last executing test programs: 5m19.889318508s ago: executing program 0 (id=142): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bridge0\x00', 0x0}) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2, 0x9, 0x0, 0x8, 0x2, 0x0, 0x70bd2a, 0x25dfdbfd}, 0x10}}, 0x60000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f3030000800034000000007200004800600010000020000050002"], 0xcd0}}, 0x0) (async) r4 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x4100, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1404, 0x10, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x3) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0xfffc}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) write$snapshot(r4, &(0x7f0000000080)="a8bf27dac481b3", 0x7) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, 0x3, &(0x7f0000ff8000/0x8000)=nil) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000150) 5m19.477262878s ago: executing program 0 (id=147): sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140e, 0x529, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000850}, 0x4040) 5m19.476971372s ago: executing program 0 (id=148): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$kcm(0x21, 0x7, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) close(r4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xe884, 0x800, 0x2, 0x158}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = signalfd4(r3, &(0x7f00000000c0)={[0x6, 0xfffffff7]}, 0x8, 0x180000) ioctl$MON_IOCX_MFETCH(r9, 0xc00c9207, &(0x7f0000000440)={0x0, 0x0, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) syz_ublk_add_dev(r6, 0x0, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x3, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') 5m19.230765391s ago: executing program 0 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="11223344556677889900aabbccdd", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\x00', 0x1) openat(r2, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0xfc94c54f54391741, 0x188) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') preadv(r7, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x62c21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbb"], 0x0) 5m18.337856279s ago: executing program 0 (id=161): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100, 0x20000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000240)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x2}, @release], 0x0, 0x0, 0x0}) r2 = getpgrp(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000902000073111b00000000009500000000040000"], &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC=r0, @ANYRESDEC=r4, @ANYRES8=r1, @ANYRES64=r3, @ANYRESHEX=r3], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x400448c9, 0x0) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write(r5, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) syz_pidfd_open(r2, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/pid\x00') r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x8ce}) 5m17.887107333s ago: executing program 0 (id=169): open(0x0, 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x35f881, 0x1) (async) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c00000000"], 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0x5, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (rerun: 32) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) (rerun: 32) write(r1, &(0x7f0000000340)="65486d795fe26defde837dda726561645f74b9ff9be37786fe66e431205f2e76", 0x20) (async, rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32) connect$packet(r2, &(0x7f0000000200)={0x1f, 0x1a, 0x0, 0x1, 0x95, 0x6, @remote}, 0x14) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async, rerun: 32) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000180)='./bus\x00', &(0x7f00000000c0)='ntfs\x00', 0x241481, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2000041) (rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) 5m17.753821451s ago: executing program 32 (id=169): open(0x0, 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x35f881, 0x1) (async) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c00000000"], 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0x5, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (rerun: 32) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) (rerun: 32) write(r1, &(0x7f0000000340)="65486d795fe26defde837dda726561645f74b9ff9be37786fe66e431205f2e76", 0x20) (async, rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32) connect$packet(r2, &(0x7f0000000200)={0x1f, 0x1a, 0x0, 0x1, 0x95, 0x6, @remote}, 0x14) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async, rerun: 32) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000180)='./bus\x00', &(0x7f00000000c0)='ntfs\x00', 0x241481, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2000041) (rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) 3m37.767724527s ago: executing program 1 (id=747): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x4, 0x0, @void}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x84, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x68}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000380)=[{0x0, 0x1, {0x1, 0x1}, {0x1, 0x1, 0x4}, 0x2}, {0x2, 0x0, {0x1}, {0x0, 0xf}, 0x2, 0x1}], 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x3}, {0x0, 0x1}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x40}}, 0x0) socket(0x18, 0x800, 0x81) 3m36.648555498s ago: executing program 1 (id=751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000240)=""/141, &(0x7f0000000300)=0x8d) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$search(0xa, r3, &(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$inet_sctp(0x2, 0x5, 0x84) lsm_get_self_attr(0x0, &(0x7f0000001d00)={0x0, 0x0, 0x102e, 0x100e, ""/4110}, &(0x7f0000000340)=0x102e, 0x1) syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r5 = creat(&(0x7f0000000200)='./bus\x00', 0x48) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[], 0x2b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000053d2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x1792, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) msgget(0x3, 0x180) syz_emit_ethernet(0x0, 0x0, 0x0) close(r4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) 3m34.870533938s ago: executing program 1 (id=755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000006140b7aacf30a0101000000000000000007000000140000001000"], 0xc4}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094013000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x8084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)=@newtfilter={0xd84, 0x2c, 0xd27, 0x170bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff, 0x10}, {0x0, 0xfff1}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xd58, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_POLICE={0x41c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RESULT={0x8, 0x5, 0x550}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x0, 0x40, 0x560, 0x5, 0x6e3, 0x1, 0xfffffffb, 0x9, 0xfffffffa, 0x9, 0x3ff, 0x9, 0x8, 0x3, 0xfffffffc, 0x7, 0x1, 0x7, 0xc00000, 0x10000, 0xfffff09f, 0x800, 0x7fffffff, 0x3787, 0x0, 0x7, 0xc, 0x84fa, 0xb4c6, 0x6, 0x5, 0xbcf, 0x6, 0x7fff, 0x3, 0x40, 0x6, 0x8, 0x1, 0x7, 0xfffff000, 0x4, 0x7, 0x5, 0x75ae2813, 0x2, 0x6, 0xe, 0x99, 0x3, 0x3, 0x4, 0x0, 0x7fff, 0x8001, 0x0, 0x5, 0x5, 0x0, 0xfffffff9, 0x4, 0x4, 0x7, 0x3, 0x20000, 0x4, 0x3, 0x4, 0x6d08, 0x10001, 0x302d2f29, 0x9, 0x5, 0x9, 0x4, 0x8001, 0x7, 0xfffffc01, 0x401, 0x1, 0x2, 0xffffffff, 0x8, 0xffffffff, 0x6, 0xfff, 0x2, 0x4, 0x6, 0x3, 0xfff, 0x0, 0x200, 0xaa, 0xfffffda5, 0xff, 0x9, 0x7, 0xeb, 0x9, 0x1ff, 0x1, 0x9, 0xff, 0x40, 0x80000001, 0xf9, 0x6, 0x8, 0x6, 0x1, 0x8, 0x0, 0x6, 0x8, 0x7f, 0x4, 0x6c6, 0x2, 0x2, 0x5, 0x687f8000, 0x40, 0x7fffffff, 0x0, 0x8f7, 0x0, 0x7, 0x5, 0xd, 0x1, 0x0, 0x6, 0x635e, 0x3, 0xffff, 0x4, 0xbe, 0x0, 0x4, 0x6, 0x7, 0x5, 0x7, 0x5, 0x7, 0x7fff, 0x3, 0x3, 0x0, 0x5, 0xb, 0x3, 0x101, 0x6, 0xfc, 0x6, 0x80000001, 0x2b, 0x5, 0x7, 0x9, 0x7, 0xffffffff, 0x9, 0x5, 0x13180000, 0x6, 0x1000, 0xfffffff7, 0x5, 0x9, 0x4, 0x7, 0x9, 0x16a, 0x0, 0xaa4a, 0x80, 0x40, 0x65da, 0x5, 0x0, 0x6, 0x0, 0x8, 0xff, 0xa, 0x4, 0x2, 0x40, 0x80000000, 0x8, 0x8, 0x7, 0x3, 0x7, 0x1ff, 0x3, 0xc, 0x8, 0x67ce, 0x4, 0x1, 0xef9, 0xd71d, 0x101, 0x8, 0xfffffff1, 0x3ff, 0x1f0, 0x4007, 0x100, 0x2, 0x8, 0x0, 0x5, 0x80, 0x9, 0x3, 0x3, 0xb6, 0x5, 0x1, 0xffffffff, 0x8000, 0x1, 0x94b, 0x2, 0xfffffff7, 0x7fff, 0x0, 0x5, 0x2, 0x5, 0x1, 0x400, 0x3b4, 0x8, 0x8, 0x8, 0x3, 0x6, 0x4, 0x49cf, 0x2, 0x4, 0xfffffb49, 0x2, 0x4, 0x6, 0x8, 0x6, 0x8, 0xf72]}]}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x910, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9789, 0xc0, 0x9, 0x3ff, 0x2, 0x1f6d08f5, 0x4, 0x3, 0x81, 0xee, 0xe, 0x6, 0x8, 0x1d2a23e9, 0x6, 0x3, 0x7, 0x8, 0x7fffffff, 0xec5f, 0x1, 0x5, 0x1ec, 0x8, 0x5, 0xa, 0x9, 0x3, 0x5, 0x3ff, 0x4, 0x23f, 0x7, 0x2, 0x80, 0x1cba0, 0xf3d, 0x3, 0x7, 0x40, 0x7ff, 0x7, 0x4, 0xffffffff, 0x4, 0xf, 0x6, 0xf71, 0x1898, 0x5, 0x8, 0xc3, 0x4, 0x2, 0x1, 0x7, 0xdd, 0x9, 0x800, 0x1, 0x0, 0x8, 0xe2de, 0xc, 0x5, 0xa413, 0x9, 0x1, 0x3, 0x9, 0x0, 0x6, 0x3, 0x200, 0x8, 0xff, 0xc6, 0x57, 0x2, 0x24c7, 0x8, 0x4, 0x2, 0xffffff81, 0x5, 0x8, 0x7, 0x0, 0x6, 0x1, 0x7, 0x7, 0x5, 0xd1, 0x85, 0x3, 0x8, 0xecaa, 0x41, 0x5c5c, 0x5, 0x2, 0x3, 0x8, 0xffff7fff, 0x5, 0x0, 0xed8f, 0x2, 0x6, 0x3, 0x1, 0x4, 0xfffffff7, 0x1000, 0xbe8f, 0x400, 0x2, 0xd, 0x4eaf, 0x6, 0xac18, 0x2e, 0x5, 0x9, 0x1, 0x90, 0x8, 0x0, 0x46a1, 0x3, 0x7, 0x8, 0x5, 0x4, 0x4, 0xa, 0x7ff, 0x6, 0x1, 0x41, 0x87b0, 0x9, 0x2, 0xe, 0xf3b, 0x54, 0xb764, 0xd3c00000, 0x10, 0x7, 0x4, 0x5, 0xf86f, 0x0, 0xc70, 0x7, 0x7, 0x5, 0x2, 0x2, 0x10001, 0x1ff, 0x7, 0x7, 0x1, 0x8, 0x0, 0xfff, 0x0, 0xfffffffd, 0x3, 0x0, 0x8, 0x1, 0x9077, 0x5, 0xb09f, 0x2, 0x5, 0x2, 0x1, 0x10001, 0x1, 0x9, 0x80, 0x5, 0x5, 0x8, 0x0, 0x4, 0x0, 0x0, 0x7, 0xcd, 0xf, 0x0, 0xffff1291, 0x7f, 0xe8a, 0xe, 0x5f2d, 0x4, 0x10000, 0x10, 0x8, 0x5, 0x9, 0x5, 0x700000, 0x2, 0x9, 0x8, 0x1, 0xa, 0x6, 0x4e2b, 0x8, 0x5, 0x7, 0x0, 0x9, 0x8000, 0x1, 0x6, 0x5, 0x5, 0x1, 0x2, 0x3, 0x0, 0x2, 0x4, 0x70a0e558, 0x1c3a2f16, 0xffffffff, 0x5, 0x9, 0x5, 0x9, 0x3, 0x9, 0x10000, 0x0, 0x100, 0x4, 0x10000, 0x7, 0x7, 0x800, 0x81, 0x92, 0x6, 0x7fffffff, 0x9, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x1, 0xb3d, 0x200, {0xe, 0x0, 0x0, 0x0, 0x7, 0x7f}, {0x9, 0x0, 0x4, 0x2, 0xa, 0xd6b}, 0xfffffffa, 0x5, 0x50}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xcf81, 0xfffffffe, 0xfffffff4, 0x401, 0x2, 0xfffffffa, 0x5, 0x1, 0x3, 0x400, 0x0, 0x93e0, 0x200000, 0x4, 0x40, 0x7, 0xd, 0x81, 0xd4fa, 0x2, 0x2, 0x8, 0x9, 0xab, 0x1ff, 0x0, 0x10000, 0x1, 0x5, 0x1ff, 0x0, 0x7, 0xc1, 0x49d5, 0x4, 0x9, 0x1, 0x4, 0xf, 0x8, 0x3, 0x5, 0xa2, 0x7, 0x5, 0xd5fd, 0x8, 0x0, 0x6, 0x3, 0x60000000, 0x9, 0x3, 0x9, 0x2, 0xe354, 0x9d, 0x6, 0x2, 0x4, 0x7, 0x80000001, 0x1000, 0x3, 0x7, 0x401, 0x4b5, 0x715, 0x7, 0xfffffff5, 0x6, 0x0, 0x2, 0x9, 0xffff, 0x2, 0x3, 0x2, 0x1, 0x600000, 0xf3ae, 0x8, 0x101, 0x6, 0xa, 0x6, 0x3, 0x8, 0x0, 0x190, 0x3, 0x5, 0xd6c4, 0xffffffff, 0x3, 0x4aa6, 0x4, 0x80000000, 0x7, 0x1, 0x7d, 0x8, 0x2, 0x4, 0xfffffff9, 0x10000, 0x401, 0xd, 0x4, 0x6, 0x1, 0xa, 0xf, 0xf8e, 0x2, 0x1, 0x400, 0xfffffff7, 0x800, 0x8001, 0x1, 0x7, 0xfffffff7, 0x8, 0x2, 0x2, 0x400, 0x4, 0x4b13, 0x80000000, 0x0, 0x2, 0x2a52, 0x5, 0x7, 0x10, 0x4, 0x8, 0x6, 0x80000000, 0x6, 0x101, 0x1000, 0xc, 0x9, 0x9, 0x7, 0x4, 0x10001, 0x10000, 0x1f, 0x2, 0x9, 0x3, 0x92f, 0x0, 0x0, 0x5, 0x4, 0x6, 0x2c47, 0x8, 0x7ff, 0x7, 0x3, 0x0, 0x2, 0x5f67, 0x5, 0x0, 0x9, 0xeb, 0x1, 0x8, 0x9, 0xb, 0x6, 0x9, 0x7f, 0xbd, 0x6, 0x7, 0x9, 0x1, 0x10001, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x1, 0x5, 0x1, 0x9a, 0x10000, 0x7, 0x5, 0x6, 0x9, 0x4, 0x5, 0x10001, 0x6, 0x103ff, 0x0, 0x10, 0x1, 0xfffffff7, 0xabe, 0xfffffffb, 0xc, 0x4, 0x7fffffff, 0x335, 0x5, 0x6290, 0x5, 0x5, 0x3ff, 0x7f, 0x8, 0xa, 0xb, 0x3, 0xcc, 0x4, 0x9, 0x3, 0x780, 0x2, 0x7, 0x2, 0x7fff, 0x800, 0x9, 0x8, 0x5, 0x4, 0x0, 0x6, 0x6, 0x7, 0x552, 0x6, 0x3ff, 0x2, 0x8, 0x6, 0x5, 0x8, 0x2, 0x4, 0x9, 0x8, 0x6, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x9, 0x2c22, 0x8, {0x7, 0x1, 0x6, 0x6, 0x4, 0x8}, {0xa, 0x1, 0xfff7, 0x5569, 0x7f28, 0x10000}, 0x0, 0x0, 0x7ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000006, 0x1, 0x5, 0x7, {0x7, 0x1, 0xb69, 0x5, 0x5, 0x7}, {0x10, 0x0, 0x4ff9, 0x7, 0x4, 0xb}, 0x5, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0xffff, 0xe, 0x0, {0x11, 0x1, 0x2, 0xf9b, 0x4000, 0x81}, {0x5, 0x2, 0x8, 0x3, 0xffff, 0x2}, 0x0, 0x8, 0xfffffff7}}]}]}}]}, 0xd84}, 0x1, 0x0, 0x0, 0x884}, 0x4000040) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r10, &(0x7f0000000200)='S', 0x1) r11 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r11, 0x40045532, &(0x7f0000000100)) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) ioctl(r14, 0x4048aecb, &(0x7f0000600100)="070000000000000001") r15 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r15, 0x4144, 0x0) r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r16, 0xffffffffffffffff, 0x0) 3m34.261262357s ago: executing program 1 (id=757): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x7745, &(0x7f0000000100)={0x0, 0xbfb7, 0x20, 0x1, 0x1eb}) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x30, 0x2007, @fd, 0x8, &(0x7f0000003700)=[{&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/123, 0x7b}, {&(0x7f0000002600)=""/230, 0xe6}], 0x7, 0x1, 0x1, {0x2, 0x0, 0x4, '\x00', &(0x7f00000037c0)={0xa4cd, 0xff, 0x4f, &(0x7f0000003740)="bfacf6bbfcdfad0f1261bef427c95e743132195bb3293ed7263ff9ff37c38adec1cb3ddd5ddee8a384e99a2f5014dcf292afb8eade6659d5a7f1d5c59097badeab1796e5b6d5020141f4c425c42090", 0x1}, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xa}}, './file0\x00'}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x0, 0x0, 0xfffffd3f) write$P9_RSTATu(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="a30200007d0000000562010001000000000200000000000000000000000000000000000000000000000000000000000000008700046e6f4465767b6376666f7825ffffff81f6ffffffffffffffcebc9200000025ef48edc5d147761fa5e94daa3550ff8dc4843489d1cc21cc41ef9565645c933434ef70c08e832ad0513f5e60fb352a1b667c313962520ef12ac33161865a9651a2dec2e21f82bb7fb8c258656ffa4288d985d97aab4f5a35a57d8b2ef6bac5d7536637eb806bcb3800704a86cec602007dfa673effeb09b535187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc213f600000000000000010000000000008afef8f669fb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9bf699fa88dace6cde7ba4a400b4b0b4dbf6c69a69d017cec45906f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a2c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f516da2906ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/663, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x2a3) r7 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r7, 0x1) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000340), 0x7, 0x4d2d47) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r8, 0x29, 0x33, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$inet(r11, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 3m33.291887689s ago: executing program 1 (id=761): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)={0x20, 0x52, 0x1, 0x3, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}]}, 0x20}}, 0x0) fcntl$getflags(r0, 0x40a) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)="303132333a616263643a3010276e", 0xe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000200)=""/4096}, &(0x7f0000000040)="85070000ae6c", 0x0, 0x8, 0x10011, 0x1, 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x40305839, &(0x7f0000000540)={'macvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1e}, 0x94) 3m32.77391755s ago: executing program 1 (id=764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x123, 0x234}, 0x14}}, 0x0) 3m17.670844216s ago: executing program 33 (id=764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x123, 0x234}, 0x14}}, 0x0) 6.46876186s ago: executing program 2 (id=1657): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xb, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0800000000000000000a0000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioperm(0x7, 0x81, 0xfffffffffffffffe) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) gettid() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018018000f89f2cca78fcb850fd54892a850c00000000002020207b1af8ff00000000bfa1000000000000ef767810f8ffff000002000008000000b7030000fdff0083850000002dea1c18832622850de841a5fc8b0a6a9d44a9d8f4eed3d09c81cb85f317a4b1842a476d4f0b0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) flock(0xffffffffffffffff, 0x2) r6 = open(&(0x7f00000001c0)='.\x00', 0x104041, 0xa) flock(r6, 0x1) 5.669359918s ago: executing program 2 (id=1664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r2, r1, 0x2f}, 0x20) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r1, r3, 0x2f, 0x0, 0x4, @void, @value=r1}, 0x20) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000001001400128009000100766c616e000000000400028008000500", @ANYRES32=0x0, @ANYBLOB="c9"], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 5.524040231s ago: executing program 2 (id=1668): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x7745, &(0x7f0000000100)={0x0, 0xbfb7, 0x20, 0x1, 0x1eb}) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x30, 0x2007, @fd, 0x8, &(0x7f0000003700)=[{&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/123, 0x7b}, {&(0x7f0000002600)=""/230, 0xe6}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x8, 0x1, 0x1, {0x2, 0x0, 0x4, '\x00', &(0x7f00000037c0)={0xa4cd, 0xff, 0x4f, &(0x7f0000003740)="bfacf6bbfcdfad0f1261bef427c95e743132195bb3293ed7263ff9ff37c38adec1cb3ddd5ddee8a384e99a2f5014dcf292afb8eade6659d5a7f1d5c59097badeab1796e5b6d5020141f4c425c42090", 0x1}, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xa}}, './file0\x00'}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x0, 0x0, 0xfffffd3f) write$P9_RSTATu(r1, &(0x7f0000000900)=ANY=[], 0x2a3) r7 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r7, 0x1) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000340), 0x7, 0x4d2d47) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r8, 0x29, 0x33, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$inet(r11, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 5.020821544s ago: executing program 5 (id=1670): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec16784b76960}, 0x8000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x60, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008054) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000001440)) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000340)={0xcf44, 0xfffffffffffffff7}, 0x0) r5 = io_uring_setup(0x64eb, &(0x7f00000000c0)={0x0, 0x78e1, 0x3000, 0x1, 0x29a}) io_setup(0x4, &(0x7f0000000040)=0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) io_submit(r6, 0x3, &(0x7f0000002800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, r7, &(0x7f0000000080)="84", 0x1, 0x9, 0x0, 0x4}, 0x0, 0x0]) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r5, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x1, 0x377, 0x0, r5}, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) r8 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r8, &(0x7f0000003480)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f00000033c0)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000000140)=""/224, 0xe0}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/91, 0x5b}], 0x8, &(0x7f0000003400)=""/70, 0x46}, 0x40000010) 4.584473966s ago: executing program 2 (id=1673): mkdir(0x0, 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.468122493s ago: executing program 2 (id=1674): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0xfffffffe) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="66643bf051a63b66f09307d3f671623d77d4537824bef1c90b5990c2158dc147c723271dfacdc2a8db37eb36605ab4ac20c93fa920e08fc2928bd207e8688623dbb4cd4cdf400b46d27addf644802209d3ad899e537f7d540d9fb068560d8f5d3f16e75fe71bad94c630246978b4667518519c9d0c466b9d8983d34c7b7409109449d390538dae", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000600)={0x50, 0xfffffffffffffffe, r0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x82, 0x2, 0x0, 0xabef, 0x0, 0x0, 0x1, 0x8001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f5de6af0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xfffffffffffffffd, {0x0, 0xf83cb676ac42ebc1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0xa2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0xfffffdf8, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x3, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x14044801) openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x84000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x3) mmap(&(0x7f0000884000/0x1000)=nil, 0x1000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xa4442000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(r6, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000680)=""/83, 0x53}], 0x2) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) 4.380649087s ago: executing program 2 (id=1675): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7400000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003008000000000540012800b0001006272696467650000440002800c001f0001000000000000000500160001000000060027000e000000050029000000000008000400010100000c001e00a00000000000000008001b00fbffffff"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) write$cgroup_int(r0, &(0x7f0000000040)=0x84, 0x12) shutdown(r2, 0x1) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0x5a0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x26}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0xd6000, 0x0) fcntl$lock(r4, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) futimesat(r3, 0x0, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x2, 0x3fe, 0xffffffff, 0x81, 0xfffffffb}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r0, 0x20, &(0x7f0000000540)={&(0x7f0000000180)=""/135, 0x87, 0x0, &(0x7f0000000480)=""/150, 0x96}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0x9, &(0x7f0000000100)=ANY=[@ANYBLOB="732ac0ff04000000186200000a00000118230000", @ANYRES32=r7, @ANYBLOB="0000007a0affffff180200000a00000100000000eeff0000bfa201000000000007020000c0ffffffb704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r9, 