last executing test programs: 5m52.703039717s ago: executing program 3 (id=1938): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r2, 0x80000) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) 5m52.674201112s ago: executing program 3 (id=1947): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde0800450000680064000000019078ac1e0001ac1414aa05009078e00000e0430000000000000000110000ac1414aa00000000070300443400030a010102000100006401010800000000ac1414aa00000000ac1414bb000000000000000000000000ac1414bb0000020000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r3, 0xfffffffe, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000380)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000002c0)={0x1, &(0x7f0000000400)=[{0xeb0a, 0x7}]}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x48040}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0xfffc, 0x1}, {0x7, 0x7}]}) sendmmsg$inet(r4, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0xe) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)=ANY=[@ANYRESHEX=r2], 0x1c}, 0x1, 0x3000000, 0x0, 0x40890}, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r10, &(0x7f0000000100), 0x8) write$6lowpan_control(r8, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 5m52.175814201s ago: executing program 3 (id=1948): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r2, 0x80000) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) 5m52.175273044s ago: executing program 3 (id=1949): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0xa5) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x13d) chdir(&(0x7f0000000180)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)=ANY=[]) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f00000006c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x9b, 0x2, 0x5, 0x101, 0xffff0000, 0x1, 0x6, 0x9, 0x2, 0x402, 0x2, 0xfffffffe, 0x53f0c2e4, 0xffff58ea, 0x9a8a, 0x6338, 0x1, 0x4, 0x0, 0x0, 0x1, 0x7, 0x8, 0x200, 0x7, 0x7, 0xd23, 0x2, 0x8, 0x6, 0x6, 0x40009, 0x3, 0x22f, 0xfff, 0x5, 0x401, 0x7, 0x80000001, 0x3, 0x200, 0x1, 0x6, 0xa448, 0x9, 0x4, 0x3, 0x4, 0x5, 0x7, 0x1, 0x4, 0x3, 0x0, 0x3, 0x7, 0x3, 0x68f, 0x4, 0x6986fd3d, 0x5, 0x0, 0x7, 0xfc1, 0x3, 0x5, 0x2, 0x9479, 0x5, 0x2, 0x800, 0x16736fd2, 0xffff3970, 0x1, 0x6, 0x2, 0x800, 0x4a, 0x3, 0x5, 0xa00, 0x8, 0x7, 0x9, 0x5, 0x3, 0x6, 0x1315572, 0x1, 0x4, 0x2, 0x10000, 0x4, 0x7, 0x39ba, 0x800, 0x0, 0x9, 0x7fff, 0x8001, 0x2f, 0x65, 0x8000, 0x4, 0x95, 0xf, 0x2, 0x0, 0x4, 0x2, 0x10, 0x7fff, 0x300, 0x1, 0x481, 0x2af3, 0x1581cf5c, 0x3, 0x80000001, 0x200, 0x2, 0x8680, 0x5, 0x2, 0x475, 0xffff, 0x0, 0x5]}}) sendto$inet(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x4000080, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000080)) r4 = syz_clone(0x48000, &(0x7f0000000100)="6d3fa4a5cf1fb438e74eff95c74e3bb9cfaeaf27438c0c7dbb967b8861ae5c27acddd1a6f66b96e0ec328f55c696c573e8ed80c00cd4f74eeebacc6b46e0d837a7be5c9528f35b029f57cde19b0e443db1c98d6788f657f39327a1220a8763cac72febad83d5cc8ac07e0fb0b1c21a4faa636827aebfd388a0dd49aa80d439859fb0cd4f60fb1776030cd09910a9be807e89151be7c83254899e8562c2e3d5db999306f7ddd6beddfc5b9ec38aefedb8487fceb141b4866b94d8bce7e3d7745509427d80", 0xc4, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000340)="bf21e36b1711e14cc65b4073be75f15b3dcbd7e5c079be30ba88cfbd0cb472cd") r5 = getpid() ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_procfs(r4, &(0x7f0000000380)='cpuset\x00') sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000906050000000000000000000200000880100007800c0002800800014000007fff0c000780060004404e2000000c00078008001c40000000060004404e2100000c00078008000640000000061c0007801800168014000240fe9900000000000000000008000940fffffe000c00078008000940000000a90c0007800800094000000005080009400000fbc60000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) iopl(0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 5m52.075970998s ago: executing program 3 (id=1950): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f0000000080)="822a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x18) 5m51.766157305s ago: executing program 3 (id=1951): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) r5 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r5, 0x3, 0x0, @void}, 0x62) r6 = socket$inet(0x2, 0x4000000000000001, 0x3) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) fcntl$setstatus(r5, 0x4, 0x40000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x400, 0x2, 0xb9}) 5m51.741872386s ago: executing program 32 (id=1951): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) r5 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r5, 0x3, 0x0, @void}, 0x62) r6 = socket$inet(0x2, 0x4000000000000001, 0x3) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) fcntl$setstatus(r5, 0x4, 0x40000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x400, 0x2, 0xb9}) 4.201778532s ago: executing program 4 (id=4085): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x1306}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000002c0)={0x0, 0x0, 0x27f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) shutdown(r6, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="28000000040601020000f13ad8c06e960b0536512200020073797a311d000000050001"], 0x28}}, 0xc006) r8 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROMREADTOCHDR(r8, 0x5305, &(0x7f0000000040)={0x8, 0x4}) 4.200186193s ago: executing program 2 (id=4094): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) syz_io_uring_setup(0x7934, 0x0, &(0x7f0000000080), 0x0) syz_io_uring_setup(0xa91, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mincore(&(0x7f000048b000/0x4000)=nil, 0x4000, &(0x7f0000000540)=""/169) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.787669738s ago: executing program 0 (id=4086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x4000400) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r2, &(0x7f0000000540)=""/231, 0xe7, 0x6141, &(0x7f0000000400)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000080), &(0x7f0000000300)}, 0x1c) (async) unshare(0x44000100) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x1f5c, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x40000000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r10}, 0x18) 3.699824305s ago: executing program 0 (id=4087): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone3(&(0x7f0000000380)={0x140080100, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x1c}, &(0x7f0000000180)=""/61, 0x3d, &(0x7f0000000300)=""/96, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0xc) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 3.464747976s ago: executing program 2 (id=4088): userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) open_tree(0xffffffffffffff9c, 0x0, 0x9801) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/nf_conntrack_expect\x00') read$FUSE(r1, &(0x7f0000000780)={0x2020}, 0x2020) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000005c0)={0x0, 0x6000, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='contention_end\x00', r6}, 0x18) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000300)={0x0, 'vxcan1\x00'}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @remote}}}, 0x108) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'bridge0\x00', 0x3}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 3.379784323s ago: executing program 2 (id=4089): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @multicast2, @empty}, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getrlimit(0x4, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="aa", 0x1, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.235128686s ago: executing program 4 (id=4093): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004000)=@newchain={0x2684, 0x64, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3}, {0x8, 0xe}, {0xfff1, 0xb}}, [@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x545b}]}}, @f_tcindex={{0xc}, {0x2634, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x7}, @TCA_TCINDEX_ACT={0x2628, 0x7, [@m_police={0x25a0, 0xf, 0x0, 0x0, {{0xb}, {0x2558, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xbe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffffffffff, 0x5, 0x4, 0x4, {0x8, 0x1, 0x60c, 0x0, 0x3}, {0xff, 0x2, 0x2, 0x4, 0x4, 0x10000}, 0x88c, 0xa0, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xfffffffd, 0x0, 0x5, 0x3, 0x7c, 0x6, 0x7bb, 0x4, 0x4, 0x9, 0x4, 0x7, 0x3, 0x8, 0x40, 0x9, 0x9, 0x2, 0x4, 0x5, 0x2, 0x827, 0xe, 0x8, 0x3ff, 0x2, 0x4, 0x9, 0xd31, 0xd78, 0x4, 0x2, 0x2, 0x9, 0x2, 0x4, 0x800, 0x2, 0x1000, 0x8, 0x2, 0x4, 0x8001, 0x1, 0x8, 0x2d, 0xf49, 0x9, 0x8, 0x1, 0x8001, 0xd1, 0x10, 0x792, 0x4, 0x10001, 0xfff, 0x4, 0x0, 0x8, 0xc983, 0x8, 0xfffffff9, 0x6, 0xbf3, 0x5b, 0x0, 0x1, 0x5, 0x8000, 0xffffffff, 0x5, 0x1, 0xfc800000, 0x4, 0x7, 0xc0000000, 0xffffffff, 0xeb, 0xd9, 0x0, 0x3a3, 0x10000, 0x7, 0x9, 0x3, 0xd, 0x8, 0x4, 0x9, 0x4, 0x5, 0x8, 0xc3, 0xffffffaf, 0x7, 0x363c616c, 0x25b, 0x84c, 0xffffffff, 0x8, 0xffffffa9, 0xff, 0xe0000000, 0x81, 0x3, 0x9, 0x4, 0x80000000, 0x4, 0x4, 0x6e73, 0x7fffffff, 0x0, 0xd, 0x2, 0x3, 0x6d4eddda, 0x7, 0x35dbac89, 0x3, 0x1, 0x5000000, 0x6, 0x2, 0x6, 0xffff, 0x0, 0x2, 0x3, 0x69b, 0x4, 0xffff, 0x7, 0xffffffff, 0x0, 0x1000, 0x4, 0x6, 0x1f, 0x8, 0x7, 0x5, 0x8, 0x5, 0x4, 0x7, 0x400, 0x86b4, 0x3, 0x9a, 0xfffffff9, 0x6, 0x5, 0x7, 0x5, 0x2, 0x3, 0xffff2f76, 0x9, 0x2, 0x6, 0x6, 0x8, 0xa, 0x4, 0x4, 0x7, 0x1, 0x4, 0x6, 0x0, 0x3, 0x6, 0x7, 0x7, 0x10, 0x9, 0x3, 0x6, 0x1ff, 0x7, 0x9, 0xf, 0x6, 0x2, 0x3, 0x0, 0x1, 0x7fff, 0x4, 0x5, 0x6f9, 0x7f, 0x2, 0x5, 0x9, 0xffffff6b, 0xffffffff, 0x2, 0xfffffff1, 0x8, 0x9b31, 0x3, 0xffffff0e, 0x4, 0x101, 0x8, 0x5, 0x3, 0x7, 0x200, 0x1, 0x3, 0xb9e, 0x6db, 0x6, 0xfffffffd, 0x7f, 0x33, 0x6, 0x3, 0x9, 0xffffffff, 0x0, 0x3, 0x7, 0x9, 0x3, 0x6f, 0x0, 0x401, 0x5, 0x10001, 0x5, 0x9, 0x6, 0xfe, 0x4, 0x3, 0xe, 0x0, 0x0, 0xaa, 0x1, 0x4, 0xb2, 0x1, 0x5, 0x3, 0x0, 0xb7a3, 0x7, 0x3, 0xa4bd]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x132c}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x0, 0x6, 0x6a9, 0x7, 0x1, 0xffffffaf, 0x8, 0x7, 0x2, 0x0, 0xbb8, 0x7, 0x6, 0x5, 0xfffff001, 0x7, 0x3, 0x1, 0x8, 0x7, 0x8, 0x0, 0x7f, 0x40, 0x9, 0x2, 0x1, 0x1c09, 0x7, 0x1ff, 0x10001, 0x9, 0x1, 0xfffffc01, 0xfffffff8, 0x0, 0xfffffffd, 0xffff, 0x2, 0x10001, 0x7, 0x2, 0x8a, 0x2bee, 0x2, 0xfffffffd, 0x3, 0x10, 0x4, 0x3, 0x2, 0xffffffff, 0x4, 0x9, 0x20, 0x2, 0x8001, 0x0, 0x0, 0x8, 0x8, 0x3f, 0x2, 0x9, 0x7, 0x3, 0x42, 0xfb, 0x3, 0x1, 0x5ac1, 0xb, 0xa, 0x3, 0xea, 0xd, 0xaa, 0x40, 0x0, 0x2, 0x7, 0x8d, 0x1, 0xd, 0x3, 0x3, 0x2, 0x9, 0x2, 0x8, 0x5, 0xe0, 0x9, 0x1, 0x3afd, 0x7fffffff, 0x7, 0x7, 0x5, 0x0, 0x4, 0x5, 0x3ff, 0x1, 0x8, 0x7, 0xe1, 0x0, 0x5, 0x7, 0x7, 0x100, 0x1000, 0x1000, 0xfffffffe, 0x240000, 0x7f, 0x7, 0x1, 0x10001, 0x3, 0x5, 0x2, 0x6, 0x9, 0x3a, 0x0, 0x7, 0x0, 0x2, 0xfffff42f, 0x3, 0x79, 0x9, 0x3, 0xc36, 0x1, 0x5, 0x7, 0xfffffb99, 0x7, 0xe49, 0xb, 0x0, 0x2008, 0x8, 0x441b6797, 0x7, 0x3, 0xefa, 0x400, 0x80, 0x7, 0x5, 0xcb, 0x9, 0x6, 0x0, 0x5, 0x3, 0x7, 0x9, 0x0, 0x7ff, 0x1000, 0x0, 0x401, 0x4, 0x8, 0x7, 0x3, 0x2, 0x4, 0x7, 0xff, 0x9, 0x5, 0x6, 0x6, 0x40, 0x200, 0x6, 0x4, 0x9, 0x9, 0x3ff, 0x0, 0x9a0, 0x2, 0x4, 0xa, 0xfffff864, 0x0, 0x5, 0x0, 0x9, 0xfd, 0x8, 0x3, 0x4, 0x7, 0x0, 0x4, 0x200, 0x80000000, 0x3, 0xb93, 0x1, 0x7, 0xffffffff, 0x6, 0x4, 0x8, 0x2, 0x4389afdc, 0x6, 0x0, 0x8, 0xfffffeff, 0x8, 0x800, 0x7, 0x2, 0x5, 0xae, 0x53402ae2, 0x3, 0x1ff, 0x5, 0x70a, 0xa14, 0x9, 0x3, 0x1a, 0x0, 0x5, 0x400, 0x80000001, 0x4645, 0x3, 0x8143, 0x3, 0x7, 0x9, 0x8, 0x1, 0x8, 0x3, 0x9, 0x2, 0x4, 0xfff, 0x101, 0x7, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe3fe}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0xc5, 0x9, 0x101, 0x4, 0x0, 0x5407, 0x7, 0xfffffffc, 0xdd, 0x3e, 0x7fffffff, 0xfd, 0x3, 0x4, 0x5, 0x0, 0x2, 0xf82, 0x9, 0x0, 0x6, 0x3ff, 0x3, 0x800, 0x8000, 0x2, 0xb, 0x77, 0x9, 0x0, 0x3, 0x7, 0xfffffffe, 0x3, 0x4, 0x3ff, 0x0, 0x6, 0xc, 0x8, 0xffffffff, 0x7, 0x3, 0x7, 0x7, 0x80000000, 0x0, 0x71f, 0x9a66, 0x1, 0x8001, 0x400, 0x18000000, 