602] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 753.745877][ T5602] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 753.747381][ T5602] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 753.747400][ T5602] usb 8-1: Product: syz [ 753.747413][ T5602] usb 8-1: Manufacturer: syz [ 753.751658][ T5602] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 754.493953][ T5809] usb 8-1: USB disconnect, device number 90 [ 754.622313][T18341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3483'. [ 754.654200][T18338] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 754.669178][T18341] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 754.670047][T18341] fuse: Bad value for 'fd' [ 754.800761][T18338] md/raid0:md0: remove inactive devices before converting to RAID0 [ 754.800845][T18338] md: pers->run() failed ... [ 755.120022][T18363] FAULT_INJECTION: forcing a failure. [ 755.120022][T18363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.120053][T18363] CPU: 0 UID: 0 PID: 18363 Comm: syz.6.3495 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.120077][T18363] Tainted: [L]=SOFTLOCKUP [ 755.120084][T18363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 755.120095][T18363] Call Trace: [ 755.120101][T18363] [ 755.120108][T18363] dump_stack_lvl+0x100/0x190 [ 755.120135][T18363] should_fail_ex.cold+0x5/0xa [ 755.120157][T18363] strncpy_from_user+0x3b/0x2d0 [ 755.120183][T18363] bpf_prog_load+0x14dc/0x2a80 [ 755.120212][T18363] ? __pfx_bpf_prog_load+0x10/0x10 [ 755.120256][T18363] __sys_bpf+0x1f46/0x4a30 [ 755.120280][T18363] ? __pfx___sys_bpf+0x10/0x10 [ 755.120303][T18363] ? lock_acquire+0x1d1/0x380 [ 755.120325][T18363] ? get_pid_task+0x2a/0x250 [ 755.120343][T18363] ? find_held_lock+0x2b/0x80 [ 755.120361][T18363] ? get_pid_task+0xfc/0x250 [ 755.120377][T18363] ? get_pid_task+0xfc/0x250 [ 755.120401][T18363] ? proc_fail_nth_write+0x9f/0x220 [ 755.120419][T18363] ? find_held_lock+0x2b/0x80 [ 755.120442][T18363] ? rcu_read_lock_any_held+0x6a/0x90 [ 755.120461][T18363] ? find_held_lock+0x2b/0x80 [ 755.120478][T18363] ? ksys_write+0x190/0x250 [ 755.120494][T18363] ? ksys_write+0x190/0x250 [ 755.120511][T18363] ? lock_acquire+0x1d1/0x380 [ 755.120550][T18363] ? fput+0x7c/0x100 [ 755.120573][T18363] ? __ia32_sys_bpf+0xcc/0x170 [ 755.120589][T18363] __ia32_sys_bpf+0xcc/0x170 [ 755.120607][T18363] ? __do_fast_syscall_32+0xb3/0x8b0 [ 755.120634][T18363] __do_fast_syscall_32+0x13a/0x8b0 [ 755.120659][T18363] ? lockdep_hardirqs_on+0x7d/0x110 [ 755.120684][T18363] do_fast_syscall_32+0x32/0x70 [ 755.120708][T18363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 755.120730][T18363] RIP: 0023:0xf6fcefec [ 755.120748][T18363] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 755.120755][T18363] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 755.120773][T18363] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000380 [ 755.120802][T18363] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 755.120814][T18363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 755.120824][T18363] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 755.120835][T18363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 755.120858][T18363] [ 755.302565][ T5809] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 755.382501][T14292] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 755.453114][ T5809] usb 12-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 755.453951][ T5809] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 755.453965][ T5809] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 755.453984][ T5809] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.458177][ T5809] spcp8x5 12-1:1.0: SPCP8x5 converter detected [ 755.462889][ T5809] usb 12-1: SPCP8x5 converter now attached to ttyUSB0 [ 755.534473][T14292] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 755.535287][T14292] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.535311][T14292] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 755.535324][T14292] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.538960][T14292] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 755.538973][T14292] usb 8-1: Product: syz [ 755.538982][T14292] usb 8-1: Manufacturer: syz [ 755.540926][T18365] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 755.542039][T14292] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 755.551865][T14292] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB1 [ 755.807220][T18366] uhci_hcd 0000:00:1d.0: remove, state 4 [ 755.807244][T18366] usb usb1: USB disconnect, device number 1 [ 755.817650][T18366] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 755.877236][T18365] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 755.877770][T18365] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 755.878042][T18365] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 755.919580][T18365] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 755.923720][T18365] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f] [ 755.928336][T18365] pci 0000:00:1d.0: Adding to iommu group 7 [ 755.934025][T18365] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 