last executing test programs: 20m1.104708226s ago: executing program 2 (id=1716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'c'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc0}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) 20m1.025283055s ago: executing program 2 (id=1717): getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) syz_usb_connect(0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28080) 20m0.465699932s ago: executing program 2 (id=1719): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab", 0x2c, 0x40, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 20m0.465472829s ago: executing program 2 (id=1720): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 20m0.225177491s ago: executing program 2 (id=1724): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x13, 0x5, 0xffff}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 19m59.862095108s ago: executing program 2 (id=1729): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe654, 0x1, 0x1, 0x80000}, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x1, 0x4f3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12015002006117080423420250710102030109"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x35315258, 0x0, 0x0, 0x0, 0x7, 0x400}}) 19m59.691058729s ago: executing program 32 (id=1729): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe654, 0x1, 0x1, 0x80000}, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x1, 0x4f3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12015002006117080423420250710102030109"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x35315258, 0x0, 0x0, 0x0, 0x7, 0x400}}) 13m20.195057451s ago: executing program 0 (id=4314): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x81001f, &(0x7f0000000200)='_\xad+\x01%i\xa1\xb6\xa3\x13\xc1\xed\x8f\x05\xdc\x99\xcc7\x8f\x85\x94\xc6\xd2\xca\xde\x1ay\xfbop\\\a\x7f@7\x96\xf52\xaf3+\xabd\x1179\xcc\xd8\xcb\xab[\x8a\xa2v\x98Q\xe0\xce7\xd3\x86Z>\x17\x03\tF\xfe.w\xd3\r\x807\xc7\xfd;\xa4H=\xe9\xa6\xad1$\xb0\xf0\xe9\xefK\xe3\xaaG\xb8<\x84\xc2xzl\xb8\xdcI\xa6W\xc2D\x7f\x91_2\x11_\x86\xc7\xa9\xbb\'\xf8W[\xabe\xb0\xf8\xbb\xcf\x15\x18H\x94\xdbX\xdc\xba\xb6}0\xbedf\x89\f\x94\xf1\xd6\xe3\xc7\x10G\x16b\xaaG{\xdd\x93\xaa_g?}\x0f\x0f\x94\x13C/\aw\x06Th-o\xac\x92\xb5\x98\x89\xc0wy\xe4K\xa4\x9e\am\xa7m\xc9]^\xdf\x82\xae(A\xb3\xb0\xdd_\x918>\xf2\xe7\xd0B\xe2\'\xafz2\xe8\xe2\xc2p\x86T\f\xd0\x84R.\x02C\xb8&\x13\xe8r\x95\x9f\xd9E') 13m20.101262651s ago: executing program 0 (id=4315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}}, 0x44094) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x23, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 13m19.832235405s ago: executing program 0 (id=4317): socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="70020000130029"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x0, 0x0, 0x300}, 0x9c) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) gettid() syz_usb_connect(0x0, 0xb27, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0x51, 0xc9, 0xdb, 0x20, 0x413c, 0x81a6, 0x9768, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb15, 0x3, 0x36, 0x8, 0x40, 0x3, [{{0x9, 0x4, 0x53, 0x1, 0xe, 0x6c, 0x55, 0x50, 0x6, [], [{{0x9, 0x5, 0x2, 0x8, 0x20, 0x77, 0x2, 0x1}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x5, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x7, 0x1c}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xd8, 0x2, 0x1, [@generic={0xce, 0xe0f5c7d1545f574f, "84a9769c2ef81d58c8ad5656930e241b2613cac2669b1b47fd40c559f9cf2bc01713c6409f77dab65f0c1af84ecfead52fb701fc62f19e7f72bb2a36dcb9cbcce36ab0f806d5c4a3d3372b3eb9c3b3e2f7aed4aa2bdb1e2b0aaf2ef33e21b01944aca55e5c694b8e4fc029070077d84162002e59f2ddf75974d05ead53575f4e52259e86693440edc8cda842515c73575e2aeab1aca478ce14b6a556c9e86386f968ab579ffe32ab644272dcd45f8c404d0823476d56b10a117638f17301aaf2870c7c480b1339f3d0b17734"}, @generic={0xad, 0xe, "7f407b25f8c8d9ffd2bcce3bb583e1f602f3c68ffeb77cfa0cc099fe19001a4b413ab98370cf9e9fcf55d620ce540f2387ce60acf55b0606cfcd8217b66ac9a34dccc7af1e84fff33386e340a72658f3d78d0258b2b2ab38e7bc1ae22425b4a4303f495bfd8a880c30488cd1a3456ddb7d52b1a291b17ca732a21fb00dcac87af645b3e4f27d792ae50e889e88ba6d478fe561973f944fc6ebda1f05b3bb0543eae808615e3f06144d19f4"}]}}, {{0x9, 0x5, 0x4dd1c29bb33a83e8, 0x0, 0x400, 0x9, 0x82, 0x73}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xd, 0xf1, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x4d, 0x2, 0x9, [@generic={0x101, 0x4, "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"}, @generic={0x65, 0xe, "c26f2cb404549b8cd845a68ad5469d31afd250b2b8621ce2d90726e987ae142dba110a0feb2352af5e5b9f33518570b3d4041473fc156d9230c78552fc7438c8dc698b1b5ef34746d46e55bb0fa0425474996030faafbad2987254373b4f9972c35744"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0x1, 0x50, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xdc}]}}, {{0x9, 0x5, 0xa, 0xd419efae6547b20a, 0x20, 0x9, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x50}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x5, 0x5, 0xec}}, {{0x9, 0x5, 0x80, 0x4, 0x7ff, 0x0, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x7b18feacd0866c42, 0xd6, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xfffc}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x8, 0x0, 0xe}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x7, 0x3, 0xba}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x0, 0x7, 0x20, [@generic={0x1b, 0x10, "7e65f39d87a68277e56fcaa0f90da6465567cf4bc52b18c191"}]}}]}}, {{0x9, 0x4, 0x23, 0x9, 0x8, 0x1, 0x1, 0x1b, 0xe3, [@generic={0x102, 0x21, "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"}, @generic={0xc3, 0x30, "989e8656bab65bd7956ddfc4204204453c00168c6ceed60331bffcc79ad0770919012049a617ee1844cceee694459d4d0e3b84ef711da26b38923f45d5f6f5818fd64dcb9c0f8ca96248c7c1f6be27127ac299af1898f0a6a37675489cfff3118340533227005bff2c620d6f98b618521e296252d83b7534bf6e6cda8ffd461ff8366ab60920fadbc9581a882c0c2e1bdfdaf0f9567edc6595f1f25ce260a9c8a26048b785abd71e1d8856981f2c312afdf4dde3425c2ad998fa77783a065d3ea1"}], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x4, 0x0, 0x2, [@generic={0xd8, 0x8, "dae23aa0bb3cce196122db4421f72aa2f8a46fed6ae52d218de67609dc22603288fa52ed239cd94d7c74a62796ba4a1c0f471595abe182110ad1e1738ad84274ac099a170227a7669e0ee63add70e4b077c96e11c7df8071236544a0c8dc69386341cb5944299072ea6c11dd3d5594fe7fe7994225271d044946c4ffaaacb478a17935f1102ff4759cd8a7b8e47f8e699464734fca5f2ac215ba72d3d46c3d85df6391dedaedd7842927baa51d20dcd278d605f520fab4a57011b34cefffad610cbad79e68e20ff59bd873334c045950ce6527196dc4"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0xbb, 0x8c, 0xb, [@generic={0xec, 0xf, "20b9cb1d675db2a513cd7129c9ad5a2b3e22dc5b954e71618aeea52d37bcc8bb431960c3d38b79d4043ef8d7018c4e8856b44ddb94da919bd8dcf00bb9b25148266f2ec8c4a334b1c959802196050ac139988305cc9df34bcec06f4ab9e52420f9f8382a4fa6e1e6276144e3aba13f10d84f55a86263f8cb7f4a284643a64a1c1ab441832dd5423bb389f31f49f6bea7734e4918824ef230789b8d8af0ec84d36522ae32b1818a4e4e9ce0b726ab6513b2127cd4e520b528b97494b6d01ceee4e2d3909fe880b7b9aacd3e60b857c365474960ffcc5adebc1537f5f7d89f965a74f106e6b74543cf1719"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x8, 0xf1, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x7, 0x4, 0x4}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xcc, 0xf9, 0x1, [@generic={0xec, 0x5, "1bc8e1a1933225d295e801b5fede28765e137abda588d9c1642fe34b8fdbdd4ec3f29da818b98b0e07b448bbed88c4a043614aa8958600d119fbbecf6dd960953929fc5719d8b7c54dbe5ad593d4ce001b2057e43084769a9617a974c5cd5d6983dceb1d4478600ac071022558ee87cf4b1554472d2a49459ba3e0a5930e7282e261ba2ae20da7d5bef3130260620378dee9c295f1dc89d331b10f9dafbc1f24c308567a3682a56e922cd4ee57ce25b0349e6226d547d27ffbb5590a91ee281cf6462cc46a69ca6f4530784784a31b46fbb4bdf1134eeccdf0f772ec7c94eb900291c37527f357858f54"}, @generic={0x3b, 0x3, "cb0d2f0e494c9750706939f1058306119e79646ceb60dc00b490e34ca49bb6e6e649ff46d7399f0612cb63590967983b6f0f0c16e963af0a5d"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x5, 0x4, 0x7c, [@generic={0x5a, 0xb, "68f2c1fa4d8a801fcddff1da9d9607989e25248123d0445a06626359e9ee5662bc073bc3255e886b0455adc698fe601ea1bdb6ab26f5c88fc4e9244bde2b8c3624e5e8ff24495b5eb2135df81e0977c6270145e4e30c026e"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xf, 0x8c}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x6, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x4, 0xfab}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0xc, 0x9, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x7}, @generic={0xb, 0xf, "bf98ca9e88e1b8e558"}]}}]}}, {{0x9, 0x4, 0x80, 0x3, 0x6, 0xb0, 0xa6, 0x1b, 0x4, [], [{{0x9, 0x5, 0x4, 0x10, 0x8, 0x4, 0x7, 0x4, [@generic={0xeb, 0x24, "b149ff651ff44f33663cb3bf42368a3841c16949523cabf70fc34e9356feac7465b6337bfec0b6ea9619b987a631c61f24971e0c32ca5a7da319183301cce69d136133907f805bcb91650c983de8218c2eed16f8a17190cf0b2fd434fe389902b56caab2c822ecf6e2685085f192a2c0e74c52f1a566d4c43cb313839e07ab37b268d883affd60d8569b72fa315c24f72a138993af80c5588089d7f1cd3099950d1a058af151129051db40b6bd0bc8c2e2015cc16e1a3f8a302c4405cbef9e2a0d5f8a5b71e9f9d5f483c33eaeac9ee670af6a9511c62fa4913f7ce08c640f2695ed2b577867f033ca"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x300, 0xd, 0x3, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7, 0x6}]}}, {{0x9, 0x5, 0xd, 0x13, 0x40, 0xf7, 0x3, 0x40}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x2, 0x2, 0x4}}, {{0x9, 0x5, 0xa, 0x10, 0x30, 0x3, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3}, @generic={0xb3, 0xa, "4c03a485940119cf127487cdd56c705506142b523eb5e50c5f25408f161b8e91deddfeac16d70516dbac6874ff5d503cf5a3130ddd89a288ea4b0323787abe51057ae4ff5a7412a099749bfb39fe5af6a6dec037417e0281c70c002bd975d69e8044a631927980c5b947c5ee8f19364219e2a0f528b7b756f0ab72eaf7b83c07aa0d23316ce6f94e9f6724c25e60749612d05d845ed72de8966c6a9f29e6d87b6558bce9cb1f88f0e83bcf1316fb6cbac4"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x5e, 0x4, 0x51}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x6, 0x6e, 0xf, 0x40, 0x4}, 0xf, &(0x7f0000000480)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x5, 0x5, 0xfff}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x409}}]}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="40000f0000000116e0875a3c3e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, &(0x7f0000000180)={0xc, &(0x7f00000000c0)={0x0, 0x6, 0x42, {0x42, 0x11, "f89f24839085b39c5b32b8aaa42e25d6857157481ddd0d6bfc713436487f4754f1dce68776d4e5e4041bf3873829c903fc4031c8ccc811fee10a75b6e51f2db1"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20161f0000006ab56b738ec34ab670aca1ddefa0d280462a7bf238fabde6ce16b5d981f0bf"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000280)={0xc0, 0xa1, 0x4, 0xdc12}, &(0x7f00000002c0)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000300)={0xc0, 0xa2, 0x2f, "b98679138aa098f79bfd549a76599d8b8c9f15cfef46eb46187deb59a59c3373aa6e8db4abb1fd756b004a776d8a15"}}) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000380)=ANY=[], 0x0) 13m17.531938485s ago: executing program 0 (id=4323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x154, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x7d}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffff, 0x8, 0x4, 0xd, 0xb, 0x1f, 0x2}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4048810}, 0x4000010) r5 = socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x44) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000023000000000000000023000085000000bc00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010300000000ffdbdf2517000000afb24c53df57663e74ee7cc5a77f884cd8a0e0a3d462f989282ff6ffd8407660d367e98d086a0c29993d458ecefb88dc49de5397745fa6b046de6d2bcbd64c90ab08b9014376ffa3f01dacfcbde9ffbcb5730d9b32359f81afb1e5ca05131a1b7f0a32b8eaccdd760402d833ae2409a628dea243a964a7"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="584100002c2d3ce2512f1ea3c365f432fa94eb1f5180430c8ab2ab45269c733389f893bd355fc5950e", @ANYRES16=r9, @ANYBLOB="00082abd7000fedbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x810) bind$packet(r5, &(0x7f0000000180)={0x11, 0x18, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$unix(0x1, 0x1, 0x0) listen(r11, 0x0) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000014000101a4bd7000fddbdf25011f88104e244e2203000000ff"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) setxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000300"/18, @ANYRES32=r13, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) socket$l2tp(0x2, 0x2, 0x73) 13m17.44414209s ago: executing program 0 (id=4326): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xc, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, 0x0, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) 13m16.667538275s ago: executing program 0 (id=4334): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_setup(0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) get_robust_list(r0, 0x0, &(0x7f00000006c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) dup(r4) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r5, 0x0) r6 = syz_io_uring_setup(0x2532, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1003, 0x20e}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 13m16.606282506s ago: executing program 33 (id=4334): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_setup(0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) get_robust_list(r0, 0x0, &(0x7f00000006c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) dup(r4) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r5, 0x0) r6 = syz_io_uring_setup(0x2532, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1003, 0x20e}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 4m27.361898783s ago: executing program 3 (id=6714): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9, [@const={0x8, 0x0, 0x0, 0xa, 0x3}, @fwd={0x10}, @fwd={0x8}, @datasec={0xf, 0x0, 0x0, 0xf, 0x0, [{0x5, 0x5, 0x100}, {0x2, 0x0, 0x9}, {0x1, 0x0, 0x4}, {0x1, 0xec, 0x9}, {0x4, 0x5, 0x6}, {0x3, 0x1, 0x5}, {0x5, 0x95, 0x9}, {0x5, 0x4, 0x2}, {0x5, 0x401, 0x8}, {0x3, 0x7fff, 0x9}], '/W'}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5, 0x3de623f9}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x21, 0x0, 0xffffffff}, 0x28) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xb) write$char_usb(r3, &(0x7f0000000980)="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", 0x1000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$pfkey(0xffffff9c, &(0x7f00000002c0), 0xb81000, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000300)={0x7, 0x0, [{0x2c8, 0x0, 0xffffffffffffffe7}, {0xb05, 0x0, 0x9}, {0xaa1, 0x0, 0x9}, {0x88a, 0x0, 0x8}, {0x2c0, 0x0, 0x1}, {0x1b1, 0x0, 0x27}, {0x584, 0x0, 0x7fff}]}) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01002dbdb0ca152b7000ffdbdf2511000000"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$misdntimer(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00c0000a9adced875c24d7a4ea4366f76628aa650c80000e9fd9d3c22abd5800b7466ffe234a7c8ab4660ea689637f76009000000d453cab6435b45e3247b9a5ab0db62f2b039972f3e048ded81b7a8211195b58c7e", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fddbdf250300000008000500690f0000080005000000c01f480002800800090007000000080007000300000008000400107dffff14000100fe8000000000000000000000000000aa06000b0000000000080004000400000008000600100000003400028006000b000000000006000f0004000000060002004e2200000800060003000000060002004e2200000800070006000000"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x80) 4m27.282217265s ago: executing program 3 (id=6715): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write$binfmt_script(r3, 0x0, 0xd9) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) write(r0, 0x0, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4m27.072933663s ago: executing program 3 (id=6717): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x54) recvmmsg(r2, &(0x7f0000000000), 0x0, 0x2060, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x0) mlockall(0x2) r3 = shmget$private(0x0, 0x1000, 0x8, &(0x7f00001b1000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r3, 0xc) 4m26.225684372s ago: executing program 3 (id=6724): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x4) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) (async, rerun: 64) chdir(&(0x7f0000000240)='./file0\x00') r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$FS_IOC_RESVSP(r6, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 32) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x40) (rerun: 32) fadvise64(r8, 0xfff, 0x8, 0x2) 4m25.821497724s ago: executing program 3 (id=6725): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x3, &(0x7f0000000080), 0x4) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x2004c051, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="05000100ff3bedaa3494285f85a9266b0f6c5ac929caac322a95011b6af4514e0a0db26dd29627b578bd4c06eb1b67d9c9addbab8dac04ded15ecefbec42680ebeef3f6ac99627bc96d6b9d81e1f86efd0e207e11b56984ef224c72966dba362dbdefed0ff06b0c9bb3d9442745284f8cb63afdf2d"], 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 4m25.333349302s ago: executing program 3 (id=6727): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r1, r1, 0x0, 0x4800000009) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x134, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @remote, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7df}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2a43}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3f8, @empty, 0x45d9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x479, @remote, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000010}, 0x60004040) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) fstatfs(r5, &(0x7f00000003c0)=""/146) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fchmodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xfffffe5b) 4m25.145854213s ago: executing program 34 (id=6727): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r1, r1, 0x0, 0x4800000009) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x134, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @remote, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7df}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2a43}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3f8, @empty, 0x45d9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x479, @remote, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000010}, 0x60004040) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) fstatfs(r5, &(0x7f00000003c0)=""/146) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fchmodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xfffffe5b) 12.857921096s ago: executing program 6 (id=7817): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0) connect(r1, &(0x7f0000000140)=@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x80) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbef}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) r4 = syz_io_uring_setup(0x231e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x8, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x9901, 0x1, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 9.787708576s ago: executing program 6 (id=7831): mkdir(0x0, 0x100) open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x40, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x40}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0xc8080) readv(r7, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) 