last executing test programs: 3m10.87740952s ago: executing program 2 (id=112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56749, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x8}, {0x8}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 3m10.432727972s ago: executing program 2 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc/mtrr\x00', &(0x7f00000000c0)='efivarfs\x00', 0xa01000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)='base=0x10000000 size=0x10000000 type=write-combining', 0x34) 3m10.36791158s ago: executing program 2 (id=117): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x50, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x4089}, {{0x0, 0x0, &(0x7f0000000080)}, 0x2}], 0x2, 0x40000101, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x80800) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8050) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x68, r6, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xeb3e}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x884}, 0x40000004) lseek(r4, 0x5, 0xfffff000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 3m8.146985814s ago: executing program 2 (id=124): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) socket$unix(0x1, 0x2, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) 3m8.037112155s ago: executing program 2 (id=125): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/63]}, 0x8f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000180)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="cd2f8a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffffff, 0x0, 0x400940, 0x7) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) io_submit(0x0, 0x4, &(0x7f0000000240)=[&(0x7f0000001880)={0x0, 0x0, 0x0, 0x8, 0x8007, r0, &(0x7f0000002100)="9a4ecea895b51b082e4073a92abd3d5acc09b16ee250ff42fd358ef1982d34118f47f3ee4bbff2adc34e8635984f7dffc57e99561a12a52b47de67d5cd8269335edadefdce4f312844a8ad1dc05f4e02cd1e594481e34245b8ee018e7243c6f869ee8cf9923ef28919430812f2deaa6461f5df1a2d7606097dc1757649e40502ffa47f48b4ec43bef24a2cd1ac07006a852483a6f4a94d2488b9b60cecc02ab23f8364dda3a721d853e96ac77e5f281ad0fca9b024002d96f98765cb632707e04f8f2da50c78952ff06d4f6de6dbd527706d5c0375da2d6d68f72a32ac71bd26114d517e755139c7e5e8eb84478f745a30779d7e4d28820c6cf880e979c95292192d6232597859049b47c54ee61bbba99a19e3f6549e10170c5d7bd5490c7253d4e38b533de9d5a057142aa138f4a4a24b3cc76c8159dc4c44bfbb0e76bc401d578b18c03548eda49e0a6c6f1aa07fdde3af3b9d75928602a878df54bfbe61e63f8b441898fdd0eecca7966032dac2f4014d39b2c90c3731fa8901343131e8c19aac6f302f50894fc19e10f0510cef5add15d4f4bb62d9728b8fd6b38655cb2f4e27783245bddc785f070f339b4988de2a2ec3d8df481b11ea070093f6a45cd08f852f43904ea9b2cc1c21da023afd388200c0df5007a57935d52a5be9f750811a01bb7eab2fbd505c40c94809192da1f2ece5d85eb28a0d791fb1f04d5698bb9c9ae1939b625b2f8dc8bd635ef56d910d7c02d54ad7609211e8526741a8700a08a44db6598b60c6146a43cf09043ee825403f1a40e2c584899f9fcec2626560c80ab819b2d939a421d184de8fd2ca2df39ccb098bb3813420f5e7d50d30c4192bb158d152919ab5421b220a11fc182df0f1f926699740cd245b992e8d67ec513bf53b8471bbbafb8080bf9983af31ad4034038a42d47cd12d2873dd73bb3f4e35bb13a343ec8b1e1a38ad9613d557984da86bf91588039466609682776242f2cdb6275616d2d13554f21af372a008bdc66f9f5dba9657277342926abf083cfcdc014975cc94c597c461a6d662e961d5a59da7af27f953460a124db50834cb6d2456ca8880808addf6e4e72f4f767169b7454a0694c9f954b6f394218b65d6bc203a220f4ddf0650006155394317d0e07764a7c29186f9c9be3e9cef41c62b503677beb46c7aaaaa6d7524e75e36bd95d86688064235e5a69ca1bbfda8e165e35a56cf2482e4b81c7ce543cef1c8da5e330ea7ad7063a9a612bdf16b168450ed117b44360f3f3898e14efcd2233209378e0361bdde4e08ffba3b8f3656c4cc883958f439d330791bdb99978e7df29823fe71588935c9ee3496f98d6c5474bb972491c003f7e676d03cfcc1c95d3a56443f0669f0624d04ccbf56264c255a61a36a359fceae43e618c58332e477af621912b1f604d7a50651269a152d2b2e18b0fc1dcfed6c0371b34e1946e9ff9112f69be82faad19b9274e5f777ddd3ac4600eee789db543d7cc570d7ce965b899e58bde11a7216f2593b252abc3e309498eae232e353f24ed755098787a6096f681d3d1b4f1d67f68723c91e65713ef6f2592fbaf924699d64736e5a051af3157272605d2b1afce277ca05ce4d857761d3e20380c50139d12abd10568dfa70556d752d50958519d4c3c238811dbf348893d241471c149617f229d03e191f0820f2c025046280ed54649910c36fa4bf420cc3d55642aa1bd07e304fb8049f686ca2ab881db82a9b38b39a2bd52b4e30498c91397b8bdbac1d49844c7eefaafb5608a2d76dc0e1a32a1513413961a59fb7fd97d4265439f163c4218ad330280282c666586817e5757098d814e49cbe4b4284e0adc33e467ca3d1e667ffebea7ddc6a0c708e444371ac64ef0703428d9e98857b5a0756e706dc891e9dcc001f28916a3e888ae10a4d4694e168573c90dad4dc8c7408a4cf9ef2d47e07b04eb5e7af60a99f7ac08dee62f21b66027c9080c9d293ad826c78f90233772c5a08909c47424a47ab435688329ae8fcad45cec19ba5a3edec0501ffc37f31375c697bf5f11e6b38ca4d5e497cbe8fca8c3cc1006d034d16f429e564a570e07f5491606d99a13fd17d04b30ec47791ed41241a23b859b426cc54c769d3d095e928a74e813a801a949b396929b51c03bfdcb4466fc8de41fbcca793111c45f1add8c7df9838dafb082caf8903df975a1b173f859dbd1aeaf8196b0fcbec40d5d4d5aef9f8a186c4e716b4a193806f903d8e4b1044df7fd4420f5df28757c529733ae8b93c00b1982c500b2e8d0c2db0b8b2f92b4d4142675c58784e0ebef9e2fbae413c22edca7874a4b2766b3067ba757f8e22622eb04e90295515cb6a2763f33598d8191e219074c8f4836b533e59a1e89938243532247d2afe36a55f88a46f84534f3d29b9e3be3c096df886e749509dcea772e74b4e2532efb7fcaeef2cead0a62fd773e063aa410e25c8dc7075afcdd908c1407ca4bf977e3d84388288e77b3b946f902e8605bc516e9c2d96081606e7dcd7140cc262b1afcf811cdfec41d9fbbd66618804465e4c94e876b656b41c7d8721a4fbaf524bd7ca5a820fe7131fb6a8f14069a208b14306477f876caa0023de428433c04072f160bedc04bc0f2c3847664d81574203f1001d9c6b0763d5e088703a9885be808afc91512db784e9dafcae14a79bcf743eedbfa7960dc7976d8c7ea6cd773bb2ea2e193c17ceb960690bfecc3b20ddd56cc7c2305a2f6735c237709f997b97cbaffa5ff571db26a108c1ca8e74baaf5e354b7c3a40f1fbac152e2319b62eeb620ca85fcd04effa9e53b656d291eac9e6c0dd19efc9562f676027f8aa078de617ba0828fc539cd0b75d7550048bc35003ed06701e217e352d49fd3015341c730bbe51321c5ecd647f81ddcef67f448db010f84c3facaa797d9bfc2b6aae9ff96f43b13a595736aa467dea21c3e3cd2c57fee58fd113fd283739da614bf4906f5d79adda18147094524fa418c39fc85b79dc1b16dae0c499c373a80f458e7d23e997021d638d18df2ab478c04b36a1b26e0a8ddc28ac48cec46f78bac8ffa0b53a8409daff7c6be37590652e056bb48eef537eaf89cd545c0570aeeb7ea07d303ac7f41f8859ce6a50efff382137c5cca3f93c078da62a8e20cd55020cf5d01327ad430a761c3ca03ce9371bee922ad29dd978d8c6877a6e88c0b5e4072122131ffc8b484153bc8cc83f7945193a7c55da9a265b6656f58469f082aa822908ed4e399266f8c29003897c8627e9f8f2587d78b6d71965af6a3326f4c51944a5777d670ca73c6c967a20ad72700bce59e007950c8eaacf0703834f3e2b9d67a364ab94821e1159fb7864cba96a90d2fa4cc1cb15da70202b767c2f27b9248601790b495d37f5c7219d9581d909984ad5db707e7f79d4b942355db2d51cbcfb89ec8a39640fec0fbf68846d60b8236b0851f841cc89616b276c0753d3ea62c6ab278050125bb446dc81954dd7fb6dd5e381213ae5918a8fbca34ad8603ad0a7f64656a08a8e35442a14691c7c6aaaa8c54551156ceba184e4d30dc968dee966cdddbdccf3b5f09541dad894bf812027fef780e6bebba271bbf24effb019df95d24705d5fa1ccc427c978d2bba111f3dd867229ab5cca7eabe3d18b7a0a0dd18e3556525d783dc095f4ebde97dc656040e8b375a81fc70939cfeda47a51c7799b4709b10be08e1469fbf60f99f43b661b8a652b104a13f908e28c261fcbf9eac45050a12fd31393d85aaf859fd1d386913b18a04959de39f409f3892ac44b83743451f22b8d8d00a6388b248d398008927e0ea70c93523ea38f6a15eceacadb3da65caa51be49dd2007abbac6c96892a2224039b66ec3b78dfa0f43d5c1d8aeaf9cd182458481ea36fe757c298ab70715a6550e37db33a7e13ef83e1d645694b5dffc95bef6c670d675a6472f86d499df4bd313b7c7c8244f1474b877f3e229d5738bf7405471570db0be14e38d250a462754042dd87c2f7d09c65e32ec707f050001466a52ce9e38afb264fd38e3208eb812eddfe9d0b5677e70f73ce84e878182d87c3a2c24f2d1f643e548dbf56f4ef8f0bc26b255ed7cb09afe3a4216cbe4e06dfe518fd63d09318a54889e5b79105c27dc1ea1797e8a8b8d1ed1e1762dde0901896abd10a7a1a614daa02b81211174ada2bb062a7d70de7d7f1737100a3eed3756d8eda8f1e639cc24bc95e7ea7009c31e0808b04c8497ca9e365911c8ba42d6d61d25cb35d157521ce47f46760c56a4b989d2c0161d8cc9a2ddf54a6fa5ee49fb5f369c3f9e6985ce499fab0719d564096e451d78e796eae375c5a34f5c5740e439630c35ec687942383ec13061f7873a40590d6d21325e34189097a47eab816cbd012cced0b39b9e14dd96fcc35a215805146b0ceb797c48f2ebcf500e5a84e2192ee334c31507bcef5eeace6709813467e45340b1f6e64ee6d6c55293bf46406de3867db6e583569f5c35e442571a195b2bfe8220eabcf45e967fe9be66ae75445c620f63666a14fb4751c706917eb9a931b64a679f5a9f2c77a51c782b35b993492a947966ee076342ad2b9494185790fcd6a1d4725febf0b680bc3ac0aae2e12b9c9897341d6a7009efa303c2e3103feb6fcf4fd4d07ce13ff2baaa5e48c04716e3665e98b156dc6dfdeceda495568ea1653fcf088f72a9046ad8bd768fc5c7a8223d809351b1acde685561ac90f7430d1a8a3febac4f0400dd60dd3379dcbec243445ba6ae87cedfa7bd4ad3b9c937f0a91e0dc8e1b8f27b724cdccfffd05edb95417281b0abcfd785aeabe17e3ca9e143324937cd7fb0c178c031f2f0d198d94b50f1601bc9cc0be11b79e7c36428ea02f3877d33c6331fcb3af443ad847c19ba3721d35fba3d41c70e91d1548e5f2501c98dd45d970d49ced349df1da8e5ce349830ab74936b11e6e40568e75c6be9369745146528498a0e821bf29269d77739dfd36ec6e88a5c3fa108529cb9846a9a27242452ff4bf627bdbc155c5dcd4093116554af80a86251143f5800f3d661946444cc17d89dfc782cda150b7e3427935b698b3d4c1890eeead2708487ce87e4b6c55b21880abea712a83872ae2d1e32fbd181f890be5a86e9c771ecf3af8ed860c125497c7d193f4d9b94cf08ffc430377793872b489d728c21e62aeca4527fdb5470a9840d9b5c2230c95e256c448cd86d7526717316d1f5ecc5a79fb6173f9ac27a05be7201eab7c92d313aa6366c935fa4346a53a06fc6fb54806545a8e3b7231b5893da1c9e8515abb298d716a5a0ae1c4295fca1d56916c37dad3259d4de95914ce5e80835ecdb13759d491ee69f26ea5b7a30747aa35ba9454ff266ed7cd86b04747f6e50e9361bed85c5f95aba9063257efa35ee17a6d7e115e669fd9d8e395e369dbd2e5f2adef59f839afaa0bff3dc085d7ec93f7501944cf1060ddb22c38b1b3b180cc0e26cac6b0ad977cdc9772df2a94d19ab8d6365b35b108beae2b5a181ea61aae58b48b2999cdd82c0b20ed9c0b10531380042340a82f536f9827c25da7af62cf220eb4dba6503ff4ff706302fb3763002a1f6910647a9d5103a1f2204e9c8787e86e418a4ba30571b47018e068be2ef1e3195ec038dea921331d763040200fb3370c48c710e53b6ac98dc1dc40616e95e84f5fa8e2e2899375149ec1a1b9b4db6d7437d6ef064a31cac05421e6ea84a28ddacac5ed89a0046aaf0b6676b4bee6266bfc22f52f5fe6ab09eae144faa62a486ba88074ffd2b2e0a4a907735f8c7cf7c25270617bfe7d1fb154697f570f70d6", 0x100f, 0x4, 0x0, 0x2, r4}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f00000018c0)="b89bfa39fa1f663c3eae58af3288ebda3588c13bd7600ad76da0c8b9e1a5189a6e6651051d18f86e175fd38ca6dd9da26a27fffedf447d3d10fed7000e39d6ca0b96cea17e8a591a65259d1af7ac8043feba6cb6a710cc74f3c55a7b4676b4a6920b9429a406e8435ca61e2c2f0a8d551291a52731a3e185f1c382c380b031e4382fbd9c765951e7", 0x88, 0x7f, 0x0, 0x3}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x625, r7, &(0x7f00000019c0)="ae7b9815bcbb5cd0bb43648a62d8db6bde6dae6dba6244a90541527595e5df94f3aeb2a3d670f5cd40ed0e72c843f03f9ce8a763b6a71fdcf570de8c705bf75c80ff8268e3b71ffb60dafb7f4541fd9e3d7f3371908b972ca1764a874838fda095bebdaf0916d12964742110f8fce0360e17f5cfc152ab6d9572852456cb60e511b489c5f0fd083dec492dcde0d46bc1385f2b0f6128588220e0c80588407bff51245cdf39500a34f7ea0ef5c1ab6f5493c4e08a838b34022162d1", 0xbb, 0x3, 0x0, 0x1}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x7, 0x7fff, 0xffffffffffffffff, &(0x7f0000001ac0)="ab08e63b7b0c0f91ab46b5a33635891c18dbaa8083164cab03b29a10b18df2e28f55206ce84d3e00fbcf2c8cd65789b59190084be22656ebb10f894734b3aad65ffd85ca35c748607165b0eee10833efcc589cd1dc89aac9ca51e149c28fc2265ef39733621de10eccca17c0951ca704bb70fe1f630d8e6b3aefe3224dc4b4eecbecc8f4944568a5bf0ccc6fd042", 0x8e, 0x3, 0x0, 0x3}]) sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e0000058d000000008000000000000030100120", @ANYRES32, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000010000000900"/24, @ANYRES32=r4, @ANYBLOB], 0x50) sendfile(r7, r7, 0x0, 0x1002000ff) 3m7.76310888s ago: executing program 2 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='forc', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r3, &(0x7f0000000600)='1', 0x1) r4 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x4903, 0x0) ioctl$CDROMVOLCTRL(r4, 0x31f, &(0x7f0000000040)={0xa1, 0xe, 0x44, 0x1}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00') writev(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ioprio_set$uid(0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000004c0)={'comedi_test\x00', [0x100, 0x800000f, 0x20000d0, 0xfffffffe, 0x10001, 0x100, 0x7, 0x20000000, 0x8, 0xb, 0xfffffffc, 0x8, 0x1, 0x401, 0xffff, 0x1, 0x0, 0xb, 0xfe9, 0x401, 0x0, 0x2, 0x3, 0x9, 0x48, 0x9, 0x2, 0x6a77, 0x5, 0x400, 0x8]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000140)={0x3, 0x1}) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000081}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r8, 0x1f) 3m7.609453077s ago: executing program 32 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='forc', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r3, &(0x7f0000000600)='1', 0x1) r4 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x4903, 0x0) ioctl$CDROMVOLCTRL(r4, 0x31f, &(0x7f0000000040)={0xa1, 0xe, 0x44, 0x1}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00') writev(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ioprio_set$uid(0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000004c0)={'comedi_test\x00', [0x100, 0x800000f, 0x20000d0, 0xfffffffe, 0x10001, 0x100, 0x7, 0x20000000, 0x8, 0xb, 0xfffffffc, 0x8, 0x1, 0x401, 0xffff, 0x1, 0x0, 0xb, 0xfe9, 0x401, 0x0, 0x2, 0x3, 0x9, 0x48, 0x9, 0x2, 0x6a77, 0x5, 0x400, 0x8]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000140)={0x3, 0x1}) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000081}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r8, 0x1f) 2m29.40821518s ago: executing program 4 (id=318): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000ac0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x30, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x5, 0x0, 0x2, '\x00', {0xf, 0x6, '\x00', 0x9, 0x3b, 0xff, @mcast2, @empty}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4e, @private2, @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) r4 = syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000580)={&(0x7f0000000500)=""/67, 0x226000, 0x800, 0x401, 0x2}, 0x1c) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x1) fchdir(r7) wait4(r4, 0x0, 0x40000000, 0x0) 2m28.113978228s ago: executing program 4 (id=322): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r3, 0x0, 0x100000000000000}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$vcsa(&(0x7f0000000100), 0x10, 0x400) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local}, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=ANY=[@ANYBLOB="1c0000000706010400000072f709176096e400000000000500000a050001000700000044ea8d86b0a4ca5041631c5f41a68f7a9bb7204b54a7ee8b7fa1987f4c96e20d90dc7b8626e2c5f00a945e635a7a56a999931e60ae8f0cf49128196ac8e03ed81b340e9712511c960f10bf1289700a88be95ba7a94fe4cc526fbc17ccca92a9d0a0ac57717df3b4a2951e094a4d3cbaeb18eac84693e8ce12b3e9a469aa28b82121590a4be5a1263e9e40842dedd6816e7ad419cb5e97150dd28f45d07160ed0cf98d5e6ec5bbeaaab612a62f659eac400"/224], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') 2m27.025363982s ago: executing program 4 (id=325): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() getxattr(&(0x7f0000000100)='\x00', &(0x7f0000000140)=@random={'user.', 'proc\x00'}, &(0x7f0000000200)=""/146, 0x92) r2 = socket(0x28, 0x5, 0x0) sendmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_open_procfs(r1, &(0x7f00000001c0)='timerslack_ns\x00') read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000eb424003165473d800631fa400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) 2m27.023801573s ago: executing program 4 (id=326): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = eventfd2(0xffff, 0x801) fsetxattr$security_ima(r1, &(0x7f00000000c0), 0x0, 0x0, 0x3) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r2 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) r3 = openat$ublk_ctrl(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UBLK_U_CMD_DEL_DEV(0xffffffffffffffff, 0xc0207505, &(0x7f0000000180)={0x0}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000200)={r4, 0xffff, 0x0, 0x0, r0}) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r2, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r5 = open$dir(&(0x7f0000000280)='./file0\x00', 0x404000, 0xa8) openat$incfs(r5, &(0x7f0000000300)='.pending_reads\x00', 0x208900, 0x10d) 2m26.73527004s ago: executing program 4 (id=328): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x40000012, 0x0, 0xffffffffffffffff, 0xf0ffff}, 0x48) 2m26.566581547s ago: executing program 4 (id=331): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) mkdirat(r3, &(0x7f0000000100)='./bus\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8000) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002200)="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", 0x77a) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) r7 = dup2(r4, r1) getsockopt$sock_buf(r7, 0x1, 0x1a, &(0x7f00000003c0)=""/247, &(0x7f0000000500)=0xf7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r6], 0x4c}, 0x2, 0x34005}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/12], 0x50) 2m26.449263702s ago: executing program 33 (id=331): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) mkdirat(r3, &(0x7f0000000100)='./bus\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8000) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002200)="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", 0x77a) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) r7 = dup2(r4, r1) getsockopt$sock_buf(r7, 0x1, 0x1a, &(0x7f00000003c0)=""/247, &(0x7f0000000500)=0xf7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r6], 0x4c}, 0x2, 0x34005}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/12], 0x50) 1m9.22843634s ago: executing program 0 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000000)) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) getsockname$netlink(r0, &(0x7f0000000380), 0x0) recvmmsg(r1, 0x0, 0x0, 0x40002100, 0x0) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (fail_nth: 7) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r5, &(0x7f0000000180)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 1m9.163143355s ago: executing program 0 (id=751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_socket_connect_nvme_tcp() r3 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet_nvme(r2, &(0x7f00000005c0)=""/213, 0xd5, 0x0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @remote}, 0x4, 0x1, 0x1, 0x4}}, 0x80) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="bc04000000050101000000000000f5000a00000854020100000000002900000002008b5a0000230073797a300000000000000000000000000000000000000000000000000000000047a20492f848fb06efbe41e2e43b787bafa331813bbe5732a4c0c5db1f7810e3f9b1cd62dfec20ea13bef5a8c2496c0a981158cffaccaed5c4da9335988fe23b0300018003000013ddffffff01000000030000006c0e00006d0b000000000000d457ffff01000300000000000800000009000100000000000500000080000800030000000100000000000100010000000d00000000800200030000009b0900000f00470002000000020000000300ff03020000006dc3000001000000010000000200000040000500000000000300000000010800020000004100000006000000030000000000000000000400000000008100000001000900020000000800000007004f0001000000060000000600710d03000000010000009296000803000000050000000500ff0303000000050000000600070002000000ca0a0000010005000200000006000000010000000300000007000000ffff0200010000000b000000ff0f09000300000007000000600b03000300000000080000b10b06000000000000000000ff0303000100000000020000040024de0100000010000000ff010200010000000100008073f90a00030000008000000006000100020000000080000000000200030000000900000003000100000000007204000005000000020000007f00000081000e00000000000200000004005e0001000000090000000002020003000000ff010000090006000200000007000000cbf0e40103000000070000005402010000000000cd950000008000000300230073797a3100000000000000000000000000000000000000000000000000000000c7e3a40210c0051a63545de15e08dc4c2da2d4f6edf7b4a5fc5fc990d76fba20c47913ad3b2a9d5de94a8fb3a34ee8351fa0cd52f2a39d3f77838f8f5c5c6616050000000300000000000000ff01010003000000210900000000ffff0000000001000000040003000000000000c000007b53010001000000610d000001040500030000006005000006000600000000000200000010009d0403000000050000000400050003000000ab0000000900060003000000030000000800000200000000090000000500f06c02000000010400000600010001000000ff00000000086159030000000f0000000f000300010000000900000004000e00010000002600000005000b0002000000050000000300410c020000000bff00006a63d70002000000ffffffff060006000300000000010000050005000300000005000000f9ff80000200000004000000ca020800000000000104000006000d0003000000010400000800080003000000000000000000cd0001000000090000000800000001000000030000000001020000000000ff0f00000100ff0100000000020000006c000000000000000237110709000000010000008100000000800800020000000600000000000400030000004a0000000600b806030000004f2a0000834b050003000000030000000080fe0b02000000080000000d0004000000000001000080ff03fbff00000000ffffff7f0400ff070000000008000000400006000300000004000000"], 0x4bc}, 0x1, 0x0, 0x0, 0x10}, 0x40000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="450000001daa00000000000000dbdf250a0000002f6512366b3a1efc34043f4e34ad0cec0e89a0ad15f992c23b2a00ccba878b2ef3e2df15011d1a489c671344", @ANYRES32=0x0, @ANYBLOB="0000010b080001000a010102"], 0x24}}, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1ff, 0x400100) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x6dac5) r8 = openat$vmci(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000700)={@any, 0x1}) 1m8.99775778s ago: executing program 0 (id=755): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delneigh={0x1c, 0x1d, 0x300, 0x0, 0x1000000, {0x7, 0x0, 0x0, 0x0, 0x80, 