755.957984][T18343] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 756.018316][T18365] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 82031 usecs [ 756.073421][T18365] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 756.075082][T18365] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 756.075244][T18365] uhci_hcd 0000:00:1d.0: detected 2 ports [ 756.076208][T18365] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 756.077180][T18365] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 756.078383][T18365] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 756.078448][T18365] usb usb1: Product: UHCI Host Controller [ 756.078458][T18365] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 756.078466][T18365] usb usb1: SerialNumber: 0000:00:1d.0 [ 756.086832][T18365] hub 1-0:1.0: USB hub found [ 756.087166][T18365] hub 1-0:1.0: 2 ports detected [ 756.238381][T14292] usb 8-1: USB disconnect, device number 91 [ 756.242252][T14292] garmin_gps ttyUSB1: Garmin GPS usb/tty converter now disconnected from ttyUSB1 [ 756.243585][T14292] garmin_gps 8-1:1.0: device disconnected [ 757.141175][T18382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.763072][T14292] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 757.823325][T18343] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 757.824443][ T3271] usb 12-1: USB disconnect, device number 8 [ 757.848361][ T3271] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 757.848705][ T3271] spcp8x5 12-1:1.0: device disconnected [ 757.927648][T14292] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 757.928476][T14292] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 757.928490][T14292] usb 9-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 757.928499][T14292] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 757.928545][T14292] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 757.929836][T14292] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 757.929849][T14292] usb 9-1: Product: syz [ 757.929857][T14292] usb 9-1: Manufacturer: syz [ 757.933363][T14292] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 758.037125][T18407] ipip0: entered allmulticast mode [ 758.072653][T18409] Invalid ELF header magic: != ELF [ 758.956751][ T1712] usb 9-1: USB disconnect, device number 82 [ 759.074015][T18421] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3503'. [ 759.120966][T18425] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 759.120991][T18425] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 759.121278][T18425] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 759.121298][T18425] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 759.164961][T18426] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3505'. [ 759.164976][T18426] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3505'. [ 759.244729][T18428] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 759.326120][T18433] netlink: 'syz.4.3508': attribute type 29 has an invalid length. [ 759.327977][T18433] tipc: Enabling of bearer rejected, failed to enable media [ 759.512625][ T3271] usb 12-1: new full-speed USB device number 9 using dummy_hcd [ 759.695949][ T3271] usb 12-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 759.696905][ T3271] usb 12-1: config 0 has an invalid interface number: 237 but max is 0 [ 759.696920][ T3271] usb 12-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 759.696935][ T3271] usb 12-1: config 0 has no interface number 0 [ 759.696956][ T3271] usb 12-1: too many endpoints for config 0 interface 237 altsetting 47: 224, using maximum allowed: 30 [ 759.696984][ T3271] usb 12-1: config 0 interface 237 altsetting 47 has 0 endpoint descriptors, different from the interface descriptor's value: 224 [ 759.697005][ T3271] usb 12-1: config 0 interface 237 has no altsetting 0 [ 759.698866][ T3271] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.698886][ T3271] usb 12-1: Product: syz [ 759.698898][ T3271] usb 12-1: Manufacturer: syz [ 759.698909][ T3271] usb 12-1: SerialNumber: syz [ 759.700371][ T3271] usb 12-1: config 0 descriptor?? [ 759.945201][ T3271] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 759.945237][ T3271] dvb-usb: bulk message failed: -22 (3/0) [ 759.965029][ T3271] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 759.965622][ T3271] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 759.965659][ T3271] usb 12-1: media controller created [ 759.966593][ T3271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 759.971667][ T3271] dvb-usb: bulk message failed: -22 (6/0) [ 759.971701][ T3271] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 759.974332][ T3271] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb12/12-1/input/input51 [ 759.979254][ T3271] dvb-usb: schedule remote query interval to 150 msecs. [ 759.979288][ T3271] dvb-usb: bulk message failed: -22 (3/0) [ 760.003213][ T3271] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 760.006563][ T3271] usb 12-1: USB disconnect, device number 9 [ 760.033964][ T3271] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 760.090550][ T43] audit: type=1326 audit(1790602626.445:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18449 comm="syz.6.