last executing test programs: 1m7.146696242s ago: executing program 1 (id=18): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x80003, 0x200000004, 0x40000000004, 0x20000a0e1, 0x100000000, 0x0, 0x200000003, 0x9}, {0x8}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x6c}, 0x2, @in6=@loopback, 0x3502, 0x3, 0x8, 0x2, 0x9075, 0xef, 0xc5e}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9f5bfe93040000000018000000000400000c006512bfd3000006000000040000000000000c01000000005f2e5f2e00"], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000e40)='ns\x00') getdents64(r2, &(0x7f0000000e80)=""/4096, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000008001900e000000106001a004e23000008001800ac1414bb06001d000600"/54], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002440)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r3 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000b80)={@private2, 0x0}, &(0x7f0000000bc0)=0x14) sendmmsg$sock(r2, &(0x7f00000023c0)=[{{&(0x7f0000000000)=@ethernet={0x1, @random="19fd93f2492c"}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000400)="ba18c6bf47dd7237468064f3a4b15a9dd6e25105a628146deff9ae55bb08390c815f8e87c01286c6ad99c81c47ca677f0eb00b5748a723345dcc4abff4bc0be1481211b484a0fc57c8e34a4e4b6ec1f33bd735bab31bca5d30b52b016a66c849849e55fc147a8e4ddfbebb23a913dc36aaf66d5eccad52bf6bd4480a5b21212d479ff61a4b2286a77e859eaf31d7cd27e877ab8086e6dfd5", 0x98}, {&(0x7f00000004c0)="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", 0xfb}, {&(0x7f00000006c0)="37cb282c8cefb623632102fa5222d8509b884d26e89f72961c5aee3f39dbd29a32f0647cbfa3d8b8339858c8127d2e942bb6a1c583c7bddb369e5c24e76ceafcb1e238386b2ee0afc9b2da9a1356eb35d29ca3beba4f50b8539293a0269bc096d01008ac3eb14ea4c0c1a14a3260b3d951964f44b9b0039be9a182b5853967a596a45d98fac521238506b158b1dca025e681042adea78f0232ceec90ab5728a65def17ac2e", 0xa5}], 0x3}}, {{&(0x7f00000007c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(morus640)\x00'}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000840)="9b2bd02728ff3c59a21034898a2dc848ffee5bfca56067286f55fd1dc33fdadacb6d55b20df65d7be5e439b443ae1bb1f6e0ced657b41869ba0e40e046a6a561d4ba4e09d703f2798600fd36ca4f1b4c9c624a0c64b8402b18d4ec4dc477ef861796ed7f2a8e581dd51ec5af528d7b9cf3b3ee312410eb196f68cd86ba905556997858f64ecf269264061bd2e902dd3612c2e6b10f5cd150ea7fab8fea6f9a611310059317575b4a38c17ae906dc316c4a9d2a63965239adc5b1", 0xba}, {&(0x7f0000000900)='\\', 0x1}, {&(0x7f0000000940)="6f4d13cdbfcf7e9eb9028d6439e02e2479bdeba6b83f04fbd72522d70f4d71f8680389f471b49acdbe64b10b97a24ee0e56273af171e92fcd31f185ab159c0836993360893dbad0dff67208d8a5a3caeb7f4ee6e990b21fcc597", 0x5a}, {&(0x7f00000009c0)="b83d6ae6cc914cd52b0db341dcc7393b485d0b5f3c2cba32b68e66de32ea50efdd43ec9c1953902253c210ec5791058973b4064f099e38e800eab17b98e1d148acd836ff4d92accee0b7b5fd51acc3ab9eac812ccd028ba1cd14421b727a1daec85332bd8843bb060be6d38a00da63ff1d453d2341abdd710d7e6c66739ea376aa83763cde8ce085f00541e07a3f34213bc28da0ffbcb67a795e458ae35239a1657e92323d9df9b2ac27edfe8d2997344c6381191325cb00582847b136302290ef81f3a8407ac6dd569c28e2430f1f89f186aa6497e439be238f34e1144fe6de34460c9a34b22b03", 0xe8}, {&(0x7f0000000ac0)="226edfae2bc1626dc11be1dbc9547df740601bf9de21aa806768f889573a8ed681fefff5d48c16d565acedb5d1dcdd66641e", 0x32}, {&(0x7f0000000b00)="bc4c87ea07cb2fec01a21e12355a91addff4f01aa794a87c30a02938d6a741", 0x1f}], 0x6}}, {{&(0x7f0000000c00)=@can={0x1d, r4}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000c80)="dfdaf9e81db3f87ccfb6283860bf330094dff8d470c5f4136a47800860f1ff8b2c19aecfea937e6a9c3dedbec247e6c148434420b008da2e2d3fb724a752597b1f2a4b0f974e7c0a3a35e0b53e5831816462aee5cb1c90bb8548baec8be6dbd91061f4f193bc2e62832032ffc70244d9594fd7982d411bd4712e7fb9ea0596aff7ae3c94095c50aeca1b2b174a7fe437fdcb0465b06f64891f703bad301bd2bad5e9a0aa47f337f9cdc454d90c45233d520eb0c95c3566fba4d60e4246847ed9efa05e696ba99bca1629148f6e9c32ea5db6e34d7efd", 0xd6}, {&(0x7f0000000600)="8f0bea6e625e8351af2784293da0915864319cf8f279738c66bf7cd9508821c8fb6690c6d4c4e5cb9e30d7639a71d073569992f975b001a995", 0x39}, {&(0x7f0000001e80)="e97a535034fc91ca5603990daf7784912b6620a5067c4c5b4d5425024c9681b24ca570d0f3bd664008296402afba9b0f174c6e859a96f9463354f51224d866062cdaf1ea56d0297f267dabcc1923d96aef8457e3a9087016bac51f69b9cb9ea69195e847d832c8091d84edd30270ff23a1002696dd823d3e23653ad5c79e6f219613a650ba7c78a5966cad28b5f24ee7", 0x90}, {&(0x7f0000001f40)="bc9096", 0x3}, {&(0x7f0000001f80)="d5f77db18d9e6ef1b3b6a58811b135e5dfa0eaf8d28ea46e2af054445bffee64b8", 0x21}, {&(0x7f0000001fc0)="668418a90ac360", 0x7}], 0x6, &(0x7f0000002040)=[@txtime={{0x14, 0x1, 0x3d, 0x800}}, @timestamping={{0x10, 0x1, 0x25, 0x7f}}, @mark={{0x10, 0x1, 0x24, 0xf8}}], 0x34}}, {{&(0x7f0000002080)=@generic={0x3, "db2479652c797b01207d00ac5142524679592fcc4e3d05376bc067922a1797ddac613e80d919a4fc870eae6568730d81847bd12232860e529596c786f7cd85fa6c6603e1fca132edbfb989f3e62c14039c3db73ac7d84452b581143a5a0717455d8b432647090974e5192141c68f70c0eaff5e007793eacc1c563aa6ad90"}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002100)="9abef4da7fc0b111d815f1a8ca3153353633bdbd95ee6ac0dfeee5592468ff8767aa5a85d0789d4ed6cbcaf80dd6f4c5c1b7bdc0036f582169e1b8fbe9c75e158483dc49ce1d59f3396da3306eed8b4547d4917db501f1278e5def1b469fd948b48fb2194982588ad8897d4b055f9fe0c4f9bd68de484e55cb441552c7b9b23432a1ee6afc633b3f555987ebe81f95f96305d6c16f381a4bc5002b4f9869b6ac3d7d18993b9d66653da06d", 0xab}, {&(0x7f00000021c0)="8650dfdf43854e985225d879f7e1a9b36ed9880580050cc8d3c25792e23ce759f0b7b20980ca708d5011ed25832507c971019c06716d83ba48b6574522de13d8f0b08bee662ab304cf937492fb8b018a4003f70d260a6e5d47bc5a4b", 0x5c}, {&(0x7f0000002240)="c389c5d09c0a8a5b310d5681a909ae0f0b3a7d9a39e27759a406b62e65887b526b9c537d79cf32ecd6a5783fc0219a218cfc72708dd0e09a6e5fdd794d8ac16cff822435ed3da8e774aeeedc8145d5f8780a10321ad6017dd9a3f14e243a725985c33f82895750896a196c302844fac3abf60c8eecafb0b6c57c4f5888d4ab2f79db872cb0537b086b55eff6fae1999d", 0x90}, {&(0x7f0000002300)="994dfea95013a6443b1a45864f87ce6fc629847f1d544770289ea1364d057244793e613c25d9486b22e0c2cd5ce01b0b61429280b72cadf09b125f30170bd355e32c8582ebed8efd622f78c99e60f83d50d90ca8d94421dae06fdd008b7517708aa49362b2c1b335fce89f7c0f7d5c63367e1c79a0", 0x75}], 0x4}}], 0x4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) syz_io_uring_setup(0x42c3, &(0x7f0000000400)={0x0, 0x595f, 0xfffb, 0x0, 0x40051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) ioctl$FE_GET_EVENT(r6, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x1e, 0xa}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000e0e80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000e1e80)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x8, "b66b0e9f1dd0e6"}) 1m6.847636935s ago: executing program 1 (id=19): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) connect(0xffffffffffffffff, &(0x7f00000001c0)=@caif, 0x80) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3dd7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044881}, 0x4000000) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x38, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="3170d5cb1bc451e04e70f5549e82ac73"}]}]}, 0x38}], 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xb8c) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x10000}}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000240)=0x0) wait4(r5, &(0x7f0000000280), 0x80000000, &(0x7f00000002c0)) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080)={0x4, 0x10ffff, 0xffffffff, 0x2, 0xb3}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x2284, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) 1m5.517098662s ago: executing program 1 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000040)={0x6666666666669a5}) socket$nl_generic(0x10, 0x3, 0x10) 1m5.44751152s ago: executing program 1 (id=24): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000001000000", @ANYRES32, @ANYBLOB="00000000000001000000000000f0ffffffffffee23f9aab7dcff"]) get_mempolicy(0x0, 0x0, 0xb70, &(0x7f0000ffb000/0x3000)=nil, 0x3) r3 = fsmount(r1, 0x0, 0x2) fchdir(r3) truncate(&(0x7f0000000040)='./file1\x00', 0x41bdc) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x10d) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 1m5.386438582s ago: executing program 1 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) flock(0xffffffffffffffff, 0x2) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000001c40)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, r1, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001c00)=@new_dev={0x3, 0x9ed, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x101}}}, &(0x7f0000001cc0)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0x1e8, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, [0x47e128f2bce82ddb, 0xff], [0xff, 0xffffff00, 0xff, 0xffffff00], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x5, 0x1, 0x51}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x3, 0x800}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x4, 0x0, [0x4004, 0x5, 0x0, 0x5, 0x7, 0x7, 0x101, 0x3, 0x7ff, 0x50de, 0x4, 0x5, 0x1000, 0x4, 0xffff], 0xd}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff], [0x0, 0xff, 0x0, 0xffffff00], 'veth1_virt_wifi\x00', 'wlan1\x00', {}, {}, 0xae, 0xb, 0x6, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@ipv6header={{0x28}, {0x25, 0x80}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2001, 0x5, 0x1}, {0x4, 0x0, 0x6}, 0x6, 0x817e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) write(r0, &(0x7f0000000740)='0', 0x1) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_clone(0x40000000, &(0x7f0000000400)="2db9ab96834df1dd9785e3649f9845ac986617b3af30eba41f090513c597f4e2e48adf57511f09a11166cb2c8db2ed269fc01e5a851443f61973877a29ba0d69c9f3f0ae225c3a06033c07e9b3c630584317d3dda614c0c8a8c9dee268d78e2bd91a62827249ce4b35c1b590a8be77e97724b944fdc9aa2fc095ac4c2cb8ec69bb756cef97", 0x85, &(0x7f00000004c0), &(0x7f0000000540), &(0x7f0000000600)="753daf4fb00c5bac8f19e8b4fcb531afa8349d4da07a165075d2fd09b2aafbb4175e59b0678a6fc7902c0daeb35cad02fbfa2a8fd62c1edb280cb33133153993b4417f338830d1b933a60228936549fd1ba9f7a276edf28b678695cce622d2d6bb3313659ec499984b20a4b5a38e51203f739b8cbb3944a7193f8ba35b3f4581755621cc156d6711b0ada2b0201c05614b814757") r5 = syz_open_procfs(r4, &(0x7f00000006c0)='task\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0x2, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r5, r6, &(0x7f0000000800)={0x0, 0xab06, 0x20, 0x2, 0x23c, 0x0, r5}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb37a, 0xc01a8, 0x0, 0x19c, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d9, 0x400, 0x1, 0xf3, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2017, 0x100, 0x3, 0x213}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c70, 0x10040, 0x1, 0x3, 0x0, r0}}], 0x4, &(0x7f0000001b00)={0x2e, 0x40, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x19a}, 0x0, r9, '\x00', {0x9, 0xc87, 0x0, &(0x7f0000000b00)=@buf_1k="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"}}, &(0x7f0000001b80)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x0) mq_open(&(0x7f0000000780)='veth1_vlan\x00', 0x40, 0x40, &(0x7f00000007c0)={0x4, 0x7, 0x4, 0xdbb}) r10 = socket$kcm(0x10, 0x2, 0x0) creat(&(0x7f0000001bc0)='./sys/bus/netdevsim/del_device\x00', 0x8) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r11, 0x0, 0x0) 1m4.130293353s ago: executing program 1 (id=31): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) connect(0xffffffffffffffff, &(0x7f00000001c0)=@caif, 0x80) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3dd7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044881}, 0x4000000) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x38, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="3170d5cb1bc451e04e70f5549e82ac73"}]}]}, 0x38}], 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xb8c) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x10000}}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000240)=0x0) wait4(r5, &(0x7f0000000280), 0x80000000, &(0x7f00000002c0)) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080)={0x4, 0x10ffff, 0xffffffff, 0x2, 0xb3}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x2284, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) 49.052067746s ago: executing program 32 (id=31): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) connect(0xffffffffffffffff, &(0x7f00000001c0)=@caif, 0x80) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3dd7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044881}, 0x4000000) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x38, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="3170d5cb1bc451e04e70f5549e82ac73"}]}]}, 0x38}], 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000645940b88006500000e329078ac14141fffffffff000004d600001b68010000090000000200000000000000060000007f00005a74658e4fef0b2a5c0100000000000000000000000000000000fc000000000000000000000000000000503318b6676cf210e5d66a9fc2ac0e2c47b797950a2aac4f4ad5a4f0514f24af3084de510cf07c7102d72fdc028b989c9b35a444abd016f08989db0b2f046470f8e9d8c69e7448585125c98deff00dd22a9f49256776b90410bdf4268f5ac7e1a0d354893299ceb773a46c36b0d0fd177d5062badfd6c529004caf9f276ab9bc6765ac8c25e5647df242e59d26581c9dde946c106f114cf054b49bc1940c980c58ed70eb46c0c7be99d1836f01df1b1aaf57bb5fe7e11481f29e0972deb38253891e088d272d0e4790ea2c3f3125a40f6918ce23f83211a0f0e090b0bd4bbae2f18572c7a21183c4e4ee6ff752f62b2519ea7da731db955f90d51354a4f75a5b4d59c667dd25f4605adc98e50a60dcb8ddb3c585f9ea1cdae22345ae81c0cbdff60f3ef0633c25415b783372aad455daf65ff08d18724b8416dcbbec0199af6134810beb1aee59c452bd3327f38e0a8b447350998f6e1b4edf70fd17e10749d6b29857fe755f2052b937e58f11977c343e90bc2249012af8d299b2cc32dbb0d811a4580c265c3592bcb3066dba4f5551f26a1288e173432baeb58193fbeb5f05de4656937bf2cfa2d2ee6f6d4160f822fca960a3806e540f8b01c277ae1d1b8e62cacbaeb8e01e97c404679a979195e3ba9a47dee10a874f28f35d16a4f3e16f74f57fd6420be44d3facd9165841ee78afce877c11aa840a3fc7dc326368c28e909b2fd0108f257db90dc77d89de865e33a29b9ba93ca820ca46205a9c97f32d7e5ccdbd8508c400c81ba907348180f6f3845e2eb2f6f66fc6204881c783376f6c8104e6681d7be77608e5c8e231a06b68348febce8f88459bf502b5bed879da4e6cd28fa696e8f92215f9f1a7a111c4609e235902f0df8ea2ec509cf77d898c1915fa5ce4f60f56408a3105b3bc130022e648495e7580e5c2409257cd2fde2e5dc28102116a4e4f5bb21af28be5c426a3538faee5a0bb5d92c3fc4197e0aa1d89726264b43d627a9fe5c8a4178271a5c0fc9883225d4d554795027e17e8f450c3905f70df2dba267792ac1a7e09a06e955a5afcc884f1817498c977f5ecaefee7c11a77d1c545459ecc60e88a50d9aed45162ed69116e4097696482dd71bf9be02540a50e87f02a74546429e7c4c501750e47fafcb62e68103233782a2cb4cbb1d575e4a0799808f38b0536f1bed52d9b919bef630f4f577cd65d89c03c8dedc42e9c6c10c3f0e32233db0c169a90578e14f2cc79c371cb1d68c37ab1738107d39e8f879527323a07d65efb714d587fec0aa212cf307a2633fb7633e086bebc812ed26337b73ad2a2f66886e6d7ba23a1ae5c10712db92dc058cafcf9d5bb77bffb51040e05f2749577530dd81415e8ad4694ac66de36351351b1fa80c85a82491908bfdf58ef0a084d02bdce6d39e6bbd51941e3235868dcf826a705dd0f7eb5eceed5ef9727c370e3050ad8ee0eaaa848649be625d5d04661440f06a6df3b79a0001bce88a83245fe03fc1372557935280421b095d7181ed26a081dc93339f7f4e48905e1046d15ea498bba19a4639a3852878e2484d8d0d0be689eb44c66c8ca61ab7f888c09644353e667469bc09060ca46a9b9e4ba29438e77a409c70eb35cd177d43dc439e6c76ff7fb316a748c31cc417e8c97f85b4f58267fa8bcc401f1f00a304b17f12f18c4586581f127f11119a0f3c0fdd5c8a5ac275e60b1098f743d02a75a26dc43b949719e0a991b15e35553f5ee939561e5144b8a62a12ffda8a279a2763576bf4598895808c87d6892626635603eb24b9ba5cfecad9c97a93cd82bab3273b31bf6eab18dca04b3d1449bd376aaf4b9866c259deb820c971d0bac18d9499f75b60e055c91774ba038122322781cdef0c7477d1be408c3180a9598e44f6abc4eabcaece912bd37c99452f1ad0ef6637905de613e7768188c25b5b0234dd46a22a430b949b9776220b82bb8cbbceec92373c9c5315826e17be6d005d8cd99e3580e8e6d763b690b3d1dfa56ce2e03a5d46b1a409a24b0fd1b4a01166cbb17948b83608649e455d558569ce1541a80a293c78da18495f26eb6568d7d2a63e3a42009a3b2c2c1efb7401d8240b6c5182544440734fbe51f126cb9a56bea7b27299a6cc0e18698e2e18d39a0ba72a91d9c68723678790f17c44aac3af59a1e7033e0a8b3218ca6a7d13d46054c49586560330ce5f3e4874841c3af2348a9d9691f8931da79feb1006abadeb2b712f70f7eb3c667098624ebf995b940d1037a6826e73eca044c891eee7eee23d67c08a7d39846d172f1c6223cedb58228e04435bad45c0ae9392d8613c0d48950964823a5b084e83fbfef98b3dbc0b846875465210e2276c5d9a4ada017a4ebf2b56da5b1022a79968a3f6fc2033102845cb03270babeb4a6fbb3c81497549c89a4913fef645b41c925fd31bb9e23b74860dca68a07d71b7309cb31b2ff1720d327e3479dcd63971b56cc89fe6b9ceff915f489520c0bb3ff302d4f939e9e86e6e977121f84eac4e6602e54a7e37f29abebbdc10ecc81368fddfa013fb55bc5dae85b1c45fb8655db80ec58b060b28308f4a37f41a3ed555791ee206457a604763e976cff816f4625046052306862802b59882c863df85ff1628eec6962271ca70763b91b7182e499f1f925b697bac64e81ae7b5bee8f3183ffbccad50d3150559f8b39ef414082a8d5bb391d30cb80a229dfe8985bbf8a44d1373b39ebede4dbbfa33256e9569f92aae167c6aaac3cd0412029f35dcc1662a9477739375523b0935314ab76991ff31d63cb54394c05bfd679fb629394158a839c605274c900000000800000019d4ccc30adad99cf1cf8a1c0c79fac5bd10e56bfd7c71c65f3bd2718995ebe274c4d23e02b6bdda0b4f3a2000b9da3e5700ecbb504adfd7f607dc56b5f55d55923bb24cf69b89643d9f03ecbff3c4f9f38179c6fa499cde3f33ace0cc9c385aa21513cb0018d1efc11eff165c0076c4150ccbde742e069081df2d5762595f87470d800795336159d1cb7c677979ac425a3714098ca62fc9c0710a7e70eae67d382150a48fd8e84307afa2ef0a9c3201bba8059d626f3fbe2839399395d9b5ec3c91068bc31d0f22cbfe75628c91a95b35beb1bc9cfe5b4cd82b8d8e9f3c13a2e3f0829cb8364eeb97e03f4c80ee80881825921a3778c28c39d9b08fa1face67cd4d47a1c503b122c1063d86a70b5ec739676f079d0c45184c1d2654672c9ca26f25b4dc662daf81fea506e5a89541c73cd4701ebf4c2bf7a2a5984e2ef6ff9e5af950cfc71a2d0b5c7c15a6cf6672cf0cd2c86568268cfb61700d48569cda0e7ba8ee3266e0f36bcdc082e585ed6cf39a9527f8b439f2ba4e3fb66048545f13128b0fb128f256092b308b09785f1162f034ed302b90891db780512e3bd92201900245e99482b1580a4fbb42628b29bbd2a13042aac553488a7b8929b082c336640bfe1ac068e557c0edc1bc5c09b93bdb42b9e552693f80fd4c64b0f433b9c794d4ce5407f67a07b1c04675345e1516cb13ec4f4a091963f0f1d8f2eb74f288b2958145ac1a758a965c77bf0927a6c70c0a50cb6553b29f707d0060ac1590c8b054057573f7b708d5403f38f3acf96e0899ba3c50099301ccf7da38206ffee3c66ebabcd402e0fc43a01d2804583040e7032326c4ee56cac38cd100136f337ca3c995d34031b38ecafb9c09b25162971f5114dbbed8a75297a0421c8b61dfd1b87cc32aaf62140e09785fb71a2292b623ff366ffbf8ca5c010787410ec5a4a39ea281e3cba4f4c6bcbb6d1121f0d3258309d940233160e08bb72087eeaae5cbd0f66c306b8ca514678991e52a3746d8332fda7248c6f96736fe353405bb9100496b5a5f18b3b3115c69b3ee2a9076040ea8de4b0a37b04a88cc3eb7601acb5d382bc87c28225c210393e2639f2d86ae30b822e3b4ebd8adb3cfe01d98cf13e358029623d874868e8df5df8d024560c67772109273df448f2462cece65074fed5e9b366272aef53af1fc446b26a0e807095878e225969f1ad6000f2434bc9978f753dce3101f58008f90e578987d85dba6fc3fb7a3d493ef563513a73f457424533ec09a3a29d977c72a49187ed5264ca7eb50d73c41120cca1b903f5395f60001ebe3794509b28af0b1c1995dc60e324a60dcac85b5ed456bb2b989e19e1f0c33c7f7f4e"], 0xb8c) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x10000}}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000240)=0x0) wait4(r5, &(0x7f0000000280), 0x80000000, &(0x7f00000002c0)) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080)={0x4, 0x10ffff, 0xffffffff, 0x2, 0xb3}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x2284, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) 3.446101568s ago: executing program 3 (id=437): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40605414, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.445697032s ago: executing program 3 (id=438): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x40000, 0x25000, 0xf, 0x0, 0x5}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x1e, 0x4, 0x3cc, 0x1e0, 0x2ec, 0x1e0, 0x2ec, 0x2ec, 0x2ec, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x18}, @empty, 0xffffff00, 0xff000000, 0x6, 0x0, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x3, 0x2, 0x400, 0x7, 0x5, 0x6, 'dummy0\x00', 'rose0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "717cce7f5d7a0900000000d126aeeb61ad00"}}, {{@arp={@broadcast, @local, 0xff000000, 0xffffff00, 0xd, 0x4, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, {[0xff, 0xff, 0x0, 0xff]}}, 0x5, 0x8, 0x6, 0x0, 0xe, 0x5, 'veth0\x00', 'pim6reg0\x00', {0xff}, {}, 0x0, 0x2}, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x7fff}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @remote, @remote, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x418) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x5b07, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x7, @pix_mp={0x9, 0x2, 0x59455247, 0x3, 0x5, [{0x9, 0xff}, {0x1ff, 0x10b850}, {0x7f, 0xb11}, {0x1, 0x987d}, {0x6, 0xd3b}, {0xd26, 0x1ef}, {0x2, 0x1}, {0x2, 0x7}], 0x4, 0x20, 0x0, 0x2, 0x7}}) 2.946275739s ago: executing program 4 (id=443): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmsg$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ec0)="0ca5", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000cc0)="08e2433a9653677aded8e0353afa62705f1d9c8608da940ac4b1e1d8819dea231c5e837ce53acae15ec65f388004d98897665d04f0cc7db9f3e6cb41a2627fd2cd68389558df0e041acc86f111f15cd393bbf44a06e043c81a7515888332d4cfeae7dbd0090381eae6f4b4a057aca32bd9889991e094964fe83e929252993c003888f1a8b6086bc30096ac5fa153464cff0ee8c02fd907651a885b817a75d885a3280a1ad9d247cc5ab9aec38abdef178aed9ff19eac92c9dc7618d3f517220463885bbba9bc2c314812902e2e7448e694c679bf2c95cd1a144116", 