9.049239912s ago: executing program 1 (id=7832): syz_io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0x14ba, 0x8, 0x1, 0x135}, &(0x7f0000000040), &(0x7f00000000c0)) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="07000000020601080000000000000000000000000c00078005001500020054ed78ce09cc00000d0003006861736853a1616300000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x4}, 0x10) recvmmsg(r5, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000002c0)=""/3, 0x3}], 0x1}}], 0x1, 0x7fb14726fda9, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) close(r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r7, 0x0, 0x810) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.429484247s ago: executing program 6 (id=7839): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0) connect(r1, &(0x7f0000000140)=@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x80) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbef}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) r4 = syz_io_uring_setup(0x231e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x8, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x9901, 0x1, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 7.240259802s ago: executing program 1 (id=7840): r0 = socket(0x10, 0x803, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000019100)='net/rt_acct\x00') pread64(r1, &(0x7f0000000080)=""/102345, 0x18fc9, 0xc2d) ioctl$KVM_CAP_HYPERV_VP_INDEX(r1, 0x4068aea3, &(0x7f0000019080)) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000019140)=ANY=[@ANYBLOB="ca1e4ca2bfffc4ccecc1460abdaf9919ff274ba9d94fe6b15aeac794fa31730e3a5216e568f19db0164ac37baf5cbb5d0e915f24095d390c7c46df50b30718b6c2c2577a754b5de1c329539b4d2a1d8b97eb4b62757b2632034001f910980957213f5881586fc4f140ac477ee8d4928ce389484356aa7118f79996ecf84fbb7217ab9a278c494ed68c18df49ee4f44f71e0b8ee688c92a35acce1829f87961bf000770405b8a42554a0f393509557ecb1a4426851d0552", @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES16, @ANYRES8=r0, @ANYRESOCT=r2], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000082}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6.700163658s ago: executing program 5 (id=7842): r0 = creat(&(0x7f00000021c0)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)=0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x9000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x5000) sendfile(r5, r5, 0x0, 0x200900) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344}, 0xff, 0x1) syz_emit_ethernet(0x62, &(0x7f0000000680)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800456200540064000055069078ac141444ac1e00014e214e22", @ANYRES32=0x41424344, @ANYBLOB], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x8, 0x44, 0x65, 0x0, 0x3, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@rr={0x7, 0xb, 0x35, [@broadcast, @empty]}]}}, {{0x4e22, 0x4e23, r6, 0x41424344, 0x1, 0x0, 0x9, 0xc2, 0x5, 0x0, 0x9, {[@window={0x3, 0x3}, @generic={0x1, 0xc, "ff9a30062b66ab5f7573"}]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r4, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000340)=@task, 0x10}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x52b, 0xfffffff9, {{0x2f, 0x4, 0x0, 0x10, 0xbc, 0x65, 0x0, 0xf0, 0x2f, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x5b, 0x1, [{0x7, 0x8, "5f0d29f2e891"}, {0x5, 0x4, 'F7'}, {0x7, 0x6, "d302e613"}, {0x0, 0x7, "25377db07e"}, {0x1, 0xa, "aaca6a86c36eef60"}, {0x6, 0xf, "e62f455c0e71ac010ad81aff9a"}, {0x2, 0xa, "26547c702b4c69ce"}, {0x4, 0x10, "fa02e03feedcb48408ddd457177e"}, {0x1, 0x6, "134c9bf9"}, {0x7, 0x3, "8e"}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x9d, 0x3, 0x8, [{@private=0xa010900, 0x1}, {@empty}, {@multicast1, 0x62}, {@remote, 0x1ff}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xce, 0x1, 0x1, [{@empty, 0x7ff}, {@local, 0x4}, {@broadcast, 0x3}, {@rand_addr=0x64010102, 0x8000}]}]}}}}}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r7, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18) io_submit(r1, 0x1, &(0x7f0000000c80)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 5.534854511s ago: executing program 5 (id=7845): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) r1 = socket(0xa, 0x1, 0x0) r2 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000001c0)={0x3, {{0xa, 0xce24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x104) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @empty, 0xfffffe01}}}, 0x108) syz_open_procfs(0x0, 0x0) r4 = dup(0xffffffffffffffff) syz_io_uring_setup(0x2b9, &(0x7f0000000100)={0x0, 0x1c2a, 0x10100, 0x0, 0x400000, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000080)) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_INSN(r5, 0x8020640c, &(0x7f0000000040)={0x4000000, 0xfffffffffffffdd3, 0x0, 0x3, 0x8}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) 4.620182207s ago: executing program 5 (id=7847): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0xfdfdffff, 0xff600000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, &(0x7f00000000c0)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x3, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="620326ff4affaf056510120800afbcf711e12b7f96e5521c8cf217300100000093c1cdf632dbb86770380e8ddd9aff775f8eff5b0b0bc283e136f46c68c6586680", 0x8d}, {&(0x7f0000002300)="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", 0xfeef}], 0x2}, 0x4004) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x118, 0x50000089) 4.30647083s ago: executing program 6 (id=7848): r0 = inotify_init1(0x0) inotify_rm_watch(r0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004880) ftruncate(r1, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x10) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x3, 0x5, 0x4}) 4.110108852s ago: executing program 1 (id=7850): syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "001004", 0x0, 0x2b, 0x1, @remote, @mcast2}}}}, 0x0) 4.103717041s ago: executing program 1 (id=7851): socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000580)={&(0x7f0000d5e000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x9, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0xfffffffffffffe2e) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x9}, @timestamp], 0x5) r6 = inotify_init1(0x0) inotify_add_watch(r6, 0x0, 0xa4000121) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x124) close(r6) openat$procfs(0xffffff9c, &(0x7f0000000280)='/proc/mdstat\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) 3.717176554s ago: executing program 6 (id=7852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) fcntl$getownex(r3, 0x10, &(0x7f0000000280)) ioctl(r5, 0x8b22, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES64=r6, @ANYRES8=r0, @ANYRESHEX=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x8800}, 0x40084) socket$inet6_sctp(0xa, 0x5, 0x84) 2.835276496s ago: executing program 4 (id=7853): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x7}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x1) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000280)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x1402, 0x2, 0x70bd26, 0x24dfdbff}, 0x10}}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xc4, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xa6, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}, @generic="c3beb899adffc9c05eb8c1126ae35569f307076b0926b332d3469eb51c22e2ad08d45d9a15c8e07521442eb906e345d5f7f6c5826f5fcaef4b5dd7", @generic="6fbf19734b1cdba2c8622e21c82835e31a63b9eda6cd5afcf7d09d6c35db1f3455cea6e21829a8ff488d88ef4d77892be7211d9bbaa724fafb6253858450c6b156518155ecfa7e5d2f00a7394cab8c3dd121484859bc94b7a936aa", @typed={0x8, 0x65, 0x0, 0x0, @uid}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xe) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r6, 0x5605) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) close(0x4) fsopen(&(0x7f0000000000)='pipefs\x00', 0x1) 2.403967916s ago: executing program 1 (id=7854): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002100010027bd7000fedbdf250a1034ce020000030a000000c2036ad7dd74173f902f35cec74a142b2259dd5ae37bf378406e69e576f85f8e2818bf84842d5416793c9e1e5573f73dab3107ee72bb3cb96a79b6af472c42f4fcafcd02927b3a1aaaf714b5137a34ea05418739eeaf4ca71f936cf80df1ab39103f098eec6fbbb8454f6c1e2869b680c82f0a3c6de4394591aa5f3199294e349e1148477ed8441a3209486063cb963607311c917b796ec3869aca6169e29bf2d765f9ffc27038cf8fea9d17c8751515492667e2"], 0x1c}}, 0x0) 2.310334366s ago: executing program 1 (id=7855): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000780)='!', 0x6}]) (fail_nth: 1) 2.18980646s ago: executing program 6 (id=7856): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0) connect(r1, &(0x7f0000000140)=@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x80) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbef}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) r4 = syz_io_uring_setup(0x231e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x8, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x9901, 0x1, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 1.930269651s ago: executing program 4 (id=7857): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0xf4, 0x0, 0x0, 0x2) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x884e, 0xffffffff]}, 0x8) 1.929753462s ago: executing program 4 (id=7858): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') r1 = fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socket(0x6, 0x4, 0xf8000000) r4 = getpid() recvmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000006c0)=""/83, 0x53}, 0x4}, {{&(0x7f0000000740)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000900)=""/143, 0x8f}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f00000009c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000ac0)=""/73, 0x49}], 0x5, &(0x7f0000000b40)=""/99, 0x63}, 0x2}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000003300)=""/4100, 0x1004}, {&(0x7f0000000c80)=""/80, 0x50}], 0x2, &(0x7f0000000d40)=""/234, 0xea}, 0x4}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000001480)=@phonet, 0x80, &(0x7f0000001980)=[{&(0x7f0000001500)=""/171, 0xab}, {&(0x7f00000015c0)=""/231, 0xe7}, {&(0x7f00000016c0)=""/150, 0x96}, {&(0x7f0000001800)=""/26, 0x1a}, {0x0}, {&(0x7f0000001940)=""/49, 0x31}, {&(0x7f0000002a40)=""/207, 0xcf}], 0x7, &(0x7f0000002b40)=""/195, 0xc3}, 0xa}, {{&(0x7f0000002c40)=@nfc_llcp, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002cc0)=""/72, 0x48}, {&(0x7f00000019c0)=""/32, 0x20}, {&(0x7f0000002e40)=""/94, 0x5e}, {&(0x7f0000002ec0)=""/49, 0x31}, {&(0x7f00000003c0)=""/128, 0x80}], 0x5, &(0x7f0000002fc0)=""/211, 0xd3}, 0xf}], 0x7, 0x2163, &(0x7f00000031c0)={0x0, 0x989680}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000000c0), 0x0, 0x400c040) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000001480)=""/4122, 0x101a, 0x99) 1.52953554s ago: executing program 5 (id=7859): syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "001004", 0x0, 0x2b, 0x1, @remote, @mcast2}}}}, 0x0) 1.526767613s ago: executing program 5 (id=7860): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x3, 0x1, &(0x7f0000000100)="81", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) 980.008456ms ago: executing program 4 (id=7861): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0xffffffff) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xb9, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x10038, 0x0, 0x0}) 676.487799ms ago: executing program 5 (id=7862): socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000580)={&(0x7f0000d5e000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x9, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0xfffffffffffffe2e) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x9}, @timestamp], 0x5) r6 = inotify_init1(0x0) inotify_add_watch(r6, 0x0, 0xa4000121) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x124) close(r6) openat$procfs(0xffffff9c, &(0x7f0000000280)='/proc/mdstat\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) 219.846926ms ago: executing program 4 (id=7863): socket$igmp6(0xa, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socket(0x1d, 0x2, 0x6) r2 = syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x7945, 0x10, 0x8000, 0x8000e1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x9, 0x6000, @fd=r5, 0x100, 0x0, 0x0, 0x1c}) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r8, {0x7}}, './file1\x00'}) 0s ago: executing program 4 (id=7864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) fcntl$getownex(r3, 0x10, &(0x7f0000000280)) ioctl(r5, 0x8b22, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES64=r6, @ANYRES8=r0, @ANYRESHEX=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x8800}, 0x40084) socket$inet6_sctp(0xa, 0x5, 0x84) kernel console output (not intermixed with test programs): k_sendmsg+0x680/0xda0 [ 1302.636026][T29622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1302.636040][T29622] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1302.636059][T29622] ____sys_sendmsg+0xa54/0xc30 [ 1302.636075][T29622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1302.636095][T29622] ___sys_sendmsg+0x190/0x1e0 [ 1302.636111][T29622] ? __pfx____sys_sendmsg+0x10/0x10 [ 1302.636142][T29622] __sys_sendmsg+0x170/0x220 [ 1302.636154][T29622] ? __pfx___sys_sendmsg+0x10/0x10 [ 1302.636169][T29622] ? __pfx_ksys_write+0x10/0x10 [ 1302.636187][T29622] __do_fast_syscall_32+0xe3/0x8c0 [ 1302.636202][T29622] do_fast_syscall_32+0x32/0x70 [ 1302.636214][T29622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1302.636228][T29622] RIP: 0023:0xf705ef6c [ 1302.636238][T29622] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1302.636248][T29622] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1302.636259][T29622] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 1302.636266][T29622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1302.636272][T29622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1302.636278][T29622] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1302.636284][T29622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1302.636297][T29622] [ 1302.733311][T29624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7344'. [ 1302.800156][T18169] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1302.803058][T18169] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1302.806399][T18169] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1302.809746][T18169] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1302.813450][T18169] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 1302.818234][T18169] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1302.821592][T18169] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1302.822060][ T10] usb usb48-port1: unable to enumerate USB device [ 1302.826313][T18169] usb 6-1: Product: syz [ 1302.827830][T18169] usb 6-1: Manufacturer: syz [ 1302.844029][T18169] cdc_wdm 6-1:1.0: skipping garbage [ 1302.846072][T18169] cdc_wdm 6-1:1.0: skipping garbage [ 1302.847866][T18169] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1303.044667][T18169] usb 6-1: USB disconnect, device number 81 [ 1303.725513][T29635] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7347'. [ 1303.728964][T29635] netlink: 260 bytes leftover after parsing attributes in process `syz.5.7347'. [ 1303.738197][T29635] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7347'. [ 1303.798013][T29637] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1303.800152][T29637] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1303.802891][T29637] vhci_hcd vhci_hcd.0: Device attached [ 1304.068448][T26894] usb 46-1: SetAddress Request (105) to port 0 [ 1304.070608][T26894] usb 46-1: new SuperSpeed USB device number 105 using vhci_hcd [ 1304.466100][T29638] vhci_hcd: connection reset by peer [ 1304.468729][ T13] vhci_hcd vhci_hcd.4: stop threads [ 1304.470501][ T13] vhci_hcd vhci_hcd.4: release socket [ 1304.472633][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 1304.551121][T29645] FAULT_INJECTION: forcing a failure. [ 1304.551121][T29645] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.556277][T29645] CPU: 2 UID: 0 PID: 29645 Comm: syz.6.7349 Tainted: G L syzkaller #0 PREEMPT(full) [ 1304.556295][T29645] Tainted: [L]=SOFTLOCKUP [ 1304.556300][T29645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1304.556306][T29645] Call Trace: [ 1304.556311][T29645] [ 1304.556316][T29645] dump_stack_lvl+0x100/0x190 [ 1304.556336][T29645] should_fail_ex.cold+0x5/0xa [ 1304.556349][T29645] should_failslab+0xc2/0x120 [ 1304.556442][T29645] __kvmalloc_node_noprof+0xfa/0xa00 [ 1304.556457][T29645] ? io_rsrc_data_alloc+0x2c/0xa0 [ 1304.556472][T29645] ? trace_contention_end+0x140/0x180 [ 1304.556489][T29645] io_rsrc_data_alloc+0x2c/0xa0 [ 1304.556505][T29645] io_sqe_buffers_register.cold+0x16/0x582 [ 1304.556522][T29645] ? __pfx___mutex_lock+0x10/0x10 [ 1304.556536][T29645] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1304.556551][T29645] ? __fget_files+0x215/0x3d0 [ 1304.556568][T29645] ? __fget_files+0x21f/0x3d0 [ 1304.556586][T29645] __do_sys_io_uring_register+0x12f9/0x1ac0 [ 1304.556604][T29645] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1304.556617][T29645] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 1304.556632][T29645] ? __fget_files+0x21f/0x3d0 [ 1304.556649][T29645] ? fput+0x79/0x100 [ 1304.556659][T29645] ? ksys_write+0x1ac/0x250 [ 1304.556673][T29645] ? __pfx_ksys_write+0x10/0x10 [ 1304.556690][T29645] __do_fast_syscall_32+0xe3/0x8c0 [ 1304.556705][T29645] do_fast_syscall_32+0x32/0x70 [ 1304.556717][T29645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1304.556731][T29645] RIP: 0023:0xf706ef6c [ 1304.556740][T29645] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1304.556751][T29645] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ab [ 1304.556767][T29645] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1304.556774][T29645] RDX: 00000000800002c0 RSI: 000000000000011a RDI: 0000000000000000 [ 1304.556780][T29645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1304.556786][T29645] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1304.556792][T29645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1304.556806][T29645] [ 1304.633563][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.635699][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.719116][T29648] lo speed is unknown, defaulting to 1000 [ 1304.779189][T29651] netlink: 'syz.5.7350': attribute type 4 has an invalid length. [ 1304.781870][T29651] netlink: 'syz.5.7350': attribute type 1 has an invalid length. [ 1304.784672][T29651] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7350'. [ 1305.728577][T19483] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1305.879456][T19483] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1305.883756][T19483] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1305.889466][T19483] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1305.893843][T19483] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1305.898566][T19483] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 1305.907587][T19483] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1305.911937][T19483] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1305.917219][T19483] usb 