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 760.090638][ T43] audit: type=1326 audit(1790602626.445:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18449 comm="syz.6.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 760.110177][ T43] audit: type=1326 audit(1790602626.465:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18449 comm="syz.6.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 760.110258][ T43] audit: type=1326 audit(1790602626.465:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18449 comm="syz.6.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 760.110381][ T43] audit: type=1326 audit(1790602626.465:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18449 comm="syz.6.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 760.110666][ T43] audit: type=1326 audit(1790602626.465:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18449 comm="syz.6.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 760.111608][ T43] audit: type=1326 audit(1790602626.465:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18449 comm="syz.6.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 760.111700][ T43] audit: type=1326 audit(1790602626.465:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18449 comm="syz.6.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 760.161289][ T43] audit: type=1326 audit(1790602626.515:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18449 comm="syz.6.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71075ab code=0x7ffc0000 [ 760.161634][ T43] audit: type=1326 audit(1790602626.515:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18449 comm="syz.6.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 760.413717][ T5886] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 760.563178][ T5886] usb 11-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 760.571607][ T5886] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.571630][ T5886] usb 11-1: Product: syz [ 760.571641][ T5886] usb 11-1: Manufacturer: syz [ 760.571653][ T5886] usb 11-1: SerialNumber: syz [ 760.592494][ T5886] usb 11-1: USB2VGA dongle found at address 26 [ 760.593968][ T5886] usb 11-1: Allocated 8 output buffers [ 760.616212][T18457] CIFS: Attempting to mount //127.0.0.1/share [ 760.672309][T18460] syzkaller0: entered promiscuous mode [ 760.672330][T18460] syzkaller0: entered allmulticast mode [ 760.922566][ T3271] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 760.943485][T18450] netlink: 'syz.6.3514': attribute type 30 has an invalid length. [ 760.996450][ T5886] usb 11-1: Failed to early initialize device [ 761.000269][ T5886] usb 11-1: USB disconnect, device number 26 [ 761.082959][ T3271] usb 12-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 761.083434][ T3271] usb 12-1: config 0 has no interfaces? [ 761.084347][ T3271] usb 12-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 761.084435][ T3271] usb 12-1: Manufacturer: syz [ 761.085822][ T3271] usb 12-1: config 0 descriptor?? [ 761.322068][T18408] usb 12-1: USB disconnect, device number 10 [ 761.463434][T18457] CIFS: VFS: Error connecting to socket. Aborting operation. [ 761.463461][T18457] CIFS: VFS: cifs_mount failed w/return code = -4 [ 761.626233][T18480] FAULT_INJECTION: forcing a failure. [ 761.626233][T18480] name failslab, interval 1, probability 0, space 0, times 0 [ 761.626256][T18480] CPU: 0 UID: 0 PID: 18480 Comm: syz.6.3523 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.626271][T18480] Tainted: [L]=SOFTLOCKUP [ 761.626276][T18480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 761.626282][T18480] Call Trace: [ 761.626286][T18480] [ 761.626291][T18480] dump_stack_lvl+0x100/0x190 [ 761.626310][T18480] should_fail_ex.cold+0x5/0xa [ 761.626326][T18480] should_failslab+0xc2/0x120 [ 761.626342][T18480] kmem_cache_alloc_noprof+0x92/0x6a0 [ 761.626356][T18480] ? alloc_empty_file+0x5b/0x1c0 [ 761.626374][T18480] alloc_empty_file+0x5b/0x1c0 [ 761.626390][T18480] path_openat+0xdb/0x2440 [ 761.626405][T18480] ? __pfx_path_openat+0x10/0x10 [ 761.626424][T18480] do_file_open+0x20e/0x430 [ 761.626445][T18480] ? __pfx_do_file_open+0x10/0x10 [ 761.626469][T18480] ? _raw_spin_unlock+0x28/0x50 [ 761.626484][T18480] ? alloc_fd+0x471/0x7a0 [ 761.626501][T18480] do_sys_openat2+0x10f/0x1e0 [ 761.626518][T18480] ? __pfx_do_sys_openat2+0x10/0x10 [ 761.626534][T18480] ? fdget+0x18b/0x210 [ 761.626549][T18480] __ia32_compat_sys_openat+0x12d/0x210 [ 761.626565][T18480] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 761.626586][T18480] __do_fast_syscall_32+0x13a/0x8b0 [ 761.626605][T18480] do_fast_syscall_32+0x32/0x70 [ 761.626622][T18480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 761.626637][T18480] RIP: 0023:0xf6fcefec [ 761.626649][T18480] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 761.626654][T18480] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 761.626665][T18480] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 761.626672][T18480] RDX: 0000000000088100 RSI: 0000000000000000 RDI: 0000000000000000 [ 761.626679][T18480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 