0xdb}], 0x1}}], 0x3, 0x4000001) 2.877217799s ago: executing program 4 (id=445): ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x3e4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0xa4, 0xd8, 0x48, {}, [@common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x440) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) close(0xffffffffffffffff) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 2.026719085s ago: executing program 3 (id=451): openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') symlinkat(0x0, 0xffffffffffffffff, 0x0) accept4(r4, 0x0, 0x0, 0x80000) r5 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r7 = dup(r5) lsm_set_self_attr(0x65, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="74726120a03d66642c7266646e6f3d85b80df2f61cdf06c0e9b354036d7c82524646ada7006501a2a25200", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) 1.777581222s ago: executing program 4 (id=452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x4000) 1.608755357s ago: executing program 4 (id=453): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0xf5}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x46) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0xffff, 0x5, 0x4, 0x0, 0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x1040) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x0, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x7], [0x108e, 0x1, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000020, 0x0, 0x8001}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.477257408s ago: executing program 0 (id=455): add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000400)={0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x200444c1}, 0x200000c0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unshare(0x8000000) openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x10002, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 1.442788213s ago: executing program 0 (id=456): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x2, 0x5, 0x2, 0x1, 0x10, 0x0, 0x5, 0x9], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x5, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x4, 0x0, 0x2, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x40000) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000440)={[0x1000000000, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0xa, 0x2, 0xffffffffffffffff], 0x41000, 0x200}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.387060365s ago: executing program 0 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xb, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000040)={0x6666666666669a5}) socket$nl_generic(0x10, 0x3, 0x10) 1.386583484s ago: executing program 0 (id=458): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f84, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xb, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4a4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x0) close(0xffffffffffffffff) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 1.111453953s ago: executing program 3 (id=459): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@deltclass={0x24, 0x29, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0xe, 0x7}, {0xa, 0x10}}}, 0x24}}, 0x200448c5) close(r0) 437.449748ms ago: executing program 2 (id=464): add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000400)={0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x200444c1}, 0x200000c0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unshare(0x8000000) openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x10002, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 429.380183ms ago: executing program 0 (id=465): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x2, 0x5, 0x2, 0x1, 0x10, 0x0, 0x5, 0x9], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x5, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x4, 0x0, 0x2, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x40000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x1000000000, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0xa, 0x2, 0xffffffffffffffff], 0x41000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 266.660007ms ago: executing program 2 (id=466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xb, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000040)={0x6666666666669a5}) socket$nl_generic(0x10, 0x3, 0x10) 266.110148ms ago: executing program 0 (id=467): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYRESHEX], 0x20) sendto$inet6(r0, &(0x7f00000009c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000230038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351306ef47c84d0c9fbf4b2e9985a2681544fa304b72d76094ec1904499d7d8b6f537698f221a9aa55d7ff0e29633b51bf675344dd20858f4191059cd1113a4b519e124e90512fc5981fa39793947ad6d21e163a12346cf498d4a441e63e519fcd56316b1a917a8dc3d83f7f3b76397aa54c8bb0b8c5dc3adf2bd7648cf7e25ae3b582fa7327516232d499b3e0d32143cb1d707e0", 0xd4, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x101c02, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = getpid() syz_pidfd_open(r7, 0x0) recvmmsg(r5, &(0x7f0000003840)=[{{&(0x7f0000000bc0)=@phonet, 0x80, &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=""/205, 0xcd}, 0xdce3}, {{&(0x7f0000001f40)=@tipc, 0x80, &(0x7f0000002300)=[{&(0x7f0000001fc0)=""/47, 0x2f}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/253, 0xfd}, {&(0x7f0000002200)=""/205, 0xcd}], 0x4, &(0x7f0000002340)=""/227, 0xe3}, 0x4}, {{&(0x7f0000002440)=@nl, 0x80, &(0x7f0000003740)=[{&(0x7f0000000c40)=""/165, 0xa5}, {&(0x7f0000002580)=""/182, 0xb6}, {&(0x7f0000002640)=""/1, 0x1}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/183, 0xb7}], 0x5, &(0x7f0000003780)=""/136, 0x88}, 0x3}], 0x3, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="910904000000000095000000000000000c321aa1ca721f126d80eef2e5c5ee308fd5a77d9ed691b85c54b9664d4fa62b59c3ae0b33b41507d374e46e1f3c07fd0082441b03"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r2, &(0x7f0000000940), 0x0, 0x5, 0xffff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0xffffffffffffffb6) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x3}, 0xfd}, 0x18) r9 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x121040, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="14010000140001002dbd7000fcdbdf2502f47ecbe42d1110bb3261166baf02014e800c000200080000000000000014000100000000000000000000000000000000002a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a562d2dc1a2f5a3bddba8145d4e70637725b2ff"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$COMEDI_CMD(r9, 0x80406409, &(0x7f00000001c0)={0x1, 0x20, 0x20, 0x81, 0x80, 0x116, 0x80, 0x8, 0x100, 0xbe9a, 0x10, 0x8, &(0x7f0000000900)=[0x6, 0x104, 0x4], 0x3, 0x0}) add_key$user(&(0x7f0000000940), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000980)="f04a1cfafdc3e0dca7e712c7b3f46092f4f31e86b45f3d0d7b5d6e5b93d9a163c107040e6554d48cef1662d8279f6799b539b852d08e", 0x36, 0xfffffffffffffffd) 265.933834ms ago: executing program 2 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (fail_nth: 2) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000440)=@svm={0x103, 0x1, 0x1080, {0x4000}, {"8d4f55fbc9aa04849b4a383d2bb92df1ad1d777dbc87fb63d09a653aac9f94502be6de4e6e6c9342fefef604f5a7aeae3ea19cdab8188eca70057b4926574085503e887acbe7cbcaeb7dc136cbdb0abc58118de93a664dfe03bcabf69ad393caaa0f80d9779e95f18121866b0176307e3b3beb05e6df9267defc951f224113682063d183fe9323fc076245b70493e2790eaea467ef042c951f636b0a849d7212e797a6380f8343b50211865636ccb36fa9b5351bf05ebfd7b9b33a7131866c94aef37bd545d05b9b16a20f70182d7973d56cea8ff346bb2d7cdf2239285cd3a0d382840db39774e93e269837046de741ac39c4190e6e698f92295baa86123f538d9a32003831d684af9723e23ecbe9d37d4230c635c8b9ff1ffb12645528fdc7dc18236fa61dc0526bdf50186faff4a3238161d7b00ceaff66192bbb075238d258643373fa05d170d3e251ed21f93649d0b8dfafd77e2d1fb1aa8509d51ee95a6dd76325819cc80b1a0c46c6cb92b76ea4b8eb556ef5a895efae6d9b6662fbe64d0ed6c1465dc81017ab4501419367066e569abafc5e0d3bb83a9bdfc1856516c83c4b76f55b0e5f3f154f2b0bb3958432a470876753665ecfa3f1c97104b9acb012945ef5ffa9f9d0b771e944743bb12f2d5efe990bb8825434057e67e70dbb9f87e5780c4218d05a227ab0c642df78ccc18d65ce610d773544506ac0834cdabaf3ed315977546e2b9af1a5aaa45fc7c98b5b36a9b5ce9e78e7e217bd2b07a4982c18fd1b70f88a146ad9c0b5fc53ba135451253be63683bfc4ddce91406ae3c96ba6c90f4d5aa95b51ff413a4bd24c16d75e95c6d9db2a806162e8f39b9bc39926b3a85adc02c86ae9e7b0c202109778e45420ac7dff98a67f47f26560e2e355820659c10237a794e6b3624314113988eae98ed9d527391692f56b588119b744f6d165a2c729f8b8797067bacc42bd27552686dd425a111ceb0ce9ff9e7d3f93b37de726fc45e880560ef340a282f5e79c187b3e886788f565d6932b58dd5c1501b15c91bd08bfe59aeb0a124a611c6a43efd57c38d73734c52cff4e3854c70f72f99ce811160f89bb9a873674f3f590f00fde8f184f0e21650b222b17390eba4461a1070550e5408857fa45379edd1182bb0c43d79e756a37a3011d889d273d986205bdb0cf75a957fce23b7881161d8d84b43879dcecd3b6fc8553799f5fe648d796c79c5e8ac2a344a0b4dd6f1906c9ece87114db22c47c4e3dd9c0caecb09c54fa3d6dcf6a78f698b7a25a040664b75ab766ab029dc1c0a1bab57be7699ebc5de394ab45fb1b678017658fcaea6f23a6a9e4cfe6daa33e834685a427af948b7ba722a54e741e62b1d87bb70d22f77f08ecdccf923497eef275563b88d004bd5d5fd806987e343b671827925e4bb2afbbadbb9ff8c0f98179ad8f77602a58b5bae4318b98164d84f138b2e3bd876b7ffa61f04e70e6b27b850c8cf020a308254f05dd39111fc5924e509767c8683c1943faacbf88a5194607bfe253f23d64f7fbc74f5ba8f897e5e76944fc0069e9cafd3167ca2705bafac2bc6688533c0a0bbede2b8de70886c45ca72ab34068eb427f804b953ad672a4bb01ccbb8107451ec608596a9ef08d9d3d03392d7bde4102c28fe174f08e2f55c52af70c3dcd720a806904c0555defc001db0587c8fd40fc5123bc6fd5c65d7e5073b30052641022cc0185e79851c38aee4648963ba094e9ab2725213df4f4655517395e9a62a4fed9c9ee1477271b4a513689677511baed4c36340040ae1029a6c0994049a34184155e75e497b13a6ae8347ad13488807f3b97278b9db401596df1d73023513ae967215d3537f13dc16ec5ae0ee5073f21a08d8d44c207859c2679a974c3de6aee76d4b8b57e6d3f05501909436f5d8154cc78002693ddbec4e436a298c410dce266e5427ed9b1c15582f831597ee42c19e94ef67b9b096d92e788be63c2fbad4ce386869c7a7b5fca9e01386a98938a002b09e0f7df0927309f5a8cd754b876a4077f3fb0e999e62b3701a379235b5af7beb8e3e1ad2814eb465554a4e7af45189218c01afa9769a11f04502219582dfd0b3d1561095ccd11c7c8071382eb3ce9e3e995f48cb6eb8c1cf7713d65fe19feb53f75f1b238e7bc0406b271d113cd18d0e0e17afb5c1690400c4f642bb9c7e82df92d5bbe3aefbdb06ed9a181c913fb265e3c7500bb16b332e9a8e4521bd142d643f0f06acedf2f36c40137dfeac59c81799426c2f642edb44d0b07bf768d269c3173b07678efb9b2df90696ec8123b38fe03983de161b0fd9719601f3090d7435634b3648c2c46610ee851fc87097b1ec787089b609cbce37eef86ccff14f04790450e4294c1678980542aa8fd8b85c87a6588ef77ee0f9ae3578d413d8273d56f4967b6a394a8e89d89f6b52d6619d5ea45cbe934ed70927109940dd3f1c498ddaefaf16d3b25a2ebc0d22a5f77f30664a7b45196fa0b1501f582f1c4edff79c45d8583bb0bb0b61403ae0ad7099a68ba00ca4ea1f9e9970a8e7a6e120f1f3b8d50b74058db6603f30ca2c83cdb93e9b3e1c6ac82c5de03f904144115b2be234b7f7a6af4216bca6b484247f719aa0cc557671785183065c02c764899d811d3b67ad4d4d320e9ad4e8e55ab01faa28411150b62b0e2d7ee2cb1c5f1ee474ed36089a04d3f3bcfa1d4c83db25919f7f8a18c6ba4a14e9b0c0f1dce593ca9aa09ac0b490f20fcc2368cf2b36536ed8ac5ff45c37b8299128093c4c3872a5158fdc8a1f966ae3bd3463d7b1b9d1d20e95918ed231977f816a11af708dbe2474f67cb66e0d457c7d4f851d4cb8fbb1fd54a1e7a28755137da26da565966b45fa3fde65b87bd79c79965a1d9493b6869f57fb975471f6ae743b15a8e260a65cec8524c9cadf2638c3f3eecaf7529b32aa137fba74b4eaaf9fa6b541626faf639e6d1fe14eb227a948da60a0d87007efe96a8b8400c3155813e623ba8ae4161f6cfea81b6099ffe411d371831fd8915b1a8f1b5307531eb6360f5fdb3b90e72e9289cb26dd346526e9346c7ce328e05e96ead10d6895c63f26db94ab91b58839cef3ae992f63984d1845f0d47fcb91ed92a239ed2ce40520eb1104294b229f25c89bb39b0bb3c6a3b4bf211fd328c9a658a560161dfdac75e396b609d9b4b2df564408ecc52b046bd5a258a6bf390e55e6616eed401417013aa53e8d8a1caa4ab6766902cbcbc37b8c15a7a05fe57f13a281e636f4bfeab89627cbd2e1a87bddc3f65c9212bebb313d0e13b504354707ea4b3981785e2e0d31fb04780bd481b78c37fe6f699b88acf9ce52c26408572ea3f4b78b365821c86a98f9b8dff4cee7e775a053dc4c83d06375266eab3864bfb5f89ea4b05ab98e7d928c6929f109935ed35426d70ce0c526754029f7cf5e905d3db7d7819560b30728c4bdc0f4841c30cb92c8b407e7dcfbcd8018d0112722ea8b49250a97b52b537458c838f96912face19d73a7a2603cbbff9f973fb32495e19ad044126c1e422a78a3d7ef20d3e938ebdfa2af1e1597000d339d4ff46524ed06ccf970f4fee1c96a4359c42f3a8f67122238e4223e334936459c3dd8b82e7067ab54a83e564938541f3d8d29a94938f1bf5cd5f93a7fcf9ff8d8cc38a7a7355752ec3aa2e4cab4ead9442c269bc0e56f1979ebdda9b4cc708513107868f1c3e2fa0e6beaf064f5763c858cf5e516e826a60070df49b5eb4b68e5c867b5e4fd31d04d5c2eb081b892e08df41955134eab25983e6838d826c5d73bbc533a3b6ce9dd8dbc1ac806bdbb6a289a722fd0d6d2ef699a94ea98d77c99d2dc8e46d76bc4fa39bc96ffbb32f880afcf630941182a6b9cf0a8bd70ec4f768a0da5473a21621113a49305c132b9b259a5b29d4c329307a48a64dab189f146d666f40a419649c169fe121182504ac74ff5d390555fd698c333f5c68341d7b13f12e20964b305e5f1793730ef438bcbf7c5303541e9a9176790137aa13b4a5251ca288e349f3a539f369d5774ea303c9324f92d0be8c323a59d80603ef03e56ccd4118401d7d4441abb5cf05308b54827deb423d057530fb6cba2a3b1bf6f7c3adc7e300d344b95f1ff1c69ab32a879826c8643f449c652fc3810418163f3e224e16497f9c6e7c2ab7a1f3b57896e469484d7ccfeba52df774646e964ece9e2abae0d5c6f1b4f8555ebb71a9327720a981fcb0cbe327102be01f99d370e98e234351a5e68cb0376704789909698b3e2169aa6db357063cf82e2b0e56d1634582f4e8fb87028b00b21fa96954c3ed4cd561ea7b816fbc3d402e77be2ce5b52d7c9626701390af127423e86aafdc8cd5b41d5a412b54650798d94d973ecefe2230babeac516dcbaee2ad3ae56a41adf2141729d11c71f7fdc02be4c3557811ecd8c87891e1a11b4bd94999b612aa833981afc0ea0ec14fa0d283cf9903a8a4d51850096e2943703a7b8f522ebdc06dfad096385c769fff4a76beb3a9b394b2a8145ba132e784c9cb38c9f1ddbf56b3c380f4a7c257d69e060ae8823d308c80e82560dedc98fe0b5614b6236abdfdb286f6fa093234495c250f535346c06de9058d200d4af0af002bf5fecb17a55c9ef25d74d8a2dad14f19bb4d87f61b75b70ef9e6ad5e1471f4ef18b9dabb7a229815df2a17e608f421719a6b6e42f6cc9d8a7aae5657e23dbf5fd9099e73615c7dc02a72c6ba91a63758e17ebfbf6974d3e5769e71dde331857641d209a9aa6a5a23bc9bd4837f8aae35f798fae60e09660b587357cdfa810e1e9da15d0cf85a2496dc35f18de7df1aa77f08a5f1ea2015972aafd057354f2f9ec865f6de9d3c6564517b635d8cc3e4e6a37cb70c3272658317731f2b967a35293de0942ae866987bda53fe71f163c7041500dff5bcb34c2080c20ce7efc52adfa1c0b7977dbbd1136600b31bd20e3f06b2dee05e86b4e57634bedd1a157902bb44f129ee09faf5812c45943c9f9d042fff8702e32dd49ac13073ce583f495d69d15d314d7eb25a205747636d39c9affc537d28710a48c0b2c0bfffeed7cdec76d045dd17857dfd371c675f224b095deb4fe89361e45aea91037c18bd3751dd9e6d5a17b928e4a3055f210c2534e97e8d946ce0507b1dafed18a5975b85fa9b605590f24fa9fb463b6d32fed93da6ce5e4d056f79e2ad77a12cf2b6051e86f18ecb677355de6705c9b484f0fbbb9a46b868060d359d9b6e961f1017b4cb4862d793ee62215dd064899a31543bad9e68054512b3e9a30a43614452e5d0231cbf905daec6f2904feccdd051bc1ba92f660d637169bb302290e9736f7eec5f4238aa8614fdae1ef4afb61c7d1b53aa04b37969f89aed82bc9319ecdd887bc159584cf9e154b249e1981bb5e846163edd4f6852639a71ca0f9a7f9126140c6b451fc4a276e7d66ebcdfb7bcd9f2343833f2fbda239cad857e737a6729b25fc14b3553da1b0048ce734d4815dc2ef39e766b88ebe550333eefe39cfbfc7f20a729c887377f186a8303238f07209b904fb77c25cbb3e3e91c4785c0d9b38ae116fd069757db88d0d6506d9213e3ad47bb45efd30d7b26dccaa25c7c682662d43d3110988a71afb79ff7bf2b21e393874f797e6a608ec4702ab3ebbd0ce20f4ebcbbacf5a6921fac43c7911fa735e0ddaf4db43ea8f3a0a112b5e7177da0b8e15ac8ce2e636a5ff6f79586f254d6bcfbb04438ec274d2130108477b7392ba8b1cddf2df169fe2383441b387d6ddb5f89df886d7d4dc9d71175960228edc2c025d"}}) 265.609915ms ago: executing program 3 (id=469): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x80003, 0x200000004, 0x40000000004, 0x20000a0e1, 0x100000000, 0x0, 0x200000003, 0x9}, {0x8}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x6c}, 0x2, @in6=@loopback, 0x3502, 0x3, 0x8, 0x2, 0x9075, 0xef, 0xc5e}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000e40)='ns\x00') getdents64(r2, &(0x7f0000000e80)=""/4096, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000b80)={@private2, 0x0}, &(0x7f0000000bc0)=0x14) sendmmsg$sock(r2, &(0x7f00000023c0)=[{{&(0x7f0000000000)=@ethernet={0x1, @random="19fd93f2492c"}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000400)="ba18c6bf47dd7237468064f3a4b15a9dd6e25105a628146deff9ae55bb08390c815f8e87c01286c6ad99c81c47ca677f0eb00b5748a723345dcc4abff4bc0be1481211b484a0fc57c8e34a4e4b6ec1f33bd735bab31bca5d30b52b016a66c849849e55fc147a8e4ddfbebb23a913dc36aaf66d5eccad52bf6bd4480a5b21212d479ff61a4b2286a77e859eaf31d7cd27e877ab8086e6dfd5", 0x98}, {&(0x7f00000004c0)="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", 0xfb}, {&(0x7f00000006c0)="37cb282c8cefb623632102fa5222d8509b884d26e89f72961c5aee3f39dbd29a32f0647cbfa3d8b8339858c8127d2e942bb6a1c583c7bddb369e5c24e76ceafcb1e238386b2ee0afc9b2da9a1356eb35d29ca3beba4f50b8539293a0269bc096d01008ac3eb14ea4c0c1a14a3260b3d951964f44b9b0039be9a182b5853967a596a45d98fac521238506b158b1dca025e681042adea78f0232ceec90ab5728a65def17ac2e", 0xa5}], 0x3}}, {{&(0x7f00000007c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(morus640)\x00'}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000840)="9b2bd02728ff3c59a21034898a2dc848ffee5bfca56067286f55fd1dc33fdadacb6d55b20df65d7be5e439b443ae1bb1f6e0ced657b41869ba0e40e046a6a561d4ba4e09d703f2798600fd36ca4f1b4c9c624a0c64b8402b18d4ec4dc477ef861796ed7f2a8e581dd51ec5af528d7b9cf3b3ee312410eb196f68cd86ba905556997858f64ecf269264061bd2e902dd3612c2e6b10f5cd150ea7fab8fea6f9a611310059317575b4a38c17ae906dc316c4a9d2a63965239adc5b1", 0xba}, {&(0x7f0000000900)='\\', 0x1}, {&(0x7f0000000940)="6f4d13cdbfcf7e9eb9028d6439e02e2479bdeba6b83f04fbd72522d70f4d71f8680389f471b49acdbe64b10b97a24ee0e56273af171e92fcd31f185ab159c0836993360893dbad0dff67208d8a5a3caeb7f4ee6e990b21fcc597", 0x5a}, {&(0x7f00000009c0)="b83d6ae6cc914cd52b0db341dcc7393b485d0b5f3c2cba32b68e66de32ea50efdd43ec9c1953902253c210ec5791058973b4064f099e38e800eab17b98e1d148acd836ff4d92accee0b7b5fd51acc3ab9eac812ccd028ba1cd14421b727a1daec85332bd8843bb060be6d38a00da63ff1d453d2341abdd710d7e6c66739ea376aa83763cde8ce085f00541e07a3f34213bc28da0ffbcb67a795e458ae35239a1657e92323d9df9b2ac27edfe8d2997344c6381191325cb00582847b136302290ef81f3a8407ac6dd569c28e2430f1f89f186aa6497e439be238f34e1144fe6de34460c9a34b22b03", 0xe8}, {&(0x7f0000000ac0)="226edfae2bc1626dc11be1dbc9547df740601bf9de21aa806768f889573a8ed681fefff5d48c16d565acedb5d1dcdd66641e", 0x32}, {&(0x7f0000000b00)="bc4c87ea07cb2fec01a21e12355a91addff4f01aa794a87c30a02938d6a741", 0x1f}], 0x6}}, {{&(0x7f0000000c00)=@can={0x1d, r4}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000c80)="dfdaf9e81db3f87ccfb6283860bf330094dff8d470c5f4136a47800860f1ff8b2c19aecfea937e6a9c3dedbec247e6c148434420b008da2e2d3fb724a752597b1f2a4b0f974e7c0a3a35e0b53e5831816462aee5cb1c90bb8548baec8be6dbd91061f4f193bc2e62832032ffc70244d9594fd7982d411bd4712e7fb9ea0596aff7ae3c94095c50aeca1b2b174a7fe437fdcb0465b06f64891f703bad301bd2bad5e9a0aa47f337f9cdc454d90c45233d520eb0c95c3566fba4d60e4246847ed9efa05e696ba99bca1629148f6e9c32ea5db6e34d7efd", 0xd6}, {&(0x7f0000000600)="8f0bea6e625e8351af2784293da0915864319cf8f279738c66bf7cd9508821c8fb6690c6d4c4e5cb9e30d7639a71d073569992f975b001a995", 0x39}, {&(0x7f0000001e80)="e97a535034fc91ca5603990daf7784912b6620a5067c4c5b4d5425024c9681b24ca570d0f3bd664008296402afba9b0f174c6e859a96f9463354f51224d866062cdaf1ea56d0297f267dabcc1923d96aef8457e3a9087016bac51f69b9cb9ea69195e847d832c8091d84edd30270ff23a1002696dd823d3e23653ad5c79e6f219613a650ba7c78a5966cad28b5f24ee7", 0x90}, {&(0x7f0000001f40)="bc9096", 0x3}, {&(0x7f0000001f80)="d5f77db18d9e6ef1b3b6a58811b135e5dfa0eaf8d28ea46e2af054445bffee64b8", 0x21}, {&(0x7f0000001fc0)="668418a90ac360", 0x7}], 0x6, &(0x7f0000002040)=[@txtime={{0x14, 0x1, 0x3d, 0x800}}, @timestamping={{0x10, 0x1, 0x25, 0x7f}}, @mark={{0x10, 0x1, 0x24, 0xf8}}], 0x34}}, {{&(0x7f0000002080)=@generic={0x3, "db2479652c797b01207d00ac5142524679592fcc4e3d05376bc067922a1797ddac613e80d919a4fc870eae6568730d81847bd12232860e529596c786f7cd85fa6c6603e1fca132edbfb989f3e62c14039c3db73ac7d84452b581143a5a0717455d8b432647090974e5192141c68f70c0eaff5e007793eacc1c563aa6ad90"}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002100)="9abef4da7fc0b111d815f1a8ca3153353633bdbd95ee6ac0dfeee5592468ff8767aa5a85d0789d4ed6cbcaf80dd6f4c5c1b7bdc0036f582169e1b8fbe9c75e158483dc49ce1d59f3396da3306eed8b4547d4917db501f1278e5def1b469fd948b48fb2194982588ad8897d4b055f9fe0c4f9bd68de484e55cb441552c7b9b23432a1ee6afc633b3f555987ebe81f95f96305d6c16f381a4bc5002b4f9869b6ac3d7d18993b9d66653da06d", 0xab}, {&(0x7f00000021c0)="8650dfdf43854e985225d879f7e1a9b36ed9880580050cc8d3c25792e23ce759f0b7b20980ca708d5011ed25832507c971019c06716d83ba48b6574522de13d8f0b08bee662ab304cf937492fb8b018a4003f70d260a6e5d47bc5a4b", 0x5c}, {&(0x7f0000002240)="c389c5d09c0a8a5b310d5681a909ae0f0b3a7d9a39e27759a406b62e65887b526b9c537d79cf32ecd6a5783fc0219a218cfc72708dd0e09a6e5fdd794d8ac16cff822435ed3da8e774aeeedc8145d5f8780a10321ad6017dd9a3f14e243a725985c33f82895750896a196c302844fac3abf60c8eecafb0b6c57c4f5888d4ab2f79db872cb0537b086b55eff6fae1999d", 