10-1: Product: syz [ 1305.919252][T19483] usb 10-1: Manufacturer: syz [ 1306.104750][T19483] cdc_wdm 10-1:1.0: skipping garbage [ 1306.106932][T19483] cdc_wdm 10-1:1.0: skipping garbage [ 1306.110546][T19483] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1306.309708][ T34] usb 10-1: USB disconnect, device number 30 [ 1306.554258][T29688] lo speed is unknown, defaulting to 1000 [ 1306.614809][T29687] netlink: 'syz.4.7361': attribute type 4 has an invalid length. [ 1306.617397][T29687] netlink: 'syz.4.7361': attribute type 1 has an invalid length. [ 1306.619965][T29687] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7361'. [ 1307.338872][T29704] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1307.574980][T29707] binder: Unknown parameter 'appraise_type' [ 1307.585098][T29707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7367'. [ 1307.594540][T29707] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1308.038017][T29717] lo speed is unknown, defaulting to 1000 [ 1308.070135][T29717] netlink: 'syz.5.7371': attribute type 4 has an invalid length. [ 1308.072504][T29717] netlink: 'syz.5.7371': attribute type 1 has an invalid length. [ 1308.074817][T29717] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7371'. [ 1308.656291][T26908] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1308.827322][T26908] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1308.830050][T26908] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1308.861133][T26908] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1308.947215][T26908] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1308.950858][T26908] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 1308.969989][T26908] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1308.972861][T26908] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1308.975400][T26908] usb 10-1: Product: syz [ 1308.986011][T26908] usb 10-1: Manufacturer: syz [ 1309.064094][T26908] cdc_wdm 10-1:1.0: skipping garbage [ 1309.074700][T26908] cdc_wdm 10-1:1.0: skipping garbage [ 1309.077415][T26908] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1309.143681][T26894] usb 46-1: device descriptor read/8, error -110 [ 1309.283043][T26908] usb 10-1: USB disconnect, device number 31 [ 1309.536265][T26894] usb usb46-port1: attempt power cycle [ 1310.096296][T26894] usb usb46-port1: unable to enumerate USB device [ 1310.213293][T29754] vivid-007: disconnect [ 1310.217416][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 1310.217431][ T40] audit: type=1326 audit(1771082738.236:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29753 comm="syz.5.7381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1310.218677][T29753] vivid-007: reconnect [ 1310.220117][ T40] audit: type=1326 audit(1771082738.236:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29753 comm="syz.5.7381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1310.238047][ T40] audit: type=1326 audit(1771082738.236:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29753 comm="syz.5.7381" exe="/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1310.247332][ T40] audit: type=1326 audit(1771082738.236:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29753 comm="syz.5.7381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1310.256351][ T40] audit: type=1326 audit(1771082738.236:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29753 comm="syz.5.7381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1310.361994][T29757] lo speed is unknown, defaulting to 1000 [ 1310.397298][T29760] netlink: 'syz.5.7382': attribute type 4 has an invalid length. [ 1310.399890][T29760] netlink: 'syz.5.7382': attribute type 1 has an invalid length. [ 1310.402658][T29760] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7382'. [ 1312.114423][ T10] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1312.206756][T29801] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1312.208393][T29801] netlink: 188 bytes leftover after parsing attributes in process `syz.6.7390'. [ 1312.265959][ T10] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1312.269975][ T10] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1312.273657][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1312.276961][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1312.284227][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1312.288830][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1312.291963][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1312.294641][ T10] usb 9-1: Product: syz [ 1312.296067][ T10] usb 9-1: Manufacturer: syz [ 1312.300289][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 1312.301972][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 1312.304657][ T10] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1312.306605][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 1312.314906][T29803] lo speed is unknown, defaulting to 1000 [ 1312.330672][T29804] netlink: 'syz.5.7392': attribute type 4 has an invalid length. [ 1312.333845][T29804] netlink: 'syz.5.7392': attribute type 1 has an invalid length. [ 1312.337198][T29804] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7392'. [ 1312.557537][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1312.559771][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1312.562100][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1312.564360][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1312.566823][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1312.569108][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1312.571249][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1312.573526][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1312.575899][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1312.578078][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1312.580250][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1312.582535][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1312.585117][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1312.587837][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1312.589991][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1312.592110][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1312.594359][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1312.596600][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1312.598877][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1312.601039][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1312.612775][T19483] usb 9-1: USB disconnect, device number 66 [ 1312.615295][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1312.671094][T29812] hpfs: hpfs_map_sector(): read error [ 1312.963238][T29817] lo speed is unknown, defaulting to 1000 [ 1313.261632][T29823] netlink: del zone limit has 4 unknown bytes [ 1313.955791][T29834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7399'. [ 1316.139498][T18140] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1316.303456][T18140] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1316.306195][T18140] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1316.309314][T18140] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1316.312024][T18140] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1316.315504][T18140] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1316.320273][T18140] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1316.323232][T18140] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1316.325665][T18140] usb 9-1: Product: syz [ 1316.326957][T18140] usb 9-1: Manufacturer: syz [ 1316.334108][T18140] cdc_wdm 9-1:1.0: skipping garbage [ 1316.337015][T18140] cdc_wdm 9-1:1.0: skipping garbage [ 1316.344372][T18140] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1316.346337][T18140] cdc_wdm 9-1:1.0: Unknown control protocol [ 1316.614275][T18140] usb 9-1: USB disconnect, device number 67 [ 1316.614333][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1317.172075][T29884] team0 (unregistering): Port device team_slave_0 removed [ 1317.176348][T29884] team0 (unregistering): Port device team_slave_1 removed [ 1317.962777][T29895] bridge0: entered promiscuous mode [ 1317.965290][T29895] macsec1: entered promiscuous mode [ 1317.966977][T29895] macsec1: entered allmulticast mode [ 1317.971474][T29895] bridge0: entered allmulticast mode [ 1317.974075][T29895] bridge0: port 3(macsec1) entered blocking state [ 1317.977433][T29895] bridge0: port 3(macsec1) entered disabled state [ 1317.981226][T29895] bridge0: left allmulticast mode [ 1317.983258][T29895] bridge0: left promiscuous mode [ 1318.551251][ T10] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1318.711040][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1318.747521][ T10] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1318.750172][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1318.754486][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1318.759365][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1318.764677][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1318.768710][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1318.776268][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.991457][ T10] usb 9-1: usb_control_msg returned -32 [ 1318.996163][ T10] usbtmc 9-1:16.0: can't read capabilities [ 1319.010949][T27288] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 1319.054741][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.058174][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.061036][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.063936][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.067174][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.069997][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.073513][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.076340][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.079140][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.081963][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.084796][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.087604][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.090409][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.093892][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.096717][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.099508][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1319.177709][T27288] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1319.186750][T27288] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1319.190371][T27288] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1319.193867][T27288] usb 11-1: Product: syz [ 1319.195511][T27288] usb 11-1: Manufacturer: syz [ 1319.197335][T27288] usb 11-1: SerialNumber: syz [ 1319.408969][T27288] usblp 11-1:1.0: usblp1: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1319.627379][T18169] usb 11-1: USB disconnect, device number 9 [ 1319.631652][T18169] usblp1: removed [ 1319.820486][T27288] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1319.972605][T27288] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1319.975513][T27288] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1319.978763][T27288] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1319.981709][T27288] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1319.985220][T27288] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1319.989883][T27288] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1319.992916][T27288] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1319.995536][T27288] usb 6-1: Product: syz [ 1319.996938][T27288] usb 6-1: Manufacturer: syz [ 1320.006556][T27288] cdc_wdm 6-1:1.0: skipping garbage [ 1320.008362][T27288] cdc_wdm 6-1:1.0: skipping garbage [ 1320.013761][T27288] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 1320.016098][T27288] cdc_wdm 6-1:1.0: Unknown control protocol [ 1320.309551][ T10] usb 6-1: USB disconnect, device number 82 [ 1321.306832][T26894] usb 9-1: USB disconnect, device number 68 [ 1322.778956][T29948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1322.784264][T29948] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7430'. [ 1323.297007][T29963] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1323.299130][T29963] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1323.301877][T29963] vhci_hcd vhci_hcd.0: Device attached [ 1323.306413][T29963] vivid-003: ================= START STATUS ================= [ 1323.309169][T29963] vivid-003: RDS Tx I/O Mode: Controls [ 1323.311004][T29963] vivid-003: RDS Program ID: 32904 [ 1323.312786][T29963] vivid-003: RDS Program Type: 3 [ 1323.314532][T29963] vivid-003: RDS PS Name: VIVID-TX [ 1323.316329][T29963] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1323.320044][T29963] vivid-003: RDS Stereo: true [ 1323.321631][T29963] vivid-003: RDS Artificial Head: false [ 1323.323401][T29963] vivid-003: RDS Compressed: false [ 1323.325120][T29963] vivid-003: RDS Dynamic PTY: false [ 1323.326792][T29963] vivid-003: RDS Traffic Announcement: false [ 1323.328794][T19483] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1323.329672][T29963] vivid-003: RDS Traffic Program: true [ 1323.333192][T29963] vivid-003: RDS Music: true [ 1323.334809][T29963] vivid-003: ================== END STATUS ================== [ 1323.489844][T19483] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1323.492750][T19483] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1323.496051][T19483] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1323.499327][T19483] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1323.503176][T19483] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1323.508226][T19483] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1323.511360][T19483] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1323.514099][T19483] usb 9-1: Product: syz [ 1323.515453][T19483] usb 9-1: Manufacturer: syz [ 1323.522239][T19483] cdc_wdm 9-1:1.0: skipping garbage [ 1323.524115][T19483] cdc_wdm 9-1:1.0: skipping garbage [ 1323.526865][T19483] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1323.528976][T19483] cdc_wdm 9-1:1.0: Unknown control protocol [ 1323.583206][T26894] usb 40-1: SetAddress Request (74) to port 0 [ 1323.585903][T26894] usb 40-1: new SuperSpeed USB device number 74 using vhci_hcd [ 1323.778025][ C3] wdm_int_callback: 201 callbacks suppressed [ 1323.778042][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1323.778110][T18140] usb 9-1: USB disconnect, device number 69 [ 1323.780000][ C3] wdm_int_callback: 201 callbacks suppressed [ 1323.780011][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1323.780020][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1323.857721][T29964] vhci_hcd: connection reset by peer [ 1323.860871][ T93] vhci_hcd vhci_hcd.1: stop threads [ 1323.862805][ T93] vhci_hcd vhci_hcd.1: release socket [ 1323.864714][ T93] vhci_hcd vhci_hcd.1: disconnect device [ 1323.868508][T26908] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 1324.028402][T26908] usb 11-1: Using ep0 maxpacket: 8 [ 1324.032128][T26908] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 1324.035745][T26908] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1324.040090][T26908] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1324.044169][T26908] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1324.048525][T26908] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1324.053836][T26908] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1324.057585][T26908] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.268664][T26908] usb 11-1: usb_control_msg returned -32 [ 1324.270520][T26908] usbtmc 11-1:16.0: can't read capabilities [ 1324.324283][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.327223][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.330011][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.332892][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.335625][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.338471][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.341321][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.345164][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.348027][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.350873][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.353700][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.356517][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.359274][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.362060][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.369930][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.372818][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1324.437337][T29971] lo speed is unknown, defaulting to 1000 [ 1325.486364][T29987] FAULT_INJECTION: forcing a failure. [ 1325.486364][T29987] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.490674][T29987] CPU: 3 UID: 0 PID: 29987 Comm: syz.5.7442 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.490693][T29987] Tainted: [L]=SOFTLOCKUP [ 1325.490696][T29987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1325.490703][T29987] Call Trace: [ 1325.490707][T29987] [ 1325.490712][T29987] dump_stack_lvl+0x100/0x190 [ 1325.490732][T29987] should_fail_ex.cold+0x5/0xa [ 1325.490747][T29987] ? tomoyo_encode2+0xfb/0x3c0 [ 1325.490759][T29987] should_failslab+0xc2/0x120 [ 1325.490775][T29987] __kmalloc_noprof+0xe0/0x850 [ 1325.490788][T29987] ? d_absolute_path+0x136/0x1b0 [ 1325.490803][T29987] tomoyo_encode2+0xfb/0x3c0 [ 1325.490817][T29987] tomoyo_encode+0x29/0x50 [ 1325.490828][T29987] tomoyo_realpath_from_path+0x18c/0x690 [ 1325.490844][T29987] tomoyo_path_number_perm+0x23c/0x580 [ 1325.490860][T29987] ? tomoyo_path_number_perm+0x22e/0x580 [ 1325.490878][T29987] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1325.490908][T29987] ? find_held_lock+0x2b/0x80 [ 1325.490924][T29987] ? hook_file_ioctl_common+0x146/0x410 [ 1325.490941][T29987] ? __fget_files+0x215/0x3d0 [ 1325.490958][T29987] ? __fget_files+0x21f/0x3d0 [ 1325.490974][T29987] security_file_ioctl_compat+0xd3/0x230 [ 1325.490993][T29987] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1325.491009][T29987] __do_fast_syscall_32+0xe3/0x8c0 [ 1325.491024][T29987] do_fast_syscall_32+0x32/0x70 [ 1325.491037][T29987] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1325.491051][T29987] RIP: 0023:0xf705ef6c [ 1325.491060][T29987] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1325.491070][T29987] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1325.491081][T29987] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080104132 [ 1325.491088][T29987] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1325.491094][T29987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1325.491100][T29987] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1325.491107][T29987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1325.491120][T29987] [ 1325.491131][T29987] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1326.640400][T18140] usb 11-1: USB disconnect, device number 10 [ 1327.027060][T30008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1327.038489][T30008] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7446'. [ 1327.136933][ T5943] Bluetooth: hci4: command 0x0406 tx timeout [ 