761.626685][T18480] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 761.626691][T18480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 761.626705][T18480] [ 762.435327][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 762.440997][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 762.453825][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 762.454492][ T5746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 762.455010][ T5746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 762.582008][T18496] input: syz0 as /devices/virtual/input/input53 [ 763.019753][T18520] batman_adv: batadv0: Adding interface: dummy0 [ 763.019765][T18520] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.019782][T18520] batman_adv: batadv0: Interface activated: dummy0 [ 763.052121][T18520] batadv0: mtu less than device minimum [ 763.053543][T18520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.054047][T18520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.054548][T18520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.055013][T18520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.055481][T18520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.055949][T18520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.056416][T18520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.056878][T18520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.057343][T18520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.089463][T18526] netlink: 'syz.4.3533': attribute type 10 has an invalid length. [ 763.089483][T18526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3533'. [ 763.089629][T18526] batadv0: entered promiscuous mode [ 763.089644][T18526] batadv0: entered allmulticast mode [ 763.090338][T18526] bridge0: port 3(batadv0) entered blocking state [ 763.090489][T18526] bridge0: port 3(batadv0) entered disabled state [ 763.110986][T18526] bridge0: port 3(batadv0) entered blocking state [ 763.111074][T18526] bridge0: port 3(batadv0) entered forwarding state [ 763.137033][T18502] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.137188][T18502] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.137253][T18502] bridge_slave_0: entered allmulticast mode [ 763.140239][T18502] bridge_slave_0: entered promiscuous mode [ 763.141864][T18502] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.142030][T18502] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.142091][T18502] bridge_slave_1: entered allmulticast mode [ 763.143063][T18502] bridge_slave_1: entered promiscuous mode [ 763.162849][T18502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.164414][T18502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.176409][T18502] team0: Port device team_slave_0 added [ 763.177756][T18502] team0: Port device team_slave_1 added [ 763.190050][T18502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.190062][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.190075][T18502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.190965][T18502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.190973][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.190986][T18502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.218814][T18502] hsr_slave_0: entered promiscuous mode [ 763.219259][T18502] hsr_slave_1: entered promiscuous mode [ 763.219620][T18502] debugfs: 'hsr0' already exists in 'hsr' [ 763.219632][T18502] Cannot create hsr debugfs directory [ 763.334374][T18526] input: syz0 as /devices/virtual/input/input54 [ 763.423905][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 763.423917][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 763.507218][T18502] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 763.511917][T18502] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.513128][T18502] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 763.523261][T18502] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 763.523946][T18502] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 763.538621][T18502] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.540124][T18502] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 763.555493][T18502] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.586990][T18502] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.587073][T18502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.587175][T18502] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.587218][T18502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.644271][T18502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.659503][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.659891][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.678602][T18502] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.690591][ T7791] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.690637][ T7791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.693269][ T7791] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.693339][ T7791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.111797][T18502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.320547][T18502] veth0_vlan: entered