0x2, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdcf5, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, 0x0, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)}], 0x1}, 0x4) 1m8.849460055s ago: executing program 0 (id=758): syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) (async) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$VIDIOC_DQEVENT(r1, 0x80805659, &(0x7f0000000400)={0x0, @frame_sync}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') (async) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "798bcebd0000000700000314fd5370f3"}, 0x4000c, 0x1}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd) 1m8.785646368s ago: executing program 0 (id=759): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x1d6b\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0x1ed) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x12, 0x0, 0x11, 0x4, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x28) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x800, 0x7b2e, {0x0, 0x2710}, {0x0, 0x2, 0x5, 0x2, 0x7, 0x9, "190c98cf"}, 0x4}) 1m8.507229826s ago: executing program 0 (id=763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000034000000030a01080000000000000000010000000900030073797a320000000008000a40000000040900010073797a30000000002c000000060a01fdffffffffffffff00010000000900020073797a32000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x4040035}, 0x4008090) r6 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c000c000000020000000000000000000009000010000000"], 0x0, 0x26}, 0xfffffffffffffee6) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'bridge0\x00'}) openat$snapshot(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) r9 = openat$sw_sync_info(0xffffff9c, &(0x7f00000007c0), 0x60cb02, 0x0) fsetxattr$security_evm(r9, &(0x7f0000001bc0), 0x0, 0x0, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r10, 0x29, 0x43, 0x0, &(0x7f00000001c0)) ioctl$XFS_IOC_FSGEOMETRY_V4(r9, 0x8070587c, &(0x7f0000000400)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1m8.447113117s ago: executing program 34 (id=763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000034000000030a01080000000000000000010000000900030073797a320000000008000a40000000040900010073797a30000000002c000000060a01fdffffffffffffff00010000000900020073797a32000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x4040035}, 0x4008090) r6 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c000c000000020000000000000000000009000010000000"], 0x0, 0x26}, 0xfffffffffffffee6) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'bridge0\x00'}) openat$snapshot(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) r9 = openat$sw_sync_info(0xffffff9c, &(0x7f00000007c0), 0x60cb02, 0x0) fsetxattr$security_evm(r9, &(0x7f0000001bc0), 0x0, 0x0, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r10, 0x29, 0x43, 0x0, &(0x7f00000001c0)) ioctl$XFS_IOC_FSGEOMETRY_V4(r9, 0x8070587c, &(0x7f0000000400)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 9.028667954s ago: executing program 1 (id=1043): r0 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x4065, 0x0, 0x6, 0x9, 0x7ff, 0x8100}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x4c880) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0x10, 0x80000006}, 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x208800, 0x0) 7.833637779s ago: executing program 1 (id=1049): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x5, 0x0) connect$unix(r0, 0x0, 0x4d) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x77b, &(0x7f0000000180)={0x0, 0x6614, 0x800, 0x3, 0x272}, 0x0, &(0x7f0000000040), &(0x7f0000000000)) mmap$IORING_OFF_PBUF_RING(0x0, 0x37, 0x1, 0x10, r2, 0x82dd4939) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4044810) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) creat(0x0, 0x77) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="09022abd7000fedbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x48d0}, 0x8000) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000000c0)="0fc738660f6e29f30f1bd666b99508000066b80030000066ba000000000f30f7c50008670f08660f38de5800f30f1f748f260f01c4f4", 0x36}], 0x1, 0xd, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 6.618955371s ago: executing program 1 (id=1053): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x7) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) pselect6(0x40, &(0x7f0000000040)={0x9, 0x800, 0x2, 0x300, 0x0, 0x10000000, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0xf2, 0x3, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x13f) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') write(r0, &(0x7f0000000400)='10 1 1\x00', 0x7) 5.840808926s ago: executing program 5 (id=1055): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000034000000030a01080000000000000000010000000900030073797a320000000008000a40000000040900010073797a30000000002c000000060a01fdffffffffffffff00010000000900020073797a32000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x4040035}, 0x4008090) r6 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c000c000000020000000000000000000009000010000000"], 0x0, 0x26}, 0xfffffffffffffee6) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'bridge0\x00'}) openat$snapshot(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) r9 = openat$sw_sync_info(0xffffff9c, &(0x7f00000007c0), 0x60cb02, 0x0) fsetxattr$security_evm(r9, &(0x7f0000001bc0), 0x0, 0x0, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r10, 0x29, 0x43, 0x0, &(0x7f00000001c0)) ioctl$XFS_IOC_FSGEOMETRY_V4(r9, 0x8070587c, &(0x7f0000000400)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 5.33945939s ago: executing program 1 (id=1057): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ptrace(0x10, 0x0) mmap$snddsp(&(0x7f0000bdf000/0x14000)=nil, 0x14000, 0x3000003, 0x810, 0xffffffffffffffff, 0x10000) ptrace$peekuser(0x3, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r7, r6, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x2fe, 0x0, r7}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x10, 0x2, 0x8f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x400, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x400eaff, 0x8, 0xfffffffb, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0xb, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r5, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="140040002300090425bd7000ffd3df250200"], 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r9, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) 4.454164955s ago: executing program 5 (id=1059): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5015, 0x0) 4.318172662s ago: executing program 5 (id=1060): r0 = socket(0x10, 0x3, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000001640)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)='./file1\x00') ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0xd) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c2"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0xa, 0x400, 0x0, 0x6020, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r5, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r4, &(0x7f0000000380)="518b21082a20c19e90e1baefb799ecc94756e5b6c79aa484a82af29cd017b8226c555d2df2ef055069b26c6d", &(0x7f00000003c0)=""/30}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0xf0b, 0x80, 0x25dfdbff, {0x60, 0x0, 0x0, r7, {0x3, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x4008000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000200)={0x10, 0x0, &(0x7f00000002c0)=[@request_death], 0x0, 0x1000000, 0x0}) 4.093602547s ago: executing program 3 (id=1061): fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3.75040385s ago: executing program 6 (id=1063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 3.705127724s ago: executing program 3 (id=1064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x98}}, 0x20050800) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r6}, 0x38) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r6}, 0x38) 2.562746245s ago: executing program 6 (id=1065): mkdir(&(0x7f0000000000)='./mydebug\x00', 0x13e) mount(0x0, &(0x7f0000000200)='./mydebug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mydebug/dynamic_debug/control\x00', 0x1, 0x0) write(r1, 0x0, 0x8baf60ee) 2.561977749s ago: executing program 1 (id=1066): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600200000fc020000000000000000000000000001ffc5"], 0x0) r1 = socket(0x2, 0x1, 0x7) bind(r1, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r1, 0x1) r2 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) creat(&(0x7f0000000300)='./file1\x00', 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "425ae375378532d249154c94b4c78a38b4c9810000f900000000000000001e00", 0xffffffffffffffff}) io_submit(r3, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) socket(0x1f, 0xa, 0x8000000) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='dummy_udc.0', 0xb) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='dummy_udc.0', 0xb) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 2.561279605s ago: executing program 5 (id=1067): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x0, 0x10001, 0xfffff84a, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0xffff, 0x140220}) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x2004000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/platform/drivers/serial8250/unbind\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) write(r2, &(0x7f0000000600)='serial8250\x00', 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f000000bbc0)={0x0, 0x0, &(0x7f000000bb80)={&(0x7f000000b9c0)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48090}, 0x4) r8 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x3, 0x40a400) ioctl$DVB_DVR_DMX_EXPBUF(r8, 0xc00c6f3e, &(0x7f00000000c0)={0x4, 0x80000, r3}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r9], 0x34}}, 0x4008000) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=""/189, 0xbd) socket$igmp(0x2, 0x3, 0x2) 2.560731125s ago: executing program 3 (id=1068): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000001000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x1b, 0x0, 0xfee00d00}, {0x80f, 0x0, 0x4000000000001ff}]}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000380)=[{0x84, 0x103, 0x80000001, "7ecce7a96dac694a0961a87786716a46540d843153c716f8048d99eda348034bd48ddd42d91bc6389e8180c404b4e460fd0c4d9dc09eb8a67eeac6872ba28323740ad935b1f840c3fb3b443d98ec561230fb6cb135a0fae7d24e7fab288d1249ce9c37b6054061e7e596f75810a1cfc943aff6cd6fd355"}], 0x84}}], 0x1, 0x24000000) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5}) r6 = openat$fb0(0xffffff9c, &(0x7f0000000180), 0xc0, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000680)={0x0, 0x1, &(0x7f0000000200)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r9}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000006c0)=""/80, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 2.559349185s ago: executing program 6 (id=1069): r0 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf\"\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`\x1e\x91<~\xd8\xabs\xbd*e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2\x04\x00\x00\x00\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x1e\xfc/fm\xa9`)\xfc7\x84\f+\xf7\x95\xab[J\xe7\x9d\xd8\xe3\x86\xdb\xfe|\xe91\n\xa0\xdf\v\\\xe4\x00'/941, 0x40, 0x170, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x5, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x800000, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) connect$bt_sco(r5, &(0x7f0000000080)={0x1f, @none}, 0x8) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x8000000, r1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001740)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "5ff2f78088d4ae"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000740)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x7, "390c4bfe4f19aa"}) r10 = syz_open_dev$loop(&(0x7f0000000040), 0x100013, 0xa4a82) ioctl$LOOP_SET_FD(r10, 0x4c00, 0xffffffffffffffff) 2.558888733s ago: executing program 5 (id=1070): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) socket$netlink(0x10, 0x3, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)) getpriority(0x1, r1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2.390077824s ago: executing program 1 (id=1071): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300), 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xbfab, 0xd0180) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0xfffffffe}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000003c0)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r3, 0x7c81, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r6, 0x4, 0xc00) read$char_usb(r6, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x2, 0x0, 0x2}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r7, r7, 0x0, 0x2000009) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0xfffffe58, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000010010000003c000180060001000200000008000700", @ANYRES32=0x0, @ANYBLOB="050002000a000000060005004e20000005000200af000000060001000a00000008000300e0000002cc5e5a28567221b5b6f42d4fc199ac8176eeefd30190978e2269eb070cb64d3dfe214e363848b0434b9dd2068b880aa384dde91bb7f2cda14ec7d14e28a45a6ad7d81ac58453741b491cdf1063106e2cbb0bcf3dbc2be9f4f9e2ba60e19b35a712"], 0x50}}, 0x10) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000345c02f9a372dde98842c8a284ea67347faf180e257a58e671954bb9300f5071ef11dcc9a014d033f8c8a536e543798c6b88d90ce12b9a5c61447c50395278ff21fa1007deaeac85f59f1b8eb7c60c19711ea586c181b017a8bf4c767607fb8dd1ab23aa2c2ffe38bcba", @ANYRES64=r8, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x808) write$P9_RLERROR(r7, &(0x7f0000000000)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) 2.084391891s ago: executing program 6 (id=1072): fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.031065411s ago: executing program 5 (id=1073): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@empty, @dev={0xac, 0x14, 0x14, 0x22}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xfffffffe, 0x8}, 0x3c) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ed8755b5dc4e0e000c58ea00000000000600", 0x0, 0xfffffffe, 0x2, 0x2}, 0x3c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)="b2d311af94b883a7c917af570ae7b1e843a0a788f69d7891ade96769393efc8056a6f002e30c8d84568d737b56856a562c77400d2763599c42c39c2c346641f570afdc53d009685de5793fa1d5eece360b7f7647069f8c0e53a28126b06a6b5e797d92fc70f0bbf7cf41ac7523191c55decb8e836ebd8eba368cc270864fb703f797122b8690d189cd617620b20d0a9b8796") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="8026ee752e3e6baebb19e87411603274225fed85ccb945828cdd251952b4baca74888f23a4a0132f27188b00"/54, @ANYRES16=r0], 0x54) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) connect$packet(r5, &(0x7f00000003c0)={0x11, 0x12, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002e00090027bd700000000000040000004500118031f9e05e2f826cfc31dc2af824704f63dac994ce01dc7224e5479795b50d9015743a8b755e02e490bdfc3da898257de5b8996dbc932b5009df63b75f105c53ead0000000acc652da811ec41bc62fcd1ece064007233e937838ec6dd310243bb25df3f3da4035c973b36db7eee41680503e9a85319b6cde33bdcbed0f57b013b4c015dd521107a0df866951fe5769bce047be17f072233a9eb9244fd8d9ecd9ec5c3acf4bf2d9cd7209000000c3eb0e5d2c2ae6227b44019352854167792e1dacdee31a98d2591ced646e3ae8"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31"], 0x50}, 0x1, 0x0, 0x0, 0x10000883}, 0x4000080) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000806010200000000000000000700000805000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x20048840) openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.963197223s ago: executing program 3 (id=1074): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r1, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x80000000, 0x0) 1.806827721s ago: executing program 6 (id=1075): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fanotify_init(0x1a, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_clone(0xf5ff, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$IPSET_CMD_GET_BYINDEX(r5, 0x0, 0x4008004) 575.310532ms ago: executing program 3 (id=1076): r0 = epoll_create1(0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x80000000, 0x8, 0x8, 0x100, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x6}) (async, rerun: 64) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) (rerun: 64) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) (async) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) 107.867138ms ago: executing program 3 (id=1077): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) socket$netlink(0x10, 0x3, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (fail_nth: 6) 0s ago: executing program 6 (id=1078): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRES32=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32=r3, @ANYBLOB="2c67726f5dbedd4e2aca69fd1138206bd3e88c7f205e1dfcff653d9b8ffdc812dbf9f41a519e80f41d5af61c17fd7535c7a7d334bcf58d7ad5f5f0a509b773ffcfcd95b3193ae503c88680fde7ad955541801a85f01bbce03963fa2e14fd1a3215bcc6e2343f30eadc1e2f96f412ad4085815e5eed3c8b15a8846292be341826a259ac0af0adf161b0b7991b3a908e1d30534e267e5c9990128a10ed2200"/170, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001dc0)={0x50, 0xffffffffffffffda, r4, {0x7, 0x2b, 0x0, 0x2b418842, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r5, r6, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xfffffffeffffffff, {0x5, 0x3, 0x0, 0x4000000000004, 0xfffffffd, 0x6, {0x2, 0x76, 0x808, 0xfffffffffbd, 0x8, 0x81, 0xfaae, 0x6, 0x2, 0x4000, 0xe44, r5, r6, 0x4, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000008200)="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", 0x2000, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a4c0)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fanotify_init(0x1a, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r9) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) kernel console output (not intermixed with test programs): _1) entered blocking state [ 183.316248][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.330964][ T8679] bridge_slave_1: entered allmulticast mode [ 183.339779][ T8679] bridge_slave_1: entered promiscuous mode [ 183.443473][ T8679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.462649][ T8679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.573018][ T8679] team0: Port device team_slave_0 added [ 183.591915][ T8679] team0: Port device team_slave_1 added [ 183.670840][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.678688][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.707146][ T8679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.728917][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.734155][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.762748][ T8813] FAULT_INJECTION: forcing a failure. [ 183.762748][ T8813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.770524][ T8679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.772691][ T8813] CPU: 2 UID: 0 PID: 8813 Comm: syz.0.696 Not tainted syzkaller #0 PREEMPT(full) [ 183.772713][ T8813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.772723][ T8813] Call Trace: [ 183.772728][ T8813] [ 183.772732][ T8813] dump_stack_lvl+0x100/0x190 [ 183.772756][ T8813] should_fail_ex.cold+0x5/0xa [ 183.772776][ T8813] _copy_from_user+0x2e/0xd0 [ 183.772801][ T8813] input_event_from_user+0x137/0x290 [ 183.772823][ T8813] ? __pfx_input_event_from_user+0x10/0x10 [ 183.772849][ T8813] ? input_inject_event+0x198/0x380 [ 183.772876][ T8813] evdev_write+0x27a/0x430 [ 183.772922][ T8813] ? __pfx_evdev_write+0x10/0x10 [ 183.772947][ T8813] ? bpf_lsm_file_permission+0x9/0x10 [ 183.772963][ T8813] ? security_file_permission+0x76/0x210 [ 183.772986][ T8813] ? rw_verify_area+0xce/0x6d0 [ 183.773012][ T8813] vfs_write+0x2aa/0x1050 [ 183.773028][ T8813] ? __pfx_evdev_write+0x10/0x10 [ 183.773049][ T8813] ? __pfx_vfs_write+0x10/0x10 [ 183.773063][ T8813] ? find_held_lock+0x2b/0x80 [ 183.773082][ T8813] ? __fget_files+0x215/0x3d0 [ 183.773097][ T8813] ? __fget_files+0x215/0x3d0 [ 183.773115][ T8813] ? __fget_files+0x21f/0x3d0 [ 183.773131][ T8813] ksys_write+0x1f8/0x250 [ 183.773146][ T8813] ? __pfx_ksys_write+0x10/0x10 [ 183.773160][ T8813] ? ksys_write+0x1ac/0x250 [ 183.773175][ T8813] ? __pfx_ksys_write+0x10/0x10 [ 183.773195][ T8813] __do_fast_syscall_32+0xe7/0x970 [ 183.773214][ T8813] ? lockdep_hardirqs_on+0x78/0x100 [ 183.773232][ T8813] do_fast_syscall_32+0x32/0x70 [ 183.773253][ T8813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.773274][ T8813] RIP: 0023:0xf7fd5fec [ 183.773293][ T8813] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 183.773300][ T8813] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 183.773315][ T8813] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 183.773324][ T8813] RDX: 000000000000ff0f RSI: 0000000000000000 RDI: 0000000000000000 [ 183.773330][ T8813] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.773339][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.773348][ T8813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.773371][ T8813] [ 183.988411][ T42] audit: type=1326 audit(1786545694.115:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8815 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 184.024908][ T42] audit: type=1326 audit(1786545694.115:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8815 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 184.043847][ T42] audit: type=1326 audit(1786545694.124:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8815 