1327.256760][T26908] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1327.420476][T26908] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1327.423843][T26908] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1327.427202][T26908] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1327.430168][T26908] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1327.433648][T26908] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1327.441192][T26908] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1327.444306][T26908] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1327.446986][T26908] usb 6-1: Product: syz [ 1327.448770][T26908] usb 6-1: Manufacturer: syz [ 1327.473230][T26908] cdc_wdm 6-1:1.0: skipping garbage [ 1327.475071][T26908] cdc_wdm 6-1:1.0: skipping garbage [ 1327.482077][T26908] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1327.484759][T26908] cdc_wdm 6-1:1.0: Unknown control protocol [ 1327.777741][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1327.778100][T19483] usb 6-1: USB disconnect, device number 83 [ 1327.780583][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1327.780619][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1327.789687][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 1328.187926][T30024] FAULT_INJECTION: forcing a failure. [ 1328.187926][T30024] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.192374][T30024] CPU: 3 UID: 0 PID: 30024 Comm: syz.4.7452 Tainted: G L syzkaller #0 PREEMPT(full) [ 1328.192392][T30024] Tainted: [L]=SOFTLOCKUP [ 1328.192396][T30024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1328.192403][T30024] Call Trace: [ 1328.192408][T30024] [ 1328.192413][T30024] dump_stack_lvl+0x100/0x190 [ 1328.192433][T30024] should_fail_ex.cold+0x5/0xa [ 1328.192446][T30024] should_failslab+0xc2/0x120 [ 1328.192464][T30024] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1328.192477][T30024] ? __kernfs_new_node+0xd2/0x960 [ 1328.192492][T30024] __kernfs_new_node+0xd2/0x960 [ 1328.192502][T30024] ? kernfs_add_one+0x583/0x850 [ 1328.192516][T30024] ? __pfx___kernfs_new_node+0x10/0x10 [ 1328.192531][T30024] ? find_held_lock+0x2b/0x80 [ 1328.192547][T30024] ? kernfs_root+0xee/0x2a0 [ 1328.192557][T30024] ? kernfs_root+0xee/0x2a0 [ 1328.192570][T30024] kernfs_new_node+0x11b/0x1a0 [ 1328.192585][T30024] __kernfs_create_file+0x53/0x350 [ 1328.192603][T30024] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1328.192623][T30024] sysfs_create_file_ns+0x145/0x1e0 [ 1328.192640][T30024] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1328.192657][T30024] ? __pfx___up_read+0x10/0x10 [ 1328.192671][T30024] ? acpi_device_notify+0x464/0x500 [ 1328.192687][T30024] ? kobject_put+0xb9/0x640 [ 1328.192702][T30024] device_create_file+0xf2/0x1d0 [ 1328.192716][T30024] device_add+0x2cb/0x1950 [ 1328.192727][T30024] ? kfree_const+0x5a/0x70 [ 1328.192742][T30024] ? __pfx_device_add+0x10/0x10 [ 1328.192756][T30024] ? kfree_const+0x5a/0x70 [ 1328.192769][T30024] ? kfree+0x2ec/0x6b0 [ 1328.192784][T30024] device_create_groups_vargs+0x1f8/0x270 [ 1328.192797][T30024] device_create+0xed/0x130 [ 1328.192809][T30024] ? __pfx_device_create+0x10/0x10 [ 1328.192818][T30024] ? lockdep_init_map_type+0x5c/0x250 [ 1328.192832][T30024] ? timer_init_key+0x150/0x340 [ 1328.192845][T30024] ? ieee80211_roc_setup+0x136/0x270 [ 1328.192856][T30024] ? ieee80211_alloc_hw_nm+0x19c3/0x22a0 [ 1328.192873][T30024] mac80211_hwsim_new_radio+0x37f/0x57d0 [ 1328.192894][T30024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1328.192912][T30024] ? __nla_validate_parse+0x1e7/0x28b0 [ 1328.192926][T30024] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1328.192946][T30024] hwsim_new_radio_nl+0xc1f/0x1340 [ 1328.192962][T30024] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1328.192981][T30024] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 1328.192996][T30024] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 1328.193013][T30024] genl_family_rcv_msg_doit+0x214/0x300 [ 1328.193029][T30024] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1328.193043][T30024] ? genl_get_cmd+0x3ef/0x720 [ 1328.193060][T30024] ? bpf_lsm_capable+0x9/0x10 [ 1328.193075][T30024] ? security_capable+0x80/0x260 [ 1328.193091][T30024] ? ns_capable+0xd2/0xf0 [ 1328.193108][T30024] genl_rcv_msg+0x560/0x800 [ 1328.193123][T30024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1328.193138][T30024] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1328.193158][T30024] netlink_rcv_skb+0x159/0x420 [ 1328.193170][T30024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1328.193185][T30024] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1328.193203][T30024] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1328.193217][T30024] genl_rcv+0x28/0x40 [ 1328.193230][T30024] netlink_unicast+0x5aa/0x870 [ 1328.193244][T30024] ? __pfx_netlink_unicast+0x10/0x10 [ 1328.193262][T30024] netlink_sendmsg+0x8b0/0xda0 [ 1328.193277][T30024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1328.193291][T30024] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1328.193308][T30024] ____sys_sendmsg+0xa54/0xc30 [ 1328.193325][T30024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1328.193345][T30024] ___sys_sendmsg+0x190/0x1e0 [ 1328.193374][T30024] ? __pfx____sys_sendmsg+0x10/0x10 [ 1328.193406][T30024] __sys_sendmsg+0x170/0x220 [ 1328.193418][T30024] ? __pfx___sys_sendmsg+0x10/0x10 [ 1328.193435][T30024] ? __pfx_ksys_write+0x10/0x10 [ 1328.193453][T30024] __do_fast_syscall_32+0xe3/0x8c0 [ 1328.193467][T30024] do_fast_syscall_32+0x32/0x70 [ 1328.193480][T30024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1328.193494][T30024] RIP: 0023:0xf707ef6c [ 1328.193504][T30024] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1328.193515][T30024] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1328.193526][T30024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1328.193533][T30024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1328.193540][T30024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1328.193546][T30024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1328.193552][T30024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1328.193566][T30024] [ 1328.656215][T26894] usb 40-1: device descriptor read/8, error -110 [ 1329.276319][T26894] usb usb40-port1: attempt power cycle [ 1329.837830][T26894] usb usb40-port1: unable to enumerate USB device [ 1331.257412][T30071] /dev/nullb0: Can't open blockdev [ 1335.464269][T30123] netlink: 236 bytes leftover after parsing attributes in process `syz.4.7479'. [ 1335.467217][T30123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7479'. [ 1336.245663][T30139] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1336.248643][T30139] overlayfs: overlapping lowerdir path [ 1336.604276][T30147] /dev/nullb0: Can't open blockdev [ 1337.281937][T30161] lo speed is unknown, defaulting to 1000 [ 1338.401445][T30178] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1338.406956][T30178] overlayfs: overlapping lowerdir path [ 1338.628088][T30186] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1338.630900][T30186] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1338.634678][T30186] vhci_hcd vhci_hcd.0: Device attached [ 1338.652325][T30186] vivid-003: ================= START STATUS ================= [ 1338.655811][T30186] vivid-003: RDS Tx I/O Mode: Controls [ 1338.658046][T30186] vivid-003: RDS Program ID: 32904 [ 1338.660166][T30186] vivid-003: RDS Program Type: 3 [ 1338.662497][T30186] vivid-003: RDS PS Name: VIVID-TX [ 1338.664902][T30186] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1338.669287][T30186] vivid-003: RDS Stereo: true [ 1338.671436][T30186] vivid-003: RDS Artificial Head: false [ 1338.673999][T30186] vivid-003: RDS Compressed: false [ 1338.676291][T30186] vivid-003: RDS Dynamic PTY: false [ 1338.678433][T30186] vivid-003: RDS Traffic Announcement: false [ 1338.680931][T30186] vivid-003: RDS Traffic Program: true [ 1338.682980][T30186] vivid-003: RDS Music: true [ 1338.684557][T30186] vivid-003: ================== END STATUS ================== [ 1338.708194][T30189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7496'. [ 1338.941076][T26894] usb 40-1: SetAddress Request (78) to port 0 [ 1338.943063][T26894] usb 40-1: new SuperSpeed USB device number 78 using vhci_hcd [ 1338.966898][T30187] vhci_hcd: connection reset by peer [ 1338.968834][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1338.981315][ T12] vhci_hcd vhci_hcd.1: release socket [ 1338.983851][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1339.028486][T30195] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1339.030632][T30195] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1339.051653][T30195] vhci_hcd vhci_hcd.0: Device attached [ 1339.098641][T30195] vivid-003: ================= START STATUS ================= [ 1339.102031][T30195] vivid-003: RDS Tx I/O Mode: Controls [ 1339.104629][T30195] vivid-003: RDS Program ID: 32904 [ 1339.107023][T30195] vivid-003: RDS Program Type: 3 [ 1339.109398][T30195] vivid-003: RDS PS Name: VIVID-TX [ 1339.111949][T30195] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1339.116329][T30195] vivid-003: RDS Stereo: true [ 1339.118525][T30195] vivid-003: RDS Artificial Head: false [ 1339.121288][T30195] vivid-003: RDS Compressed: false [ 1339.124098][T30195] vivid-003: RDS Dynamic PTY: false [ 1339.126467][T30195] vivid-003: RDS Traffic Announcement: false [ 1339.129193][T30195] vivid-003: RDS Traffic Program: true [ 1339.131931][T30195] vivid-003: RDS Music: true [ 1339.134273][T30195] vivid-003: ================== END STATUS ================== [ 1339.332987][T30200] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1339.335760][T30200] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1339.339207][T30200] vhci_hcd vhci_hcd.0: Device attached [ 1339.340765][ T1454] usb 50-1: SetAddress Request (18) to port 0 [ 1339.343718][ T1454] usb 50-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1339.344377][T30200] vivid-004: ================= START STATUS ================= [ 1339.349101][T30200] vivid-004: RDS Tx I/O Mode: Controls [ 1339.352397][T30200] vivid-004: RDS Program ID: 32904 [ 1339.354548][T30200] vivid-004: RDS Program Type: 3 [ 1339.356566][T30200] vivid-004: RDS PS Name: VIVID-TX [ 1339.358687][T30200] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1339.362942][T30200] vivid-004: RDS Stereo: true [ 1339.364671][T30200] vivid-004: RDS Artificial Head: false [ 1339.366825][T30200] vivid-004: RDS Compressed: false [ 1339.368880][T30200] vivid-004: RDS Dynamic PTY: false [ 1339.371091][T30200] vivid-004: RDS Traffic Announcement: false [ 1339.373653][T30200] vivid-004: RDS Traffic Program: true [ 1339.375904][T30200] vivid-004: RDS Music: true [ 1339.377650][T30200] vivid-004: ================== END STATUS ================== [ 1339.394144][T30202] vhci_hcd: connection closed [ 1339.394444][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1339.397678][ T12] vhci_hcd vhci_hcd.4: release socket [ 1339.399489][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1339.615512][T30197] vhci_hcd: connection reset by peer [ 1339.617989][T22265] vhci_hcd vhci_hcd.6: stop threads [ 1339.619720][T22265] vhci_hcd vhci_hcd.6: release socket [ 1339.622382][T22265] vhci_hcd vhci_hcd.6: disconnect device [ 1340.390064][T30217] netlink: 'syz.1.7503': attribute type 1 has an invalid length. [ 1340.448099][T30217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1343.464548][ T40] audit: type=1326 audit(1771082771.493:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30265 comm="syz.1.7516" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1343.490415][ T40] audit: type=1326 audit(1771082771.493:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30265 comm="syz.1.7516" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18f78 code=0x7ffc0000 [ 1343.518263][ T40] audit: type=1326 audit(1771082771.493:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30265 comm="syz.1.7516" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1343.528323][ T40] audit: type=1326 audit(1771082771.503:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30265 comm="syz.1.7516" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18f78 code=0x7ffc0000 [ 1343.535661][ T40] audit: type=1326 audit(1771082771.503:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30265 comm="syz.1.7516" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1343.544540][ T40] audit: type=1326 audit(1771082771.503:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30265 comm="syz.1.7516" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18f78 code=0x7ffc0000 [ 1343.570195][ T40] audit: type=1326 audit(1771082771.503:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30265 comm="syz.1.7516" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1343.586737][ T40] audit: type=1326 audit(1771082771.503:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30265 comm="syz.1.7516" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1343.596084][ T40] audit: type=1326 audit(1771082771.503:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30265 comm="syz.1.7516" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18f78 code=0x7ffc0000 [ 1343.606448][ T40] audit: type=1326 audit(1771082771.503:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30265 comm="syz.1.7516" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18f78 code=0x7ffc0000 [ 1343.632070][T30266] dlm: plock device version mismatch: kernel (1.2.0), user (262149.1900544.0) [ 1343.998712][T26894] usb 40-1: device descriptor read/8, error -110 [ 1344.389356][T26894] usb usb40-port1: attempt power cycle [ 1344.614811][ T1454] usb 50-1: device descriptor read/8, error -110 [ 1344.948480][T26894] usb usb40-port1: unable to enumerate USB device [ 1345.018708][ T1454] usb usb50-port1: attempt power cycle [ 1345.357860][T30294] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1345.359954][T30294] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1345.368966][T30294] vhci_hcd vhci_hcd.0: Device attached [ 1345.595589][ T1454] usb usb50-port1: unable to enumerate USB device [ 1345.637898][T26894] usb 46-1: SetAddress Request (109) to port 0 [ 1345.640629][T26894] usb 46-1: new SuperSpeed USB device number 109 using vhci_hcd [ 1346.216568][T30305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7528'. [ 1346.323899][T30295] vhci_hcd: connection reset by peer [ 1346.328594][ T13] vhci_hcd vhci_hcd.4: stop threads [ 1346.330451][ T13] vhci_hcd vhci_hcd.4: release socket [ 1346.347223][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 1346.590680][T30318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1346.591937][T30318] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7533'. [ 1346.849075][T30284] Process accounting resumed [ 1347.492937][T30323] lo speed is unknown, defaulting to 1000 [ 1348.888217][T30334] netlink: del zone limit has 4 unknown bytes [ 1349.865577][T27288] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 1350.035500][T27288] usb 11-1: Using ep0 maxpacket: 8 [ 1350.045329][T27288] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 1350.050824][T27288] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1350.054464][T27288] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1350.065561][T27288] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1350.068885][T27288] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1350.073234][T27288] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1350.080440][T27288] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.318760][T30353] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1350.320833][T30353] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1350.348659][T30353] vhci_hcd vhci_hcd.0: Device attached [ 1350.360137][T27288] usb 11-1: usb_control_msg returned -32 [ 1350.362494][T27288] usbtmc 11-1:16.0: can't read capabilities [ 1350.374219][T30353] vivid-004: ================= START STATUS ================= [ 1350.382082][T30353] vivid-004: RDS Tx I/O Mode: Controls [ 1350.384324][T30353] vivid-004: RDS Program ID: 32904 [ 1350.390535][T30353] vivid-004: RDS Program Type: 3 [ 1350.392361][T30353] vivid-004: RDS PS Name: VIVID-TX [ 1350.394101][T30353] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1350.398348][T30353] vivid-004: RDS Stereo: true [ 1350.400250][T30353] vivid-004: RDS Artificial Head: false [ 1350.402429][T30353] vivid-004: RDS Compressed: false [ 1350.404540][T30353] vivid-004: RDS Dynamic PTY: false [ 1350.406539][T30353] vivid-004: RDS Traffic Announcement: false [ 1350.408873][T30353] vivid-004: RDS Traffic Program: true [ 1350.410991][T30353] vivid-004: RDS Music: true [ 1350.412785][T30353] vivid-004: ================== END STATUS ================== [ 1350.426921][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.430735][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.434691][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.438501][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.442257][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.446073][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.449845][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.454437][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.458649][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.462544][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.466027][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.469725][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.474307][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.478734][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.481865][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.484797][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1350.871233][T30354] vhci_hcd: connection reset by peer [ 1350.874155][T22264] vhci_hcd vhci_hcd.4: stop threads [ 1350.876800][T22264] vhci_hcd vhci_hcd.4: release socket [ 1350.879322][T26894] usb 46-1: device descriptor read/8, error -110 [ 1350.879338][T22264] vhci_hcd vhci_hcd.4: disconnect device [ 1351.275678][T26894] usb usb46-port1: attempt power cycle [ 1351.590223][T30364] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1351.592358][T30364] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1351.596189][T30364] vhci_hcd vhci_hcd.0: Device attached [ 1351.612275][T30364] vivid-003: ================= START STATUS ================= [ 1351.615212][T30364] vivid-003: RDS Tx I/O Mode: Controls [ 1351.617366][T30364] vivid-003: RDS Program ID: 32904 [ 1351.619665][T30364] vivid-003: RDS Program Type: 3 [ 1351.621784][T30364] vivid-003: RDS PS Name: VIVID-TX [ 1351.624086][T30364] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1351.629351][T30364] vivid-003: RDS Stereo: true [ 1351.631580][T30364] vivid-003: RDS Artificial Head: false [ 1351.634153][T30364] vivid-003: RDS Compressed: false [ 1351.636891][T30364] vivid-003: RDS Dynamic PTY: false [ 1351.639762][T30364] vivid-003: RDS Traffic Announcement: false [ 1351.642602][T30364] vivid-003: RDS Traffic Program: true [ 1351.645101][T30364] vivid-003: RDS Music: true [ 1351.647168][T30364] vivid-003: ================== END STATUS ================== [ 1351.764389][T30366] vhci_hcd: connection closed [ 1351.765646][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1351.772542][ T12] vhci_hcd vhci_hcd.1: release