promiscuous mode [ 764.329503][T18502] veth1_vlan: entered promiscuous mode [ 764.369292][T18502] veth0_macvtap: entered promiscuous mode [ 764.377410][T18502] veth1_macvtap: entered promiscuous mode [ 764.401973][T18502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.415969][T18502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.526354][T15576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.526369][T15576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.536956][T11176] Bluetooth: hci2: command tx timeout [ 764.565153][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.565393][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.565607][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.565950][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.608299][ T6630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.608313][ T6630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.681888][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.681933][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.681971][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.682008][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.682045][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.682083][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.682119][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.682156][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.682194][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.682233][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.682270][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.682312][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.682352][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.684638][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.684725][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.684786][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.684847][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.684909][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.684970][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.685030][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.685091][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.685154][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.685214][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.685274][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.685342][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.685404][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.685465][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.685527][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.685588][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.685725][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.685790][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.685851][T18566] pimreg1: tun_chr_ioctl cmd 1074025673 [ 764.692234][T18567] pimreg1: tun_chr_ioctl cmd 1074025676 [ 764.692254][T18567] pimreg1: owner set to 0 [ 764.925992][T18565] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 764.954993][T18565] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 764.960871][T18565] pci 0000:00:03.0: BAR 1 [mem 0x80200000-0x80200fff] [ 764.961062][T18565] pci 0000:00:03.0: BAR 4 [mem 0x580200000-0x580203fff 64bit pref] [ 764.967538][T18565] pci 0000:00:03.0: Adding to iommu group 3 [ 764.976863][T18565] pci 0000:00:03.0: BAR 4 [mem 0x580200000-0x580203fff 64bit pref]: assigned [ 764.979042][T18565] pci 0000:00:03.0: BAR 1 [mem 0x80200000-0x80200fff]: assigned [ 764.979151][T18565] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 765.257981][ T1712] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 765.423478][ T1712] usb 13-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 765.424620][ T1712] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.424642][ T1712] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 765.424655][ T1712] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 765.424667][ T1712] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 765.424679][ T1712] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 765.424690][ T1712] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 765.424702][ T1712] usb 13-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 765.464446][ T1712] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.464462][ T1712] usb 13-1: Product: syz [ 765.464470][ T1712] usb 13-1: Manufacturer: syz [ 765.464477][ T1712] usb 13-1: SerialNumber: syz [ 765.703468][T18572] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 765.703524][T18572] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 765.703572][T18572] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 765.909744][T18582] CIFS: Attempting to mount //127.0.0.1/share [ 765.928214][ T1712] keyspan 13-1:1.0: Keyspan 1 port adapter converter detected [ 765.928689][ T1712] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 84 [ 765.937113][ T1712] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 82 [ 765.937201][ T1712] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 765.985348][ T1712] usb 13-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 