0x708, 0x2000e) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000080)={0x1, 0xfe, 0x2, &(0x7f0000000000)={0x22, "271e6c5d59ed71c24ac5b072d56010b62db2500454e1fe22469c29274cf254a6da"}}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) r11 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x1a1040, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c000000f81b9e44aeef4049e3a9ea1f72254dd40da6d17c1df03b8a1a7d760a180f5fd5bed4a3249d", @ANYRES16=r10, @ANYBLOB="000226bd7000ffdbdf250600000005005300010000001800178004000500040004000400020004000200040004000a00e800ffffffffffff00001c00e700cf89c87931583c74a9cffe786267455e3a6cc36e37eabfba"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x40) ioctl$SOUND_MIXER_READ_VOLUME(r11, 0x40086603, &(0x7f0000000080)) 4.161485739s ago: executing program 4 (id=1676): bpf$MAP_CREATE(0x600000000000000, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x13000000, 0x4}, 0x50) 4.0380217s ago: executing program 4 (id=1677): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1, 0x9, 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(&(0x7f0000002340)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, 0x0, 0x25, 0x4, @val=@iter={&(0x7f00000001c0)=@map_fd=r0, 0x10}}, 0x18) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) r6 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0xb687, 0x20, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x800a}}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="1700000014000100000000000055b5dff25b39dec00002000000", @ANYRES32=0x0, @ANYBLOB="08000100ffffffff"], 0x20}}, 0x0) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$char_usb(r4, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, [0x6]}}) 4.037658482s ago: executing program 5 (id=1678): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000180)={0xb, 0x103, 0x0, {0x0, 0x8000000, 0x5, 0x2}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 2.931097862s ago: executing program 4 (id=1680): r0 = socket(0xb, 0x6, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='pim6reg0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmmsg$sock(r0, &(0x7f00000038c0)=[{{&(0x7f0000000180)=@nfc={0x27, r1, 0x1, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)="9d939aa1dc6e56582e58cfdfa76e400704e6bca9eb626c0d649cbddb3895f3d2a814ae7d26550afc3b9684e4c7555263aed43180498d9d60fb565201c9c72594fffb0edd1cf073c7f9c3cfceac20fd4f283f5ae9cdd75d890bce8925c6299b4e0544c43c259d98af12885f00d5a132160c4d270ae14aa165bccaafeb7a52eeb1", 0x80}], 0x1, &(0x7f0000000240)=[@txtime={{0x14, 0x1, 0x3d, 0x8}}, @txtime={{0x14, 0x1, 0x3d, 0x6}}, @mark={{0x10, 0x1, 0x24, 0x3}}, @mark={{0x10, 0x1, 0x24, 0x80000000}}, @timestamping={{0x10, 0x1, 0x25, 0x9dc7}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f00000003c0)="5ad99989641498e608d5523a5623747bf767c9c099fc382ecabd13cc607233dd09f85ba2cdbf3a4f2750f89896f411a42141c850eb7ed79ef038f2a8ff2292792d684005f86525fa99fb221bc38658acc3158271767630ceab83655e8be9945491089fef93d0646580c6340f2ccec5fd25fe3643752dc554763636f2fb0e48312a17a8012a305a59a42cc914e2f9de3e71c95a58edcd50a94effa9ebd347d405eeb1ae4f482594f0d2cf4532cf5e1e229d97ecab54ee16aba67aec7d37aeb89b739c65f11fc23ae6b66b4bbb8b6aa1d737e6fe223a83422ac3c33bdebcf4b90beb096656748e85e28d434842e78177a5386724913755e8d8f6db20feff", 0xfd}, {&(0x7f00000004c0)="4baf332f8ba078c808c1c72f7fbe40d4227ad482c4a91359bf59539bfca0f4378369317004fb109a55ef6e14025757ebed71c8d102f6c48262d77e912ca09a90adc48eb92137550d99c7817218d384e98dccfa9e036021083e8d51f097f7d9b41646dc5efc753375fdd5a44163ebf5846ca3b891af9eb0b08adf0edcd27e2673692f25e01c9953a22a88a8e71f17fcce18a206a92359c047e8a9a850d35dee387209fd9ab265bbb95f8ac1bbdb1de3697ce87d112554852303580ee197a8f307e233a6739f33c2dbe192cd2c183e9eaef46578e68eb35cdbc324c2a3e9e439807fa52706262040ec16262f484359b1944381fc39ff893c0308e24e447e7d055b6d8dba883f0c866921847981f95516301112d5c72e86af56e5f8348f28428d0e80437724ab0404fd2696b6dda6cb291afeac047f7549bf4cbff3881d268ab757c18fa3dfdd501dce63ac79e34df64f850b00b23f3d4552e99c0e078c609ad0dfc226555fb29c462ade91c7a7140b73d11cdf06765a35a4fe3310a104b496c8ff7cc7468550e9eed8018277a4d1e42247b5317f115ff33843db1d30a709b2912a3658a8ff0f48545a430ac46bd62b0ab14df47a7411e234663dc5e84ca56f7274711bd710e28ab905ea38673aaf5ca6190519771ca1658839111884c93a606fc8c69c67a316e90c01088d39a49cc822aa4ad9fe14d377ca8febc0120390175e9f46f2d0455e937a0fd24e151ea39d9fa3f25a390f7755b72de30e01b02fb2f08acc7704f48a696d65c130b3c0f9ca1ac5f57f65b1a8ed2ec8c0627572d160d615246403790efb2b4d9007356f9e9d30f0bfe620db35c62814a983ab78a87d3e9b353e303edfb60e5aaa643e874ba06ef35997a81a08c6f50683312cc4470943f63a4d500b716acff9eea125a45b0b82b5704598487c146b50b07f14a3456b74cf0b43eaa148b401d20b5d90487a8e9c1ef631f7ac5f315192e794fb5c63afe020f72a5277e94558323ce1064c379af4de182aac87af933a44e4f8143ab8d6cf0f482bf993b5f408b2c1baffa4e1372f886acc468afdd731f4abb0dd0c018b0094b44874b07a8e31291aac7bed207381db87c303f69ae3b77d68e02facc797a482d799ced842393199bfb13a1aeecd60e4ef455d93a8e745318a83d49da4324b996b1c858bd2e9d945eeefaab8cb82f41996219e03024bfe3430df4cb4eda4f99e7d796e60e7bb2f49982204a5cdbead50ad0a055fc58f0cf352dff467c9d9afee36d0bb531f0cc31c9d3a0fd38f712441a33eccc65431b78eed76be4b2f136343451325769999e3cefd2963629a95f17fd0be8227e79b9e9de013e9f0e34a6d5e444c90a948a65b2f24af3b0f68d680fc00fea0acac8d448c42dee5bbe3009a71a55eaffd709d6b3bc65c9de51fda1e8540c73c5887ed37e4d0f1610857726166e113cc55d3513174ff6f1bb3380b3d4e892ebc8693aef56eee02f9215c92e8f3f75fd3e58054e9a1b5d01bdf096db0aa9b4eb56f3eca7243b1447a757b5e95268156e9747cb4e84dbec3277165c7dd9573693158039c78c50500f23bd02a213b0c6767fc977d5ad18245fef0518c47ebf8b789e5b69fe913579ad33457bd487ac7b1ff90c832f4cd24069fed31e49ea46d9b8263414ed4837e13ade033658648a6a6b7dbc27f7f479622e65de95f03222965ee5a3dc1ad8d52a8a10bdfd93026bd00fd62ddf5f549021f9a3591513ec6f5ed67996f3daddf6150748219abccba4a510912177c87322d688241c765b60bb63ea72b11dbee1bbbdaffe25193aa2ac82b69850d88bf4341603adc96f3915897d8bf2b8625e41908facc7f63192c3578dca6a5cbece1314ff54e30bc5071001da3e68378bb98ce99ca0bd3b5d97cf8d595e26b63467d33fdb0e85badaae700f3c7e1e74cada993fe9bd029fc665b91dee71aabe734c5927181ed13af5206a9fe0f5e01e04efac3b1b2f2c587f50f1e85c78fcb1ee738a8c492b4c101b8a238c02444a7770e647e50f8a343207c7e0ac1f327554c1a93c37229cc7963287f1d6a44a9ba26c1b3af27e3d7d302e2fe819c98c6d6166c0b46b0564d6ec98c29dd31c35fc2f1eae94828f686640e41407497b14186a6325a4a19702403f43ded70f917175d43ce0a74a9ecb3b1542aa9fb1edcb540c5f5a9eb441e3d9a7743137ae94b525020ab26a0562b511d270452d6a5288207d2e15409c8440a3455e3162d33188853330f78231034b0313156c1165fcda05620e4f75e2a37af2aaed45ebdc012ee69599b2a4e255eb940ce0f11c813bf1cb5397e21a9031a4f08353ab4e5c09a6dae5adda2b4956aa24aa69745fd08d2f5de56c9efaf93cd91fb3237a0aa6d3a36ce96912beaec3f072f2097df238fa999c15c605c22417869090afd12f174f24c2af1c5e099c365649ca385638b84d1414137809236f425d3286049cef738257d7d75ff8063e0838aa52c1206f18f315428f5e6b70d4ec7e4b748ade5ae0f1a1482d47ab6d85dc65157697a869416b1f2daddc316a1978f499c11584cd3610d36f2027383fc93e6291c74a769d07be6ae304616f428bff060e36e65cb48c30dc1f2457fc1b5593cc723e0229e607f3d2ba0cfbb42a68b92767797e761785507f8b2320effb2392a1901bd58fe26e82997fbf218de6cae5f3a50335f67a9a1d3eba2da1d972aa3cf99b222626f2cc1663f399b3b0ff1a9e49b5e9b179763a1ee556e9aee9789799ea047d4ae2f75404fa6991414c5289ad59ab5d90798d2ea7090e56e05f35abe11a1666f668ff0d98f9e335eb758511ab17913eeaa2e629be2d3218f324444e9e7ea5a1e6f6853bec8f19c65aea744f594458c5dce4ac616d4d8cb3659640806f20b0433c7b7a7a1376f619d683e2801293fb57fe998f0d8c06c189b91723d856e634b7e10d9e96b27e44c5e0db93352e154f2a99d859b94daa8a01a2f5e1c1f45546f24afd962f9059367259fcada267d40bb61ce929877969b6f6ed92feb923f44cba140e280540a48bea8dcfa44d076c49044d0d3e7723b7ab8a718b93497007c615486350dd124dabe842f27606eae04ef96388fa3454ab97349145f1f265915ccb55c2ef63042457653914dc1c029c84f1b326cef872eb8ff353f62ea87541568c4ebd0ac920626c96390aef7750e1ad7a0244c4f8a463ef911006bedbcbdfb1faa34a7373491c129ea7fe2d7117be21d91be1ad68df496882d90989483fdc366243cf1d970af95342b927ca68070fb160245b92c99ed6160267d01018e66c6e33ae3741cc21a01a4992dc767625897c3954c07120fe9a5594bdf7199b7dd878004b08f15cce8029e86d23dade403fd9d1c0a5ee97c0e8768e2db7727a178d5aa36e762a94969717832857bc77bdcdc5523ee14438e8bfc4a312bd88e2af9933938aea14ecd206bc0ce9b417925f8e4ebc71fcef91a93161f3e45e4809d35d2e41135980ee070ea882e8bbaebb29dd0adb317d583fe29f57785534387ecda2b86a81a5954191f29ab1813ab114ac2a449c72c94717f7ea900e7faba52c70ec13c390f500db5ca80d93520f214d2581c9637429749268a005b1882095c75b2c3b7ccc1335a25348eab9cf3b933691eb29d6dbc0fdc4a0194043a1fec3bb822d66b7d913692bb3721c0177fcf1bb2077ab58e694510ff963b91d6dd71b14e4db3b533fea0c6da00850a08f323672dfd6ae54f4f76a5e9a4b438f7ebda439fef073064d4b1ff20eb6f25d021047951e12d5593ced83b69b6820c09a4c20036de285b65fdd87f6a72d75b58ea5f2a707fec3cd6bd49362976c086ef2db860bf7967089ba082c7feaefb3cbf08200bfeddf034b2a4cd10a57bdf59625e764d2bf66872ed96972a8e46e79d537f9714feb16a6f577b01cb8f93d7d1c3d1484312c724f8cffd396595593c2d2f0e5a2801cbfe5875c9b396586e3dc9ee9440196de725d1f36639c78b6b0053ed6544ca853e01dee938b1bb89de33c3eaffde40877f8677883d69a1e370cbf794e8166149d2f9778fc9e0c0d9f93133c1836d8cd9ad2725e935a179a1c1c02610b8b4832c316a45734dd42ebb7088b39aa087a764f1638e214128e7547fd9dfca73915bb39b060a761e004aed824c96a2d22292e017c5683807eb9b556b5a1b39d10b2459cea2bda86d0fe7680fcc233ac9841608f700f1ec66d2151f2b1447592cda9d63bc178413f989ffd58517de183730c283d387271b144d177917f411dede26f229074c8b6101d925b58a9118c82b0dc20e91eaa31df9cacfecfb53a56c054b6d3bf6b3eb189ef654f9ac797a72148ff85ed3b00f8d0dd8930643f76b54a980f2b63e95d9e8c8ea37f080e386a631ec30a4b0c5a9f9438ccbdab2894bd7951028022bc94ea31cafe81f8c71b3f14f3bdd700a0f3287e0d7958a59d36653b4973fe5f5445f67807fc704a11cd8a819142a35efe83606a7a8fa62491b25a653d3f1c5178ed14b311d73e8e88313ffb7af497d8a07839bacb1bc820f43641572edd59a5acd53d27e18eb3291fc30f9ab8359720d83d5bc4833e9e7ee1ad4165e30b21472dc4f40630bbcbad3640c3233707a8d6bed7c59c4f9aaea45aae8ff1cb182a4b1291af5f450b7cdfc23feb5a1df5dd05162b189398144988de6e90327567d42facec1606630f346ac8243d325650ae7a3ff4e8b9a65f403f4e9388393208ed64f0762b45b1e7d0fe69c59cacbf6ace81fb1826f80f2787ed71d36053d45ebe10f201d25fb0e1c5eb2844d1c20d823f02724984cdd8245425cb9a0c14c773ca96e6384fb3a762f04c823c1fb93cd05270ac637c5a0480a3304f50a3eece39a6936ced26eb86231d8950d062484945a714c8f170fb4d300e3b3df18fc1619f81c7701964d7c6d8bb5b34204e783fec682c17fb68973f7b9acf2b70de9ae2eaf8adc52f6239176ee5a70a1b4759e0595a37801fe91694a5f3c93b32e80c38e24169376649a5a0fe72d37db4dba21ae919a691a6122e190a52227175dcfc1c6382b730f0a1f9820ea5464b121b3873e5e7542ecbb27337c4f1f5bf4db70adc3c9c6fe27124815993b7a1ad30170b455a4625d7623770172979503f87b37f0bd20b334ab128448a6a7030ff0e6621300547ccbb23d16f0cafa17b258f152678e1419a3123c3742317cf1bcd72cb55145d610597ef092d3cd7d72fc34776a7b868444bce4afffafd8388b178b9b3b2b1d874b2fe0c715fa833de461e0e59b35ac97863a9b3233be9df28d5466d16738f489032ba988762412f8e5881996b97ec2e4bcc720e737083bfc5bc9cb5f26fed8639f7312599ecc8bd838769547084990cbad32494c2faedc3348c0a7b2e62f0d0cae1d1711114b1691f6709bf1c0a7f648ec67bdecdf3accc2361f581009521b3846ae49cc52528208d86e38c77fe43a52d151922c1e32f036228367260ee0285035b37a81d641c084812502d21d2136f9558b786c18c7b93f93b801ad1d164d8e7216e6344b068c3e35e9f9f40eb891424f4b8d13a446e311a799f52b16b87275b718f29ed79d373571daf45abfd5df1b2517bb324bb051dc630f56fe4261276fa3f53f5330f2285610a94d90d98116ff976b4c05c32416e2ef68aefd0574589dbeaad3e70fb603df4f46f5281edf749df866b0a5c2ed5417c1084a142a8783eaee83fee6887f136f0051d3094c0a99429a6d45801201fd636d467cbacc9da401173d49580002afc0e728d8a4c8ff282983b0b3648e7ed6cc4539758274bf6e790a6b1d4760d7f478", 0x1000}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="0018dd2fe48bb02d13bff30dbaf3b02caccc47dbf272b24bf6ea21c944b4b2ee73e0a655bdcbdce6a94757a5a12dbf7220061071edf40fa8f623a5e65a72047e6ea7e1f7145d455da983134a4bc7", 0x4e}, {&(0x7f0000002540)="8428317feb9aebec3563f0b2a7666179ce90052e79b07192b529d692bf058fe856b7c8ba2a7dd704a41c2d665ad347c2092bd7fb", 0x34}, {&(0x7f0000002580)="e230f84974b67992ec4f5d00e53005e5ed0b6ae3555ee06b86d099379cbe138fd6a7d154ab25dd95a0a706afc6d5f86d05464d1267b480114108ac0bf47200747eba6c5f76a3b40dce415ae5432ed6e5c4", 0x51}, {&(0x7f0000002600)="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", 0x1000}, {&(0x7f0000003600)="d338023d215df083cd5635877881ed34a0be6ae8d6d06754d4193f7669bcfc41127545f134437077835a8fbe595ace16c4bb19f862028626a9f516de97d0", 0x3e}, {&(0x7f0000003640)="527b6b5288e61ef76d198e3025fb4e4fce591fec1a0b04d753c991c8709bd8731fe336a4b89953", 0x27}, {&(0x7f0000003680)="8bdd9314c6d5eecedf6fb2f2a58b629dc7350dde097defabae4d9b9a8b35afbe70e856354a09a9535dbb30275d9c11f310660cf328a3f8695f57ae1adf697f6df0763c203ff302c33543a0e8651bba7087fa266568ca5bfe58e2f2b076726d2f228c1e13bb7cd6e59cdc7595d8e2ec817d2bd33e1ca5b43ad8d86687ce603f6907e9188cbd4f25b00fe3155bee72c743a78a3140435888e412b1ec1aed4c384ac4c35fe42124f091bfecf51272bcd605ebc5d40695b96243176fd7f4fe02fc98963a750e7c8aec", 0xc7}], 0xa, &(0x7f0000003800)=[@txtime={{0x14, 0x1, 0x3d, 0xffff}}, @timestamping={{0x10, 0x1, 0x25, 0x3bd}}, @timestamping={{0x10, 0x1, 0x25, 0x14000000}}, @mark={{0x10, 0x1, 0x24, 0x5}}, @txtime={{0x14, 0x1, 0x3d, 0x5}}, @timestamping={{0x10, 0x1, 0x25, 0x2}}, @mark={{0x10, 0x1, 0x24, 0xeb}}, @mark={{0x10, 0x1, 0x24, 0x2}}], 0x88}}], 0x2, 0x4008811) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0', 0xb) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000003900)=0x4) sendto$packet(r2, &(0x7f0000000200)="108d85543fdbc8f8cb62bbcf6741da5ed1a7b592ab68da9ded436cbc7cc52dac8d23ae7afb45e2fc7a1fc8e7f396b3", 0x2f, 0x80, &(0x7f0000003940)={0x11, 0xd, r3, 0x1, 0xd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 2.922414744s ago: executing program 5 (id=1681): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='fuse\x00', 0x3000000, 0x0) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000080)) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000003c0)={0x0, 0xd19}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000014c0)=@assoc_value={r4, 0x3}, &(0x7f0000001500)=0x8) madvise(&(0x7f000052b000/0x2000)=nil, 0x2000, 0x13) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r6 = openat$sndseq(0xffffff9c, 0x0, 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca3d7c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/237, 0xed}], 0x2}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x41838, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x7}) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) 2.800044475s ago: executing program 4 (id=1682): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x7745, &(0x7f0000000100)={0x0, 0xbfb7, 0x20, 0x1, 0x1eb}) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x30, 0x2007, @fd, 0x8, &(0x7f0000003700)=[{&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/123, 0x7b}, {&(0x7f0000002600)=""/230, 0xe6}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x8, 0x1, 0x1, {0x2, 0x0, 0x4, '\x00', &(0x7f00000037c0)={0xa4cd, 0xff, 0x4f, &(0x7f0000003740)="bfacf6bbfcdfad0f1261bef427c95e743132195bb3293ed7263ff9ff37c38adec1cb3ddd5ddee8a384e99a2f5014dcf292afb8eade6659d5a7f1d5c59097badeab1796e5b6d5020141f4c425c42090", 0x1}, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xa}}, './file0\x00'}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x0, 0x0, 0xfffffd3f) write$P9_RSTATu(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/663, @ANYRES32=0x0, @ANYRES32], 0x2a3) r7 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r7, 0x1) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000340), 0x7, 0x4d2d47) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r8, 0x29, 0x33, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$inet(r11, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 1.890109375s ago: executing program 4 (id=1685): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) connect$inet(r0, &(0x7f0000000800)={0x2, 0x0, @multicast2}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) recvmsg$kcm(r1, &(0x7f0000002840)={&(0x7f0000000200)=@pppol2tp, 0x80, 0x0, 0x0, &(0x7f0000002740)=""/243, 0xf3}, 0x3dfdbfbdd7a869e0) r2 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r4, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x10004017}, 0x81) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000406030000000000000000000000000005000100070000008b434b420557e3bc2663192cab715837"], 0x1c}}, 0x40000) mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') 1.779546763s ago: executing program 5 (id=1686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x8006605, 0x10000, 0x1, 0x36}, &(0x7f0000000100), 0x0, 0x0) preadv(r5, &(0x7f00000014c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f0000000000)={0x1, "b53f165acb3df7b331b5a31d147fd1d2fd14849296109de06865f319e1ffb2d8", 0x2}) r6 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) close(r3) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @local}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r10 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r10, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012c", 0x20}, {&(0x7f00000001c0)="9e91d91a92dc7c8f2c658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 820.555769ms ago: executing program 5 (id=1689): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$NILFS_IOCTL_RESIZE(0xffffffffffffffff, 0x40086e8b, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000001400)="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", 0xa3c}], 0x1}}], 0x1, 0x40080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xfffffffe}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x48850) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="000008000100000000003d0000004600003f00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b400000009000000000000636000004c54368f4c6d507d2fd63f55e0820000"], 0x4e) epoll_create1(0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000150020002bbd7000ffdbdf00000000ff797bc416c5242f6078d21794fd9c9551975da8226c0bbeb5b17dd9883959323bb33c861858ff0da2a8253a6c01f15045e7c3cf92c5bb8083f99a40bf684413a68e7b8f2ad5d8607b71aab288113cadf9a8", @ANYRES32=0x0, @ANYBLOB="080001000a01010208000200ac1414bb0800080080000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000011}, 0x4084) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 820.176031ms ago: executing program 3 (id=1690): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) (rerun: 32) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x800, 0x2}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) recvmmsg$unix(r5, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000000ac0)=""/224, 0xe0}], 0x2}}], 0x1, 0x41, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) (async) r6 = socket(0x23, 0x2, 0x8000104) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/pm_print_times', 0x40, 0x4) sendfile(r7, r8, 0x0, 0x200000) (async) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) (async) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) (async, rerun: 32) setsockopt$inet_int(r6, 0x0, 0x31, 0x0, 0x0) (async, rerun: 32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) syz_open_dev$video4linux(&(0x7f0000000340), 0x2, 0x50381) (rerun: 32) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c000280080001400000000424000180090001006d6173710000000014000280080002400000001708000340000000040900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4850}, 0x0) (async) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/uevent_seqnum', 0x280640, 0x8c) write$tcp_mem(r11, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) socket$inet(0x2, 0x5, 0x1) 783.039211ms ago: executing program 4 (id=1691): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x6c05}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000580)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x58) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) 628.915302ms ago: executing program 3 (id=1692): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) syz_open_dev$video(0x0, 0xfffffffd, 0x10bd00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000100), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r1, 0x5601, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r2) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x161483) ioctl$NBD_CLEAR_SOCK(r3, 0x125f) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) recvmsg(r4, &(0x7f0000003140)={&(0x7f0000000240)=@hci, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/135, 0x87}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f0000000940)=""/156, 0x9c}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/62, 0x3e}, {&(0x7f0000001f80)=""/72, 0x48}, {&(0x7f0000002000)=""/107, 0x6b}, {&(0x7f0000002080)=""/21, 0x15}], 0x9, &(0x7f0000002140)=""/4096, 0x1000}, 0x2000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000340)='qnx6\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/4, 0x1) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c0000040045803c0701"], 0x754}}, 0xc000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5338, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x9, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x400001ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x7, 0x1, 0x19a2, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x400, 0x5], [0x391, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c2e, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x104, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x8000, 0x4, 0x101, 0xfff, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x7, 0x7, 0x100, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x6, 0xa, 0xffffffff, 0x40004, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3a, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0xf, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x1, 0x0, 0x135, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) 279.764341ms ago: executing program 5 (id=1693): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x7745, &(0x7f0000000100)={0x0, 0xbfb7, 0x20, 0x1, 0x1eb}) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x30, 0x2007, @fd, 0x8, &(0x7f0000003700)=[{&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/123, 0x7b}, {&(0x7f0000002600)=""/230, 