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 184.069375][ T42] audit: type=1326 audit(1786545694.124:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8815 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 184.088720][ T42] audit: type=1326 audit(1786545694.143:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8815 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 184.098730][ T8679] hsr_slave_0: entered promiscuous mode [ 184.106646][ T8679] hsr_slave_1: entered promiscuous mode [ 184.113621][ T42] audit: type=1326 audit(1786545694.143:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8815 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 184.131956][ T42] audit: type=1326 audit(1786545694.143:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8815 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 184.142672][ T8679] debugfs: 'hsr0' already exists in 'hsr' [ 184.156811][ T8679] Cannot create hsr debugfs directory [ 184.162033][ T5454] 8021q: adding VLAN 0 to HW filter on device eth12 [ 184.164326][ T42] audit: type=1326 audit(1786545694.143:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8815 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 184.176532][ T42] audit: type=1326 audit(1786545694.143:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8815 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 184.197571][ T42] audit: type=1326 audit(1786545694.143:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8815 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 184.298870][ T8818] netlink: 'syz.0.697': attribute type 29 has an invalid length. [ 184.323809][ T8816] wg2 speed is unknown, defaulting to 1000 [ 184.433150][ T5795] bond1: (slave gretap1): failed to get link speed/duplex [ 184.968878][ T5102] Bluetooth: hci1: command 0x041b tx timeout [ 185.034630][ T8834] syzkaller0: entered promiscuous mode [ 185.038221][ T8834] syzkaller0: entered allmulticast mode [ 185.046166][ T8824] wg2 speed is unknown, defaulting to 1000 [ 185.692393][ T5795] net_ratelimit: 3 callbacks suppressed [ 185.692406][ T5795] bond1: (slave gretap1): failed to get link speed/duplex [ 185.822073][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 186.184894][ T5795] bond1: (slave gretap1): failed to get link speed/duplex [ 186.196623][ T8679] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.213596][ T8679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.224144][ T8679] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.272427][ T8679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.278536][ T8679] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.289109][ T8679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.294674][ T8679] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 186.335410][ T8679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.419300][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 186.428026][ T8877] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 186.611669][ T8679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.655060][ T8679] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.680502][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.682783][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.713341][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.715590][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.804740][ T5795] bond1: (slave gretap1): failed to get link speed/duplex [ 186.921295][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 187.040742][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 187.156499][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 187.199162][ T5102] Bluetooth: hci1: command 0x041b tx timeout [ 187.295709][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 187.673845][ T5795] bond1: (slave gretap1): failed to get link speed/duplex [ 188.313927][ T8679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.401294][ T8679] veth0_vlan: entered promiscuous mode [ 188.407900][ T8679] veth1_vlan: entered promiscuous mode [ 188.447239][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 188.450611][ T8679] veth0_macvtap: entered promiscuous mode [ 188.474724][ T8679] veth1_macvtap: entered promiscuous mode [ 188.528548][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.539051][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.551178][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.557838][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.565221][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.572989][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.663707][ T8935] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.665880][ T8935] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.668164][ T8935] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.679425][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.711'. [ 188.732568][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.740557][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.779285][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.790457][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.850167][ T8943] FAULT_INJECTION: forcing a failure. [ 188.850167][ T8943] name failslab, interval 1, probability 0, space 0, times 0 [ 188.865680][ T8943] CPU: 2 UID: 0 PID: 8943 Comm: syz.5.713 Not tainted syzkaller #0 PREEMPT(full) [ 188.865697][ T8943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.865704][ T8943] Call Trace: [ 188.865708][ T8943] [ 188.865713][ T8943] dump_stack_lvl+0x100/0x190 [ 188.865729][ T8943] should_fail_ex.cold+0x5/0xa [ 188.865743][ T8943] should_failslab+0xc2/0x120 [ 188.865758][ T8943] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 188.865773][ T8943] ? __alloc_skb+0x140/0x710 [ 188.865790][ T8943] __alloc_skb+0x140/0x710 [ 188.865803][ T8943] ? __alloc_skb+0x5b7/0x710 [ 188.865817][ T8943] ? __pfx___alloc_skb+0x10/0x10 [ 188.865835][ T8943] inet6_ifmcaddr_notify+0xd6/0x1d0 [ 188.865862][ T8943] ? __pfx_inet6_ifmcaddr_notify+0x10/0x10 [ 188.865879][ T8943] ? mld_del_delrec+0x417/0xe30 [ 188.865897][ T8943] __ipv6_dev_mc_inc+0x712/0xbd0 [ 188.865917][ T8943] ipv6_add_dev+0xb78/0x1520 [ 188.865937][ T8943] addrconf_notify+0xbd3/0x1ba0 [ 188.865953][ T8943] ? __pfx_tls_dev_event+0x10/0x10 [ 188.865970][ T8943] ? __pfx_addrconf_notify+0x10/0x10 [ 188.865986][ T8943] ? ip6mr_device_event+0x1c4/0x230 [ 188.866003][ T8943] notifier_call_chain+0x99/0x3f0 [ 188.866021][ T8943] call_netdevice_notifiers_info+0xbe/0x110 [ 188.866040][ T8943] netif_set_mtu_ext+0x48b/0x7b0 [ 188.866056][ T8943] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 188.866072][ T8943] ? __lock_acquire+0x49f/0x1a40 [ 188.866093][ T8943] netif_set_mtu+0x9c/0x130 [ 188.866107][ T8943] ? __pfx_netif_set_mtu+0x10/0x10 [ 188.866120][ T8943] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.866140][ T8943] ? full_name_hash+0xbc/0x100 [ 188.866155][ T8943] dev_set_mtu+0xb2/0x260 [ 188.866172][ T8943] dev_ifsioc+0x21b/0x1f10 [ 188.866210][ T8943] ? __pfx_dev_ifsioc+0x10/0x10 [ 188.866224][ T8943] ? __pfx___mutex_lock+0x10/0x10 [ 188.866243][ T8943] ? dev_load+0x8e/0x240 [ 188.866256][ T8943] ? dev_load+0x8e/0x240 [ 188.866273][ T8943] dev_ioctl+0x342/0x1070 [ 188.866290][ T8943] sock_do_ioctl+0x1a0/0x280 [ 188.866308][ T8943] ? __pfx_sock_do_ioctl+0x10/0x10 [ 188.866328][ T8943] ? do_vfs_ioctl+0x226/0x13e0 [ 188.866343][ T8943] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.866361][ T8943] ? __pfx_unix_compat_ioctl+0x10/0x10 [ 188.866373][ T8943] ? unix_ioctl+0x9c/0x570 [ 188.866385][ T8943] compat_sock_ioctl+0x568/0x760 [ 188.866401][ T8943] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 188.866413][ T8943] ? hook_file_ioctl_common+0x140/0x440 [ 188.866432][ T8943] ? __fget_files+0x21f/0x3d0 [ 188.866447][ T8943] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 188.866460][ T8943] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 188.866478][ T8943] __do_fast_syscall_32+0xe7/0x970 [ 188.866493][ T8943] ? lockdep_hardirqs_on+0x78/0x100 [ 188.866508][ T8943] do_fast_syscall_32+0x32/0x70 [ 188.866523][ T8943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.866538][ T8943] RIP: 0023:0xf708efec [ 188.866553][ T8943] Code: Unable to access opcode bytes at 0xf708efc2. [ 188.866558][ T8943] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 188.866570][ T8943] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008922 [ 188.866577][ T8943] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.866583][ T8943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.866589][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.866595][ T8943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.866609][ T8943] [ 188.894137][ T8947] FAULT_INJECTION: forcing a failure. [ 188.894137][ T8947] name failslab, interval 1, probability 0, space 0, times 0 [ 188.999523][ T8947] CPU: 0 UID: 0 PID: 8947 Comm: syz.3.671 Not tainted syzkaller #0 PREEMPT(full) [ 188.999540][ T8947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.999547][ T8947] Call Trace: [ 188.999551][ T8947] [ 188.999555][ T8947] dump_stack_lvl+0x100/0x190 [ 188.999580][ T8947] should_fail_ex.cold+0x5/0xa [ 188.999591][ T8947] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 188.999604][ T8947] should_failslab+0xc2/0x120 [ 188.999619][ T8947] kmem_cache_alloc_noprof+0x91/0x6a0 [ 188.999634][ T8947] ? skb_clone+0x190/0x400 [ 188.999651][ T8947] skb_clone+0x190/0x400 [ 188.999665][ T8947] netlink_deliver_tap+0xaed/0xcc0 [ 188.999681][ T8947] netlink_unicast+0x62b/0x850 [ 188.999694][ T8947] ? __pfx_netlink_unicast+0x10/0x10 [ 188.999709][ T8947] netlink_sendmsg+0x8b0/0xda0 [ 188.999723][ T8947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.999737][ T8947] ? apparmor_socket_sendmsg+0x15b/0x270 [ 188.999751][ T8947] ____sys_sendmsg+0xa4d/0xbe0 [ 188.999761][ T8947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.999773][ T8947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.999790][ T8947] ___sys_sendmsg+0x190/0x1e0 [ 188.999803][ T8947] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.999820][ T8947] ? find_held_lock+0x2b/0x80 [ 188.999842][ T8947] __sys_sendmsg+0x160/0x210 [ 188.999858][ T8947] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.999876][ T8947] ? __pfx_ksys_write+0x10/0x10 [ 188.999889][ T8947] __do_fast_syscall_32+0xe7/0x970 [ 188.999903][ T8947] ? lockdep_hardirqs_on+0x78/0x100 [ 188.999917][ T8947] do_fast_syscall_32+0x32/0x70 [ 188.999931][ T8947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.999946][ T8947] RIP: 0023:0xf7f46fec [ 188.999960][ T8947] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 188.999964][ T8947] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 188.999975][ T8947] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800002c0 [ 188.999982][ T8947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.999988][ T8947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.999994][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.000000][ T8947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.000013][ T8947] [ 189.123972][ T8945] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 190.875078][ T5758] Bluetooth: hci2: command 0x0419 tx timeout [ 190.877141][ T5758] Bluetooth: hci3: command 0x0419 tx timeout [ 190.879289][ T5102] Bluetooth: hci1: command 0x041b tx timeout [ 191.120849][ T5820] net_ratelimit: 22 callbacks suppressed [ 191.120867][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 191.239212][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 191.366687][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 191.495794][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 191.612445][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 191.657004][ T8982] Cannot find set identified by id 2 to match [ 191.733727][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 191.847628][ T8983] ceph: No mds server is up or the cluster is laggy [ 191.869607][ T5795] bond1: (slave gretap1): failed to get link speed/duplex [ 192.009783][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 192.071726][ T8996] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.074189][ T8996] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.076527][ T8996] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.138969][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 192.269284][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 192.347999][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 192.368045][ T9007] netlink: 'syz.3.730': attribute type 30 has an invalid length. [ 192.385950][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 192.391311][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.391857][ T9007] netlink: 'syz.3.730': attribute type 30 has an invalid length. [ 192.396337][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.399857][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.428800][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.753317][ T9009] netlink: 68 bytes leftover after parsing attributes in process `syz.3.732'. [ 192.839339][ T9013] FAULT_INJECTION: forcing a failure. [ 192.839339][ T9013] name failslab, interval 1, probability 0, space 0, times 0 [ 192.844879][ T9013] CPU: 0 UID: 0 PID: 9013 Comm: syz.0.734 Not tainted syzkaller #0 PREEMPT(full) [ 192.844895][ T9013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.844902][ T9013] Call Trace: [ 192.844906][ T9013] [ 192.844910][ T9013] dump_stack_lvl+0x100/0x190 [ 192.844927][ T9013] should_fail_ex.cold+0x5/0xa [ 192.844945][ T9013] should_failslab+0xc2/0x120 [ 192.844960][ T9013] kmem_cache_alloc_noprof+0x91/0x6a0 [ 192.844973][ T9013] ? d_instantiate+0x8a/0xb0 [ 192.844986][ T9013] ? d_instantiate+0x8a/0xb0 [ 192.844998][ T9013] ? alloc_empty_file+0x5b/0x1c0 [ 192.845014][ T9013] alloc_empty_file+0x5b/0x1c0 [ 192.845028][ T9013] alloc_file_pseudo+0x183/0x290 [ 192.845043][ T9013] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 192.845057][ T9013] ? _raw_spin_unlock+0x28/0x50 [ 192.845068][ T9013] ? alloc_fd+0x471/0x7a0 [ 192.845080][ T9013] __anon_inode_getfile+0xe8/0x280 [ 192.845096][ T9013] __anon_inode_getfd+0x5c/0xe0 [ 192.845111][ T9013] __ia32_sys_fsopen+0x192/0x230 [ 192.845140][ T9013] __do_fast_syscall_32+0xe7/0x970 [ 192.845153][ T9013] ? lockdep_hardirqs_on+0x78/0x100 [ 192.845167][ T9013] do_fast_syscall_32+0x32/0x70 [ 192.845181][ T9013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.845195][ T9013] RIP: 0023:0xf7fd5fec [ 192.845209][ T9013] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 192.845214][ T9013] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 192.845225][ T9013] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 192.845232][ T9013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.845237][ T9013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.845243][ T9013] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.845249][ T9013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.845263][ T9013] [ 193.827733][ T5531] libceph: connect (1)[c::]:6789 error -101 [ 193.830012][ T5531] libceph: mon0 (1)[c::]:6789 connect error [ 193.877840][ T5102] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 194.126075][ T5531] libceph: connect (1)[c::]:6789 error -101 [ 194.130454][ T5531] libceph: mon0 (1)[c::]:6789 connect error [ 194.284614][ T5102] Bluetooth: hci1: command 0x041b tx timeout [ 194.286967][ T5756] Bluetooth: hci2: command 0x0419 tx timeout [ 194.289406][ T5758] Bluetooth: hci3: command 0x0419 tx timeout [ 194.516151][ T9043] netlink: 156 bytes leftover after parsing attributes in process `syz.3.740'. [ 194.690005][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 194.700614][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 194.763894][ T9029] ceph: No mds server is up or the cluster is laggy [ 195.242629][ T9050] FAULT_INJECTION: forcing a failure. [ 195.242629][ T9050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.291634][ T9050] CPU: 0 UID: 0 PID: 9050 Comm: syz.3.742 Not tainted syzkaller #0 PREEMPT(full) [ 195.291653][ T9050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.291660][ T9050] Call Trace: [ 195.291667][ T9050] [ 195.291673][ T9050] dump_stack_lvl+0x100/0x190 [ 195.291692][ T9050] should_fail_ex.cold+0x5/0xa [ 195.291705][ T9050] _copy_from_user+0x2e/0xd0 [ 195.291723][ T9050] get_compat_msghdr+0xb3/0x480 [ 195.291741][ T9050] ? __pfx_get_compat_msghdr+0x10/0x10 [ 195.291758][ T9050] ? rcu_is_watching+0x12/0xc0 [ 195.291772][ T9050] ? ___sys_recvmsg+0x177/0x1a0 [ 195.291783][ T9050] ? kfree+0x1e5/0x6c0 [ 195.291793][ T9050] ? __lock_acquire+0x49f/0x1a40 [ 195.291811][ T9050] ___sys_recvmsg+0x193/0x1a0 [ 195.291824][ T9050] ? __pfx____sys_recvmsg+0x10/0x10 [ 195.291842][ T9050] ? __pfx___might_resched+0x10/0x10 [ 195.291862][ T9050] do_recvmmsg+0x54d/0x740 [ 195.291875][ T9050] ? __pfx_do_recvmmsg+0x10/0x10 [ 195.291888][ T9050] ? find_held_lock+0x2b/0x80 [ 195.291900][ T9050] ? ksys_write+0x190/0x250 [ 195.291911][ T9050] ? ksys_write+0x190/0x250 [ 195.291925][ T9050] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.291943][ T9050] __sys_recvmmsg+0x21f/0x270 [ 195.291959][ T9050] ? __pfx___sys_recvmmsg+0x10/0x10 [ 195.291975][ T9050] ? ksys_write+0x1ac/0x250 [ 195.291986][ T9050] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 195.292004][ T9050] ? __do_fast_syscall_32+0x98/0x970 [ 195.292018][ T9050] ? lockdep_hardirqs_on+0x78/0x100 [ 195.292031][ T9050] __do_fast_syscall_32+0xe7/0x970 [ 195.292057][ T9050] ? lockdep_hardirqs_on+0x78/0x100 [ 195.292071][ T9050] do_fast_syscall_32+0x32/0x70 [ 195.292085][ T9050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.292100][ T9050] RIP: 0023:0xf7f46fec [ 195.292115][ T9050] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 195.292120][ T9050] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 195.292136][ T9050] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002e80 [ 195.292143][ T9050] RDX: 0000000004000071 RSI: 000000000000830b RDI: 0000000000000000 [ 195.292150][ T9050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.292156][ T9050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.292162][ T9050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.292175][ T9050] [ 195.987827][ T42] kauditd_printk_skb: 235 callbacks suppressed [ 195.987839][ T42] audit: type=1326 audit(1786545705.345:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.3.743" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f46fec code=0x0 [ 196.034710][ T9061] kAFS: unparsable volume name [ 196.040630][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.043670][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.371699][ T9072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.748'. [ 196.485389][ T5820] net_ratelimit: 33 callbacks suppressed [ 196.485404][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 196.506788][ T5102] Bluetooth: hci1: command 0x041b tx timeout [ 196.602780][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 196.701577][ T9080] FAULT_INJECTION: forcing a failure. [ 196.701577][ T9080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.705873][ T9080] CPU: 2 UID: 0 PID: 9080 Comm: syz.0.750 Not tainted syzkaller #0 PREEMPT(full) [ 196.705890][ T9080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.705896][ T9080] Call Trace: [ 196.705901][ T9080] [ 196.705907][ T9080] dump_stack_lvl+0x100/0x190 [ 196.705925][ T9080] should_fail_ex.cold+0x5/0xa [ 196.705938][ T9080] _copy_to_user+0x32/0xd0 [ 196.705956][ T9080] simple_read_from_buffer+0xcb/0x170 [ 196.705976][ T9080] proc_fail_nth_read+0x1af/0x230 [ 196.705991][ T9080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.706007][ T9080] ? rw_verify_area+0xce/0x6d0 [ 196.706023][ T9080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.706037][ T9080] vfs_read+0x1e4/0xb40 [ 196.706050][ T9080] ? __pfx_vfs_read+0x10/0x10 [ 196.706065][ T9080] ? find_held_lock+0x2b/0x80 [ 196.706080][ T9080] ? __fget_files+0x215/0x3d0 [ 196.706093][ T9080] ? __fget_files+0x21f/0x3d0 [ 196.706107][ T9080] ksys_read+0x12a/0x250 [ 196.706117][ T9080] ? __pfx_ksys_read+0x10/0x10 [ 196.706131][ T9080] do_int80_emulation+0x14b/0x720 [ 196.706167][ T9080] asm_int80_emulation+0x1a/0x20 [ 196.706179][ T9080] RIP: 0023:0xf71d72eb [ 196.706189][ T9080] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 196.706200][ T9080] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 196.706212][ T9080] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54965d0 [ 196.706218][ T9080] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 196.706224][ T9080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.706231][ T9080] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 196.706237][ T9080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.706250][ T9080] [ 196.773676][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 196.892657][ T5795] bond1: (slave gretap1): failed to get link speed/duplex [ 196.964206][ T9092] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 196.966292][ T9092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.970831][ T9092] vhci_hcd vhci_hcd.0: Device attached [ 196.975787][ T9093] usbip_core: unknown command [ 196.977581][ T9093] vhci_hcd: unknown pdu 84279397 [ 196.979593][ T9093] usbip_core: unknown command [ 196.981396][ T5795] vhci_hcd vhci_hcd.1: stop threads [ 196.986369][ T5795] vhci_hcd vhci_hcd.1: release socket [ 196.991847][ T5795] vhci_hcd vhci_hcd.1: disconnect device [ 