0x8f, 0xfffffffb, 0x2, 0xfffffffe, 0x8, 0x2, 0x6, 0x6, 0x5e4, 0x164, 0xfffeffff, 0x4, 0x6, 0x1, 0x4, 0x8, 0xdf, 0x8, 0x1, 0x4, 0x1, 0x5, 0x6, 0x9, 0xff000000, 0x2, 0x8, 0x5, 0x4, 0x0, 0x5, 0x3, 0x5, 0x101, 0x2a33, 0x7f, 0x11, 0x7b5d, 0x800, 0x480000, 0x0, 0x7, 0xb78, 0x69, 0x349, 0x400, 0x1, 0xe90, 0x5, 0x3, 0xe3, 0x7, 0x2, 0x80000000, 0x6, 0xfffffffd, 0x800, 0x8fdc, 0x1ff, 0x0, 0xfffffff1, 0x1, 0x122, 0x3, 0xcbc, 0x3, 0xf, 0x8, 0x0, 0x6, 0x7, 0xa50, 0x0, 0x800, 0x102, 0x2, 0x2, 0x6, 0x4, 0x3e7c2c42, 0x101, 0x6ab06234, 0x9d, 0x3, 0x9, 0x2, 0x3, 0x1, 0x1ff, 0x9, 0x1, 0x6557, 0xfff, 0x0, 0xbd, 0x1d60, 0x400, 0x2, 0x4, 0x8, 0x8, 0x7, 0x80, 0x7, 0x7b5c, 0x400, 0xa164, 0x5, 0x6, 0x0, 0x4bfa473, 0x8, 0x400, 0x1, 0xd, 0x0, 0x7, 0x0, 0x7, 0xb, 0x55d, 0xfffff001, 0x8001, 0x2, 0x6, 0x7fffffff, 0x8, 0x1, 0x1, 0x100, 0x8, 0x0, 0xff, 0x400, 0x1, 0x15, 0xa6, 0x5, 0x80000001, 0x5, 0x1, 0x0, 0xc, 0x1, 0x0, 0x8, 0x6d7, 0x82, 0x0, 0x3543c17, 0x7, 0x2, 0x3, 0x10, 0x8, 0x7, 0x800, 0x1, 0xca, 0xfffffff8, 0x5, 0x7, 0x568, 0x0, 0x9a1, 0xfffffff9, 0x1ff, 0x6, 0x6, 0xbb, 0x5, 0x7ff, 0x3, 0x6, 0x80000000, 0x5, 0x7, 0x40, 0x9, 0x2, 0x7, 0xf, 0xfffffff7, 0x1, 0x1, 0x9, 0x0, 0x7, 0x80000000, 0x4, 0x0, 0x3ff, 0x897, 0x4, 0x3, 0x0, 0x1, 0xfffffffd, 0x40, 0x8, 0x6, 0x5]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0xb, 0xd, 0x80000001, 0x101, 0x9, 0x3, 0x6, 0x9, 0x9, 0x9, 0x81, 0xb, 0x5, 0xd, 0x8, 0x2, 0x0, 0x8, 0x40, 0x4a7, 0x6, 0x0, 0xe, 0xb, 0x0, 0x440f, 0xff, 0x3, 0xdbb, 0x6, 0x2, 0x9, 0xffff, 0x40cf3134, 0xca6, 0x3, 0x8001, 0x0, 0x3, 0xfffffe01, 0xfdb7, 0x9, 0x7, 0x8, 0xfffffff5, 0x8001, 0x6, 0x6, 0x2, 0xcc2, 0x7, 0xa046162, 0x3, 0x64, 0x7, 0x1, 0xb001, 0x7fffffff, 0x0, 0xdb5, 0x1e8, 0x800, 0xd, 0x48, 0x6, 0x8, 0x3, 0x4, 0x8, 0x1, 0x7fffffff, 0x9, 0x485fdb94, 0x10000, 0x2, 0x7, 0x3ff, 0x5, 0x9, 0xa53, 0x6, 0x2, 0x9, 0x8, 0x0, 0x7fffffff, 0x0, 0x8, 0x0, 0x80000001, 0x4, 0x8, 0x0, 0x9, 0x3ff, 0x5, 0x0, 0x3, 0xffff5e4c, 0x200000, 0x8, 0x7, 0x3ff, 0x8, 0x3, 0xc34, 0xa, 0x6, 0x6880, 0x1ff, 0x2, 0x200, 0x3, 0x2, 0x8, 0x6, 0x3, 0x1, 0x2, 0xf, 0xda72, 0xfffff801, 0x80, 0x4, 0x86, 0x52, 0x7, 0x400, 0x0, 0x10, 0x7, 0x4, 0x4, 0x8, 0x9, 0x0, 0xf4d, 0x5, 0x9, 0x1, 0x7, 0x2, 0x9, 0xf5, 0xa0d, 0x3, 0x9, 0x8, 0x8, 0x101, 0x9, 0x0, 0x0, 0x8, 0xfffffffa, 0x7, 0xfffffffc, 0x6, 0x7, 0x2, 0x7, 0x5, 0x2, 0x1, 0x9, 0x3, 0xd, 0x7, 0x9, 0x7, 0x7, 0x9, 0xfffffa6b, 0x10, 0x7, 0x12d, 0x9, 0x7, 0x8, 0x3, 0xff, 0x3c1, 0x5, 0x6, 0x2, 0x3, 0x5, 0x10229372, 0x923, 0x26, 0x2, 0xd, 0x1, 0xfffffffa, 0xf, 0x3, 0x4, 0x0, 0x2fb, 0x5, 0x8000, 0x8, 0x6, 0x6, 0x6, 0x4, 0x9, 0xfffffff1, 0xc, 0x9, 0xe82, 0x0, 0x1, 0x3, 0x81, 0x2, 0x9, 0x2, 0x80000001, 0x0, 0x4, 0x8, 0x4, 0x3ff, 0x6, 0x4, 0x4, 0xffffff80, 0x2, 0x9be, 0x3ff, 0x85, 0x7, 0x5, 0x371b, 0x3, 0x800, 0x1, 0x8, 0xfffffffb, 0x9, 0x8001, 0x7, 0x2, 0xc0000, 0x1, 0x0, 0x1, 0x7, 0x4, 0x4, 0x617, 0x0, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3743f58f, 0x9, 0x3, 0x8d3, 0x9, 0x5, 0x9a8, 0x80000000, 0x0, 0x10001, 0x2, 0xff, 0x0, 0x7, 0x40, 0x2deb, 0x2, 0x4, 0x8, 0x4, 0x5, 0x80000, 0x9, 0x5, 0x7, 0x1000, 0x7, 0x39, 0x4, 0x4, 0x10000, 0x8, 0x9, 0x8, 0x8b, 0xa, 0x2, 0x3, 0x80, 0x3, 0x0, 0x80, 0x0, 0x3, 0x7565d115, 0x0, 0xc7, 0x3, 0x7, 0x0, 0x9, 0x4, 0x1, 0xd861, 0x8, 0x8, 0x4, 0x9, 0xc5, 0x8, 0x3, 0x3, 0x8, 0xd, 0xa1, 0xc, 0x100000, 0x6, 0x10000, 0x9, 0xffff, 0x5, 0x79, 0x0, 0x4, 0x3b, 0xffffffff, 0xffffffff, 0x7, 0x1, 0x1, 0x80000000, 0x800, 0x9, 0x7, 0x94a7, 0x6, 0x45de, 0x1, 0x401, 0x4, 0x9, 0x5, 0x5, 0x1, 0x8, 0x8, 0xfffffff9, 0x5, 0x7c7, 0x6, 0x1, 0xe5, 0x9, 0x1, 0xc1a, 0x1, 0x3, 0x5, 0xd, 0x4, 0x5, 0x5, 0xc0e, 0x4, 0x2, 0x1, 0x7, 0x1, 0x1ff, 0x41, 0x8, 0x3ff, 0x8000, 0x80000001, 0x7, 0x4, 0x35, 0x3, 0x716e, 0xd, 0x9, 0xfffffff7, 0x80000001, 0x8, 0xddcb, 0x80, 0xefc, 0x5a, 0x90, 0x200, 0x6, 0x0, 0x8000, 0x9, 0xfffff384, 0x8, 0x8, 0xe7, 0x101, 0x7ff, 0x0, 0x100, 0x6, 0xffffffff, 0xffff, 0x7, 0x2c40, 0x2, 0x5, 0x1, 0x8, 0xd4, 0x634d, 0xacf, 0x80000000, 0xc, 0x1, 0x6, 0x5, 0x7, 0x10000, 0x1, 0x5, 0x1ff, 0x6, 0xfffffff7, 0xfa23, 0xffffff00, 0xb, 0xa, 0x101, 0x0, 0x7f, 0x7f, 0x0, 0x40, 0x9, 0xde, 0xa214a75, 0x101, 0x0, 0xd9f4, 0xd7, 0x4, 0x401, 0x200, 0xd, 0x100, 0x2, 0x8, 0x9, 0x9d, 0x1e000000, 0x4, 0x10, 0x2, 0x8001, 0x0, 0xfffffbff, 0x4, 0x5, 0x7, 0x10000, 0x12, 0x9, 0x8000, 0x10001, 0x5, 0xff, 0x100, 0x9d5b, 0x10, 0xffff457d, 0x7fff, 0x80000000, 0x92, 0xfffff159, 0x3, 0x2c2, 0xd, 0x6, 0x200, 0x1, 0x2, 0xc, 0x5, 0x3, 0x6, 0xf, 0x7, 0xfff, 0x2, 0x3, 0x7, 0x8000, 0xd, 0x0, 0x7, 0x9, 0xc, 0x80000000, 0x4e6, 0x0, 0xffff7fff, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xfffffff9, 0xa, 0xff, 0x7, 0xfffffe00, 0x7, 0x2, 0x1, 0x0, 0xb, 0xa0efd, 0x6, 0x0, 0x2, 0x8, 0xa, 0x5, 0x1e6, 0x800, 0xd, 0x200, 0x6, 0xa96, 0x0, 0x7, 0x0, 0x4, 0xffff, 0x1, 0x1, 0x1, 0x5, 0x1, 0x6, 0xfffffffa, 0xa, 0x7, 0x3, 0xb1, 0x4, 0x8, 0x4, 0x6, 0xfffffffc, 0x1002, 0xffffffff, 0x5, 0x3b, 0x0, 0x8, 0x0, 0x2cfe, 0x3, 0x200, 0x97a2, 0x5b, 0x9, 0x0, 0x5, 0x5cf, 0x6, 0xf79, 0xffff, 0x5, 0x7, 0xa3, 0x2, 0x9, 0xd242, 0x1000, 0xff, 0x4, 0x8, 0xf8, 0x90, 0xffff, 0x6, 0x8, 0x8, 0x9, 0x7a, 0x4, 0x1, 0x4, 0x9, 0x4, 0x1, 0x4, 0xef, 0x80000000, 0x8, 0x2cb869af, 0xfffffffb, 0x1, 0x8, 0x1, 0x2, 0x9, 0xeefd, 0x9, 0x80, 0x3, 0x0, 0x81, 0x2, 0xe, 0xfffffffc, 0x7, 0x4, 0x401, 0xfffffff8, 0x8, 0x9, 0x3, 0x164e8dc2, 0x8b0, 0x9, 0x3, 0x3, 0xffffff7f, 0xf79, 0x3, 0x1, 0x5ed, 0x3, 0xfffffff8, 0x3, 0xa605, 0x20000000, 0xe, 0xbabd, 0x100, 0x0, 0x19, 0x3, 0xa, 0x9, 0x4, 0x1, 0x8, 0x5, 0x0, 0xa1b6, 0x5, 0x5, 0xae, 0xe6b, 0x6bb2, 0x4, 0x7, 0x400, 0x5, 0x0, 0x0, 0x2, 0x80000000, 0x7, 0x7, 0x8b3, 0x4, 0x3, 0x0, 0x7, 0xd6, 0x5, 0x401, 0x6, 0x400, 0x7, 0x6, 0x8, 0xffffffff, 0xfffffffe, 0x8, 0x3, 0xfffff955, 0x0, 0x21ed, 0x4, 0x7, 0x6, 0xe9be, 0xe778, 0x0, 0x0, 0x1, 0x400, 0x10001, 0x8, 0x8, 0x9, 0x3df, 0x6, 0x9, 0x0, 0x0, 0x7, 0x5, 0x7, 0x8e, 0x0, 0x9, 0x7ff, 0x5, 0x1, 0x7, 0x4, 0x7, 0x2, 0x7fff, 0xffffffa9, 0x6, 0x8c1d, 0x3, 0x0, 0x7, 0x4, 0x1ff, 0x1, 0x400, 0x8, 0x81, 0x5, 0x8, 0x6, 0xfffffffc, 0xff, 0x1, 0x7, 0x3, 0x101, 0x7, 0x2, 0xf, 0x6, 0x10, 0x4, 0x0, 0x0, 0x401, 0xdae, 0xf5, 0xfffe00, 0xe, 0xc, 0x8, 0x7, 0x9, 0x9, 0x9, 0x400, 0x5, 0x1, 0x8b, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0xffff, 0x8, 0x8, {0xcb, 0x1, 0xf0, 0x400, 0x6, 0x2}, {0x1, 0x0, 0x8, 0x7f, 0x2, 0x1}, 0x5, 0x9c}}, @TCA_POLICE_RATE={0x404, 0x2, [0x24, 0xcc88, 0x1, 0x3, 0xfffffffe, 0x7, 0xe6e, 0x9, 0x9, 0x2, 0x200, 0x6, 0x101, 0x9, 0x5, 0x7fffffff, 0x8, 0x8, 0x2, 0xffff, 0x2, 0x3ff, 0x7, 0x7, 0x1, 0xe4, 0xfffffffe, 0x746de92b, 0x1, 0x9, 0x1, 0x5, 0x4, 0x9, 0x7fffffff, 0x0, 0xffffffff, 0x9, 0x7, 0x5, 0xa68, 0x2, 0xf, 0x2, 0x7bad, 0x70, 0xd, 0x8, 0x4, 0x2, 0xfff, 0x7fff, 0x6b9, 0x9, 0x0, 0x9, 0x0, 0x40, 0x9, 0x8, 0xd064, 0x5, 0x0, 0x6, 0x4, 0xa3e5, 0x7, 0x1, 0x0, 0x2, 0x12, 0x81, 0x5, 0x2, 0x4, 0x4, 0x800, 0x7, 0x8, 0x4, 0x8b, 0xe86, 0x1ff, 0x15, 0x7, 0x8, 0x3, 0x6, 0x62b, 0x1, 0x7, 0xfffffff8, 0x5, 0x1000, 0x1009, 0x1ff, 0x5, 0x8001, 0x9, 0x6, 0x101, 0x7, 0x271e, 0x9, 0xe27, 0x6, 0x6, 0x401, 0x200, 0x6, 0x1ff, 0xf, 0xc, 0x10001, 0x8, 0x5, 0x3, 0x5, 0x8, 0x401, 0xa, 0x7, 0x1, 0x7fffffff, 0x2, 0x40, 0xb, 0x40, 0x0, 0x5, 0x2, 0x377, 0x2, 0x5, 0xffb2, 0x8, 0x4, 0xd3f, 0x3, 0xf, 0xffffffff, 0x7, 0x8, 0x7f, 0xe, 0x5, 0xffff, 0x1, 0xb06f, 0x401, 0x7, 0x80, 0x6, 0x6, 0x9, 0x5, 0x8, 0x1, 0x5, 0x3577, 0x0, 0x9, 0x4, 0x7f, 0x6, 0x6, 0x3, 0x868, 0x8963, 0x7fffffff, 0x2, 0x1, 0x0, 0x0, 0x8, 0xec, 0x0, 0xfffffeff, 0x135, 0x1, 0x3, 0x0, 0xfffffffe, 0xd, 0x7, 0xc, 0x7, 0x8, 0x2, 0xfff, 0x876, 0x0, 0x6, 0x1, 0xb86, 0xb0e, 0x6, 0x5, 0x1000, 0x6, 0x4, 0x8000, 0x3, 0x81, 0x2, 0x4, 0x6, 0x8, 0x10, 0x0, 0x4, 0x1, 0x97b4, 0x0, 0x6, 0x276a, 0x5, 0x4f080, 0xd, 0x0, 0x7fff, 0x7, 0x0, 0x4f, 0xca, 0x2cf, 0x1, 0x40, 0x5b1c, 0x10000, 0xfffff000, 0xfffffffb, 0x13f7dfb4, 0x5, 0x0, 0x2, 0x4b2, 0xef, 0x101, 0x8, 0x1, 0xfffffff8, 0xb38, 0xa, 0x7, 0x4, 0xffff, 0x624, 0x0, 0xffff, 0xffffffff, 0x7, 0x7, 0x9, 0x80a8, 0xc2b8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xf, 0x3, 0x4, 0x1, 0x7fff, 0x2, 0x2, 0x346431cf, 0x6, 0x7, 0x3, 0xc, 0x2, 0x0, 0x4, 0x3, 0x6, 0x6f0e, 0xc12, 0x6, 0x1, 0x292, 0x0, 0x7, 0x6, 0x5fe, 0x8001, 0x8, 0x200, 0x1, 0x2, 0x7, 0x0, 0x4, 0x5, 0x7, 0x0, 0x5a2f, 0x5, 0x4, 0x7fffffff, 0x7fffffff, 0xf, 0x8, 0x6, 0x8000, 0x80, 0x8, 0xfffc0000, 0x1, 0x8, 0xfffffffb, 0x6, 0xf, 0x7fff, 0x10000, 0x7, 0x0, 0x2, 0x88af, 0x2, 0x8, 0x17, 0x92f0, 0x8001, 0x845b, 0x3, 0x0, 0xfffffff9, 0x1c, 0x7, 0x40, 0x6, 0x8, 0x1, 0x1, 0xfffffffc, 0x0, 0x7fffffff, 0x8, 0x208, 0x4, 0x7, 0x930, 0x2, 0x4, 0x1, 0x7, 0x5, 0x80000001, 0x0, 0xa09, 0xdefd, 0x9, 0x6, 0x7, 0x8, 0x7fd6d603, 0x60000, 0x7, 0x6, 0xa, 0x6, 0x4, 0x200, 0x6, 0x2, 0x5, 0x1, 0x3ff, 0xd, 0x80, 0x7, 0x4, 0x4, 0x5, 0x2, 0x1641, 0x8, 0x779a, 0x3ff, 0x2, 0x480e, 0x919b, 0x4, 0xfffffff5, 0x7, 0x7fff, 0x57, 0x6, 0x9, 0x5, 0x7, 0x2, 0x343, 0x8000, 0x6, 0x6, 0x0, 0x9e72, 0xf24, 0x10000, 0x5, 0x7, 0x9, 0x3, 0x30000, 0x2, 0x5, 0x2, 0x8, 0x5, 0x100, 0x1, 0x10001, 0x7, 0xffff, 0x0, 0x200, 0x1, 0xfffffff8, 0x5, 0x3, 0x6, 0x8, 0x5, 0x0, 0x8, 0x2, 0xce, 0x0, 0x6, 0x5194, 0x4, 0x3, 0x4, 0x63, 0x2, 0xfffffff8, 0x8, 0x8, 0x9, 0x3ff, 0x6, 0x34d1, 0x9, 0xc0000, 0x401, 0x1e1e, 0xffffffff, 0xa4, 0x3, 0x9d, 0x9, 0x3, 0x7f, 0xe4d, 0xf67, 0x3ff, 0x10000, 0x0, 0x1, 0x7, 0x800, 0x0, 0x0, 0x8, 0x6, 0x6, 0x8, 0x3, 0x4, 0x9, 0x6, 0x3, 0x6, 0x80, 0x400, 0x8000, 0x816b, 0x9, 0x8, 0x3, 0x6556, 0x5ffb78fb, 0x200, 0x7, 0x4, 0x1, 0x0, 0x8, 0xaed, 0x2, 0xfff, 0xff, 0x8, 0x8, 0x448aaad2, 0x0, 0x19, 0xc22e, 0xb42, 0x915, 0xe01, 0x6, 0x3, 0x5, 0x9, 0x4, 0xd, 0x2, 0x9, 0x7, 0x2, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe972, 0xffffffffffffffff, 0x4, 0x7, 0x3, {0x6, 0x1, 0x4, 0x0, 0xf46f, 0x7}, {0x45, 0x1, 0xaf, 0x8, 0x0, 0x4}, 0xc3e, 0x89, 0x142}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x170c, 0x7, 0x100, 0x0, 0x6, 0x480000, 0x47, 0x800, 0x5, 0x9, 0x4, 0x80000000, 0xfff, 0x7, 0x8, 0x4, 0x9, 0x6, 0x81, 0x6, 0x693650d6, 0x1, 0x9, 0xbf, 0xdc74, 0x9, 0x1, 0x4, 0x2, 0x8000, 0x348, 0x8001, 0x2, 0x1000, 0x3fa, 0x1000, 0xff, 0x9, 0x5, 0x2, 0xa0, 0xc, 0x8000000, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x2, 0xfff, 0xd3, 0x5, 0x1, 0x6, 0x4, 0x31, 0xe, 0x6, 0x8, 0x2, 0x810, 0x3, 0x0, 0x2, 0xfffffbff, 0x1, 0x401, 0x4, 0x8, 0x1, 0xe, 0xa9, 0x3, 0x7a, 0x9, 0x9, 0x5b0f5fce, 0x292, 0x5, 0x9, 0x0, 0x6, 0x400, 0xc, 0x2, 0xdf, 0x7, 0x5, 0x80, 0x0, 0x81, 0x9, 0x101, 0x3, 0xff, 0x0, 0xf24000, 0x2a4b, 0xffffffff, 0x81, 0x3, 0x6, 0x1ff, 0x4, 0x400, 0x7, 0x51, 0x0, 0x5, 0x6, 0x7, 0x9, 0x20004000, 0x1ec, 0x9, 0x7, 0x0, 0x8, 0x5, 0x6, 0x2, 0x8001, 0x7, 0x0, 0x8, 0x8f, 0x100, 0x8000, 0x8, 0x8, 0x3, 0x7, 0x5b2a, 0x0, 0x2, 0x5, 0x80000000, 0xfffffff7, 0xc6, 0x3, 0x915, 0xa82, 0x7, 0xd, 0x400, 0x1, 0x7, 0x2af, 0xc6, 0x10000, 0x8b, 0x1, 0x37, 0x7, 0x1, 0x81, 0x5, 0x1, 0xd2, 0x1, 0x200, 0x9, 0x0, 0x6, 0xd7a0, 0xf473, 0x9, 0xfffffff6, 0x4, 0x9b, 0x401, 0x9, 0x517d, 0x7, 0x6, 0x5, 0xa, 0x2, 0x18df, 0x1, 0x4, 0x2, 0x94, 0x6, 0x6485f51e, 0x9, 0x9, 0x2, 0x6bf2, 0xc84b, 0x3, 0x4, 0xb, 0xdd93, 0x8, 0x2, 0x10001, 0x4, 0x8, 0x2, 0x8, 0x1, 0x7, 0x7, 0x8, 0x8, 0x9, 0x8, 0x1, 0x2, 0xffff, 0x2, 0xa9, 0x4cc, 0xffff, 0x703eb18a, 0x0, 0x8, 0x1f, 0x40, 0x3, 0xfff, 0x2, 0x80000000, 0x8, 0x7f, 0x0, 0x80000000, 0x7fffffff, 0x4, 0x200, 0x7e1ea62b, 0x7, 0x2, 0x9, 0x9, 0xd, 0x401, 0xff, 0x5, 0x30, 0x5, 0x3, 0xffffffff, 0x2, 0x40, 0x6, 0x5, 0x80000000, 0xe0000000, 0x32, 0x0, 0x10001, 0x0, 0xc, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]]}, {0x1d, 0x6, "92748f647c09fe3b4f37ffeac7b86accff2dd11ed5cd0bc369"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x84, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x55, 0x6, "7bf15a06169ab1525123dd9977d435b6d46a638b9c07376fff4d06ec1abed5d831b5bad763f4e0c69643b7afddf85b8c2c3c8a4796bc93f4cac9d760836819405f02ec29a2daad52d1937391570540fb15"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2684}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 3.156082506s ago: executing program 4 (id=4095): bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x9, 0x4, 0x7, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x700, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 