0xe6}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x8, 0x1, 0x1, {0x2, 0x0, 0x4, '\x00', &(0x7f00000037c0)={0xa4cd, 0xff, 0x4f, &(0x7f0000003740)="bfacf6bbfcdfad0f1261bef427c95e743132195bb3293ed7263ff9ff37c38adec1cb3ddd5ddee8a384e99a2f5014dcf292afb8eade6659d5a7f1d5c59097badeab1796e5b6d5020141f4c425c42090", 0x1}, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xa}}, './file0\x00'}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x0, 0x0, 0xfffffd3f) write$P9_RSTATu(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/663, @ANYRES32=0x0, @ANYRES32], 0x2a3) r7 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r7, 0x1) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000340), 0x7, 0x4d2d47) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r8, 0x29, 0x33, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$inet(r11, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 279.222144ms ago: executing program 3 (id=1694): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000140)={0x1, 0x5, 0x10}) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)=0x3fffe) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)=0x3fffe) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x9b) (async) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x9b) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000a50000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pipe(&(0x7f0000000280)) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendfile64(r8, r3, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000000030018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002004000850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000000030018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002004000850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7d0600000020f800009ba66a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setrlimit(0xb, &(0x7f00000000c0)={0x1, 0x23ffff8}) (async) setrlimit(0xb, &(0x7f00000000c0)={0x1, 0x23ffff8}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001dffe200000000000400000002000000", @ANYRES32=0x0, @ANYBLOB="0000f800"], 0x1c}, 0x1, 0x0, 0x0, 0x20028853}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) 90.580505ms ago: executing program 3 (id=1695): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}, 0x0) recvmmsg$unix(r0, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) listen(r2, 0x8) 566.706µs ago: executing program 3 (id=1696): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000080)=0x20) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000000c0)={'geneve0\x00', 0x169c}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a48000000060a010400000000000000000a000cd95e5901f272797a30000000000900020073797a30000000001c000480180001800e000100696d6d65646961746500000004000280140000001100010000000000000000000a00000a"], 0x70}}, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r3 = accept4$unix(r2, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0x80800) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x7e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x4}, @mss={0x2, 0x80000081}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x208, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) 0s ago: executing program 3 (id=1697): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x2, 0x5, 0x3, 0x4, 0x6, "7bfac80529d42488c3102202ad3b00", 0x1, 0x7}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) setregid(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000084, 0x0, 0x8001}]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xb62b50e5508e999f}, @TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x9, 0x6}, {0xf, 0x0, 0x2, 0x3, 0x8000, 0x8001}, 0x10, 0xffffffff, 0xea}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x3, 0x6, @remote}, 0x14) write(r1, &(0x7f0000000880)='3', 0x1) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x7f, 0x4, 0x8}, 0x10) kernel console output (not intermixed with test programs): c2. [ 209.770568][ T9245] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 209.770578][ T9245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 209.770586][ T9245] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.770592][ T9245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.770598][ T9245] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 209.770603][ T9245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.770616][ T9245] [ 209.772617][ T5778] veth1_vlan: left promiscuous mode [ 209.794545][ T9246] FAULT_INJECTION: forcing a failure. [ 209.794545][ T9246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.797926][ T5778] veth0_vlan: left promiscuous mode [ 209.800802][ T9246] CPU: 0 UID: 0 PID: 9246 Comm: syz.2.841 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.800820][ T9246] Tainted: [L]=SOFTLOCKUP [ 209.800824][ T9246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.800830][ T9246] Call Trace: [ 209.800835][ T9246] [ 209.800839][ T9246] dump_stack_lvl+0x100/0x190 [ 209.800858][ T9246] should_fail_ex.cold+0x5/0xa [ 209.800872][ T9246] _copy_to_user+0x32/0xd0 [ 209.800887][ T9246] ctl_ioctl+0x17b/0xcd0 [ 209.800919][ T9246] ? __pfx_ctl_ioctl+0x10/0x10 [ 209.800946][ T9246] ? __fget_files+0x21f/0x3d0 [ 209.800963][ T9246] dm_compat_ctl_ioctl+0x23/0x30 [ 209.800978][ T9246] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 209.800992][ T9246] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 209.801007][ T9246] __do_fast_syscall_32+0x13a/0x8b0 [ 209.801020][ T9246] ? lockdep_hardirqs_on+0x7d/0x110 [ 209.801032][ T9246] do_fast_syscall_32+0x32/0x70 [ 209.801045][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.801060][ T9246] RIP: 0023:0xf7fc7fec [ 209.801075][ T9246] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 209.801080][ T9246] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 209.801092][ T9246] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd0f [ 209.801098][ T9246] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.801105][ T9246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.801111][ T9246] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 209.801118][ T9246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.801131][ T9246] [ 210.036348][ T5778] team0 (unregistering): Port device team_slave_1 removed [ 210.043859][ T5778] team0 (unregistering): Port device team_slave_0 removed [ 210.120732][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8 [ 210.196393][ T9242] lo speed is unknown, defaulting to 1000 [ 210.247110][ T9141] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 210.287924][ T9141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.291710][ T9141] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 210.305007][ T9141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.310366][ T9141] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 210.329666][ T9141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.333490][ T9141] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.347645][ T9141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.410709][ T5778] IPVS: stop unused estimator thread 0... [ 210.457327][ T9141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.466555][ T9141] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.473311][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.475640][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.482669][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.484951][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.514973][ T5736] Bluetooth: hci4: command tx timeout [ 210.553540][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9 [ 210.573473][ T9141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.910198][ T9141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.261372][ T9288] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 212.426180][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'. [ 212.593216][ T9141] veth0_vlan: entered promiscuous mode [ 212.594265][ T5736] Bluetooth: hci4: command tx timeout [ 212.607248][ T9141] veth1_vlan: entered promiscuous mode [ 212.660369][ T9141] veth0_macvtap: entered promiscuous mode [ 212.696267][ T9306] IPVS: ip_vs_add_dest(): server weight less than zero [ 212.741492][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 212.741538][ T42] audit: type=1326 audit(1787150711.303:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 212.825165][ T9141] veth1_macvtap: entered promiscuous mode [ 212.836832][ T42] audit: type=1326 audit(1787150711.303:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 212.836859][ T42] audit: type=1326 audit(1787150711.303:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71c74eb code=0x7ffc0000 [ 212.836880][ T42] audit: type=1326 audit(1787150711.303:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 212.836900][ T42] audit: type=1326 audit(1787150711.303:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 212.836920][ T42] audit: type=1326 audit(1787150711.303:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 212.836939][ T42] audit: type=1326 audit(1787150711.303:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 212.836959][ T42] audit: type=1326 audit(1787150711.303:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 212.836978][ T42] audit: type=1326 audit(1787150711.313:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 212.836998][ T42] audit: type=1326 audit(1787150711.313:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 212.853919][ T40] IPVS: starting estimator thread 0... [ 212.871965][ T9141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.877691][ T9141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.890796][ T5806] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.935096][ T9308] IPVS: using max 45 ests per chain, 108000 per kthread [ 212.945517][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.945548][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.945566][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.035331][ T8058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.045063][ T8058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.080883][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.088626][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.821966][ T9348] tipc: Started in network mode [ 215.824192][ T9348] tipc: Node identity , cluster identity 4711 [ 215.826559][ T9348] tipc: Failed to obtain node identity [ 215.828345][ T9348] tipc: Enabling of bearer rejected, failed to enable media [ 216.543646][ T5879] IPVS: starting estimator thread 0... [ 216.551960][ T9376] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 216.634251][ T9375] IPVS: using max 31 ests per chain, 74400 per kthread [ 217.019290][ T9386] hpfs: hpfs_map_sector(): read error [ 218.001937][ T9387] input: syz0 as /devices/virtual/input/input20 [ 220.418367][ T850] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 220.583851][ T850] usb 9-1: not running at top speed; connect to a high speed hub [ 220.586669][ T850] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 220.600680][ T850] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 220.623399][ T850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.626064][ T850] usb 9-1: Product: syz [ 220.627398][ T850] usb 9-1: Manufacturer: syz [ 220.628908][ T850] usb 9-1: SerialNumber: syz [ 220.643765][ T850] oti6858 9-1:1.0: oti6858 converter detected [ 220.648733][ T850] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 221.593685][ T10] usb 9-1: USB disconnect, device number 17 [ 221.643458][ T10] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 221.670742][ T10] oti6858 9-1:1.0: device disconnected [ 221.691637][ T9454] CIFS: Attempting to mount //127.0.0.1/share [ 221.702149][ T9454] CIFS: VFS: Error connecting to socket. Aborting operation. [ 222.086276][ T9446] tipc: Started in network mode [ 222.088116][ T9446] tipc: Node identity , cluster identity 4711 [ 222.090724][ T9446] tipc: Failed to obtain node identity [ 222.093138][ T9446] tipc: Enabling of bearer rejected, failed to enable media [ 222.315043][ T9466] vivid-000: ================= START STATUS ================= [ 222.328476][ T9466] vivid-000: Radio HW Seek Mode: Bounded [ 222.336604][ T9466] vivid-000: Radio Programmable HW Seek: false [ 222.348836][ T9466] vivid-000: RDS Rx I/O Mode: Block I/O [ 222.368357][ T9466] vivid-000: Generate RBDS Instead of RDS: false [ 222.400459][ T9466] vivid-000: RDS Reception: true [ 222.412728][ T9466] vivid-000: RDS Program Type: 0 inactive [ 223.205007][ T9466] vivid-000: RDS PS Name: inactive [ 223.211209][ T9466] vivid-000: RDS Radio Text: inactive [ 223.218294][ T9466] vivid-000: RDS Traffic Announcement: false inactive [ 223.225030][ T9466] vivid-000: RDS Traffic Program: false inactive [ 223.231605][ T9466] vivid-000: RDS Music: false inactive [ 223.256770][ T9466] vivid-000: ================== END STATUS ================== [ 223.272002][ T9471] lo speed is unknown, defaulting to 1000 [ 223.296908][ T9471] lo speed is unknown, defaulting to 1000 [ 223.303854][ T9471] lo speed is unknown, defaulting to 1000 [ 223.363257][ T9471] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 223.415854][ T9471] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 223.596940][ T9471] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 223.660131][ T9471] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 223.702065][ T9471] lo speed is unknown, defaulting to 1000 [ 223.726630][ T9471] lo speed is unknown, defaulting to 1000 [ 223.737057][ T9471] lo speed is unknown, defaulting to 1000 [ 223.751023][ T9471] lo speed is unknown, defaulting to 1000 [ 223.777257][ T9493] hpfs: hpfs_map_sector(): read error [ 224.076653][ T9502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.886'. [ 224.153237][ T9501] input: syz0 as /devices/virtual/input/input21 [ 225.543743][ T9523] CIFS: Attempting to mount //127.0.0.1/share [ 225.550787][ T9523] CIFS: VFS: Error connecting to socket. Aborting operation. [ 225.750104][ T9534] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 225.752225][ T9534] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 225.782525][ T9534] vhci_hcd vhci_hcd.0: Device attached [ 225.842707][ T9540] tipc: Started in network mode [ 225.842721][ T9540] tipc: Node identity , cluster identity 4711 [ 225.842729][ T9540] tipc: Failed to obtain node identity [ 225.842740][ T9540] tipc: Enabling of bearer rejected, failed to enable media [ 225.887400][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.887'. [ 225.964401][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 226.054459][ T24] usb 42-1: SetAddress Request (2) to port 0 [ 226.060999][ T24] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 226.153761][ T10] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 226.167072][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 226.181879][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.189529][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 226.205448][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.230393][ T9529] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 226.237784][ T10] cyberjack 10-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 226.261189][ T10] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 226.396522][ T9535] vhci_hcd: connection reset by peer [ 226.401476][ T5806] vhci_hcd vhci_hcd.2: stop threads [ 226.407152][ T5806] vhci_hcd vhci_hcd.2: release socket [ 226.409223][ T5806] vhci_hcd vhci_hcd.2: disconnect device [ 226.488069][ T10] usb 10-1: USB disconnect, device number 2 [ 226.504823][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 226.511139][ T10] cyberjack 10-1:1.0: device disconnected [ 227.118920][ T9565] vivid-004: ================= START STATUS ================= [ 227.131401][ T9565] vivid-004: Radio HW Seek Mode: Bounded [ 227.144777][ T9565] vivid-004: Radio Programmable HW Seek: false [ 227.147324][ T9565] vivid-004: RDS Rx I/O Mode: Block I/O [ 227.149248][ T9565] vivid-004: Generate RBDS Instead of RDS: false [ 227.151356][ T9565] vivid-004: RDS Reception: true [ 227.153091][ T9565] vivid-004: RDS Program Type: 0 inactive [ 227.157993][ T9565] vivid-004: RDS PS Name: inactive [ 227.159797][ T9565] vivid-004: RDS Radio Text: inactive [ 227.161638][ T9565] vivid-004: RDS Traffic Announcement: false inactive [ 227.163851][ T9565] vivid-004: RDS Traffic Program: false inactive [ 227.167033][ T9565] vivid-004: RDS Music: false inactive [ 227.169102][ T9565] vivid-004: ================== END STATUS ================== [ 228.122741][ T9571] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.135026][ T9571] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.138148][ T9571] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.159939][ T9571] net_ratelimit: 9 callbacks suppressed [ 228.159955][ T9571] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 228.283941][ T9565] siw: device registration error -23 [ 228.295140][ T9578] block2mtd: error: cannot open device /dev/loop0 [ 228.321820][ T9579] tipc: Started in network mode [ 228.328588][ T9579] tipc: Node identity , cluster identity 4711 [ 228.338466][ T9579] tipc: Failed to obtain node identity [ 228.346406][ T9579] tipc: Enabling of bearer rejected, failed to enable media [ 228.457467][ T9586] netlink: 768 bytes leftover after parsing attributes in process `syz.3.898'. [ 228.614342][ T850] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 228.638272][ T5879] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 228.754360][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.765211][ T850] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 228.769553][ T850] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 228.772857][ T850] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 228.776734][ T850] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 228.779930][ T850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.785089][ T9583] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 228.790211][ T850] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 228.797428][ T850] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 228.814964][ T5879] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 228.819169][ T5879] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.823366][ T5879] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.827567][ T5879] usb 10-1: config 0 interface 0 has no altsetting 0 [ 228.832042][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 228.835259][ T5879] usb 10-1: Product: syz [ 228.837201][ T5879] usb 10-1: Manufacturer: syz [ 228.838972][ T5879] usb 10-1: SerialNumber: syz [ 228.843862][ T5879] usb 10-1: config 0 descriptor?? [ 228.851338][ T5879] usb 10-1: selecting invalid altsetting 0 [ 229.011847][ T850] usb 7-1: USB disconnect, device number 17 [ 229.022669][ T850] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 229.034786][ T850] cyberjack 7-1:1.0: device disconnected [ 229.060250][ T5879] usb 10-1: USB disconnect, device number 3 [ 229.411532][ T9596] tipc: Started in network mode [ 229.418273][ T9596] tipc: Node identity , cluster identity 4711 [ 229.422550][ T9596] tipc: Failed to obtain node identity [ 229.426564][ T9596] tipc: Enabling of bearer rejected, failed to enable media [ 229.684821][ T850] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 229.835332][ T850] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 229.842656][ T9604] ehci-pci 0000:00:1d.7: remove, state 1 [ 229.846345][ T850] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 229.850203][ T9604] usb usb1: USB disconnect, device number 1 [ 229.852269][ T850] usb 9-1: config 0 interface 0 has no altsetting 0 [ 229.854749][ T9604] usb 1-1: USB disconnect, device number 2 [ 229.856251][ T850] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 229.859790][ T850] usb 9-1: Product: syz [ 229.861227][ T850] usb 9-1: Manufacturer: syz [ 229.862925][ T850] usb 9-1: SerialNumber: syz [ 229.879325][ T850] usb 9-1: config 0 descriptor?? [ 229.887253][ T850] usb 9-1: selecting invalid altsetting 0 [ 230.063584][ T9604] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 230.071594][ T9606] uhci_hcd 0000:00:1d.0: remove, state 84 [ 230.194353][ T9606] usb usb2: USB disconnect, device number 1 [ 230.217390][ T9606] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 230.352560][ T9605] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 230.434583][ T9605] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 230.452700][ T9605] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 230.484195][ T9605] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 230.508389][ T9605] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 230.526257][ T9605] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 230.531122][ T9605] usb usb1: Product: EHCI Host Controller [ 230.533109][ T9605] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 230.554339][ T9605] usb usb1: SerialNumber: 0000:00:1d.7 [ 230.558113][ T9622] netlink: 768 bytes leftover after parsing attributes in process `syz.2.913'. [ 230.612960][ T9623] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 230.615053][ T9623] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 230.624350][ T9623] vhci_hcd vhci_hcd.0: Device attached [ 230.643203][ T9623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.904'. [ 230.704695][ T9605] hub 1-0:1.0: USB hub found [ 230.722551][ T9605] hub 1-0:1.0: 6 ports detected [ 230.834300][ T5736] Bluetooth: hci1: command 0x0c1a tx timeout [ 230.857588][ T9605] hub 3-0:1.0: USB hub found [ 230.862419][ T9605] hub 3-0:1.0: 2 ports detected [ 230.904825][ T1033] usb 44-1: SetAddress Request (2) to port 0 [ 230.906896][ T1033] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 230.922407][ T9605] hub 4-0:1.0: USB hub found [ 230.925376][ T9605] hub 4-0:1.0: 2 ports detected [ 231.054187][ T5879] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 231.154329][ T24] usb 42-1: device descriptor read/8, error -110 [ 231.164403][ T9624] vhci_hcd: connection reset by peer [ 231.167851][ T5806] vhci_hcd vhci_hcd.3: stop threads [ 231.170158][ T5806] vhci_hcd