0x90}, {&(0x7f0000002300)="994dfea95013a6443b1a45864f87ce6fc629847f1d544770289ea1364d057244793e613c25d9486b22e0c2cd5ce01b0b61429280b72cadf09b125f30170bd355e32c8582ebed8efd622f78c99e60f83d50d90ca8d94421dae06fdd008b7517708aa49362b2c1b335fce89f7c0f7d5c63367e1c79a0", 0x75}], 0x4}}], 0x4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r7 = syz_io_uring_setup(0x42c3, &(0x7f0000000400)={0x0, 0x595f, 0xfffb, 0x0, 0x40051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$FE_GET_EVENT(r6, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x1e, 0xa}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000e0e80)={0x0, 0x0, "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", "4ec2189a125d6247dc8c5e73855875166cfa81ba1d41778e828f70555eea9501b9b901267054f2e34d39960697c4c7ecc3bff77b5f267434c72d9f1ae9b14008a7861b13cbd7894675b700385c6c1b97430695b304bfe161909e3d67a546de16c1c25e91b6e620fca31583fbeeb7f21521fd41e7be1c5423fe4ad8e2e222c6d830fa63ce4885ac9f078179a0e81a8d056a4cfe442d8f9b77f107f58d7fc65781b2b2576c5b7d52602c3d38c9342ea403617e8ea62f87daecd673542c4edfadd6e56d16c486fff5048fb085f2ce8e83c5d8a004a9ffe1901269548336d3d2ae044c8f1b3766846d9f9604e49f751678947fbcb30a90f45c2ebf560be720976fadebbc0fea333f8d7a77b8a9a035ef94cd93919755abc45942e1fa9484497a63c6d6a6e3df31cbc3498142a5fe5496b954ad96d489952b84a60097b9cd50ea464b4c6eb8ed1120ee7f61e72c9e6d02d118c792fb05d6b23cc6f11273201251eb388414dc30d4e093b729077ee2ead5b888608a5fe0ecfa771d2684596726f0edd5350e98389a39d8420e7fe6a5866046327d0ad35e1cba1fd7fcd7d06fa0fc7a391ddd851188f717aa30945e7d1d5c3d9a87c5e7b33e3628fcf5e0b795bbee863d515aa34d84b0242856e4ecd00d1bd3e2d1833d1cd08fe1afb57f4553267ba7c069f5e08c670460df153278223c8164096ceb04892c6295068bc84dcd951557f53754d50fb95a60fdf40907221ddd5ddb3e128b77abb70eeced63479aa39608e31c48dd1701391dc2b92eceb2a56ecc09030a7da3268976a2ac6448066e9bdc6b760d22fbaa0f71ac9ebc0e5c01d661d4966059ff77a0e1534bd4ca9090f9f820dadf2d0e6339f919535085f9798767573306cef9724b6e1646995cdccc80d6714162b1d035deddc556bc8bf12bedddb0952d89f85f0e6e9f70ad99d056c769edb8981d9e36a601958ffd0f2ddcbb93bd40b3908ad16a58a8486dfb04c4fc72ff5ce5579e9a5e33cb1279dba64cad04a73b92416269d9d323732fc6cff2d4f403dc355285a17d2ee8312e202d6eb480120c673a0e1b027c52e70bc0f7e9930216bcc4575f077fc3c243c39182fc3a18b974c6fa04969346367049365602cab3424854d71177a1bc9d9c73551628265be18320f2dcf9914b87163c64a285537318991e42e42793290da69004bd1ce7305b282a18b2f0073e3102a9a32ff371834d90a64b8c3e051b580cf574ff8024c78bb27234d8d2bd7bda13e8d4cf74dc4e3efd16e500c43595f058eb98b07385d5840815eb47fbb985de5c108adbdb7138291e4e1a9a184d8ecf879c4c07d228df307fb49ef451736cf2a7031d227ec7f418d21ce4646a642281afc650e6d97c84d38abcc64498127c5a506be001963a8339b6d3cadb9b421ce1a25ad54d303906710eb0946f40c1552bc0029ec02ae8ee9eef9278c30532acace64688de54262e89dca37896962f7cb9a2fb584d718277691318137fb4bbbc9d1a5d194472d6ac85c68671a8a05850711ce2c67c92d0e6c5d764ac59e1597161ba8e5fa023e95de0039da86f46bd9ab4d5f45e99d374dd68affd39d10c5004333b09ccc10c504dc2601c1ef7444df109bc538f17958907e3d48f893511ef7f3508e19a793e40e652487ab90b893bd84254a0f2064c50f14b922a1196576c65249a6a6c8cb23d45cf8a774d913bfaa1daa3512ddc01cb49b910acc2012e4b8cc0432dfc97aae61f271ea01556b0d97a681b0ba31c66b0eec6353c8cfb2376d7d217dc5c0cef74ea19663fcb29ea0ae18d8f3b2a2c149926be092c4ecb154156e428cf2f7b7bbda62e52801c4a2e5edaf41ae24a4ddbc6268b6f344112f5cafb8e327ea2a5fb752ab2fb547a7d5887de2fcde12c0c1866da89ba180c1325cf4182a03c10343113e2f32c1173c85c5dac596c7a854834250019a45bfdb0ee0980de7867775ad3eb2d512eaa01d0645387757c725fcf8cc0939616372d959801eb8e7c116ab73ef16b8b04c66c82c75d7795726d8320cdb15980718a5ee19fb2487fd3585e0fee7dab1976aadc029d959e68cd3e9a5ffe368ad676d5048c965652adcf1751ae00c857fb2b448494bfa926a0a917fd7174f9241c3e03a0da8c46c9d254b3bc16a13b35f6dc218387b4a85433e2a1b8387e289d096781dae47778d96829db43fd55f3caa672a820a03e8234fee746f2ae426fd6784b36e586ae50e089bb6ac824c96099b0473578d92471244cfa128039e07fafe086c63016bf7469818aa22e5c451fd8e8394e884cd47afa01843ffc3a1d1fb2d285a5d579fa080a929ff559d96f62aedcbc1cf294e06ac222d9d0b4e8dd4b5541694129b68c20f1a2d296b6d1a53945591c87e0ceeee8720770428efc8724b642efb1204edc38bf3124d10ea7092a915d1e1af9a59e3a671e7331f13184cbe55b16af7be953a1c8da719a00a6b04bf8eaf294cc49da885f0f015e2fe73807ab2b8bb57a96843edf2e8144913bb15a4c6d97f70f2a1564881d7347ba09669287c720eeb7daf419cdee9e4e2e6a75c4f72781b51215de18537cba57b844c89eadda5234aa4febcb42772ce4dd9d956197f519608d955f28b9fb955e862fd4b726cfedd3309b50fb443c29561f6fadca98162052ef1b20a102f8bcb4cf42f66cdee214881a9d8d2b5f22d1b4ba78f8c34e0452a1ef03d7d5fd2475e94234a095ee1d10fe2ee85edbf9f4a17b76b05e07fe5196e3be813e6b50be83ffa2cf387fc2ff72289a059e306b13448177bf106a18e35463797cac88912bacaa1943cc094436b81bcae8af1e18df85eb8bc51db11c13051880e03dda17454cd1698c6743e10e22202a644ac516dc216c156ed9a393aff2f83841f3fbd4519c05645fed0adbbdf7f6d9afdd5ee35b75d156a88612acfd71fdf0547093829a2d39ae2ca0009b6efc8641a96c31c622940b06b80c1f9ad91fd7c969f8116ceb8f29555196b97ed5f9ba3a1adb28fb0daf5275286a09ae03f1715be544a42f27dee18f9d974ad4ff97fa376794f9092bd400b22436c112518a3528591fc22a4768c463fde7cf3b993b37289d53b85fb98f3d0d0c943a46355389d8535a8328f30722b4562f0de78418c7fa7df6a7ecdb61b15ce8ee1068fc4efa746f809832f05241bb94dfc23c9d882add7485b61b3021068489a57be60152abb0ab527241f1b03ad3681073f286542fce0d012e7ce9db02a30ec5ac9dfe9602ef194dbdcd861faf689d9290e5836012461479b22df922aaac6d8a7f68f9d8f19b78e9447c578d6703da736c6dc2adece743f6386df4342ddf5f7898ea8e02c9cf1c31cc40c880c4f23fc0b84b258f996e4da8d840ed2f216507ace22615cd08e4507f64466f55695bdcbbf2d0cef1a84b4fff1193ce760c4b05618f7255b4aa101580e776c4838c447ac3e49b6586348414256239562b4661f85f7fc454fac9cd88c60cb4f418166de2c4bb0a33098325284f9fbf514a26916221c72307d707e21a1ef8a0a99030f45254ccf37d856897029be0bb04a50cb9b4572dc68f3f772db44983db901a633a251e9499f7ff81930e864b66e36d27ea32700fc4896a13b00c7852ec00e97ed1dc8e88ac0f2631088d49b8d11107966f7907ab7339e6da8ef29d0bded9a33ced7977ceb52015a3d94b9701240143192d208c907f73da2dcd241e0d7eb9c59eb947a259a70cae2d2d1ae147a862349632cbe253683d1ec7db62487d29dcf39380531287a01e0ba6b8c1ae63c0bc40ac11e2ee67ef41cce2fdbce281acc0072539ec05fcfd6fdbf6547c47460a0bcf8a45519a5dbdba3c4f9d7d25914dc9808197f8b2dd54bd0e34e3a9b1c21a63468d3ed8eb72befba464686acc7ec69d32d9c329acf5c7bb020e6f7714282474a942542b14661d7db2aec2b7c4c62724c8080aa18393c602c66815816da83c6bce2770ce5f65c9ec80d7d4ee92af3e6e05227d193f5794dd506491a7b3642d4eb14566c0edf684fa099ba089267ca92352c32b4e3b4448fb64c34e13a9b93bffdf28c593f45ecf08ccc54e2cbdd9f3d43c17823e937f16d4a2a83ace529af759bc69ad7ff33f583d0e9e467bd8aecec7119d33c55bc8d6c95064dc551575764c87a0010bd27a80780fa71fa1062abb4d244486854e5c299c2eb326f4f45075e1eee784b185ef8a0038ab128548880e8acfc2c9050ae6834c54ab9c4655667e7deae68943dbd8f321c6f285620df73170cca269f9cabc41b0a3f0b4677c5f4d3da97ede25b91f4b7c651224ef5f8aeda800eebc170fafcba3b237c2e719fe1c536a2a00692048e7c0cb94f0dc8e219d54813b09348a6998d270a6ff238d5100899597849fe1635f6be5327eb0a0540ebd7ea698bb8ce0740a63a19e3c69e1804e300c78837b01d3887391789797854a56631a4de4278d55cf8960d4d57823bc61fc2649f24d580881e853b5b3203f9be1d88e453b079f4f7f6e172b9034a9c0d65e80163b70ce02bda3df577960f34f1a89751979d9879b951ce9f2b6a32a2cfe6651641316cecf04cafbd7440272093b7fa82e270b2cfc392d66c6f4cdf1ea4220028dab597224a1142f0de5c37f4372116b399bca7cf7ffc87fb433c5cdb4721cde845761b9fe0d92a1ac97e828205562e26ae422b78e2773b98f6c356995bc3346405775cd6a08f250b5e87867c89dd40123b2467406f6f5ae3da19ea984e4e1bf13f5a748643d37d810cca253ef336259c13195a81e627a54aa92d9c5c8b8ffd3d1ac21aa5e27b825596302900549563badfc16420399f18913e540d3f0187dd4e9ac49f179d6a65d4e6684b792c2847a40884ae13558e579fb68184d8d4c263f4e33328c9a591b0fa0510cddcd129a89ce517fb9ca6680f2f201339cf32f424f080dd7a98f675b6a15af8f97ff6915e88ff8932ca372ad05ca2adffaccc6a42c272167636a0bd773e19ea29cb8fce054c8e974303c7406f084225b39ccca1213760b154bf507a7e721ba5e801ad8b6a364d3b48b562dc1b895a1e75e0a0e3ce694f0d4adb8c7d2863fd8f444f3657efc4c4a3df819bfb48f960b4ff7e4b2835e45ff8b3a96cde97a104b99cf1a51864bb9deb1e8f9082eec408d2cf09199b1417e7b50e02583749f43091dc66ec9a6bcebe15ced4d105e7a0d72621fe3707457a4cd44fe03cf2ee165a207de27715487097316e2c4e97ca681dcb88440275a091921ebaa4c1a8b64299cbc260a0cf3bffada13a696fefab94c09338d2bfe1f120c4a5352423ef8f9898a867df257498f33309a2d7819c8303f8dd34cf8fb8f5edadc509bae8bc662b8ea697adba454ea682ec1b6e2d922030415486273167cf68f38b876eddf535e6ae516aa53553f2b8d5093b1e111f0999ec4e58b7f802a1ab67aa2848f20"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000e1e80)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x8, "b66b0e9f1dd0e6"}) 117.321316ms ago: executing program 2 (id=470): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000001000000", @ANYRES32, @ANYBLOB="00000000000001000000000000f0ffffffffffee23f9aab7dcff"]) get_mempolicy(0x0, 0x0, 0xb70, &(0x7f0000ffb000/0x3000)=nil, 0x3) r3 = fsmount(r1, 0x0, 0x2) fchdir(r3) truncate(&(0x7f0000000040)='./file1\x00', 0x41bdc) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x10d) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 116.957072ms ago: executing program 3 (id=471): add_key(&(0x7f0000000100)='big_key\x00', 0x0, &(0x7f0000000180)="85", 0x1, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000400)={0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x200444c1}, 0x200000c0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unshare(0x8000000) openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x10002, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 116.501633ms ago: executing program 4 (id=472): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) close(r0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x1, @private2}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="b8", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400)) 116.176617ms ago: executing program 2 (id=473): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x22440, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000440)=@svm={0x103, 0x1, 0x1080, {0x4000}, {"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"}}) 57.203864ms ago: executing program 2 (id=474): add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000400)={0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x200444c1}, 0x200000c0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unshare(0x8000000) openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x10002, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 0s ago: executing program 4 (id=475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = dup(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r9, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r8, 0x407, 0x100004) write$eventfd(r8, &(0x7f0000000240), 0xffffff14) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f390768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xf8d}}, 0x96d) kernel console output (not intermixed with test programs): e_direct+0x10/0x10 [ 52.098379][ T6077] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 52.098401][ T6077] ? rw_verify_area+0xce/0x6d0 [ 52.098418][ T6077] do_sendfile+0xadc/0xe20 [ 52.098438][ T6077] ? __pfx_do_sendfile+0x10/0x10 [ 52.098455][ T6077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 52.098475][ T6077] ? __fget_files+0x21f/0x3d0 [ 52.098494][ T6077] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 52.098525][ T6077] ? fput+0x7c/0x100 [ 52.098545][ T6077] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 52.098566][ T6077] ? ksys_write+0x1ac/0x250 [ 52.098580][ T6077] ? __pfx_ksys_write+0x10/0x10 [ 52.098598][ T6077] __do_fast_syscall_32+0x13a/0x8b0 [ 52.098619][ T6077] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.098637][ T6077] do_fast_syscall_32+0x32/0x70 [ 52.098653][ T6077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.098671][ T6077] RIP: 0023:0xf703efec [ 52.098687][ T6077] Code: Unable to access opcode bytes at 0xf703efc2. [ 52.098694][ T6077] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 52.098712][ T6077] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000006 [ 52.098722][ T6077] RDX: 0000000000000000 RSI: 0000000000fffe82 RDI: 0000000000000000 [ 52.098731][ T6077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.098741][ T6077] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.098752][ T6077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.098774][ T6077] [ 52.457456][ T6083] veth0: entered promiscuous mode [ 52.529225][ T6086] loop5: detected capacity change from 0 to 7 [ 52.541922][ T6086] Dev loop5: unable to read RDB block 7 [ 52.541991][ T6086] loop5: AHDI p1 [ 52.542037][ T6086] loop5: partition table partially beyond EOD, truncated [ 52.600298][ T6083] veth0: left promiscuous mode [ 52.671608][ T6094] ip6t_rt: too many addresses specified [ 52.705339][ T6097] ip6t_rt: too many addresses specified [ 53.320584][ T6102] loop5: detected capacity change from 0 to 7 [ 53.326619][ T6102] Dev loop5: unable to read RDB block 7 [ 53.329514][ T6102] loop5: AHDI p1 [ 53.331233][ T6102] loop5: partition table partially beyond EOD, truncated [ 53.632629][ T6110] FAULT_INJECTION: forcing a failure. [ 53.632629][ T6110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.638369][ T6110] CPU: 3 UID: 0 PID: 6110 Comm: syz.2.72 Not tainted syzkaller #0 PREEMPT(full) [ 53.638406][ T6110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.638417][ T6110] Call Trace: [ 53.638424][ T6110] [ 53.638432][ T6110] dump_stack_lvl+0x100/0x190 [ 53.638462][ T6110] should_fail_ex.cold+0x5/0xa [ 53.638487][ T6110] _copy_from_user+0x2e/0xd0 [ 53.638508][ T6110] get_compat_msghdr+0xb3/0x480 [ 53.638552][ T6110] ? __pfx_get_compat_msghdr+0x10/0x10 [ 53.638587][ T6110] ___sys_sendmsg+0x1b6/0x1e0 [ 53.638618][ T6110] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.638658][ T6110] ? find_held_lock+0x2b/0x80 [ 53.638694][ T6110] __sys_sendmsg+0x160/0x210 [ 53.638717][ T6110] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.638746][ T6110] ? __pfx_ksys_write+0x10/0x10 [ 53.638769][ T6110] __do_fast_syscall_32+0x13a/0x8b0 [ 53.638795][ T6110] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.638821][ T6110] do_fast_syscall_32+0x32/0x70 [ 53.638846][ T6110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.638868][ T6110] RIP: 0023:0xf703efec [ 53.638887][ T6110] Code: Unable to access opcode bytes at 0xf703efc2. [ 53.638895][ T6110] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 53.638913][ T6110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 53.638930][ T6110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.638940][ T6110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.638950][ T6110] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.638961][ T6110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.638985][ T6110] [ 54.745035][ T44] kauditd_printk_skb: 141 callbacks suppressed [ 54.745083][ T44] audit: type=1326 audit(1788626491.199:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.3.80" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 54.757716][ T44] audit: type=1326 audit(1788626491.209:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.3.80" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 54.764808][ T44] audit: type=1326 audit(1788626491.209:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.3.80" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 54.772100][ T44] audit: type=1326 audit(1788626491.209:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.3.80" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70befec code=0x7ffc0000 [ 54.772126][ T44] audit: type=1326 audit(1788626491.209:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.3.80" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 54.772146][ T44] audit: type=1326 audit(1788626491.209:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.3.80" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 54.794921][ T44] audit: type=1326 audit(1788626491.259:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.3.80" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 54.794972][ T44] audit: type=1326 audit(1788626491.259:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.3.80" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 54.795012][ T44] audit: type=1326 audit(1788626491.259:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.3.80" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70befec code=0x7ffc0000 [ 54.795046][ T44] audit: type=1326 audit(1788626491.259:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.3.80" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 54.947030][ T6139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.81'. [ 54.947536][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 54.949653][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 54.954408][ T6140] FAULT_INJECTION: forcing a failure. [ 54.954408][ T6140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.954431][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz.3.82 Not tainted syzkaller #0 PREEMPT(full) [ 54.954444][ T6140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.954450][ T6140] Call Trace: [ 54.954455][ T6140] [ 54.954460][ T6140] dump_stack_lvl+0x100/0x190 [ 54.954479][ T6140] should_fail_ex.cold+0x5/0xa [ 54.954494][ T6140] _copy_from_user+0x2e/0xd0 [ 54.954508][ T6140] get_compat_msghdr+0xb3/0x480 [ 54.954526][ T6140] ? __pfx_get_compat_msghdr+0x10/0x10 [ 54.954543][ T6140] ? __lock_acquire+0x4c5/0x1ec0 [ 54.954563][ T6140] ___sys_recvmsg+0x193/0x1a0 [ 54.954581][ T6140] ? __pfx____sys_recvmsg+0x10/0x10 [ 54.954599][ T6140] ? lock_acquire+0x1d1/0x380 [ 54.954625][ T6140] do_recvmmsg+0x54d/0x740 [ 54.954644][ T6140] ? __pfx_do_recvmmsg+0x10/0x10 [ 54.954663][ T6140] ? find_held_lock+0x2b/0x80 [ 54.954674][ T6140] ? ksys_write+0x190/0x250 [ 54.954685][ T6140] ? ksys_write+0x190/0x250 [ 54.954701][ T6140] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.954720][ T6140] __sys_recvmmsg+0x21f/0x270 [ 54.954735][ T6140] ? __pfx___sys_recvmmsg+0x10/0x10 [ 54.954750][ T6140] ? ksys_write+0x1ac/0x250 [ 54.954763][ T6140] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 54.954781][ T6140] ? __do_fast_syscall_32+0xb3/0x8b0 [ 54.954797][ T6140] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.954812][ T6140] __do_fast_syscall_32+0x13a/0x8b0 [ 54.954828][ T6140] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.954847][ T6140] do_fast_syscall_32+0x32/0x70 [ 54.954863][ T6140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.954878][ T6140] RIP: 0023:0xf70befec [ 54.954892][ T6140] Code: Unable to access opcode bytes at 0xf70befc2. [ 54.954897][ T6140] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 54.954909][ T6140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000e00 [ 54.954916][ T6140] RDX: 0000000000000001 RSI: 0000000020010020 RDI: 0000000000000000 [ 54.954923][ T6140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.954929][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.954935][ T6140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.954950][ T6140] [ 55.748049][ T6143] ip6t_rt: too many addresses specified [ 56.091635][ T6151] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 56.136206][ T6151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.149492][ T6151] 9pnet_virtio: no channels available for device syz [ 57.039534][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.191061][ T9] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 57.196398][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.200995][ T9] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 57.201033][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.478386][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.94'. [ 58.479213][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 58.480193][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 58.678386][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.95'. [ 59.493346][ T6196] veth0: entered promiscuous mode [ 59.710264][ T6196] veth0: left promiscuous mode [ 59.817488][ T854] usb 8-1: USB disconnect, device number 3 [ 59.825556][ T6202] loop5: detected capacity change from 0 to 7 [ 59.832028][ T6202] Dev loop5: unable to read RDB block 7 [ 59.835363][ T6202] loop5: AHDI p1 [ 59.836986][ T6202] loop5: partition table partially beyond EOD, truncated [ 61.379312][ T5740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.380921][ T5740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.382433][ T5740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.383065][ T5740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.383476][ T5740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.512643][ T44] kauditd_printk_skb: 28 callbacks suppressed [ 61.513125][ T44] audit: type=1326 audit(1788626497.969:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 61.513616][ T44] audit: type=1326 audit(1788626497.969:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 61.516479][ T44] audit: type=1326 audit(1788626497.969:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 61.517047][ T44] audit: type=1326 audit(1788626497.969:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 61.517952][ T44] audit: type=1326 