3.060171389s ago: executing program 4 (id=4096): syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xf0, 0x4}, {0x5, 0x8001}}}}, 0x11) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x0}, 0x38) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x3a97, 0x10100, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000000200)={0x80, 0x0, 0x800}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) 2.953430595s ago: executing program 4 (id=4097): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7916009875f37515e486dd6317ce62030800000000000000000000875a65969ff57b00000000000000000000000000ac1414aa04"], 0xfdef) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random}) 2.953037666s ago: executing program 4 (id=4098): mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r3}, 0x8) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x3, [{}, {}, {}, {0xd}, {0x7f}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x14, r7, 0x301, 0x0, 0x0, {0x29}}, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x80) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0x74000000) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x4e4}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) 2.462675985s ago: executing program 0 (id=4099): userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) open_tree(0xffffffffffffff9c, 0x0, 0x9801) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/nf_conntrack_expect\x00') read$FUSE(r1, &(0x7f0000000780)={0x2020}, 0x2020) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000005c0)={0x0, 0x6000, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='contention_end\x00', r6}, 0x18) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000300)={0x0, 'vxcan1\x00'}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @remote}}}, 0x108) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'bridge0\x00', 0x3}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 2.331532124s ago: executing program 0 (id=4100): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @short={0x3}}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7a, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x101}) setregid(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @private1, 0x5}, {0xa, 0x4e24, 0xa3cc, @private2, 0x7db41d1a}, 0xffffffffffffffff, 0x4}}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe4) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="24000000000000000008000b0050e500000000b1f9620909ce614c052d5cdccdb80f6dd1dc5e5ffb7104e02a29f2542154948c8d6101f0516927ffbb1708e2ee107e1fd48a40f7a0af5f9cfe35c3cd62dbc2269d2663d888b938999200000000005958dad50330efa1a77752fe650a7bab1f2707b23483e2d5ccbe31cb090a606c286b7f74dc0a48ca0c8abcb8398026c7b9765f41a21ccc7ddc1a2109b9d9db27709def51dec3f894"], 0x1c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="000002000180c2000011aaaaaaaaaa1add6003d69e86ed4a8af6d39b0a1ae324a2bf61fb2c90d656e7851cf4074dc46ae7f6decf95e0f2b34f57"]) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x4, 0x0, 0x0, 0x83a}]}) socket$unix(0x1, 0x5, 0x0) 2.325940078s ago: executing program 2 (id=4101): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @multicast2, @empty}, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000180)={'vlan1\x00', 0x0}) getrlimit(0x4, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="aa", 0x1, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.703739055s ago: executing program 1 (id=4104): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz0\x00', {0x6, 0x9, 0xf001, 0x1}, 0x4c, [0x6, 0x6, 0x3, 0xfff, 0x6, 0x1, 0xc505, 0x8, 0x3, 0x7ff, 0x54e, 0xc0d, 0x9, 0xff, 0x8b, 0x10, 0x4, 0x2e, 0x3, 0x1, 0x5, 0x1, 0x5, 0xffffffff, 0x6, 0x4c, 0x6, 0x100, 0x7, 0x100, 0xa8cf, 0x5, 0x7f, 0xeb8, 0x401, 0x723, 0x0, 0x1000, 0x3, 0x2, 0x5, 0x10, 0x9, 0x4, 0x9, 0x5, 0x1, 0x100, 0x76a1, 0x400, 0x8, 0x4122, 0x50b, 0x77f, 0xf, 0xad9, 0x1, 0xffffffff, 0x6, 0xfffffff8, 0x9, 0x3f, 0x5, 0x2], [0xffffffff, 0x4, 0x800, 0x1, 0x10000, 0x3, 0x5, 0x4, 0x1, 0x5, 0xa, 0x0, 0x8, 0x0, 0x7ff, 0x71b, 0x6, 0xc5, 0x300, 0x3, 0x74432739, 0x4, 0x9, 0x5, 0x7, 0x800, 0x1, 0x6, 0x894b, 0xd, 0x5, 0x5, 0x6, 0xc, 0x7ff, 0x401, 0x1, 0xe0, 0x400, 0x8591, 0x5, 0x1000, 0x400, 0x1, 0x80000000, 0x45642718, 0xfdf, 0x6, 0x0, 0x0, 0x3, 0x3, 0xffffff7f, 0x4, 0x2, 0x5, 0x5, 0x6, 0x837, 0xfb04, 0x7fc0, 0x0, 0x3ff, 0x7], [0x1, 0xfffffffd, 0xd446, 0x8, 0x1, 0x6, 0x800, 0xe, 0xfffffffc, 0x7f, 0xd, 0x8, 0x6f, 0x3, 0x800, 0x3, 0xd590, 0x18000, 0x10, 0x8009, 0x9, 0x0, 0x7, 0x7604, 0x8, 0x1, 0x0, 0x4c42, 0x6, 0x6, 0x1e, 0x7fff, 0x5, 0x9, 0x6, 0x8, 0x3, 0x785, 0x1a, 0x1, 0x9, 0x400, 0x5, 0x9bee, 0x2, 0x80000000, 0x5, 0x88, 0x1, 0x0, 0xb2, 0x909b, 0x4, 0xff, 0x3, 0x4, 0x101, 0xb92, 0x1000, 0x4607f5ae, 0xffffffff, 0x8, 0x9, 0x2382], [0x10001, 0x0, 0x5, 0xfffffffd, 0x0, 0x5, 0x7, 0x6, 0x4, 0xe8, 0x3, 0x3ff, 0xe2, 0x7, 0xff, 0x80000001, 0x800, 0x2, 0x4, 0x8, 0x5, 0x7, 0x80000000, 0x5, 0x3, 0x5, 0x7, 0x7fffffff, 0x6, 0x3ff, 0x49, 0xfffffff2, 0x6, 0x7, 0x3, 0x10000, 0x3, 0x80000000, 0x280, 0xc2, 0x8000, 0x9, 0xb87, 0x0, 0x2, 0x4, 0xb, 0x9, 0x80000001, 0x1, 0x7fff, 0x7, 0x6, 0xfffffffc, 0xfffffffd, 0x80000001, 0xc, 0xffff0000, 0x1ff, 0x1, 0x711, 0xd8, 0x0, 0x200]}, 0x45c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) (async) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0xe) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000014c0)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000380)="ccc73415fd00eaa426f13de25bed75064fe85392f692c1235220b4a9f75675f8dc987c927f0c181569d1a8bbe672fc95cab5f3eaa9e4d39a0d6e6d89c5bc432d03d0274ba57d82851782001e483f134a156c479b1cd915d39bb68f4763d501b497b296c90c58bd938e69eaacbf0f0a210e255ed92f248b29c43fa17c91701cc2c9dfd7b16d4fb38268e8612962895c9cca3028c03a59b06991d9539aafd59764c0522aa5c27b1542d1662bbf892bcbd74abfe7a09312b8d78be26481c47399d84ef62bf8451594ba6cbb3e22e91c252ad26f7857440a", 0xd6}, {&(0x7f0000000480)="343efa2aee1e141f6c587b94f95be0eac4cd5b8a220818c247a8953f9abadbeacf3ab31c2e083d3d61d46137f26b714db75260aabcc825e5d001c0ec1903dce59b91176fa79113165991427fa0fdb710347b42bad27e5f9bace95f2a3f6491b825aa1ad864ece7dd4e442c34a4c19add23839ed69080a9d8eb80f26d2e87b5ca678171564e10479126d0fe6b087d6812b1d5dd56a81d590275ae5e994421c0c16a3c8d62f76f0d4885a36e2df874c5b5c07bd136078715b941549f06954edc9c6eda2f52ced6a50d2a4271338e3940173cde204ebb549f7704720ecc5c39ca7077cec2b7ad599960bc67e2753260e18585262eeb85c9c5", 0xf7}], 0x2, &(0x7f0000000b00)=[@cred={{0x18, 0x1, 0x2, {r4}}}, @rights={{0x1c, 0x1, 0x1, [r6, 0xffffffffffffffff, r1, r2]}}, @cred={{0x18, 0x1, 0x2, {r4}}}], 0x4c, 0xc000}}, {{&(0x7f0000000b80)=@file={0x1, './cgroup.net/devices.allow/file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000c00)="d0706efff3cc6b1cd3952b40943720d5f7fdee894692da664d710d007df358d3ada60849dc5ecc546030e5b8c7902d2bd089c65acc33cba1faf27e082d6ab15a8b916a2523005f8c39c33c704c5201928233234a408e79358ae6e18df91d881b", 0x60}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)="6519ec1254c55f4a4861d5f6a68441f54f6fec520dcd7f668af0c8345a238dd2c2cf68bfbf969606015b25212602b89f084892a52e51d16327eb0496acc04ca20488357811231334b043a1b0cfb74fd29cab8394100215345d34062a69d5026d7135ebdf130fdcb9e2773d2d02fb2c", 0x6f}, {&(0x7f0000000d40)="8f1bc8c54adaa0a9aa5561feee09ffa8bfd615bbd2cbf8dab2d069b3c423e8f48b5cca21a93546ca2b2a39f519ef51013bfa86559169ef524ba0ab21", 0x85}, {&(0x7f0000000d80)="a85a346a8d7886a39222ae4f4f34035aff4c1e72cded97f734b8493720b984f0e06bbac22738678de53b050409159fb22b3ca7dbde326ccf4212b03c84fd87ec466a880768a4f0149c70a5b6c120d00e230e7566d4fa28a43ee5cde00ee3717facaa13e3533167c8b07386cc83daea13a87262016c66c3884ab13271e8868541cf17ed622dc48f7bc711e59df838c0261d02d4f9ce5767b203887270dc121b79aa9660ba8256a26ef05bdd8fef050a263c2387071ece726d28a57df92c8cb0c70b95a746f5850e19c4fcc25431e7b21614932f80dc", 0xd5}, {&(0x7f0000000e80)="4ef4403f7aa6db74489122b0f0bbacdbce56cf7065b90be62bdae9af826a9c6a0a0741a37c9c778f712daa432d7f301b3af0c60784d57e63fa4526392f9967c43db4feb43c2ab3f0c19cb0ac328cea52936072e36deb99f1e05111cffe1222a8f351d693d252fe186509fcf9a913a9cd9fb380af2f", 0x75}, {&(0x7f0000000f00)="c0dc95c89ba0c5c60b995e2ffd54fa375c941b76e4c852fc52e4ee17bd6dafc5e0dd90ccabe45f93983a3ae199b7a68b0d9af06a2ed6181e13dc1c5794e8e6127b93535eaf80c521fefa342fde86b1f5b004e461f3ebe082186225fe934b773466bdeb2619cd9f0443e70262d1e5557a138f315586845862355c00a186fe4f802fca543edcfc876a3ee523c40cd0effaa8b9c180513f5f9e79e5a1008c1dab64a9c0a246", 0xa4}, {&(0x7f0000000fc0)="f07c7f2687bf3756b76abfeaebc5b6c7d170357016a6ea0dad7a5040ba20e662a85968f2c134d123bbf3150eec830939116f9315fca345295baf98b26c7efe84c40563c925a790d48e7d3d1b33793358edd41e8bccadc1a40053608f528a1303fc193f5fa2ca522711fff547", 0x6c}, {&(0x7f0000001040)="4457e9bae9ae6300affa847a06e9637cbf87b49b1c0ed0415d8f319aa0b7041272", 0x21}, {&(0x7f0000001080)="3f44f63869d2c8b576cf9d9ba55a31c318a0541cd52d7c039abc02a0946191a3b1f650af95d403266ab85c1c901e68e54333e204cb24df79a03e5881955078cab4853cbbf8feec75909dbc4a0da31468cde8280c3f1e971d2d82026b774f7b24831cfdccf60cfd7cb38fd8b8f16326ec557d12a89656fa097b259d66925d4b5a0e168dca5e92daf2c708ba3724ef76ee2e9ca357b11843229736402f00", 0x9d}], 0xa, &(0x7f00000011c0)=[@rights={{0x18, 0x1, 0x1, [r5, r1, 0xffffffffffffffff]}}], 0x18, 0x4040800}}, {{&(0x7f0000001200)=@file={0x0, './cgroup.net/devices.allow/file0\x00'}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000001280)="0fbd8c743180b7c8bb5e1abda0f2dcb93918487d3aed524abe693b07db28fa7e2bd4a26ca168eeacf067291bcf19e2c8229c361175cd32e26283ef7fd648ab6118", 0x41}, {&(0x7f0000001300)="ffc98548287ae58389037ecf11e81e3ba5edc0f82f0a92435196686a08422b7f97572f14fdfb3283723df808bb067d7ecd94d5d4b6e13faf4bd50e719866cdee44f56bfaca95a01f91058a4178ee01f5c59e889ac80368168ac0762954318b2f89e18d97177535af6458aa5f61e83482aef0cf08cc5389531151971c3fab1f53df4c044f64b51fa4bbefc5aa1db2ea78a95146be5ad893727c77397d708f12416bda7183fd4b7179935777a09507a69133a1de3852b9476f302e33641f670fc6935d63890cd6d6d7b8c1095587fefb5d58b6d3025ced770f19b124120934138ea8ce0766d05dd19782d94006a877162b4593", 0xf2}], 0x2, &(0x7f0000001480)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, r5, r2, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7]}}], 0x30, 0x20040000}}], 0x3, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000063c0)=ANY=[@ANYBLOB="000000002c00010026bd7000fcdbdf2504000000080017000200000004001d00"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000063c0)=ANY=[@ANYBLOB="000000002c00010026bd7000fcdbdf2504000000080017000200000004001d00"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) userfaultfd(0x80800) (async) userfaultfd(0x80800) 1.407717871s ago: executing program 2 (id=4105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000140), 0x12f801, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000180)={0x0, 0x0, {0x7, 0x4, 0x3, 0x8}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_setup(0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendfile(r3, 0xffffffffffffffff, 0x0, 0x1000) creat(0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x102) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x16) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$ttyprintk(0xffffff9c, &(0x7f0000000200), 0x20000, 0x0) close(r6) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000080)={0x28, 0x39, 0x8, 0x7, 0xa, 0x80, 0x4, 0xf, 0x1}) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000280)={0x4, 0x0, {}, {0x0}, 0x7, 0x1ff}) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) chown(&(0x7f0000000240)='./file0\x00', r8, r9) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc1485544, &(0x7f0000000040)) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x10) 1.29029315s ago: executing program 0 (id=4106): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003d0007010000000000000080047c0000040000000c0007800600060000db000004000280"], 0x28}}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0900000004000000072bc4c6dc4dd6a68c7ccac1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7}, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r5 