vhci_hcd.3: release socket [ 231.172509][ T5806] vhci_hcd vhci_hcd.3: disconnect device [ 231.255062][ T5879] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 231.272289][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 231.278790][ T5879] usb 1-1: Product: QEMU USB Tablet [ 231.288688][ T5879] usb 1-1: Manufacturer: QEMU [ 231.292031][ T5879] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 231.335717][ T5879] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0007/input/input22 [ 231.406702][ T5879] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 231.545663][ T24] usb usb42-port1: attempt power cycle [ 232.004359][ T40] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 232.116462][ T24] usb usb42-port1: unable to enumerate USB device [ 232.154697][ T40] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 232.158656][ T40] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.161921][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.168643][ T40] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 232.171122][ T40] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 232.174709][ T40] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 232.179274][ T40] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 232.182596][ T40] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 232.187552][ T40] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 232.195260][ T40] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 232.198502][ T40] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 232.203134][ T40] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 232.288559][ T9641] tipc: Started in network mode [ 232.290717][ T9641] tipc: Node identity , cluster identity 4711 [ 232.293277][ T9641] tipc: Failed to obtain node identity [ 232.296862][ T9641] tipc: Enabling of bearer rejected, failed to enable media [ 232.481341][ T24] usb 9-1: USB disconnect, device number 18 [ 232.646830][ T9650] tipc: Started in network mode [ 232.648654][ T9650] tipc: Node identity , cluster identity 4711 [ 232.650684][ T9650] tipc: Failed to obtain node identity [ 232.652432][ T9650] tipc: Enabling of bearer rejected, failed to enable media [ 233.446071][ T5879] usb 8-1: USB disconnect, device number 10 [ 233.457657][ T5879] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 233.554344][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.764865][ T5879] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 233.778133][ T5879] keyspan 8-1:1.0: device disconnected [ 234.380831][ T9677] ehci-pci 0000:00:1d.7: remove, state 1 [ 234.384742][ T9677] usb usb1: USB disconnect, device number 1 [ 234.386690][ T9677] usb 1-1: USB disconnect, device number 2 [ 234.675545][ T9677] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 234.827902][ T9686] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 234.834391][ T9686] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 234.839606][ T9686] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 234.855227][ T9686] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 234.861552][ T9686] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 234.865519][ T9686] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 234.868620][ T9686] usb usb1: Product: EHCI Host Controller [ 234.870448][ T9686] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 234.872512][ T9686] usb usb1: SerialNumber: 0000:00:1d.7 [ 234.880558][ T9686] hub 1-0:1.0: USB hub found [ 234.882351][ T9686] hub 1-0:1.0: 6 ports detected [ 234.920146][ T9686] hub 3-0:1.0: USB hub found [ 234.930164][ T9686] hub 3-0:1.0: 2 ports detected [ 234.975557][ T9686] hub 4-0:1.0: USB hub found [ 234.977968][ T9686] hub 4-0:1.0: 2 ports detected [ 235.155906][ T24] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 235.179395][ T9694] FAULT_INJECTION: forcing a failure. [ 235.179395][ T9694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.194342][ T9694] CPU: 0 UID: 0 PID: 9694 Comm: syz.3.922 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.194373][ T9694] Tainted: [L]=SOFTLOCKUP [ 235.194379][ T9694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.194390][ T9694] Call Trace: [ 235.194396][ T9694] [ 235.194403][ T9694] dump_stack_lvl+0x100/0x190 [ 235.194432][ T9694] should_fail_ex.cold+0x5/0xa [ 235.194454][ T9694] save_fsave_header+0x14c/0x2f0 [ 235.194491][ T9694] ? __sigqueue_free+0xbe/0x2a0 [ 235.194519][ T9694] ? __pfx_save_fsave_header+0x10/0x10 [ 235.194545][ T9694] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 235.194565][ T9694] ? __local_bh_enable_ip+0xa5/0x120 [ 235.194591][ T9694] copy_fpstate_to_sigframe+0x755/0xae0 [ 235.194615][ T9694] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 235.194638][ T9694] ? x86_task_fpu+0x5f/0x90 [ 235.194668][ T9694] get_sigframe+0x3fb/0x940 [ 235.194700][ T9694] ? __pfx_get_sigframe+0x10/0x10 [ 235.194721][ T9694] ? rcu_is_watching+0x13/0xc0 [ 235.194745][ T9694] ? siginfo_layout+0x1b1/0x290 [ 235.194769][ T9694] ia32_setup_rt_frame+0xe7/0xaf0 [ 235.194798][ T9694] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 235.194821][ T9694] ? force_sig+0xbf/0x100 [ 235.194840][ T9694] ? __pfx_force_sig+0x10/0x10 [ 235.194862][ T9694] arch_do_signal_or_restart+0x459/0x7a0 [ 235.194881][ T9694] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 235.194907][ T9694] ? __do_sys_prctl+0x14e/0x2270 [ 235.194936][ T9694] exit_to_user_mode_loop+0x139/0x700 [ 235.194957][ T9694] ? rcu_is_watching+0x13/0xc0 [ 235.194980][ T9694] __do_fast_syscall_32+0x59f/0x8b0 [ 235.195000][ T9694] ? lockdep_hardirqs_on+0x7d/0x110 [ 235.195020][ T9694] do_fast_syscall_32+0x32/0x70 [ 235.195040][ T9694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.195087][ T9694] RIP: 0023:0xf7fc4fec [ 235.195110][ T9694] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 235.195118][ T9694] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ac [ 235.195137][ T9694] RAX: fffffffffffffff2 RBX: 000000000000004f RCX: 0000000000000002 [ 235.195148][ T9694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.195158][ T9694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.195168][ T9694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.195179][ T9694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.195201][ T9694] [ 235.202608][ T9698] tipc: Started in network mode [ 235.307864][ T9698] tipc: Node identity , cluster identity 4711 [ 235.310515][ T9698] tipc: Failed to obtain node identity [ 235.312682][ T9698] tipc: Enabling of bearer rejected, failed to enable media [ 235.424307][ T9309] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 235.427403][ T24] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 235.445689][ T24] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 235.459767][ T24] usb 1-1: Product: QEMU USB Tablet [ 235.461458][ T24] usb 1-1: Manufacturer: QEMU [ 235.462963][ T24] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 235.487484][ T24] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0008/input/input23 [ 235.555954][ T24] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 235.577832][ T9309] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 235.589856][ T9309] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 235.604192][ T9309] usb 10-1: config 0 interface 0 has no altsetting 0 [ 235.613277][ T9309] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 235.628012][ T9309] usb 10-1: Product: syz [ 235.635364][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 235.646722][ T9309] usb 10-1: Manufacturer: syz [ 235.658516][ T9309] usb 10-1: SerialNumber: syz [ 235.671865][ T9309] usb 10-1: config 0 descriptor?? [ 235.683212][ T9309] usb 10-1: selecting invalid altsetting 0 [ 235.954792][ T1033] usb 44-1: device descriptor read/8, error -110 [ 236.601761][ T1033] usb usb44-port1: attempt power cycle [ 236.848816][ T9722] FAULT_INJECTION: forcing a failure. [ 236.848816][ T9722] name failslab, interval 1, probability 0, space 0, times 0 [ 236.870467][ T9722] CPU: 2 UID: 0 PID: 9722 Comm: syz.2.927 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.870489][ T9722] Tainted: [L]=SOFTLOCKUP [ 236.870493][ T9722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.870499][ T9722] Call Trace: [ 236.870503][ T9722] [ 236.870508][ T9722] dump_stack_lvl+0x100/0x190 [ 236.870527][ T9722] should_fail_ex.cold+0x5/0xa [ 236.870540][ T9722] should_failslab+0xc2/0x120 [ 236.870558][ T9722] __kmalloc_noprof+0xfc/0x820 [ 236.870573][ T9722] ? rcu_is_watching+0x13/0xc0 [ 236.870588][ T9722] ? tomoyo_realpath_from_path+0xb6/0x690 [ 236.870610][ T9722] tomoyo_realpath_from_path+0xb6/0x690 [ 236.870630][ T9722] tomoyo_path_number_perm+0x23c/0x580 [ 236.870645][ T9722] ? tomoyo_path_number_perm+0x22e/0x580 [ 236.870660][ T9722] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 236.870689][ T9722] ? find_held_lock+0x2b/0x80 [ 236.870703][ T9722] ? __fget_files+0x215/0x3d0 [ 236.870716][ T9722] ? hook_file_ioctl_common+0x140/0x440 [ 236.870743][ T9722] ? __fget_files+0x215/0x3d0 [ 236.870757][ T9722] ? __fget_files+0x21f/0x3d0 [ 236.870772][ T9722] security_file_ioctl_compat+0xd3/0x230 [ 236.870789][ T9722] __ia32_compat_sys_ioctl+0xc2/0x360 [ 236.870803][ T9722] __do_fast_syscall_32+0x13a/0x8b0 [ 236.870828][ T9722] ? lockdep_hardirqs_on+0x7d/0x110 [ 236.870841][ T9722] do_fast_syscall_32+0x32/0x70 [ 236.870854][ T9722] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.870869][ T9722] RIP: 0023:0xf7fc7fec [ 236.870878][ T9722] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 236.870889][ T9722] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 236.870901][ T9722] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000ae80 [ 236.870907][ T9722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.870913][ T9722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.870919][ T9722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.870925][ T9722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.870939][ T9722] [ 236.870966][ T9722] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.120210][ T9724] tipc: Started in network mode [ 237.131666][ T9724] tipc: Node identity , cluster identity 4711 [ 237.140549][ T9724] tipc: Failed to obtain node identity [ 237.146499][ T9724] tipc: Enabling of bearer rejected, failed to enable media [ 238.084446][ T1033] usb usb44-port1: unable to enumerate USB device [ 238.985612][ T9766] jffs2: notice: (9766) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 239.799266][ T24] usb 10-1: USB disconnect, device number 4 [ 240.093606][ T9775] netlink: 16 bytes leftover after parsing attributes in process `syz.5.938'. [ 240.097526][ T9775] comedi comedi2: pcl818: a I/O base address must be specified [ 240.319811][ T9785] tipc: Started in network mode [ 240.321535][ T9785] tipc: Node identity , cluster identity 4711 [ 240.323596][ T9785] tipc: Failed to obtain node identity [ 240.330722][ T9785] tipc: Enabling of bearer rejected, failed to enable media [ 240.364309][ T1033] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 241.107013][ T1033] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 241.112042][ T1033] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.115855][ T1033] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.123322][ T1033] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 241.126670][ T1033] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 241.130010][ T1033] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 241.142939][ T1033] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 241.146277][ T1033] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 241.150158][ T1033] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 241.156898][ T1033] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 241.160789][ T1033] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 241.166406][ T1033] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 242.299636][ T9818] jffs2: notice: (9818) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 242.504935][ T9824] tipc: Started in network mode [ 242.511642][ T9824] tipc: Node identity , cluster identity 4711 [ 242.516843][ T9824] tipc: Failed to obtain node identity [ 242.524337][ T9824] tipc: Enabling of bearer rejected, failed to enable media [ 242.651384][ T9827] vhci_hcd: not connected 4 [ 243.096458][ T40] usb 9-1: USB disconnect, device number 19 [ 243.106983][ T40] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 243.143469][ T40] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 243.157946][ T40] keyspan 9-1:1.0: device disconnected [ 244.215242][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.963'. [ 244.280786][ T9898] tipc: Started in network mode [ 244.291024][ T9898] tipc: Node identity , cluster identity 4711 [ 244.307297][ T9898] tipc: Failed to obtain node identity [ 244.356932][ T9898] tipc: Enabling of bearer rejected, failed to enable media [ 245.103420][ T9920] netlink: 'syz.2.965': attribute type 4 has an invalid length. [ 246.479389][ T9963] tipc: Started in network mode [ 246.485108][ T9963] tipc: Node identity , cluster identity 4711 [ 246.494207][ T9963] tipc: Failed to obtain node identity [ 246.499999][ T9963] tipc: Enabling of bearer rejected, failed to enable media [ 246.628395][ T9978] FAULT_INJECTION: forcing a failure. [ 246.628395][ T9978] name failslab, interval 1, probability 0, space 0, times 0 [ 246.636377][ T9978] CPU: 2 UID: 0 PID: 9978 Comm: syz.3.980 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.636397][ T9978] Tainted: [L]=SOFTLOCKUP [ 246.636401][ T9978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.636407][ T9978] Call Trace: [ 246.636412][ T9978] [ 246.636416][ T9978] dump_stack_lvl+0x100/0x190 [ 246.636433][ T9978] should_fail_ex.cold+0x5/0xa [ 246.636446][ T9978] should_failslab+0xc2/0x120 [ 246.636464][ T9978] __kmalloc_noprof+0xfc/0x820 [ 246.636480][ T9978] ? sk_prot_alloc+0x10b/0x2a0 [ 246.636498][ T9978] sk_prot_alloc+0x10b/0x2a0 [ 246.636515][ T9978] sk_alloc+0x36/0xe80 [ 246.636527][ T9978] bpf_prog_test_run_skb+0x4db/0x3540 [ 246.636548][ T9978] ? find_held_lock+0x2b/0x80 [ 246.636564][ T9978] ? __fget_files+0x1d1/0x3d0 [ 246.636580][ T9978] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 246.636610][ T9978] ? fput+0x7c/0x100 [ 246.636629][ T9978] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 246.636650][ T9978] __sys_bpf+0x2a12/0x4e80 [ 246.636668][ T9978] ? __pfx___sys_bpf+0x10/0x10 [ 246.636682][ T9978] ? find_held_lock+0x2b/0x80 [ 246.636695][ T9978] ? get_pid_task+0xfc/0x250 [ 246.636710][ T9978] ? get_pid_task+0xfc/0x250 [ 246.636727][ T9978] ? proc_fail_nth_write+0x9f/0x220 [ 246.636740][ T9978] ? find_held_lock+0x2b/0x80 [ 246.636757][ T9978] ? rcu_read_lock_any_held+0x6a/0x90 [ 246.636773][ T9978] ? find_held_lock+0x2b/0x80 [ 246.636786][ T9978] ? ksys_write+0x190/0x250 [ 246.636797][ T9978] ? ksys_write+0x190/0x250 [ 246.636819][ T9978] ? fput+0x7c/0x100 [ 246.636834][ T9978] ? __ia32_sys_bpf+0xcc/0x170 [ 246.636847][ T9978] __ia32_sys_bpf+0xcc/0x170 [ 246.636860][ T9978] ? __do_fast_syscall_32+0xb3/0x8b0 [ 246.636874][ T9978] __do_fast_syscall_32+0x13a/0x8b0 [ 246.636886][ T9978] ? lockdep_hardirqs_on+0x7d/0x110 [ 246.636897][ T9978] do_fast_syscall_32+0x32/0x70 [ 246.636909][ T9978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.636924][ T9978] RIP: 0023:0xf7fc4fec [ 246.636938][ T9978] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 246.636943][ T9978] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 246.636954][ T9978] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 246.636960][ T9978] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.636966][ T9978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.636972][ T9978] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 246.636978][ T9978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.636991][ T9978] [ 246.755938][ T9985] xt_hl: Unknown Hop Limit match mode: 230 [ 246.794326][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 246.797198][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 246.800089][ T9985] netlink: 'syz.2.981': attribute type 13 has an invalid length. [ 246.802521][ T9985] netlink: 'syz.2.981': attribute type 14 has an invalid length. [ 247.748016][T10019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.989'. [ 247.917379][T10024] tipc: Started in network mode [ 247.921925][T10024] tipc: Node identity , cluster identity 4711 [ 247.924005][T10024] tipc: Failed to obtain node identity [ 247.926316][T10024] tipc: Enabling of bearer rejected, failed to enable media [ 248.343451][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 248.518069][ T8055] Bluetooth: Error in BCSP hdr checksum [ 248.721502][T10061] input: syz0 as /devices/virtual/input/input24 [ 248.751708][ T6091] udevd[6091]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 248.774762][ T8055] Bluetooth: Error in BCSP hdr checksum [ 249.617216][ T64] Bluetooth: hci4: link tx timeout [ 249.621072][ T64] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 249.633124][ T64] Bluetooth: hci4: link tx timeout [ 249.634951][ T64] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 249.654641][T10077] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 250.258282][T10093] tipc: Started in network mode [ 250.260564][T10093] tipc: Node identity , cluster identity 4711 [ 250.267815][T10093] tipc: Failed to obtain node identity [ 250.276194][ T5736] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 250.276350][ T64] Bluetooth: hci3: command 0x1003 tx timeout [ 250.288415][T10093] tipc: Enabling of bearer rejected, failed to enable media [ 251.372976][T10127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.472273][T10128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.671792][T10129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.711533][T10118] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 251.718888][ T5090] Bluetooth: hci4: command 0x0406 tx timeout [ 252.263186][T10148] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1016'. [ 252.737779][T10160] kAFS: bad VL server IP address [ 253.764526][ T850] lo speed is unknown, defaulting to 1000 [ 254.546027][T10188] 9p: Bad value for 'wfdno' [ 255.106959][T10206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.208659][T10208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.239558][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.242246][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.274928][T10197] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 255.283523][T10212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.084614][ T40] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 257.922720][ T40] usb 8-1: Using ep0 maxpacket: 8 [ 257.926230][ T40] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 257.929945][ T40] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 257.932682][ T40] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.935763][ T40] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.938770][ T40] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 257.941891][ T40] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.946300][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.018019][T10247] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 258.020159][T10247] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 258.025827][T10247] vhci_hcd vhci_hcd.0: Device attached [ 258.061035][T10249] vhci_hcd: connection closed [ 258.127730][ T5806] vhci_hcd vhci_hcd.5: stop threads [ 258.137662][ T5806] vhci_hcd vhci_hcd.5: release socket [ 258.142465][ T5806] vhci_hcd vhci_hcd.5: disconnect device [ 258.166015][ T40] usb 8-1: usb_control_msg returned -32 [ 258.170929][ T40] usbtmc 8-1:16.0: can't read capabilities [ 258.176603][T10254] openvswitch: netlink: IP tunnel dst address not specified [ 258.181913][T10254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.187716][T10254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1040'. [ 258.374163][ T850] usb 8-1: USB disconnect, device number 11 [ 258.575704][T10231] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.421873][T10262] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 260.093655][T10289] Console: switching to colour dummy device 80x25 [ 260.276144][T10294] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1049'. [ 261.193626][T10319] CUSE: info not properly terminated [ 261.485303][T10326] device-mapper: table: 248:1: thin-pool: Error opening metadata block device (-EBUSY) [ 261.501551][T10326] device-mapper: ioctl: error adding target to table [ 261.652373][T10335] tipc: Started in network mode [ 261.654236][T10335] tipc: Node identity , cluster identity 4711 [ 261.656664][T10335] tipc: Failed to obtain node identity [ 261.658571][T10335] tipc: Enabling of bearer rejected, failed to enable media [ 262.383926][ T5090] Bluetooth: hci1: unexpected event for opcode 0x0c78 [ 262.759811][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 262.768322][T10369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.218708][T10384] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1066'. [ 264.379365][T10393] netlink: 'syz.2.1069': attribute type 8 has an invalid length. [ 264.979027][T10389] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 265.597952][T10415] tipc: Started in network mode [ 265.607839][T10415] tipc: Node identity , cluster identity 4711 [ 265.617034][T10415] tipc: Failed to obtain node identity [ 265.628261][T10415] tipc: Enabling of bearer rejected, failed to enable media [ 266.240251][ T5879] kernel write not supported for file /853/clear_refs (pid: 5879 comm: kworker/0:4) [ 266.513295][T10418] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.522119][T10418] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.526750][T10418] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.529911][T10418] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.532306][T10418] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 267.835563][T10457] MTD: Couldn't look up './dev/mtdblock0': -2 [ 267.946475][T10465] comedi comedi0: rti800: I/O base address not correctly aligned [ 268.034984][ T5736] Bluetooth: hci0: command 0x0401 tx timeout [ 268.595442][ T5736] Bluetooth: hci1: command 0x0c1a tx timeout [ 268.598137][ T5090] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.636257][T10493] can: request_module (can-proto-3) failed. [ 268.881892][ T5879] kernel write not supported for file /884/clear_refs (pid: 5879 comm: kworker/0:4) [ 268.954858][T10502] tipc: Started in network mode [ 268.958209][T10502] tipc: Node identity , cluster identity 4711 [ 268.962572][T10502] tipc: Failed to obtain node identity [ 268.966924][T10502] tipc: Enabling of bearer rejected, failed to enable media [ 269.341088][T10490] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 269.354797][T10490] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.367264][T10490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.382636][T10490] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 269.391975][T10512] fuse: Bad value for 'group_id' [ 269.398264][T10512] fuse: Bad value for 'group_id' [ 270.003825][T10536] can: request_module (can-proto-3) failed. [ 270.056328][T10539] tipc: Started in network mode [ 270.058112][T10539] tipc: Node identity , cluster identity 4711 [ 270.060177][T10539] tipc: Failed to obtain node identity [ 270.062089][T10539] tipc: Enabling of bearer rejected, failed to enable media [ 270.528323][T10549] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1098'. [ 270.594639][ T64] Bluetooth: hci0: command 0x0401 tx timeout [ 271.404155][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 271.406168][ T5090] Bluetooth: hci2: command 0x0c1a tx timeout [ 271.805423][T10552] tipc: Enabling of bearer rejected, failed to enable media [ 271.819437][T10552] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 271.822212][T10552] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 271.987116][ T850] kernel write not supported for file /662/clear_refs (pid: 850 comm: kworker/2:2) [ 272.199478][T10576] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1105'. [ 272.507276][T10560] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 272.511398][T10560] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.513681][T10560] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.516979][T10560] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 272.663851][T10585] tipc: Started in network mode [ 272.667406][T10585] tipc: Node identity , cluster identity 4711 [ 272.669543][T10585] tipc: Failed to obtain node identity [ 272.671388][T10585] tipc: Enabling of bearer rejected, failed to enable media [ 272.932095][T10584] program syz.3.