audit(1788626497.969:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.110" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703efec code=0x7ffc0000 [ 61.520223][ T44] audit: type=1326 audit(1788626497.969:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 61.521748][ T44] audit: type=1326 audit(1788626497.969:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 61.522398][ T44] audit: type=1326 audit(1788626497.969:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 61.522560][ T44] audit: type=1326 audit(1788626497.969:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 61.523670][ T44] audit: type=1326 audit(1788626497.969:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.110" exe="/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf703efec code=0x7ffc0000 [ 61.555910][ T6244] loop5: detected capacity change from 0 to 7 [ 61.595063][ T6244] Dev loop5: unable to read RDB block 7 [ 61.595082][ T6244] loop5: AHDI p1 [ 61.595091][ T6244] loop5: partition table partially beyond EOD, truncated [ 61.767946][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.775365][ T6233] tunl0: entered promiscuous mode [ 61.776968][ T6233] netlink: 'syz.0.105': attribute type 4 has an invalid length. [ 61.776985][ T6233] netlink: 9 bytes leftover after parsing attributes in process `syz.0.105'. [ 61.940413][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.030708][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.192896][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.665896][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.668494][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.672293][ T6229] bridge_slave_0: entered allmulticast mode [ 62.676422][ T6229] bridge_slave_0: entered promiscuous mode [ 62.677854][ T6229] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.677895][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.681429][ T6229] bridge_slave_1: entered allmulticast mode [ 62.682925][ T6229] bridge_slave_1: entered promiscuous mode [ 62.715993][ T6229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.720261][ T6229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.756920][ T12] bridge_slave_1: left allmulticast mode [ 62.757009][ T12] bridge_slave_1: left promiscuous mode [ 62.757758][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.799212][ T12] bridge_slave_0: left allmulticast mode [ 62.799261][ T12] bridge_slave_0: left promiscuous mode [ 62.799435][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.119698][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.125987][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.127896][ T12] bond0 (unregistering): Released all slaves [ 63.143665][ T6229] team0: Port device team_slave_0 added [ 63.146511][ T6229] team0: Port device team_slave_1 added [ 63.177281][ T6229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.177293][ T6229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.177310][ T6229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.180259][ T6229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.180272][ T6229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.180293][ T6229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.246811][ T6229] hsr_slave_0: entered promiscuous mode [ 63.249641][ T6229] hsr_slave_1: entered promiscuous mode [ 63.252273][ T6229] debugfs: 'hsr0' already exists in 'hsr' [ 63.254749][ T6229] Cannot create hsr debugfs directory [ 63.422003][ T5740] Bluetooth: hci4: command tx timeout [ 63.463939][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 63.551294][ T6229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.567806][ T6229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.571738][ T6229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.594894][ T6229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.611214][ T12] hsr_slave_0: left promiscuous mode [ 63.613518][ T12] hsr_slave_1: left promiscuous mode [ 63.614867][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.614887][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.621984][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.622045][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.650502][ T12] veth1_macvtap: left promiscuous mode [ 63.650616][ T12] veth0_macvtap: left promiscuous mode [ 63.650696][ T12] veth1_vlan: left promiscuous mode [ 63.650763][ T12] veth0_vlan: left promiscuous mode [ 63.814061][ T12] team0 (unregistering): Port device team_slave_1 removed [ 63.919418][ T12] team0 (unregistering): Port device team_slave_0 removed [ 64.071573][ T6309] ip6t_rt: too many addresses specified [ 64.081004][ T6310] ip6t_rt: too many addresses specified [ 64.081662][ T6229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.085185][ T6229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.088921][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 64.092942][ T6229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.101796][ T6229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.191612][ T6229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.286875][ T6229] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.385665][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.385739][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.386738][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.386794][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.409492][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 64.768426][ T6229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.820805][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 64.900387][ T6355] FAULT_INJECTION: forcing a failure. [ 64.900387][ T6355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.900559][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.2.124 Not tainted syzkaller #0 PREEMPT(full) [ 64.900601][ T6355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.900611][ T6355] Call Trace: [ 64.900617][ T6355] [ 64.900622][ T6355] dump_stack_lvl+0x100/0x190 [ 64.900645][ T6355] should_fail_ex.cold+0x5/0xa [ 64.900663][ T6355] _copy_from_user+0x2e/0xd0 [ 64.900680][ T6355] get_compat_msghdr+0xb3/0x480 [ 64.900701][ T6355] ? __pfx_get_compat_msghdr+0x10/0x10 [ 64.900722][ T6355] ? _kstrtoull+0x144/0x200 [ 64.900740][ T6355] ? __pfx__kstrtoull+0x10/0x10 [ 64.900760][ T6355] ___sys_sendmsg+0x1b6/0x1e0 [ 64.900782][ T6355] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.900803][ T6355] ? pick_eevdf+0x1ad/0x880 [ 64.900822][ T6355] ? __lock_acquire+0x4c5/0x1ec0 [ 64.900845][ T6355] ? __fget_files+0x34/0x3d0 [ 64.900872][ T6355] __sys_sendmmsg+0x309/0x440 [ 64.900891][ T6355] ? __pfx___sys_sendmmsg+0x10/0x10 [ 64.900906][ T6355] ? rcu_is_watching+0x13/0xc0 [ 64.900934][ T6355] ? fput+0x7c/0x100 [ 64.900951][ T6355] ? exit_to_user_mode_loop+0x166/0x700 [ 64.900973][ T6355] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 64.900997][ T6355] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.901017][ T6355] __do_fast_syscall_32+0x13a/0x8b0 [ 64.901037][ T6355] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.901058][ T6355] do_fast_syscall_32+0x32/0x70 [ 64.901078][ T6355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.901097][ T6355] RIP: 0023:0xf703efec [ 64.901114][ T6355] Code: Unable to access opcode bytes at 0xf703efc2. [ 64.901120][ T6355] RSP: 002b:00000000f53eb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 64.901135][ T6355] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080007fc0 [ 64.901144][ T6355] RDX: 000000000800001d RSI: 0000000000000000 RDI: 0000000000000000 [ 64.901153][ T6355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.901161][ T6355] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.901169][ T6355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.901187][ T6355] [ 64.942823][ T6229] veth0_vlan: entered promiscuous mode [ 64.947073][ T6229] veth1_vlan: entered promiscuous mode [ 64.965764][ T6229] veth0_macvtap: entered promiscuous mode [ 64.968561][ T6229] veth1_macvtap: entered promiscuous mode [ 64.976742][ T6229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.980685][ T6229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.243184][ T5809] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.243493][ T5809] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.243661][ T5809] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.243813][ T5809] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.292046][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.292096][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.310366][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.310422][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.499287][ T5740] Bluetooth: hci4: command tx timeout [ 65.803878][ T6372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.104'. [ 66.518219][ T6380] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 66.556365][ T44] kauditd_printk_skb: 105 callbacks suppressed [ 66.556444][ T44] audit: type=1326 audit(1788626503.009:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.0.128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 66.557259][ T44] audit: type=1326 audit(1788626503.009:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.0.128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 66.558188][ T44] audit: type=1326 audit(1788626503.009:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.0.128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 66.558222][ T44] audit: type=1326 audit(1788626503.009:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.0.128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 66.558431][ T44] audit: type=1326 audit(1788626503.009:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.0.128" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705efec code=0x7ffc0000 [ 66.559159][ T44] audit: type=1326 audit(1788626503.019:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.0.128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 66.559430][ T44] audit: type=1326 audit(1788626503.019:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.0.128" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705efec code=0x7ffc0000 [ 66.559636][ T44] audit: type=1326 audit(1788626503.019:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.0.128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 66.559810][ T44] audit: type=1326 audit(1788626503.019:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.0.128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 66.560043][ T44] audit: type=1326 audit(1788626503.019:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.0.128" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705efec code=0x7ffc0000 [ 66.720967][ T6387] loop5: detected capacity change from 0 to 7 [ 66.725992][ T6387] Dev loop5: unable to read RDB block 7 [ 66.726058][ T6387] loop5: AHDI p1 [ 66.726084][ T6387] loop5: partition table partially beyond EOD, truncated [ 67.158666][ T5974] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 67.308846][ T5974] usb 7-1: Using ep0 maxpacket: 32 [ 67.310802][ T5974] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 67.316484][ T5974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 67.321844][ T5974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 67.321894][ T5974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 67.334849][ T5974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.338180][ T5974] usb 7-1: Product: syz [ 67.343319][ T5974] usb 7-1: Manufacturer: syz [ 67.343365][ T5974] usb 7-1: SerialNumber: syz [ 67.350057][ T5974] usb 7-1: config 0 descriptor?? [ 67.365115][ T5974] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input8 [ 67.385064][ T5130] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 67.393510][ T5130] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 67.414595][ T5130] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 67.442514][ T5733] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 67.467672][ T5130] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 67.566802][ T6394] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 67.578673][ T5740] Bluetooth: hci4: command tx timeout [ 67.623127][ T5130] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 67.643343][ T5130] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 67.792965][ T5974] usb 7-1: USB disconnect, device number 3 [ 68.095481][ T6427] ip6t_rt: too many addresses specified [ 68.934450][ T6439] loop5: detected capacity change from 0 to 7 [ 68.947761][ T6439] Dev loop5: unable to read RDB block 7 [ 68.947845][ T6439] loop5: AHDI p1 [ 68.947881][ T6439] loop5: partition table partially beyond EOD, truncated [ 69.283249][ T6458] netlink: 'syz.3.144': attribute type 11 has an invalid length. [ 69.283975][ T6458] netlink: 'syz.3.144': attribute type 1 has an invalid length. [ 69.296212][ T6458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.383268][ T6465] syz.0.147 uses obsolete (PF_INET,SOCK_PACKET) [ 69.612379][ T6487] FAULT_INJECTION: forcing a failure. [ 69.612379][ T6487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.616723][ T6487] CPU: 3 UID: 0 PID: 6487 Comm: syz.2.149 Not tainted syzkaller #0 PREEMPT(full) [ 69.616748][ T6487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.616756][ T6487] Call Trace: [ 69.616761][ T6487] [ 69.616765][ T6487] dump_stack_lvl+0x100/0x190 [ 69.616784][ T6487] should_fail_ex.cold+0x5/0xa [ 69.616812][ T6487] _copy_from_user+0x2e/0xd0 [ 69.616825][ T6487] get_compat_msghdr+0xb3/0x480 [ 69.616846][ T6487] ? __pfx_get_compat_msghdr+0x10/0x10 [ 69.616867][ T6487] ___sys_sendmsg+0x1b6/0x1e0 [ 69.616885][ T6487] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.616908][ T6487] ? find_held_lock+0x2b/0x80 [ 69.616929][ T6487] __sys_sendmsg+0x160/0x210 [ 69.616943][ T6487] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.616959][ T6487] ? __pfx_ksys_write+0x10/0x10 [ 69.616973][ T6487] __do_fast_syscall_32+0x13a/0x8b0 [ 69.616989][ T6487] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.617016][ T6487] do_fast_syscall_32+0x32/0x70 [ 69.617032][ T6487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.617046][ T6487] RIP: 0023:0xf703efec [ 69.617057][ T6487] Code: Unable to access opcode bytes at 0xf703efc2. [ 69.617063][ T6487] RSP: 002b:00000000f53eb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 69.617076][ T6487] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000500 [ 69.617083][ T6487] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.617089][ T6487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.617095][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.617101][ T6487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.617114][ T6487] [ 69.659833][ T5740] Bluetooth: hci4: command tx timeout [ 69.718652][ T30] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 69.783032][ T6492] ip6t_rt: too many addresses specified [ 69.888688][ T30] usb 9-1: Using ep0 maxpacket: 32 [ 69.889270][ T30] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 69.890106][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 69.890121][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 69.890134][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 69.891777][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.891789][ T30] usb 9-1: Product: syz [ 69.891796][ T30] usb 9-1: Manufacturer: syz [ 69.891803][ T30] usb 9-1: SerialNumber: syz [ 69.893659][ T30] usb 9-1: config 0 descriptor?? [ 69.901297][ T30] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input9 [ 69.911174][ T5130] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 69.914546][ T5130] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 69.924164][ T5130] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 70.493484][ T6499] FAULT_INJECTION: forcing a failure. [ 70.493484][ T6499] name failslab, interval 1, probability 0, space 0, times 0 [ 70.493666][ T6499] CPU: 2 UID: 0 PID: 6499 Comm: syz.3.156 Not tainted syzkaller #0 PREEMPT(full) [ 70.493688][ T6499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.493699][ T6499] Call Trace: [ 70.493705][ T6499] [ 70.493713][ T6499] dump_stack_lvl+0x100/0x190 [ 70.493741][ T6499] should_fail_ex.cold+0x5/0xa [ 70.493765][ T6499] should_failslab+0xc2/0x120 [ 70.493789][ T6499] __kmalloc_noprof+0xfc/0x840 [ 70.493806][ T6499] ? rcu_is_watching+0x13/0xc0 [ 70.493825][ T6499] ? tomoyo_realpath_from_path+0xb6/0x690 [ 70.493858][ T6499] tomoyo_realpath_from_path+0xb6/0x690 [ 70.493901][ T6499] tomoyo_path_number_perm+0x23c/0x580 [ 70.493923][ T6499] ? tomoyo_path_number_perm+0x22e/0x580 [ 70.493948][ T6499] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 70.493973][ T6499] ? get_pid_task+0x106/0x250 [ 70.494000][ T6499] ? __lock_acquire+0x4c5/0x1ec0 [ 70.494035][ T6499] ? __fget_files+0x34/0x3d0 [ 70.494055][ T6499] ? find_held_lock+0x2b/0x80 [ 70.494073][ T6499] ? __fget_files+0x215/0x3d0 [ 70.494089][ T6499] ? hook_file_ioctl_common+0x140/0x440 [ 70.494113][ T6499] ? __fget_files+0x215/0x3d0 [ 70.494136][ T6499] ? __fget_files+0x21f/0x3d0 [ 70.494159][ T6499] security_file_ioctl_compat+0xd3/0x230 [ 70.494184][ T6499] __ia32_compat_sys_ioctl+0xc2/0x360 [ 70.494216][ T6499] __do_fast_syscall_32+0x13a/0x8b0 [ 70.494266][ T6499] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.494293][ T6499] do_fast_syscall_32+0x32/0x70 [ 70.494318][ T6499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.494340][ T6499] RIP: 0023:0xf70befec [ 70.494359][ T6499] Code: Unable to access opcode bytes at 0xf70befc2. [ 70.494367][ T6499] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 70.494384][ T6499] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005414 [ 70.494394][ T6499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.494405][ T6499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.494415][ T6499] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.494425][ T6499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.494448][ T6499] [ 70.494456][ T6499] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.500937][ T6468] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 70.539713][ T5130] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 70.552362][ T5974] usb 9-1: USB disconnect, device number 2 [ 70.688165][ T6507] netlink: 'syz.0.159': attribute type 11 has an invalid length. [ 70.695304][ T6507] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 70.734816][ T6507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.863259][ T25] cfg80211: failed to load regulatory.db [ 70.880515][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.880618][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.005153][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 71.008212][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 71.193918][ T6532] FAULT_INJECTION: forcing a failure. [ 71.193918][ T6532] name fail_futex, interval 1, probability 0, space 0, times 1 [ 71.193961][ T6532] CPU: 2 UID: 0 PID: 6532 Comm: syz.4.167 Not tainted syzkaller #0 PREEMPT(full) [ 71.193988][ T6532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.193997][ T6532] Call Trace: [ 71.194002][ T6532] [ 71.194008][ T6532] dump_stack_lvl+0x100/0x190 [ 71.194027][ T6532] should_fail_ex.cold+0x5/0xa [ 71.194044][ T6532] get_futex_key+0x1d0/0x14f0 [ 71.194068][ T6532] ? __pfx_get_futex_key+0x10/0x10 [ 71.194084][ T6532] ? __pfx___resched_curr+0x10/0x10 [ 71.194101][ T6532] ? wakeup_preempt_fair+0x4a0/0xdc0 [ 71.194124][ T6532] futex_wait_setup+0x91/0x540 [ 71.194141][ T6532] __futex_wait+0x19f/0x300 [ 71.194155][ T6532] ? __pfx___futex_wait+0x10/0x10 [ 71.194167][ T6532] ? __pfx_try_to_wake_up+0x10/0x10 [ 71.194183][ T6532] ? futex_hash+0x311/0x400 [ 71.194200][ T6532] ? __pfx_futex_wake_mark+0x10/0x10 [ 71.194215][ T6532] ? find_held_lock+0x2b/0x80 [ 71.194226][ T6532] ? futex_wake+0x4ea/0x5e0 [ 71.194265][ T6532] futex_wait+0xe6/0x370 [ 71.194283][ T6532] ? __pfx_futex_wait+0x10/0x10 [ 71.194303][ T6532] ? __css_rstat_updated+0x1ce/0x590 [ 71.194321][ T6532] ? __pfx___handle_mm_fault+0x10/0x10 [ 71.194340][ T6532] ? __pfx___css_rstat_updated+0x10/0x10 [ 71.194362][ T6532] do_futex+0x265/0x440 [ 71.194376][ T6532] ? __pfx_do_futex+0x10/0x10 [ 71.194388][ T6532] ? find_held_lock+0x2b/0x80 [ 71.194399][ T6532] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 71.194411][ T6532] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 71.194425][ T6532] __ia32_sys_futex_time32+0x2f4/0x470 [ 71.194439][ T6532] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 71.194457][ T6532] __do_fast_syscall_32+0x13a/0x8b0 [ 71.194476][ T6532] do_fast_syscall_32+0x32/0x70 [ 71.194491][ T6532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.194505][ T6532] RIP: 0023:0xf70aefec [ 71.194518][ T6532] Code: Unable to access opcode bytes at 0xf70aefc2. [ 71.194523][ T6532] RSP: 002b:00000000f549d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 71.194534][ T6532] RAX: ffffffffffffffda RBX: 00000000f74a4f88 RCX: 0000000000000080 [ 71.194541][ T6532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74a4f8c [ 71.194548][ T6532] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 