766.031305][T18565] hwrng_fill thread creation failed [ 766.612780][T11176] Bluetooth: hci2: command tx timeout [ 766.781102][T18582] CIFS: VFS: cifs_mount failed w/return code = -112 [ 767.117594][T18587] CIFS: Attempting to mount //127.0.0.1/share [ 767.343902][T18587] CIFS: VFS: cifs_mount failed w/return code = -112 [ 767.859985][T14292] usb 13-1: USB disconnect, device number 2 [ 767.868212][T14292] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 767.895530][T14292] keyspan 13-1:1.0: device disconnected [ 768.129365][T18607] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3556'. [ 768.696739][T11176] Bluetooth: hci2: command tx timeout [ 769.034633][T14292] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 769.223424][T14292] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 769.224475][T14292] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 769.224496][T14292] usb 13-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 769.224510][T14292] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 769.224548][T14292] usb 13-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 769.226175][T14292] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 769.226187][T14292] usb 13-1: Product: syz [ 769.226195][T14292] usb 13-1: Manufacturer: syz [ 769.228669][T14292] cdc_wdm 13-1:1.0: probe with driver cdc_wdm failed with error -22 [ 770.548684][ T3271] usb 13-1: USB disconnect, device number 3 [ 771.942513][ T5886] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 772.117921][ T5886] usb 13-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 772.118758][ T5886] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.118782][ T5886] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 772.118838][ T5886] usb 13-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.120033][ T5886] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 772.120045][ T5886] usb 13-1: Product: syz [ 772.120053][ T5886] usb 13-1: Manufacturer: syz [ 772.121795][T18622] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 772.125332][ T5886] garmin_gps 13-1:1.0: Garmin GPS usb/tty converter detected [ 772.129604][ T5886] usb 13-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 772.363761][T18622] uhci_hcd 0000:00:1d.0: remove, state 4 [ 772.363785][T18622] usb usb1: USB disconnect, device number 1 [ 772.382377][T18622] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 772.742230][T18623] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 772.751728][T18623] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f] [ 772.759665][T18623] pci 0000:00:1d.0: Adding to iommu group 7 [ 772.774899][T18623] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 772.938047][T18623] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 159132 usecs [ 773.047551][T18623] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 773.051664][T18623] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 773.051884][T18623] uhci_hcd 0000:00:1d.0: detected 2 ports [ 773.057763][T18623] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 773.058922][T18623] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 773.064139][T18623] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 773.064154][T18623] usb usb1: Product: UHCI Host Controller [ 773.064162][T18623] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 773.064265][T18623] usb usb1: SerialNumber: 0000:00:1d.0 [ 773.073744][T18623] hub 1-0:1.0: USB hub found [ 773.074097][T18623] hub 1-0:1.0: 2 ports detected [ 773.447909][ T5886] usb 13-1: USB disconnect, device number 4 [ 773.452092][ T5886] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 773.454615][ T5886] garmin_gps 13-1:1.0: device disconnected [ 773.496559][T18631] CIFS: Attempting to mount //127.0.0.1/share [ 774.226079][ T5835] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 774.336140][T18631] CIFS: VFS: cifs_mount failed w/return code = -112 [ 774.376190][ T5835] usb 13-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 774.377399][ T5835] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.377423][ T5835] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 774.377436][ T5835] usb 13-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 774.388031][ T5835] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 774.388046][ T5835] usb 13-1: Product: syz [ 774.388053][ T5835] usb 13-1: Manufacturer: syz [ 774.392668][T18641] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 774.395153][ T5835] garmin_gps 13-1:1.0: Garmin GPS usb/tty converter detected [ 774.401739][ T5835] usb 13-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 774.666822][T18641] uhci_hcd 0000:00:1d.0: remove, state 4 [ 774.666846][T18641] usb usb1: USB disconnect, device number 1 [ 774.683170][T18641] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 774.915187][T18641] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 774.921069][T18641] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f] [ 774.930333][T18670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3565'. [ 774.932044][T18641] pci 0000:00:1d.0: Adding to iommu group 7 [ 