socket [ 1351.776677][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1351.845451][T26894] usb usb46-port1: unable to enumerate USB device [ 1352.700481][T27288] usb 11-1: USB disconnect, device number 11 [ 1353.050988][T30384] netlink: del zone limit has 4 unknown bytes [ 1354.091831][T30394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7553'. [ 1357.022230][T30433] siw: device registration error -23 [ 1358.220892][T30448] netlink: del zone limit has 4 unknown bytes [ 1359.943325][T30483] syzkaller0: entered promiscuous mode [ 1359.945736][T30483] syzkaller0: entered allmulticast mode [ 1360.305651][T30477] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1360.308344][T30477] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1360.312022][T30477] vhci_hcd vhci_hcd.0: Device attached [ 1360.325440][T30477] vivid-003: ================= START STATUS ================= [ 1360.328643][T30477] vivid-003: RDS Tx I/O Mode: Controls [ 1360.331312][T30477] vivid-003: RDS Program ID: 32904 [ 1360.333488][T30477] vivid-003: RDS Program Type: 3 [ 1360.335592][T30477] vivid-003: RDS PS Name: VIVID-TX [ 1360.337741][T30477] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1360.341907][T30477] vivid-003: RDS Stereo: true [ 1360.343411][T30477] vivid-003: RDS Artificial Head: false [ 1360.345121][T30477] vivid-003: RDS Compressed: false [ 1360.346723][T30477] vivid-003: RDS Dynamic PTY: false [ 1360.348407][T30477] vivid-003: RDS Traffic Announcement: false [ 1360.351292][T30477] vivid-003: RDS Traffic Program: true [ 1360.353323][T30477] vivid-003: RDS Music: true [ 1360.354758][T30477] vivid-003: ================== END STATUS ================== [ 1360.487290][T30485] vhci_hcd: connection closed [ 1360.487607][T16165] vhci_hcd vhci_hcd.1: stop threads [ 1360.491138][T16165] vhci_hcd vhci_hcd.1: release socket [ 1360.493088][T16165] vhci_hcd vhci_hcd.1: disconnect device [ 1360.754724][T30493] netlink: del zone limit has 4 unknown bytes [ 1360.937543][T30495] syz.6.7587 (30495): drop_caches: 2 [ 1361.399687][T19483] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 1361.564185][T19483] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1361.567206][T19483] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1361.570767][T19483] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1361.573796][T19483] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1361.577392][T19483] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1361.583072][T19483] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1361.586114][T19483] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1361.588743][T19483] usb 11-1: Product: syz [ 1361.592224][T19483] usb 11-1: Manufacturer: syz [ 1361.599045][T19483] cdc_wdm 11-1:1.0: skipping garbage [ 1361.600983][T19483] cdc_wdm 11-1:1.0: skipping garbage [ 1361.604313][T19483] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 1361.606323][T19483] cdc_wdm 11-1:1.0: Unknown control protocol [ 1361.853978][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 1361.854160][T19483] usb 11-1: USB disconnect, device number 12 [ 1361.856178][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 1361.859960][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1361.862912][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 1362.984916][T30530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7598'. [ 1363.010192][T30528] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1363.012323][T30528] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1363.015155][T30528] vhci_hcd vhci_hcd.0: Device attached [ 1363.024045][T30528] vivid-003: ================= START STATUS ================= [ 1363.028811][T30528] vivid-003: RDS Tx I/O Mode: Controls [ 1363.030584][T30528] vivid-003: RDS Program ID: 32904 [ 1363.034372][T30528] vivid-003: RDS Program Type: 3 [ 1363.036112][T30528] vivid-003: RDS PS Name: VIVID-TX [ 1363.038022][T30528] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1363.042517][T30528] vivid-003: RDS Stereo: true [ 1363.044401][T30528] vivid-003: RDS Artificial Head: false [ 1363.052084][T30528] vivid-003: RDS Compressed: false [ 1363.056827][T30528] vivid-003: RDS Dynamic PTY: false [ 1363.061912][T30528] vivid-003: RDS Traffic Announcement: false [ 1363.063701][T30528] vivid-003: RDS Traffic Program: true [ 1363.065522][T30528] vivid-003: RDS Music: true [ 1363.067221][T30528] vivid-003: ================== END STATUS ================== [ 1363.172712][T30536] netlink: 136 bytes leftover after parsing attributes in process `syz.5.7600'. [ 1363.176427][T30536] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1363.310686][T26894] usb 50-1: SetAddress Request (22) to port 0 [ 1363.313368][T26894] usb 50-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1363.690676][T30533] vhci_hcd: connection reset by peer [ 1363.693045][ T13] vhci_hcd vhci_hcd.6: stop threads [ 1363.695558][ T13] vhci_hcd vhci_hcd.6: release socket [ 1363.697770][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 1364.034499][T30552] netlink: del zone limit has 4 unknown bytes [ 1364.918128][ T6036] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1365.097833][ T6036] usb 6-1: Using ep0 maxpacket: 8 [ 1365.102396][ T6036] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1365.105380][ T6036] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1365.108940][ T6036] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1365.112142][ T6036] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1365.115608][ T6036] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1365.119952][ T6036] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1365.123005][ T6036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.340036][ T6036] usb 6-1: usb_control_msg returned -32 [ 1365.341888][ T6036] usbtmc 6-1:16.0: can't read capabilities [ 1365.418302][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.422584][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.426894][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.431247][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.435384][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.441898][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.446465][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.451157][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.455463][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.460139][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.464754][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.470534][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.474951][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.479629][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.488546][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.493621][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1365.991266][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1365.993969][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.048723][T30566] lo speed is unknown, defaulting to 1000 [ 1366.739377][T30584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7609'. [ 1367.045719][T30589] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1367.048453][T30589] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1367.075453][T30589] vhci_hcd vhci_hcd.0: Device attached [ 1367.178432][T30589] vivid-004: ================= START STATUS ================= [ 1367.181463][T30589] vivid-004: RDS Tx I/O Mode: Controls [ 1367.183211][T30589] vivid-004: RDS Program ID: 32904 [ 1367.185755][T30589] vivid-004: RDS Program Type: 3 [ 1367.187988][T30589] vivid-004: RDS PS Name: VIVID-TX [ 1367.300537][T30589] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1367.312160][T30589] vivid-004: RDS Stereo: true [ 1367.314279][T30589] vivid-004: RDS Artificial Head: false [ 1367.316700][T30589] vivid-004: RDS Compressed: false [ 1367.318752][T30589] vivid-004: RDS Dynamic PTY: false [ 1367.320869][T30589] vivid-004: RDS Traffic Announcement: false [ 1367.323488][T30589] vivid-004: RDS Traffic Program: true [ 1367.325859][T30589] vivid-004: RDS Music: true [ 1367.328684][T30589] vivid-004: ================== END STATUS ================== [ 1367.666572][T19483] usb 46-1: SetAddress Request (113) to port 0 [ 1367.668894][T19483] usb 46-1: new SuperSpeed USB device number 113 using vhci_hcd [ 1367.705134][ T10] usb 6-1: USB disconnect, device number 84 [ 1367.768482][T30590] vhci_hcd: connection closed [ 1367.784338][ T93] vhci_hcd vhci_hcd.4: stop threads [ 1367.788038][ T93] vhci_hcd vhci_hcd.4: release socket [ 1367.789964][ T93] vhci_hcd vhci_hcd.4: disconnect device [ 1368.149727][T19483] usb 46-1: enqueue for inactive port 0 [ 1368.387035][T26894] usb 50-1: device descriptor read/8, error -110 [ 1368.541552][T19483] usb usb46-port1: attempt power cycle [ 1368.554675][T30606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7614'. [ 1368.559161][T30606] input: syz0 as /devices/virtual/input/input56 [ 1368.786521][T26894] usb usb50-port1: attempt power cycle [ 1369.106795][T19483] usb usb46-port1: unable to enumerate USB device [ 1369.357668][T26894] usb usb50-port1: unable to enumerate USB device [ 1369.574369][T30615] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1369.576487][T30615] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1369.579258][T30615] vhci_hcd vhci_hcd.0: Device attached [ 1369.582405][T30615] random: crng reseeded on system resumption [ 1369.674342][T30623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1369.678365][T30623] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7618'. [ 1369.882087][T26894] usb 46-1: SetAddress Request (117) to port 0 [ 1369.884827][T26894] usb 46-1: new SuperSpeed USB device number 117 using vhci_hcd [ 1369.897408][T30619] vhci_hcd: connection closed [ 1369.897620][T16165] vhci_hcd vhci_hcd.4: stop threads [ 1369.900778][T16165] vhci_hcd vhci_hcd.4: release socket [ 1369.902887][T16165] vhci_hcd vhci_hcd.4: disconnect device [ 1369.908492][T26894] usb 46-1: enqueue for inactive port 0 [ 1370.064359][T30628] netlink: del zone limit has 4 unknown bytes [ 1370.297074][T26894] usb usb46-port1: attempt power cycle [ 1370.527129][T30630] lo speed is unknown, defaulting to 1000 [ 1370.857304][T26894] usb usb46-port1: unable to enumerate USB device [ 1371.010840][T30641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7622'. [ 1371.183993][T30640] binder_alloc: 30639: pid 30639 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1371.955486][T30658] lo speed is unknown, defaulting to 1000 [ 1372.212028][T30664] netlink: del zone limit has 4 unknown bytes [ 1372.549188][T30677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7636'. [ 1372.816819][T30681] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1372.818925][T30681] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1372.821437][T30681] vhci_hcd vhci_hcd.0: Device attached [ 1372.833429][T30681] random: crng reseeded on system resumption [ 1373.003677][T30681] block device autoloading is deprecated and will be removed. [ 1373.295577][ T6036] usb 48-1: SetAddress Request (107) to port 0 [ 1373.297697][ T6036] usb 48-1: new SuperSpeed USB device number 107 using vhci_hcd [ 1373.523636][T30682] vhci_hcd: connection reset by peer [ 1373.525820][T22265] vhci_hcd vhci_hcd.5: stop threads [ 1373.527392][T22265] vhci_hcd vhci_hcd.5: release socket [ 1373.529103][T22265] vhci_hcd vhci_hcd.5: disconnect device [ 1373.593772][ T10] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1373.723530][ T10] usb 9-1: device descriptor read/64, error -71 [ 1373.963437][ T10] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1374.173282][ T10] usb 9-1: device descriptor read/64, error -71 [ 1374.270695][T30711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1374.271851][T30711] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7645'. [ 1374.295968][ T10] usb usb9-port1: attempt power cycle [ 1374.605619][T30715] FAULT_INJECTION: forcing a failure. [ 1374.605619][T30715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1374.611289][T30715] CPU: 2 UID: 0 PID: 30715 Comm: syz.6.7649 Tainted: G L syzkaller #0 PREEMPT(full) [ 1374.611317][T30715] Tainted: [L]=SOFTLOCKUP [ 1374.611324][T30715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1374.611335][T30715] Call Trace: [ 1374.611343][T30715] [ 1374.611357][T30715] dump_stack_lvl+0x100/0x190 [ 1374.611388][T30715] should_fail_ex.cold+0x5/0xa [ 1374.611410][T30715] _copy_to_user+0x32/0xd0 [ 1374.611433][T30715] simple_read_from_buffer+0xcb/0x170 [ 1374.611460][T30715] proc_fail_nth_read+0x1af/0x230 [ 1374.611488][T30715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1374.611518][T30715] ? rw_verify_area+0xce/0x6d0 [ 1374.611538][T30715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1374.611563][T30715] vfs_read+0x1e4/0xb30 [ 1374.611588][T30715] ? __pfx_vfs_read+0x10/0x10 [ 1374.611610][T30715] ? find_held_lock+0x2b/0x80 [ 1374.611638][T30715] ? __fget_files+0x215/0x3d0 [ 1374.611668][T30715] ? __fget_files+0x21f/0x3d0 [ 1374.611700][T30715] ksys_read+0x12a/0x250 [ 1374.611724][T30715] ? __pfx_ksys_read+0x10/0x10 [ 1374.611756][T30715] do_int80_emulation+0x141/0x6b0 [ 1374.611782][T30715] asm_int80_emulation+0x1a/0x20 [ 1374.611801][T30715] RIP: 0023:0xf71a572b [ 1374.611816][T30715] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1374.611834][T30715] RSP: 002b:00000000f545d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1374.611851][T30715] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545d5d0 [ 1374.611863][T30715] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1374.611873][T30715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1374.611884][T30715] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1374.611894][T30715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1374.611919][T30715] [ 1374.633429][ T10] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1374.723802][ T10] usb 9-1: device descriptor read/8, error -71 [ 1374.814435][T30719] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1374.816562][T30719] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1374.819275][T30719] vhci_hcd vhci_hcd.0: Device attached [ 1374.824342][T30719] vivid-001: ================= START STATUS ================= [ 1374.826833][T30719] vivid-001: RDS Tx I/O Mode: Controls [ 1374.828654][T30719] vivid-001: RDS Program ID: 32904 [ 1374.830324][T30719] vivid-001: RDS Program Type: 3 [ 1374.831981][T30719] vivid-001: RDS PS Name: VIVID-TX [ 1374.834595][T30719] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1374.837781][T30719] vivid-001: RDS Stereo: true [ 1374.839279][T30719] vivid-001: RDS Artificial Head: false [ 1374.840969][T30719] vivid-001: RDS Compressed: false [ 1374.842622][T30719] vivid-001: RDS Dynamic PTY: false [ 1374.844944][T30719] vivid-001: RDS Traffic Announcement: false [ 1374.846900][T30719] vivid-001: RDS Traffic Program: true [ 1374.848710][T30719] vivid-001: RDS Music: true [ 1374.850225][T30719] vivid-001: ================== END STATUS ================== [ 1374.910808][T30726] overlayfs: statfs failed on './file0' [ 1374.914512][T30725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1374.921661][T30725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1374.970485][ T93] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.976159][T22265] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.979161][ T10] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1374.982133][T22265] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.988504][T22265] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.013376][ T10] usb 9-1: device descriptor read/8, error -71 [ 1375.132994][ T10] usb usb9-port1: unable to enumerate USB device [ 1375.153830][T30723] vhci_hcd: connection closed [ 1375.154076][T22265] vhci_hcd vhci_hcd.5: stop threads [ 1375.157452][T22265] vhci_hcd vhci_hcd.5: release socket [ 1375.159315][T22265] vhci_hcd vhci_hcd.5: disconnect device [ 1375.751151][T30730] lo speed is unknown, defaulting to 1000 [ 1375.883185][T30736] lo speed is unknown, defaulting to 1000 [ 1375.904669][T30737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7653'. [ 1376.613682][T30750] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1376.615780][T30750] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1376.618478][T30750] vhci_hcd vhci_hcd.0: Device attached [ 1376.629153][T30750] random: crng reseeded on system resumption [ 1376.951942][T26894] usb 46-1: SetAddress Request (121) to port 0 [ 1376.954001][T26894] usb 46-1: new SuperSpeed USB device number 121 using vhci_hcd [ 1377.349764][T30751] vhci_hcd: connection reset by peer [ 1377.352620][T22264] vhci_hcd vhci_hcd.4: stop threads [ 1377.354421][T22264] vhci_hcd vhci_hcd.4: release socket [ 1377.356217][T22264] vhci_hcd vhci_hcd.4: disconnect device [ 1378.061119][T30767] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1378.063295][T30767] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1378.066332][T30767] vhci_hcd vhci_hcd.0: Device attached [ 1378.079654][T30767] vivid-004: ================= START STATUS ================= [ 1378.085195][T30767] vivid-004: RDS Tx I/O Mode: Controls [ 1378.086968][T30767] vivid-004: RDS Program ID: 32904 [ 1378.091418][T30767] vivid-004: RDS Program Type: 3 [ 1378.093072][T30767] vivid-004: RDS PS Name: VIVID-TX [ 1378.094770][T30767] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1378.104148][T30767] vivid-004: RDS Stereo: true [ 1378.105712][T30767] vivid-004: RDS Artificial Head: false [ 1378.107480][T30767] vivid-004: RDS Compressed: false [ 1378.109293][T30767] vivid-004: RDS Dynamic PTY: false [ 1378.110957][T30767] vivid-004: RDS Traffic Announcement: false [ 1378.113772][T30767] vivid-004: RDS Traffic Program: true [ 1378.115646][T30767] vivid-004: RDS Music: true [ 1378.117125][T30767] vivid-004: ================== END STATUS ================== [ 1378.381260][ T6036] usb 48-1: device descriptor read/8, error -110 [ 1378.462987][T30781] netlink: del zone limit has 4 unknown bytes [ 1378.515743][T30782] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7668'. [ 1378.748931][T30770] vhci_hcd: connection closed [ 1378.749180][T22256] vhci_hcd vhci_hcd.4: stop threads [ 1378.752820][T22256] vhci_hcd vhci_hcd.4: release socket [ 1378.754734][T22256] vhci_hcd vhci_hcd.4: disconnect device [ 1378.771620][ T6036] usb usb48-port1: attempt power cycle [ 1379.519281][ T6036] usb usb48-port1: unable to enumerate USB device [ 1379.902620][T26859] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1380.131059][T30798] loop6: detected capacity change from 0 to 8 [ 1380.180752][T30798] loop6: detected capacity change from 8 to 7 [ 1380.185113][ C0] blk_print_req_error: 10 callbacks suppressed [ 1380.185124][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1380.194544][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1380.197645][ C0] buffer_io_error: 10 callbacks suppressed [ 1380.197654][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1380.202727][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1380.205899][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1380.208855][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1380.211985][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1380.217457][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1380.220548][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1380.223607][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1380.226641][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1380.234927][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1380.238501][ T40] kauditd_printk_skb: 135 callbacks suppressed [ 1380.238510][ T40] audit: type=1326 audit(1771082808.281:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30795 comm="syz.5.7674" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705ef78 code=0x7ffc0000 [ 1380.240574][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1380.240591][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1380.240632][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1380.240646][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 1380.240676][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1380.240689][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 1380.240719][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 1380.240749][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 1380.274039][ T40] audit: type=1326 audit(1771082808.281:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30795 comm="syz.5.7674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1380.294895][ T40] audit: type=1326 audit(1771082808.281:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30795 comm="syz.5.7674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1380.301965][ T40] audit: type=1326 audit(1771082808.281:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30795 comm="syz.5.7674" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705ef78 code=0x7ffc0000 [ 1380.308837][ T40] audit: type=1326 audit(1771082808.281:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30795 comm="syz.5.7674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1380.370738][ T40] audit: type=1326 audit(1771082808.281:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30795 comm="syz.5.7674" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705ef78 code=0x7ffc0000 [ 1380.377501][ T40] audit: type=1326 audit(1771082808.281:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30795 comm="syz.5.7674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1380.384452][ T40] audit: type=1326 audit(1771082808.281:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30795 comm="syz.5.7674" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705ef78 code=0x7ffc0000 [ 1380.393677][ T40] audit: type=1326 audit(1771082808.281:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30795 comm="syz.5.7674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1380.410202][ T40] audit: type=1326 audit(1771082808.281:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30795 comm="syz.5.7674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1381.727874][T30810] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1381.730271][T30810] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1381.761379][T30810] vhci_hcd vhci_hcd.0: Device attached [ 1381.769638][T30810] vivid-001: ================= START STATUS ================= [ 1381.776229][T30810] vivid-001: RDS Tx I/O Mode: Controls [ 1381.790137][T30810] vivid-001: RDS Program ID: 32904 [ 1381.791947][T30810] vivid-001: RDS Program Type: 3 [ 1381.793738][T30810] vivid-001: RDS PS Name: VIVID-TX [ 1381.847923][T30810] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1381.851407][T30810] vivid-001: RDS Stereo: true [ 1381.853640][T30810] vivid-001: RDS Artificial Head: false [ 1381.855558][T30810] vivid-001: RDS Compressed: false [ 1381.857202][T30810] vivid-001: RDS Dynamic PTY: false [ 1381.859680][T30810] vivid-001: RDS Traffic Announcement: false [ 1381.861629][T30810] vivid-001: RDS Traffic Program: true [ 1381.863452][T30810] vivid-001: RDS Music: true [ 1381.864921][T30810] vivid-001: ================== END STATUS ================== [ 1381.989673][T26894] usb 46-1: device descriptor read/8, error -110 [ 1382.019949][T30813] vhci_hcd: connection closed [ 1382.020630][T22256] vhci_hcd vhci_hcd.5: stop threads [ 1382.023934][T22256] vhci_hcd vhci_hcd.5: release socket [ 1382.025992][T22256] vhci_hcd vhci_hcd.5: disconnect device [ 1382.029449][ T6036] usb 48-1: enqueue for inactive port 0 [ 1382.381467][T26894] usb usb46-port1: attempt power cycle [ 1382.519923][ T6036] usb usb48-port1: attempt power cycle [ 1382.570638][T30834] netlink: del zone limit has 4 unknown bytes [ 1382.702209][T30837] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1382.710602][T30837] i2c i2c-1: Invalid block write size 34 [ 1382.950917][T26894] usb usb46-port1: unable to enumerate USB device [ 1383.790185][ T6036] usb usb48-port1: unable to enumerate USB device [ 1383.988172][T30851] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1383.990795][T30851] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1384.012062][T30851] vhci_hcd vhci_hcd.0: Device attached [ 1384.049889][T30851] vivid-003: ================= START STATUS ================= [ 1384.052367][T30851] vivid-003: RDS Tx I/O Mode: Controls [ 1384.054122][T30851] vivid-003: RDS Program ID: 32904 [ 1384.055757][T30851] vivid-003: RDS Program Type: 3 [ 1384.057347][T30851] vivid-003: RDS PS Name: VIVID-TX [ 1384.059622][T30851] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1384.063269][T30851] vivid-003: RDS Stereo: true [ 1384.064769][T30851] vivid-003: RDS Artificial Head: false [ 1384.066509][T30851] vivid-003: RDS Compressed: false [ 1384.068139][T30851] vivid-003: RDS Dynamic PTY: false [ 1384.080287][T30851] vivid-003: RDS Traffic Announcement: false [ 1384.082465][T30851] vivid-003: RDS Traffic Program: true [ 1384.084206][T30851] vivid-003: RDS Music: true [ 1384.085684][T30851] vivid-003: ================== END STATUS ================== [ 1384.391422][ T10] usb 40-1: SetAddress Request (84) to port 0 [ 1384.393433][ T10] usb 40-1: new SuperSpeed USB device number 84 using vhci_hcd [ 1384.672485][T30854] vhci_hcd: connection reset by peer [ 1384.701330][ T93] vhci_hcd vhci_hcd.1: stop threads [ 1384.703160][ T93] vhci_hcd vhci_hcd.1: release socket [ 1384.705083][ T93] vhci_hcd vhci_hcd.1: disconnect device [ 1385.068446][T30863] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1385.070551][T30863] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1385.073238][T30863] vhci_hcd vhci_hcd.0: Device attached [ 1385.077532][T30863] vivid-004: ================= START STATUS ================= [ 1385.080090][T30863] vivid-004: RDS Tx I/O Mode: Controls [ 1385.081858][T30863] vivid-004: RDS Program ID: 32904 [ 1385.083583][T30863] vivid-004: RDS Program Type: 3 [ 1385.085211][T30863] vivid-004: RDS PS Name: VIVID-TX [ 1385.086880][T30863] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1385.090243][T30863] vivid-004: RDS Stereo: true [ 1385.091737][T30863] vivid-004: RDS Artificial Head: false [ 1385.093512][T30863] vivid-004: RDS Compressed: false [ 1385.095170][T30863] vivid-004: RDS Dynamic PTY: false [ 1385.096819][T30863] vivid-004: RDS Traffic Announcement: false [ 1385.108091][T30863] vivid-004: RDS Traffic Program: true [ 1385.109966][T30863] vivid-004: RDS Music: true [ 1385.112133][T30863] vivid-004: ================== END STATUS ================== [ 1385.275573][T30864] vhci_hcd: connection closed [ 1385.275768][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1385.279356][ T12] vhci_hcd vhci_hcd.4: release socket [ 1385.281424][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1385.544359][T30872] netlink: del zone limit has 4 unknown bytes [ 1385.716782][T30876] can0: slcan on ptm0. [ 1386.514778][T30868] can0 (unregistered): slcan off ptm0. [ 1387.770756][T30920] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1387.772932][T30920] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1387.775677][T30920] vhci_hcd vhci_hcd.0: Device attached [ 1387.782397][T30920] vivid-003: ================= START STATUS ================= [ 1387.784959][T30920] vivid-003: RDS Tx I/O Mode: Controls [ 1387.791206][T30920] vivid-003: RDS Program ID: 32904 [ 1387.792931][T30920] vivid-003: RDS Program Type: 3 [ 1387.794547][T30920] vivid-003: RDS PS Name: VIVID-TX [ 1387.796249][T30920] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1387.806513][T30920] vivid-003: RDS Stereo: true [ 1387.808148][T30920] vivid-003: RDS Artificial Head: false [ 1387.810159][T30920] vivid-003: RDS Compressed: false [ 1387.816678][T30920] vivid-003: RDS Dynamic PTY: false [ 1387.818512][T30920] vivid-003: RDS Traffic Announcement: false [ 1387.820750][T30920] vivid-003: RDS Traffic Program: true [ 1387.826692][T30920] vivid-003: RDS Music: true [ 1387.828240][T30920] vivid-003: ================== END STATUS ================== [ 1388.689991][T30921] vhci_hcd: connection closed [ 1388.690399][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1388.694193][ T12] vhci_hcd vhci_hcd.1: release socket [ 1388.696152][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1389.495664][ T10] usb 40-1: device descriptor read/8, error -110 [ 1389.980618][ T10] usb usb40-port1: attempt power cycle [ 1390.037070][T30945] netlink: del zone limit has 4 unknown bytes [ 1390.718065][ T6036] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1391.394443][ T10] usb usb40-port1: unable to enumerate USB device [ 1391.444338][T30962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1391.448886][T30962] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7713'. [ 1392.081951][T30988] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1392.084120][T30988] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1392.087693][T30988] vhci_hcd vhci_hcd.0: Device attached [ 1392.095953][T30988] vivid-003: ================= START STATUS ================= [ 1392.098946][T30988] vivid-003: RDS Tx I/O Mode: Controls [ 1392.101183][T30988] vivid-003: RDS Program ID: 32904 [ 1392.103003][T30988] vivid-003: RDS Program Type: 3 [ 1392.105112][T30988] vivid-003: RDS PS Name: VIVID-TX [ 1392.107368][T30988] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1392.113572][T30988] vivid-003: RDS Stereo: true [ 1392.115600][T30988] vivid-003: RDS Artificial Head: false [ 1392.117472][T30988] vivid-003: RDS Compressed: false [ 1392.119561][T30988] vivid-003: RDS Dynamic PTY: false [ 1392.122119][T30988] vivid-003: RDS Traffic Announcement: false [ 1392.124503][T30988] vivid-003: RDS Traffic Program: true [ 1392.126506][T30988] vivid-003: RDS Music: true [ 1392.128516][T30988] vivid-003: ================== END STATUS ================== [ 1392.394271][ T10] usb 50-1: SetAddress Request (26) to port 0 [ 1392.396901][ T10] usb 50-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1392.715103][T30989] vhci_hcd: connection reset by peer [ 1392.717097][T22264] vhci_hcd vhci_hcd.6: stop threads [ 1392.719498][T22264] vhci_hcd vhci_hcd.6: release socket [ 1392.722106][T22264] vhci_hcd vhci_hcd.6: disconnect device [ 1393.063663][T31010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1393.069416][T31010] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7722'. [ 1393.908252][T31019] netlink: del zone limit has 4 unknown bytes [ 1394.243382][T31024] lo speed is unknown, defaulting to 1000 [ 1394.340235][T31023] netlink: 'syz.4.7727': attribute type 4 has an invalid length. [ 1394.342841][T31023] netlink: 'syz.4.7727': attribute type 1 has an invalid length. [ 1394.346141][T31023] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7727'. [ 1395.797411][T31047] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1395.799906][T31047] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1395.804116][T31047] vhci_hcd vhci_hcd.0: Device attached [ 1395.809051][T31047] vivid-003: ================= START STATUS ================= [ 1395.812190][T31047] vivid-003: RDS Tx I/O Mode: Controls [ 1395.815303][T31047] vivid-003: RDS Program ID: 32904 [ 1395.817724][T31047] vivid-003: RDS Program Type: 3 [ 1395.820087][T31047] vivid-003: RDS PS Name: VIVID-TX [ 1395.823072][T31047] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1395.827827][T31047] vivid-003: RDS Stereo: true [ 1395.829824][T31047] vivid-003: RDS Artificial Head: false [ 1395.832000][T31047] vivid-003: RDS Compressed: false [ 1395.994328][T31047] vivid-003: RDS Dynamic PTY: false [ 1395.996294][T31047] vivid-003: RDS Traffic Announcement: false [ 1395.998374][T31047] vivid-003: RDS Traffic Program: true [ 1396.000347][T31047] vivid-003: RDS Music: true [ 1396.001941][T31047] vivid-003: ================== END STATUS ================== [ 1396.419095][T31048] vhci_hcd: connection closed [ 1396.434092][ T93] vhci_hcd vhci_hcd.6: stop threads [ 1396.437565][ T93] vhci_hcd vhci_hcd.6: release socket [ 1396.439479][ T93] vhci_hcd vhci_hcd.6: disconnect device [ 1396.645584][T31062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7735'. [ 1396.861549][T31064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7736'. [ 1397.135017][T31067] netlink: del zone limit has 4 unknown bytes [ 1397.492094][ T10] usb 50-1: device descriptor read/8, error -110 [ 1397.938774][ T10] usb usb50-port1: attempt power cycle [ 1397.942828][T31080] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1397.944980][T31080] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1397.955801][T31080] vhci_hcd vhci_hcd.0: Device attached [ 1398.009508][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1398.011627][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1398.051221][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1398.054732][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1398.130709][T31081] vhci_hcd: connection closed [ 1398.130998][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1398.139880][ T13] vhci_hcd vhci_hcd.5: release socket [ 1398.141712][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1398.182982][T31093] overlayfs: missing 'workdir' [ 1398.239209][T31098] lo speed is unknown, defaulting to 1000 [ 1398.271565][ T6036] libceph: connect (1)[c::]:6789 error -101 [ 1398.274049][ T6036] libceph: mon0 (1)[c::]:6789 connect error [ 1398.311620][ T6036] libceph: connect (1)[c::]:6789 error -101 [ 1398.314329][ T6036] libceph: mon0 (1)[c::]:6789 connect error [ 1398.532690][ T10] usb usb50-port1: unable to enumerate USB device [ 1398.781376][ T6036] libceph: connect (1)[c::]:6789 error -101 [ 1398.784399][ T6036] libceph: mon0 (1)[c::]:6789 connect error [ 1398.822465][T31087] ceph: No mds server is up or the cluster is laggy [ 1398.825759][ T6036] libceph: connect (1)[c::]:6789 error -101 [ 1398.828481][ T6036] libceph: mon0 (1)[c::]:6789 connect error [ 1398.833657][T31090] ceph: No mds server is up or the cluster is laggy [ 1398.868512][T31110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 1398.983794][T31111] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7747'. [ 1399.261782][T31117] netlink: del zone limit has 4 unknown bytes [ 1399.868821][T31125] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1400.405602][T31125] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7750'. [ 1400.578663][T31131] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1400.580808][T31131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1400.583566][T31131] vhci_hcd vhci_hcd.0: Device attached [ 1400.593075][T31131] tmpfs: Unknown parameter '^]j Vt!V`0EeDnʪqCr vYI̾7H&؍O?>|X|\Ohn' [ 1400.750479][T31142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.753396][T31142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.765832][T31142] comedi comedi0: Minor 262147 is invalid! [ 1400.788426][T31136] vhci_hcd: connection closed [ 1400.788767][T16165] vhci_hcd vhci_hcd.4: stop threads [ 1400.792954][T16165] vhci_hcd vhci_hcd.4: release socket [ 1400.797304][T16165] vhci_hcd vhci_hcd.4: disconnect device [ 1401.263711][T31147] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1401.265884][T31147] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1401.268756][T31147] vhci_hcd vhci_hcd.0: Device attached [ 1401.273851][T31147] vivid-003: ================= START STATUS ================= [ 1401.276464][T31147] vivid-003: RDS Tx I/O Mode: Controls [ 1401.278467][T31147] vivid-003: RDS Program ID: 32904 [ 1401.280476][T31147] vivid-003: RDS Program Type: 3 [ 1401.282317][T31147] vivid-003: RDS PS Name: VIVID-TX [ 1401.284319][T31147] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1401.287826][T31147] vivid-003: RDS Stereo: true [ 1401.289539][T31147] vivid-003: RDS Artificial Head: false [ 1401.291613][T31147] vivid-003: RDS Compressed: false [ 1401.293499][T31147] vivid-003: RDS Dynamic PTY: false [ 1401.295483][T31147] vivid-003: RDS Traffic Announcement: false [ 1401.298677][T31147] vivid-003: RDS Traffic Program: true [ 1401.312034][T31147] vivid-003: RDS Music: true [ 1401.319439][T31147] vivid-003: ================== END STATUS ================== [ 1401.563869][T31155] FAULT_INJECTION: forcing a failure. [ 1401.563869][T31155] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.567980][T31155] CPU: 1 UID: 0 PID: 31155 Comm: syz.4.7756 Tainted: G L syzkaller #0 PREEMPT(full) [ 1401.568009][T31155] Tainted: [L]=SOFTLOCKUP [ 1401.568013][T31155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1401.568020][T31155] Call Trace: [ 1401.568026][T31155] [ 1401.568032][T31155] dump_stack_lvl+0x100/0x190 [ 1401.568052][T31155] should_fail_ex.cold+0x5/0xa [ 1401.568065][T31155] ? tomoyo_encode2+0xfb/0x3c0 [ 1401.568077][T31155] should_failslab+0xc2/0x120 [ 1401.568093][T31155] __kmalloc_noprof+0xe0/0x850 [ 1401.568111][T31155] tomoyo_encode2+0xfb/0x3c0 [ 1401.568125][T31155] tomoyo_encode+0x29/0x50 [ 1401.568136][T31155] tomoyo_realpath_from_path+0x18c/0x690 [ 1401.568152][T31155] tomoyo_check_open_permission+0x2af/0x3c0 [ 1401.568171][T31155] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1401.568187][T31155] ? do_file_open_root+0x2f6/0x5a0 [ 1401.568203][T31155] ? __do_fast_syscall_32+0xe3/0x8c0 [ 1401.568216][T31155] ? do_fast_syscall_32+0x32/0x70 [ 1401.568240][T31155] ? do_raw_spin_lock+0x128/0x260 [ 1401.568256][T31155] ? path_get+0x61/0x80 [ 1401.568274][T31155] tomoyo_file_open+0x6b/0x90 [ 1401.568289][T31155] security_file_open+0xb5/0x1e0 [ 1401.568302][T31155] do_dentry_open+0x5aa/0x1660 [ 1401.568319][T31155] ? security_inode_permission+0xbf/0x250 [ 1401.568338][T31155] vfs_open+0x82/0x3f0 [ 1401.568351][T31155] path_openat+0x208c/0x31a0 [ 1401.568370][T31155] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1401.568385][T31155] ? __kasan_slab_alloc+0x89/0x90 [ 1401.568405][T31155] ? __pfx_path_openat+0x10/0x10 [ 1401.568429][T31155] ? __asan_memcpy+0x3c/0x60 [ 1401.568447][T31155] ? do_getname_kernel+0x1be/0x250 [ 1401.568473][T31155] do_file_open_root+0x2f6/0x5a0 [ 1401.568494][T31155] ? trace_sched_exit_tp+0x13a/0x180 [ 1401.568512][T31155] ? __pfx_do_file_open_root+0x10/0x10 [ 1401.568539][T31155] ? preempt_schedule_thunk+0x16/0x30 [ 1401.568552][T31155] ? preempt_schedule_common+0x42/0xc0 [ 1401.568566][T31155] file_open_root+0x19b/0x3b0 [ 1401.568582][T31155] ? __pfx_file_open_root+0x10/0x10 [ 1401.568596][T31155] ? _raw_spin_unlock+0x3e/0x50 [ 1401.568618][T31155] ? __pfx_nsfs_export_open+0x10/0x10 [ 1401.568633][T31155] do_handle_open+0x87c/0xce0 [ 1401.568650][T31155] ? __pfx_do_handle_open+0x10/0x10 [ 1401.568667][T31155] ? fput+0x79/0x100 [ 1401.568678][T31155] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 1401.568694][T31155] ? __do_fast_syscall_32+0xe3/0x8c0 [ 