197.011080][ T5795] bond1: (slave gretap1): failed to get link speed/duplex [ 197.034423][ T9090] comedi comedi3: pcl818: I/O base address or length out of range [ 197.047433][ T5102] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 197.137183][ T5795] bond1: (slave gretap1): failed to get link speed/duplex [ 197.261465][ T9112] FAULT_INJECTION: forcing a failure. [ 197.261465][ T9112] name failslab, interval 1, probability 0, space 0, times 0 [ 197.268545][ T9112] CPU: 2 UID: 0 PID: 9112 Comm: syz.5.760 Not tainted syzkaller #0 PREEMPT(full) [ 197.268571][ T9112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.268581][ T9112] Call Trace: [ 197.268587][ T9112] [ 197.268594][ T9112] dump_stack_lvl+0x100/0x190 [ 197.268616][ T9112] should_fail_ex.cold+0x5/0xa [ 197.268629][ T9112] should_failslab+0xc2/0x120 [ 197.268645][ T9112] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 197.268662][ T9112] ? __alloc_skb+0x140/0x710 [ 197.268679][ T9112] __alloc_skb+0x140/0x710 [ 197.268692][ T9112] ? __alloc_skb+0x5b7/0x710 [ 197.268706][ T9112] ? __pfx___alloc_skb+0x10/0x10 [ 197.268719][ T9112] ? genl_rcv_msg+0x4be/0x800 [ 197.268738][ T9112] netlink_ack+0x117/0xb80 [ 197.268754][ T9112] netlink_rcv_skb+0x333/0x420 [ 197.268766][ T9112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.268780][ T9112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.268812][ T9112] ? netlink_deliver_tap+0x1ae/0xcc0 [ 197.268829][ T9112] genl_rcv+0x28/0x40 [ 197.268841][ T9112] netlink_unicast+0x585/0x850 [ 197.268855][ T9112] ? __pfx_netlink_unicast+0x10/0x10 [ 197.268872][ T9112] netlink_sendmsg+0x8b0/0xda0 [ 197.268886][ T9112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.268901][ T9112] ? apparmor_socket_sendmsg+0x15b/0x270 [ 197.268916][ T9112] ____sys_sendmsg+0xa4d/0xbe0 [ 197.268932][ T9112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.268945][ T9112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.268963][ T9112] ___sys_sendmsg+0x190/0x1e0 [ 197.268977][ T9112] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.268995][ T9112] ? find_held_lock+0x2b/0x80 [ 197.269019][ T9112] __sys_sendmsg+0x160/0x210 [ 197.269035][ T9112] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.269055][ T9112] ? __pfx_ksys_write+0x10/0x10 [ 197.269069][ T9112] __do_fast_syscall_32+0xe7/0x970 [ 197.269084][ T9112] ? lockdep_hardirqs_on+0x78/0x100 [ 197.269098][ T9112] do_fast_syscall_32+0x32/0x70 [ 197.269113][ T9112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.269128][ T9112] RIP: 0023:0xf708efec [ 197.269143][ T9112] Code: Unable to access opcode bytes at 0xf708efc2. [ 197.269148][ T9112] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 197.269159][ T9112] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 197.269166][ T9112] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.269173][ T9112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.269179][ T9112] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 197.269186][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.269200][ T9112] [ 197.364693][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 197.491604][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 197.575600][ T9124] veth0: entered promiscuous mode [ 197.607654][ T5795] bond1: (slave gretap1): failed to get link speed/duplex [ 197.722903][ T5756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.731533][ T5795] bond1: (slave gretap1): failed to get link speed/duplex [ 197.734481][ T5756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.740745][ T5756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.747043][ T5756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.750484][ T5756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.250720][ T9128] wg2 speed is unknown, defaulting to 1000 [ 198.590694][ T9146] netlink: 'syz.5.767': attribute type 4 has an invalid length. [ 198.620197][ T9146] netlink: 'syz.5.767': attribute type 4 has an invalid length. [ 198.710482][ T9146] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.713117][ T9146] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.840186][ T9146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.859775][ T9146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.028648][ T9128] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.035324][ T9128] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.044154][ T9128] bridge_slave_0: entered allmulticast mode [ 199.051961][ T9128] bridge_slave_0: entered promiscuous mode [ 199.063476][ T9128] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.075087][ T9128] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.079292][ T9128] bridge_slave_1: entered allmulticast mode [ 199.093198][ T9128] bridge_slave_1: entered promiscuous mode [ 199.109570][ T5795] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.149243][ T5795] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.160146][ T5795] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.168784][ T9128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.177240][ T5795] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.193104][ T9128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.222468][ T9128] team0: Port device team_slave_0 added [ 199.230515][ T9128] team0: Port device team_slave_1 added [ 199.266587][ T9128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.271401][ T9128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.285608][ T9128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.294074][ T9128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.298682][ T9128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.316757][ T9128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.346428][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.5.773'. [ 199.352803][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.773'. [ 199.368722][ T9128] hsr_slave_0: entered promiscuous mode [ 199.371660][ T9128] hsr_slave_1: entered promiscuous mode [ 199.374511][ T9128] debugfs: 'hsr0' already exists in 'hsr' [ 199.384967][ T9128] Cannot create hsr debugfs directory [ 199.686769][ T9128] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 199.701806][ T9128] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.704898][ T9128] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 199.709726][ T9128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.713338][ T9128] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 199.719215][ T9128] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.724832][ T9128] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 199.740642][ T9128] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.765283][ T9123] veth0: left promiscuous mode [ 199.898279][ T9184] wg2 speed is unknown, defaulting to 1000 [ 199.906522][ T7364] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 199.913436][ T9128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.926871][ T9128] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.939760][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.942048][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.961906][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.964286][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.012537][ T5756] Bluetooth: hci0: command tx timeout [ 200.070064][ T7364] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 200.073055][ T7364] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.078510][ T7364] usb 10-1: Product: syz [ 200.081191][ T7364] usb 10-1: Manufacturer: syz [ 200.082727][ T7364] usb 10-1: SerialNumber: syz [ 200.105461][ T9191] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.122104][ T9191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.135912][ T9191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.142309][ T9191] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.148675][ T9191] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 200.155661][ T9191] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 200.596985][ T9128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.698362][ T9218] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 200.700432][ T9218] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 200.716877][ T9218] vhci_hcd vhci_hcd.0: Device attached [ 200.853311][ T9219] vhci_hcd: connection closed [ 200.853582][ T5820] vhci_hcd vhci_hcd.1: stop threads [ 200.872184][ T5820] vhci_hcd vhci_hcd.1: release socket [ 200.874100][ T5820] vhci_hcd vhci_hcd.1: disconnect device [ 200.906459][ T9128] veth0_vlan: entered promiscuous mode [ 200.916066][ T9128] veth1_vlan: entered promiscuous mode [ 200.938692][ T9128] veth0_macvtap: entered promiscuous mode [ 200.944008][ T9128] veth1_macvtap: entered promiscuous mode [ 200.956914][ T9128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.964475][ T9128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.971555][ T5849] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.975774][ T5849] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.980314][ T5849] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.984807][ T5849] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.094723][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.098551][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.119633][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.122865][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.239201][ T7364] rtl8150 10-1:1.0: couldn't reset the device [ 201.241571][ T7364] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 201.306658][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.364567][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 201.782766][ T9237] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 201.784875][ T9237] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 201.856461][ T9237] vhci_hcd vhci_hcd.0: Device attached [ 201.935254][ T5849] net_ratelimit: 20 callbacks suppressed [ 201.935291][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 202.105860][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 202.155122][ T9244] netlink: 40 bytes leftover after parsing attributes in process `syz.6.788'. [ 202.223534][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 202.260265][ T5838] usb 40-1: SetAddress Request (2) to port 0 [ 202.261479][ T9240] vhci_hcd: connection closed [ 202.263046][ T9239] vhci_hcd vhci_hcd.1: stop threads [ 202.266502][ T5838] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 202.272371][ T9239] vhci_hcd vhci_hcd.1: release socket [ 202.275740][ T9239] vhci_hcd vhci_hcd.1: disconnect device [ 202.287510][ T5838] usb 40-1: enqueue for inactive port 0 [ 202.319525][ T5756] Bluetooth: hci1: command 0x041b tx timeout [ 202.321576][ T5758] Bluetooth: hci3: command 0x0419 tx timeout [ 202.323575][ T5102] Bluetooth: hci2: command 0x0419 tx timeout [ 202.331829][ T5102] Bluetooth: hci0: command 0x040f tx timeout [ 202.351963][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 202.428308][ T5102] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 202.469584][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 202.566456][ T9249] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.570440][ T9249] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.573229][ T9249] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.600383][ T9249] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.643270][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.6.790'. [ 202.646174][ T9258] netlink: 348 bytes leftover after parsing attributes in process `syz.6.790'. [ 202.649050][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.6.790'. [ 202.652377][ T9258] netlink: 348 bytes leftover after parsing attributes in process `syz.6.790'. [ 202.656076][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.6.790'. [ 202.754537][ T5838] usb usb40-port1: attempt power cycle [ 202.833947][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 202.844759][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 202.870324][ T7364] usb 10-1: USB disconnect, device number 6 [ 202.960808][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 203.166136][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 203.205599][ T9274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.793'. [ 203.292901][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 203.431175][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 203.679624][ T9291] netlink: 156 bytes leftover after parsing attributes in process `syz.6.800'. [ 203.794631][ T5838] usb usb40-port1: unable to enumerate USB device [ 204.713766][ T5102] Bluetooth: hci1: command 0x041b tx timeout [ 204.715956][ T5758] Bluetooth: hci3: command 0x0419 tx timeout [ 204.718378][ T5756] Bluetooth: hci2: command 0x0419 tx timeout [ 204.798747][ T5102] Bluetooth: hci0: command 0x040f tx timeout [ 205.160300][ T9307] smc: net device lo applied user defined pnetid SYZ0 [ 205.909822][ T9323] overlayfs: invalid origin (0000) [ 206.827790][ T9282] syz.1.797 (9282) used greatest stack depth: 18888 bytes left [ 206.872507][ T9345] 9p: Bad value for 'version' [ 207.023841][ T9352] fuse: Unknown parameter 'fsname' [ 207.032642][ T5102] Bluetooth: hci0: command 0x040f tx timeout [ 207.111432][ T9354] FAULT_INJECTION: forcing a failure. [ 207.111432][ T9354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.119766][ T9354] CPU: 2 UID: 0 PID: 9354 Comm: syz.5.815 Not tainted syzkaller #0 PREEMPT(full) [ 207.119784][ T9354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.119790][ T9354] Call Trace: [ 207.119794][ T9354] [ 207.119799][ T9354] dump_stack_lvl+0x100/0x190 [ 207.119816][ T9354] should_fail_ex.cold+0x5/0xa [ 207.119829][ T9354] _copy_to_user+0x32/0xd0 [ 207.119847][ T9354] simple_read_from_buffer+0xcb/0x170 [ 207.119866][ T9354] proc_fail_nth_read+0x1af/0x230 [ 207.119880][ T9354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.119896][ T9354] ? rw_verify_area+0xce/0x6d0 [ 207.119911][ T9354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.119926][ T9354] vfs_read+0x1e4/0xb40 [ 207.119938][ T9354] ? __pfx_vfs_read+0x10/0x10 [ 207.119953][ T9354] ? find_held_lock+0x2b/0x80 [ 207.119967][ T9354] ? __fget_files+0x215/0x3d0 [ 207.119979][ T9354] ? __fget_files+0x21f/0x3d0 [ 207.119993][ T9354] ksys_read+0x12a/0x250 [ 207.120003][ T9354] ? __pfx_ksys_read+0x10/0x10 [ 207.120016][ T9354] do_int80_emulation+0x14b/0x720 [ 207.120032][ T9354] asm_int80_emulation+0x1a/0x20 [ 207.120044][ T9354] RIP: 0023:0xf71c72eb [ 207.120053][ T9354] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 207.120063][ T9354] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 207.120075][ T9354] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f547d5d0 [ 207.120081][ T9354] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 207.120087][ T9354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.120093][ T9354] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.120099][ T9354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.120112][ T9354] [ 207.289811][ T9358] netlink: 156 bytes leftover after parsing attributes in process `syz.1.813'. [ 207.300336][ T9239] net_ratelimit: 30 callbacks suppressed [ 207.300351][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 207.427912][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 207.547282][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 207.572537][ T9367] netlink: 44 bytes leftover after parsing attributes in process `syz.6.818'. [ 207.662663][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 207.663240][ T5838] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 207.780323][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 207.812053][ T5838] usb 10-1: device descriptor read/64, error -71 [ 207.897737][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 208.015344][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 208.070729][ T9376] smc: net device lo applied user defined pnetid SYZ0 [ 208.080487][ T5838] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 208.135005][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 208.239479][ T5838] usb 10-1: device descriptor read/64, error -71 [ 208.314625][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 208.315135][ T1348] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 208.330949][ T9384] zero sized request [ 208.358139][ T5838] usb usb10-port1: attempt power cycle [ 208.445118][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 208.572449][ T9387] CIFS: bad ip= option (127®0.0.1) [ 208.735331][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.825'. [ 208.753173][ T5838] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 208.785845][ T5838] usb 10-1: device descriptor read/8, error -71 [ 209.052345][ T5838] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 209.090235][ T5838] usb 10-1: device descriptor read/8, error -71 [ 209.223519][ T5838] usb usb10-port1: unable to enumerate USB device [ 209.244090][ T5102] Bluetooth: hci0: command 0x040f tx timeout [ 209.668146][ T9412] netlink: 156 bytes leftover after parsing attributes in process `syz.6.827'. [ 211.466782][ T5102] Bluetooth: hci0: command 0x040f tx timeout [ 212.685573][ T9239] net_ratelimit: 34 callbacks suppressed [ 212.685592][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 212.803043][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 212.920762][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 213.037929][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 213.155076][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 213.273023][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 213.390237][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 213.508048][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 213.625743][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 213.743098][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 218.113395][ T5849] net_ratelimit: 36 callbacks suppressed [ 218.113417][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 218.231225][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 218.348475][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 218.466516][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 218.594161][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 218.722362][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 218.850600][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 218.969687][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 219.024236][ T9438] netlink: 'syz.3.833': attribute type 30 has an invalid length. [ 219.036954][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'. [ 219.088508][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 219.205089][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 219.536346][ T7365] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 219.684432][ T7365] usb 10-1: device descriptor read/64, error -71 [ 219.751120][ T9463] netlink: 156 bytes leftover after parsing attributes in process `syz.1.838'. [ 219.989252][ T7365] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 220.049192][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.840'. [ 220.239330][ T7365] usb 10-1: device descriptor read/64, error -71 [ 220.365282][ T9479] FAULT_INJECTION: forcing a failure. [ 220.365282][ T9479] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 220.370646][ T9479] CPU: 0 UID: 0 PID: 9479 Comm: syz.6.841 Not tainted syzkaller #0 PREEMPT(full) [ 220.370685][ T9479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.370694][ T9479] Call Trace: [ 220.370701][ T9479] [ 220.370708][ T9479] dump_stack_lvl+0x100/0x190 [ 220.370732][ T9479] should_fail_ex.cold+0x5/0xa [ 220.370747][ T9479] ? prepare_alloc_pages+0x16d/0x5f0 [ 220.370772][ T9479] should_fail_alloc_page+0xeb/0x140 [ 220.370798][ T9479] prepare_alloc_pages+0x1f0/0x5f0 [ 220.370826][ T9479] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 220.370860][ T9479] ? rcu_is_watching+0x12/0xc0 [ 220.370882][ T9479] ? trace_mm_page_alloc+0x164/0x1c0 [ 220.370909][ T9479] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 220.370933][ T9479] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 220.370961][ T9479] ? kvm_sched_clock_read+0x11/0x20 [ 220.370984][ T9479] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 220.371008][ T9479] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 220.371030][ T9479] ? rcu_is_watching+0x12/0xc0 [ 220.371050][ T9479] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 220.371069][ T9479] ? lockdep_hardirqs_on+0x78/0x100 [ 220.371090][ T9479] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 220.371116][ T9479] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 220.371143][ T9479] ? policy_nodemask+0xed/0x4f0 [ 220.371170][ T9479] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 220.371206][ T9479] __kasan_populate_vmalloc+0xf0/0x210 [ 220.371234][ T9479] alloc_vmap_area+0x95d/0x2bb0 [ 220.371265][ T9479] ? kasan_save_track+0x14/0x30 [ 220.371286][ T9479] ? __kasan_kmalloc+0xaa/0xb0 [ 220.371308][ T9479] ? __pfx_alloc_vmap_area+0x10/0x10 [ 220.371333][ T9479] ? __get_vm_area_node+0x101/0x330 [ 220.371360][ T9479] __get_vm_area_node+0x1ca/0x330 [ 220.371388][ T9479] __vmalloc_node_range_noprof+0x228/0x1630 [ 220.371416][ T9479] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 220.371438][ T9479] ? __schedule+0x126e/0x6730 [ 220.371464][ T9479] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 220.371492][ T9479] ? __pfx___schedule+0x10/0x10 [ 220.371511][ T9479] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 220.371538][ T9479] ? preempt_schedule_irq+0x7b/0x90 [ 220.371559][ T9479] ? irqentry_exit+0x24d/0xa00 [ 220.371579][ T9479] ? lockdep_hardirqs_on+0x78/0x100 [ 220.371599][ T9479] ? irqentry_exit+0x24d/0xa00 [ 220.371619][ T9479] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 220.371647][ T9479] __vmalloc_node_noprof+0xad/0xf0 [ 220.371672][ T9479] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 220.371698][ T9479] __vmalloc_noprof+0xa3/0x120 [ 220.371724][ T9479] ? __pfx___vmalloc_noprof+0x10/0x10 [ 220.371752][ T9479] ? rcu_is_watching+0x12/0xc0 [ 220.371773][ T9479] ? apparmor_capable+0x1d7/0x4d0 [ 220.371792][ T9479] ? __schedule+0x126e/0x6730 [ 220.371813][ T9479] bpf_prog_alloc_no_stats+0x58/0x640 [ 220.371836][ T9479] ? security_capable+0x80/0x260 [ 220.371864][ T9479] bpf_prog_alloc+0x3b/0x200 [ 220.371886][ T9479] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.371913][ T9479] bpf_prog_load+0x4a9/0x2fa0 [ 220.371938][ T9479] ? __pfx_bpf_prog_load+0x10/0x10 [ 220.371955][ T9479] ? irqentry_exit+0x24d/0xa00 [ 220.371975][ T9479] ? lockdep_hardirqs_on+0x78/0x100 [ 220.372019][ T9479] __sys_bpf+0x18dc/0x4e80 [ 220.372038][ T9479] ? trace_contention_end.constprop.0+0x145/0x1a0 [ 220.372064][ T9479] ? __lock_acquire+0x490/0x1a40 [ 220.372091][ T9479] ? __pfx___sys_bpf+0x10/0x10 [ 220.372112][ T9479] ? kvm_sched_clock_read+0x11/0x20 [ 220.372135][ T9479] ? lock_acquire+0x1b9/0x370 [ 220.372162][ T9479] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 220.372184][ T9479] ? rcu_is_watching+0x12/0xc0 [ 220.372207][ T9479] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 220.372228][ T9479] ? rcu_is_watching+0x12/0xc0 [ 220.372249][ T9479] ? trace_sched_exit_tp+0x120/0x160 [ 220.372272][ T9479] ? __schedule+0x126e/0x6730 [ 220.372306][ T9479] ? __pfx___schedule+0x10/0x10 [ 220.372326][ T9479] ? fput+0x79/0x100 [ 220.372349][ T9479] ? __ia32_sys_bpf+0xcc/0x170 [ 220.372366][ T9479] __ia32_sys_bpf+0xcc/0x170 [ 220.372386][ T9479] ? __do_fast_syscall_32+0x98/0x970 [ 220.372411][ T9479] __do_fast_syscall_32+0xe7/0x970 [ 220.372432][ T9479] ? lockdep_hardirqs_on+0x78/0x100 [ 220.372455][ T9479] do_fast_syscall_32+0x32/0x70 [ 220.372478][ T9479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.372500][ T9479] RIP: 0023:0xf7f35fec [ 220.372519][ T9479] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 220.372527][ T9479] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 220.372545][ T9479] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 220.372557][ T9479] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.372567][ T9479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.372576][ T9479] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 220.372587][ T9479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.372609][ T9479] [ 220.373176][ T9479] syz.6.841: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 220.543544][ T7365] usb usb10-port1: attempt power cycle [ 220.548243][ T9479] CPU: 2 UID: 0 PID: 9479 Comm: syz.6.841 Not tainted syzkaller #0 PREEMPT(full) [ 220.548259][ T9479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.548266][ T9479] Call Trace: [ 220.548271][ T9479] [ 220.548277][ T9479] dump_stack_lvl+0x100/0x190 [ 220.548293][ T9479] warn_alloc.cold+0x94/0xa8 [ 220.548305][ T9479] ? __pfx_warn_alloc+0x10/0x10 [ 220.548318][ T9479] ? lockdep_hardirqs_on+0x78/0x100 [ 220.548332][ T9479] ? __get_vm_area_node+0x2cd/0x330 [ 220.548351][ T9479] ? __get_vm_area_node+0x208/0x330 [ 220.548368][ T9479] __vmalloc_node_range_noprof+0xccd/0x1630 [ 220.548389][ T9479] ? __schedule+0x126e/0x6730 [ 220.548407][ T9479] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 220.548426][ T9479] ? __pfx___schedule+0x10/0x10 [ 220.548437][ T9479] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 220.548457][ T9479] ? preempt_schedule_irq+0x7b/0x90 [ 220.548473][ T9479] ? irqentry_exit+0x24d/0xa00 [ 220.548485][ T9479] ? lockdep_hardirqs_on+0x78/0x100 [ 220.548498][ T9479] ? irqentry_exit+0x24d/0xa00 [ 220.548512][ T9479] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 220.548526][ T9479] __vmalloc_node_noprof+0xad/0xf0 [ 220.548543][ T9479] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 220.548559][ T9479] __vmalloc_noprof+0xa3/0x120 [ 220.548575][ T9479] ? __pfx___vmalloc_noprof+0x10/0x10 [ 220.548593][ T9479] ? rcu_is_watching+0x12/0xc0 [ 220.548606][ T9479] ? apparmor_capable+0x1d7/0x4d0 [ 220.548618][ T9479] ? __schedule+0x126e/0x6730 [ 220.548630][ T9479] bpf_prog_alloc_no_stats+0x58/0x640 [ 220.548645][ T9479] ? security_capable+0x80/0x260 [ 220.548657][ T9479] bpf_prog_alloc+0x3b/0x200 [ 220.548670][ T9479] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.548687][ T9479] bpf_prog_load+0x4a9/0x2fa0 [ 220.548702][ T9479] ? __pfx_bpf_prog_load+0x10/0x10 [ 220.548713][ T9479] ? irqentry_exit+0x24d/0xa00 [ 220.548726][ T9479] ? lockdep_hardirqs_on+0x78/0x100 [ 220.548751][ T9479] __sys_bpf+0x18dc/0x4e80 [ 220.548762][ T9479] ? trace_contention_end.constprop.0+0x145/0x1a0 [ 220.548778][ T9479] ? __lock_acquire+0x490/0x1a40 [ 220.548795][ T9479] ? __pfx___sys_bpf+0x10/0x10 [ 220.548808][ T9479] ? kvm_sched_clock_read+0x11/0x20 [ 220.548827][ T9479] ? lock_acquire+0x1b9/0x370 [ 220.548845][ T9479] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 220.548859][ T9479] ? rcu_is_watching+0x12/0xc0 [ 220.548892][ T9479] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 220.548906][ T9479] ? rcu_is_watching+0x12/0xc0 [ 220.548920][ T9479] ? trace_sched_exit_tp+0x120/0x160 [ 220.548935][ T9479] ? __schedule+0x126e/0x6730 [ 220.548955][ T9479] ? __pfx___schedule+0x10/0x10 [ 220.548968][ T9479] ? fput+0x79/0x100 [ 220.548983][ T9479] ? __ia32_sys_bpf+0xcc/0x170 [ 220.548995][ T9479] __ia32_sys_bpf+0xcc/0x170 [ 220.549008][ T9479] ? __do_fast_syscall_32+0x98/0x970 [ 220.549024][ T9479] __do_fast_syscall_32+0xe7/0x970 [ 220.549039][ T9479] ? lockdep_hardirqs_on+0x78/0x100 [ 220.549056][ T9479] do_fast_syscall_32+0x32/0x70 [ 220.549072][ T9479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.549087][ T9479] RIP: 0023:0xf7f35fec [ 220.549103][ T9479] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 220.549109][ T9479] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 220.549120][ T9479] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 220.549127][ T9479] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.549134][ T9479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.549140][ T9479] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 220.549147][ T9479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.549161][ T9479] [ 220.549199][ T9479] Mem-Info: [ 220.555262][ T9481] smc: net device lo applied user defined pnetid SYZ0 [ 220.557082][ T9479] active_anon:13117 inactive_anon:19263 isolated_anon:0 [ 220.557082][ T9479] active_file:2396 inactive_file:23000 isolated_file:0 [ 220.557082][ T9479] unevictable:768 dirty:271 writeback:0 [ 220.557082][ T9479] slab_reclaimable:6368 slab_unreclaimable:64981 [ 220.557082][ T9479] mapped:32243 shmem:30637 pagetables:1311 [ 220.557082][ T9479] sec_pagetables:297 bounce:0 [ 220.557082][ T9479] kernel_misc_reclaimable:0 [ 220.557082][ T9479] free:28618 free_pcp:11196 free_cma:0 [ 220.557117][ T9479] Node 0 active_anon:8kB inactive_anon:8kB active_file:8kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8768kB pagetables:1260kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 220.681479][ T9483] FAULT_INJECTION: forcing a failure. [ 220.681479][ T9483] name failslab, interval 1, probability 0, space 0, times 0 [ 220.681679][ T9479] Node 1 active_anon:57220kB inactive_anon:77044kB active_file:9576kB inactive_file:92000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133704kB dirty:1084kB writeback:0kB shmem:125840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5808kB pagetables:4052kB sec_pagetables:76kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 220.695422][ T9483] CPU: 0 UID: 0 PID: 9483 Comm: syz.3.843 Not tainted syzkaller #0 PREEMPT(full) [ 220.695449][ T9483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.695458][ T9483] Call Trace: [ 220.695465][ T9483] [ 220.695474][ T9483] dump_stack_lvl+0x100/0x190 [ 220.695498][ T9483] should_fail_ex.cold+0x5/0xa [ 220.695523][ T9483] should_failslab+0xc2/0x120 [ 220.695546][ T9483] kmem_cache_alloc_noprof+0x91/0x6a0 [ 220.695569][ T9483] ? __kernfs_new_node+0xd2/0xa10 [ 220.695592][ T9483] __kernfs_new_node+0xd2/0xa10 [ 220.695611][ T9483] ? __pfx___kernfs_new_node+0x10/0x10 [ 220.695634][ T9483] ? find_held_lock+0x2b/0x80 [ 220.695656][ T9483] ? kernfs_root+0xee/0x2a0 [ 220.695678][ T9483] ? kernfs_root+0xee/0x2a0 [ 220.695710][ T9483] kernfs_new_node+0x117/0x150 [ 220.695731][ T9483] kernfs_create_link+0xcc/0x240 [ 220.695758][ T9483] sysfs_do_create_link_sd+0x90/0x140 [ 220.695783][ T9483] sysfs_create_link+0x61/0xc0 [ 220.695808][ T9483] driver_sysfs_add+0x112/0x2d0 [ 220.695834][ T9483] really_probe+0x146/0xa60 [ 220.695865][ T9483] __driver_probe_device+0x20e/0x450 [ 220.695888][ T9483] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.695915][ T9483] driver_probe_device+0x4a/0x140 [ 220.695938][ T9483] __device_attach_driver+0x1df/0x320 [ 220.695963][ T9483] ? __pfx___device_attach_driver+0x10/0x10 [ 220.695986][ T9483] bus_for_each_drv+0x159/0x1e0 [ 220.696008][ T9483] ? __pfx_bus_for_each_drv+0x10/0x10 [ 220.696029][ T9483] ? lockdep_hardirqs_on+0x78/0x100 [ 220.696048][ T9483] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 220.696071][ T9483] __device_attach+0x1e4/0x4d0 [ 220.696095][ T9483] ? __pfx___device_attach+0x10/0x10 [ 220.696117][ T9483] ? __might_fault+0xc5/0x140 [ 220.696137][ T9483] ? usb_ifnum_to_if+0x16f/0x1d0 [ 220.696165][ T9483] proc_ioctl+0x596/0x6f0 [ 220.696184][ T9483] usbdev_ioctl+0x1017/0x3aa0 [ 220.696206][ T9483] ? __pfx_usbdev_ioctl+0x10/0x10 [ 220.696225][ T9483] ? get_pid_task+0x106/0x250 [ 220.696255][ T9483] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.696281][ T9483] ? do_vfs_ioctl+0x226/0x13e0 [ 220.696306][ T9483] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 220.696336][ T9483] ? find_held_lock+0x2b/0x80 [ 220.696355][ T9483] ? __fget_files+0x215/0x3d0 [ 220.696387][ T9483] ? hook_file_ioctl_common+0x140/0x440 [ 220.696416][ T9483] ? __fget_files+0x21f/0x3d0 [ 220.696433][ T9483] ? __pfx_usbdev_ioctl+0x10/0x10 [ 220.696453][ T9483] compat_ptr_ioctl+0x6e/0xa0 [ 220.696476][ T9483] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 220.696498][ T9483] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 220.696528][ T9483] __do_fast_syscall_32+0xe7/0x970 [ 220.696551][ T9483] ? lockdep_hardirqs_on+0x78/0x100 [ 220.696572][ T9483] do_fast_syscall_32+0x32/0x70 [ 220.696594][ T9483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.696617][ T9483] RIP: 0023:0xf7f46fec [ 220.696637][ T9483] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 220.696646][ T9483] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 220.696661][ T9483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0105512 [ 220.696672][ T9483] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.696683][ T9483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.696692][ T9483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.696701][ T9483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.696724][ T9483] [ 220.701188][ T9483] hub 8-0:1.0: really_probe: driver_sysfs_add failed [ 220.713248][ T9479] Node 0 DMA free:2068kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:352kB local_pcp:0kB free_cma:0kB [ 220.871981][ T9479] lowmem_reserve[]: 0 280 280 280 280 [ 220.873948][ T9479] Node 0 DMA32 free:31280kB boost:20480kB min:33252kB low:36444kB high:39636kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8kB active_file:8kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:2032kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:7484kB local_pcp:540kB free_cma:0kB [ 220.884422][ T9479] lowmem_reserve[]: 0 0 0 0 0 [ 220.885940][ T9479] Node 1 DMA32 free:75548kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60960kB inactive_anon:77044kB active_file:9576kB inactive_file:92000kB unevictable:1536kB writepending:1084kB zspages:3984kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:33528kB local_pcp:13012kB free_cma:0kB [ 220.896715][ T9479] lowmem_reserve[]: 0 0 0 0 0 [ 220.898313][ T9479] Node 0 DMA: 38*4kB (U) 3*8kB (U) 4*16kB (U) 11*32kB (UM) 1*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2064kB [ 220.904103][ T9479] Node 0 DMA32: 1096*4kB (UME) 242*8kB (UME) 82*16kB (UME) 155*32kB (UME) 56*64kB (UME) 30*128kB (UME) 6*256kB (UE) 7*512kB (UME) 2*1024kB (U) 2*2048kB (M) 0*4096kB = 31280kB [ 220.909528][ T9479] Node 1 DMA32: 14*4kB (UE) 575*8kB (UME) 93*16kB (UME) 31*32kB (UME) 68*64kB (UE) 38*128kB (UE) 30*256kB (UME) 31*512kB (UME) 14*1024kB (UM) 8*2048kB (UM) 1*4096kB (M) = 74720kB [ 220.915385][ T9479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.918656][ T9479] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.921931][ T9479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.925613][ T9479] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.928505][ T9479] 58733 total pagecache pages [ 220.929996][ T9479] 339 pages in swap cache [ 220.931379][ T9479] Free swap = 104776kB [ 220.932721][ T9479] Total swap = 124996kB [ 220.934129][ T9479] 524155 pages RAM [ 220.934316][ T7365] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 220.938384][ T9479] 0 pages HighMem/MovableOnly [ 220.939955][ T9479] 211525 pages reserved [ 220.941243][ T9479] 0 pages cma reserved [ 220.963721][ T7365] usb 10-1: device descriptor read/8, error -71 [ 221.561043][ T7365] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 221.597262][ T7365] usb 10-1: device descriptor read/8, error -71 [ 221.644325][ T9507] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 221.681926][ T9509] netlink: 156 bytes leftover after parsing attributes in process `syz.1.852'. [ 221.781001][ T7365] usb usb10-port1: unable to enumerate USB device [ 222.746588][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.856'. [ 222.860901][ T9528] FAULT_INJECTION: forcing a failure. [ 222.860901][ T9528] name failslab, interval 1, probability 0, space 0, times 0 [ 222.887620][ T9528] CPU: 0 UID: 0 PID: 9528 Comm: syz.6.857 Not tainted syzkaller #0 PREEMPT(full) [ 222.887639][ T9528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.887646][ T9528] Call Trace: [ 222.887650][ T9528] [ 222.887655][ T9528] dump_stack_lvl+0x100/0x190 [ 222.887671][ T9528] should_fail_ex.cold+0x5/0xa [ 222.887684][ T9528] should_failslab+0xc2/0x120 [ 222.887699][ T9528] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 222.887714][ T9528] ? __alloc_skb+0x5b7/0x710 [ 222.887728][ T9528] ? __alloc_skb+0x140/0x710 [ 222.887743][ T9528] __alloc_skb+0x140/0x710 [ 222.887756][ T9528] ? __alloc_skb+0x5b7/0x710 [ 222.887769][ T9528] ? __pfx___alloc_skb+0x10/0x10 [ 222.887785][ T9528] netlink_alloc_large_skb+0x69/0x150 [ 222.887800][ T9528] netlink_sendmsg+0x680/0xda0 [ 222.887814][ T9528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.887829][ T9528] ? apparmor_socket_sendmsg+0x15b/0x270 [ 222.887843][ T9528] ____sys_sendmsg+0xa4d/0xbe0 [ 222.887853][ T9528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.887866][ T9528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.887882][ T9528] ___sys_sendmsg+0x190/0x1e0 [ 222.887895][ T9528] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.887912][ T9528] ? find_held_lock+0x2b/0x80 [ 222.887934][ T9528] __sys_sendmsg+0x160/0x210 [ 222.887949][ T9528] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.887967][ T9528] ? __pfx_ksys_write+0x10/0x10 [ 222.887981][ T9528] __do_fast_syscall_32+0xe7/0x970 [ 222.887994][ T9528] ? lockdep_hardirqs_on+0x78/0x100 [ 222.888008][ T9528] do_fast_syscall_32+0x32/0x70 [ 222.888022][ T9528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.888037][ T9528] RIP: 0023:0xf7f35fec [ 222.888050][ T9528] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 222.888055][ T9528] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 222.888065][ T9528] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000000 [ 222.888072][ T9528] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.888078][ T9528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.888084][ T9528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.888090][ T9528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.888103][ T9528] [ 223.479298][ T5820] net_ratelimit: 29 callbacks suppressed [ 223.479312][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 223.606386][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 223.725867][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 223.842263][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 223.971922][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 224.097881][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 224.215022][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 224.343122][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 224.601268][ T42] audit: type=1326 audit(1786545732.034:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.6.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 224.659719][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 224.680825][ T42] audit: type=1326 audit(1786545732.034:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.6.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 224.703804][ T42] audit: type=1326 audit(1786545732.034:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.6.868" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71372eb code=0x7ffc0000 [ 224.722665][ T42] audit: type=1326 audit(1786545732.034:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.6.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 224.735295][ T42] audit: type=1326 audit(1786545732.034:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.6.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 224.748944][ T42] audit: type=1326 audit(1786545732.034:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.6.868" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 224.784766][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 224.787696][ T42] audit: type=1326 audit(1786545732.034:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.6.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 224.798852][ T42] audit: type=1326 audit(1786545732.034:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.6.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 224.810360][ T42] audit: type=1326 audit(1786545732.053:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.6.868" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 224.827789][ T42] audit: type=1326 audit(1786545732.053:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.6.