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40585414, &(0x7f0000000280)={0x1, 0x0, 0x2, 0xb7d375beb1f4ba0d, 0x7d}) r6 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = dup3(r7, r6, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000006700000008000100020000000800ab36", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x30}}, 0x0) 1.183779471s ago: executing program 1 (id=4107): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000140), 0x12f801, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000180)={0x0, 0x0, {0x7, 0x4, 0x3, 0x8}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_setup(0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendfile(r3, 0xffffffffffffffff, 0x0, 0x1000) creat(0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x102) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x16) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$ttyprintk(0xffffff9c, &(0x7f0000000200), 0x20000, 0x0) close(r6) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000080)={0x28, 0x39, 0x8, 0x7, 0xa, 0x80, 0x4, 0xf, 0x1}) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000280)={0x4, 0x0, {}, {0x0}, 0x7, 0x1ff}) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) chown(&(0x7f0000000240)='./file0\x00', r8, r9) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc1485544, &(0x7f0000000040)) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x10) 1.101996134s ago: executing program 1 (id=4108): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @multicast2, @empty}, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getrlimit(0x4, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="aa", 0x1, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 959.575255ms ago: executing program 2 (id=4109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xe4}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000200)=0xa0000) r4 = syz_open_dev$sg(&(0x7f0000000240), 0xfffffff7, 0x101042) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000300)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a5, &(0x7f0000001340)={{}, @any, 0x4, 0x0, 0x0, 0x6bf, 0x0, 0x0, 0xffffffff}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000000340)={&(0x7f0000001380)=[0x8, 0xffffffc0, 0x39, 0x6, 0x1, 0x3, 0x0, 0x8, 0x8000, 0x3, 0x7fffffff, 0x3, 0xfffffff9, 0xf18, 0x4, 0x400, 0xfffffffa, 0x4, 0x6, 0x3, 0x7ff, 0x0, 0x4, 0x6, 0x3, 0x2, 0x80000000, 0xed07, 0x8000, 0x6, 0x9, 0xf52, 0x9, 0x0, 0x3, 0x7ff, 0xc4, 0x4, 0x7, 0x6, 0x9, 0xfffe0000, 0xe, 0xfffffff2, 0x3, 0x200, 0xff, 0x5, 0x6, 0xfffff800, 0x17, 0x899, 0x536, 0xfffff001, 0x2e9b, 0xffffffc3, 0x0, 0x5, 0x2, 0x5, 0x9, 0x6, 0x7ff, 0x3, 0x7, 0x5, 0x9, 0xfffffff7, 0x401, 0x7ff, 0x3, 0x6, 0x2e7b2e23, 0x7, 0x9, 0x5, 0x2, 0x7, 0xd96, 0x100, 0x8, 0x3, 0x80000000, 0x1, 0x1, 0x200, 0x2, 0x8, 0x9122, 0x10001, 0x4, 0x5, 0x10, 0x5fe4, 0x3, 0x3, 0x1, 0x8, 0x7, 0x50, 0xe2cb, 0x0, 0x417, 0x3, 0x5, 0x73, 0x0, 0xfffffff6, 0x401, 0x9, 0x2, 0x7, 0x3, 0x8000, 0x7f, 0x9, 0x5, 0x6, 0x1, 0x2, 0x6, 0xff, 0x0, 0xc67, 0x400, 0xaab, 0x9, 0x5, 0xc28, 0x0, 0x5, 0x1, 0xfffffff8, 0x7, 0x5, 0xb6d1, 0x5, 0xfaa4, 0x5, 0x0, 0x3ff, 0x0, 0x1ff, 0x401, 0x10001, 0x7fff, 0x40, 0x5, 0x99e, 0x1, 0xe, 0x0, 0x8, 0x40, 0x7fffffff, 0x5, 0x4, 0x0, 0x1, 0x40, 0x5, 0x0, 0x5, 0x7, 0xc81, 0x3ff, 0x0, 0x8, 0x7, 0x1, 0x0, 0x2, 0x1a, 0x0, 0x8, 0x100, 0x4, 0x5, 0x400, 0xe6f0, 0x4, 0x8, 0x2, 0x0, 0x6, 0x7f, 0xffffffff, 0x2c63, 0x3, 0x7, 0x0, 0x10001, 0xf, 0x67, 0x6, 0x2, 0x4, 0xfffffffa, 0x8, 0x3, 0x5, 0x1760, 0x714f, 0x5, 0x2, 0x0, 0x8, 0x1, 0x2, 0x3, 0x0, 0x7fff, 0xc, 0x6, 0xb7, 0x7, 0x80, 0x100, 0x81, 0x1ff, 0x3, 0x5, 0xd, 0x1, 0x100, 0xc5, 0x2, 0x200, 0x11b4, 0x3ff, 0x414, 0x3, 0x1, 0x3be, 0x7fffffff, 0x80, 0x9, 0x81, 0xfffffff8, 0x4, 0xffff, 0xd, 0x8, 0x6, 0x3063abc0, 0x7, 0x5, 0x200, 0x7, 0x3, 0x1059, 0x1, 0x98b3274, 0xb, 0x9, 0x5, 0x9, 0x3, 0x8001, 0x5, 0x0, 0x6, 0x5, 0xc345, 0x7, 0x5, 0x6, 0x2, 0x3, 0x4, 0x7fff, 0x7, 0x10, 0xffffff81, 0xfffffffe, 0x8, 0x8, 0x2dc, 0x3, 0xdab, 0x7c, 0x4b, 0xf0, 0xe, 0x170, 0x8, 0x5, 0x2, 0x1, 0x6, 0x9, 0x8, 0x3fc0, 0x6, 0x8000, 0x5, 0xb, 0x3770, 0xfffffffe, 0xd, 0xb, 0x3, 0x60, 0xf4d6, 0x0, 0x4, 0xffffffbb, 0x1, 0x0, 0xfffffffb, 0x80, 0x5, 0x80000000, 0x80000000, 0x8, 0xca9, 0xfffffff4, 0x32, 0x1000, 0x2, 0x9, 0xfffffff9, 0x401, 0x4, 0x7f, 0x80000001, 0x100, 0x2, 0x1, 0x6, 0x7, 0x100, 0x3, 0x4, 0xa, 0x10000, 0x8, 0x7ff, 0x78, 0x1, 0x0, 0xcd31, 0x5, 0x8, 0x401, 0x2, 0x6, 0x0, 0x665, 0x7fffffff, 0x8ef, 0x9, 0x8, 0x29e2, 0x96d3, 0x0, 0x7, 0xfffffbff, 0x4, 0xf9fc, 0x4, 0x7, 0xfffffff8, 0x7ac37b09, 0x6, 0x8, 0x5, 0x1ff, 0x4, 0x325, 0x401, 0x1af71932, 0x5, 0x0, 0x5, 0x6, 0x7, 0x1, 0x40, 0x5, 0x2, 0x0, 0x0, 0x80, 0x5, 0x8, 0x0, 0x5, 0x2, 0x5, 0x1, 0xd, 0x200, 0x80000001, 0x2d5d1806, 0x2, 0x9, 0x9, 0x80000001, 0x4, 0x1000, 0x0, 0x9, 0x8000, 0x3, 0xfffffffc, 0x8, 0x7, 0x1000, 0x6, 0x1ff, 0x2, 0x0, 0x40, 0x5, 0x5, 0x1000, 0x7, 0x4, 0x7, 0x6, 0x1, 0x10, 0x1, 0x0, 0x80000000, 0xd73, 0x10000, 0x6, 0x4, 0x8b, 0x6, 0x5, 0x770, 0x3b, 0x9, 0x0, 0x3, 0x7, 0x7b, 0x4, 0x0, 0x1, 0x0, 0x478cf71, 0x6, 0x8, 0x9, 0x9, 0x8001, 0x4, 0x3ffc0000, 0x3e, 0x2, 0x23, 0x10, 0x8, 0x2, 0x20, 0x7a3, 0x2, 0x40, 0x2, 0x5, 0x3, 0xff, 0x5, 0x0, 0x5, 0x3, 0x3, 0x10001, 0x10001, 0x6f5, 0x3, 0x3, 0xd, 0x7, 0x4, 0x1, 0x1, 0x7, 0x5, 0x5, 0x4, 0x0, 0x3, 0x7ff, 0x848f, 0xfff, 0x6, 0x1, 0x76, 0x2, 0x3, 0xe, 0xb5, 0x6, 0x9, 0x4, 0x6, 0x7fffffff, 0x7, 0x4, 0x3, 0x9, 0x9, 0x2583092f, 0x1b7, 0x6, 0x8, 0x54, 0x7, 0xafac, 0xb800, 0x6, 0xffffffff, 0x93da, 0xb8, 0x5, 0xfffffffe, 0xfffffffa, 0xb0d, 0xa, 0xff91, 0xffffffff, 0x3, 0x51, 0x1, 0xa3c, 0x0, 0x0, 0xfffffff7, 0x1, 0x5744, 0x395, 0x1, 0xc, 0x2, 0x400, 0x3, 0x9, 0x7, 0x7, 0x6, 0xf74, 0x1, 0xffffffff, 0xe, 0x101, 0x200, 0x1, 0x81, 0x3dd, 0x101, 0x10, 0x8000, 0xe6c, 0x89, 0x80000000, 0x10001, 0x8, 0xc666, 0x1, 0x1, 0x9, 0x1, 0xac92, 0x1, 0x10000, 0x3, 0x3, 0x5, 0x9, 0xf, 0x9, 0x9, 0x7, 0x0, 0x1c00000, 0xd, 0x5, 0x7, 0x0, 0x81, 0xffffff35, 0x6, 0x28, 0x3, 0x9, 0xfffffffd, 0x0, 0x3, 0x3, 0x8, 0x7fff, 0x1000, 0x1, 0x2, 0x8, 0x6, 0x6051, 0x8, 0x4, 0x1, 0x2, 0x5, 0x56d703db, 0x401, 0x502, 0x9, 0x5e, 0x7fffffff, 0x3c, 0x5, 0x3, 0x1, 0x6, 0x0, 0x2, 0x7, 0x5, 0xd1, 0x8, 0x0, 0x8, 0x581, 0x80, 0x3, 0xb, 0xfffffffb, 0xc32, 0x6, 0x8b75, 0x810, 0x2, 0x8c2d, 0x6, 0xff, 0x7, 0x8, 0x1, 0xf, 0x8, 0x7, 0xffffffff, 0x8, 0xa9f, 0xe, 0xfffffff5, 0x9, 0x89, 0x6, 0x8, 0xfffffff8, 0x519, 0x90, 0x5, 0x0, 0x6, 0xbd5, 0x8, 0x10, 0x1, 0x1, 0xe, 0x8, 0x10000, 0x8, 0xde0, 0xe1ec, 0x0, 0x6, 0x1, 0x3, 0x3, 0x9, 0x9, 0x0, 0xfffffff5, 0xa79, 0x9, 0x3ff, 0x3c5b9664, 0x0, 0x4770, 0x1, 0x2a, 0xb, 0xfffffff0, 0x4, 0x7f, 0x6, 0x3, 0x4, 0x101, 0xe23, 0x6, 0x80000000, 0x2, 0xd635, 0x5, 0x4, 0x1, 0x8, 0x400, 0x0, 0x80000000, 0x2, 0x206, 0x4, 0xa9f, 0x2, 0x5, 0x214, 0x5, 0xc, 0xffff, 0x6, 0x3, 0x8000, 0x6, 0x3, 0x5, 0x3, 0x4, 0x5, 0x3, 0x5, 0x6, 0x18a1, 0xfffeffff, 0x5, 0x7, 0x5, 0x3, 0x6, 0x3, 0x3, 0x2, 0x7fffff5a, 0xff, 0xffffffff, 0x9, 0x7fff, 0x0, 0x3, 0x1, 0x6, 0x6, 0x2, 0x3, 0xfffffeff, 0xfffffffb, 0x401, 0x7, 0x2, 0x2, 0x5, 0x0, 0x5, 0x10000, 0x4, 0x4e4, 0x8, 0x0, 0x3, 0x10000, 0x8, 0x8, 0x3196a282, 0x95e, 0x8, 0x401, 0x6, 0x7ff, 0x6, 0x1, 0x7, 0xea1, 0x1, 0x6, 0x2, 0x8, 0x10000, 0x7, 0x7, 0xa608, 0x1, 0x8, 0x8, 0x787, 0x3e2a, 0xfffffff9, 0x5, 0xdaa4, 0x40, 0xfffff758, 0x3, 0x80, 0x2, 0x2, 0x3, 0xa6a6, 0x3, 0x7, 0x3, 0x1, 0x1, 0x7, 0x5215, 0x3, 0x7008, 0x7, 0xffffffff, 0x8, 0x9, 0x10ffa5aa, 0x2, 0x0, 0x0, 0x3, 0x6, 0x8, 0xd, 0x10000, 0x0, 0x400, 0x3, 0x1, 0x7, 0x7, 0x7f, 0xfe, 0x326e2e2, 0xc9b, 0x1, 0x5, 0x2, 0x8, 0xffffffff, 0x3, 0x7, 0x8001, 0x8000, 0x1000000, 0x7, 0x7ff, 0xfffffff7, 0xb6d, 0xe, 0x5, 0x6, 0x8, 0x2, 0xfffffc00, 0x6, 0x9, 0x3, 0xb, 0xfffffffc, 0xffffff80, 0x6, 0x7fffffff, 0x9, 0x86, 0x9, 0x6, 0x1, 0x9, 0x2e, 0x6, 0x71, 0x101, 0x1, 0xff, 0x5, 0x81, 0x9, 0x7, 0x0, 0xb, 0x9, 0x9, 0x1ff, 0x3, 0x10001, 0x53df, 0x2b, 0x29, 0x9, 0x3, 0x3295, 0x100, 0xe0, 0xbf52, 0xffffffff, 0x7, 0x7, 0x4, 0x50, 0x22b, 0x8, 0x1ff, 0x400, 0x4f, 0x8, 0x1ff, 0x5c3f, 0x4, 0x6, 0xfffffe00, 0x2, 0xffffffff, 0x5, 0xffff, 0x1000, 0x4, 0xd11, 0x0, 0xe715, 0x0, 0x2, 0x8, 0x3, 0x7, 0x2, 0x8, 0x3, 0x8001, 0xe, 0x9, 0x1, 0x8, 0x0, 0x100000, 0x3, 0x40, 0x3, 0x2d68, 0xfffffffe, 0x8, 0x9, 0xfffffffa, 0x8, 0x2, 0x200, 0x1, 0x4, 0x80, 0x3, 0x3, 0x3, 0x8, 0xa, 0x7, 0x10000, 0x8, 0x8, 0x2, 0xc22, 0x1d6, 0x6a3e, 0xaf, 0xffffffd4, 0x2, 0x1, 0x6, 0x3, 0x120, 0xffffffff, 0x8000, 0x0, 0x2, 0x4, 0x2, 0x6, 0x2, 0x0, 0x3, 0x3ff, 0x0, 0x7, 0x6, 0x3000000, 0x101, 0x8, 0x100, 0x800, 0x3f, 0x5, 0x10001, 0x7, 0x7, 0x80000001, 0x7d, 0x10000, 0x5, 0x87ee, 0x0, 0xee59, 0xfffffff9, 0x2, 0x86, 0xa, 0x1, 0x191, 0x40, 0x8, 0x8, 0x1000, 0xf44, 0x7, 0xcb, 0x5, 0x80000000, 0x5, 0x8, 0x8, 0x9, 0x944, 0xae, 0x9, 0x5], 0x2, 0x400, 0xff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f00009d8000/0x2000)=nil, 0x2000, 0x200000a, 0x4000010, r4, 0x85fd1000) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000840)={&(0x7f0000000380)={0xa, 0x4e24, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)="4123fa55bdc9ee0cd903478cdbaf756583ec0f24d0a2c6bed38dce32a1f3e3e0dc5b60fe4ad99a6a4abbba5198dcb0c5529d1f8eb45510ce9945859727d8f76b9f6e498c67253cb1c916a466b3360c5ee08fb4f70beedc4be56e0b6829c38a5a587fcf", 0x63}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000000540)="5465f3e3b5c79f4bdcfc9cdb269344fa7f6cd52d68526c411d0bd7b7d4f3c777978b91f0f2753cd6b0748ce803859096d3ad694ec308994a568a0a4b40a9acfad34ce9dd0b72436a166b03f8042aac8737d23960ac7a045ebc53f4eb52aca02259f26298d1a9871ce0038138ae34536dbdf2babddd0ea0c2b1908acb980eab772783bea451040b3048d660b853952eb39d534495ffce5ed0d786f591cd867cee7663a4b53a0293fca06a7f91bde699d8480e158b12d9a4b6e58ce68e3dd6c05c0efa7058061acb39d317200c75297ad12ef19a7b615c94e334576c1c8c8f80b8f2a88bba09a4a8256b5da1e42a26ddea5f8204456d", 0xf5}, {&(0x7f0000000680)="55f6a3d6f5eaa0ca30137780b2e41740d0ac0e2cc21cdca08f8c1568a57df528d3b8953369419921498ccaa3712c46cac2b14ca0510601a4fdb4318dc6bf322e18da944693c85d9abeb804162fa99fdd643d73d9e443c00661b1d1c011b605b63e3139c84e9c02fa94ce5d0fb21d30a60fe4cffb67353ea7b1732796e68887becf5db9cf7e2b08f4ba68327f353aa4974207bc5f809907e0fa408e9e99a18cb3561d3cef990880090098c358c5de4b8ec17c854cd6758ba5d02a6c9fa13d115b1e", 0xc1}, {&(0x7f0000000780)="3dacdf9eee743bd1626714457975abf9d846869ce9f19082ba52ae54c4764502d0c74384670d950ad6e0017adf3d17e03d753e6d8091c7db3396754c044241e3e9d0b4dec98451d1167c969629efda39c8444259485a3614279ebb", 0x5b}], 0x5}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f0000000880)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000004000000032000000c00000000000000550fc1dba223b7f588ce84fb214d53fc082c93db2ce31e9910dd0ca21e5915411a45", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 666.253145ms ago: executing program 1 (id=4110): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x5, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x369, 0x0, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8, 0x700, 0x2581, 0x7fffffff, {{0x3d, 0x4, 0x1, 0x3b, 0xf4, 0x66, 0x0, 0x10, 0x29, 0x0, @multicast1, @private=0xa010102, {[@timestamp_prespec={0x44, 0x34, 0xe4, 0x3, 0x7, [{@loopback, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x2}, {@multicast2, 0x744}, {@empty, 0x7f}, {@private=0xa010100, 0xfffffffa}, {@local, 0xa0000}]}, @timestamp_addr={0x44, 0x14, 0xee, 0x1, 0xa, [{@remote, 0x7}, {@loopback, 0xff}]}, @timestamp_addr={0x44, 0x54, 0xc0, 0x1, 0xf, [{@loopback, 0x6}, {@rand_addr=0x64010101}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x800}, {@remote, 0x7}, {@loopback, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x1}, {@broadcast, 0x4}, {@remote, 0x10}]}, @rr={0x7, 0xb, 0xeb, [@empty, @broadcast]}, @timestamp={0x44, 0x8, 0x26, 0x0, 0x2, [0x3]}, @timestamp_prespec={0x44, 0x2c, 0x2b, 0x3, 0x9, [{@remote, 0x9219}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x2}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@private=0xa010100, 0x8}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000340)={'ip_vti0\x00', r4, 0x8, 0x700, 0x2, 0x3, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x67, 