71.194554][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.194560][ T6532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.194574][ T6532] [ 71.301023][ T6541] FAULT_INJECTION: forcing a failure. [ 71.301023][ T6541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.301074][ T6541] CPU: 0 UID: 0 PID: 6541 Comm: syz.3.170 Not tainted syzkaller #0 PREEMPT(full) [ 71.301097][ T6541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.301105][ T6541] Call Trace: [ 71.301110][ T6541] [ 71.301114][ T6541] dump_stack_lvl+0x100/0x190 [ 71.301132][ T6541] should_fail_ex.cold+0x5/0xa [ 71.301147][ T6541] _copy_from_user+0x2e/0xd0 [ 71.301160][ T6541] get_compat_msghdr+0xb3/0x480 [ 71.301177][ T6541] ? __pfx_get_compat_msghdr+0x10/0x10 [ 71.301198][ T6541] ___sys_sendmsg+0x1b6/0x1e0 [ 71.301216][ T6541] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.301239][ T6541] ? find_held_lock+0x2b/0x80 [ 71.301268][ T6541] __sys_sendmsg+0x160/0x210 [ 71.301287][ T6541] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.301311][ T6541] ? __pfx_ksys_write+0x10/0x10 [ 71.301343][ T6541] __do_fast_syscall_32+0x13a/0x8b0 [ 71.301367][ T6541] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.301382][ T6541] do_fast_syscall_32+0x32/0x70 [ 71.301397][ T6541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.301411][ T6541] RIP: 0023:0xf70befec [ 71.301424][ T6541] Code: Unable to access opcode bytes at 0xf70befc2. [ 71.301429][ T6541] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 71.301440][ T6541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000ac0 [ 71.301446][ T6541] RDX: 000000000400905c RSI: 0000000000000000 RDI: 0000000000000000 [ 71.301453][ T6541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.301459][ T6541] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.301465][ T6541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.301478][ T6541] [ 71.325160][ T6543] ip6t_rt: too many addresses specified [ 71.377842][ T6545] loop5: detected capacity change from 0 to 7 [ 71.382586][ T6545] Dev loop5: unable to read RDB block 7 [ 71.382642][ T6545] loop5: AHDI p1 [ 71.383552][ T6545] loop5: partition table partially beyond EOD, truncated [ 72.089596][ T6552] netlink: 'syz.2.172': attribute type 11 has an invalid length. [ 72.090777][ T6552] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 72.104122][ T6552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.328262][ T44] kauditd_printk_skb: 56 callbacks suppressed [ 72.328332][ T44] audit: type=1326 audit(1788626508.779:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 72.328389][ T44] audit: type=1326 audit(1788626508.779:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 72.331145][ T44] audit: type=1326 audit(1788626508.779:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 72.331184][ T44] audit: type=1326 audit(1788626508.789:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 72.331217][ T44] audit: type=1326 audit(1788626508.789:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.178" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703efec code=0x7ffc0000 [ 72.331249][ T44] audit: type=1326 audit(1788626508.789:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 72.331287][ T44] audit: type=1326 audit(1788626508.789:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 72.331320][ T44] audit: type=1326 audit(1788626508.789:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 72.331353][ T44] audit: type=1326 audit(1788626508.789:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 72.331385][ T44] audit: type=1326 audit(1788626508.789:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.178" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703efec code=0x7ffc0000 [ 72.524329][ T6577] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 72.599466][ T6586] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.644089][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 72.704746][ T6594] FAULT_INJECTION: forcing a failure. [ 72.704746][ T6594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.704788][ T6594] CPU: 2 UID: 0 PID: 6594 Comm: syz.2.187 Not tainted syzkaller #0 PREEMPT(full) [ 72.704818][ T6594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.704826][ T6594] Call Trace: [ 72.704831][ T6594] [ 72.704835][ T6594] dump_stack_lvl+0x100/0x190 [ 72.704909][ T6594] should_fail_ex.cold+0x5/0xa [ 72.704925][ T6594] _copy_from_user+0x2e/0xd0 [ 72.704959][ T6594] get_compat_msghdr+0xb3/0x480 [ 72.704996][ T6594] ? __pfx_get_compat_msghdr+0x10/0x10 [ 72.705018][ T6594] ___sys_sendmsg+0x1b6/0x1e0 [ 72.705036][ T6594] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.705060][ T6594] ? find_held_lock+0x2b/0x80 [ 72.705081][ T6594] __sys_sendmsg+0x160/0x210 [ 72.705095][ T6594] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.705113][ T6594] ? __pfx_ksys_write+0x10/0x10 [ 72.705127][ T6594] __do_fast_syscall_32+0x13a/0x8b0 [ 72.705162][ T6594] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.705178][ T6594] do_fast_syscall_32+0x32/0x70 [ 72.705194][ T6594] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.705208][ T6594] RIP: 0023:0xf703efec [ 72.705221][ T6594] Code: Unable to access opcode bytes at 0xf703efc2. [ 72.705226][ T6594] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 72.705238][ T6594] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 72.705244][ T6594] RDX: 0000000022044804 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.705251][ T6594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.705257][ T6594] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.705264][ T6594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.705278][ T6594] [ 72.807250][ T6601] FAULT_INJECTION: forcing a failure. [ 72.807250][ T6601] name failslab, interval 1, probability 0, space 0, times 0 [ 72.807306][ T6601] CPU: 2 UID: 0 PID: 6601 Comm: syz.4.191 Not tainted syzkaller #0 PREEMPT(full) [ 72.807330][ T6601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.807337][ T6601] Call Trace: [ 72.807341][ T6601] [ 72.807346][ T6601] dump_stack_lvl+0x100/0x190 [ 72.807364][ T6601] should_fail_ex.cold+0x5/0xa [ 72.807379][ T6601] should_failslab+0xc2/0x120 [ 72.807393][ T6601] kmem_cache_alloc_noprof+0x92/0x6a0 [ 72.807405][ T6601] ? find_held_lock+0x2b/0x80 [ 72.807416][ T6601] ? create_new_namespaces+0x30/0xac0 [ 72.807435][ T6601] create_new_namespaces+0x30/0xac0 [ 72.807450][ T6601] ? bpf_lsm_capable+0x9/0x10 [ 72.807465][ T6601] ? security_capable+0x80/0x260 [ 72.807479][ T6601] unshare_nsproxy_namespaces+0xf2/0x220 [ 72.807496][ T6601] ksys_unshare+0x4a2/0xa70 [ 72.807507][ T6601] ? __pfx_ksys_unshare+0x10/0x10 [ 72.807517][ T6601] ? fput+0x7c/0x100 [ 72.807530][ T6601] ? ksys_write+0x1ac/0x250 [ 72.807540][ T6601] ? __pfx_ksys_write+0x10/0x10 [ 72.807553][ T6601] __ia32_sys_unshare+0x30/0x40 [ 72.807563][ T6601] __do_fast_syscall_32+0x13a/0x8b0 [ 72.807578][ T6601] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.807594][ T6601] do_fast_syscall_32+0x32/0x70 [ 72.807609][ T6601] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.807622][ T6601] RIP: 0023:0xf70aefec [ 72.807645][ T6601] Code: Unable to access opcode bytes at 0xf70aefc2. [ 72.807651][ T6601] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 72.807661][ T6601] RAX: ffffffffffffffda RBX: 0000000042000000 RCX: 0000000000000000 [ 72.807668][ T6601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.807674][ T6601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.807680][ T6601] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.807686][ T6601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.807700][ T6601] [ 72.840035][ T6602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 72.917836][ T6608] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 72.917931][ T6608] overlayfs: overlapping lowerdir path [ 72.926419][ T6607] overlayfs: overlapping lowerdir path [ 73.358045][ T6638] overlay: ./file0 is not a directory [ 73.404354][ T6642] ip6t_rt: too many addresses specified [ 73.447109][ T6644] ip6t_rt: too many addresses specified [ 74.108706][ T5974] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 74.259331][ T5974] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 74.260465][ T5974] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.260501][ T5974] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.260517][ T5974] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.260534][ T5974] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.260559][ T5974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.264596][ T5974] spcp8x5 8-1:1.0: required endpoints missing [ 74.674936][ T6672] jffs2: notice: (6672) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 74.776328][ T6677] jffs2: notice: (6677) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 75.086717][ T6695] jffs2: notice: (6695) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 75.248286][ T6701] MTD: Couldn't look up '/dev/rnullb0': -2 [ 75.455053][ T6710] binder: 6703:6710 ioctl c0306201 0 returned -14 [ 75.463318][ T6707] binder: 6703:6707 ioctl c0306201 0 returned -14 [ 75.549113][ T6715] FAULT_INJECTION: forcing a failure. [ 75.549113][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 75.549169][ T6715] CPU: 2 UID: 0 PID: 6715 Comm: syz.4.215 Not tainted syzkaller #0 PREEMPT(full) [ 75.549192][ T6715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.549200][ T6715] Call Trace: [ 75.549205][ T6715] [ 75.549209][ T6715] dump_stack_lvl+0x100/0x190 [ 75.549227][ T6715] should_fail_ex.cold+0x5/0xa [ 75.549241][ T6715] should_failslab+0xc2/0x120 [ 75.549256][ T6715] kmem_cache_alloc_noprof+0x92/0x6a0 [ 75.549267][ T6715] ? find_held_lock+0x2b/0x80 [ 75.549278][ T6715] ? create_new_namespaces+0x30/0xac0 [ 75.549297][ T6715] create_new_namespaces+0x30/0xac0 [ 75.549312][ T6715] ? bpf_lsm_capable+0x9/0x10 [ 75.549327][ T6715] ? security_capable+0x80/0x260 [ 75.549343][ T6715] unshare_nsproxy_namespaces+0xf2/0x220 [ 75.549361][ T6715] ksys_unshare+0x4a2/0xa70 [ 75.549372][ T6715] ? __pfx_ksys_unshare+0x10/0x10 [ 75.549383][ T6715] ? fput+0x7c/0x100 [ 75.549395][ T6715] ? ksys_write+0x1ac/0x250 [ 75.549406][ T6715] ? __pfx_ksys_write+0x10/0x10 [ 75.549418][ T6715] __ia32_sys_unshare+0x30/0x40 [ 75.549428][ T6715] __do_fast_syscall_32+0x13a/0x8b0 [ 75.549444][ T6715] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.549459][ T6715] do_fast_syscall_32+0x32/0x70 [ 75.549474][ T6715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.549488][ T6715] RIP: 0023:0xf70aefec [ 75.549501][ T6715] Code: Unable to access opcode bytes at 0xf70aefc2. [ 75.549506][ T6715] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 75.549517][ T6715] RAX: ffffffffffffffda RBX: 0000000042000000 RCX: 0000000000000000 [ 75.549523][ T6715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.549529][ T6715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.549535][ T6715] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 75.549541][ T6715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.549555][ T6715] [ 76.120608][ T6736] FAULT_INJECTION: forcing a failure. [ 76.120608][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 76.120653][ T6736] CPU: 3 UID: 0 PID: 6736 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT(full) [ 76.120677][ T6736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.120686][ T6736] Call Trace: [ 76.120691][ T6736] [ 76.120695][ T6736] dump_stack_lvl+0x100/0x190 [ 76.120713][ T6736] should_fail_ex.cold+0x5/0xa [ 76.120728][ T6736] should_failslab+0xc2/0x120 [ 76.120744][ T6736] __kmalloc_noprof+0xfc/0x840 [ 76.120757][ T6736] ? lsm_blob_alloc+0x68/0x90 [ 76.120770][ T6736] lsm_blob_alloc+0x68/0x90 [ 76.120781][ T6736] security_sk_alloc+0x2d/0x290 [ 76.120795][ T6736] sk_prot_alloc+0x1d1/0x2a0 [ 76.120812][ T6736] sk_alloc+0x36/0xe80 [ 76.120826][ T6736] inet6_create+0x385/0x12b0 [ 76.120846][ T6736] ? inet6_create+0x7f/0x12b0 [ 76.120864][ T6736] __sock_create+0x339/0x860 [ 76.120887][ T6736] __sys_socket+0x14d/0x260 [ 76.120896][ T6736] ? fput+0x7c/0x100 [ 76.120909][ T6736] ? __pfx___sys_socket+0x10/0x10 [ 76.120918][ T6736] ? ksys_write+0x1ac/0x250 [ 76.120929][ T6736] ? __pfx_ksys_write+0x10/0x10 [ 76.120942][ T6736] __ia32_sys_socket+0x72/0xb0 [ 76.120952][ T6736] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.120967][ T6736] __do_fast_syscall_32+0x13a/0x8b0 [ 76.120982][ T6736] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.120997][ T6736] do_fast_syscall_32+0x32/0x70 [ 76.121013][ T6736] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.121027][ T6736] RIP: 0023:0xf705efec [ 76.121043][ T6736] Code: Unable to access opcode bytes at 0xf705efc2. [ 76.121051][ T6736] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 76.121068][ T6736] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 76.121079][ T6736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.121091][ T6736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.121102][ T6736] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.121111][ T6736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.121137][ T6736] [ 76.603634][ T6767] jffs2: notice: (6767) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 76.840157][ T6778] FAULT_INJECTION: forcing a failure. [ 76.840157][ T6778] name failslab, interval 1, probability 0, space 0, times 0 [ 76.840251][ T6778] CPU: 2 UID: 0 PID: 6778 Comm: syz.2.233 Not tainted syzkaller #0 PREEMPT(full) [ 76.840276][ T6778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.840288][ T6778] Call Trace: [ 76.840296][ T6778] [ 76.840305][ T6778] dump_stack_lvl+0x100/0x190 [ 76.840338][ T6778] should_fail_ex.cold+0x5/0xa [ 76.840374][ T6778] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 76.840397][ T6778] should_failslab+0xc2/0x120 [ 76.840424][ T6778] __kmalloc_cache_noprof+0x91/0x6d0 [ 76.840457][ T6778] ? p9_fid_create+0x45/0x460 [ 76.840494][ T6778] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 76.840516][ T6778] p9_fid_create+0x45/0x460 [ 76.840546][ T6778] p9_client_xattrwalk+0x47/0x2a0 [ 76.840570][ T6778] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 76.840591][ T6778] v9fs_fid_xattr_get+0x10f/0x300 [ 76.840611][ T6778] ? __pfx_v9fs_fid_xattr_get+0x10/0x10 [ 76.840643][ T6778] ? v9fs_fid_lookup+0xec/0xf50 [ 76.840663][ T6778] ? __lock_acquire+0x4c5/0x1ec0 [ 76.840694][ T6778] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 76.840713][ T6778] v9fs_xattr_handler_get+0x6b/0x120 [ 76.840739][ T6778] __vfs_getxattr+0x13d/0x1a0 [ 76.840762][ T6778] ? __pfx___vfs_getxattr+0x10/0x10 [ 76.840792][ T6778] cap_inode_need_killpriv+0x40/0x60 [ 76.840816][ T6778] security_inode_need_killpriv+0x87/0x1e0 [ 76.840840][ T6778] file_remove_privs_flags+0x2b8/0x590 [ 76.840863][ T6778] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 76.840885][ T6778] ? generic_write_checks+0x321/0x490 [ 76.840913][ T6778] ? __pfx_generic_write_checks+0x10/0x10 [ 76.840945][ T6778] netfs_unbuffered_write_iter+0x1c9/0x720 [ 76.840964][ T6778] ? __lock_acquire+0x4c5/0x1ec0 [ 76.840990][ T6778] v9fs_file_write_iter+0xbf/0x100 [ 76.841018][ T6778] do_iter_readv_writev+0x6f7/0x930 [ 76.841045][ T6778] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 76.841073][ T6778] ? lock_acquire+0x1d1/0x380 [ 76.841105][ T6778] vfs_writev+0x360/0xdd0 [ 76.841136][ T6778] ? __pfx_vfs_writev+0x10/0x10 [ 76.841167][ T6778] ? lock_acquire+0x1d1/0x380 [ 76.841189][ T6778] ? __fget_files+0x34/0x3d0 [ 76.841217][ T6778] ? __fget_files+0x21f/0x3d0 [ 76.841255][ T6778] ? do_pwritev+0x1ac/0x270 [ 76.841272][ T6778] do_pwritev+0x1ac/0x270 [ 76.841289][ T6778] ? __pfx_do_pwritev+0x10/0x10 [ 76.841307][ T6778] ? fput+0x7c/0x100 [ 76.841332][ T6778] __ia32_compat_sys_pwritev2+0x121/0x1b0 [ 76.841363][ T6778] __do_fast_syscall_32+0x13a/0x8b0 [ 76.841387][ T6778] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.841412][ T6778] do_fast_syscall_32+0x32/0x70 [ 76.841437][ T6778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.841458][ T6778] RIP: 0023:0xf703efec [ 76.841478][ T6778] Code: Unable to access opcode bytes at 0xf703efc2. [ 76.841487][ T6778] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 000000000000017b [ 76.841504][ T6778] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000980 [ 76.841515][ T6778] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 000000000000000a [ 76.841525][ T6778] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 76.841535][ T6778] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.841545][ T6778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.841568][ T6778] [ 76.892979][ T9] usb 8-1: USB disconnect, device number 4 [ 77.259310][ T6801] ip6t_rt: too many addresses specified [ 77.309624][ T6795] loop5: detected capacity change from 0 to 6 [ 77.323395][ T6795] Dev loop5: unable to read RDB block 6 [ 77.323448][ T6795] loop5: unable to read partition table [ 77.323564][ T6795] loop5: partition table beyond EOD, truncated [ 77.323605][ T6795] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 77.401011][ T6805] ip6t_rt: too many addresses specified [ 77.900048][ T5804] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.059045][ T5804] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 78.059930][ T5804] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 78.059957][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.059987][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.060006][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 78.060861][ T5804] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 78.060876][ T5804] usb 5-1: Manufacturer: syz [ 78.062319][ T5804] usb 5-1: config 0 descriptor?? [ 78.397756][ T6818] program syz.4.243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.413535][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 78.413677][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 78.413757][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 78.413831][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 78.413925][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 78.414001][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 78.414073][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 78.414146][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 78.414247][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 78.414323][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 78.505944][ T6808] input: syz1 as /devices/virtual/input/input10 [ 78.518183][ T6828] netlink: 'syz.3.242': attribute type 10 has an invalid length. [ 78.559415][ T6828] team0 (unregistering): Port device team_slave_0 removed [ 78.610061][ T6828] team0 (unregistering): Port device team_slave_1 removed [ 78.831085][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.831432][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.831872][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.832045][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.833016][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.833197][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.833612][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.833779][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.836482][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.836658][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.078660][ T5810] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 79.181620][ T5804] usbhid 5-1:0.0: can't add hid device: -71 [ 79.184758][ T5804] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 79.194748][ T5804] usb 5-1: USB disconnect, device number 3 [ 79.218611][ T5810] usb 7-1: device descriptor read/64, error -71 [ 79.376298][ T6851] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 79.469017][ T5810] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 79.599142][ T5810] usb 7-1: device descriptor read/64, error -71 [ 79.717602][ T5810] usb usb7-port1: attempt power cycle [ 79.745358][ T6860] FAULT_INJECTION: forcing a failure. [ 79.745358][ T6860] name failslab, interval 1, probability 0, space 0, times 0 [ 79.750010][ T6860] CPU: 3 UID: 0 PID: 6860 Comm: syz.4.254 Not tainted syzkaller #0 PREEMPT(full) [ 79.750030][ T6860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.750036][ T6860] Call Trace: [ 79.750041][ T6860] [ 79.750047][ T6860] dump_stack_lvl+0x100/0x190 [ 79.750069][ T6860] should_fail_ex.cold+0x5/0xa [ 79.750086][ T6860] should_failslab+0xc2/0x120 [ 79.750101][ T6860] __kmalloc_cache_noprof+0x91/0x6d0 [ 79.750118][ T6860] ? __pfx___mutex_lock+0x10/0x10 [ 79.750134][ T6860] ? ceph_get_tree+0x188/0x1fd0 [ 79.750150][ T6860] ceph_get_tree+0x188/0x1fd0 [ 79.750162][ T6860] ? bpf_lsm_capable+0x9/0x10 [ 79.750178][ T6860] ? security_capable+0x80/0x260 [ 79.750192][ T6860] vfs_get_tree+0x92/0x320 [ 79.750236][ T6860] vfs_cmd_create+0xd7/0x2a0 [ 79.750254][ T6860] __do_sys_fsconfig+0x55a/0xcb0 [ 79.750271][ T6860] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 79.750289][ T6860] ? ksys_write+0x1ac/0x250 [ 79.750299][ T6860] ? __pfx_ksys_write+0x10/0x10 [ 79.750313][ T6860] __do_fast_syscall_32+0x13a/0x8b0 [ 79.750328][ T6860] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.750344][ T6860] do_fast_syscall_32+0x32/0x70 [ 79.750359][ T6860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.750374][ T6860] RIP: 0023:0xf70aefec [ 79.750389][ T6860] Code: Unable to access opcode bytes at 0xf70aefc2. [ 79.750394][ T6860] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 79.750407][ T6860] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 79.750414][ T6860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.750422][ T6860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.750428][ T6860] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 79.750434][ T6860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.750448][ T6860] [ 79.876079][ T35] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 80.059039][ T5810] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 80.080480][ T5810] usb 7-1: device descriptor read/8, error -71 [ 80.140671][ T35] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 80.328672][ T5810] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 80.349064][ T5810] usb 7-1: device descriptor read/8, error -71 [ 80.459719][ T5810] usb usb7-port1: unable to enumerate USB device [ 80.543462][ T44] kauditd_printk_skb: 33 callbacks suppressed [ 80.543524][ T44] audit: type=1326 audit(1788626516.999:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz.3.