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 224.850325][ T9517] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 224.981838][ T9580] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 225.012801][ T9580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.030143][ T9580] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 225.042046][ T9580] bond1: entered allmulticast mode [ 225.075073][ T9580] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 225.197892][ T9587] FAULT_INJECTION: forcing a failure. [ 225.197892][ T9587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.209397][ T9587] CPU: 2 UID: 0 PID: 9587 Comm: syz.3.874 Not tainted syzkaller #0 PREEMPT(full) [ 225.209414][ T9587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.209420][ T9587] Call Trace: [ 225.209424][ T9587] [ 225.209429][ T9587] dump_stack_lvl+0x100/0x190 [ 225.209463][ T9587] should_fail_ex.cold+0x5/0xa [ 225.209480][ T9587] _copy_to_user+0x32/0xd0 [ 225.209505][ T9587] simple_read_from_buffer+0xcb/0x170 [ 225.209531][ T9587] proc_fail_nth_read+0x1af/0x230 [ 225.209546][ T9587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.209561][ T9587] ? rw_verify_area+0xce/0x6d0 [ 225.209577][ T9587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.209591][ T9587] vfs_read+0x1e4/0xb40 [ 225.209603][ T9587] ? __pfx_vfs_read+0x10/0x10 [ 225.209618][ T9587] ? find_held_lock+0x2b/0x80 [ 225.209632][ T9587] ? __fget_files+0x215/0x3d0 [ 225.209644][ T9587] ? __fget_files+0x21f/0x3d0 [ 225.209658][ T9587] ksys_read+0x12a/0x250 [ 225.209667][ T9587] ? __pfx_ksys_read+0x10/0x10 [ 225.209681][ T9587] do_int80_emulation+0x14b/0x720 [ 225.209697][ T9587] asm_int80_emulation+0x1a/0x20 [ 225.209709][ T9587] RIP: 0023:0xf71472eb [ 225.209718][ T9587] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 225.209729][ T9587] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 225.209740][ T9587] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54065d0 [ 225.209747][ T9587] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 225.209755][ T9587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.209761][ T9587] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 225.209767][ T9587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.209780][ T9587] [ 225.414997][ T9592] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.452500][ T9592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.465350][ T9592] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.467538][ T9592] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 225.507562][ T9601] netlink: 'syz.5.879': attribute type 1 has an invalid length. [ 225.511934][ T9601] netlink: 224 bytes leftover after parsing attributes in process `syz.5.879'. [ 225.775104][ T24] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 225.949278][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.953969][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 225.957804][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.961206][ T24] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 225.964838][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.978969][ T24] hub 10-1:1.0: bad descriptor, ignoring hub [ 225.989605][ T24] hub 10-1:1.0: probe with driver hub failed with error -5 [ 226.007728][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 226.024285][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 226.028451][ T24] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 226.309872][ T24] usb 10-1: USB disconnect, device number 15 [ 226.385364][ T9600] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 226.414525][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.879'. [ 226.736969][ T24] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 227.131925][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.152693][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.163650][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.176887][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.187591][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.204755][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.216569][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.225790][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.234785][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.548990][ T5102] Bluetooth: hci3: command 0x0419 tx timeout [ 227.570279][ T24] usb 10-1: device descriptor read/64, error -71 [ 227.618230][ T9633] fuse: Unknown parameter 'g|oO/ë¿ÒÁ00000000000000000000' [ 227.623875][ T5102] Bluetooth: hci0: command 0x040f tx timeout [ 227.626380][ T5102] Bluetooth: hci1: command 0x041b tx timeout [ 227.628468][ T5102] Bluetooth: hci2: command 0x0419 tx timeout [ 228.083294][ T24] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 228.242677][ T9650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.725227][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 228.855372][ T5795] net_ratelimit: 42 callbacks suppressed [ 228.855388][ T5795] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.896820][ T5795] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.919720][ T5795] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.922739][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 228.935820][ T9664] bridge_slave_1: left allmulticast mode [ 228.946877][ T9664] bridge_slave_1: left promiscuous mode [ 228.966995][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.988945][ T9664] bridge_slave_0: left allmulticast mode [ 228.992815][ T9664] bridge_slave_0: left promiscuous mode [ 228.997703][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.008609][ T5795] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.024248][ T5795] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.069254][ T9239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.090873][ T9239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.114877][ T9239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.117362][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 229.420914][ T9677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.901'. [ 229.779229][ T5756] Bluetooth: hci3: command 0x0419 tx timeout [ 231.154810][ T9707] sctp: [Deprecated]: syz.6.910 (pid 9707) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.154810][ T9707] Use struct sctp_sack_info instead [ 232.155824][ T9725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.158685][ T9725] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.164109][ T9725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.189822][ T9725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.193391][ T9725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.198775][ T9725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.202396][ T9725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.208333][ T9725] veth1_vlan: left promiscuous mode [ 232.210890][ T9725] veth0_vlan: left promiscuous mode [ 232.213226][ T9725] veth0_vlan: entered promiscuous mode [ 232.215868][ T9725] veth1_vlan: entered promiscuous mode [ 232.219382][ T9725] veth1_macvtap: left promiscuous mode [ 232.221653][ T9725] veth0_macvtap: left promiscuous mode [ 232.224181][ T9725] veth0_macvtap: entered promiscuous mode [ 232.227311][ T9725] veth1_macvtap: entered promiscuous mode [ 232.233640][ T9725] 8021q: adding VLAN 0 to HW filter on device eth0 [ 232.236437][ T9725] 8021q: adding VLAN 0 to HW filter on device eth1 [ 232.239537][ T9725] 8021q: adding VLAN 0 to HW filter on device eth2 [ 232.242623][ T9725] 8021q: adding VLAN 0 to HW filter on device eth3 [ 232.248174][ T9725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.267894][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.270362][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.307021][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.309360][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.417706][ T9239] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.424512][ T9239] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.440325][ T9239] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.453425][ T9239] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.716340][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 232.716351][ T42] audit: type=1800 audit(1786545739.717:352): pid=9741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.920" name="bmAttributes" dev="configfs" ino=30208 res=0 errno=0 [ 232.818576][ T9744] netlink: 84 bytes leftover after parsing attributes in process `syz.5.921'. [ 232.866563][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.921'. [ 233.809636][ T9753] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 233.930705][ T9753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.048309][ T9755] bond2 (unregistering): Released all slaves [ 234.228553][ T5820] net_ratelimit: 119 callbacks suppressed [ 234.228567][ T5820] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.254048][ T9753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.923'. [ 234.271192][ T5820] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.295603][ T5820] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.314713][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 234.327051][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.378315][ T5820] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.384005][ T5820] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 234.421970][ T42] audit: type=1326 audit(1786545741.308:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.6.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 234.431547][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 234.470896][ T42] audit: type=1326 audit(1786545741.308:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.6.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 234.497336][ T42] audit: type=1326 audit(1786545741.308:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.6.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 234.509559][ T42] audit: type=1326 audit(1786545741.308:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.6.927" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 234.527266][ T42] audit: type=1326 audit(1786545741.308:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.6.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 234.537021][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.542607][ T5849] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 234.556927][ T42] audit: type=1326 audit(1786545741.317:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.6.927" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 234.574690][ T42] audit: type=1326 audit(1786545741.317:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.6.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 234.596992][ T42] audit: type=1326 audit(1786545741.317:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.6.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 234.839522][ T9784] syzkaller0: entered promiscuous mode [ 236.007512][ T9787] ftl_cs: FTL header not found. [ 236.822245][ T9803] netlink: 'syz.5.936': attribute type 4 has an invalid length. [ 237.008727][ T9787] block2mtd: mtd1: [/dev/loop0] erase_size = 128KiB [131072] [ 237.550038][ T9820] ufs: You didn't specify the type of your ufs filesystem [ 237.550038][ T9820] [ 237.550038][ T9820] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 237.550038][ T9820] [ 237.550038][ T9820] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 237.587746][ T9823] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 237.588776][ T9820] ufs: failed to set blocksize [ 237.697672][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 238.496799][ T9856] netlink: 20 bytes leftover after parsing attributes in process `syz.5.951'. [ 238.592356][ T9858] netlink: 156 bytes leftover after parsing attributes in process `syz.5.952'. [ 238.909220][ T9863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.954'. [ 238.961690][ T9865] Bluetooth: MGMT ver 1.23 [ 239.074470][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.6.957'. [ 239.108939][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.957'. [ 239.130074][ T9869] veth3: entered allmulticast mode [ 239.138917][ T9869] bond1: (slave veth3): Enslaving as an active interface with an up link [ 239.149916][ T9869] bond1 (unregistering): (slave veth3): Releasing backup interface [ 239.163215][ T9869] bond1 (unregistering): Released all slaves [ 239.268966][ T9869] 0x000000008a42-0x000000018a42 : "" [ 239.303803][ T9869] ftl_cs: FTL header not found. [ 239.325045][ T7364] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 239.488130][ T7364] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.492549][ T7364] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.497779][ T7364] usb 6-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 239.502063][ T7364] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.531383][ T7364] usb-storage 6-1:1.0: USB Mass Storage device detected [ 239.581714][ T5820] net_ratelimit: 136 callbacks suppressed [ 239.581733][ T5820] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 239.586130][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 239.596898][ T5820] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 239.625739][ T7364] usb-storage 6-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 239.632761][ T7364] scsi host6: usb-storage 6-1:1.0 [ 239.709701][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 239.720738][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 239.731059][ T5849] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 239.753400][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.759801][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.827129][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 239.848521][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 239.856224][ T5849] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 239.944763][ T5820] bond1: (slave gretap1): failed to get link speed/duplex [ 240.630684][ T9896] syzkaller0: entered promiscuous mode [ 240.632530][ T9896] syzkaller0: entered allmulticast mode [ 240.711186][ T9906] FAULT_INJECTION: forcing a failure. [ 240.711186][ T9906] name failslab, interval 1, probability 0, space 0, times 0 [ 240.723481][ T9906] CPU: 2 UID: 0 PID: 9906 Comm: syz.5.966 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.723501][ T9906] Tainted: [L]=SOFTLOCKUP [ 240.723505][ T9906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.723511][ T9906] Call Trace: [ 240.723515][ T9906] [ 240.723521][ T9906] dump_stack_lvl+0x100/0x190 [ 240.723538][ T9906] should_fail_ex.cold+0x5/0xa [ 240.723551][ T9906] should_failslab+0xc2/0x120 [ 240.723567][ T9906] kmem_cache_alloc_noprof+0x91/0x6a0 [ 240.723581][ T9906] ? do_getname+0x35/0x390 [ 240.723597][ T9906] do_getname+0x35/0x390 [ 240.723612][ T9906] path_setxattrat+0x360/0x3b0 [ 240.723625][ T9906] ? __pfx_path_setxattrat+0x10/0x10 [ 240.723639][ T9906] ? rcu_read_lock_any_held+0x6a/0xa0 [ 240.723666][ T9906] ? find_held_lock+0x2b/0x80 [ 240.723691][ T9906] ? fput+0x79/0x100 [ 240.723703][ T9906] ? ksys_write+0x1ac/0x250 [ 240.723715][ T9906] __ia32_sys_lsetxattr+0xc7/0x140 [ 240.723727][ T9906] ? __do_fast_syscall_32+0x98/0x970 [ 240.723742][ T9906] ? lockdep_hardirqs_on+0x78/0x100 [ 240.723754][ T9906] __do_fast_syscall_32+0xe7/0x970 [ 240.723768][ T9906] ? lockdep_hardirqs_on+0x78/0x100 [ 240.723781][ T9906] do_fast_syscall_32+0x32/0x70 [ 240.723795][ T9906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.723809][ T9906] RIP: 0023:0xf708efec [ 240.723824][ T9906] Code: Unable to access opcode bytes at 0xf708efc2. [ 240.723829][ T9906] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000e3 [ 240.723839][ T9906] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000100 [ 240.723846][ T9906] RDX: 0000000080000140 RSI: 0000000000000009 RDI: 0000000000000002 [ 240.723852][ T9906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.723858][ T9906] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 240.723864][ T9906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.723877][ T9906] [ 240.961752][ T7364] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 241.098612][ T7364] usb 11-1: device descriptor read/64, error -71 [ 241.355507][ T7364] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 241.494889][ T7364] usb 11-1: device descriptor read/64, error -71 [ 241.612375][ T7364] usb usb11-port1: attempt power cycle [ 241.788128][ T9912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.791225][ T9912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.794074][ T9912] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.797067][ T9912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.092469][ T9927] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 242.166701][ T9927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.176061][ T9929] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 242.182351][ T9929] bond2: entered allmulticast mode [ 242.353155][ T10] usb 6-1: USB disconnect, device number 5 [ 242.545856][ T9931] vivid-000: unregistering video7 [ 242.658072][ T9931] vivid-000: unregistering video8 [ 242.677216][ T9931] vivid-000: unregistering vbi0 [ 242.739074][ T7364] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 242.750919][ T9931] vivid-000: unregistering vbi1 [ 242.772460][ T9931] vivid-000: unregistering swradio0 [ 242.795980][ T9931] vivid-000: unregistering radio0 [ 242.871366][ T9931] vivid-000: unregistering radio1 [ 242.905158][ T7364] usb 11-1: device descriptor read/8, error -71 [ 242.906767][ T9931] vivid-000: unregistering video9 [ 242.980145][ T9931] vivid-000: unregistering video10 [ 242.997095][ T9931] vivid-000: unregistering v4l-touch0 [ 243.098254][ T5756] Bluetooth: hci3: command 0x0419 tx timeout [ 243.138266][ T9931] vivid-001: unregistering video11 [ 243.162758][ T7364] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 243.168327][ T9931] vivid-001: unregistering video12 [ 243.174687][ T9931] vivid-001: unregistering vbi2 [ 243.191478][ T7364] usb 11-1: device descriptor read/8, error -71 [ 243.194318][ T9931] vivid-001: unregistering vbi3 [ 243.204090][ T9931] vivid-001: unregistering swradio1 [ 243.220723][ T9931] vivid-001: unregistering radio2 [ 243.232205][ T9931] vivid-001: unregistering radio3 [ 243.243045][ T9931] vivid-001: unregistering video13 [ 243.254693][ T9931] vivid-001: unregistering video14 [ 243.265362][ T9931] vivid-001: unregistering v4l-touch1 [ 243.311716][ T7364] usb usb11-port1: unable to enumerate USB device [ 243.334092][ T9931] vivid-002: unregistering video15 [ 243.338502][ T9931] vivid-002: unregistering video16 [ 243.341606][ T9931] vivid-002: unregistering vbi4 [ 243.364840][ T9931] vivid-002: unregistering vbi5 [ 243.373639][ T9931] vivid-002: unregistering swradio2 [ 243.385011][ T9931] vivid-002: unregistering radio4 [ 243.390446][ T9931] vivid-002: unregistering radio5 [ 243.395411][ T9931] vivid-002: unregistering video17 [ 243.402446][ T9931] vivid-002: unregistering video18 [ 243.406225][ T9931] vivid-002: unregistering v4l-touch2 [ 243.485321][ T9931] vivid-003: unregistering video19 [ 243.487998][ T9931] vivid-003: unregistering video20 [ 243.491063][ T9931] vivid-003: unregistering vbi6 [ 243.500705][ T9931] vivid-003: unregistering vbi7 [ 243.505610][ T9931] vivid-003: unregistering swradio3 [ 243.519613][ T9931] vivid-003: unregistering radio6 [ 243.527220][ T9931] vivid-003: unregistering radio7 [ 243.541483][ T9931] vivid-003: unregistering video21 [ 243.546705][ T9931] vivid-003: unregistering video22 [ 243.559946][ T9931] vivid-003: unregistering v4l-touch3 [ 243.642335][ T9931] vivid-004: unregistering video23 [ 243.646212][ T9931] vivid-004: unregistering video24 [ 243.649045][ T9931] vivid-004: unregistering vbi8 [ 243.658521][ T9931] vivid-004: unregistering vbi9 [ 243.680566][ T9931] vivid-004: unregistering swradio4 [ 243.693966][ T9931] vivid-004: unregistering radio8 [ 243.721401][ T9931] vivid-004: unregistering radio9 [ 243.736798][ T9931] vivid-004: unregistering video25 [ 243.752249][ T9931] vivid-004: unregistering video26 [ 243.808290][ T9931] vivid-004: unregistering v4l-touch4 [ 243.951642][ T5756] Bluetooth: hci0: command 0x040f tx timeout [ 243.956329][ T5756] Bluetooth: hci1: command 0x041b tx timeout [ 243.958483][ T5756] Bluetooth: hci2: command 0x0419 tx timeout [ 244.162979][ T9931] vivid-005: unregistering video27 [ 244.166480][ T9931] vivid-005: unregistering video28 [ 244.174391][ T9931] vivid-005: unregistering vbi10 [ 244.183383][ T9931] vivid-005: unregistering vbi11 [ 244.192250][ T9931] vivid-005: unregistering swradio5 [ 244.208669][ T9931] vivid-005: unregistering radio10 [ 244.217529][ T9931] vivid-005: unregistering radio11 [ 244.239916][ T9931] vivid-005: unregistering video29 [ 244.257162][ T9931] vivid-005: unregistering video30 [ 244.265650][ T9931] vivid-005: unregistering v4l-touch5 [ 244.328267][ T9931] vivid-006: unregistering video31 [ 244.334005][ T9931] vivid-006: unregistering video32 [ 244.343074][ T9931] vivid-006: unregistering vbi12 [ 244.349395][ T9931] vivid-006: unregistering vbi13 [ 244.355408][ T9931] vivid-006: unregistering swradio6 [ 244.364337][ T9931] vivid-006: unregistering radio12 [ 244.435673][ T9931] vivid-006: unregistering radio13 [ 244.442207][ T9931] vivid-006: unregistering video33 [ 244.472923][ T9963] loop4: detected capacity change from 0 to 7 [ 244.485770][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.982'. [ 244.493535][ T9931] vivid-006: unregistering video34 [ 244.501887][ T9931] vivid-006: unregistering v4l-touch6 [ 244.555792][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.982'. [ 244.564673][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.982'. [ 244.623195][ T9963] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 244.629225][ T9964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.634546][ T9963] loop4: partition table partially beyond EOD, truncated [ 244.643087][ T9963] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 244.709666][ T9967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.718693][ T9967] bond1: (slave bond0): making interface the new active one [ 244.722797][ T9967] bond1: (slave bond0): Enslaving as an active interface with an up link [ 244.761452][ T9931] vivid-007: unregistering video35 [ 244.764983][ T9968] bond1: (slave bond0): Releasing active interface [ 244.769310][ T9931] vivid-007: unregistering video36 [ 244.772137][ T9938] udevd[9938]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 244.783017][ T9931] vivid-007: unregistering vbi14 [ 244.804343][ T9931] vivid-007: unregistering vbi15 [ 244.816401][ T9968] bridge_slave_0: left allmulticast mode [ 244.819329][ T9931] vivid-007: unregistering swradio7 [ 244.826112][ T9968] bridge_slave_0: left promiscuous mode [ 244.828787][ T9968] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.835038][ T9931] vivid-007: unregistering radio14 [ 244.846646][ T9931] vivid-007: unregistering radio15 [ 244.851193][ T9931] vivid-007: unregistering video37 [ 244.857237][ T9968] bridge_slave_1: left allmulticast mode [ 244.861250][ T9931] vivid-007: unregistering video38 [ 244.869254][ T9931] vivid-007: unregistering v4l-touch7 [ 244.887043][ T9968] bridge_slave_1: left promiscuous mode [ 244.895315][ T9968] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.917663][ T9968] bond0: (slave bond_slave_0): Releasing backup interface [ 244.931758][ T9968] bond0: (slave bond_slave_1): Releasing backup interface [ 244.954323][ T9968] team0: Port device team_slave_0 removed [ 244.967910][ T5795] net_ratelimit: 128 callbacks suppressed [ 244.967923][ T5795] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 244.974154][ T9968] team0: Port device team_slave_1 removed [ 244.980460][ T9968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.985342][ T9968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.993048][ T9968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.998515][ T9968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.001627][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 245.015963][ T9968] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 245.033002][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 245.041191][ T5849] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 245.138243][ T9931] vivid-008: unregistering video39 [ 245.154498][ T9931] vivid-008: unregistering video40 [ 245.170727][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 245.178748][ T9931] vivid-008: unregistering vbi16 [ 245.191601][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 245.210347][ T9931] vivid-008: unregistering vbi17 [ 245.212260][ T5849] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 245.230861][ T9931] vivid-008: unregistering swradio8 [ 245.253017][ T9931] vivid-008: unregistering radio16 [ 245.280606][ T9931] vivid-008: unregistering radio17 [ 245.298072][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 245.306595][ T9931] vivid-008: unregistering video41 [ 245.317713][ T9931] vivid-008: unregistering video42 [ 245.326087][ T9931] vivid-008: unregistering v4l-touch8 [ 245.341338][ T5795] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 245.539400][ T9931] vivid-009: unregistering video43 [ 245.551355][ T9931] vivid-009: unregistering video44 [ 245.561359][ T9931] vivid-009: unregistering vbi18 [ 245.582234][ T9931] vivid-009: unregistering vbi19 [ 245.600064][ T9931] vivid-009: unregistering swradio9 [ 245.620739][ T9931] vivid-009: unregistering radio18 [ 245.639338][ T9931] vivid-009: unregistering radio19 [ 245.657360][ T9931] vivid-009: unregistering video45 [ 245.671743][ T9931] vivid-009: unregistering video46 [ 245.682311][ T9931] vivid-009: unregistering v4l-touch9 [ 245.925124][ T9931] vivid-010: unregistering video47 [ 245.930021][ T9931] vivid-010: unregistering video48 [ 245.938029][ T9931] vivid-010: unregistering vbi20 [ 245.953791][ T9931] vivid-010: unregistering vbi21 [ 245.966873][ T9931] vivid-010: unregistering swradio10 [ 245.972974][ T9931] vivid-010: unregistering radio20 [ 245.982123][ T9931] vivid-010: unregistering radio21 [ 246.027834][ T9931] vivid-010: unregistering video49 [ 246.045372][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'. [ 246.057373][ T9931] vivid-010: unregistering video50 [ 246.067613][ T9931] vivid-010: unregistering v4l-touch10 [ 246.186633][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'. [ 246.216327][ T9931] vivid-011: unregistering video51 [ 246.225145][ T9931] vivid-011: unregistering video52 [ 246.230068][ T9931] vivid-011: unregistering vbi22 [ 246.245797][ T9931] vivid-011: unregistering vbi23 [ 246.252180][ T9931] vivid-011: unregistering swradio11 [ 246.276738][ T9931] vivid-011: unregistering radio22 [ 246.296271][ T9931] vivid-011: unregistering radio23 [ 246.302632][ T9931] vivid-011: unregistering video53 [ 246.310586][ T9931] vivid-011: unregistering video54 [ 246.326523][ T9931] vivid-011: unregistering v4l-touch11 [ 246.370302][ T9931] vivid-012: unregistering video55 [ 246.400469][ T9931] vivid-012: unregistering video56 [ 246.404128][ T9931] vivid-012: unregistering vbi24 [ 246.413215][ T9931] vivid-012: unregistering vbi25 [ 246.419631][ T9931] vivid-012: unregistering swradio12 [ 246.425464][ T9931] vivid-012: unregistering radio24 [ 246.442891][ T9931] vivid-012: unregistering radio25 [ 246.447396][ T9931] vivid-012: unregistering video57 [ 246.450044][ T9931] vivid-012: unregistering video58 [ 246.456160][ T9931] vivid-012: unregistering v4l-touch12 [ 246.468369][ T5102] Bluetooth: hci0: unexpected event for opcode 0x200f [ 246.604821][ T9931] vivid-013: unregistering video59 [ 246.608121][ T9931] vivid-013: unregistering video60 [ 246.619002][ T9931] vivid-013: unregistering vbi26 [ 246.628546][ T9931] vivid-013: unregistering vbi27 [ 246.650228][ T9931] vivid-013: unregistering swradio13 [ 246.652988][ T9931] vivid-013: unregistering radio26 [ 246.664706][ T9931] vivid-013: unregistering radio27 [ 246.670813][ T9931] vivid-013: unregistering video61 [ 246.680676][ T9931] vivid-013: unregistering video62 [ 246.683036][ T9931] vivid-013: unregistering v4l-touch13 [ 246.738868][ T9999] ./bus: Can't lookup blockdev [ 246.811941][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'. [ 246.823860][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'. [ 246.868177][ T9931] vivid-014: unregistering video63 [ 246.881112][ T9931] vivid-014: unregistering video64 [ 246.883971][ T9931] vivid-014: unregistering vbi28 [ 246.887660][ T9931] vivid-014: unregistering vbi29 [ 246.911774][ T9931] vivid-014: unregistering swradio14 [ 246.933887][ T9931] vivid-014: unregistering radio28 [ 246.942428][ T9931] vivid-014: unregistering radio29 [ 246.947445][ T9931] vivid-014: unregistering video65 [ 246.960296][ T9931] vivid-014: unregistering video66 [ 246.978548][ T9931] vivid-014: unregistering v4l-touch14 [ 246.996184][T10003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 247.022682][T10003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 247.040905][T10003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 247.059113][T10003] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 247.082897][ T9931] vivid-015: unregistering video67 [ 247.105738][ T9931] vivid-015: unregistering video68 [ 247.120855][ T9931] vivid-015: unregistering vbi30 [ 247.148148][ T9931] vivid-015: unregistering vbi31 [ 247.162768][ T9931] vivid-015: unregistering swradio15 [ 247.181585][ T9931] vivid-015: unregistering radio30 [ 247.190945][ T9931] vivid-015: unregistering radio31 [ 247.198582][ T9931] vivid-015: unregistering video69 [ 247.207106][ T9931] vivid-015: unregistering video70 [ 247.216593][ T9931] vivid-015: unregistering v4l-touch15 [ 247.283475][ T9931] vivid-016: unregistering video71 [ 247.301260][ T9931] vivid-016: unregistering video72 [ 247.319992][ T9931] vivid-016: unregistering vbi32 [ 247.335478][ T9931] vivid-016: unregistering vbi33 [ 247.344038][ T9931] vivid-016: unregistering swradio16 [ 247.373571][ T9931] vivid-016: unregistering radio32 [ 247.396329][ T9931] vivid-016: unregistering radio33 [ 247.409824][ T9931] vivid-016: unregistering video73 [ 247.419856][ T9931] vivid-016: unregistering video74 [ 247.429313][ T9931] vivid-016: unregistering v4l-touch16 [ 247.564093][ T9931] vivid-017: unregistering video75 [ 247.573478][ T9931] vivid-017: unregistering video76 [ 247.589461][ T9931] vivid-017: unregistering vbi34 [ 247.601225][ T9931] vivid-017: unregistering vbi35 [ 247.618132][ T9931] vivid-017: unregistering swradio17 [ 247.632542][ T9931] vivid-017: unregistering radio34 [ 247.644734][ T9931] vivid-017: unregistering radio35 [ 247.658719][ T9931] vivid-017: unregistering video77 [ 247.674767][ T9931] vivid-017: unregistering video78 [ 247.681604][ T9931] vivid-017: unregistering v4l-touch17 [ 247.800380][ T9931] vivid-018: unregistering video79 [ 247.807371][ T9931] vivid-018: unregistering video80 [ 247.829130][ T9931] vivid-018: unregistering vbi36 [ 247.851065][ T9931] vivid-018: unregistering vbi37 [ 247.868520][ T9931] vivid-018: unregistering swradio18 [ 247.882377][ T9931] vivid-018: unregistering radio36 [ 247.892991][ T9931] vivid-018: unregistering radio37 [ 247.909346][ T9931] vivid-018: unregistering video81 [ 247.918479][ T9931] vivid-018: unregistering video82 [ 247.929405][ T9931] vivid-018: unregistering v4l-touch18 [ 248.017296][ T9931] vivid-019: unregistering video83 [ 248.026927][ T9931] vivid-019: unregistering video84 [ 248.039230][ T9931] vivid-019: unregistering vbi38 [ 248.064978][ T9931] vivid-019: unregistering vbi39 [ 248.078370][ T9931] vivid-019: unregistering swradio19 [ 248.097207][ T9931] vivid-019: unregistering radio38 [ 248.111068][ T9931] vivid-019: unregistering radio39 [ 248.122951][ T9931] vivid-019: unregistering video85 [ 248.134895][ T9931] vivid-019: unregistering video86 [ 248.153284][ T9931] vivid-019: unregistering v4l-touch19 [ 248.293544][ T9931] vivid-020: unregistering video87 [ 248.315057][ T9931] vivid-020: unregistering video88 [ 248.331782][ T9931] vivid-020: unregistering vbi40 [ 248.352147][ T9931] vivid-020: unregistering vbi41 [ 248.371259][ T9931] vivid-020: unregistering swradio20 [ 248.379495][ T9931] vivid-020: unregistering radio40 [ 248.388812][ T9931] vivid-020: unregistering radio41 [ 248.399682][ T9931] vivid-020: unregistering video89 [ 248.416508][ T9931] vivid-020: unregistering video90 [ 248.422852][ T9931] vivid-020: unregistering v4l-touch20 [ 248.517592][ T9931] vivid-021: unregistering video91 [ 248.523132][ T9931] vivid-021: unregistering video92 [ 248.530819][ T9931] vivid-021: unregistering vbi42 [ 248.541868][ T9931] vivid-021: unregistering vbi43 [ 248.548892][ T9931] vivid-021: unregistering swradio21 [ 248.560500][ T9931] vivid-021: unregistering radio42 [ 248.571694][ T9931] vivid-021: unregistering radio43 [ 248.588334][ T9931] vivid-021: unregistering video93 [ 248.606353][ T9931] vivid-021: unregistering video94 [ 248.613314][ T9931] vivid-021: unregistering v4l-touch21 [ 248.644639][T10027] overlay: Unknown parameter '/' [ 248.666370][T10027] input: syz0 as /devices/virtual/input/input13 [ 248.701375][T10028] syzkaller0: entered promiscuous mode [ 248.703695][ T9931] vivid-022: unregistering video95 [ 248.714574][T10028] syzkaller0: entered allmulticast mode [ 248.730168][ T9931] vivid-022: unregistering video96 [ 248.752005][ T9931] vivid-022: unregistering vbi44 [ 248.767247][ T9931] vivid-022: unregistering vbi45 [ 248.778881][ T9931] vivid-022: unregistering swradio22 [ 248.785455][T10020] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.793030][ T9931] vivid-022: unregistering radio44 [ 248.802498][ T9931] vivid-022: unregistering radio45 [ 248.804965][T10020] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.814334][ T9931] vivid-022: unregistering video97 [ 248.827936][ T9931] vivid-022: unregistering video98 [ 248.839107][ T9931] vivid-022: unregistering v4l-touch22 [ 248.856851][T10020] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.872260][T10020] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.909367][ T9931] vivid-023: unregistering video99 [ 248.921430][ T9931] vivid-023: unregistering video100 [ 248.934517][ T9931] vivid-023: unregistering vbi46 [ 248.960202][ T9931] vivid-023: unregistering vbi47 [ 248.972257][ T9931] vivid-023: unregistering swradio23 [ 248.983199][ T9931] vivid-023: unregistering radio46 [ 248.997414][ T9931] vivid-023: unregistering radio47 [ 249.003510][T10030] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1004'. [ 249.012932][ T9931] vivid-023: unregistering video101 [ 249.028561][ T9931] vivid-023: unregistering video102 [ 249.037821][ T9931] vivid-023: unregistering v4l-touch23 [ 249.101669][T10030] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1004'. [ 249.841235][ T7364] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 250.012622][ T7364] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.025641][ T7364] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 250.038925][ T7364] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 250.068119][ T7364] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 250.071332][ T7364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.079388][ T7364] usb 6-1: Product: syz [ 250.085038][ T7364] usb 6-1: Manufacturer: syz [ 250.092227][ T7364] usb 6-1: SerialNumber: syz [ 250.111806][ T7364] usb 6-1: config 0 descriptor?? [ 250.125102][T10038] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 250.238664][ T7364] rc_core: IR keymap rc-streamzap not found [ 250.250817][ T7364] Registered IR keymap rc-empty [ 250.261435][ T7364] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 250.273801][ T7364] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 250.322427][T10048] input: syz0 as /devices/virtual/input/input15 [ 250.378820][ T5795] net_ratelimit: 131 callbacks suppressed [ 250.378835][ T5795] bond1: (slave gretap1): failed to get link speed/duplex [ 250.386625][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 250.425229][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 250.427765][T10056] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1015'. [ 250.537644][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 250.558659][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 250.572911][ T5849] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 250.586643][T10038] ptrace attach of "/syz-executor exec"[5750] was attempted by " [ 250.665184][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 250.706778][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 250.727268][ T5795] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 250.750582][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 250.962381][ T5102] Bluetooth: hci2: command 0x0419 tx timeout [ 250.965482][ T5756] Bluetooth: hci3: command 0x0419 tx timeout [ 250.987057][ T24] usb 6-1: USB disconnect, device number 6 [ 251.047734][ T5756] Bluetooth: hci0: command 0x040f tx timeout [ 251.051567][ T5102] Bluetooth: hci1: command 0x041b tx timeout [ 252.906658][ T24] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 253.046143][ T24] usb 11-1: device descriptor read/64, error -71 [ 253.302390][ T24] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 253.473197][ T24] usb 11-1: device descriptor read/64, error -71 [ 253.591603][ T24] usb usb11-port1: attempt power cycle [ 253.651065][T10109] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1026'. [ 253.972137][ T24] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 254.016752][ T24] usb 11-1: device descriptor read/8, error -71 [ 254.274327][ T24] usb 11-1: new low-speed USB device number 9 using dummy_hcd [ 254.304063][ T24] usb 11-1: device descriptor read/8, error -71 [ 254.423949][ T24] usb usb11-port1: unable to enumerate USB device [ 254.522692][T10119] ntfs3(nullb0): Primary boot signature is not NTFS. [ 254.545268][T10119] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 254.584462][T10122] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1030'. [ 255.675448][T10135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 255.683722][T10135] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 255.688441][T10135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 255.690479][T10135] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 255.733459][ T42] audit: type=1326 audit(1786545761.259:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.3.1035" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f46fec code=0x0 [ 255.760828][ T5849] net_ratelimit: 132 callbacks suppressed [ 255.760841][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 255.766510][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 255.792446][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 255.796730][ T5849] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 255.875741][T10147] overlayfs: failed to resolve './file0': -2 [ 255.889494][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 255.921362][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 255.978759][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 256.006167][ T9239] bond1: (slave gretap1): failed to get link speed/duplex [ 256.102413][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 256.108792][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.106678][T10192] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 257.139446][T10192] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 257.165774][T10192] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 257.171858][T10192] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 257.297769][T10199] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1045'. [ 258.291406][T10223] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1048'. [ 258.308973][T10223] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1048'. [ 258.337076][T10223] unsupported nlmsg_type 40 [ 258.632128][T10236] virtio-fs: tag not found [ 259.254947][ T5756] Bluetooth: hci3: command 0x0419 tx timeout [ 259.342182][ T5102] Bluetooth: hci1: command 0x041b tx timeout [ 259.344171][ T5758] Bluetooth: hci2: command 0x0419 tx timeout [ 259.346378][ T5756] Bluetooth: hci0: command 0x040f tx timeout [ 259.942621][T10246] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.962495][T10246] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.981913][T10246] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.003750][T10246] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.550364][T10252] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.565801][T10252] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.586602][ T5849] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.589119][T10252] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.592347][T10252] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.594641][ T5849] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.710171][T10261] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1057'. [ 261.143714][T10270] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1058'. [ 261.148051][ T5849] net_ratelimit: 129 callbacks suppressed [ 261.148064][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.178063][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.181320][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 261.199391][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 261.305725][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.310831][ T5849] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 261.341231][ T5849] bond1: (slave gretap1): failed to get link speed/duplex [ 261.435469][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.437900][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 261.455124][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 262.006499][ T65] block nbd6: Receive control failed (result -32) [ 262.015444][T10271] block nbd6: shutting down sockets [ 262.123159][T10283] FAULT_INJECTION: forcing a failure. [ 262.123159][T10283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.127362][T10283] CPU: 0 UID: 0 PID: 10283 Comm: syz.6.1062 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.127381][T10283] Tainted: [L]=SOFTLOCKUP [ 262.127385][T10283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.127391][T10283] Call Trace: [ 262.127396][T10283] [ 262.127401][T10283] dump_stack_lvl+0x100/0x190 [ 262.127418][T10283] should_fail_ex.cold+0x5/0xa [ 262.127430][T10283] _copy_from_user+0x2e/0xd0 [ 262.127448][T10283] get_compat_msghdr+0xb3/0x480 [ 262.127466][T10283] ? __pfx_get_compat_msghdr+0x10/0x10 [ 262.127487][T10283] ___sys_sendmsg+0x1b6/0x1e0 [ 262.127500][T10283] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.127518][T10283] ? find_held_lock+0x2b/0x80 [ 262.127540][T10283] __sys_sendmsg+0x160/0x210 [ 262.127556][T10283] ? __pfx___sys_sendmsg+0x10/0x10 [ 262.127574][T10283] ? __pfx_ksys_write+0x10/0x10 [ 262.127587][T10283] __do_fast_syscall_32+0xe7/0x970 [ 262.127601][T10283] ? lockdep_hardirqs_on+0x78/0x100 [ 262.127614][T10283] do_fast_syscall_32+0x32/0x70 [ 262.127629][T10283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.127642][T10283] RIP: 0023:0xf7f35fec [ 262.127656][T10283] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 262.127661][T10283] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 262.127677][T10283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 262.127683][T10283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.127689][T10283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.127695][T10283] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 262.127701][T10283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.127715][T10283] [ 262.636625][T10304] dyndbg: expected <4096 bytes into control [ 262.837364][ T5756] Bluetooth: hci0: command 0x040f tx timeout [ 262.839416][ T5756] Bluetooth: hci1: command 0x041b tx timeout [ 262.841520][ T5102] Bluetooth: hci2: command 0x0419 tx timeout [ 262.843698][ T5756] Bluetooth: hci3: command 0x0419 tx timeout [ 263.013969][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1069'. [ 263.240493][ T9] usb 5-1: USB disconnect, device number 4 [ 263.376977][T10320] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 263.415618][T10320] CIFS: Attempting to mount //127.0.0.1/share [ 263.461716][T10320] CIFS: VFS: Error connecting to socket. Aborting operation. [ 263.469895][T10320] CIFS: VFS: cifs_mount failed w/return code = -111 [ 263.828689][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 263.956116][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 263.989450][ T9] usb 5-1: Dual-Role OTG device on HNP port [ 263.991849][ T9] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 263.994919][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.056551][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 264.061183][ T9] gspca_spca501: reg write: error -32 [ 264.066955][ T9] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 264.072839][ T9] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 264.116946][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 264.122018][ T24] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 264.127334][ T24] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 264.133717][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 264.141809][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.153771][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 264.165020][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 264.170085][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 264.173157][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.268155][ T7365] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 264.278487][ T24] usb 6-1: config 0 descriptor?? [ 264.390542][ T42] audit: type=1326 audit(1786545769.354:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.6.1075" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35fec code=0x0 [ 264.512590][ T7365] usb 10-1: Using ep0 maxpacket: 8 [ 264.544786][ T7365] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 264.561475][ T7365] usb 10-1: config 179 has no interface number 0 [ 264.581210][ T7365] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 264.604009][ T7365] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 264.627009][ T7365] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 264.656898][ T7365] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 264.704523][ T7365] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 264.735930][ T7365] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 264.767947][ T7365] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.187892][T10332] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 265.300488][ T24] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 265.334985][T10342] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.752026][T10332] syzkaller1: entered promiscuous mode [ 265.763098][T10332] syzkaller1: entered allmulticast mode [ 265.867582][T10332] wg2 speed is unknown, defaulting to 1000 [ 266.122733][T10352] fuse: Bad value for 'fd' [ 266.449432][ T42] audit: type=1326 audit(1786545771.291:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.6.1078" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35fec code=0x0 [ 266.522259][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.567679][ T7365] usb 6-1: USB disconnect, device number 7 [ 266.605934][ T5849] net_ratelimit: 128 callbacks suppressed [ 266.605949][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.627635][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.648935][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 266.653239][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.657812][ T5849] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 266.660335][ T7365] usblp0: removed [ 266.689478][ T5835] usb 10-1: USB disconnect, device number 18 [ 266.689574][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 266.695010][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 266.699122][ C0] ================================================================== [ 266.701929][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 266.704385][ C0] Read of size 4 at addr ffff88805fa9985c by task kworker/0:7/7365 [ 266.709066][ C0] [ 266.710289][ C0] CPU: 0 UID: 0 PID: 7365 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.710317][ C0] Tainted: [L]=SOFTLOCKUP [ 266.710323][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.710336][ C0] Workqueue: usb_hub_wq hub_event [ 266.710364][ C0] Call Trace: [ 266.710371][ C0] [ 266.710379][ C0] dump_stack_lvl+0x100/0x190 [ 266.710395][ C0] print_report+0x13d/0x4b0 [ 266.710420][ C0] ? __virt_addr_valid+0x239/0x430 [ 266.710439][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 266.710456][ C0] kasan_report+0xdf/0x1c0 [ 266.710482][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 266.710503][ C0] do_raw_spin_lock+0x23b/0x260 [ 266.710521][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 266.710539][ C0] ? kcov_remote_stop+0x201/0x540 [ 266.710555][ C0] ? kcov_remote_stop+0x201/0x540 [ 266.710572][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 266.710585][ C0] ? __wake_up+0x1c/0x60 [ 266.710601][ C0] __wake_up+0x1c/0x60 [ 266.710615][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 266.710629][ C0] __usb_hcd_giveback_urb+0x3d6/0x610 [ 266.710648][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 266.710666][ C0] dummy_timer+0xdb2/0x36f0 [ 266.710680][ C0] ? find_held_lock+0x2b/0x80 [ 266.710694][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 266.710720][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 266.710748][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 266.710769][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 266.710796][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 266.710824][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 266.710841][ C0] ? mark_held_locks+0x40/0x70 [ 266.710868][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 266.710887][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 266.710903][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 266.710929][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 266.710952][ C0] handle_softirqs+0x1ea/0x9b0 [ 266.710973][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 266.710991][ C0] ? _raw_spin_unlock+0x28/0x50 [ 266.711004][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 266.711027][ C0] __irq_exit_rcu+0x162/0x210 [ 266.711045][ C0] irq_exit_rcu+0x9/0x30 [ 266.711062][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 266.711094][ C0] [ 266.711100][ C0] [ 266.711107][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.711126][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x44/0x70 [ 266.711147][ C0] Code: ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 51 f6 b1 09 8b 82 24 17 00 00 85 c0 74 f1 8b 82 f8 16 00 00 83 f8 02 75 e6 <48> 8b 8a 00 17 00 00 8b 92 fc 16 00 00 48 8b 01 48 83 c0 01 48 39 [ 266.711158][ C0] RSP: 0000:ffffc9000433f780 EFLAGS: 00000246 [ 266.711168][ C0] RAX: 0000000000000002 RBX: ffff8880266cd0b0 RCX: ffffc9002f8c6000 [ 266.711176][ C0] RDX: ffff888024daa540 RSI: ffffffff865a4121 RDI: ffff8880266cd0b0 [ 266.711184][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1003a57f47 [ 266.711191][ C0] R10: ffff88801d2bfa3f R11: 0000000000000000 R12: ffff8880266cd118 [ 266.711198][ C0] R13: ffffffff9006f8e0 R14: ffff8880266cd118 R15: ffffffff9006f8e0 [ 266.711207][ C0] ? device_remove_groups+0x11/0x20 [ 266.711221][ C0] device_remove_groups+0x11/0x20 [ 266.711233][ C0] device_remove+0x69/0x180 [ 266.711249][ C0] device_release_driver_internal+0x44e/0x620 [ 266.711267][ C0] bus_remove_device+0x2bc/0x560 [ 266.711282][ C0] ? __pfx_bus_remove_device+0x10/0x10 [ 266.711296][ C0] ? __pfx_device_remove_attrs+0x10/0x10 [ 266.711311][ C0] device_del+0x376/0x9b0 [ 266.711327][ C0] ? __pfx_device_del+0x10/0x10 [ 266.711340][ C0] ? kobject_put+0xb9/0x640 [ 266.711357][ C0] usb_disconnect+0x5b5/0x9a0 [ 266.711373][ C0] hub_event+0x1c4f/0x4a60 [ 266.711392][ C0] ? __lock_acquire+0x49f/0x1a40 [ 266.711409][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 266.711421][ C0] ? __pfx_hub_event+0x10/0x10 [ 266.711435][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 266.711453][ C0] ? rcu_is_watching+0x12/0xc0 [ 266.711468][ C0] process_one_work+0xa23/0x1940 [ 266.711486][ C0] ? __pfx_process_one_work+0x10/0x10 [ 266.711504][ C0] ? __pfx_hub_event+0x10/0x10 [ 266.711519][ C0] worker_thread+0x5ef/0xe50 [ 266.711536][ C0] ? __pfx_worker_thread+0x10/0x10 [ 266.711551][ C0] ? kthread+0x13a/0x450 [ 266.711565][ C0] ? __pfx_worker_thread+0x10/0x10 [ 266.711580][ C0] kthread+0x370/0x450 [ 266.711596][ C0] ? __pfx_kthread+0x10/0x10 [ 266.711610][ C0] ret_from_fork+0x72b/0xd50 [ 266.711624][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 266.711637][ C0] ? __switch_to+0x800/0x10f0 [ 266.711654][ C0] ? __pfx_kthread+0x10/0x10 [ 266.711669][ C0] ret_from_fork_asm+0x1a/0x30 [ 266.711687][ C0] [ 266.711691][ C0] [ 266.771178][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 266.771806][ C0] Allocated by task 7365: [ 266.771819][ C0] kasan_save_stack+0x30/0x50 [ 266.771839][ C0] kasan_save_track+0x14/0x30 [ 266.777037][ T5849] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.777133][ C0] __kasan_kmalloc+0xaa/0xb0 [ 266.780316][ T5849] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 266.780390][ C0] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 266.883123][ C0] xpad_probe+0x28e/0x1f60 [ 266.884619][ C0] usb_probe_interface+0x303/0x8f0 [ 266.886335][ C0] really_probe+0x241/0xa60 [ 266.887861][ C0] __driver_probe_device+0x20e/0x450 [ 266.889655][ C0] driver_probe_device+0x4a/0x140 [ 266.891272][ C0] __device_attach_driver+0x1df/0x320 [ 266.893004][ C0] bus_for_each_drv+0x159/0x1e0 [ 266.894580][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.894650][ C0] __device_attach+0x1e4/0x4d0 [ 266.897386][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 266.898951][ C0] device_initial_probe+0xaf/0xd0 [ 266.898972][ C0] bus_probe_device+0x64/0x160 [ 266.898985][ C0] device_add+0x121d/0x1970 [ 266.905990][ C0] usb_set_configuration+0xd97/0x1c60 [ 266.907686][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 266.909362][ C0] usb_probe_device+0xef/0x400 [ 266.910976][ C0] really_probe+0x241/0xa60 [ 266.912646][ C0] __driver_probe_device+0x20e/0x450 [ 266.914629][ C0] driver_probe_device+0x4a/0x140 [ 266.916351][ C0] __device_attach_driver+0x1df/0x320 [ 266.918334][ C0] bus_for_each_drv+0x159/0x1e0 [ 266.920248][ C0] __device_attach+0x1e4/0x4d0 [ 266.922093][ C0] device_initial_probe+0xaf/0xd0 [ 266.923916][ C0] bus_probe_device+0x64/0x160 [ 266.925460][ C0] device_add+0x121d/0x1970 [ 266.926898][ C0] usb_new_device.cold+0x685/0x115c [ 266.928586][ C0] hub_event+0x30a3/0x4a60 [ 266.930153][ C0] process_one_work+0xa23/0x1940 [ 266.931874][ C0] worker_thread+0x5ef/0xe50 [ 266.933561][ C0] kthread+0x370/0x450 [ 266.935111][ C0] ret_from_fork+0x72b/0xd50 [ 266.936678][ C0] ret_from_fork_asm+0x1a/0x30 [ 266.938292][ C0] [ 266.939081][ C0] Freed by task 5835: [ 266.940404][ C0] kasan_save_stack+0x30/0x50 [ 266.942023][ C0] kasan_save_track+0x14/0x30 [ 266.943570][ C0] kasan_save_free_info+0x3b/0x70 [ 266.945237][ C0] __kasan_slab_free+0x5f/0x80 [ 266.946791][ C0] kfree+0x22b/0x6c0 [ 266.948294][ C0] xpad_disconnect+0x1cf/0x530 [ 266.950140][ C0] usb_unbind_interface+0x1dd/0x9e0 [ 266.951872][ C0] device_remove+0x12a/0x180 [ 266.953484][ C0] device_release_driver_internal+0x44e/0x620 [ 266.955531][ C0] bus_remove_device+0x2bc/0x560 [ 266.957414][ C0] device_del+0x376/0x9b0 [ 266.958903][ C0] usb_disable_device+0x367/0x810 [ 266.960563][ C0] usb_disconnect+0x2e2/0x9a0 [ 266.962116][ C0] hub_event+0x1c4f/0x4a60 [ 266.963657][ C0] process_one_work+0xa23/0x1940 [ 266.965257][ C0] worker_thread+0x5ef/0xe50 [ 266.966719][ C0] kthread+0x370/0x450 [ 266.968020][ C0] ret_from_fork+0x72b/0xd50 [ 266.969460][ C0] ret_from_fork_asm+0x1a/0x30 [ 266.970968][ C0] [ 266.971801][ C0] The buggy address belongs to the object at ffff88805fa99800 [ 266.971801][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 266.976404][ C0] The buggy address is located 92 bytes inside of [ 266.976404][ C0] freed 1024-byte region [ffff88805fa99800, ffff88805fa99c00) [ 266.980944][ C0] [ 266.981739][ C0] The buggy address belongs to the physical page: [ 266.983808][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fa98 [ 266.986664][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 266.989695][ C0] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 266.992289][ C0] page_type: f5(slab) [ 266.993624][ C0] raw: 04fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 266.996479][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 266.999634][ C0] head: 04fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 267.002619][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 267.005474][ C0] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 267.008175][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 267.010891][ C0] page dumped because: kasan: bad access detected [ 267.013097][ C0] page_owner tracks the page as allocated [ 267.015144][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 76, tgid 76 (kworker/u33:4), ts 51209157168, free_ts 47635277729 [ 267.021819][ C0] post_alloc_hook+0xfd/0x120 [ 267.023405][ C0] get_page_from_freelist+0xf48/0x3530 [ 267.025115][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.025511][ C0] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 267.029611][ C0] new_slab+0xa2/0x640 [ 267.030926][ C0] refill_objects+0xe3/0x410 [ 267.032495][ C0] __pcs_replace_empty_main+0x376/0x680 [ 267.034254][ C0] __kmalloc_noprof+0x66d/0x820 [ 267.035829][ C0] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 267.038083][ C0] ieee80211_inform_bss+0x159/0x1170 [ 267.040050][ C0] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 267.042773][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 267.044893][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 267.047347][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 267.049543][ C0] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 267.051978][ C0] ieee80211_iface_work+0xa9a/0x1070 [ 267.054271][ C0] cfg80211_wiphy_work+0x2b7/0x550 [ 267.056172][ C0] page last free pid 5744 tgid 5744 stack trace: [ 267.059118][ C0] __free_frozen_pages+0x79f/0x1090 [ 267.060820][ C0] qlist_free_all+0x47/0xf0 [ 267.062521][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 267.064384][ C0] __kasan_slab_alloc+0x69/0x90 [ 267.066114][ C0] __kmalloc_cache_noprof+0x265/0x6c0 [ 267.067930][ C0] kobject_uevent_env+0x263/0x18b0 [ 267.069528][ C0] netdev_queue_update_kobjects+0x1a7/0x6f0 [ 267.071412][ C0] netdev_register_kobject+0x2b3/0x3d0 [ 267.073078][ C0] register_netdevice+0x15b6/0x25a0 [ 267.074701][ C0] veth_newlink+0x316/0xa00 [ 267.076152][ C0] rtnl_newlink+0x1499/0x2380 [ 267.077620][ C0] rtnetlink_rcv_msg+0x95e/0xe90 [ 267.079256][ C0] netlink_rcv_skb+0x159/0x420 [ 267.080776][ C0] netlink_unicast+0x585/0x850 [ 267.082277][ C0] netlink_sendmsg+0x8b0/0xda0 [ 267.083749][ C0] __sys_sendto+0x48b/0x4e0 [ 267.085209][ C0] [ 267.085992][ C0] Memory state around the buggy address: [ 267.088130][ C0] ffff88805fa99700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 267.091654][ C0] ffff88805fa99780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 267.095475][ C0] >ffff88805fa99800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.098790][ C0] ^ [ 267.101648][ C0] ffff88805fa99880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.104994][ C0] ffff88805fa99900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.108268][ C0] ================================================================== [ 267.111612][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 267.114697][ C0] CPU: 0 UID: 0 PID: 7365 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.119643][ C0] Tainted: [L]=SOFTLOCKUP [ 267.121446][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.125687][ C0] Workqueue: usb_hub_wq hub_event [ 267.127871][ C0] Call Trace: [ 267.129307][ C0] [ 267.130573][ C0] dump_stack_lvl+0x100/0x190 [ 267.132652][ C0] vpanic+0x552/0x970 [ 267.134540][ C0] ? __pfx_vpanic+0x10/0x10 [ 267.136628][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 267.138990][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 267.141093][ C0] panic+0xd1/0xe0 [ 267.142636][ C0] ? __pfx_panic+0x10/0x10 [ 267.144475][ C0] ? end_report.part.0+0x23/0x90 [ 267.146610][ C0] ? rcu_is_watching+0x12/0xc0 [ 267.148273][ C0] ? end_report.part.0+0x23/0x90 [ 267.149914][ C0] ? check_panic_on_warn+0x1f/0x90 [ 267.151605][ C0] check_panic_on_warn.cold+0x19/0x34 [ 267.153425][ C0] end_report.part.0+0x3a/0x90 [ 267.155064][ C0] kasan_report.cold+0xe/0x18 [ 267.156698][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 267.158936][ C0] do_raw_spin_lock+0x23b/0x260 [ 267.160991][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 267.163275][ C0] ? kcov_remote_stop+0x201/0x540 [ 267.165406][ C0] ? kcov_remote_stop+0x201/0x540 [ 267.167533][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 267.169741][ C0] ? __wake_up+0x1c/0x60 [ 267.171849][ C0] __wake_up+0x1c/0x60 [ 267.173611][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 267.175530][ C0] __usb_hcd_giveback_urb+0x3d6/0x610 [ 267.177290][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 267.178952][ C0] dummy_timer+0xdb2/0x36f0 [ 267.180445][ C0] ? find_held_lock+0x2b/0x80 [ 267.182456][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 267.184828][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 267.187310][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 267.190170][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 267.192516][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 267.194958][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 267.196926][ C0] ? mark_held_locks+0x40/0x70 [ 267.198901][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 267.201375][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 267.203660][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 267.206198][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 267.208431][ C0] handle_softirqs+0x1ea/0x9b0 [ 267.210476][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 267.212649][ C0] ? _raw_spin_unlock+0x28/0x50 [ 267.214701][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 267.216977][ C0] __irq_exit_rcu+0x162/0x210 [ 267.218971][ C0] irq_exit_rcu+0x9/0x30 [ 267.220364][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 267.222409][ C0] [ 267.223326][ C0] [ 267.224353][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.226675][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x44/0x70 [ 267.229585][ C0] Code: ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 51 f6 b1 09 8b 82 24 17 00 00 85 c0 74 f1 8b 82 f8 16 00 00 83 f8 02 75 e6 <48> 8b 8a 00 17 00 00 8b 92 fc 16 00 00 48 8b 01 48 83 c0 01 48 39 [ 267.237882][ C0] RSP: 0000:ffffc9000433f780 EFLAGS: 00000246 [ 267.240448][ C0] RAX: 0000000000000002 RBX: ffff8880266cd0b0 RCX: ffffc9002f8c6000 [ 267.243764][ C0] RDX: ffff888024daa540 RSI: ffffffff865a4121 RDI: ffff8880266cd0b0 [ 267.247232][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1003a57f47 [ 267.250933][ C0] R10: ffff88801d2bfa3f R11: 0000000000000000 R12: ffff8880266cd118 [ 267.254645][ C0] R13: ffffffff9006f8e0 R14: ffff8880266cd118 R15: ffffffff9006f8e0 [ 267.257903][ C0] ? device_remove_groups+0x11/0x20 [ 267.260058][ C0] device_remove_groups+0x11/0x20 [ 267.262299][ C0] device_remove+0x69/0x180 [ 267.264226][ C0] device_release_driver_internal+0x44e/0x620 [ 267.266924][ C0] bus_remove_device+0x2bc/0x560 [ 267.268730][ C0] ? __pfx_bus_remove_device+0x10/0x10 [ 267.270571][ C0] ? __pfx_device_remove_attrs+0x10/0x10 [ 267.272435][ C0] device_del+0x376/0x9b0 [ 267.273999][ C0] ? __pfx_device_del+0x10/0x10 [ 267.275579][ C0] ? kobject_put+0xb9/0x640 [ 267.277322][ C0] usb_disconnect+0x5b5/0x9a0 [ 267.279049][ C0] hub_event+0x1c4f/0x4a60 [ 267.280631][ C0] ? __lock_acquire+0x49f/0x1a40 [ 267.282350][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 267.284037][ C0] ? __pfx_hub_event+0x10/0x10 [ 267.285554][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 267.287427][ C0] ? rcu_is_watching+0x12/0xc0 [ 267.289011][ C0] process_one_work+0xa23/0x1940 [ 267.290585][ C0] ? __pfx_process_one_work+0x10/0x10 [ 267.292406][ C0] ? __pfx_hub_event+0x10/0x10 [ 267.294007][ C0] worker_thread+0x5ef/0xe50 [ 267.295612][ C0] ? __pfx_worker_thread+0x10/0x10 [ 267.297288][ C0] ? kthread+0x13a/0x450 [ 267.298706][ C0] ? __pfx_worker_thread+0x10/0x10 [ 267.300387][ C0] kthread+0x370/0x450 [ 267.301747][ C0] ? __pfx_kthread+0x10/0x10 [ 267.303319][ C0] ret_from_fork+0x72b/0xd50 [ 267.304815][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 267.306481][ C0] ? __switch_to+0x800/0x10f0 [ 267.308046][ C0] ? __pfx_kthread+0x10/0x10 [ 267.309526][ C0] ret_from_fork_asm+0x1a/0x30 [ 267.311197][ C0] [ 267.312747][ C0] Kernel Offset: disabled [ 267.314266][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:37:44 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a123a5 RDI=ffffffff9b9f31a0 RBP=ffffffff9b9f3160 RSP=ffffc900000074f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=000000000000006b R14=ffffffff9b6f3227 R15=ffffffff85a12340 RIP=ffffffff85a123cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096be3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000b000 CR3=0000000076536000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c742540 RSI=ffffffff81b51ece RDI=ffff88801c742540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff888096ce3000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000001d2b814c 0000000200000025 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564425515230 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002020000000a 0000000000000640 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f770000ea00 000016000000a291 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564428533100 0000564428533100 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffaaaaaaffaaaaaa ffaaaaaaffaaaaaa ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0000aaff0000aa ffaaaaaaffaaaaaa ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=0000000000000000 RCX=ffffc9002d8c2000 RDX=ffff88802845a540 RSI=ffffffff8a5d7754 RDI=0000000000000001 RBP=ffffc900033cfd40 RSP=ffffc900033cf978 R8 =0000000000000001 R9 =fffff52000679ef1 R10=ffffc900033cf78f R11=0000000000000000 R12=0000000000000000 R13=0000000080000002 R14=ffffffff90c95de0 R15=0000000080000002 RIP=ffffffff8209ac9f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096de3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c984f1af40 CR3=0000000076536000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002a000000000 0000000c00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c7fa540 RSI=ffffffff81b51ece RDI=ffff88801c7fa540 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa56d031eb8 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000