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.952588][T10584] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 273.134695][T10584] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 273.151334][T10584] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 273.169668][T10584] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 273.178872][T10584] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 273.190541][T10584] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 11529 usecs [ 273.794243][ T64] Bluetooth: hci0: command 0x0401 tx timeout [ 273.850225][T10598] tipc: Started in network mode [ 273.852465][T10598] tipc: Node identity , cluster identity 4711 [ 273.859009][T10598] tipc: Failed to obtain node identity [ 273.862130][T10598] tipc: Enabling of bearer rejected, failed to enable media [ 274.185983][T10584] pci 0000:00:01.0: Adding to iommu group 1 [ 274.212082][T10584] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 274.214249][T10584] pci 0000:00:01.0: vgaarb: bridge control possible [ 274.216308][T10584] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 274.268475][T10584] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 274.286446][T10584] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f] [ 274.514341][ T5090] Bluetooth: hci1: command 0x0c1a tx timeout [ 274.517148][ T5736] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.600796][ T5090] Bluetooth: hci4: command 0x0406 tx timeout [ 275.048400][T10584] pci 0000:00:1d.0: Adding to iommu group 7 [ 275.057611][T10584] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 275.060206][T10584] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 275.062666][T10584] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 275.066490][T10584] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 275.090926][T10584] [drm] Found bochs VGA, ID 0xb0c5. [ 275.094825][T10584] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 275.696357][T10584] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 275.778205][T10584] Console: switching to colour frame buffer device 160x50 [ 275.780481][T10584] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 275.928318][T10584] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 141609 usecs [ 275.978621][T10584] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 275.993924][T10584] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 275.997403][T10584] uhci_hcd 0000:00:1d.0: detected 2 ports [ 276.007155][T10584] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 276.021208][T10584] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 276.026259][T10584] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 276.031319][T10584] usb usb2: Product: UHCI Host Controller [ 276.033246][T10584] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 276.035722][T10584] usb usb2: SerialNumber: 0000:00:1d.0 [ 276.068948][T10584] hub 2-0:1.0: USB hub found [ 276.070935][T10584] hub 2-0:1.0: 2 ports detected [ 276.240093][T10634] tipc: Started in network mode [ 276.249736][T10634] tipc: Node identity , cluster identity 4711 [ 276.260556][T10634] tipc: Failed to obtain node identity [ 276.270720][T10634] tipc: Enabling of bearer rejected, failed to enable media [ 276.284189][ T850] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 276.514201][ T850] usb 10-1: not running at top speed; connect to a high speed hub [ 276.538036][ T850] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 276.545176][ T850] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 276.550076][ T850] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 276.562572][ T850] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.565585][ T850] usb 10-1: Product: syz [ 276.567233][ T850] usb 10-1: Manufacturer: syz [ 276.568866][ T850] usb 10-1: SerialNumber: syz [ 276.579545][ T850] oti6858 10-1:1.0: oti6858 converter detected [ 276.583206][ T850] usb 10-1: oti6858 converter now attached to ttyUSB0 [ 276.674650][ T64] Bluetooth: hci4: command 0x0406 tx timeout [ 276.894536][T10629] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 277.126933][T10649] tipc: Started in network mode [ 277.128989][T10649] tipc: Node identity , cluster identity 4711 [ 277.131476][T10649] tipc: Failed to obtain node identity [ 277.133273][T10649] tipc: Enabling of bearer rejected, failed to enable media [ 277.153210][T10647] 9p: Could not find request transport: virîæ [ 277.419280][T10665] tipc: Started in network mode [ 277.428993][T10665] tipc: Node identity , cluster identity 4711 [ 277.433532][T10665] tipc: Failed to obtain node identity [ 277.440056][T10665] tipc: Enabling of bearer rejected, failed to enable media [ 277.594551][ T9309] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 277.745821][ T9309] usb 7-1: Using ep0 maxpacket: 16 [ 277.753624][ T9309] usb 7-1: unable to get BOS descriptor or descriptor too short [ 277.760169][ T9309] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 277.770414][ T9309] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.773802][ T9309] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.779834][ T9309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.785064][ T9309] usb 7-1: Product: syz [ 277.787811][ T9309] usb 7-1: Manufacturer: syz [ 277.790102][ T9309] usb 7-1: SerialNumber: syz [ 279.111085][ T10] usb 10-1: USB disconnect, device number 5 [ 279.150692][ T10] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 279.154708][ T10] oti6858 10-1:1.0: device disconnected [ 279.511854][T10690] tipc: Started in network mode [ 279.521303][T10690] tipc: Node identity , cluster identity 4711 [ 279.528981][T10690] tipc: Failed to obtain node identity [ 279.537079][T10690] tipc: Enabling of bearer rejected, failed to enable media [ 280.398031][ T9309] usb 7-1: unit 2 not found! [ 280.401944][ T9309] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 280.414178][ T9309] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 280.588888][T10718] tipc: Started in network mode [ 280.590717][T10718] tipc: Node identity , cluster identity 4711 [ 280.597734][T10718] tipc: Failed to obtain node identity [ 280.600082][T10718] tipc: Enabling of bearer rejected, failed to enable media [ 281.474989][ T9309] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 281.488521][ T9309] usb 7-1: USB disconnect, device number 18 [ 281.566466][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 281.650975][T10737] FAULT_INJECTION: forcing a failure. [ 281.650975][T10737] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.674914][T10737] CPU: 0 UID: 0 PID: 10737 Comm: syz.2.1138 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.674936][T10737] Tainted: [L]=SOFTLOCKUP [ 281.674940][T10737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 281.674946][T10737] Call Trace: [ 281.674960][T10737] [ 281.674964][T10737] dump_stack_lvl+0x100/0x190 [ 281.675010][T10737] should_fail_ex.cold+0x5/0xa [ 281.675028][T10737] ? prepare_alloc_pages+0x16d/0x5f0 [ 281.675059][T10737] should_fail_alloc_page+0xeb/0x140 [ 281.675085][T10737] prepare_alloc_pages+0x1f0/0x5f0 [ 281.675105][T10737] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 281.675122][T10737] ? find_held_lock+0x2b/0x80 [ 281.675148][T10737] ? unwind_next_frame+0x3be/0x2090 [ 281.675174][T10737] ? unwind_next_frame+0x3be/0x2090 [ 281.675193][T10737] ? unwind_next_frame+0x3c8/0x2090 [ 281.675208][T10737] ? __do_fast_syscall_32+0x13a/0x8b0 [ 281.675221][T10737] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 281.675235][T10737] ? do_fast_syscall_32+0x32/0x70 [ 281.675249][T10737] ? __lock_acquire+0x4c5/0x1ec0 [ 281.675262][T10737] ? __lock_acquire+0x4c5/0x1ec0 [ 281.675271][T10737] ? __css_rstat_updated+0x1ce/0x590 [ 281.675293][T10737] ? lock_acquire+0x1b9/0x370 [ 281.675303][T10737] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.675328][T10737] ? policy_nodemask+0xed/0x4f0 [ 281.675347][T10737] alloc_pages_mpol+0x1fb/0x540 [ 281.675365][T10737] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 281.675383][T10737] ? __lock_acquire+0x4c5/0x1ec0 [ 281.675395][T10737] folio_alloc_mpol_noprof+0x36/0x260 [ 281.675408][T10737] vma_alloc_folio_noprof+0xed/0x1d0 [ 281.675420][T10737] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 281.675436][T10737] do_anonymous_page+0xb2b/0x2080 [ 281.675456][T10737] ? rcu_read_unlock+0x2d/0xb0 [ 281.675472][T10737] __handle_mm_fault+0x1d2c/0x2a00 [ 281.675486][T10737] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 281.675500][T10737] ? __pfx___handle_mm_fault+0x10/0x10 [ 281.675514][T10737] ? pte_offset_map_lock+0x174/0x320 [ 281.675530][T10737] ? find_held_lock+0x2b/0x80 [ 281.675548][T10737] ? follow_page_pte+0x4d0/0x13f0 [ 281.675567][T10737] handle_mm_fault+0x37b/0xa30 [ 281.675582][T10737] __get_user_pages+0x1178/0x32a0 [ 281.675603][T10737] ? down_read_killable+0x35d/0x520 [ 281.675617][T10737] ? __pfx___get_user_pages+0x10/0x10 [ 281.675658][T10737] __gup_longterm_locked+0x87d/0x16f0 [ 281.675674][T10737] ? __pfx___gup_longterm_locked+0x10/0x10 [ 281.675684][T10737] ? lock_acquire+0x1b9/0x370 [ 281.675695][T10737] ? find_held_lock+0x2b/0x80 [ 281.675710][T10737] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 281.675728][T10737] gup_fast_fallback+0x16dc/0x2790 [ 281.675748][T10737] ? __pfx_gup_fast_fallback+0x10/0x10 [ 281.675757][T10737] ? __ia32_sys_getsockopt+0xbc/0x160 [ 281.675776][T10737] ? __do_fast_syscall_32+0x13a/0x8b0 [ 281.675788][T10737] ? do_fast_syscall_32+0x32/0x70 [ 281.675805][T10737] pin_user_pages_fast+0xa7/0xf0 [ 281.675828][T10737] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 281.675843][T10737] iov_iter_extract_pages+0xac8/0x2100 [ 281.675908][T10737] ? rcu_is_watching+0x13/0xc0 [ 281.675930][T10737] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 281.675942][T10737] ? __kasan_kmalloc+0xaa/0xb0 [ 281.675958][T10737] ? __kvmalloc_node_noprof+0x36f/0x970 [ 281.675975][T10737] ? rds_info_getsockopt+0x441/0x610 [ 281.675997][T10737] rds_info_getsockopt+0x46f/0x610 [ 281.676012][T10737] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 281.676027][T10737] ? find_held_lock+0x2b/0x80 [ 281.676046][T10737] rds_getsockopt+0x126/0x310 [ 281.676062][T10737] ? __pfx_rds_getsockopt+0x10/0x10 [ 281.676077][T10737] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 281.676094][T10737] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 281.676115][T10737] do_sock_getsockopt+0x3f6/0x6e0 [ 281.676134][T10737] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 281.676153][T10737] ? find_held_lock+0x2b/0x80 [ 281.676171][T10737] ? __fget_files+0x21f/0x3d0 [ 281.676197][T10737] __sys_getsockopt+0x133/0x1d0 [ 281.676214][T10737] ? __ia32_sys_getsockopt+0xbc/0x160 [ 281.676227][T10737] __ia32_sys_getsockopt+0xbc/0x160 [ 281.676239][T10737] ? __do_fast_syscall_32+0xb3/0x8b0 [ 281.676250][T10737] ? lockdep_hardirqs_on+0x7d/0x110 [ 281.676261][T10737] __do_fast_syscall_32+0x13a/0x8b0 [ 281.676272][T10737] ? lockdep_hardirqs_on+0x7d/0x110 [ 281.676283][T10737] do_fast_syscall_32+0x32/0x70 [ 281.676295][T10737] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.676309][T10737] RIP: 0023:0xf7fc7fec [ 281.676330][T10737] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 281.676335][T10737] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 281.676346][T10737] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000114 [ 281.676353][T10737] RDX: 0000000000002715 RSI: 0000000080000580 RDI: 0000000080000400 [ 281.676359][T10737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.676365][T10737] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 281.676371][T10737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.676384][T10737] [ 281.978570][T10741] fuse: Bad value for 'group_id' [ 281.980668][T10741] fuse: Bad value for 'group_id' [ 282.014528][T10749] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 282.059022][T10751] libceph: Failed to parse secret: -22 [ 282.106131][T10753] 9p: Could not find request transport: virîæ [ 282.318149][T10772] tipc: Started in network mode [ 282.320604][T10772] tipc: Node identity , cluster identity 4711 [ 282.322648][T10772] tipc: Failed to obtain node identity [ 282.325278][T10772] tipc: Enabling of bearer rejected, failed to enable media [ 282.424194][ T850] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 282.654487][ T850] usb 10-1: Using ep0 maxpacket: 16 [ 282.675722][ T850] usb 10-1: unable to get BOS descriptor or descriptor too short [ 282.678939][ T850] usb 10-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 282.686786][ T850] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.696977][ T850] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.701778][ T850] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.704701][ T850] usb 10-1: Product: syz [ 282.707022][ T850] usb 10-1: Manufacturer: syz [ 282.710577][ T850] usb 10-1: SerialNumber: syz [ 283.222004][T10792] lo: entered allmulticast mode [ 283.367737][T10791] lo: left allmulticast mode [ 283.518174][T10797] fuse: Bad value for 'group_id' [ 283.526069][T10797] fuse: Bad value for 'group_id' [ 283.669909][T10799] kAFS: bad VL server IP address [ 285.030051][T10813] socket: no more sockets [ 285.091514][ T850] usb 10-1: unit 2 not found! [ 285.110274][ T850] usb 10-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 285.143030][ T850] usb 10-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 285.213736][T10818] tipc: Started in network mode [ 285.216220][T10818] tipc: Node identity , cluster identity 4711 [ 285.219338][T10818] tipc: Failed to obtain node identity [ 285.220490][ T850] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 285.222130][T10818] tipc: Enabling of bearer rejected, failed to enable media [ 285.236903][ T850] usb 10-1: USB disconnect, device number 6 [ 285.253764][T10821] UDC core: g1: couldn't find an available UDC or it's busy [ 285.258416][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 285.266698][T10819] FAULT_INJECTION: forcing a failure. [ 285.266698][T10819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.271701][T10820] syz_tun: entered allmulticast mode [ 285.280331][T10819] CPU: 2 UID: 0 PID: 10819 Comm: syz.3.1158 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.280350][T10819] Tainted: [L]=SOFTLOCKUP [ 285.280354][T10819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.280360][T10819] Call Trace: [ 285.280365][T10819] [ 285.280369][T10819] dump_stack_lvl+0x100/0x190 [ 285.280386][T10819] should_fail_ex.cold+0x5/0xa [ 285.280399][T10819] _copy_from_user+0x2e/0xd0 [ 285.280413][T10819] kstrtouint_from_user+0xd6/0x1d0 [ 285.280431][T10819] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 285.280446][T10819] ? __lock_acquire+0x4c5/0x1ec0 [ 285.280464][T10819] proc_fail_nth_write+0x83/0x220 [ 285.280487][T10819] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 285.280502][T10819] vfs_write+0x2aa/0x1050 [ 285.280523][T10819] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 285.280537][T10819] ? __pfx_vfs_write+0x10/0x10 [ 285.280548][T10819] ? find_held_lock+0x2b/0x80 [ 285.280563][T10819] ? __fget_files+0x215/0x3d0 [ 285.280579][T10819] ? __fget_files+0x21f/0x3d0 [ 285.280595][T10819] ksys_write+0x12a/0x250 [ 285.280606][T10819] ? __pfx_ksys_write+0x10/0x10 [ 285.280622][T10819] do_int80_emulation+0x166/0x650 [ 285.280636][T10819] asm_int80_emulation+0x1a/0x20 [ 285.280647][T10819] RIP: 0023:0xf71c74eb [ 285.280656][T10819] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 285.280667][T10819] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 285.280678][T10819] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54865d0 [ 285.280685][T10819] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.280691][T10819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.280697][T10819] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 285.280703][T10819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.280716][T10819] [ 286.691947][T10816] syz_tun: left allmulticast mode [ 287.306001][T10856] gadgetfs: bound to dummy_udc driver [ 287.544975][ T40] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 287.549699][ C2] gadgetfs: connected [ 287.555986][T10850] gadgetfs: suspended from state 3 [ 287.558241][T10850] gadgetfs: disconnected [ 287.906675][T10865] fuse: Bad value for 'group_id' [ 287.908327][T10865] fuse: Bad value for 'group_id' [ 288.140923][T10874] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 288.228976][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 288.228995][ T42] audit: type=1326 audit(1787151298.850:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.5.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 288.274548][ T42] audit: type=1326 audit(1787151298.850:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.5.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 288.303428][ T42] audit: type=1326 audit(1787151298.850:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.5.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 288.327334][ T42] audit: type=1326 audit(1787151298.850:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.5.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 288.353288][ T42] audit: type=1326 audit(1787151298.860:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.5.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 288.375319][ T42] audit: type=1326 audit(1787151298.860:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.5.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 288.394583][ T42] audit: type=1326 audit(1787151298.860:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.5.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 288.416278][ T42] audit: type=1326 audit(1787151298.860:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.5.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 288.435109][ T42] audit: type=1326 audit(1787151298.930:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.5.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 288.456283][ T42] audit: type=1326 audit(1787151298.930:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.5.