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 80.543567][ T44] audit: type=1326 audit(1788626516.999:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz.3.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 80.545336][ T44] audit: type=1326 audit(1788626516.999:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz.3.258" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70befec code=0x7ffc0000 [ 80.545369][ T44] audit: type=1326 audit(1788626516.999:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz.3.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 80.545390][ T44] audit: type=1326 audit(1788626516.999:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz.3.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 80.545555][ T44] audit: type=1326 audit(1788626516.999:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz.3.258" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70befec code=0x7ffc0000 [ 80.546280][ T44] audit: type=1326 audit(1788626516.999:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz.3.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 80.546312][ T44] audit: type=1326 audit(1788626516.999:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz.3.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 80.547107][ T44] audit: type=1326 audit(1788626516.999:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz.3.258" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f75ab code=0x7ffc0000 [ 80.547429][ T44] audit: type=1326 audit(1788626516.999:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6877 comm="syz.3.258" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70befec code=0x7ffc0000 [ 80.638597][ T30] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 80.649094][ T5810] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 80.682934][ T6866] ceph: No mds server is up or the cluster is laggy [ 80.748136][ T6882] binder: BINDER_SET_CONTEXT_MGR already set [ 80.748182][ T6882] binder: 6881:6882 ioctl 4018620d 80000140 returned -16 [ 80.778853][ T30] usb 7-1: device descriptor read/64, error -71 [ 80.781748][ T5810] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 80.908676][ T5810] usb 8-1: device descriptor read/64, error -71 [ 81.020905][ T30] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 81.069567][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 81.148619][ T30] usb 7-1: device descriptor read/64, error -71 [ 81.148922][ T5810] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 81.219541][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 81.220397][ T9] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 81.220423][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.220435][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.220446][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 81.221188][ T9] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 81.221199][ T9] usb 9-1: Manufacturer: syz [ 81.222610][ T9] usb 9-1: config 0 descriptor?? [ 81.258829][ T30] usb usb7-port1: attempt power cycle [ 81.278823][ T5810] usb 8-1: device descriptor read/64, error -71 [ 81.278923][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.389173][ T5810] usb usb8-port1: attempt power cycle [ 81.429419][ T35] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 81.430476][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.430514][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.430534][ T35] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 81.430554][ T35] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.430591][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.436236][ T35] spcp8x5 5-1:1.0: required endpoints missing [ 81.598637][ T30] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 81.619732][ T30] usb 7-1: device descriptor read/8, error -71 [ 81.664988][ T6887] input: syz1 as /devices/virtual/input/input11 [ 81.725623][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 81.725692][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 81.728628][ T5810] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 81.731513][ T9] usb 9-1: USB disconnect, device number 3 [ 81.749448][ T5810] usb 8-1: device descriptor read/8, error -71 [ 81.868648][ T30] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 81.988648][ T5810] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 81.993338][ T6904] openvswitch: netlink: nsh attribute has 16 unknown bytes. [ 82.030318][ T6904] Console: switching to colour dummy device 80x25 [ 82.041990][ T5810] usb 8-1: device descriptor read/8, error -71 [ 82.078653][ T30] usb 7-1: device not accepting address 11, error -71 [ 82.082414][ T30] usb usb7-port1: unable to enumerate USB device [ 82.148927][ T5810] usb usb8-port1: unable to enumerate USB device [ 82.719309][ T6912] ip6t_rt: too many addresses specified [ 82.988284][ T6922] FAULT_INJECTION: forcing a failure. [ 82.988284][ T6922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.988319][ T6922] CPU: 2 UID: 0 PID: 6922 Comm: syz.4.273 Not tainted syzkaller #0 PREEMPT(full) [ 82.988343][ T6922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.988351][ T6922] Call Trace: [ 82.988355][ T6922] [ 82.988360][ T6922] dump_stack_lvl+0x100/0x190 [ 82.988378][ T6922] should_fail_ex.cold+0x5/0xa [ 82.988395][ T6922] _copy_from_user+0x2e/0xd0 [ 82.988408][ T6922] get_compat_msghdr+0xb3/0x480 [ 82.988424][ T6922] ? __pfx_get_compat_msghdr+0x10/0x10 [ 82.988445][ T6922] ___sys_sendmsg+0x1b6/0x1e0 [ 82.988466][ T6922] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.988490][ T6922] ? find_held_lock+0x2b/0x80 [ 82.988521][ T6922] __sys_sendmsg+0x160/0x210 [ 82.988537][ T6922] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.988554][ T6922] ? __pfx_ksys_write+0x10/0x10 [ 82.988568][ T6922] __do_fast_syscall_32+0x13a/0x8b0 [ 82.988585][ T6922] ? lockdep_hardirqs_on+0x7d/0x110 [ 82.988600][ T6922] do_fast_syscall_32+0x32/0x70 [ 82.988616][ T6922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.988630][ T6922] RIP: 0023:0xf70aefec [ 82.988642][ T6922] Code: Unable to access opcode bytes at 0xf70aefc2. [ 82.988648][ T6922] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 82.988658][ T6922] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000900 [ 82.988665][ T6922] RDX: 0000000020000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.988672][ T6922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.988678][ T6922] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.988684][ T6922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.988698][ T6922] [ 83.266203][ T6925] libceph: Failed to parse secret: -22 [ 83.655776][ T6927] FAULT_INJECTION: forcing a failure. [ 83.655776][ T6927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 83.655850][ T6927] CPU: 2 UID: 0 PID: 6927 Comm: syz.3.275 Not tainted syzkaller #0 PREEMPT(full) [ 83.655871][ T6927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.655895][ T6927] Call Trace: [ 83.655902][ T6927] [ 83.655909][ T6927] dump_stack_lvl+0x100/0x190 [ 83.655938][ T6927] should_fail_ex.cold+0x5/0xa [ 83.655955][ T6927] ? prepare_alloc_pages+0x16d/0x5b0 [ 83.655975][ T6927] should_fail_alloc_page+0xeb/0x140 [ 83.655990][ T6927] prepare_alloc_pages+0x1f0/0x5b0 [ 83.656007][ T6927] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 83.656026][ T6927] ? __lock_acquire+0x4c5/0x1ec0 [ 83.656044][ T6927] ? __lock_acquire+0x4c5/0x1ec0 [ 83.656059][ T6927] ? lock_acquire+0x1d1/0x380 [ 83.656074][ T6927] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 83.656094][ T6927] ? lock_acquire+0x1d1/0x380 [ 83.656107][ T6927] ? is_bpf_text_address+0x25/0x1a0 [ 83.656123][ T6927] ? find_held_lock+0x2b/0x80 [ 83.656133][ T6927] ? is_bpf_text_address+0x8a/0x1a0 [ 83.656147][ T6927] ? is_bpf_text_address+0x8a/0x1a0 [ 83.656161][ T6927] ? bpf_ksym_find+0x124/0x1c0 [ 83.656172][ T6927] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 83.656188][ T6927] ? kernel_text_address+0x8d/0x100 [ 83.656202][ T6927] ? __kernel_text_address+0xd/0x30 [ 83.656217][ T6927] ? __lock_acquire+0x4c5/0x1ec0 [ 83.656230][ T6927] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.656246][ T6927] ? policy_nodemask+0xed/0x4f0 [ 83.656261][ T6927] alloc_pages_mpol+0x201/0x550 [ 83.656276][ T6927] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 83.656290][ T6927] ? _kstrtoull+0x144/0x200 [ 83.656305][ T6927] ? __pfx__kstrtoull+0x10/0x10 [ 83.656323][ T6927] folio_alloc_mpol_noprof+0x36/0x260 [ 83.656340][ T6927] vma_alloc_folio_noprof+0xed/0x1d0 [ 83.656356][ T6927] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 83.656377][ T6927] do_anonymous_page+0xac9/0x2050 [ 83.656397][ T6927] ? __pfx_do_anonymous_page+0x10/0x10 [ 83.656412][ T6927] ? rcu_read_unlock+0x2d/0xb0 [ 83.656427][ T6927] ? rcu_read_unlock+0x2d/0xb0 [ 83.656442][ T6927] ? __pte_offset_map+0x179/0x310 [ 83.656456][ T6927] __handle_mm_fault+0x1ff3/0x2f60 [ 83.656474][ T6927] ? lock_vma_under_rcu+0x11d/0x590 [ 83.656489][ T6927] ? __pfx___handle_mm_fault+0x10/0x10 [ 83.656507][ T6927] ? lock_vma_under_rcu+0x17c/0x590 [ 83.656530][ T6927] handle_mm_fault+0x363/0xa20 [ 83.656553][ T6927] do_user_addr_fault+0x59c/0x12f0 [ 83.656578][ T6927] exc_page_fault+0x6f/0xd0 [ 83.656603][ T6927] asm_exc_page_fault+0x26/0x30 [ 83.656622][ T6927] RIP: 0023:0xf70f2505 [ 83.656636][ T6927] Code: ff 0f b7 44 16 fe 66 89 44 14 1e e9 b5 fe ff ff 2e 8d 74 26 00 55 e8 cc bf 01 00 81 c5 fe 5a 39 00 57 56 53 81 ec 94 20 00 00 <89> 44 24 24 8b 84 24 a8 20 00 00 8b b4 24 b0 20 00 00 89 44 24 14 [ 83.656655][ T6927] RSP: 002b:00000000f54ab448 EFLAGS: 00010286 [ 83.656667][ T6927] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000024 [ 83.656674][ T6927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f70e1350 [ 83.656680][ T6927] RBP: 00000000f7487ff4 R08: 0000000000000000 R09: 0000000000000000 [ 83.656686][ T6927] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 83.656693][ T6927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.656707][ T6927] [ 83.656851][ T6927] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 84.038813][ T5810] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 84.078193][ T43] usb 5-1: USB disconnect, device number 4 [ 84.199288][ T5810] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 84.203381][ T5810] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 84.203457][ T5810] usb 8-1: config 1 has no interface number 0 [ 84.210828][ T5810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.210863][ T5810] usb 8-1: Product: syz [ 84.210909][ T5810] usb 8-1: Manufacturer: syz [ 84.210931][ T5810] usb 8-1: SerialNumber: syz [ 84.242706][ T5810] usb 8-1: cannot find UAC_HEADER [ 84.314747][ T5810] snd-usb-audio 8-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 84.400865][ T5913] udevd[5913]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.435911][ T5810] usb 8-1: USB disconnect, device number 9 [ 84.635255][ T6953] __nla_validate_parse: 62 callbacks suppressed [ 84.637661][ T6953] netlink: 56 bytes leftover after parsing attributes in process `syz.4.285'. [ 84.828606][ T5804] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 84.918642][ T5810] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 84.991086][ T5804] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 84.995252][ T5804] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 84.998888][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.998905][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.998918][ T5804] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 85.010333][ T5804] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 85.010374][ T5804] usb 7-1: Manufacturer: syz [ 85.011749][ T5804] usb 7-1: config 0 descriptor?? [ 85.069261][ T5810] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 85.070193][ T5810] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 85.070260][ T5810] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.070274][ T5810] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.070285][ T5810] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 85.071082][ T5810] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 85.071094][ T5810] usb 9-1: Manufacturer: syz [ 85.072823][ T5810] usb 9-1: config 0 descriptor?? [ 85.228785][ T5974] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 85.379156][ T5974] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.380012][ T5974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.380026][ T5974] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.380045][ T5974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.381255][ T5974] usb 8-1: config 0 descriptor?? [ 85.383567][ T5974] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 85.436212][ T6950] input: syz1 as /devices/virtual/input/input12 [ 85.441711][ T6950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.284'. [ 85.466922][ T5804] usbhid 7-1:0.0: can't add hid device: -71 [ 85.467057][ T5804] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 85.470561][ T5804] usb 7-1: USB disconnect, device number 12 [ 85.507441][ T6955] input: syz1 as /devices/virtual/input/input13 [ 85.514680][ T6955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.286'. [ 85.563184][ T5810] usbhid 9-1:0.0: can't add hid device: -71 [ 85.563272][ T5810] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 85.565602][ T5810] usb 9-1: USB disconnect, device number 4 [ 86.121018][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.297'. [ 86.121486][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.297'. [ 86.212584][ T6987] Invalid ELF header magic: != ELF [ 86.292467][ T6995] FAULT_INJECTION: forcing a failure. [ 86.292467][ T6995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.292537][ T6995] CPU: 2 UID: 0 PID: 6995 Comm: syz.3.287 Not tainted syzkaller #0 PREEMPT(full) [ 86.292569][ T6995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.292580][ T6995] Call Trace: [ 86.292587][ T6995] [ 86.292594][ T6995] dump_stack_lvl+0x100/0x190 [ 86.292620][ T6995] should_fail_ex.cold+0x5/0xa [ 86.292642][ T6995] _copy_to_user+0x32/0xd0 [ 86.292662][ T6995] simple_read_from_buffer+0xcb/0x170 [ 86.292682][ T6995] proc_fail_nth_read+0x1af/0x230 [ 86.292710][ T6995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.292855][ T6995] ? rw_verify_area+0xce/0x6d0 [ 86.292885][ T6995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.292910][ T6995] vfs_read+0x1e4/0xb40 [ 86.292927][ T6995] ? lock_acquire+0x1d1/0x380 [ 86.292948][ T6995] ? __fget_files+0x34/0x3d0 [ 86.292965][ T6995] ? __pfx_vfs_read+0x10/0x10 [ 86.292979][ T6995] ? find_held_lock+0x2b/0x80 [ 86.292995][ T6995] ? __fget_files+0x215/0x3d0 [ 86.293015][ T6995] ? __fget_files+0x21f/0x3d0 [ 86.293038][ T6995] ksys_read+0x12a/0x250 [ 86.293054][ T6995] ? __pfx_ksys_read+0x10/0x10 [ 86.293075][ T6995] do_int80_emulation+0x166/0x650 [ 86.293101][ T6995] asm_int80_emulation+0x1a/0x20 [ 86.293117][ T6995] RIP: 0023:0xf71f75ab [ 86.293131][ T6995] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 86.293146][ T6995] RSP: 002b:00000000f546b4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 86.293161][ T6995] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546b5d0 [ 86.293171][ T6995] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 86.293180][ T6995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.293189][ T6995] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.293198][ T6995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.293220][ T6995] [ 86.296859][ T6997] ip6t_rt: too many addresses specified [ 86.310902][ T5974] usb 8-1: USB disconnect, device number 10 [ 86.372752][ T6999] netlink: 56 bytes leftover after parsing attributes in process `syz.3.301'. [ 86.420414][ T7003] FAULT_INJECTION: forcing a failure. [ 86.420414][ T7003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.420465][ T7003] CPU: 1 UID: 0 PID: 7003 Comm: syz.4.303 Not tainted syzkaller #0 PREEMPT(full) [ 86.420488][ T7003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.420497][ T7003] Call Trace: [ 86.420502][ T7003] [ 86.420506][ T7003] dump_stack_lvl+0x100/0x190 [ 86.420525][ T7003] should_fail_ex.cold+0x5/0xa [ 86.420540][ T7003] _copy_from_user+0x2e/0xd0 [ 86.420552][ T7003] get_compat_msghdr+0xb3/0x480 [ 86.420569][ T7003] ? __pfx_get_compat_msghdr+0x10/0x10 [ 86.420587][ T7003] ? _kstrtoull+0x144/0x200 [ 86.420601][ T7003] ? __pfx__kstrtoull+0x10/0x10 [ 86.420632][ T7003] ___sys_sendmsg+0x1b6/0x1e0 [ 86.420650][ T7003] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.420667][ T7003] ? __lock_acquire+0x4c5/0x1ec0 [ 86.420687][ T7003] ? __fget_files+0x34/0x3d0 [ 86.420709][ T7003] __sys_sendmmsg+0x309/0x440 [ 86.420724][ T7003] ? __pfx___sys_sendmmsg+0x10/0x10 [ 86.420736][ T7003] ? find_held_lock+0x2b/0x80 [ 86.420751][ T7003] ? __mutex_unlock_slowpath+0x35d/0x930 [ 86.420780][ T7003] ? fput+0x7c/0x100 [ 86.420793][ T7003] ? ksys_write+0x1ac/0x250 [ 86.420806][ T7003] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 86.420822][ T7003] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.420836][ T7003] __do_fast_syscall_32+0x13a/0x8b0 [ 86.420852][ T7003] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.420867][ T7003] do_fast_syscall_32+0x32/0x70 [ 86.420883][ T7003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.420896][ T7003] RIP: 0023:0xf70aefec [ 86.420909][ T7003] Code: Unable to access opcode bytes at 0xf70aefc2. [ 86.420914][ T7003] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 86.420924][ T7003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001100 [ 86.420931][ T7003] RDX: 0000000000000003 RSI: 0000000004000001 RDI: 0000000000000000 [ 86.420937][ T7003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.420943][ T7003] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.420950][ T7003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.420964][ T7003] [ 86.513585][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.302'. [ 86.521528][ T7006] openvswitch: netlink: nsh attribute has 16 unknown bytes. [ 86.718769][ T30] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 86.761905][ T7010] ip6t_rt: too many addresses specified [ 86.921566][ T30] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 86.926582][ T30] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 86.930315][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.933864][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.933878][ T30] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 86.943143][ T30] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 86.946089][ T30] usb 9-1: Manufacturer: syz [ 86.954921][ T30] usb 9-1: config 0 descriptor?? [ 87.543040][ T7005] input: syz1 as /devices/virtual/input/input14 [ 87.626646][ T7005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.304'. [ 87.989099][ T44] kauditd_printk_skb: 30 callbacks suppressed [ 87.989172][ T44] audit: type=1326 audit(1788626524.449:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 87.989210][ T44] audit: type=1326 audit(1788626524.449:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 87.989732][ T44] audit: type=1326 audit(1788626524.449:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 87.989755][ T44] audit: type=1326 audit(1788626524.449:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 87.990120][ T44] audit: type=1326 audit(1788626524.449:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.308" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705efec code=0x7ffc0000 [ 87.990143][ T44] audit: type=1326 audit(1788626524.449:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 87.990184][ T44] audit: type=1326 