774.942161][T18641] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 774.996807][T18641] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 53190 usecs [ 775.018016][T18672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3566'. [ 775.034767][T18641] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 775.046473][T18641] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 775.046599][T18641] uhci_hcd 0000:00:1d.0: detected 2 ports [ 775.047290][T18641] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 775.052655][T18641] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 775.058366][T18641] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 775.058381][T18641] usb usb1: Product: UHCI Host Controller [ 775.058389][T18641] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 775.058398][T18641] usb usb1: SerialNumber: 0000:00:1d.0 [ 775.060172][T18674] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 775.067989][T18641] hub 1-0:1.0: USB hub found [ 775.072137][T18641] hub 1-0:1.0: 2 ports detected [ 775.073856][T18672] hsr_slave_1 (unregistering): left promiscuous mode [ 775.100203][T18675] FAULT_INJECTION: forcing a failure. [ 775.100203][T18675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.100237][T18675] CPU: 3 UID: 0 PID: 18675 Comm: syz.4.3566 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.100276][T18675] Tainted: [L]=SOFTLOCKUP [ 775.100282][T18675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 775.100289][T18675] Call Trace: [ 775.100296][T18675] [ 775.100304][T18675] dump_stack_lvl+0x100/0x190 [ 775.100331][T18675] should_fail_ex.cold+0x5/0xa [ 775.100352][T18675] _copy_to_user+0x32/0xd0 [ 775.100373][T18675] __sys_bpf+0x35bd/0x4a30 [ 775.100394][T18675] ? __pfx___sys_bpf+0x10/0x10 [ 775.100418][T18675] ? irqentry_exit+0x24d/0xa10 [ 775.100441][T18675] ? lockdep_hardirqs_on+0x7d/0x110 [ 775.100475][T18675] ? ksys_write+0x190/0x250 [ 775.100493][T18675] ? lock_acquire+0x1d1/0x380 [ 775.100533][T18675] ? fput+0x7c/0x100 [ 775.100555][T18675] ? __ia32_sys_bpf+0xcc/0x170 [ 775.100569][T18675] __ia32_sys_bpf+0xcc/0x170 [ 775.100587][T18675] ? __do_fast_syscall_32+0xb3/0x8b0 [ 775.100613][T18675] __do_fast_syscall_32+0x13a/0x8b0 [ 775.100638][T18675] ? lockdep_hardirqs_on+0x7d/0x110 [ 775.100659][T18675] do_fast_syscall_32+0x32/0x70 [ 775.100683][T18675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 775.100703][T18675] RIP: 0023:0xf705efec [ 775.100723][T18675] Code: Unable to access opcode bytes at 0xf705efc2. [ 775.100731][T18675] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 775.100747][T18675] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000080000880 [ 775.100754][T18675] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 775.100764][T18675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 775.100774][T18675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.100784][T18675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 775.100807][T18675] [ 775.278062][T14292] usb 13-1: USB disconnect, device number 5 [ 775.280395][T14292] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 775.280696][T14292] garmin_gps 13-1:1.0: device disconnected [ 775.319065][T18674] md/raid:md0: not clean -- starting background reconstruction [ 775.325724][T18674] md/raid:md0: device ram0 operational as raid disk 0 [ 775.367204][T18674] md/raid:md0: raid level 5 active with 1 out of 1 devices, algorithm 0 [ 775.375094][T ** replaying previous printk message ** [ 775.375094][T18674] ------------[ cut here ]------------ [ 775.375102][T18674] UBSAN: shift-out-of-bounds in ./include/linux/log2.h:57:13 [ 775.375113][T18674] shift exponent 64 is too large for 64-bit type 'long unsigned int' [ 775.375126][T18674] CPU: 3 UID: 0 PID: 18674 Comm: syz.6.3567 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.375142][T18674] Tainted: [L]=SOFTLOCKUP [ 775.375147][T18674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 775.375155][T18674] Call Trace: [ 775.375160][T18674] [ 775.375165][T18674] dump_stack_lvl+0x100/0x190 [ 775.375184][T18674] ubsan_epilogue+0xa/0x30 [ 775.375203][T18674] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 775.375225][T18674] raid5_set_limits+0x310/0x53c [ 775.375243][T18674] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 775.375257][T18674] ? __pfx_raid5_set_limits+0x10/0x10 [ 775.375288][T18674] raid5_run.cold+0x55e/0xd51 [ 775.375311][T18674] md_run+0xc2f/0x2510 [ 775.375327][T18674] ? __pfx_md_run+0x10/0x10 [ 775.375339][T18674] ? set_disk_ro+0x1b7/0x210 [ 775.375356][T18674] ? __pfx_set_disk_ro+0x10/0x10 [ 775.375374][T18674] do_md_run+0x36/0x660 [ 775.375387][T18674] array_state_store+0x9c5/0xcf0 [ 775.375402][T18674] md_attr_store+0x1c5/0x330 [ 775.375417][T18674] ? __pfx_md_attr_store+0x10/0x10 [ 775.375433][T18674] sysfs_kf_write+0xf2/0x150 [ 775.375446][T18674] kernfs_fop_write_iter+0x3e0/0x5f0 [ 775.375462][T18674] ? __pfx_sysfs_kf_write+0x10/0x10 [ 775.375475][T18674] vfs_write+0x6af/0x1050 [ 775.375487][T18674] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 775.375505][T18674] ? __pfx_vfs_write+0x10/0x10 [ 775.375515][T18674] ? find_held_lock+0x2b/0x80 [ 775.375537][T18674] ksys_write+0x12a/0x250 [ 775.375548][T18674] ? __pfx_ksys_write+0x10/0x10 [ 775.375563][T18674] __do_fast_syscall_32+0x13a/0x8b0 [ 775.375580][T18674] ? lockdep_hardirqs_on+0x7d/0x110 [ 775.375597][T18674] do_fast_syscall_32+0x32/0x70 [ 775.375614][T18674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 775.375629][T18674] RIP: 0023:0xf6fcefec [ 775.375642][T18674] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 775.375648][T18674] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 775.375660][T18674] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000a40 [ 775.375667][T18674] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 775.375673][T18674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 775.375679][T18674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.375685][T18674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 775.375699][T18674] [ 775.375704][T18674] ---[ end trace ]--- [ 775.375709][T18674] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 775.459019][T18674] CPU: 3 UID: 0 PID: 18674 Comm: syz.6.3567 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.462586][T18674] Tainted: [L]=SOFTLOCKUP [ 775.463947][T18674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 775.467139][T18674] Call Trace: [ 775.468208][T18674] [ 775.469086][T18674] dump_stack_lvl+0x100/0x190 [ 775.470481][T18674] vpanic+0x553/0x970 [ 775.471744][T18674] ? __pfx_vpanic+0x10/0x10 [ 775.473179][T18674] panic+0xd1/0xe0 [ 775.474391][T18674] ? __pfx_panic+0x10/0x10 [ 775.475799][T18674] check_panic_on_warn.cold+0x19/0x34 [ 775.477487][T18674] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 775.479644][T18674] raid5_set_limits+0x310/0x53c [ 775.481220][T18674] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 775.483000][T18674] ? __pfx_raid5_set_limits+0x10/0x10 [ 775.484721][T18674] raid5_run.cold+0x55e/0xd51 [ 775.486235][T18674] md_run+0xc2f/0x2510 [ 775.487561][T18674] ? __pfx_md_run+0x10/0x10 [ 775.488993][T18674] ? set_disk_ro+0x1b7/0x210 [ 775.490468][T18674] ? __pfx_set_disk_ro+0x10/0x10 [ 775.492077][T18674] do_md_run+0x36/0x660 [ 775.493395][T18674] array_state_store+0x9c5/0xcf0 [ 775.494983][T18674] md_attr_store+0x1c5/0x330 [ 775.496452][T18674] ? __pfx_md_attr_store+0x10/0x10 [ 775.498097][T18674] sysfs_kf_write+0xf2/0x150 [ 775.499562][T18674] kernfs_fop_write_iter+0x3e0/0x5f0 [ 775.501242][T18674] ? __pfx_sysfs_kf_write+0x10/0x10 [ 775.502883][T18674] vfs_write+0x6af/0x1050 [ 775.504253][T18674] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 775.506083][T18674] ? __pfx_vfs_write+0x10/0x10 [ 775.507628][T18674] ? find_held_lock+0x2b/0x80 [ 775.509114][T18674] ksys_write+0x12a/0x250 [ 775.510487][T18674] ? __pfx_ksys_write+0x10/0x10 [ 775.512022][T18674] __do_fast_syscall_32+0x13a/0x8b0 [ 775.513666][T18674] ? lockdep_hardirqs_on+0x7d/0x110 [ 775.515317][T18674] do_fast_syscall_32+0x32/0x70 [ 775.516882][T18674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 775.518865][T18674] RIP: 0023:0xf6fcefec [ 775.520156][T18674] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 775.522246][T18674] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 775.524820][T18674] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000a40 [ 775.527280][T18674] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 775.529743][T18674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 775.532252][T18674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.534957][T18674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 775.537457][T18674] [ 775.538975][T18674] Kernel Offset: disabled [ 775.540410][T18674] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:59:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000000000 RDI=ffff88802b241dd8 RBP=ffff88802b241dd8 RSP=ffffc9000d61efc0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000200 R11=ffff88807ffd6900 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e691c0 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096960000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71a3200 CR3=0000000065079000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801cf0cb00 RSI=ffffffff81b65e9e RDI=ffff88801cf0cb00 RBP=0000000000000001 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=0000000000000000 RIP=ffffffff81b65e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f740d8b4 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002b400000000 0000000800000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff81e9a74c RDX=0000000000000001 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000042fda8 RSP=ffffc9000042f958 R8 =0000000000000004 R9 =0000000000000003 R10=0000000000000002 R11=000000002d2d2d2d R12=ffffffff8fbd9100 R13=ffffc9000042fda8 R14=0000000000000000 R15=ffffc9000042fdb4 RIP=ffffffff820b5bec RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000804ad018 CR3=000000007273f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc90006f97000 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000036 R14=000000000000000a R15=ffffc90006f97318 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f6fcf000 CR3=000000004a758000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000