1401.568705][T31155] __do_fast_syscall_32+0xe3/0x8c0 [ 1401.568719][T31155] do_fast_syscall_32+0x32/0x70 [ 1401.568732][T31155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1401.568746][T31155] RIP: 0023:0xf707ef6c [ 1401.568755][T31155] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1401.568765][T31155] RSP: 002b:00000000f542b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000156 [ 1401.568776][T31155] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 1401.568783][T31155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1401.568790][T31155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1401.568796][T31155] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1401.568802][T31155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1401.568820][T31155] [ 1401.568857][T31155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1401.653262][ T6036] usb 50-1: SetAddress Request (30) to port 0 [ 1401.738775][ T6036] usb 50-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1401.892623][T31148] vhci_hcd: connection reset by peer [ 1401.895439][T22265] vhci_hcd vhci_hcd.6: stop threads [ 1401.898095][T22265] vhci_hcd vhci_hcd.6: release socket [ 1401.900695][T22265] vhci_hcd vhci_hcd.6: disconnect device [ 1404.403876][T31205] FAULT_INJECTION: forcing a failure. [ 1404.403876][T31205] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.409470][T31205] CPU: 3 UID: 0 PID: 31205 Comm: syz.1.7772 Tainted: G L syzkaller #0 PREEMPT(full) [ 1404.409512][T31205] Tainted: [L]=SOFTLOCKUP [ 1404.409519][T31205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1404.409529][T31205] Call Trace: [ 1404.409536][T31205] [ 1404.409542][T31205] dump_stack_lvl+0x100/0x190 [ 1404.409571][T31205] should_fail_ex.cold+0x5/0xa [ 1404.409592][T31205] should_failslab+0xc2/0x120 [ 1404.409616][T31205] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1404.409636][T31205] ? kstrdup_const+0x63/0x80 [ 1404.409660][T31205] kstrdup+0x51/0xe0 [ 1404.409682][T31205] kstrdup_const+0x63/0x80 [ 1404.409702][T31205] alloc_vfsmnt+0xe5/0x6a0 [ 1404.409720][T31205] clone_mnt+0x4b/0x930 [ 1404.409744][T31205] copy_tree+0x329/0xbf0 [ 1404.409773][T31205] copy_mnt_ns+0x2bd/0xc30 [ 1404.409792][T31205] ? create_new_namespaces+0x30/0xac0 [ 1404.409817][T31205] ? rcu_is_watching+0x12/0xc0 [ 1404.409844][T31205] create_new_namespaces+0xd3/0xac0 [ 1404.409871][T31205] ? bpf_lsm_capable+0x9/0x10 [ 1404.409895][T31205] ? security_capable+0x80/0x260 [ 1404.409920][T31205] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1404.409941][T31205] ksys_unshare+0x455/0xab0 [ 1404.409964][T31205] ? __pfx_ksys_unshare+0x10/0x10 [ 1404.409993][T31205] ? __pfx_ksys_write+0x10/0x10 [ 1404.410020][T31205] __ia32_sys_unshare+0x30/0x40 [ 1404.410040][T31205] __do_fast_syscall_32+0xe3/0x8c0 [ 1404.410064][T31205] do_fast_syscall_32+0x32/0x70 [ 1404.410083][T31205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1404.410105][T31205] RIP: 0023:0xf7f18f6c [ 1404.410119][T31205] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1404.410136][T31205] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 1404.410153][T31205] RAX: ffffffffffffffda RBX: 0000000000020400 RCX: 0000000000000000 [ 1404.410165][T31205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1404.410174][T31205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1404.410184][T31205] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1404.410195][T31205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1404.410216][T31205] [ 1404.725703][T31213] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7770'. [ 1404.827589][T31212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1404.829367][T31212] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7774'. [ 1405.961424][T31234] 9p: Bad value for 'wfdno' [ 1405.967675][T31234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7778'. [ 1406.242494][T31240] FAULT_INJECTION: forcing a failure. [ 1406.242494][T31240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.253448][T31240] CPU: 0 UID: 0 PID: 31240 Comm: syz.1.7780 Tainted: G L syzkaller #0 PREEMPT(full) [ 1406.253479][T31240] Tainted: [L]=SOFTLOCKUP [ 1406.253486][T31240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1406.253497][T31240] Call Trace: [ 1406.253504][T31240] [ 1406.253513][T31240] dump_stack_lvl+0x100/0x190 [ 1406.253544][T31240] should_fail_ex.cold+0x5/0xa [ 1406.253567][T31240] _copy_to_user+0x32/0xd0 [ 1406.253588][T31240] simple_read_from_buffer+0xcb/0x170 [ 1406.253617][T31240] proc_fail_nth_read+0x1af/0x230 [ 1406.253645][T31240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1406.253674][T31240] ? rw_verify_area+0xce/0x6d0 [ 1406.253697][T31240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1406.253720][T31240] vfs_read+0x1e4/0xb30 [ 1406.253754][T31240] ? __pfx_vfs_read+0x10/0x10 [ 1406.253776][T31240] ? find_held_lock+0x2b/0x80 [ 1406.253804][T31240] ? __fget_files+0x215/0x3d0 [ 1406.253833][T31240] ? __fget_files+0x21f/0x3d0 [ 1406.253866][T31240] ksys_read+0x12a/0x250 [ 1406.253890][T31240] ? __pfx_ksys_read+0x10/0x10 [ 1406.253922][T31240] do_int80_emulation+0x141/0x6b0 [ 1406.253948][T31240] asm_int80_emulation+0x1a/0x20 [ 1406.253966][T31240] RIP: 0023:0xf711572b [ 1406.253982][T31240] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1406.254000][T31240] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1406.254019][T31240] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53d65d0 [ 1406.254032][T31240] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1406.254043][T31240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1406.254053][T31240] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1406.254063][T31240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1406.254088][T31240] [ 1406.255053][T31241] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1406.317817][T31241] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1406.438410][T31241] vhci_hcd vhci_hcd.0: Device attached [ 1406.535971][T31246] fuse: Unknown parameter '$:_떦Li' [ 1406.535971][T31246] ϣG'@dl|?|T;`Ϊҟr7ZG0uz)6[6zHn' [ 1408.380157][T31242] vhci_hcd: connection reset by peer [ 1408.382792][T22256] vhci_hcd vhci_hcd.6: stop threads [ 1408.384935][T22256] vhci_hcd vhci_hcd.6: release socket [ 1408.387416][T22256] vhci_hcd vhci_hcd.6: disconnect device [ 1408.387483][ T6036] usb 50-1: device descriptor read/8, error -110 [ 1408.420256][T31261] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1408.423076][T31261] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1408.436224][T31261] vhci_hcd vhci_hcd.0: Device attached [ 1408.443815][T31261] vivid-001: ================= START STATUS ================= [ 1408.457094][T31261] vivid-001: RDS Tx I/O Mode: Controls [ 1408.466846][T31261] vivid-001: RDS Program ID: 32904 [ 1408.468892][T31261] vivid-001: RDS Program Type: 3 [ 1408.476463][T31261] vivid-001: RDS PS Name: VIVID-TX [ 1408.478626][T31261] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1408.483019][T31261] vivid-001: RDS Stereo: true [ 1408.485004][T31261] vivid-001: RDS Artificial Head: false [ 1408.487431][T31261] vivid-001: RDS Compressed: false [ 1408.489596][T31261] vivid-001: RDS Dynamic PTY: false [ 1408.491817][T31261] vivid-001: RDS Traffic Announcement: false [ 1408.494405][T31261] vivid-001: RDS Traffic Program: true [ 1408.497012][T31261] vivid-001: RDS Music: true [ 1408.499389][T31261] vivid-001: ================== END STATUS ================== [ 1408.726088][T28463] usb 48-1: SetAddress Request (116) to port 0 [ 1408.805137][T31264] vhci_hcd: connection closed [ 1408.805748][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1408.809955][ T13] vhci_hcd vhci_hcd.5: release socket [ 1408.812779][ T6036] usb usb50-port1: attempt power cycle [ 1408.813262][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1410.157419][ T6036] usb usb50-port1: unable to enumerate USB device [ 1410.263374][T28463] usb 48-1: new SuperSpeed USB device number 116 using vhci_hcd [ 1410.285375][T28463] usb 48-1: enqueue for inactive port 0 [ 1410.695985][T28463] usb usb48-port1: attempt power cycle [ 1411.305530][T28463] usb usb48-port1: unable to enumerate USB device [ 1412.336269][T31300] lo speed is unknown, defaulting to 1000 [ 1412.513620][T31292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1412.518190][T31292] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7793'. [ 1412.817800][T31309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7800'. [ 1412.820667][T31309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7800'. [ 1412.964945][T31315] syzkaller1: entered promiscuous mode [ 1412.966697][T31315] syzkaller1: entered allmulticast mode [ 1412.974675][T31317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7803'. [ 1415.335239][T31344] FAULT_INJECTION: forcing a failure. [ 1415.335239][T31344] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.335394][T31344] CPU: 3 UID: 0 PID: 31344 Comm: syz.1.7812 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.335421][T31344] Tainted: [L]=SOFTLOCKUP [ 1415.335427][T31344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1415.335439][T31344] Call Trace: [ 1415.335446][T31344] [ 1415.335453][T31344] dump_stack_lvl+0x100/0x190 [ 1415.335483][T31344] should_fail_ex.cold+0x5/0xa [ 1415.335506][T31344] should_failslab+0xc2/0x120 [ 1415.335533][T31344] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1415.335555][T31344] ? alloc_inode+0x68/0x250 [ 1415.335576][T31344] ? simple_start_creating+0xb0/0x110 [ 1415.335601][T31344] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1415.335622][T31344] alloc_inode+0x68/0x250 [ 1415.335642][T31344] new_inode+0x22/0x1c0 [ 1415.335669][T31344] debugfs_create_dir+0xc4/0x440 [ 1415.335691][T31344] ieee80211_debugfs_recreate_netdev+0x22b/0x1790 [ 1415.335712][T31344] ? ieee80211_clear_tpe+0x238/0x290 [ 1415.335739][T31344] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 1415.335764][T31344] ? ieee80211_link_setup+0x81/0xa0 [ 1415.335782][T31344] ? ieee80211_setup_sdata+0x620/0xcf0 [ 1415.335812][T31344] ieee80211_if_change_type+0x2a9/0x790 [ 1415.335835][T31344] ieee80211_change_iface+0xad/0x970 [ 1415.335854][T31344] ? cfg80211_mlme_purge_registrations+0x1eb/0x2b0 [ 1415.335885][T31344] cfg80211_change_iface+0x53d/0xd90 [ 1415.335908][T31344] nl80211_set_interface+0x875/0xc80 [ 1415.335933][T31344] ? __pfx_nl80211_set_interface+0x10/0x10 [ 1415.335959][T31344] ? nl80211_pre_doit+0x30e/0xae0 [ 1415.335984][T31344] ? nl80211_pre_doit+0x19a/0xae0 [ 1415.336012][T31344] genl_family_rcv_msg_doit+0x214/0x300 [ 1415.336038][T31344] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1415.336061][T31344] ? genl_get_cmd+0x3ef/0x720 [ 1415.336088][T31344] ? bpf_lsm_capable+0x9/0x10 [ 1415.336113][T31344] ? security_capable+0x80/0x260 [ 1415.336136][T31344] ? ns_capable+0xd2/0xf0 [ 1415.336164][T31344] genl_rcv_msg+0x560/0x800 [ 1415.336190][T31344] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1415.336213][T31344] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1415.336237][T31344] ? __pfx_nl80211_set_interface+0x10/0x10 [ 1415.336255][T31344] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1415.336290][T31344] netlink_rcv_skb+0x159/0x420 [ 1415.336311][T31344] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1415.336335][T31344] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1415.336365][T31344] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1415.336388][T31344] genl_rcv+0x28/0x40 [ 1415.336408][T31344] netlink_unicast+0x5aa/0x870 [ 1415.336431][T31344] ? __pfx_netlink_unicast+0x10/0x10 [ 1415.336460][T31344] netlink_sendmsg+0x8b0/0xda0 [ 1415.336485][T31344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1415.336509][T31344] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1415.336537][T31344] ____sys_sendmsg+0xa54/0xc30 [ 1415.336562][T31344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1415.336598][T31344] ___sys_sendmsg+0x190/0x1e0 [ 1415.336622][T31344] ? __pfx____sys_sendmsg+0x10/0x10 [ 1415.336682][T31344] __sys_sendmsg+0x170/0x220 [ 1415.336717][T31344] ? __pfx___sys_sendmsg+0x10/0x10 [ 1415.336745][T31344] ? __pfx_ksys_write+0x10/0x10 [ 1415.336775][T31344] __do_fast_syscall_32+0xe3/0x8c0 [ 1415.336799][T31344] do_fast_syscall_32+0x32/0x70 [ 1415.336819][T31344] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1415.336840][T31344] RIP: 0023:0xf7f18f6c [ 1415.336857][T31344] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1415.336872][T31344] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1415.336890][T31344] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100 [ 1415.336900][T31344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1415.336909][T31344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1415.336920][T31344] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1415.336929][T31344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1415.336953][T31344] [ 1415.337070][T31344] debugfs: out of free dentries, can not create directory 'stations' [ 1415.984331][T31367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1415.986108][T31367] netlink: 188 bytes leftover after parsing attributes in process `syz.6.7817'. [ 1416.202024][T31370] FAULT_INJECTION: forcing a failure. [ 1416.202024][T31370] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1416.213204][T31370] CPU: 3 UID: 0 PID: 31370 Comm: syz.4.7820 Tainted: G L syzkaller #0 PREEMPT(full) [ 1416.213224][T31370] Tainted: [L]=SOFTLOCKUP [ 1416.213228][T31370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1416.213235][T31370] Call Trace: [ 1416.213239][T31370] [ 1416.213245][T31370] dump_stack_lvl+0x100/0x190 [ 1416.213265][T31370] should_fail_ex.cold+0x5/0xa [ 1416.213275][T31370] ? prepare_alloc_pages+0x16d/0x5f0 [ 1416.213294][T31370] should_fail_alloc_page+0xeb/0x140 [ 1416.213312][T31370] prepare_alloc_pages+0x1f0/0x5f0 [ 1416.213341][T31370] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1416.213360][T31370] ? rcu_is_watching+0x12/0xc0 [ 1416.213376][T31370] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1416.213393][T31370] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1416.213409][T31370] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1416.213424][T31370] ? stack_trace_save+0x8e/0xc0 [ 1416.213442][T31370] ? stack_depot_save_flags+0x27/0x9d0 [ 1416.213454][T31370] ? is_bpf_text_address+0x8a/0x1a0 [ 1416.213468][T31370] ? is_bpf_text_address+0x8a/0x1a0 [ 1416.213484][T31370] ? kasan_save_stack+0x3f/0x50 [ 1416.213498][T31370] ? kasan_save_track+0x14/0x30 [ 1416.213512][T31370] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 1416.213525][T31370] ? alloc_vmap_area+0x186c/0x2bd0 [ 1416.213540][T31370] ? __get_vm_area_node+0x1ca/0x330 [ 1416.213555][T31370] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1416.213566][T31370] ? __vmalloc_node_noprof+0xad/0xf0 [ 1416.213576][T31370] ? copy_process+0x5ec/0x7a10 [ 1416.213588][T31370] ? create_io_thread+0xc2/0x110 [ 1416.213598][T31370] ? create_io_worker+0x1cd/0x5b0 [ 1416.213609][T31370] ? io_wq_enqueue+0x4d8/0x970 [ 1416.213621][T31370] ? do_fast_syscall_32+0x32/0x70 [ 1416.213633][T31370] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1416.213648][T31370] alloc_pages_bulk_noprof+0x782/0x1490 [ 1416.213669][T31370] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1416.213688][T31370] ? alloc_pages_noprof+0x233/0x390 [ 1416.213706][T31370] __kasan_populate_vmalloc+0xf0/0x210 [ 1416.213723][T31370] alloc_vmap_area+0x95d/0x2bd0 [ 1416.213745][T31370] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1416.213765][T31370] __get_vm_area_node+0x1ca/0x330 [ 1416.213785][T31370] __vmalloc_node_range_noprof+0x213/0x1530 [ 1416.213796][T31370] ? create_io_thread+0xc2/0x110 [ 1416.213808][T31370] ? local_lock_release+0x99/0x130 [ 1416.213822][T31370] ? create_io_thread+0xc2/0x110 [ 1416.213834][T31370] ? find_held_lock+0x2b/0x80 [ 1416.213849][T31370] ? rcu_read_unlock+0x17/0x60 [ 1416.213866][T31370] ? rcu_read_unlock+0x17/0x60 [ 1416.213881][T31370] ? obj_cgroup_charge_account+0x46d/0x640 [ 1416.213898][T31370] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1416.213910][T31370] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 1416.213928][T31370] ? rcu_is_watching+0x12/0xc0 [ 1416.213943][T31370] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1416.213964][T31370] ? create_io_thread+0xc2/0x110 [ 1416.213976][T31370] __vmalloc_node_noprof+0xad/0xf0 [ 1416.213987][T31370] ? create_io_thread+0xc2/0x110 [ 1416.214000][T31370] copy_process+0x5ec/0x7a10 [ 1416.214012][T31370] ? __pfx_stack_trace_save+0x10/0x10 [ 1416.214029][T31370] ? stack_depot_save_flags+0x27/0x9d0 [ 1416.214045][T31370] ? __pfx_copy_process+0x10/0x10 [ 1416.214056][T31370] ? __do_sys_io_uring_enter+0x9c0/0x1a20 [ 1416.214068][T31370] ? do_fast_syscall_32+0x32/0x70 [ 1416.214080][T31370] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1416.214098][T31370] ? __pfx_io_wq_worker+0x10/0x10 [ 1416.214109][T31370] create_io_thread+0xc2/0x110 [ 1416.214121][T31370] ? __pfx_create_io_thread+0x10/0x10 [ 1416.214137][T31370] ? __pfx_io_wq_worker+0x10/0x10 [ 1416.214150][T31370] ? lockdep_init_map_type+0x5c/0x250 [ 1416.214164][T31370] ? lockdep_init_map_type+0x5c/0x250 [ 1416.214177][T31370] ? __init_swait_queue_head+0xca/0x150 [ 1416.214194][T31370] create_io_worker+0x1cd/0x5b0 [ 1416.214206][T31370] io_wq_enqueue+0x4d8/0x970 [ 1416.214230][T31370] ? __might_fault+0xc5/0x140 [ 1416.214243][T31370] ? __pfx_io_wq_enqueue+0x10/0x10 [ 1416.214254][T31370] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1416.214272][T31370] ? io_prep_async_work+0x3d1/0x780 [ 1416.214292][T31370] io_queue_iowq+0x234/0x5d0 [ 1416.214310][T31370] io_queue_sqe_fallback+0x16a/0x210 [ 1416.214321][T31370] ? io_fsetxattr_prep+0x231/0x320 [ 1416.214338][T31370] io_submit_sqes+0x1716/0x2300 [ 1416.214357][T31370] __do_sys_io_uring_enter+0x9c0/0x1a20 [ 1416.214370][T31370] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1416.214385][T31370] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1416.214401][T31370] ? fput+0x79/0x100 [ 1416.214411][T31370] ? ksys_write+0x1ac/0x250 [ 1416.214425][T31370] ? __pfx_ksys_write+0x10/0x10 [ 1416.214443][T31370] __do_fast_syscall_32+0xe3/0x8c0 [ 1416.214458][T31370] do_fast_syscall_32+0x32/0x70 [ 1416.214471][T31370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1416.214485][T31370] RIP: 0023:0xf707ef6c [ 1416.214495][T31370] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1416.214506][T31370] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 1416.214517][T31370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000047bc [ 1416.214524][T31370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1416.214530][T31370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1416.214536][T31370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1416.214542][T31370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1416.214556][T31370] [ 1416.214761][T31370] syz.4.7820: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1416.402203][ T1454] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1416.412387][T31370] ,cpuset=/,mems_allowed=0-1 [ 1416.414191][T31370] CPU: 3 UID: 0 PID: 31370 Comm: syz.4.7820 Tainted: G L syzkaller #0 PREEMPT(full) [ 1416.414208][T31370] Tainted: [L]=SOFTLOCKUP [ 1416.414213][T31370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1416.414219][T31370] Call