audit(1788626524.449:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 87.990379][ T44] audit: type=1326 audit(1788626524.449:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 87.990682][ T44] audit: type=1326 audit(1788626524.449:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.308" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705efec code=0x7ffc0000 [ 87.990704][ T44] audit: type=1326 audit(1788626524.449:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 88.079974][ T30] usbhid 9-1:0.0: can't add hid device: -71 [ 88.080049][ T30] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 88.088723][ T30] usb 9-1: USB disconnect, device number 5 [ 88.411033][ T5817] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 88.581181][ T5817] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 88.587766][ T5817] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 88.592819][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.597202][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.600875][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 88.629908][ T7026] ip6t_rt: too many addresses specified [ 88.641806][ T5817] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 88.644687][ T5817] usb 5-1: Manufacturer: syz [ 88.700462][ T5817] usb 5-1: config 0 descriptor?? [ 89.018675][ T5974] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 89.153664][ T7017] input: syz1 as /devices/virtual/input/input15 [ 89.191837][ T5974] usb 9-1: not running at top speed; connect to a high speed hub [ 89.191894][ T5974] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 89.193398][ T5974] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.197769][ T5974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.197790][ T5974] usb 9-1: Product: syz [ 89.197803][ T5974] usb 9-1: Manufacturer: syz [ 89.197815][ T5974] usb 9-1: SerialNumber: syz [ 89.208882][ T5974] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 89.209094][ T5974] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 89.209145][ T5974] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 89.210713][ T5974] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 89.212267][ T5974] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 89.215429][ T5974] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 89.217123][ T5974] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 89.220194][ T5974] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 4 [ 89.222084][ T5974] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 89.224987][ T5974] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 89.226644][ T5974] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 89.274550][ T5817] usbhid 5-1:0.0: can't add hid device: -71 [ 89.277838][ T5817] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 89.296303][ T5817] usb 5-1: USB disconnect, device number 5 [ 89.562411][ T5974] usb 9-1: USB disconnect, device number 6 [ 89.565800][ T5974] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 89.583147][ T5974] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 89.589033][ T5974] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 89.599767][ T5974] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 89.607460][ T5974] keyspan 9-1:1.0: device disconnected [ 90.005553][ T7044] ip6t_rt: too many addresses specified [ 90.316022][ T7056] ip6t_rt: too many addresses specified [ 91.028694][ T5810] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 91.178998][ T5810] usb 9-1: Using ep0 maxpacket: 16 [ 91.180058][ T5810] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 91.181315][ T5810] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.181333][ T5810] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.183184][ T5810] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.183204][ T5810] usb 9-1: Product: syz [ 91.183215][ T5810] usb 9-1: Manufacturer: syz [ 91.183228][ T5810] usb 9-1: SerialNumber: syz [ 91.195499][ T5810] usb 9-1: config 0 descriptor?? [ 91.475956][ T7058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.323'. [ 91.486191][ T5974] usb 9-1: USB disconnect, device number 7 [ 92.094894][ T7096] ip6t_rt: too many addresses specified [ 92.260821][ T7103] ip6t_rt: too many addresses specified [ 92.658695][ T5974] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.708693][ T5810] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 92.809310][ T5974] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 92.813912][ T5974] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 92.818402][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.818432][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.818454][ T5974] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 92.830912][ T5974] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 92.833577][ T5974] usb 5-1: Manufacturer: syz [ 92.836666][ T5974] usb 5-1: config 0 descriptor?? [ 92.869194][ T5810] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 92.870121][ T5810] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.870160][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.876048][ T5810] spcp8x5 8-1:1.0: required endpoints missing [ 93.273853][ T7105] input: syz1 as /devices/virtual/input/input16 [ 93.284596][ T7105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.335'. [ 93.355494][ T5974] usbhid 5-1:0.0: can't add hid device: -71 [ 93.355570][ T5974] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 93.364522][ T5974] usb 5-1: USB disconnect, device number 6 [ 93.908701][ T30] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 93.928634][ T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 94.061313][ T30] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 94.062383][ T30] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 94.062405][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.062419][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.062431][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 94.063288][ T30] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 94.063308][ T30] usb 7-1: Manufacturer: syz [ 94.066020][ T30] usb 7-1: config 0 descriptor?? [ 94.076455][ T7130] ip6t_rt: too many addresses specified [ 94.089516][ T10] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 94.090390][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 94.090406][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 94.090423][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.503642][ T7118] input: syz1 as /devices/virtual/input/input17 [ 94.518094][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.339'. [ 94.727375][ T10] qmi_wwan 9-1:1.0: probe with driver qmi_wwan failed with error -22 [ 94.729043][ T10] usb 9-1: USB disconnect, device number 8 [ 94.836961][ T30] usbhid 7-1:0.0: can't add hid device: -71 [ 94.837060][ T30] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 94.838851][ T30] usb 7-1: USB disconnect, device number 13 [ 95.476278][ T35] usb 8-1: USB disconnect, device number 11 [ 95.638694][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.642827][ T5810] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 95.789101][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 95.790089][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 95.790116][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.790201][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.790214][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 95.791058][ T10] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 95.791072][ T10] usb 5-1: Manufacturer: syz [ 95.792941][ T10] usb 5-1: config 0 descriptor?? [ 95.809535][ T5810] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 95.818942][ T5810] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 95.823564][ T5810] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.823792][ T5810] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.823811][ T5810] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 95.824917][ T5810] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 95.824936][ T5810] usb 7-1: Manufacturer: syz [ 95.827801][ T5810] usb 7-1: config 0 descriptor?? [ 96.082721][ T7157] ip6t_rt: too many addresses specified [ 96.218713][ T7143] input: syz1 as /devices/virtual/input/input18 [ 96.349071][ T7146] input: syz1 as /devices/virtual/input/input19 [ 96.408649][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 96.408741][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 96.413027][ T10] usb 5-1: USB disconnect, device number 7 [ 96.470396][ T5810] usbhid 7-1:0.0: can't add hid device: -71 [ 96.470561][ T5810] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 96.472887][ T5810] usb 7-1: USB disconnect, device number 14 [ 97.079452][ T7180] FAULT_INJECTION: forcing a failure. [ 97.079452][ T7180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.079498][ T7180] CPU: 2 UID: 0 PID: 7180 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(full) [ 97.079522][ T7180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.079531][ T7180] Call Trace: [ 97.079535][ T7180] [ 97.079539][ T7180] dump_stack_lvl+0x100/0x190 [ 97.079558][ T7180] should_fail_ex.cold+0x5/0xa [ 97.079573][ T7180] _copy_to_user+0x32/0xd0 [ 97.079587][ T7180] simple_read_from_buffer+0xcb/0x170 [ 97.079601][ T7180] proc_fail_nth_read+0x1af/0x230 [ 97.079619][ T7180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.079638][ T7180] ? rw_verify_area+0xce/0x6d0 [ 97.079660][ T7180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.079677][ T7180] vfs_read+0x1e4/0xb40 [ 97.079688][ T7180] ? lock_acquire+0x1d1/0x380 [ 97.079703][ T7180] ? __fget_files+0x34/0x3d0 [ 97.079714][ T7180] ? __pfx_vfs_read+0x10/0x10 [ 97.079723][ T7180] ? find_held_lock+0x2b/0x80 [ 97.079734][ T7180] ? __fget_files+0x215/0x3d0 [ 97.079748][ T7180] ? __fget_files+0x21f/0x3d0 [ 97.079763][ T7180] ksys_read+0x12a/0x250 [ 97.079773][ T7180] ? __pfx_ksys_read+0x10/0x10 [ 97.079800][ T7180] do_int80_emulation+0x166/0x650 [ 97.079819][ T7180] asm_int80_emulation+0x1a/0x20 [ 97.079830][ T7180] RIP: 0023:0xf71975ab [ 97.079840][ T7180] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 97.079850][ T7180] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 97.079861][ T7180] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f544d5d0 [ 97.079868][ T7180] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 97.079875][ T7180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.079881][ T7180] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.079887][ T7180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.079901][ T7180] [ 97.268601][ T5881] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 97.418767][ T5810] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 97.428772][ T5881] usb 8-1: Using ep0 maxpacket: 16 [ 97.429380][ T5881] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 97.430436][ T5881] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.430453][ T5881] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.432020][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.432033][ T5881] usb 8-1: Product: syz [ 97.432040][ T5881] usb 8-1: Manufacturer: syz [ 97.432047][ T5881] usb 8-1: SerialNumber: syz [ 97.434471][ T5881] usb 8-1: config 0 descriptor?? [ 97.569226][ T5810] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 97.570233][ T5810] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.570478][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.574043][ T5810] spcp8x5 5-1:1.0: required endpoints missing [ 97.642653][ T7166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.358'. [ 97.643997][ T5881] usb 8-1: USB disconnect, device number 12 [ 97.706500][ T7188] ip6t_rt: too many addresses specified [ 98.145777][ T44] kauditd_printk_skb: 33 callbacks suppressed [ 98.145866][ T44] audit: type=1326 audit(1788626534.599:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.2.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 98.146394][ T44] audit: type=1326 audit(1788626534.599:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.2.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 98.146833][ T44] audit: type=1326 audit(1788626534.599:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.2.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 98.146877][ T44] audit: type=1326 audit(1788626534.599:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.2.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 98.147569][ T44] audit: type=1326 audit(1788626534.599:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.2.366" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703efec code=0x7ffc0000 [ 98.147606][ T44] audit: type=1326 audit(1788626534.599:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.2.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 98.147639][ T44] audit: type=1326 audit(1788626534.599:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.2.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 98.147816][ T44] audit: type=1326 audit(1788626534.599:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.2.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 98.147853][ T44] audit: type=1326 audit(1788626534.599:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.2.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 98.148405][ T44] audit: type=1326 audit(1788626534.599:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.2.366" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703efec code=0x7ffc0000 [ 98.536398][ T7210] FAULT_INJECTION: forcing a failure. [ 98.536398][ T7210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.538985][ T7210] CPU: 3 UID: 0 PID: 7210 Comm: syz.4.372 Not tainted syzkaller #0 PREEMPT(full) [ 98.539002][ T7210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.539009][ T7210] Call Trace: [ 98.539013][ T7210] [ 98.539018][ T7210] dump_stack_lvl+0x100/0x190 [ 98.539037][ T7210] should_fail_ex.cold+0x5/0xa [ 98.539052][ T7210] _copy_to_user+0x32/0xd0 [ 98.539065][ T7210] simple_read_from_buffer+0xcb/0x170 [ 98.539079][ T7210] proc_fail_nth_read+0x1af/0x230 [ 98.539097][ T7210] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.539116][ T7210] ? rw_verify_area+0xce/0x6d0 [ 98.539132][ T7210] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.539149][ T7210] vfs_read+0x1e4/0xb40 [ 98.539160][ T7210] ? lock_acquire+0x1d1/0x380 [ 98.539174][ T7210] ? __fget_files+0x34/0x3d0 [ 98.539186][ T7210] ? __pfx_vfs_read+0x10/0x10 [ 98.539195][ T7210] ? find_held_lock+0x2b/0x80 [ 98.539206][ T7210] ? __fget_files+0x215/0x3d0 [ 98.539220][ T7210] ? __fget_files+0x21f/0x3d0 [ 98.539241][ T7210] ksys_read+0x12a/0x250 [ 98.539254][ T7210] ? __pfx_ksys_read+0x10/0x10 [ 98.539270][ T7210] do_int80_emulation+0x166/0x650 [ 98.539289][ T7210] asm_int80_emulation+0x1a/0x20 [ 98.539301][ T7210] RIP: 0023:0xf71e75ab [ 98.539311][ T7210] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 98.539322][ T7210] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 98.539333][ T7210] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d5d0 [ 98.539340][ T7210] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 98.539347][ T7210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.539353][ T7210] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 98.539359][ T7210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.539373][ T7210] [ 98.668621][ T5804] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 98.829365][ T5804] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 98.830239][ T5804] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.830256][ T5804] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.830267][ T5804] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.831794][ T5804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.831807][ T5804] usb 7-1: Product: syz [ 98.831814][ T5804] usb 7-1: Manufacturer: syz [ 98.831821][ T5804] usb 7-1: SerialNumber: syz [ 98.837874][ T5804] hub 7-1:1.0: bad descriptor, ignoring hub [ 98.837889][ T5804] hub 7-1:1.0: probe with driver hub failed with error -5 [ 98.878692][ T5810] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 99.060280][ T5810] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 99.063404][ T5804] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 99.064985][ T5810] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.065002][ T5810] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 99.065019][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.260647][ T5804] usb 7-1: reset high-speed USB device number 15 using dummy_hcd [ 99.590846][ T5810] qmi_wwan 8-1:1.0: probe with driver qmi_wwan failed with error -22 [ 99.603174][ T5810] usb 8-1: USB disconnect, device number 13 [ 99.717879][ T7226] ip6t_rt: too many addresses specified [ 99.738760][ T30] usb 7-1: USB disconnect, device number 15 [ 99.741118][ T30] usblp0: removed [ 100.225774][ T5881] usb 5-1: USB disconnect, device number 8 [ 100.748629][ T5974] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 100.937028][ T5974] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.966244][ T5974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.967201][ T5974] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.967269][ T5974] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.974826][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.974873][ T5974] usb 5-1: Product: syz [ 100.974881][ T5974] usb 5-1: Manufacturer: syz [ 100.974917][ T5974] usb 5-1: SerialNumber: syz [ 100.995483][ T5804] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 101.027035][ T5974] hub 5-1:1.0: bad descriptor, ignoring hub [ 101.028699][ T5974] hub 5-1:1.0: probe with driver hub failed with error -5 [ 101.255909][ T5974] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 101.392133][ T7243] FAULT_INJECTION: forcing a failure. [ 101.392133][ T7243] name failslab, interval 1, probability 0, space 0, times 0 [ 101.392193][ T7243] CPU: 1 UID: 0 PID: 7243 Comm: syz.0.385 Not tainted syzkaller #0 PREEMPT(full) [ 101.392217][ T7243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.392226][ T7243] Call Trace: [ 101.392230][ T7243] [ 101.392235][ T7243] dump_stack_lvl+0x100/0x190 [ 101.392254][ T7243] should_fail_ex.cold+0x5/0xa [ 101.392269][ T7243] should_failslab+0xc2/0x120 [ 101.392283][ T7243] kmem_cache_alloc_noprof+0x92/0x6a0 [ 101.392296][ T7243] ? do_getname+0x35/0x390 [ 101.392313][ T7243] do_getname+0x35/0x390 [ 101.392330][ T7243] do_sys_openat2+0xc7/0x1e0 [ 101.392345][ T7243] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.392360][ T7243] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.392376][ T7243] ? __fget_files+0x21f/0x3d0 [ 101.392390][ T7243] __ia32_compat_sys_openat+0x12d/0x210 [ 101.392407][ T7243] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 101.392422][ T7243] ? ksys_write+0x1ac/0x250 [ 101.392437][ T7243] do_int80_emulation+0x166/0x650 [ 101.392454][ T7243] asm_int80_emulation+0x1a/0x20 [ 101.392465][ T7243] RIP: 0023:0xf71975ab [ 101.392474][ T7243] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 101.392485][ T7243] RSP: 002b:00000000f544d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 101.392496][ T7243] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f544d100 [ 101.392503][ T7243] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.392510][ T7243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.392516][ T7243] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 101.392523][ T7243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.392536][ T7243] [ 101.497313][ T5804] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 101.515556][ T7286] ip6t_rt: too many addresses specified [ 101.523054][ T5804] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.523113][ T5804] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.608799][ T5974] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 101.635752][ T5804] spcp8x5 9-1:1.0: required endpoints missing [ 101.763070][ T5974] usb 5-1: device firmware changed [ 101.764991][ T5974] usb 5-1: USB disconnect, device number 9 [ 101.767635][ T5974] usblp0: removed [ 102.058700][ T5974] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 102.209407][ T5974] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 102.210645][ T5974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.210660][ T5974] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.210673][ T5974] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.213355][ T5974] usb 5-1: string descriptor 0 read error: -22 [ 102.213430][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.221207][ T5974] hub 5-1:1.0: bad descriptor, ignoring hub [ 102.221231][ T5974] hub 5-1:1.0: probe with driver hub failed with error -5 [ 102.391801][ T7291] syz.2.401 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 102.423023][ T5974] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 102.459870][ T5974] usb 5-1: USB disconnect, device number 10 [ 102.470380][ T5974] usblp0: removed [ 102.530912][ T7300] No source specified [ 102.989524][ T7313] ip6t_rt: too many addresses