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 288.584433][T10878] netlink: 'syz.5.1171': attribute type 5 has an invalid length. [ 288.589216][T10878] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 288.626842][T10880] tipc: Started in network mode [ 288.628450][T10880] tipc: Node identity , cluster identity 4711 [ 288.630329][T10880] tipc: Failed to obtain node identity [ 288.632158][T10880] tipc: Enabling of bearer rejected, failed to enable media [ 290.137427][T10903] netlink: 'syz.3.1179': attribute type 1 has an invalid length. [ 290.140199][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 290.308124][T10912] tipc: Started in network mode [ 290.310163][T10912] tipc: Node identity , cluster identity 4711 [ 290.312508][T10912] tipc: Failed to obtain node identity [ 290.318081][T10912] tipc: Enabling of bearer rejected, failed to enable media [ 290.693283][T10908] random: crng reseeded on system resumption [ 290.829858][T10933] tipc: Started in network mode [ 290.831572][T10933] tipc: Node identity , cluster identity 4711 [ 290.833595][T10933] tipc: Failed to obtain node identity [ 290.835948][T10933] tipc: Enabling of bearer rejected, failed to enable media [ 290.922873][T10938] syzkaller0: entered promiscuous mode [ 290.925182][T10938] syzkaller0: entered allmulticast mode [ 292.053157][T10961] fuse: Bad value for 'group_id' [ 292.081157][T10961] fuse: Bad value for 'group_id' [ 292.820472][T10973] tipc: Started in network mode [ 292.825785][T10973] tipc: Node identity , cluster identity 4711 [ 292.832141][T10973] tipc: Failed to obtain node identity [ 292.837444][T10973] tipc: Enabling of bearer rejected, failed to enable media [ 293.461326][T10975] random: crng reseeded on system resumption [ 293.673611][T10991] syzkaller0: entered promiscuous mode [ 293.689408][T10991] syzkaller0: entered allmulticast mode [ 293.886656][T10993] tipc: Started in network mode [ 293.889345][T10993] tipc: Node identity , cluster identity 4711 [ 293.895158][T10993] tipc: Failed to obtain node identity [ 293.897186][T10993] tipc: Enabling of bearer rejected, failed to enable media [ 294.613064][T11012] fuse: Bad value for 'group_id' [ 294.629229][T11012] fuse: Bad value for 'group_id' [ 296.009178][T11031] tipc: Started in network mode [ 296.013026][T11031] tipc: Node identity , cluster identity 4711 [ 296.029475][T11031] tipc: Failed to obtain node identity [ 296.039469][T11031] tipc: Enabling of bearer rejected, failed to enable media [ 297.052513][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 297.055709][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1212'. [ 297.118944][T11053] fuse: Bad value for 'group_id' [ 297.125210][T11053] fuse: Bad value for 'group_id' [ 297.470980][T11059] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1215'. [ 297.540620][T11059] lo speed is unknown, defaulting to 1000 [ 297.693913][T11059] lo speed is unknown, defaulting to 1000 [ 297.871952][T11065] mtrr: base(0x30000) is not aligned on a size(0x20000) boundary [ 298.338280][T11073] tipc: Started in network mode [ 298.340464][T11073] tipc: Node identity , cluster identity 4711 [ 298.358826][T11073] tipc: Failed to obtain node identity [ 298.361843][T11073] tipc: Enabling of bearer rejected, failed to enable media [ 298.767197][T11089] fuse: Bad value for 'group_id' [ 298.773402][T11089] fuse: Bad value for 'group_id' [ 298.972239][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1225'. [ 298.975990][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1225'. [ 300.886863][T11115] fuse: Bad value for 'group_id' [ 300.888643][T11115] fuse: Bad value for 'group_id' [ 300.899295][T11102] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 301.171229][T11124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.273239][T11128] tipc: Started in network mode [ 301.275277][T11128] tipc: Node identity , cluster identity 4711 [ 301.277345][T11128] tipc: Failed to obtain node identity [ 301.279165][T11128] tipc: Enabling of bearer rejected, failed to enable media [ 301.437008][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'. [ 301.445070][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 303.540040][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1243'. [ 304.354056][T11171] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 304.356192][T11171] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 304.373380][T11174] vhci_hcd: connection closed [ 304.373812][T11171] vhci_hcd vhci_hcd.0: Device attached [ 304.386920][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 304.394220][ T5806] vhci_hcd vhci_hcd.2: stop threads [ 304.396852][ T5806] vhci_hcd vhci_hcd.2: release socket [ 304.401134][ T5806] vhci_hcd vhci_hcd.2: disconnect device [ 304.563102][T11181] tipc: Started in network mode [ 304.573034][T11181] tipc: Node identity , cluster identity 4711 [ 304.575647][T11181] tipc: Failed to obtain node identity [ 304.583148][T11181] tipc: Enabling of bearer rejected, failed to enable media [ 307.503118][T11228] tipc: Started in network mode [ 307.506996][T11228] tipc: Node identity , cluster identity 4711 [ 307.514349][T11228] tipc: Failed to obtain node identity [ 307.516118][T11228] tipc: Enabling of bearer rejected, failed to enable media [ 307.777719][T11240] tipc: Started in network mode [ 307.783783][T11240] tipc: Node identity , cluster identity 4711 [ 307.792548][T11240] tipc: Failed to obtain node identity [ 307.797430][T11240] tipc: Enabling of bearer rejected, failed to enable media [ 308.208947][T11243] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 309.106555][ T9309] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 310.125371][ T6533] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 316.676593][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.679362][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.603185][T11376] kvm: kvm [11373]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000005d) [ 324.714262][T11375] syz.2.1276 (11375): drop_caches: 2 [ 326.212713][T11392] netlink: 'syz.4.1279': attribute type 21 has an invalid length. [ 326.219088][T11392] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1279'. [ 326.724960][ T40] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 326.787954][T11404] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 326.884309][ T40] usb 8-1: Using ep0 maxpacket: 8 [ 326.889273][ T40] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 326.895647][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.900204][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.917104][ T40] usb 8-1: config 0 descriptor?? [ 327.172489][ T40] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 327.203298][T11410] syzkaller0: entered promiscuous mode [ 327.211874][T11410] syzkaller0: entered allmulticast mode [ 327.217764][T11412] tipc: Started in network mode [ 327.219467][T11412] tipc: Node identity , cluster identity 4711 [ 327.221408][T11412] tipc: Failed to obtain node identity [ 327.223063][T11412] tipc: Enabling of bearer rejected, failed to enable media [ 327.646200][T11432] netlink: 'syz.2.1289': attribute type 21 has an invalid length. [ 327.649440][T11432] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1289'. [ 327.876597][ T9309] usb 8-1: USB disconnect, device number 12 [ 329.366744][T11448] syz.3.1292 (11448): drop_caches: 2 [ 329.519344][T11453] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 329.861676][T11462] tipc: Started in network mode [ 329.869403][T11462] tipc: Node identity , cluster identity 4711 [ 329.878046][T11462] tipc: Failed to obtain node identity [ 329.880546][T11462] tipc: Enabling of bearer rejected, failed to enable media [ 329.969247][T11464] kvm: kvm [11463]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000005d) [ 330.140594][T11478] syz.4.1300 (11478): drop_caches: 2 [ 330.504178][ T40] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 330.619742][T11490] syz.2.1305 (11490): drop_caches: 2 [ 330.872415][T11493] lo speed is unknown, defaulting to 1000 [ 331.003393][T11493] lo speed is unknown, defaulting to 1000 [ 331.093392][T11499] syz.2.1307 (11499): drop_caches: 2 [ 331.274432][ T40] usb 9-1: Using ep0 maxpacket: 8 [ 331.278173][ T40] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 331.282497][ T40] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 331.285978][ T40] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.289915][ T40] usb 9-1: config 0 descriptor?? [ 331.365060][T11508] syz.5.1310 (11508): drop_caches: 2 [ 331.518701][ T40] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 332.099865][T11523] tipc: Started in network mode [ 332.110373][T11523] tipc: Node identity , cluster identity 4711 [ 332.126147][T11523] tipc: Failed to obtain node identity [ 332.141146][T11523] tipc: Enabling of bearer rejected, failed to enable media [ 332.183903][ T24] usb 9-1: USB disconnect, device number 20 [ 334.282593][T11548] syz.5.1319 (11548): drop_caches: 2 [ 334.577159][T11553] syz.4.1320 (11553): drop_caches: 2 [ 334.693652][T11562] tipc: Started in network mode [ 334.702051][T11562] tipc: Node identity , cluster identity 4711 [ 334.709307][T11562] tipc: Failed to obtain node identity [ 334.711106][T11562] tipc: Enabling of bearer rejected, failed to enable media [ 335.335807][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 335.485759][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 335.489035][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 335.498341][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.502247][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.510679][ T10] usb 7-1: config 0 descriptor?? [ 335.609140][T11585] tipc: Started in network mode [ 335.610831][T11585] tipc: Node identity , cluster identity 4711 [ 335.612916][T11585] tipc: Failed to obtain node identity [ 335.615567][T11585] tipc: Enabling of bearer rejected, failed to enable media [ 335.742289][ T10] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 335.793803][T11579] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 336.268942][ T7685] usb 7-1: USB disconnect, device number 19 [ 336.574768][T11611] syz.4.1331 (11611): drop_caches: 2 [ 336.710255][T11613] lo speed is unknown, defaulting to 1000 [ 336.891350][T11627] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1336'. [ 337.045311][T11613] lo speed is unknown, defaulting to 1000 [ 337.740098][T11640] tipc: Started in network mode [ 337.743835][T11640] tipc: Node identity , cluster identity 4711 [ 337.754741][T11640] tipc: Failed to obtain node identity [ 337.758091][T11640] tipc: Enabling of bearer rejected, failed to enable media [ 337.771056][T11634] syzkaller1: entered promiscuous mode [ 337.779541][T11634] syzkaller1: entered allmulticast mode [ 338.057921][T11644] syz.4.1342 (11644): drop_caches: 2 [ 338.383721][ T5090] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 338.458828][T11666] netlink: 'syz.4.1347': attribute type 3 has an invalid length. [ 339.570112][T11703] syz.4.1352 (11703): drop_caches: 2 [ 339.795961][T11717] sctp: [Deprecated]: syz.4.1362 (pid 11717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.795961][T11717] Use struct sctp_sack_info instead [ 339.844853][T11720] tipc: Started in network mode [ 339.850374][T11720] tipc: Node identity , cluster identity 4711 [ 339.853972][T11720] tipc: Failed to obtain node identity [ 339.860490][T11720] tipc: Enabling of bearer rejected, failed to enable media [ 340.349145][T11746] netlink: 'syz.3.1361': attribute type 3 has an invalid length. [ 340.598218][T11755] syz.4.1363 (11755): drop_caches: 2 [ 341.009429][T11761] syz.2.1365 (11761): drop_caches: 2 [ 341.651122][T11796] syz.5.1372 (11796): drop_caches: 2 [ 343.978264][T11860] Mount JFS Failure: -5 [ 343.991770][T11860] overlay: Unknown parameter 'context' [ 345.497402][T11885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1398'. [ 345.510032][T11885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1398'. [ 345.711600][T11894] hfsplus: unable to find HFS+ superblock [ 345.758030][T11894] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 346.674885][ T5736] Bluetooth: hci3: command 0x1003 tx timeout [ 346.683770][ T5090] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 346.960564][T11934] loop5: detected capacity change from 0 to 7 [ 347.027900][ T1297] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 347.033845][ T1297] Buffer I/O error on dev loop5, logical block 0, async page read [ 347.037925][T11934] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 347.042016][T11934] Buffer I/O error on dev loop5, logical block 0, async page read [ 347.044654][T11934] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 347.047752][T11934] Buffer I/O error on dev loop5, logical block 0, async page read [ 347.050281][T11934] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 347.053241][T11934] Buffer I/O error on dev loop5, logical block 0, async page read [ 347.055811][T11934] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 347.058811][T11934] Buffer I/O error on dev loop5, logical block 0, async page read [ 347.061336][T11934] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 347.064428][T11934] Buffer I/O error on dev loop5, logical block 0, async page read [ 347.066838][T11934] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 347.069766][T11934] Buffer I/O error on dev loop5, logical block 0, async page read [ 347.072180][T11934] ldm_validate_partition_table(): Disk read failed. [ 347.074293][T11934] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 347.077283][T11934] Buffer I/O error on dev loop5, logical block 0, async page read [ 347.079758][T11934] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 347.082697][T11934] Buffer I/O error on dev loop5, logical block 0, async page read [ 347.085276][T11934] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 347.088251][T11934] Buffer I/O error on dev loop5, logical block 0, async page read [ 347.090664][T11934] Dev loop5: unable to read RDB block 0 [ 347.092448][T11934] loop5: unable to read partition table [ 347.094344][T11934] loop5: partition table beyond EOD, truncated [ 347.096306][T11934] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 348.079262][T11942] netlink: zone id is out of range [ 348.086843][T11942] netlink: zone id is out of range [ 348.097630][T11942] netlink: zone id is out of range [ 348.111266][T11942] netlink: zone id is out of range [ 348.354332][T11931] cgroup: Unknown subsys name 'rlimit' [ 348.502117][T11958] hfsplus: unable to find HFS+ superblock [ 348.532182][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 348.583192][T11963] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 348.924017][T11976] tipc: Started in network mode [ 348.926917][T11976] tipc: Node identity , cluster identity 4711 [ 348.929526][T11976] tipc: Failed to obtain node identity [ 348.931827][T11976] tipc: Enabling of bearer rejected, failed to enable media [ 350.506479][T11988] overlayfs: failed to resolve './file2': -2 [ 350.742808][T12006] overlayfs: cannot append lower layer [ 351.178694][T12020] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 351.418308][T12033] CIFS mount error: No usable UNC path provided in device string! [ 351.418308][T12033] [ 351.425994][T12033] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 352.841277][T12042] overlayfs: failed to resolve './file2': -2 [ 353.032354][T12040] cgroup: Unknown subsys name 'rlimit' [ 353.070688][ T64] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 353.275833][T12063] macvlan0: entered promiscuous mode [ 353.283563][T12063] netlink: 'syz.5.1435': attribute type 1 has an invalid length. [ 353.298693][T12063] netlink: 'syz.5.1435': attribute type 2 has an invalid length. [ 354.853377][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 354.853738][ T42] audit: type=1326 audit(1787151365.470:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.3.1442" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc4fec code=0x0 [ 354.940484][T12104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1446'. [ 355.001938][T12105] ALSA: mixer_oss: invalid OSS volume '' [ 355.003970][T12105] ALSA: mixer_oss: invalid OSS volume 'ÊÒ±BËÂì;T`¿@$™¿¾E÷ócXÆMYdŸè,' [ 355.007108][T12105] ALSA: mixer_oss: invalid OSS volume 'b«Ž@hé#' [ 355.009251][T12105] ALSA: mixer_oss: invalid OSS volume '•‘h4¿–ÐX¬„S4v=0_>¤&äÏ' [ 355.011919][T12105] ALSA: mixer_oss: invalid OSS volume '|œ/"tj' [ 355.014508][T12105] ALSA: mixer_oss: invalid OSS volume '-z5²Šc^÷Jƒå6$̹' [ 355.017136][T12105] ALSA: mixer_oss: invalid OSS volume '0ÉóT„®°yòÝäî¬ó‰´ª‡—‚j–P&†³aït' [ 355.019832][T12105] ALSA: mixer_oss: invalid OSS volume '÷|á¥ó~‚\' [ 355.021972][T12105] ALSA: mixer_oss: invalid OSS volume '­É@ô^3bÉœ‘}˜ÔG$º#\Ä("/øoúLÛ' [ 355.025614][T12105] ALSA: mixer_oss: invalid OSS volume 'I ‹È:•þàâ' [ 355.027883][T12105] ALSA: mixer_oss: invalid OSS volume '%^Óvƒªhc¾GJPÿÃÐöø¬rª('â¯Q=' [ 355.030590][T12105] ALSA: mixer_oss: invalid OSS volume ' ‰Gjä;4÷ÊÃŒðÙÆzÜ3¸W´Ò¼0ÙF=%¾' [ 355.033279][T12105] ALSA: mixer_oss: invalid OSS volume ';4— å‚«4òfhÊ߇G¥ŽIב°Q÷5o“J' [ 355.036705][T12105] ALSA: mixer_oss: invalid OSS volume 'WöŒ’ló]Y1Õ-¬ž¾ÙJ<´¶³ªAÆ>ƒïo' [ 355.078870][T12108] tipc: Started in network mode [ 355.080541][T12108] tipc: Node identity , cluster identity 4711 [ 355.082632][T12108] tipc: Failed to obtain node identity [ 355.084628][T12108] tipc: Enabling of bearer rejected, failed to enable media [ 355.154258][ T9309] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 355.316030][ T9309] usb 8-1: Using ep0 maxpacket: 8 [ 355.323847][ T9309] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.332494][ T9309] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 355.342306][ T9309] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 355.345943][ T9309] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.349311][ T9309] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.355581][ T9309] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.609570][ T83] nvmet: connect request for invalid subsystem testsubsys! [ 355.622695][T12102] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 356.027086][T12136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1453'. [ 356.068159][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 356.330299][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1456'. [ 356.339347][T12145] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.511418][T12153] CIFS mount error: No usable UNC path provided in device string! [ 356.511418][T12153] [ 356.527911][T12153] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 356.776255][T12150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.858148][T12150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.957086][T12150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.074251][ T5806] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.085034][ T5806] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.089370][ T5806] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.094629][ T5806] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.317430][T12179] FAULT_INJECTION: forcing a failure. [ 357.317430][T12179] name failslab, interval 1, probability 0, space 0, times 0 [ 357.324342][T12179] CPU: 0 UID: 0 PID: 12179 Comm: syz.2.1462 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.324361][T12179] Tainted: [L]=SOFTLOCKUP [ 357.324365][T12179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.324371][T12179] Call Trace: [ 357.324397][T12179] [ 357.324403][T12179] dump_stack_lvl+0x100/0x190 [ 357.324484][T12179] should_fail_ex.cold+0x5/0xa [ 357.324507][T12179] should_failslab+0xc2/0x120 [ 357.324539][T12179] __kmalloc_cache_noprof+0x91/0x6b0 [ 357.324560][T12179] ? sget_fc+0x117/0x1f20 [ 357.324578][T12179] ? sget_fc+0x117/0x1f20 [ 357.324588][T12179] ? sget_fc+0x1ba/0x1f20 [ 357.324601][T12179] sget_fc+0x1ba/0x1f20 [ 357.324612][T12179] ? mntput_no_expire+0xd8/0x220 [ 357.324654][T12179] ? __pfx_super_s_dev_test+0x10/0x10 [ 357.324672][T12179] ? __pfx_super_s_dev_set+0x10/0x10 [ 357.324682][T12179] ? __pfx_sget_fc+0x10/0x10 [ 357.324692][T12179] ? mntput+0x70/0xa0 [ 357.324703][T12179] ? lookup_bdev+0x16b/0x2a0 [ 357.324727][T12179] ? __pfx_lookup_bdev+0x10/0x10 [ 357.324739][T12179] ? rcu_is_watching+0x13/0xc0 [ 357.324764][T12179] ? vfs_parse_fs_qstr+0x144/0x1c0 [ 357.324779][T12179] ? kfree+0x1e5/0x6c0 [ 357.324791][T12179] get_tree_bdev_flags+0x1ba/0x620 [ 357.324803][T12179] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 357.324838][T12179] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 357.324853][T12179] ? bpf_lsm_capable+0x9/0x10 [ 357.324874][T12179] ? security_capable+0x80/0x260 [ 357.324894][T12179] vfs_get_tree+0x92/0x320 [ 357.324911][T12179] path_mount+0x7d0/0x24c0 [ 357.324930][T12179] ? __pfx_path_mount+0x10/0x10 [ 357.324944][T12179] ? lockdep_hardirqs_on+0x7d/0x110 [ 357.324983][T12179] ? putname+0xb1/0x110 [ 357.324998][T12179] ? kmem_cache_free+0x127/0x6b0 [ 357.325015][T12179] ? __ia32_sys_mount+0x292/0x310 [ 357.325029][T12179] __ia32_sys_mount+0x292/0x310 [ 357.325046][T12179] ? __pfx___ia32_sys_mount+0x10/0x10 [ 357.325061][T12179] ? ksys_write+0x1ac/0x250 [ 357.325072][T12179] ? __pfx_ksys_write+0x10/0x10 [ 357.325086][T12179] __do_fast_syscall_32+0x13a/0x8b0 [ 357.325098][T12179] ? lockdep_hardirqs_on+0x7d/0x110 [ 357.325109][T12179] do_fast_syscall_32+0x32/0x70 [ 357.325121][T12179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.325135][T12179] RIP: 0023:0xf7fc7fec [ 357.325150][T12179] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 357.325154][T12179] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 357.325166][T12179] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000000 [ 357.325173][T12179] RDX: 0000000080000080 RSI: 0000000000204001 RDI: 0000000000000000 [ 357.325179][T12179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.325185][T12179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.325191][T12179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.325204][T12179] [ 357.742973][T12188] ======================================================= [ 357.742973][T12188] WARNING: The mand mount option has been deprecated and [ 357.742973][T12188] and is ignored by this kernel. Remove the mand [ 357.742973][T12188] option from the mount to silence this warning. [ 357.742973][T12188] ======================================================= [ 357.756033][T12188] 9p: Bad value for 'rfdno' [ 357.858263][ T9309] usb 8-1: usb_control_msg returned -71 [ 357.867687][ T9309] usbtmc 8-1:16.0: can't read capabilities [ 357.892428][ T9309] usb 8-1: USB disconnect, device number 13 [ 358.521259][T12197] siw: device registration error -23 [ 358.626085][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 359.620962][T12219] overlayfs: failed to resolve './file0': -2 [ 360.545878][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1475'. [ 360.835849][T12227] nvme nvme0: rdma connection establishment failed (-104) [ 361.128947][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'. [ 362.005538][ T42] audit: type=1326 audit(1787151372.630:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12261 comm="syz.4.1484" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707efec code=0x0 [ 362.026648][ T42] audit: type=1326 audit(1787151372.650:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12261 comm="syz.4.1484" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707efec code=0x0 [ 362.168062][T12268] 9p: Bad value for 'rfdno' [ 362.260130][T12272] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 362.375361][ T7685] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 362.504218][ T7685] usb 9-1: device descriptor read/64, error -71 [ 362.766849][ T7685] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 362.904385][ T7685] usb 9-1: device descriptor read/64, error -71 [ 363.014441][ T7685] usb usb9-port1: attempt power cycle [ 363.354228][ T7685] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 363.374979][ T7685] usb 9-1: device descriptor read/8, error -71 [ 363.454361][T12278] binder: 12277:12278 ioctl 40046109 80000240 returned -22 [ 363.457553][T12278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.744285][ T7685] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 364.195021][ T7685] usb 9-1: device descriptor read/8, error -71 [ 364.272857][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1492'. [ 364.383770][ T42] audit: type=1326 audit(1787151375.000:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.5.1493" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f45fec code=0x0 [ 364.424644][ T7685] usb usb9-port1: unable to enumerate USB device [ 364.754322][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 364.904843][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 364.907609][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 364.911468][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 364.915763][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 364.919039][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 364.922245][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.926637][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.166655][ T48] nvmet: connect request for invalid subsystem testsubsys! [ 365.170490][T12301] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 365.211529][ T42] audit: type=1400 audit(1787151375.830:320): apparmor="STATUS" operation="profile_load" info="not privileged for target profile" error=-13 profile="unconfined" pid=12317 comm="syz.2.1499" [ 365.512370][T12329] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1500'. [ 365.533710][T12322] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1500'. [ 365.560757][T12328] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1500'. [ 366.023110][T12334] FAULT_INJECTION: forcing a failure. [ 366.023110][T12334] name failslab, interval 1, probability 0, space 0, times 0 [ 366.028934][T12334] CPU: 2 UID: 0 PID: 12334 Comm: syz.2.1504 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.028965][T12334] Tainted: [L]=SOFTLOCKUP [ 366.028971][T12334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 366.028981][T12334] Call Trace: [ 366.028988][T12334] [ 366.028995][T12334] dump_stack_lvl+0x100/0x190 [ 366.029024][T12334] should_fail_ex.cold+0x5/0xa [ 366.029052][T12334] should_failslab+0xc2/0x120 [ 366.029081][T12334] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 366.029108][T12334] ? __alloc_skb+0x5b7/0x710 [ 366.029128][T12334] ? __alloc_skb+0x140/0x710 [ 366.029151][T12334] __alloc_skb+0x140/0x710 [ 366.029169][T12334] ? __alloc_skb+0x5b7/0x710 [ 366.029188][T12334] ? __pfx___alloc_skb+0x10/0x10 [ 366.029215][T12334] netlink_alloc_large_skb+0x69/0x150 [ 366.029235][T12334] netlink_sendmsg+0x680/0xda0 [ 366.029256][T12334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.029276][T12334] ? apparmor_socket_sendmsg+0x15b/0x270 [ 366.029300][T12334] ____sys_sendmsg+0xa4d/0xbe0 [ 366.029325][T12334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.029345][T12334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.029379][T12334] ___sys_sendmsg+0x190/0x1e0 [ 366.029409][T12334] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.029445][T12334] ? find_held_lock+0x2b/0x80 [ 366.029501][T12334] __sys_sendmsg+0x160/0x210 [ 366.029524][T12334] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.029550][T12334] ? __pfx_ksys_write+0x10/0x10 [ 366.029576][T12334] __do_fast_syscall_32+0x13a/0x8b0 [ 366.029595][T12334] ? lockdep_hardirqs_on+0x7d/0x110 [ 366.029618][T12334] do_fast_syscall_32+0x32/0x70 [ 366.029639][T12334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 366.029661][T12334] RIP: 0023:0xf7fc7fec [ 366.029681][T12334] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 366.029689][T12334] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 366.029708][T12334] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 366.029719][T12334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.029729][T12334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.029739][T12334] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 366.029749][T12334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.029771][T12334] [ 366.436756][T12342] 9p: Bad value for 'rfdno' [ 367.435059][ T9] usb 10-1: usb_control_msg returned -71 [ 367.445432][ T9] usbtmc 10-1:16.0: can't read capabilities [ 367.476067][ T9] usb 10-1: USB disconnect, device number 7 [ 368.422805][T12361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.354563][T12379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1516'. [ 369.947104][T12408] CIFS mount error: No usable UNC path provided in device string! [ 369.947104][T12408] [ 369.959081][T12408] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 369.965099][ T9309] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 370.114212][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 370.119516][ T9309] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 370.136727][ T9309] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x79, changing to 0x9 [ 370.147031][ T9309] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 370.156937][ T9309] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 370.166771][ T9309] usb 8-1: config 0 interface 0 has no altsetting 0 [ 370.179556][ T9309] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 370.187674][ T9309] usb 8-1: Product: syz [ 370.189032][ T9309] usb 8-1: Manufacturer: syz [ 370.197356][ T9309] usb 8-1: SerialNumber: syz [ 370.204623][ T9309] usb 8-1: config 0 descriptor?? [ 370.222354][ T9309] usb 8-1: selecting invalid altsetting 0 [ 370.275214][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 370.288921][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 370.302207][ T9] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 370.322989][ T9] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 370.335866][ T9] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 370.349015][ T9] usb 7-1: config 14 has no interface number 0 [ 370.362429][ T9] usb 7-1: config 14 has no interface number 1 [ 370.368971][ T9] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 370.394917][ T9] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 370.410661][ T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 370.432271][ T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 370.455698][ T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 370.465231][ T9] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.479943][ T9] usb 7-1: config 14 interface 57 has no altsetting 0 [ 370.488038][ T9] usb 7-1: config 14 interface 228 has no altsetting 0 [ 370.497150][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.507568][ T9] usb 7-1: Product: syz [ 370.511194][ T9] usb 7-1: Manufacturer: syz [ 370.524217][ T9] usb 7-1: SerialNumber: syz [ 370.651614][ T24] usb 8-1: USB disconnect, device number 14 [ 370.943410][ T9] legousbtower 7-1:14.57: interrupt endpoints not found [ 371.312797][T12430] FAULT_INJECTION: forcing a failure. [ 371.312797][T12430] name failslab, interval 1, probability 0, space 0, times 0 [ 371.319050][T12430] CPU: 0 UID: 0 PID: 12430 Comm: syz.4.1530 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.319071][T12430] Tainted: [L]=SOFTLOCKUP [ 371.319075][T12430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 371.319082][T12430] Call Trace: [ 371.319086][T12430] [ 371.319091][T12430] dump_stack_lvl+0x100/0x190 [ 371.319110][T12430] should_fail_ex.cold+0x5/0xa [ 371.319136][T12430] should_failslab+0xc2/0x120 [ 371.319154][T12430] __kmalloc_cache_noprof+0x91/0x6b0 [ 371.319169][T12430] ? sctp_add_bind_addr+0xae/0x3e0 [ 371.319196][T12430] sctp_add_bind_addr+0xae/0x3e0 [ 371.319209][T12430] sctp_copy_local_addr_list+0x349/0x550 [ 371.319246][T12430] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 371.319263][T12430] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 371.319278][T12430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 371.319299][T12430] sctp_bind_addr_copy+0xe0/0x530 [ 371.319313][T12430] sctp_connect_new_asoc+0x1c9/0x770 [ 371.319330][T12430] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 371.319345][T12430] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 371.319359][T12430] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 371.319375][T12430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 371.319394][T12430] sctp_sendmsg+0x1743/0x22e0 [ 371.319411][T12430] ? __pfx___might_resched+0x10/0x10 [ 371.319430][T12430] ? __might_fault+0xc5/0x140 [ 371.319451][T12430] ? __pfx_sctp_sendmsg+0x10/0x10 [ 371.319467][T12430] ? aa_sk_perm+0x30c/0xaa0 [ 371.319496][T12430] ? aa_sock_msg_perm.isra.0+0x103/0x1c0 [ 371.319509][T12430] ? __pfx_sctp_sendmsg+0x10/0x10 [ 371.319526][T12430] inet_sendmsg+0x11c/0x140 [ 371.319547][T12430] ____sys_sendmsg+0x9c9/0xbe0 [ 371.319563][T12430] ? __pfx_inet_sendmsg+0x10/0x10 [ 371.319578][T12430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.319601][T12430] ___sys_sendmsg+0x190/0x1e0 [ 371.319618][T12430] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.319644][T12430] ? find_held_lock+0x2b/0x80 [ 371.319669][T12430] __sys_sendmsg+0x160/0x210 [ 371.319682][T12430] ? __pfx___sys_sendmsg+0x10/0x10 [ 371.319699][T12430] ? __pfx_ksys_write+0x10/0x10 [ 371.319715][T12430] __do_fast_syscall_32+0x13a/0x8b0 [ 371.319727][T12430] ? lockdep_hardirqs_on+0x7d/0x110 [ 371.319739][T12430] do_fast_syscall_32+0x32/0x70 [ 371.319751][T12430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 371.319766][T12430] RIP: 0023:0xf707efec [ 371.319781][T12430] Code: Unable to access opcode bytes at 0xf707efc2. [ 371.319785][T12430] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 371.319796][T12430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 371.319803][T12430] RDX: 0000000000008050 RSI: 0000000000000000 RDI: 0000000000000000 [ 371.319809][T12430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 371.319815][T12430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 371.319821][T12430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 371.319834][T12430] [ 371.423644][ T9] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 371.428442][ T9] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 371.520741][ T64] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 371.528498][ T64] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 372.770433][ T24] usb 7-1: USB disconnect, device number 20 [ 372.949053][ T24] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 373.033063][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'. [ 373.036707][T12445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1536'. [ 373.244892][T12462] comedi comedi1: Minor 4 could not be opened [ 373.567434][T12474] gadgetfs: bound to dummy_udc driver [ 373.639141][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1548'. [ 373.824187][ T40] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 374.173778][ C2] gadgetfs: connected [ 374.228989][ T40] gadgetfs: disconnected [ 374.824380][T12482] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1552'. [ 374.828029][T12482] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1552'. [ 374.893319][T12491] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 375.256318][T12503] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 375.567005][ T64] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 375.574799][ T64] Bluetooth: hci1: Injecting HCI hardware error event [ 375.578853][ T5090] Bluetooth: hci1: hardware error 0x00 [ 375.811651][T12517] Console: switching to colour dummy device 80x25 [ 376.874477][T12532] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 376.876996][T12532] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.880082][T12532] vhci_hcd vhci_hcd.0: Device attached [ 376.927622][T12535] acpi-nfit pcspkr: error -ENODEV: No ACPI companion [ 376.938041][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1565'. [ 376.966801][T12535] netlink: 'syz.2.1573': attribute type 1 has an invalid length. [ 376.974796][T12535] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1573'. [ 376.996457][T12536] vhci_hcd: connection closed [ 376.998596][ T12] vhci_hcd vhci_hcd.3: stop threads [ 377.005591][ T12] vhci_hcd vhci_hcd.3: release socket [ 377.010311][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 377.168346][T12547] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1567'. [ 377.176224][T12544] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1567'. [ 377.185949][T12546] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1567'. [ 377.644300][ T5090] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 378.117901][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.120102][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.036387][T12574] kvm: pic: single mode not supported [ 379.051721][T12574] kvm: pic: single mode not supported [ 379.086422][T12574] kvm: pic: single mode not supported [ 379.097247][T12574] kvm: pic: single mode not supported [ 379.100466][T12574] FAULT_INJECTION: forcing a failure. [ 379.100466][T12574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.106682][T12574] CPU: 0 UID: 0 PID: 12574 Comm: syz.2.1575 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.106713][T12574] Tainted: [L]=SOFTLOCKUP [ 379.106717][T12574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 379.106724][T12574] Call Trace: [ 379.106736][T12574] [ 379.106740][T12574] dump_stack_lvl+0x100/0x190 [ 379.106824][T12574] should_fail_ex.cold+0x5/0xa [ 379.106863][T12574] __kvm_read_guest_page+0x186/0x250 [ 379.106895][T12574] kvm_fetch_guest_virt+0x128/0x1a0 [ 379.106939][T12574] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 379.106964][T12574] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 379.106987][T12574] ? add_chain_block+0x330/0x3c0 [ 379.107031][T12574] ? find_held_lock+0x2b/0x80 [ 379.107055][T12574] ? clockevents_program_event+0x1bf/0x820 [ 379.107087][T12574] ? clockevents_program_event+0x1bf/0x820 [ 379.107110][T12574] x86_decode_insn+0x3ca/0x6da0 [ 379.107126][T12574] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 379.107156][T12574] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 379.107183][T12574] ? __pfx_x86_decode_insn+0x10/0x10 [ 379.107226][T12574] ? vmx_get_msr+0x13e0/0x15b0 [ 379.107255][T12574] ? init_decode_cache+0xd/0x2b0 [ 379.107270][T12574] ? init_emulate_ctxt+0x43c/0x700 [ 379.107297][T12574] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 379.107323][T12574] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 379.107354][T12574] ? __lock_acquire+0x4c5/0x1ec0 [ 379.107379][T12574] x86_emulate_instruction+0xa82/0x1df0 [ 379.107410][T12574] handle_io+0x235/0x2d0 [ 379.107435][T12574] ? __pfx_handle_io+0x10/0x10 [ 379.107457][T12574] vmx_handle_exit+0x4d6/0x1ef0 [ 379.107492][T12574] vcpu_run+0x35b1/0x5df0 [ 379.107514][T12574] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 379.107547][T12574] ? __pfx_vcpu_run+0x10/0x10 [ 379.107580][T12574] ? rcu_is_watching+0x13/0xc0 [ 379.107624][T12574] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 379.107648][T12574] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 379.107679][T12574] kvm_vcpu_ioctl+0x730/0x1700 [ 379.107702][T12574] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 379.107723][T12574] ? tomoyo_path_number_perm+0x188/0x580 [ 379.107772][T12574] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 379.107793][T12574] ? get_pid_task+0x106/0x250 [ 379.107835][T12574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.107882][T12574] ? do_vfs_ioctl+0x226/0x13e0 [ 379.107913][T12574] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 379.107942][T12574] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 379.107962][T12574] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 379.107983][T12574] ? __fget_files+0x21f/0x3d0 [ 379.108027][T12574] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 379.108041][T12574] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 379.108054][T12574] __do_fast_syscall_32+0x13a/0x8b0 [ 379.108077][T12574] ? lockdep_hardirqs_on+0x7d/0x110 [ 379.108089][T12574] do_fast_syscall_32+0x32/0x70 [ 379.108100][T12574] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.108115][T12574] RIP: 0023:0xf7fc7fec [ 379.108131][T12574] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 379.108136][T12574] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 379.108147][T12574] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 379.108154][T12574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.108160][T12574] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.108165][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.108171][T12574] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.108184][T12574] [ 379.683455][ T5090] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 380.590006][ T9] kernel read not supported for file /1275/net/stat (pid: 9 comm: kworker/0:0) [ 380.869375][T12601] netlink: 'syz.2.1581': attribute type 2 has an invalid length. [ 382.600609][T12607] comedi comedi1: dt2814: I/O base address or length out of range [ 383.246745][T12631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1589'. [ 383.871472][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'. [ 384.871919][T12668] tipc: Started in network mode [ 384.877743][T12668] tipc: Node identity , cluster identity 4711 [ 384.881807][T12668] tipc: Failed to obtain node identity [ 384.887096][T12668] tipc: Enabling of bearer rejected, failed to enable media [ 385.027949][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1601'. [ 386.000934][T12673] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.155978][T12673] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.185172][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 386.281800][T12673] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.344191][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 386.351248][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 386.357657][ T24] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=28.0e [ 386.365617][ T24] usb 8-1: config 6 has an invalid interface number: 149 but max is 0 [ 386.370118][ T24] usb 8-1: config 6 has no interface number 0 [ 386.376134][ T24] usb 8-1: config 6 interface 149 altsetting 0 endpoint 0x6 has an invalid bInterval 240, changing to 11 [ 386.386253][ T24] usb 8-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 386.388836][ T24] usb 8-1: Product: syz [ 386.390109][ T24] usb 8-1: Manufacturer: syz [ 386.391622][ T24] usb 8-1: SerialNumber: syz [ 386.393098][T12673] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.434360][ T40] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 386.534183][ T5806] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.565800][ T5806] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.568462][ T5806] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.572246][ T5806] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.586609][ T40] usb 9-1: Using ep0 maxpacket: 32 [ 386.598936][ T40] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 386.623781][ T40] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.645040][ T40] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.670454][ T40] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 386.685191][ T40] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.694161][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 386.699985][ T40] usb 9-1: config 0 descriptor?? [ 386.756954][ T24] usb 8-1: USB disconnect, device number 15 [ 386.846358][ T10] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 386.858689][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.861430][ T10] usb 7-1: Product: syz [ 386.862806][ T10] usb 7-1: Manufacturer: syz [ 386.865223][ T10] usb 7-1: SerialNumber: syz [ 386.872443][ T10] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 386.881213][ T10] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 386.888279][ T10] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 387.745799][ T40] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0009/input/input26 [ 387.841730][ T40] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0009/input/input27 [ 387.933769][ T40] kye 0003:0458:5011.0009: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 388.142374][T12724] tipc: Started in network mode [ 388.148025][T12724] tipc: Node identity , cluster identity 4711 [ 388.160375][T12724] tipc: Failed to obtain node identity [ 388.167503][T12724] tipc: Enabling of bearer rejected, failed to enable media [ 388.994431][T12702] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 389.185037][ T10] usb 9-1: USB disconnect, device number 25 [ 389.806474][T12761] FAULT_INJECTION: forcing a failure. [ 389.806474][T12761] name failslab, interval 1, probability 0, space 0, times 0 [ 389.816724][T12761] CPU: 0 UID: 0 PID: 12761 Comm: syz.3.1620 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.816745][T12761] Tainted: [L]=SOFTLOCKUP [ 389.816750][T12761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 389.816756][T12761] Call Trace: [ 389.816760][T12761] [ 389.816765][T12761] dump_stack_lvl+0x100/0x190 [ 389.816782][T12761] should_fail_ex.cold+0x5/0xa [ 389.816796][T12761] should_failslab+0xc2/0x120 [ 389.816827][T12761] kmem_cache_alloc_noprof+0x91/0x6a0 [ 389.816850][T12761] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 389.816866][T12761] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 389.816882][T12761] mmu_topup_memory_caches+0x25/0x170 [ 389.816899][T12761] kvm_mmu_load+0xe2/0x2570 [ 389.816914][T12761] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 389.816931][T12761] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 389.816950][T12761] ? __pfx_kvm_mmu_load+0x10/0x10 [ 