Trace: [ 1416.414224][T31370] [ 1416.414229][T31370] dump_stack_lvl+0x100/0x190 [ 1416.414248][T31370] warn_alloc.cold+0x95/0x1c1 [ 1416.414267][T31370] ? __pfx_warn_alloc+0x10/0x10 [ 1416.414280][T31370] ? lockdep_hardirqs_on+0x78/0x100 [ 1416.414294][T31370] ? __get_vm_area_node+0x2c5/0x330 [ 1416.414314][T31370] ? __get_vm_area_node+0x208/0x330 [ 1416.414334][T31370] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1416.414345][T31370] ? local_lock_release+0x99/0x130 [ 1416.414359][T31370] ? create_io_thread+0xc2/0x110 [ 1416.414372][T31370] ? find_held_lock+0x2b/0x80 [ 1416.414388][T31370] ? rcu_read_unlock+0x17/0x60 [ 1416.414404][T31370] ? rcu_read_unlock+0x17/0x60 [ 1416.414420][T31370] ? obj_cgroup_charge_account+0x46d/0x640 [ 1416.414436][T31370] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1416.414449][T31370] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 1416.414469][T31370] ? rcu_is_watching+0x12/0xc0 [ 1416.414485][T31370] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1416.414502][T31370] ? create_io_thread+0xc2/0x110 [ 1416.414513][T31370] __vmalloc_node_noprof+0xad/0xf0 [ 1416.414524][T31370] ? create_io_thread+0xc2/0x110 [ 1416.414537][T31370] copy_process+0x5ec/0x7a10 [ 1416.414548][T31370] ? __pfx_stack_trace_save+0x10/0x10 [ 1416.414566][T31370] ? stack_depot_save_flags+0x27/0x9d0 [ 1416.414583][T31370] ? __pfx_copy_process+0x10/0x10 [ 1416.414594][T31370] ? __do_sys_io_uring_enter+0x9c0/0x1a20 [ 1416.414606][T31370] ? do_fast_syscall_32+0x32/0x70 [ 1416.414618][T31370] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1416.414642][T31370] ? __pfx_io_wq_worker+0x10/0x10 [ 1416.414674][T31370] create_io_thread+0xc2/0x110 [ 1416.414687][T31370] ? __pfx_create_io_thread+0x10/0x10 [ 1416.414703][T31370] ? __pfx_io_wq_worker+0x10/0x10 [ 1416.414715][T31370] ? lockdep_init_map_type+0x5c/0x250 [ 1416.414730][T31370] ? lockdep_init_map_type+0x5c/0x250 [ 1416.414743][T31370] ? __init_swait_queue_head+0xca/0x150 [ 1416.414759][T31370] create_io_worker+0x1cd/0x5b0 [ 1416.414771][T31370] io_wq_enqueue+0x4d8/0x970 [ 1416.414783][T31370] ? __might_fault+0xc5/0x140 [ 1416.414796][T31370] ? __pfx_io_wq_enqueue+0x10/0x10 [ 1416.414806][T31370] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1416.414824][T31370] ? io_prep_async_work+0x3d1/0x780 [ 1416.414844][T31370] io_queue_iowq+0x234/0x5d0 [ 1416.414862][T31370] io_queue_sqe_fallback+0x16a/0x210 [ 1416.414873][T31370] ? io_fsetxattr_prep+0x231/0x320 [ 1416.414890][T31370] io_submit_sqes+0x1716/0x2300 [ 1416.414908][T31370] __do_sys_io_uring_enter+0x9c0/0x1a20 [ 1416.414922][T31370] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1416.414937][T31370] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1416.414952][T31370] ? fput+0x79/0x100 [ 1416.414962][T31370] ? ksys_write+0x1ac/0x250 [ 1416.414977][T31370] ? __pfx_ksys_write+0x10/0x10 [ 1416.414994][T31370] __do_fast_syscall_32+0xe3/0x8c0 [ 1416.415008][T31370] do_fast_syscall_32+0x32/0x70 [ 1416.415020][T31370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1416.415034][T31370] RIP: 0023:0xf707ef6c [ 1416.415043][T31370] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1416.415054][T31370] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 1416.415065][T31370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000047bc [ 1416.415072][T31370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1416.415078][T31370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1416.415084][T31370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1416.415090][T31370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1416.415104][T31370] [ 1416.415108][T31370] Mem-Info: [ 1416.540256][T31370] active_anon:3764 inactive_anon:2197 isolated_anon:0 [ 1416.540256][T31370] active_file:12201 inactive_file:5342 isolated_file:0 [ 1416.540256][T31370] unevictable:1768 dirty:271 writeback:0 [ 1416.540256][T31370] slab_reclaimable:7460 slab_unreclaimable:71628 [ 1416.540256][T31370] mapped:25528 shmem:4020 pagetables:1585 [ 1416.540256][T31370] sec_pagetables:334 bounce:0 [ 1416.540256][T31370] kernel_misc_reclaimable:0 [ 1416.540256][T31370] free:60656 free_pcp:7154 free_cma:0 [ 1416.554840][T31370] Node 0 active_anon:100kB inactive_anon:80kB active_file:1952kB inactive_file:1184kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:616kB dirty:112kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7992kB pagetables:1300kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB [ 1416.564489][T31370] Node 1 active_anon:17456kB inactive_anon:8708kB active_file:46852kB inactive_file:20184kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:103896kB dirty:972kB writeback:0kB shmem:15044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7196kB pagetables:5040kB sec_pagetables:176kB all_unreclaimable? no Balloon:0kB [ 1416.574449][T31370] Node 0 DMA free:2576kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1416.583908][T31370] lowmem_reserve[]: 0 286 286 286 286 [ 1416.585736][T31370] Node 0 DMA32 free:33172kB boost:29416kB min:42492kB low:45760kB high:49028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100kB inactive_anon:80kB active_file:1952kB inactive_file:1184kB unevictable:3536kB writepending:112kB zspages:1676kB present:1032196kB managed:292868kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1416.595971][T31370] lowmem_reserve[]: 0 0 0 0 0 [ 1416.597644][T31370] Node 1 DMA32 free:206876kB boost:2048kB min:49188kB low:60972kB high:72756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17456kB inactive_anon:8708kB active_file:46852kB inactive_file:20184kB unevictable:3536kB writepending:972kB zspages:3824kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:26132kB local_pcp:956kB free_cma:0kB [ 1416.608124][T31370] lowmem_reserve[]: 0 0 0 0 0 [ 1416.609712][T31370] Node 0 DMA: 48*4kB (UE) 30*8kB (UE) 10*16kB (UE) 8*32kB (UE) 5*64kB (UE) 3*128kB (E) 0*256kB 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 2576kB [ 1416.614487][T31370] Node 0 DMA32: 1295*4kB (UME) 597*8kB (UME) 281*16kB (UME) 207*32kB (UME) 91*64kB (UME) 27*128kB (UME) 1*256kB (M) 3*512kB (ME) 1*1024kB (M) 0*2048kB 0*4096kB = 33172kB [ 1416.620306][T31370] Node 1 DMA32: 3723*4kB (UME) 3789*8kB (UME) 4090*16kB (UME) 353*32kB (UM) 147*64kB (UM) 112*128kB (UM) 45*256kB (UM) 91*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 206868kB [ 1416.626251][ T1454] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1416.629304][ T1454] usb 10-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1416.632504][ T1454] usb 10-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1416.636780][T31370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1416.639942][T31370] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1416.643104][T31370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1416.646269][T31370] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1416.649289][T31370] 24249 total pagecache pages [ 1416.651032][T31370] 2065 pages in swap cache [ 1416.652932][T31370] Free swap = 97612kB [ 1416.654348][ T1454] usb 10-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1416.657190][ T1454] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.659698][ T1454] usb 10-1: Product: syz [ 1416.661060][ T1454] usb 10-1: Manufacturer: syz [ 1416.662761][ T1454] usb 10-1: SerialNumber: syz [ 1416.665557][T31370] Total swap = 124996kB [ 1416.667540][T31370] 524155 pages RAM [ 1416.669277][ T1454] usblp0: Disabling reads from problematic bidirectional printer [ 1416.671868][T31370] 0 pages HighMem/MovableOnly [ 1416.673561][T31370] 210045 pages reserved [ 1416.674955][T31370] 0 pages cma reserved [ 1416.802076][T18867] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 1416.872001][ T1454] usblp 10-1:4.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1417.011927][T18867] usb 6-1: Invalid ep0 maxpacket: 64 [ 1417.077928][ T1454] usb 10-1: USB disconnect, device number 32 [ 1417.141963][T18867] usb 6-1: new low-speed USB device number 86 using dummy_hcd [ 1417.281351][T31364] usblp0: removed [ 1417.311860][T18867] usb 6-1: Invalid ep0 maxpacket: 64 [ 1417.314128][T18867] usb usb6-port1: attempt power cycle [ 1417.671670][T18867] usb 6-1: new low-speed USB device number 87 using dummy_hcd [ 1417.692232][T18867] usb 6-1: Invalid ep0 maxpacket: 64 [ 1417.821510][T18867] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 1417.842173][T18867] usb 6-1: Invalid ep0 maxpacket: 64 [ 1417.844754][T18867] usb usb6-port1: unable to enumerate USB device [ 1419.786450][T31412] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7834'. [ 1419.789308][T31412] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7834'. [ 1419.965262][T31414] misc userio: Invalid payload size [ 1421.496264][T31432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1421.499194][T31432] netlink: 188 bytes leftover after parsing attributes in process `syz.6.7839'. [ 1424.300006][T28463] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1424.460027][T28463] usb 10-1: Using ep0 maxpacket: 8 [ 1424.464355][T28463] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1424.469297][T28463] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1424.481462][T28463] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1424.486352][T28463] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1424.500012][T28463] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1424.503428][T28463] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.389541][T31492] FAULT_INJECTION: forcing a failure. [ 1426.389541][T31492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1426.394128][T31492] CPU: 3 UID: 0 PID: 31492 Comm: syz.1.7855 Tainted: G L syzkaller #0 PREEMPT(full) [ 1426.394147][T31492] Tainted: [L]=SOFTLOCKUP [ 1426.394151][T31492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1426.394157][T31492] Call Trace: [ 1426.394162][T31492] [ 1426.394168][T31492] dump_stack_lvl+0x100/0x190 [ 1426.394199][T31492] should_fail_ex.cold+0x5/0xa [ 1426.394214][T31492] _copy_from_user+0x2e/0xd0 [ 1426.394226][T31492] io_submit_one+0xbd/0x1fb0 [ 1426.394245][T31492] ? __lock_acquire+0x4a5/0x2630 [ 1426.394259][T31492] ? irqentry_exit+0x180/0x670 [ 1426.394270][T31492] ? lockdep_hardirqs_on+0x78/0x100 [ 1426.394282][T31492] ? __pfx_io_submit_one+0x10/0x10 [ 1426.394302][T31492] ? __might_fault+0xc5/0x140 [ 1426.394319][T31492] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 1426.394336][T31492] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 1426.394355][T31492] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 1426.394376][T31492] ? __pfx_ksys_write+0x10/0x10 [ 1426.394394][T31492] __do_fast_syscall_32+0xe3/0x8c0 [ 1426.394408][T31492] do_fast_syscall_32+0x32/0x70 [ 1426.394421][T31492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1426.394435][T31492] RIP: 0023:0xf7f18f6c [ 1426.394445][T31492] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1426.394456][T31492] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 1426.394467][T31492] RAX: ffffffffffffffda RBX: 00000000f538c000 RCX: 0000000000000001 [ 1426.394474][T31492] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 1426.394483][T31492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1426.394489][T31492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1426.394496][T31492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1426.394510][T31492] [ 1426.607082][T31497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1426.608332][T31497] netlink: 188 bytes leftover after parsing attributes in process `syz.6.7856'. [ 1427.094991][T28463] usb 10-1: usb_control_msg returned -71 [ 1427.096784][T28463] usbtmc 10-1:16.0: can't read capabilities [ 1427.101848][T28463] usb 10-1: USB disconnect, device number 33 [ 1427.412124][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.414385][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.146171][T31339] ------------[ cut here ]------------ [ 1429.149379][T31339] UBSAN: shift-out-of-bounds in drivers/ata/libata-core.c:5166:24 [ 1429.152400][T31339] shift exponent 4210818301 is too large for 64-bit type 'long long unsigned int' [ 1429.156872][T31339] CPU: 3 UID: 0 PID: 31339 Comm: kworker/3:0H Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.156896][T31339] Tainted: [L]=SOFTLOCKUP [ 1429.156901][T31339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1429.156911][T31339] Workqueue: events_highpri ata_scsi_deferred_qc_work [ 1429.156936][T31339] Call Trace: [ 1429.156943][T31339] [ 1429.156949][T31339] dump_stack_lvl+0x100/0x190 [ 1429.156972][T31339] ubsan_epilogue+0xa/0x30 [ 1429.156986][T31339] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 1429.157008][T31339] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1429.157030][T31339] ata_qc_issue.cold+0x38/0x9f [ 1429.157052][T31339] ? ata_std_qc_defer+0x14b/0x190 [ 1429.157075][T31339] ata_scsi_deferred_qc_work+0x154/0x1f0 [ 1429.157095][T31339] process_one_work+0x9d7/0x1920 [ 1429.157123][T31339] ? __pfx_process_one_work+0x10/0x10 [ 1429.157147][T31339] ? __pfx_ata_scsi_deferred_qc_work+0x10/0x10 [ 1429.157168][T31339] worker_thread+0x5da/0xe40 [ 1429.157192][T31339] ? __pfx_worker_thread+0x10/0x10 [ 1429.157211][T31339] ? kthread+0x13a/0x450 [ 1429.157228][T31339] ? __pfx_worker_thread+0x10/0x10 [ 1429.157246][T31339] kthread+0x370/0x450 [ 1429.157268][T31339] ? __pfx_kthread+0x10/0x10 [ 1429.157289][T31339] ret_from_fork+0x754/0xd80 [ 1429.157315][T31339] ? __pfx_ret_from_fork+0x10/0x10 [ 1429.157342][T31339] ? __switch_to+0x7b4/0x1120 [ 1429.157359][T31339] ? __pfx_kthread+0x10/0x10 [ 1429.157381][T31339] ret_from_fork_asm+0x1a/0x30 [ 1429.157409][T31339] [ 1429.157415][T31339] ---[ end trace ]--- [ 1429.212538][T31339] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1429.215242][T31339] CPU: 3 UID: 0 PID: 31339 Comm: kworker/3:0H Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.218813][T31339] Tainted: [L]=SOFTLOCKUP [ 1429.220420][T31339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1429.224603][T31339] Workqueue: events_highpri ata_scsi_deferred_qc_work [ 1429.227342][T31339] Call Trace: [ 1429.228735][T31339] [ 1429.229987][T31339] dump_stack_lvl+0x100/0x190 [ 1429.231898][T31339] vpanic+0x552/0x970 [ 1429.233356][T31339] ? __pfx_vpanic+0x10/0x10 [ 1429.235312][T31339] panic+0xd1/0xe0 [ 1429.236871][T31339] ? __pfx_panic+0x10/0x10 [ 1429.238777][T31339] ? ret_from_fork_asm+0x1a/0x30 [ 1429.240909][T31339] ? check_panic_on_warn+0x1f/0x90 [ 1429.243152][T31339] check_panic_on_warn.cold+0x19/0x34 [ 1429.245483][T31339] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 1429.248089][T31339] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1429.250383][T31339] ata_qc_issue.cold+0x38/0x9f [ 1429.252455][T31339] ? ata_std_qc_defer+0x14b/0x190 [ 1429.254277][T31339] ata_scsi_deferred_qc_work+0x154/0x1f0 [ 1429.256262][T31339] process_one_work+0x9d7/0x1920 [ 1429.257908][T31339] ? __pfx_process_one_work+0x10/0x10 [ 1429.259716][T31339] ? __pfx_ata_scsi_deferred_qc_work+0x10/0x10 [ 1429.261767][T31339] worker_thread+0x5da/0xe40 [ 1429.263382][T31339] ? __pfx_worker_thread+0x10/0x10 [ 1429.265297][T31339] ? kthread+0x13a/0x450 [ 1429.266775][T31339] ? __pfx_worker_thread+0x10/0x10 [ 1429.268596][T31339] kthread+0x370/0x450 [ 1429.269945][T31339] ? __pfx_kthread+0x10/0x10 [ 1429.271593][T31339] ret_from_fork+0x754/0xd80 [ 1429.273526][T31339] ? __pfx_ret_from_fork+0x10/0x10 [ 1429.275670][T31339] ? __switch_to+0x7b4/0x1120 [ 1429.277391][T31339] ? __pfx_kthread+0x10/0x10 [ 1429.279380][T31339] ret_from_fork_asm+0x1a/0x30 [ 1429.281462][T31339] [ 1430.367027][T31339] Shutting down cpus with NMI [ 1430.369125][T31339] Kernel Offset: disabled [ 1430.370606][T31339] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:23:21 Registers: info registers vcpu 0 CPU#0 RAX=00000000020ccb5b RBX=ffffffff8e4975c0 RCX=ffffffff8b8afc75 RDX=0000000000000000 RSI=ffffffff8de73b43 RDI=ffffffff8c1ace20 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed1005646795 R10=ffff88802b233cab R11=0000000000000000 R12=fffffbfff1c92eb8 R13=0000000000000000 R14=ffffffff90d93010 R15=0000000000000000 RIP=ffffffff8b8ae5df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809715f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50d7809 CR3=0000000058b33000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000003adcd41 RBX=ffff88801c322480 RCX=ffffffff8b8afc75 RDX=0000000000000000 RSI=ffffffff8de73b43 RDI=ffffffff8c1ace20 RBP=0000000000000001 RSP=ffffc9000046fdf0 R8 =0000000000000001 R9 =ffffed1005666795 R10=ffff88802b333cab R11=0000000000000000 R12=ffffed1003864490 R13=0000000000000001 R14=ffffffff90d93010 R15=0000000000000000 RIP=ffffffff8b8ae5df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809725f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002cf24220 CR3=000000004ce82000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000001db3887 RBX=ffff88801c3d4900 RCX=ffffffff8b8afc75 RDX=0000000000000000 RSI=ffffffff8de73b43 RDI=ffffffff8c1ace20 RBP=0000000000000002 RSP=ffffc9000047fdf0 R8 =0000000000000001 R9 =ffffed1005686795 R10=ffff88802b433cab R11=0000000000000000 R12=ffffed100387a920 R13=0000000000000002 R14=ffffffff90d93010 R15=0000000000000000 RIP=ffffffff8b8ae5df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809735f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000565362cdef40 CR3=0000000051ad6000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=bf29d733ce20b7e0 a2be750c1476bf0b bf29d733ce20b7e0 a2be750c1476bf0b bf29d733ce20b7e0 a2be750c1476bf0b bf29d733ce20b7e0 a2be750c1476bf0b ZMM18=24e6879b1e7ed70b 139ab6ba96301725 24e6879b1e7ed70b 139ab6ba96301725 24e6879b1e7ed70b 139ab6ba96301725 24e6879b1e7ed70b 139ab6ba96301725 ZMM19=2432000000000000 0000000000000004 2432000000000000 0000000000000003 2432000000000000 0000000000000002 2432000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800038003000400 04080004800201c7 080008004da00074 656e2d74736f6876 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7665642f01ffff ffffffffffffe108 0480030400000050 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001ec0 0000001400000000 0000000000000000 000000000000001c ZMM24=eb8ef2a2eb8ef2a2 eb8ef2a2eb8ef2a2 eb8ef2a2eb8ef2a2 eb8ef2a2eb8ef2a2 eb8ef2a2eb8ef2a2 eb8ef2a2eb8ef2a2 eb8ef2a2eb8ef2a2 eb8ef2a2eb8ef2a2 ZMM25=dc430400dc430400 dc430400dc430400 dc430400dc430400 dc430400dc430400 dc430400dc430400 dc430400dc430400 dc430400dc430400 dc430400dc430400 ZMM26=1ea912db1ea912db 1ea912db1ea912db 1ea912db1ea912db 1ea912db1ea912db 1ea912db1ea912db 1ea912db1ea912db 1ea912db1ea912db 1ea912db1ea912db ZMM27=4d9255494d925549 4d9255494d925549 4d9255494d925549 4d9255494d925549 4d9255494d925549 4d9255494d925549 4d9255494d925549 4d9255494d925549 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7c4800007c480000 7c4800007c480000 7c4800007c480000 7c4800007c480000 7c4800007c480000 7c4800007c480000 7c4800007c480000 7c4800007c480000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85750ec5 RDI=ffffffff9b478e00 RBP=ffffffff9b478dc0 RSP=ffffc90007b6f640 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=0000000000000010 R15=ffffffff85750e60 RIP=ffffffff85750eef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809745f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080b69018 CR3=00000000617a8000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000