specified [ 103.705449][ T5817] usb 9-1: USB disconnect, device number 9 [ 104.208632][ T5817] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 104.338695][ T5804] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 104.361551][ T5817] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 104.366022][ T5817] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 104.366102][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.366130][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.366155][ T5817] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 104.381876][ T5817] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 104.381909][ T5817] usb 9-1: Manufacturer: syz [ 104.387814][ T5817] usb 9-1: config 0 descriptor?? [ 104.489272][ T5804] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 104.490109][ T5804] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 104.490131][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.490146][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.490159][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 104.490916][ T5804] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 104.490930][ T5804] usb 5-1: Manufacturer: syz [ 104.492164][ T5804] usb 5-1: config 0 descriptor?? [ 104.735504][ T7348] program syz.2.420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.739757][ T7348] capability: warning: `syz.2.420' uses deprecated v2 capabilities in a way that may be insecure [ 104.821275][ T7336] input: syz1 as /devices/virtual/input/input20 [ 104.853717][ T5817] usbhid 9-1:0.0: can't add hid device: -71 [ 104.853811][ T5817] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 104.862946][ T5817] usb 9-1: USB disconnect, device number 10 [ 104.925417][ T7340] input: syz1 as /devices/virtual/input/input21 [ 104.983580][ T5804] usbhid 5-1:0.0: can't add hid device: -71 [ 104.983653][ T5804] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 104.986413][ T5804] usb 5-1: USB disconnect, device number 11 [ 105.069167][ T25] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 105.219815][ T25] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 105.220735][ T25] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.220764][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.226643][ T25] spcp8x5 7-1:1.0: required endpoints missing [ 105.639366][ T7381] syzkaller1: tun_chr_ioctl cmd 35108 [ 106.059163][ T5817] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 106.209938][ T5817] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 106.214225][ T5817] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 106.218233][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.222200][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.225695][ T5817] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 106.234006][ T5817] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 106.234061][ T5817] usb 9-1: Manufacturer: syz [ 106.240620][ T5817] usb 9-1: config 0 descriptor?? [ 106.657361][ T7387] input: syz1 as /devices/virtual/input/input22 [ 106.739416][ T5817] usbhid 9-1:0.0: can't add hid device: -71 [ 106.739502][ T5817] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 106.740549][ T5817] usb 9-1: USB disconnect, device number 11 [ 106.852764][ T7403] x_tables: duplicate underflow at hook 2 [ 107.098651][ T5810] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 107.268820][ T5810] usb 8-1: Using ep0 maxpacket: 8 [ 107.270819][ T5810] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.271927][ T5810] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 107.271954][ T5810] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 107.271974][ T5810] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.271993][ T5810] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.272021][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.482874][ T5810] usb 8-1: GET_CAPABILITIES returned 0 [ 107.482968][ T5810] usbtmc 8-1:16.0: can't read capabilities [ 107.690738][ T7403] usb 8-1: usbtmc_ioctl_clear_in_halt returned -32 [ 107.697853][ T5810] usb 8-1: USB disconnect, device number 14 [ 107.848751][ T5974] usb 7-1: USB disconnect, device number 16 [ 108.198757][ T5974] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 108.360775][ T5974] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 108.362271][ T5974] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 108.362305][ T5974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.362326][ T5974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.362343][ T5974] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 108.364474][ T5974] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 108.364489][ T5974] usb 7-1: Manufacturer: syz [ 108.375908][ T5974] usb 7-1: config 0 descriptor?? [ 108.458231][ T7440] 9p: Bad value for 'rfdno' [ 108.921793][ T7435] input: syz1 as /devices/virtual/input/input23 [ 108.939825][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 109.034473][ T5974] usbhid 7-1:0.0: can't add hid device: -71 [ 109.034543][ T5974] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 109.040663][ T5974] usb 7-1: USB disconnect, device number 17 [ 109.111558][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 109.113483][ T9] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 109.113545][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.113572][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.113597][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 109.114756][ T9] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 109.114788][ T9] usb 9-1: Manufacturer: syz [ 109.118427][ T9] usb 9-1: config 0 descriptor?? [ 109.538986][ T7445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.453'. [ 109.590702][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 109.590787][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 109.594963][ T9] usb 9-1: USB disconnect, device number 12 [ 109.994682][ T7481] random: crng reseeded on system resumption [ 110.004159][ T7482] FAULT_INJECTION: forcing a failure. [ 110.004159][ T7482] name failslab, interval 1, probability 0, space 0, times 0 [ 110.004211][ T7482] CPU: 0 UID: 0 PID: 7482 Comm: syz.2.468 Not tainted syzkaller #0 PREEMPT(full) [ 110.004235][ T7482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.004243][ T7482] Call Trace: [ 110.004247][ T7482] [ 110.004252][ T7482] dump_stack_lvl+0x100/0x190 [ 110.004270][ T7482] should_fail_ex.cold+0x5/0xa [ 110.004284][ T7482] should_failslab+0xc2/0x120 [ 110.004299][ T7482] __kmalloc_noprof+0xfc/0x840 [ 110.004310][ T7482] ? __pfx_dynamic_dname+0x10/0x10 [ 110.004327][ T7482] ? tomoyo_encode2+0xfb/0x3c0 [ 110.004346][ T7482] tomoyo_encode2+0xfb/0x3c0 [ 110.004365][ T7482] tomoyo_encode+0x29/0x50 [ 110.004381][ T7482] tomoyo_realpath_from_path+0x18c/0x690 [ 110.004401][ T7482] tomoyo_path_number_perm+0x23c/0x580 [ 110.004415][ T7482] ? tomoyo_path_number_perm+0x22e/0x580 [ 110.004430][ T7482] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 110.004445][ T7482] ? get_pid_task+0x106/0x250 [ 110.004460][ T7482] ? __lock_acquire+0x4c5/0x1ec0 [ 110.004481][ T7482] ? __fget_files+0x34/0x3d0 [ 110.004494][ T7482] ? find_held_lock+0x2b/0x80 [ 110.004504][ T7482] ? __fget_files+0x215/0x3d0 [ 110.004514][ T7482] ? hook_file_ioctl_common+0x140/0x440 [ 110.004529][ T7482] ? __fget_files+0x215/0x3d0 [ 110.004543][ T7482] ? __fget_files+0x21f/0x3d0 [ 110.004556][ T7482] security_file_ioctl_compat+0xd3/0x230 [ 110.004572][ T7482] __ia32_compat_sys_ioctl+0xc2/0x360 [ 110.004591][ T7482] __do_fast_syscall_32+0x13a/0x8b0 [ 110.004606][ T7482] ? lockdep_hardirqs_on+0x7d/0x110 [ 110.004622][ T7482] do_fast_syscall_32+0x32/0x70 [ 110.004656][ T7482] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.004670][ T7482] RIP: 0023:0xf703efec [ 110.004682][ T7482] Code: Unable to access opcode bytes at 0xf703efc2. [ 110.004687][ T7482] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 110.004698][ T7482] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae41 [ 110.004704][ T7482] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.004711][ T7482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.004717][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.004723][ T7482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.004737][ T7482] [ 110.004818][ T7482] ERROR: Out of memory at tomoyo_realpath_from_path. [ 110.071066][ T7486] netlink: 256 bytes leftover after parsing attributes in process `syz.0.467'. [ 110.071436][ T7486] comedi comedi4: bad chanlist[1]=0x00000104 chan=260 range length=2 [ 110.130960][ T44] kauditd_printk_skb: 158 callbacks suppressed [ 110.131051][ T44] audit: type=1326 audit(1788626546.589:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 110.131258][ T44] audit: type=1326 audit(1788626546.589:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 110.131282][ T44] audit: type=1326 audit(1788626546.589:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 110.133435][ T44] audit: type=1326 audit(1788626546.589:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.470" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703efec code=0x7ffc0000 [ 110.133622][ T44] audit: type=1326 audit(1788626546.589:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 110.133722][ T44] audit: type=1326 audit(1788626546.589:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 110.134216][ T44] audit: type=1326 audit(1788626546.589:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 110.134255][ T44] audit: type=1326 audit(1788626546.589:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 110.134297][ T44] audit: type=1326 audit(1788626546.589:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.470" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703efec code=0x7ffc0000 [ 110.134334][ T44] audit: type=1326 audit(1788626546.589:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 110.272857][ T7499] ----------- ** replaying previous printk message ** [ 110.272857][ T7499] ------------[ cut here ]------------ [ 110.272906][ T7499] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:21 [ 110.272943][ T7499] index 3 is out of range for type 'char *[3]' [ 110.272965][ T7499] CPU: 1 UID: 0 PID: 7499 Comm: syz.4.475 Not tainted syzkaller #0 PREEMPT(full) [ 110.272979][ T7499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.272986][ T7499] Call Trace: [ 110.272990][ T7499] [ 110.272995][ T7499] dump_stack_lvl+0x100/0x190 [ 110.273014][ T7499] ubsan_epilogue+0xa/0x30 [ 110.273027][ T7499] __ubsan_handle_out_of_bounds+0xcc/0xf0 [ 110.273044][ T7499] print_bpf_insn+0x2969/0x2a10 [ 110.273056][ T7499] ? __pfx_disasm_print+0x10/0x10 [ 110.273070][ T7499] ? __pfx_print_bpf_insn+0x10/0x10 [ 110.273083][ T7499] ? _copy_to_user+0xaf/0xd0 [ 110.273097][ T7499] ? bpf_verifier_vlog+0x19d/0x6d0 [ 110.273115][ T7499] diag_print_insn_context+0x3ab/0x9b0 [ 110.273131][ T7499] ? __pfx_diag_write+0x10/0x10 [ 110.273146][ T7499] ? __pfx_diag_print_insn_context+0x10/0x10 [ 110.273162][ T7499] ? __pfx_disasm_print+0x10/0x10 [ 110.273175][ T7499] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 110.273188][ T7499] ? diag_print_wrapped_prefixed+0x2ba/0x330 [ 110.273204][ T7499] bpf_diag_source+0x698/0x1540 [ 110.273217][ T7499] ? __might_fault+0xc5/0x140 [ 110.273240][ T7499] ? __pfx_bpf_diag_source+0x10/0x10 [ 110.273254][ T7499] ? bpf_verifier_vlog+0x19d/0x6d0 [ 110.273275][ T7499] ? diag_write+0x121/0x170 [ 110.273287][ T7499] ? __pfx_diag_write+0x10/0x10 [ 110.273299][ T7499] ? bpf_diag_header.part.0+0x110/0x140 [ 110.273312][ T7499] ? diag_vprint_indented+0x9d/0xe0 [ 110.273325][ T7499] ? kfree+0x22b/0x6d0 [ 110.273344][ T7499] bpf_diag_program_structure+0x200/0x290 [ 110.273361][ T7499] ? __pfx_bpf_diag_program_structure+0x10/0x10 [ 110.273376][ T7499] ? __pfx_verbose+0x10/0x10 [ 110.273389][ T7499] ? __pfx_cmp_subprogs+0x10/0x10 [ 110.273400][ T7499] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 110.273412][ T7499] ? bpf_find_containing_subprog+0x17f/0x1e0 [ 110.273429][ T7499] bpf_check+0x5914/0xa7c0 [ 110.273444][ T7499] ? __css_rstat_updated+0x1ce/0x590 [ 110.273459][ T7499] ? __lock_acquire+0x4c5/0x1ec0 [ 110.273484][ T7499] ? __pfx_bpf_check+0x10/0x10 [ 110.273499][ T7499] ? lock_acquire+0x1d1/0x380 [ 110.273513][ T7499] ? bpf_prog_load+0x1a09/0x2a80 [ 110.273527][ T7499] ? find_held_lock+0x2b/0x80 [ 110.273538][ T7499] ? bpf_prog_load+0x1a09/0x2a80 [ 110.273555][ T7499] ? __asan_memset+0x23/0x50 [ 110.273567][ T7499] ? bpf_prog_load+0x1ac3/0x2a80 [ 110.273582][ T7499] bpf_prog_load+0x1ac3/0x2a80 [ 110.273599][ T7499] ? __pfx_bpf_prog_load+0x10/0x10 [ 110.273613][ T7499] ? lock_acquire+0x1d1/0x380 [ 110.273639][ T7499] __sys_bpf+0x1f46/0x4a30 [ 110.273653][ T7499] ? __pfx___sys_bpf+0x10/0x10 [ 110.273662][ T7499] ? find_held_lock+0x2b/0x80 [ 110.273673][ T7499] ? futex_wake+0x4ea/0x5e0 [ 110.273696][ T7499] ? putname+0xb1/0x110 [ 110.273717][ T7499] ? kmem_cache_free+0x127/0x6c0 [ 110.273735][ T7499] ? __pfx___cant_migrate+0x10/0x10 [ 110.273760][ T7499] ? __ia32_sys_bpf+0xcc/0x170 [ 110.273771][ T7499] __ia32_sys_bpf+0xcc/0x170 [ 110.273783][ T7499] ? __seccomp_permit_syscall+0x1e7/0x2d0 [ 110.273798][ T7499] __do_fast_syscall_32+0x13a/0x8b0 [ 110.273814][ T7499] ? lockdep_hardirqs_on+0x7d/0x110 [ 110.273830][ T7499] do_fast_syscall_32+0x32/0x70 [ 110.273845][ T7499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.273860][ T7499] RIP: 0023:0xf70aefec [ 110.273873][ T7499] Code: Unable to access opcode bytes at 0xf70aefc2. [ 110.273878][ T7499] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 110.273890][ T7499] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 110.273897][ T7499] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.273903][ T7499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.273909][ T7499] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 110.273917][ T7499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.273932][ T7499] [ 110.273936][ T7499] ---[ end trace ]--- [ 110.273942][ T7499] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 110.410349][ T7499] CPU: 1 UID: 0 PID: 7499 Comm: syz.4.475 Not tainted syzkaller #0 PREEMPT(full) [ 110.413607][ T7499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.416798][ T7499] Call Trace: [ 110.417876][ T7499] [ 110.418854][ T7499] dump_stack_lvl+0x100/0x190 [ 110.420396][ T7499] vpanic+0x553/0x970 [ 110.421790][ T7499] ? __pfx_vpanic+0x10/0x10 [ 110.423447][ T7499] panic+0xd1/0xe0 [ 110.424759][ T7499] ? __pfx_panic+0x10/0x10 [ 110.426276][ T7499] check_panic_on_warn.cold+0x19/0x34 [ 110.427980][ T7499] __ubsan_handle_out_of_bounds+0xcc/0xf0 [ 110.429887][ T7499] print_bpf_insn+0x2969/0x2a10 [ 110.431443][ T7499] ? __pfx_disasm_print+0x10/0x10 [ 110.433033][ T7499] ? __pfx_print_bpf_insn+0x10/0x10 [ 110.434736][ T7499] ? _copy_to_user+0xaf/0xd0 [ 110.436200][ T7499] ? bpf_verifier_vlog+0x19d/0x6d0 [ 110.437809][ T7499] diag_print_insn_context+0x3ab/0x9b0 [ 110.439524][ T7499] ? __pfx_diag_write+0x10/0x10 [ 110.441097][ T7499] ? __pfx_diag_print_insn_context+0x10/0x10 [ 110.443044][ T7499] ? __pfx_disasm_print+0x10/0x10 [ 110.444762][ T7499] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 110.446602][ T7499] ? diag_print_wrapped_prefixed+0x2ba/0x330 [ 110.448388][ T7499] bpf_diag_source+0x698/0x1540 [ 110.449928][ T7499] ? __might_fault+0xc5/0x140 [ 110.451413][ T7499] ? __pfx_bpf_diag_source+0x10/0x10 [ 110.453170][ T7499] ? bpf_verifier_vlog+0x19d/0x6d0 [ 110.454846][ T7499] ? diag_write+0x121/0x170 [ 110.456301][ T7499] ? __pfx_diag_write+0x10/0x10 [ 110.457818][ T7499] ? bpf_diag_header.part.0+0x110/0x140 [ 110.459549][ T7499] ? diag_vprint_indented+0x9d/0xe0 [ 110.461235][ T7499] ? kfree+0x22b/0x6d0 [ 110.462632][ T7499] bpf_diag_program_structure+0x200/0x290 [ 110.464685][ T7499] ? __pfx_bpf_diag_program_structure+0x10/0x10 [ 110.466844][ T7499] ? __pfx_verbose+0x10/0x10 [ 110.468400][ T7499] ? __pfx_cmp_subprogs+0x10/0x10 [ 110.470010][ T7499] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 110.471747][ T7499] ? bpf_find_containing_subprog+0x17f/0x1e0 [ 110.473636][ T7499] bpf_check+0x5914/0xa7c0 [ 110.475254][ T7499] ? __css_rstat_updated+0x1ce/0x590 [ 110.476906][ T7499] ? __lock_acquire+0x4c5/0x1ec0 [ 110.478490][ T7499] ? __pfx_bpf_check+0x10/0x10 [ 110.480000][ T7499] ? lock_acquire+0x1d1/0x380 [ 110.481574][ T7499] ? bpf_prog_load+0x1a09/0x2a80 [ 110.483205][ T7499] ? find_held_lock+0x2b/0x80 [ 110.484661][ T7499] ? bpf_prog_load+0x1a09/0x2a80 [ 110.486310][ T7499] ? __asan_memset+0x23/0x50 [ 110.487870][ T7499] ? bpf_prog_load+0x1ac3/0x2a80 [ 110.489546][ T7499] bpf_prog_load+0x1ac3/0x2a80 [ 110.491149][ T7499] ? __pfx_bpf_prog_load+0x10/0x10 [ 110.493023][ T7499] ? lock_acquire+0x1d1/0x380 [ 110.494651][ T7499] __sys_bpf+0x1f46/0x4a30 [ 110.496138][ T7499] ? __pfx___sys_bpf+0x10/0x10 [ 110.497662][ T7499] ? find_held_lock+0x2b/0x80 [ 110.499171][ T7499] ? futex_wake+0x4ea/0x5e0 [ 110.500637][ T7499] ? putname+0xb1/0x110 [ 110.501968][ T7499] ? kmem_cache_free+0x127/0x6c0 [ 110.503571][ T7499] ? __pfx___cant_migrate+0x10/0x10 [ 110.505223][ T7499] ? __ia32_sys_bpf+0xcc/0x170 [ 110.506778][ T7499] __ia32_sys_bpf+0xcc/0x170 [ 110.508341][ T7499] ? __seccomp_permit_syscall+0x1e7/0x2d0 [ 110.510429][ T7499] __do_fast_syscall_32+0x13a/0x8b0 [ 110.512202][ T7499] ? lockdep_hardirqs_on+0x7d/0x110 [ 110.513948][ T7499] do_fast_syscall_32+0x32/0x70 [ 110.515537][ T7499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.517534][ T7499] RIP: 0023:0xf70aefec [ 110.518855][ T7499] Code: Unable to access opcode bytes at 0xf70aefc2. [ 110.520928][ T7499] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 110.523565][ T7499] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 110.526032][ T7499] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.528478][ T7499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.530996][ T7499] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 110.533733][ T7499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.536534][ T7499] [ 110.538478][ T7499] Kernel Offset: disabled [ 110.540145][ T7499] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:42:26 Registers: info registers vcpu 0 CPU#0 RAX=00000000002ad7f9 RBX=ffffffff8ea91500 RCX=ffffffff8bcde115 RDX=0000000000000001 RSI=ffffffff8e3f03f7 RDI=ffffffff8c622480 RBP=fffffbfff1d522a0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed10056467bd R10=ffff88802b233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bcdc6bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096963000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f0df234c CR3=000000006abc7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae4665 RDI=ffffffff9bc541e0 RBP=ffffffff9bc541a0 RSP=ffffc900059f69e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=000000000000002e R14=0000000000000006 R15=ffffc900059f6d00 RIP=ffffffff85ae468f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a63000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f70af000 CR3=0000000075a83000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000200 RDX=0000000000000100 RSI=ffffffff8e3ca03b RDI=ffffffff8c622480 RBP=ffffffff8edebe60 RSP=ffffc9000051f6d8 R8 =000000002433690c R9 =0000000000000007 R10=0000000000000200 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e68d65 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b63000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057d141fc CR3=000000006abbc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefefc00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000ffffff7f Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556863353410 0000556863353410 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005568632effd8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005568632e7928 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff111914b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ffff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a21 d5d5d5d5d52a4149 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 435e5953452a195e 58455a071a041b10 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 273a6166703a756b 733a302e30312d35 33712d6370727663 3a3174633a554d45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a5f393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33515f4350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000312d 352f352f73752f2f 0000000000000041 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000704 0000000000000704 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=8000000000000001 RBX=ffffffff8fbd72a0 RCX=0000000000000001 RDX=ffff88801cf30000 RSI=ffffffff81c7d5cd RDI=ffffffff8c622440 RBP=0000000000000000 RSP=ffffc9000042f940 R8 =0000000000000000 R9 =fffffbfff1f7ae54 R10=ffffffff8fbd72a3 R11=000000002d2d2d2d R12=ffffffff8fbd7200 R13=ffffc9000042fda8 R14=0000000000000000 R15=ffffc9000042fdb4 RIP=ffffffff820b3c70 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c63000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f540bff4 CR3=0000000077293000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000