389.816962][T12761] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 389.816974][T12761] ? kvm_check_and_inject_events+0x873/0x12a0 [ 389.816988][T12761] ? record_steal_time+0x3b0/0xbb0 [ 389.817007][T12761] vcpu_run+0x3ab0/0x5df0 [ 389.817021][T12761] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 389.817042][T12761] ? __pfx_vcpu_run+0x10/0x10 [ 389.817061][T12761] ? rcu_is_watching+0x13/0xc0 [ 389.817078][T12761] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 389.817092][T12761] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 389.817111][T12761] kvm_vcpu_ioctl+0x730/0x1700 [ 389.817123][T12761] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 389.817134][T12761] ? tomoyo_path_number_perm+0x188/0x580 [ 389.817150][T12761] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 389.817165][T12761] ? get_pid_task+0x106/0x250 [ 389.817183][T12761] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.817202][T12761] ? do_vfs_ioctl+0x226/0x13e0 [ 389.817214][T12761] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 389.817231][T12761] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 389.817242][T12761] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 389.817253][T12761] ? __fget_files+0x21f/0x3d0 [ 389.817269][T12761] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 389.817280][T12761] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 389.817293][T12761] __do_fast_syscall_32+0x13a/0x8b0 [ 389.817305][T12761] ? lockdep_hardirqs_on+0x7d/0x110 [ 389.817317][T12761] do_fast_syscall_32+0x32/0x70 [ 389.817329][T12761] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.817343][T12761] RIP: 0023:0xf7fc4fec [ 389.817359][T12761] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 389.817364][T12761] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 389.817376][T12761] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 389.817382][T12761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.817388][T12761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 389.817394][T12761] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 389.817400][T12761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.817418][T12761] [ 390.047561][ T5879] usb 7-1: USB disconnect, device number 21 [ 390.159966][ T5879] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 390.192489][ T5879] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 390.198886][T12773] tipc: Started in network mode [ 390.201505][ T5879] ti_usb_3410_5052 7-1:2.0: device disconnected [ 390.206230][T12773] tipc: Node identity , cluster identity 4711 [ 390.226275][T12773] tipc: Failed to obtain node identity [ 390.232522][T12773] tipc: Enabling of bearer rejected, failed to enable media [ 390.363434][ T64] Bluetooth: hci0: unexpected event for opcode 0x201c [ 390.371782][T12777] x_tables: duplicate underflow at hook 1 [ 390.883060][T12792] gadgetfs: bound to dummy_udc driver [ 391.126226][ T7685] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 391.138579][ C2] gadgetfs: connected [ 391.142563][ T7685] gadgetfs: disconnected [ 391.304452][ C2] gadgetfs: connected [ 391.310331][ T7685] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 391.331904][ T7685] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 391.348184][ T7685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.369688][ C2] gadgetfs: configuration #1 [ 392.466624][T12791] gadgetfs: suspended from state 3 [ 392.471898][T12791] gadgetfs: disconnected [ 392.474242][ T7685] usb 5-1: can't set config #1, error -71 [ 392.481622][ T7685] usb 5-1: USB disconnect, device number 8 [ 392.887891][T12848] tipc: Started in network mode [ 392.891600][T12848] tipc: Node identity , cluster identity 4711 [ 392.894557][T12848] tipc: Failed to obtain node identity [ 392.896726][T12848] tipc: Enabling of bearer rejected, failed to enable media [ 392.970070][T12853] tipc: Started in network mode [ 392.974244][T12853] tipc: Node identity , cluster identity 4711 [ 392.981720][T12853] tipc: Failed to obtain node identity [ 392.989207][T12853] tipc: Enabling of bearer rejected, failed to enable media [ 393.776608][T12881] overlay: Unknown parameter 'smackfstransmute' [ 394.662950][T12907] tipc: Started in network mode [ 394.664755][T12907] tipc: Node identity , cluster identity 4711 [ 394.666748][T12907] tipc: Failed to obtain node identity [ 394.668596][T12907] tipc: Enabling of bearer rejected, failed to enable media [ 396.084621][T12946] raw_sendmsg: syz.5.1661 forgot to set AF_INET. Fix it! [ 396.100999][T12946] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1661'. [ 396.112507][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1661'. [ 396.127357][T12946] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1661'. [ 396.201098][ T5090] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 396.285057][T12960] tipc: Started in network mode [ 396.291486][T12960] tipc: Node identity , cluster identity 4711 [ 396.296591][T12960] tipc: Failed to obtain node identity [ 396.301373][T12960] tipc: Enabling of bearer rejected, failed to enable media [ 397.288294][T12992] fuse: Unknown parameter 'fd;ðQ¦;fð“Óöqb' [ 397.321823][T12992] ptrace attach of ""[12995] was attempted by "/syz-executor exec"[12992] [ 398.077792][T13002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.259528][T13005] binder: 13001:13005 ioctl c040565e 80000180 returned -22 [ 398.340870][T13005] binder: 13001:13005 ioctl c0306201 800006c0 returned -14 [ 398.462250][T13002] bond1 (unregistering): Released all slaves [ 398.580813][T13008] tipc: Started in network mode [ 398.589488][T13008] tipc: Node identity , cluster identity 4711 [ 398.643424][T13008] tipc: Failed to obtain node identity [ 398.682875][T13008] tipc: Enabling of bearer rejected, failed to enable media [ 400.362640][T13040] pim6reg: entered allmulticast mode [ 400.371163][T13039] syzkaller0: entered allmulticast mode [ 400.453025][T13037] pim6reg: left allmulticast mode [ 400.484785][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 401.343291][T13058] overlay: Unknown parameter '/' [ 401.353432][T13058] netlink: zone id is out of range [ 401.360612][T13058] netlink: zone id is out of range [ 401.362406][T13058] netlink: zone id is out of range [ 401.388716][T13056] input: syz0 as /devices/virtual/input/input28 [ 401.760309][T13077] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1696'. [ 401.810335][T13079] ================================================================== [ 401.813503][T13079] BUG: KASAN: slab-use-after-free in netdev_nl_queue_fill_one+0xf97/0x11f0 [ 401.816819][T13079] Read of size 4 at addr ffff8880600b718c by task syz.3.1697/13079 [ 401.820235][T13079] [ 401.821803][T13079] CPU: 2 UID: 0 PID: 13079 Comm: syz.3.1697 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.821831][T13079] Tainted: [L]=SOFTLOCKUP [ 401.821839][T13079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.821851][T13079] Call Trace: [ 401.821859][T13079] [ 401.821867][T13079] dump_stack_lvl+0x100/0x190 [ 401.821893][T13079] print_report+0x13d/0x4b0 [ 401.821918][T13079] ? __virt_addr_valid+0x239/0x430 [ 401.821956][T13079] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 401.821980][T13079] kasan_report+0xdf/0x1c0 [ 401.822009][T13079] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 401.822035][T13079] netdev_nl_queue_fill_one+0xf97/0x11f0 [ 401.822059][T13079] ? __pfx_netdev_nl_queue_fill_one+0x10/0x10 [ 401.822086][T13079] netdev_nl_queue_dump_one+0x189/0x380 [ 401.822109][T13079] netdev_nl_queue_get_dumpit+0x16c/0x510 [ 401.822135][T13079] genl_dumpit+0x125/0x230 [ 401.822154][T13079] netlink_dump+0x532/0xd00 [ 401.822179][T13079] ? __pfx_netlink_dump+0x10/0x10 [ 401.822202][T13079] ? __kasan_kmalloc+0xaa/0xb0 [ 401.822228][T13079] ? __asan_memset+0x23/0x50 [ 401.822248][T13079] ? genl_start+0x67a/0x970 [ 401.822266][T13079] __netlink_dump_start+0x6d6/0x990 [ 401.822292][T13079] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 401.822311][T13079] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 401.822331][T13079] ? stack_depot_save_flags+0x27/0x9f0 [ 401.822375][T13079] ? __pfx_genl_get_cmd+0x10/0x10 [ 401.822392][T13079] ? __pfx_genl_start+0x10/0x10 [ 401.822410][T13079] ? __pfx_genl_dumpit+0x10/0x10 [ 401.822428][T13079] ? __pfx_genl_done+0x10/0x10 [ 401.822447][T13079] ? ____sys_sendmsg+0xa4d/0xbe0 [ 401.822472][T13079] ? ___sys_sendmsg+0x190/0x1e0 [ 401.822496][T13079] ? __radix_tree_lookup+0x217/0x2b0 [ 401.822528][T13079] genl_rcv_msg+0x471/0x800 [ 401.822549][T13079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.822568][T13079] ? __pfx_netdev_nl_queue_get_dumpit+0x10/0x10 [ 401.822595][T13079] ? __lock_acquire+0x4c5/0x1ec0 [ 401.822613][T13079] netlink_rcv_skb+0x159/0x420 [ 401.822624][T13079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.822635][T13079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.822647][T13079] ? netlink_deliver_tap+0x1ae/0xcc0 [ 401.822670][T13079] genl_rcv+0x28/0x40 [ 401.822686][T13079] netlink_unicast+0x585/0x850 [ 401.822703][T13079] ? __pfx_netlink_unicast+0x10/0x10 [ 401.822722][T13079] netlink_sendmsg+0x8b0/0xda0 [ 401.822739][T13079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.822757][T13079] ? apparmor_socket_sendmsg+0x15b/0x270 [ 401.822779][T13079] ____sys_sendmsg+0xa4d/0xbe0 [ 401.822806][T13079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.822823][T13079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.822853][T13079] ___sys_sendmsg+0x190/0x1e0 [ 401.822880][T13079] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.822907][T13079] ? futex_wait+0x11e/0x370 [ 401.822935][T13079] ? find_held_lock+0x2b/0x80 [ 401.822964][T13079] __sys_sendmsg+0x160/0x210 [ 401.822984][T13079] ? __pfx___sys_sendmsg+0x10/0x10 [ 401.823009][T13079] __do_fast_syscall_32+0x13a/0x8b0 [ 401.823029][T13079] do_fast_syscall_32+0x32/0x70 [ 401.823048][T13079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.823069][T13079] RIP: 0023:0xf7fc4fec [ 401.823116][T13079] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 401.823126][T13079] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 401.823146][T13079] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 401.823157][T13079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.823168][T13079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.823179][T13079] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 401.823190][T13079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.823206][T13079] [ 401.823212][T13079] [ 401.951604][T13079] Allocated by task 5727: [ 401.953263][T13079] kasan_save_stack+0x30/0x50 [ 401.955115][T13079] kasan_save_track+0x14/0x30 [ 401.956850][T13079] __kasan_kmalloc+0xaa/0xb0 [ 401.958454][T13079] __kvmalloc_node_noprof+0x351/0x970 [ 401.960478][T13079] xt_alloc_table_info+0x44/0xa0 [ 401.962053][T13079] compat_do_replace+0x19b/0x500 [ 401.963571][T13079] do_ip6t_set_ctl+0x2cb/0xbe0 [ 401.965060][T13079] nf_setsockopt+0x8d/0xf0 [ 401.966489][T13079] ipv6_setsockopt+0x135/0x170 [ 401.968343][T13079] tcp_setsockopt+0xa7/0x100 [ 401.970153][T13079] do_sock_setsockopt+0xf3/0x1d0 [ 401.972041][T13079] __sys_setsockopt+0x119/0x190 [ 401.973919][T13079] __ia32_compat_sys_socketcall+0x556/0x770 [ 401.976165][T13079] __do_fast_syscall_32+0x13a/0x8b0 [ 401.978169][T13079] do_fast_syscall_32+0x32/0x70 [ 401.980075][T13079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.982382][T13079] [ 401.983234][T13079] Freed by task 5727: [ 401.984778][T13079] kasan_save_stack+0x30/0x50 [ 401.986425][T13079] kasan_save_track+0x14/0x30 [ 401.987941][T13079] kasan_save_free_info+0x3b/0x70 [ 401.989515][T13079] __kasan_slab_free+0x5f/0x80 [ 401.991015][T13079] kfree+0x22b/0x6c0 [ 401.992235][T13079] translate_compat_table+0x1368/0x17e0 [ 401.993939][T13079] compat_do_replace+0x279/0x500 [ 401.995456][T13079] do_ip6t_set_ctl+0x2cb/0xbe0 [ 401.996959][T13079] nf_setsockopt+0x8d/0xf0 [ 401.998337][T13079] ipv6_setsockopt+0x135/0x170 [ 401.999838][T13079] tcp_setsockopt+0xa7/0x100 [ 402.001313][T13079] do_sock_setsockopt+0xf3/0x1d0 [ 402.002857][T13079] __sys_setsockopt+0x119/0x190 [ 402.004371][T13079] __ia32_compat_sys_socketcall+0x556/0x770 [ 402.006235][T13079] __do_fast_syscall_32+0x13a/0x8b0 [ 402.007857][T13079] do_fast_syscall_32+0x32/0x70 [ 402.009371][T13079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.011331][T13079] [ 402.012099][T13079] The buggy address belongs to the object at ffff8880600b7000 [ 402.012099][T13079] which belongs to the cache kmalloc-cg-1k of size 1024 [ 402.016428][T13079] The buggy address is located 396 bytes inside of [ 402.016428][T13079] freed 1024-byte region [ffff8880600b7000, ffff8880600b7400) [ 402.020619][T13079] [ 402.021391][T13079] The buggy address belongs to the physical page: [ 402.023371][T13079] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880600b1000 pfn:0x600b0 [ 402.026443][T13079] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 402.029084][T13079] memcg:ffff8880600b0411 [ 402.030429][T13079] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 402.033267][T13079] page_type: f5(slab) [ 402.034691][T13079] raw: 04fff00000000240 ffff88801c04c000 ffffea000139b410 ffffea0001b20610 [ 402.037281][T13079] raw: ffff8880600b1000 000008000010000e 00000000f5000000 ffff8880600b0411 [ 402.039927][T13079] head: 04fff00000000240 ffff88801c04c000 ffffea000139b410 ffffea0001b20610 [ 402.042562][T13079] head: ffff8880600b1000 000008000010000e 00000000f5000000 ffff8880600b0411 [ 402.045170][T13079] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 402.047847][T13079] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 402.050405][T13079] page dumped because: kasan: bad access detected [ 402.052356][T13079] page_owner tracks the page as allocated [ 402.054093][T13079] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5734, tgid 5734 (syz-executor), ts 52522052209, free_ts 52521347719 [ 402.060380][T13079] post_alloc_hook+0xfd/0x120 [ 402.061836][T13079] get_page_from_freelist+0xf46/0x3500 [ 402.063476][T13079] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 402.065301][T13079] new_slab+0xa2/0x660 [ 402.066596][T13079] refill_objects+0xe3/0x410 [ 402.068052][T13079] __pcs_replace_empty_main+0x372/0x680 [ 402.069761][T13079] __kvmalloc_node_noprof+0x791/0x970 [ 402.071453][T13079] xt_alloc_table_info+0x44/0xa0 [ 402.073011][T13079] compat_do_replace+0x19b/0x500 [ 402.074552][T13079] do_ipt_set_ctl+0x2cb/0xbc0 [ 402.076055][T13079] nf_setsockopt+0x8d/0xf0 [ 402.077403][T13079] ip_setsockopt+0xcb/0xf0 [ 402.078814][T13079] tcp_setsockopt+0xa7/0x100 [ 402.080285][T13079] do_sock_setsockopt+0xf3/0x1d0 [ 402.081901][T13079] __sys_setsockopt+0x119/0x190 [ 402.083393][T13079] __ia32_compat_sys_socketcall+0x556/0x770 [ 402.085183][T13079] page last free pid 5734 tgid 5734 stack trace: [ 402.087209][T13079] __free_frozen_pages+0x79f/0x1090 [ 402.089000][T13079] qlist_free_all+0x47/0xf0 [ 402.090535][T13079] kasan_quarantine_reduce+0x1a0/0x1f0 [ 402.092279][T13079] __kasan_slab_alloc+0x69/0x90 [ 402.093831][T13079] __kvmalloc_node_noprof+0x2ed/0x970 [ 402.095556][T13079] xt_alloc_table_info+0x44/0xa0 [ 402.097314][T13079] compat_do_replace+0x19b/0x500 [ 402.098952][T13079] do_ipt_set_ctl+0x2cb/0xbc0 [ 402.100471][T13079] nf_setsockopt+0x8d/0xf0 [ 402.101909][T13079] ip_setsockopt+0xcb/0xf0 [ 402.103343][T13079] tcp_setsockopt+0xa7/0x100 [ 402.104810][T13079] do_sock_setsockopt+0xf3/0x1d0 [ 402.106401][T13079] __sys_setsockopt+0x119/0x190 [ 402.107964][T13079] __ia32_compat_sys_socketcall+0x556/0x770 [ 402.109834][T13079] __do_fast_syscall_32+0x13a/0x8b0 [ 402.111475][T13079] do_fast_syscall_32+0x32/0x70 [ 402.113017][T13079] [ 402.113796][T13079] Memory state around the buggy address: [ 402.115568][T13079] ffff8880600b7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.118255][T13079] ffff8880600b7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.120754][T13079] >ffff8880600b7180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.123248][T13079] ^ [ 402.124602][T13079] ffff8880600b7200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.127121][T13079] ffff8880600b7280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.129601][T13079] ================================================================== [ 402.155555][T13079] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 402.157864][T13079] CPU: 2 UID: 0 PID: 13079 Comm: syz.3.1697 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.161059][T13079] Tainted: [L]=SOFTLOCKUP [ 402.162391][T13079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.165397][T13079] Call Trace: [ 402.166474][T13079] [ 402.167432][T13079] dump_stack_lvl+0x100/0x190 [ 402.168962][T13079] vpanic+0x553/0x970 [ 402.170210][T13079] ? __pfx_vpanic+0x10/0x10 [ 402.171566][T13079] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 402.173175][T13079] panic+0xd1/0xe0 [ 402.174319][T13079] ? __pfx_panic+0x10/0x10 [ 402.175647][T13079] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 402.177416][T13079] ? preempt_schedule_common+0x3c/0xb0 [ 402.179004][T13079] check_panic_on_warn.cold+0x19/0x34 [ 402.180623][T13079] end_report.part.0+0x3a/0x90 [ 402.182047][T13079] kasan_report.cold+0xe/0x18 [ 402.183478][T13079] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 402.185218][T13079] netdev_nl_queue_fill_one+0xf97/0x11f0 [ 402.186915][T13079] ? __pfx_netdev_nl_queue_fill_one+0x10/0x10 [ 402.188804][T13079] netdev_nl_queue_dump_one+0x189/0x380 [ 402.190540][T13079] netdev_nl_queue_get_dumpit+0x16c/0x510 [ 402.192300][T13079] genl_dumpit+0x125/0x230 [ 402.193674][T13079] netlink_dump+0x532/0xd00 [ 402.195080][T13079] ? __pfx_netlink_dump+0x10/0x10 [ 402.196671][T13079] ? __kasan_kmalloc+0xaa/0xb0 [ 402.198190][T13079] ? __asan_memset+0x23/0x50 [ 402.199657][T13079] ? genl_start+0x67a/0x970 [ 402.201134][T13079] __netlink_dump_start+0x6d6/0x990 [ 402.203133][T13079] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 402.204924][T13079] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 402.206910][T13079] ? stack_depot_save_flags+0x27/0x9f0 [ 402.208596][T13079] ? __pfx_genl_get_cmd+0x10/0x10 [ 402.210154][T13079] ? __pfx_genl_start+0x10/0x10 [ 402.211769][T13079] ? __pfx_genl_dumpit+0x10/0x10 [ 402.213571][T13079] ? __pfx_genl_done+0x10/0x10 [ 402.215345][T13079] ? ____sys_sendmsg+0xa4d/0xbe0 [ 402.217106][T13079] ? ___sys_sendmsg+0x190/0x1e0 [ 402.218637][T13079] ? __radix_tree_lookup+0x217/0x2b0 [ 402.220319][T13079] genl_rcv_msg+0x471/0x800 [ 402.221758][T13079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.223353][T13079] ? __pfx_netdev_nl_queue_get_dumpit+0x10/0x10 [ 402.225230][T13079] ? __lock_acquire+0x4c5/0x1ec0 [ 402.226799][T13079] netlink_rcv_skb+0x159/0x420 [ 402.228308][T13079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.229890][T13079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.231551][T13079] ? netlink_deliver_tap+0x1ae/0xcc0 [ 402.233210][T13079] genl_rcv+0x28/0x40 [ 402.234474][T13079] netlink_unicast+0x585/0x850 [ 402.236030][T13079] ? __pfx_netlink_unicast+0x10/0x10 [ 402.237768][T13079] netlink_sendmsg+0x8b0/0xda0 [ 402.239353][T13079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.241049][T13079] ? apparmor_socket_sendmsg+0x15b/0x270 [ 402.242800][T13079] ____sys_sendmsg+0xa4d/0xbe0 [ 402.244343][T13079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.245992][T13079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.247613][T13079] ___sys_sendmsg+0x190/0x1e0 [ 402.248996][T13079] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.250584][T13079] ? futex_wait+0x11e/0x370 [ 402.251947][T13079] ? find_held_lock+0x2b/0x80 [ 402.253381][T13079] __sys_sendmsg+0x160/0x210 [ 402.254748][T13079] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.256372][T13079] __do_fast_syscall_32+0x13a/0x8b0 [ 402.257931][T13079] do_fast_syscall_32+0x32/0x70 [ 402.259399][T13079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.261265][T13079] RIP: 0023:0xf7fc4fec [ 402.262503][T13079] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 402.264488][T13079] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 402.266995][T13079] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 402.269341][T13079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.271698][T13079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.274209][T13079] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 402.276601][T13079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.278978][T13079] [ 402.280566][T13079] Kernel Offset: disabled [ 402.281894][T13079] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:44:03 Registers: info registers vcpu 0 CPU#0 RAX=8000000000000000 RBX=000000000000000c RCX=ffffffff8958f7f9 RDX=000000000000000c RSI=00000000000000ff RDI=0000000000000001 RBP=1ffff92000c80f08 RSP=ffffc90006407758 R8 =0000000000000001 R9 =0000000000000082 R10=000000000000000c R11=0000000000000000 R12=ffff88804b511400 R13=ffff8880133ad000 R14=0000000000000000 R15=ffffc90006407880 RIP=ffffffff8209f4f8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880969db000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080002000 CR3=000000006cae8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801c752580 RSI=ffffffff81b53eee RDI=ffff88801c752580 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b53eef RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096adb000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5495da4 CR3=000000000eb94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a301e5 RDI=ffffffff9bbfc920 RBP=ffffffff9bbfc8e0 RSP=ffffc90006c6ec40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b8fc1f2 R15=ffffffff85a30180 RIP=ffffffff85a3020f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdb000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000000 CR3=0000000041f08000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801cb02580 RSI=ffffffff81b53eee RDI=ffff88801cb02580 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b53eef RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdb000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5474da4 CR3=000000000eb94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000