0x0, 0x1, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0xf2, 0x1, 0x3, [{@local, 0x7}, {@loopback, 0x2}, {@private=0xa010102, 0x412}]}]}}}}}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x90000915, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfe1ab000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet(0xffffffffffffffff, 0x0, 0x0) getpid() r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05604, &(0x7f0000000cc0)={0x1}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x250) sendmsg$alg(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000780)=ANY=[], 0x134, 0x40449d5}, 0x20000091) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 224.401092ms ago: executing program 0 (id=4111): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x38}}, 0x40840) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e07000514"], 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r4, &(0x7f0000003880), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000060000004500000000100000", @ANYRES32, @ANYBLOB="000000d5d300001000000000000000000000d247b859249e09d09ec7c2000296471b6039e37155d12d0927aa8af9224dea625a7571287ac7db0daff2c56d513224055808318a7b6b71dded2a89f7ebe48af321aeb914610090cbfbf62d938b894491edc3b0f811248f8a165085e570e28d399139ad920173011387ba07cdd04a357ad98eb4d2e6d7eddf9bb15601fa6138c8601fa53617285c87047694348263a9938c0ce55c76918649b625c9945f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) openat$uhid(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) 91.504634ms ago: executing program 1 (id=4112): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40840}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x9, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff", 0x4}]) 0s ago: executing program 1 (id=4113): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @multicast2, @empty}, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000180)={'vlan1\x00', 0x0}) getrlimit(0x4, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="aa", 0x1, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) kernel console output (not intermixed with test programs): 8][T18476] ? __pfx_aa_sk_perm+0x10/0x10 [ 654.124290][T18476] ? find_held_lock+0x2d/0x110 [ 654.126211][T18476] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 654.128540][T18476] ? do_sock_getsockopt+0x3fe/0x870 [ 654.130626][T18476] do_sock_getsockopt+0x3fe/0x870 [ 654.132628][T18476] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 654.134833][T18476] ? lock_acquire+0x2f/0xb0 [ 654.136657][T18476] ? __fget_files+0x40/0x3a0 [ 654.138537][T18476] ? __fget_files+0x206/0x3a0 [ 654.140434][T18476] __sys_getsockopt+0x12f/0x260 [ 654.142402][T18476] __ia32_sys_getsockopt+0xbc/0x160 [ 654.144452][T18476] ? lockdep_hardirqs_on+0x7c/0x110 [ 654.146402][T18476] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 654.148902][T18476] __do_fast_syscall_32+0x73/0x120 [ 654.150969][T18476] do_fast_syscall_32+0x32/0x80 [ 654.152920][T18476] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.155429][T18476] RIP: 0023:0xf70ee579 [ 654.157067][T18476] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 654.164558][T18476] RSP: 002b:00000000f50e055c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 654.167873][T18476] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 654.171141][T18476] RDX: 000000000000006f RSI: 0000000020000000 RDI: 0000000020000440 [ 654.174211][T18476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 654.177263][T18476] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 654.179455][T18476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 654.181692][T18476] [ 654.388073][T18481] team0 (unregistering): Port device team_slave_0 removed [ 654.397740][T18481] team0 (unregistering): Port device team_slave_1 removed [ 656.328783][T18514] netlink: 'syz.4.3291': attribute type 2 has an invalid length. [ 656.333716][T18514] netlink: 'syz.4.3291': attribute type 8 has an invalid length. [ 656.335980][T18514] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3291'. [ 656.727628][T18526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3293'. [ 658.384142][T18565] netlink: 'syz.2.3302': attribute type 2 has an invalid length. [ 658.386865][T18565] netlink: 'syz.2.3302': attribute type 8 has an invalid length. [ 658.389507][T18565] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3302'. [ 658.763765][T18570] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 658.883682][T18578] FAULT_INJECTION: forcing a failure. [ 658.883682][T18578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.888728][T18578] CPU: 3 UID: 0 PID: 18578 Comm: syz.4.3305 Not tainted 6.13.0-rc7-syzkaller #0 [ 658.892286][T18578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 658.896505][T18578] Call Trace: [ 658.897862][T18578] [ 658.899040][T18578] dump_stack_lvl+0x16c/0x1f0 [ 658.900873][T18578] should_fail_ex+0x497/0x5b0 [ 658.902722][T18578] _copy_to_user+0x32/0xd0 [ 658.904228][T18578] simple_read_from_buffer+0xd0/0x160 [ 658.906101][T18578] proc_fail_nth_read+0x198/0x270 [ 658.908049][T18578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 658.910135][T18578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 658.912263][T18578] vfs_read+0x1df/0xbe0 [ 658.913962][T18578] ? __fget_files+0x1fc/0x3a0 [ 658.915769][T18578] ? __pfx___mutex_lock+0x10/0x10 [ 658.917819][T18578] ? __pfx_vfs_read+0x10/0x10 [ 658.919322][T18578] ? __fget_files+0x206/0x3a0 [ 658.920663][T18578] ksys_read+0x12b/0x250 [ 658.921879][T18578] ? __pfx_ksys_read+0x10/0x10 [ 658.923230][T18578] __do_fast_syscall_32+0x73/0x120 [ 658.924668][T18578] do_fast_syscall_32+0x32/0x80 [ 658.926113][T18578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 658.927960][T18578] RIP: 0023:0xf7f93579 [ 658.929168][T18578] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 658.934740][T18578] RSP: 002b:00000000f50a4590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 658.937106][T18578] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f50a4620 [ 658.939335][T18578] RDX: 000000000000000f RSI: 00000000f7423ff4 RDI: 0000000000000000 [ 658.941498][T18578] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 658.943701][T18578] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 658.945933][T18578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 658.948171][T18578] [ 659.230843][T18583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3307'. [ 659.888264][ T5977] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 660.004604][T18604] 9pnet_fd: Insufficient options for proto=fd [ 660.010224][T18604] xt_TPROXY: Can be used only with -p tcp or -p udp [ 660.060728][ T5977] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 660.063140][ T5977] usb 9-1: config 0 has no interface number 0 [ 660.064902][ T5977] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 660.068199][ T5977] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 660.072123][ T5977] usb 9-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 660.074739][ T5977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.078023][ T5977] usb 9-1: config 0 descriptor?? [ 660.079935][T18599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 660.083962][ T5977] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.120/input/input35 [ 660.334897][T18607] netlink: 'syz.2.3314': attribute type 2 has an invalid length. [ 660.337461][T18607] netlink: 'syz.2.3314': attribute type 8 has an invalid length. [ 660.339867][T18607] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3314'. [ 660.570429][T18611] netlink: 'syz.0.3315': attribute type 2 has an invalid length. [ 660.573823][T18611] netlink: 'syz.0.3315': attribute type 8 has an invalid length. [ 660.576587][T18611] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3315'. [ 662.050485][T18627] 9pnet_fd: Insufficient options for proto=fd [ 662.764597][ T5977] kernel read not supported for file /sequencer2 (pid: 5977 comm: kworker/0:3) [ 662.799748][T12955] usb 9-1: USB disconnect, device number 8 [ 663.025637][T18641] FAULT_INJECTION: forcing a failure. [ 663.025637][T18641] name failslab, interval 1, probability 0, space 0, times 0 [ 663.030290][T18641] CPU: 2 UID: 0 PID: 18641 Comm: syz.2.3324 Not tainted 6.13.0-rc7-syzkaller #0 [ 663.033628][T18641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 663.037625][T18641] Call Trace: [ 663.038863][T18641] [ 663.040000][T18641] dump_stack_lvl+0x16c/0x1f0 [ 663.041769][T18641] should_fail_ex+0x497/0x5b0 [ 663.043484][T18641] ? fs_reclaim_acquire+0xae/0x150 [ 663.045445][T18641] should_failslab+0xc2/0x120 [ 663.047232][T18641] __kmalloc_noprof+0xce/0x4f0 [ 663.049127][T18641] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 663.051152][T18641] ? tomoyo_realpath_from_path+0xbf/0x710 [ 663.052850][T18641] tomoyo_realpath_from_path+0xbf/0x710 [ 663.054533][T18641] ? tomoyo_path_number_perm+0x235/0x5b0 [ 663.056695][T18641] tomoyo_path_number_perm+0x248/0x5b0 [ 663.058809][T18641] ? tomoyo_path_number_perm+0x235/0x5b0 [ 663.060716][T18641] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 663.062798][T18641] ? __pfx_lock_release+0x10/0x10 [ 663.064800][T18641] ? trace_lock_acquire+0x14e/0x1f0 [ 663.066928][T18641] ? lock_acquire+0x2f/0xb0 [ 663.068329][T18641] ? __fget_files+0x40/0x3a0 [ 663.069972][T18641] ? __fget_files+0x206/0x3a0 [ 663.071866][T18641] security_file_ioctl_compat+0x9b/0x240 [ 663.073940][T18641] __do_compat_sys_ioctl+0x4e/0x2c0 [ 663.075461][T18641] __do_fast_syscall_32+0x73/0x120 [ 663.077523][T18641] do_fast_syscall_32+0x32/0x80 [ 663.079497][T18641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 663.081854][T18641] RIP: 0023:0xf70ee579 [ 663.083490][T18641] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 663.091002][T18641] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 663.094332][T18641] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000c0045405 [ 663.097433][T18641] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 663.100384][T18641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.103154][T18641] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 663.106067][T18641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.109112][T18641] [ 663.114302][T18641] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.264402][T18659] netlink: 'syz.1.3328': attribute type 2 has an invalid length. [ 664.278285][T18659] netlink: 'syz.1.3328': attribute type 8 has an invalid length. [ 664.292447][T18659] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3328'. [ 664.646008][T18670] netlink: 1080 bytes leftover after parsing attributes in process `syz.2.3333'. [ 664.648767][T18670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3333'. [ 666.119367][T18694] netlink: 'syz.1.3338': attribute type 2 has an invalid length. [ 666.122356][T18694] netlink: 'syz.1.3338': attribute type 8 has an invalid length. [ 666.124496][T18694] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3338'. [ 669.044006][T18763] FAULT_INJECTION: forcing a failure. [ 669.044006][T18763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.052422][T18763] CPU: 3 UID: 0 PID: 18763 Comm: syz.0.3356 Not tainted 6.13.0-rc7-syzkaller #0 [ 669.056073][T18763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 669.060406][T18763] Call Trace: [ 669.061710][T18763] [ 669.062928][T18763] dump_stack_lvl+0x16c/0x1f0 [ 669.064841][T18763] should_fail_ex+0x497/0x5b0 [ 669.066766][T18763] _copy_from_iter+0x29b/0x1400 [ 669.068703][T18763] ? trace_lock_acquire+0x14e/0x1f0 [ 669.070752][T18763] ? __alloc_skb+0x200/0x380 [ 669.072733][T18763] ? __pfx__copy_from_iter+0x10/0x10 [ 669.074903][T18763] ? __virt_addr_valid+0x1a4/0x590 [ 669.076972][T18763] ? __virt_addr_valid+0x5e/0x590 [ 669.078965][T18763] ? __phys_addr_symbol+0x30/0x80 [ 669.080948][T18763] ? __check_object_size+0x488/0x710 [ 669.083055][T18763] netlink_sendmsg+0x813/0xd70 [ 669.084956][T18763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.087056][T18763] ____sys_sendmsg+0x9ae/0xb40 [ 669.088954][T18763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.091010][T18763] ? get_compat_msghdr+0x11b/0x170 [ 669.093042][T18763] ___sys_sendmsg+0x135/0x1e0 [ 669.094919][T18763] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.097040][T18763] ? __pfx_lock_release+0x10/0x10 [ 669.099050][T18763] ? trace_lock_acquire+0x14e/0x1f0 [ 669.101132][T18763] ? __fget_files+0x206/0x3a0 [ 669.103054][T18763] __sys_sendmsg+0x16e/0x220 [ 669.104943][T18763] ? __pfx___sys_sendmsg+0x10/0x10 [ 669.107042][T18763] __do_fast_syscall_32+0x73/0x120 [ 669.109117][T18763] do_fast_syscall_32+0x32/0x80 [ 669.111118][T18763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 669.113676][T18763] RIP: 0023:0xf7ff3579 [ 669.115333][T18763] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 669.122883][T18763] RSP: 002b:00000000f514655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 669.126230][T18763] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 669.129399][T18763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 669.132567][T18763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 669.135744][T18763] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 669.138913][T18763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 669.142093][T18763] [ 669.143421][ C3] vkms_vblank_simulate: vblank timer overrun [ 669.367440][T18776] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3360'. [ 671.358246][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'. [ 671.652262][T18820] netlink: 'syz.1.3372': attribute type 2 has an invalid length. [ 671.655009][T18820] netlink: 'syz.1.3372': attribute type 8 has an invalid length. [ 671.658319][T18820] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3372'. [ 672.374553][T18835] netlink: 'syz.4.3376': attribute type 2 has an invalid length. [ 672.377754][T18835] netlink: 'syz.4.3376': attribute type 8 has an invalid length. [ 672.379779][T18835] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3376'. [ 673.812430][T18863] netlink: 'syz.0.3382': attribute type 2 has an invalid length. [ 673.817061][T18863] netlink: 'syz.0.3382': attribute type 8 has an invalid length. [ 673.821854][T18863] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3382'. [ 675.162385][T18885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3390'. [ 675.165550][T18885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3390'. [ 676.004442][T18904] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.3395'. [ 676.007174][T18904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3395'. [ 676.885271][T18917] netlink: 'syz.1.3398': attribute type 2 has an invalid length. [ 676.888679][T18917] netlink: 'syz.1.3398': attribute type 8 has an invalid length. [ 676.891013][T18917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3398'. [ 677.819354][T18945] bio_check_eod: 2 callbacks suppressed [ 677.819474][T18945] syz.2.3406: attempt to access beyond end of device [ 677.819474][T18945] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 677.831600][T18945] XFS (nbd2): SB validate failed with error -5. [ 677.857470][T18945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3406'. [ 678.484982][T18962] netlink: 'syz.1.3409': attribute type 2 has an invalid length. [ 678.487225][T18962] netlink: 'syz.1.3409': attribute type 8 has an invalid length. [ 678.489438][T18962] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3409'. [ 678.972977][T18980] sp0: Synchronizing with TNC [ 678.982451][T18980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3415'. [ 679.259762][ T70] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 679.442611][ T70] usb 5-1: config 0 has an invalid interface number: 241 but max is 0 [ 679.445183][ T70] usb 5-1: config 0 has no interface number 0 [ 679.447005][ T70] usb 5-1: config 0 interface 241 has no altsetting 0 [ 679.452867][ T70] usb 5-1: New USB device found, idVendor=0ace, idProduct=1611, bcdDevice=c4.63 [ 679.455679][ T70] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.458026][ T70] usb 5-1: Product: syz [ 679.459267][ T70] usb 5-1: Manufacturer: syz [ 679.460663][ T70] usb 5-1: SerialNumber: syz [ 679.477265][ T70] usb 5-1: config 0 descriptor?? [ 679.702948][T18980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3415'. [ 679.795742][T18992] openvswitch: netlink: Flow actions attr not present in new flow. [ 680.162899][ T70] cdc_acm 5-1:0.241: skipping garbage [ 680.166325][ T70] usb 5-1: USB disconnect, device number 36 [ 680.505309][T18999] netlink: 'syz.4.3421': attribute type 2 has an invalid length. [ 680.508127][T18999] netlink: 'syz.4.3421': attribute type 8 has an invalid length. [ 680.511319][T18999] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3421'. [ 681.013113][ T57] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 681.173251][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 681.179569][ T57] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 681.182956][ T57] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 681.186759][ T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 681.189712][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 681.192847][ T57] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 681.199723][ T57] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 681.204695][ T57] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 681.209693][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.214098][ T57] usb 5-1: config 0 descriptor?? [ 681.434475][ T57] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 681.651534][ T5977] usb 5-1: USB disconnect, device number 37 [ 681.654990][ T5977] usblp0: removed [ 682.865636][T19051] netlink: 'syz.1.3440': attribute type 2 has an invalid length. [ 682.867891][T19051] netlink: 'syz.1.3440': attribute type 8 has an invalid length. [ 682.870162][T19051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3440'. [ 683.299443][T19066] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3451'. [ 684.157643][T19086] netlink: 'syz.4.3449': attribute type 2 has an invalid length. [ 684.160010][T19086] netlink: 'syz.4.3449': attribute type 8 has an invalid length. [ 684.162572][T19086] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3449'. [ 685.369457][T19116] netlink: 1080 bytes leftover after parsing attributes in process `syz.2.3457'. [ 685.372253][T19116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3457'. [ 686.171079][T19128] netlink: 1080 bytes leftover after parsing attributes in process `syz.0.3460'. [ 686.173739][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3460'. [ 687.045778][T19136] netlink: 'syz.4.3463': attribute type 2 has an invalid length. [ 687.048078][T19136] netlink: 'syz.4.3463': attribute type 8 has an invalid length. [ 687.050380][T19136] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3463'. [ 689.774851][T19182] netlink: 'syz.1.3476': attribute type 2 has an invalid length. [ 689.777140][T19182] netlink: 'syz.1.3476': attribute type 8 has an invalid length. [ 689.779380][T19182] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3476'. [ 690.962212][ T39] audit: type=1800 audit(1736783980.393:6070): pid=19200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3481" name="cpuset.effective_cpus" dev="9p" ino=42207066 res=0 errno=0 [ 691.048480][T19200] syz.0.3481 (19200) used greatest stack depth: 20640 bytes left [ 691.072912][T19209] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 691.143801][T19211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3484'. [ 691.207669][T19214] Bluetooth: MGMT ver 1.23 [ 691.587518][T19213] netlink: 'syz.0.3485': attribute type 2 has an invalid length. [ 691.589874][T19213] netlink: 'syz.0.3485': attribute type 8 has an invalid length. [ 691.592121][T19213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3485'. [ 693.546665][T19254] netlink: 'syz.0.3495': attribute type 2 has an invalid length. [ 693.548947][T19254] netlink: 'syz.0.3495': attribute type 8 has an invalid length. [ 693.551183][T19254] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3495'. [ 694.803042][T19283] netlink: 'syz.1.3504': attribute type 2 has an invalid length. [ 694.805382][T19283] netlink: 'syz.1.3504': attribute type 8 has an invalid length. [ 694.807885][T19283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3504'. [ 696.006540][T19311] Invalid source name [ 696.007898][T19311] UBIFS error (pid: 19311): cannot open "./file0", error -22 [ 697.199793][T19331] netlink: 'syz.2.3518': attribute type 2 has an invalid length. [ 697.204146][T19331] netlink: 'syz.2.3518': attribute type 8 has an invalid length. [ 697.206313][T19331] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3518'. [ 697.669452][T19347] Invalid source name [ 697.670782][T19347] UBIFS error (pid: 19347): cannot open "./file0", error -22 [ 697.731073][T19351] netlink: 'syz.1.3524': attribute type 2 has an invalid length. [ 697.737938][T19351] netlink: 'syz.1.3524': attribute type 8 has an invalid length. [ 697.740199][T19351] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3524'. [ 699.572185][T19376] netlink: 'syz.2.3530': attribute type 2 has an invalid length. [ 699.574513][T19376] netlink: 'syz.2.3530': attribute type 8 has an invalid length. [ 699.576747][T19376] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3530'. [ 700.153878][T19391] Invalid source name [ 700.155128][T19391] UBIFS error (pid: 19391): cannot open "./file0", error -22 [ 702.399532][T19436] binder_alloc: 19433: binder_alloc_buf, no vma [ 702.457193][T19429] qnx6: unable to read the first superblock [ 702.673102][T19440] Invalid source name [ 702.674320][T19440] UBIFS error (pid: 19440): cannot open "./file0", error -22 [ 704.497128][T19475] Invalid source name [ 704.504362][T19475] UBIFS error (pid: 19475): cannot open "./file0", error -22 [ 704.983516][T19483] netlink: 1080 bytes leftover after parsing attributes in process `syz.4.3562'. [ 705.024049][T19483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3562'. [ 705.521715][T19486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3564'. [ 708.068893][T19538] Invalid source name [ 708.070543][T19538] UBIFS error (pid: 19538): cannot open "./file0", error -22 [ 708.594473][T19547] syz.4.3579: attempt to access beyond end of device [ 708.594473][T19547] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 708.600509][T19547] XFS (nbd4): SB validate failed with error -5. [ 708.677056][T19554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3579'. [ 710.722125][T19578] netlink: 'syz.2.3587': attribute type 2 has an invalid length. [ 710.724389][T19578] netlink: 'syz.2.3587': attribute type 8 has an invalid length. [ 710.748584][T19578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3587'. [ 711.190497][T19589] Invalid source name [ 711.192369][T19589] UBIFS error (pid: 19589): cannot open "./file0", error -22 [ 713.125464][T19622] netlink: 'syz.2.3597': attribute type 10 has an invalid length. [ 713.134406][T19622] syz_tun: entered promiscuous mode [ 713.150023][T19622] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 715.973745][T19670] netlink: 'syz.0.3610': attribute type 2 has an invalid length. [ 715.976208][T19670] netlink: 'syz.0.3610': attribute type 8 has an invalid length. [ 715.978704][T19670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3610'. [ 716.381918][T19677] netlink: 'syz.2.3612': attribute type 2 has an invalid length. [ 716.384234][T19677] netlink: 'syz.2.3612': attribute type 8 has an invalid length. [ 716.386588][T19677] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3612'. [ 717.371083][T19693] netlink: 'syz.1.3618': attribute type 2 has an invalid length. [ 717.373359][T19693] netlink: 'syz.1.3618': attribute type 8 has an invalid length. [ 717.375630][T19693] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3618'. [ 717.892147][T19707] netlink: 'syz.4.3622': attribute type 2 has an invalid length. [ 717.894552][T19707] netlink: 'syz.4.3622': attribute type 8 has an invalid length. [ 717.896865][T19707] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3622'. [ 718.655243][T19719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3624'. [ 719.780122][T19740] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.3630'. [ 719.782769][T19740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3630'. [ 720.285824][T19749] netlink: 'syz.1.3632': attribute type 2 has an invalid length. [ 720.288170][T19749] netlink: 'syz.1.3632': attribute type 8 has an invalid length. [ 720.290528][T19749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3632'. [ 720.655023][T19759] netlink: 'syz.1.3636': attribute type 2 has an invalid length. [ 720.657505][T19759] netlink: 'syz.1.3636': attribute type 8 has an invalid length. [ 720.659921][T19759] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3636'. [ 722.244092][T19783] netlink: 'syz.0.3643': attribute type 2 has an invalid length. [ 722.246780][T19783] netlink: 'syz.0.3643': attribute type 8 has an invalid length. [ 722.249573][T19783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3643'. [ 723.127367][T19801] netlink: 'syz.4.3647': attribute type 2 has an invalid length. [ 723.130302][T19801] netlink: 'syz.4.3647': attribute type 8 has an invalid length. [ 723.133540][T19801] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3647'. [ 723.416678][T19807] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.3650'. [ 723.420008][T19807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3650'. [ 723.958854][T19815] Invalid source name [ 723.960204][T19815] UBIFS error (pid: 19815): cannot open "./file0", error -22 [ 723.963305][T19815] netlink: 'syz.2.3652': attribute type 2 has an invalid length. [ 723.970460][T19815] netlink: 'syz.2.3652': attribute type 8 has an invalid length. [ 723.972850][T19815] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3652'. [ 724.805675][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3658'. [ 724.822437][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3658'. [ 724.879365][T19835] openvswitch: netlink: Flow actions attr not present in new flow. [ 725.625781][T19845] netlink: 'syz.4.3660': attribute type 2 has an invalid length. [ 725.628363][T19845] netlink: 'syz.4.3660': attribute type 8 has an invalid length. [ 725.630688][T19845] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3660'. [ 725.650412][T19846] netlink: 'syz.1.3661': attribute type 2 has an invalid length. [ 725.653648][T19846] netlink: 'syz.1.3661': attribute type 8 has an invalid length. [ 725.656844][T19846] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3661'. [ 725.762071][T19851] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3662'. [ 726.048602][T19858] Invalid source name [ 726.049841][T19858] UBIFS error (pid: 19858): cannot open "./file0", error -22 [ 726.739582][T19879] Invalid source name [ 726.743303][T19879] UBIFS error (pid: 19879): cannot open "./file0", error -22 [ 728.045030][T19899] Invalid source name [ 728.048850][T19899] UBIFS error (pid: 19899): cannot open "./file0", error -22 [ 728.060149][T19899] validate_nla: 4 callbacks suppressed [ 728.060222][T19899] netlink: 'syz.4.3678': attribute type 2 has an invalid length. [ 728.066367][T19899] netlink: 'syz.4.3678': attribute type 8 has an invalid length. [ 728.069047][T19899] __nla_validate_parse: 3 callbacks suppressed [ 728.069056][T19899] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3678'. [ 729.629544][T19927] netlink: 'syz.0.3686': attribute type 2 has an invalid length. [ 729.631850][T19927] netlink: 'syz.0.3686': attribute type 8 has an invalid length. [ 729.634101][T19927] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3686'. [ 729.911354][T19940] netlink: 'syz.0.3690': attribute type 2 has an invalid length. [ 729.913808][T19940] netlink: 'syz.0.3690': attribute type 8 has an invalid length. [ 729.916895][T19940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3690'. [ 730.596982][T19948] netlink: 'syz.4.3692': attribute type 2 has an invalid length. [ 730.600310][T19948] netlink: 'syz.4.3692': attribute type 8 has an invalid length. [ 730.603617][T19948] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3692'. [ 731.403251][T19979] netlink: 1080 bytes leftover after parsing attributes in process `syz.2.3700'. [ 731.406158][T19979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3700'. [ 732.239302][T19995] netlink: 'syz.1.3706': attribute type 2 has an invalid length. [ 732.241630][T19995] netlink: 'syz.1.3706': attribute type 8 has an invalid length. [ 732.244046][T19995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3706'. [ 732.349641][T19998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3715'. [ 732.681668][T20008] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3710'. [ 733.698368][T20029] Invalid source name [ 733.699688][T20029] UBIFS error (pid: 20029): cannot open "./file0", error -22 [ 733.709766][T20029] validate_nla: 4 callbacks suppressed [ 733.710062][T20029] netlink: 'syz.0.3717': attribute type 2 has an invalid length. [ 733.716547][T20029] netlink: 'syz.0.3717': attribute type 8 has an invalid length. [ 733.719248][T20029] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3717'. [ 734.574407][T20050] 9pnet_fd: Insufficient options for proto=fd [ 734.782985][T20055] netlink: 1080 bytes leftover after parsing attributes in process `syz.2.3723'. [ 734.786132][T20055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3723'. [ 735.301753][T20071] Invalid source name [ 735.303477][T20071] UBIFS error (pid: 20071): cannot open "./file0", error -22 [ 735.324967][T20071] netlink: 'syz.4.3730': attribute type 2 has an invalid length. [ 735.329707][T20071] netlink: 'syz.4.3730': attribute type 8 has an invalid length. [ 735.332009][T20071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3730'. [ 736.023981][T20079] netlink: 'syz.4.3732': attribute type 2 has an invalid length. [ 736.026416][T20079] netlink: 'syz.4.3732': attribute type 8 has an invalid length. [ 736.028881][T20079] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3732'. [ 736.039141][T20083] netlink: 'syz.1.3734': attribute type 2 has an invalid length. [ 736.042032][T20083] netlink: 'syz.1.3734': attribute type 8 has an invalid length. [ 736.044485][T20083] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3734'. [ 736.139943][T20080] netlink: 1080 bytes leftover after parsing attributes in process `syz.0.3731'. [ 736.142771][T20080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3731'. [ 736.477052][ T5940] Bluetooth: hci0: command 0x0406 tx timeout [ 736.478970][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 736.480103][ T5297] Bluetooth: hci3: command 0x0406 tx timeout [ 736.791336][T20099] Invalid source name [ 736.792562][T20099] UBIFS error (pid: 20099): cannot open "./file0", error -22 [ 736.793586][T20099] netlink: 'syz.1.3741': attribute type 2 has an invalid length. [ 736.797994][T20099] netlink: 'syz.1.3741': attribute type 8 has an invalid length. [ 736.800252][T20099] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3741'. [ 737.871533][T20110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3743'. [ 739.258906][T20129] Invalid source name [ 739.260232][T20129] UBIFS error (pid: 20129): cannot open "./file0", error -22 [ 739.265721][T20129] validate_nla: 2 callbacks suppressed [ 739.265781][T20129] netlink: 'syz.4.3749': attribute type 2 has an invalid length. [ 739.272801][T20129] netlink: 'syz.4.3749': attribute type 8 has an invalid length. [ 739.275713][T20129] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3749'. [ 739.305091][T20130] netlink: 1080 bytes leftover after parsing attributes in process `syz.0.3748'. [ 739.308067][T20130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3748'. [ 741.061210][T20153] netlink: 1080 bytes leftover after parsing attributes in process `syz.4.3757'. [ 741.065315][T20153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3757'. [ 741.276549][T20156] sp0: Synchronizing with TNC [ 741.498866][T20158] Invalid source name [ 741.500149][T20158] UBIFS error (pid: 20158): cannot open "./file0", error -22 [ 741.502574][T20158] netlink: 'syz.1.3759': attribute type 2 has an invalid length. [ 741.506906][T20158] netlink: 'syz.1.3759': attribute type 8 has an invalid length. [ 741.509117][T20158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3759'. [ 741.840780][T20163] Invalid source name [ 741.842002][T20163] UBIFS error (pid: 20163): cannot open "./file0", error -22 [ 741.915858][T20156] [U] è [ 742.054127][T20170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3764'. [ 742.061284][T20170] bridge0: port 3(vlan2) entered blocking state [ 742.064209][T20170] bridge0: port 3(vlan2) entered disabled state [ 742.066309][T20170] vlan2: entered allmulticast mode [ 742.068697][T20170] vlan2: left allmulticast mode [ 742.722800][ T1328] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 742.882158][ T1328] usb 7-1: Using ep0 maxpacket: 8 [ 742.884931][ T1328] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 742.887393][ T1328] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 742.890264][ T1328] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 742.893423][ T1328] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 742.896439][ T1328] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.900213][ T1328] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 742.902886][ T1328] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.177545][ T1328] usb 7-1: usb_control_msg returned -32 [ 743.179258][ T1328] usbtmc 7-1:16.0: can't read capabilities [ 743.347939][T20186] 9pnet_fd: Insufficient options for proto=fd [ 743.467720][T20191] Invalid source name [ 743.469350][T20191] UBIFS error (pid: 20191): cannot open "./file0", error -22 [ 743.554724][T20171] PKCS7: Unknown OID: [5] (bad) [ 743.559605][T20171] PKCS7: Only support pkcs7_signedData type [ 743.943473][T20193] usbtmc 7-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 744.157455][T12171] usb 7-1: USB disconnect, device number 29 [ 744.222472][T20197] netlink: 'syz.1.3772': attribute type 3 has an invalid length. [ 744.367685][T20208] netlink: 'syz.1.3776': attribute type 2 has an invalid length. [ 744.371298][T20208] netlink: 'syz.1.3776': attribute type 8 has an invalid length. [ 744.374644][T20208] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3776'. [ 744.424483][T20210] netlink: 'syz.0.3775': attribute type 2 has an invalid length. [ 744.426832][T20210] netlink: 'syz.0.3775': attribute type 8 has an invalid length. [ 744.429119][T20210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3775'. [ 744.838954][T20225] Invalid source name [ 744.840129][T20225] UBIFS error (pid: 20225): cannot open "./file0", error -22 [ 744.897786][T20227] openvswitch: netlink: IP tunnel dst address not specified [ 745.485927][T20237] netlink: 'syz.0.3787': attribute type 2 has an invalid length. [ 745.489796][T20237] netlink: 'syz.0.3787': attribute type 8 has an invalid length. [ 745.492032][T20237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3787'. [ 746.264853][T20265] Invalid source name [ 746.266079][T20265] UBIFS error (pid: 20265): cannot open "./file0", error -22 [ 747.136509][T20280] support for the xor transformation has been removed. [ 747.465948][ T57] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 747.475652][T20296] Invalid source name [ 747.477146][T20296] UBIFS error (pid: 20296): cannot open "./file0", error -22 [ 747.646610][ T57] usb 7-1: Using ep0 maxpacket: 16 [ 747.656155][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.660428][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.664052][ T57] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 747.668878][ T57] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 747.672336][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.678564][ T57] usb 7-1: config 0 descriptor?? [ 747.994479][T20305] netlink: 'syz.0.3807': attribute type 2 has an invalid length. [ 747.996916][T20305] netlink: 'syz.0.3807': attribute type 8 has an invalid length. [ 747.999381][T20305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3807'. [ 748.116071][ T57] microsoft 0003:045E:07DA.000C: unbalanced collection at end of report description [ 748.119797][ T57] microsoft 0003:045E:07DA.000C: parse failed [ 748.122171][ T57] microsoft 0003:045E:07DA.000C: probe with driver microsoft failed with error -22 [ 748.327724][ T57] usb 7-1: USB disconnect, device number 30 [ 748.334788][T20310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3809'. [ 748.645230][T20314] Invalid source name [ 748.646488][T20314] UBIFS error (pid: 20314): cannot open "./file0", error -22 [ 748.668949][T20314] netlink: 'syz.4.3810': attribute type 2 has an invalid length. [ 748.673256][T20314] netlink: 'syz.4.3810': attribute type 8 has an invalid length. [ 748.675474][T20314] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3810'. [ 749.488441][T20332] Invalid source name [ 749.489662][T20332] UBIFS error (pid: 20332): cannot open "./file0", error -22 [ 750.596362][T20358] netlink: 1080 bytes leftover after parsing attributes in process `syz.4.3821'. [ 750.602615][T20358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3821'. [ 750.646964][T20355] netlink: 'syz.0.3820': attribute type 2 has an invalid length. [ 750.650070][T20355] netlink: 'syz.0.3820': attribute type 8 has an invalid length. [ 750.652383][T20355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3820'. [ 751.207485][T20362] tipc: Started in network mode [ 751.216457][T20362] tipc: Node identity 10000, cluster identity 4711 [ 751.219959][T20362] tipc: Node number set to 65536 [ 751.531426][T20371] Invalid source name [ 751.533040][T20371] UBIFS error (pid: 20371): cannot open "./file0", error -22 [ 751.548186][T20371] netlink: 'syz.1.3825': attribute type 2 has an invalid length. [ 751.553095][T20371] netlink: 'syz.1.3825': attribute type 8 has an invalid length. [ 751.555254][T20371] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3825'. [ 752.231396][T20388] netlink: 'syz.0.3830': attribute type 2 has an invalid length. [ 752.235025][T20388] netlink: 'syz.0.3830': attribute type 8 has an invalid length. [ 752.238275][T20388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3830'. [ 752.549259][T20392] netlink: 'syz.1.3832': attribute type 2 has an invalid length. [ 752.552262][T20392] netlink: 'syz.1.3832': attribute type 8 has an invalid length. [ 752.555098][T20392] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3832'. [ 753.020293][T20398] Invalid source name [ 753.021710][T20398] UBIFS error (pid: 20398): cannot open "./file0", error -22 [ 753.514522][T20404] : entered promiscuous mode [ 754.475673][T20425] netlink: 'syz.0.3842': attribute type 2 has an invalid length. [ 754.478835][T20425] netlink: 'syz.0.3842': attribute type 8 has an invalid length. [ 754.482015][T20425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3842'. [ 755.067871][T20431] Invalid source name [ 755.069375][T20431] UBIFS error (pid: 20431): cannot open "./file0", error -22 [ 755.076579][T20431] netlink: 'syz.2.3844': attribute type 2 has an invalid length. [ 755.082087][T20431] netlink: 'syz.2.3844': attribute type 8 has an invalid length. [ 755.094533][T20431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3844'. [ 755.307975][T20441] : entered promiscuous mode [ 755.937563][T20452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3850'. [ 756.059408][T20456] Invalid source name [ 756.060647][T20456] UBIFS error (pid: 20456): cannot open "./file0", error -22 [ 756.075857][T20456] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3851'. [ 756.547858][T20466] Cannot find add_set index 3 as target [ 757.266156][T20473] validate_nla: 4 callbacks suppressed [ 757.266170][T20473] netlink: 'syz.1.3862': attribute type 2 has an invalid length. [ 757.269887][T20473] netlink: 'syz.1.3862': attribute type 8 has an invalid length. [ 757.271915][T20473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3862'. [ 758.117103][T20486] Invalid source name [ 758.118396][T20486] UBIFS error (pid: 20486): cannot open "./file0", error -22 [ 758.122817][T20486] netlink: 'syz.2.3858': attribute type 2 has an invalid length. [ 758.127489][T20486] netlink: 'syz.2.3858': attribute type 8 has an invalid length. [ 758.129807][T20486] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3858'. [ 758.184592][T20501] Invalid source name [ 758.185797][T20501] UBIFS error (pid: 20501): cannot open "./file0", error -22 [ 758.187919][T20501] netlink: 'syz.1.3864': attribute type 2 has an invalid length. [ 758.192364][T20501] netlink: 'syz.1.3864': attribute type 8 has an invalid length. [ 758.194559][T20501] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3864'. [ 758.319971][T20502] Invalid source name [ 758.321274][T20502] UBIFS error (pid: 20502): cannot open "./file0", error -22 [ 758.627581][T20517] Invalid source name [ 758.631188][T20517] UBIFS error (pid: 20517): cannot open "./file0", error -22 [ 758.732491][T20517] netlink: 'syz.1.3868': attribute type 2 has an invalid length. [ 758.736744][T20517] netlink: 'syz.1.3868': attribute type 8 has an invalid length. [ 758.738939][T20517] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3868'. [ 759.195314][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 759.197322][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 759.660558][ T70] libceph: connect (1)[c::]:6789 error -101 [ 759.662444][ T70] libceph: mon0 (1)[c::]:6789 connect error [ 759.827799][T20526] ceph: No mds server is up or the cluster is laggy [ 760.006315][T20549] Invalid source name [ 760.008212][T20549] UBIFS error (pid: 20549): cannot open "./file0", error -22 [ 760.060993][T20549] netlink: 'syz.2.3875': attribute type 2 has an invalid length. [ 760.065449][T20549] netlink: 'syz.2.3875': attribute type 8 has an invalid length. [ 760.067674][T20549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3875'. [ 760.161099][T20555] bridge0: port 3(vlan2) entered blocking state [ 760.162988][T20555] bridge0: port 3(vlan2) entered disabled state [ 760.164999][T20555] vlan2: entered allmulticast mode [ 760.183591][T20555] vlan2: left allmulticast mode [ 760.619438][T20560] netlink: 1080 bytes leftover after parsing attributes in process `syz.0.3879'. [ 760.622428][T20560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3879'. [ 761.051701][T20569] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.3882'. [ 762.087042][T20591] Invalid source name [ 762.088683][T20591] UBIFS error (pid: 20591): cannot open "./file0", error -22 [ 762.261661][T20594] support for the xor transformation has been removed. [ 762.867048][T20602] Invalid source name [ 762.868455][T20602] UBIFS error (pid: 20602): cannot open "./file0", error -22 [ 763.027871][T20606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 763.032255][T20606] IPv6: NLM_F_CREATE should be set when creating new route [ 763.391040][T20612] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.3894'. [ 763.558569][T20615] netlink: 'syz.1.3895': attribute type 2 has an invalid length. [ 763.560924][T20615] netlink: 'syz.1.3895': attribute type 8 has an invalid length. [ 763.563151][T20615] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3895'. [ 763.773273][T20628] Invalid source name [ 763.775232][T20628] UBIFS error (pid: 20628): cannot open "./file0", error -22 [ 763.993838][T20636] Invalid source name [ 763.997518][T20636] UBIFS error (pid: 20636): cannot open "./file0", error -22 [ 764.681062][T20648] netlink: 'syz.1.3904': attribute type 2 has an invalid length. [ 764.685478][T20648] netlink: 'syz.1.3904': attribute type 8 has an invalid length. [ 764.687694][T20648] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3904'. [ 764.735949][T20650] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.3905'. [ 764.738984][T20650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3905'. [ 764.830420][T20656] netlink: 'syz.2.3908': attribute type 1 has an invalid length. [ 764.832741][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3908'. [ 765.240500][T20670] Invalid source name [ 765.241780][T20670] UBIFS error (pid: 20670): cannot open "./file0", error -22 [ 765.252387][T20670] netlink: 'syz.0.3910': attribute type 2 has an invalid length. [ 765.256905][T20670] netlink: 'syz.0.3910': attribute type 8 has an invalid length. [ 765.259410][T20670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3910'. [ 765.304941][T20675] Invalid source name [ 765.306155][T20675] UBIFS error (pid: 20675): cannot open "./file0", error -22 [ 766.737848][T20711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3927'. [ 766.748743][T20711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3927'. [ 766.818397][T20720] Invalid source name [ 766.819632][T20720] UBIFS error (pid: 20720): cannot open "./file0", error -22 [ 766.936710][T20731] netlink: 1080 bytes leftover after parsing attributes in process `syz.2.3930'. [ 767.822014][T20746] netlink: 'syz.1.3938': attribute type 2 has an invalid length. [ 767.824336][T20746] netlink: 'syz.1.3938': attribute type 8 has an invalid length. [ 767.988991][T20750] fuse: Unknown parameter 'fBb^^¯ÜÐÒÕ¦ÐÎ׋0‚4(`kdd6§peá÷ðÒ` }©‘ìJ;ÃO‡ÉÛ5ŽË°STµÐ9JI0x0000000000000003' [ 768.541766][T20766] Invalid source name [ 768.543275][T20766] UBIFS error (pid: 20766): cannot open "./file0", error -22 [ 768.549668][T20766] netlink: 'syz.0.3945': attribute type 2 has an invalid length. [ 769.151637][T20769] 9pnet_fd: Insufficient options for proto=fd [ 769.421235][T20779] validate_nla: 1 callbacks suppressed [ 769.421246][T20779] netlink: 'syz.1.3950': attribute type 2 has an invalid length. [ 769.425196][T20779] netlink: 'syz.1.3950': attribute type 8 has an invalid length. [ 769.427405][T20779] __nla_validate_parse: 5 callbacks suppressed [ 769.427413][T20779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3950'. [ 769.742962][T20791] netlink: 'syz.1.3955': attribute type 2 has an invalid length. [ 769.745521][T20791] netlink: 'syz.1.3955': attribute type 8 has an invalid length. [ 769.748454][T20791] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3955'. [ 769.778607][T20793] fuse: Bad value for 'rootmode' [ 770.068984][T20802] 9pnet_fd: Insufficient options for proto=fd [ 770.082067][T20805] Invalid source name [ 770.083240][T20805] UBIFS error (pid: 20805): cannot open "./file0", error -22 [ 770.089963][T20805] netlink: 'syz.1.3959': attribute type 2 has an invalid length. [ 770.094354][T20805] netlink: 'syz.1.3959': attribute type 8 has an invalid length. [ 770.096697][T20805] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3959'. [ 770.179131][T20811] Invalid source name [ 770.180607][T20811] UBIFS error (pid: 20811): cannot open "./file0", error -22 [ 770.187984][T20811] netlink: 'syz.1.3962': attribute type 2 has an invalid length. [ 770.192347][T20811] netlink: 'syz.1.3962': attribute type 8 has an invalid length. [ 770.194440][T20811] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3962'. [ 770.383728][T20819] netlink: 'syz.2.3964': attribute type 2 has an invalid length. [ 770.386084][T20819] netlink: 'syz.2.3964': attribute type 8 has an invalid length. [ 770.388344][T20819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3964'. [ 771.089086][T20829] netlink: 1080 bytes leftover after parsing attributes in process `syz.0.3966'. [ 771.160305][T20834] Invalid source name [ 771.161652][T20834] UBIFS error (pid: 20834): cannot open "./file0", error -22 [ 771.162582][T20834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3970'. [ 771.990933][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3974'. [ 772.310532][T20856] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3975'. [ 773.124490][T20877] Invalid source name [ 773.126292][T20877] UBIFS error (pid: 20877): cannot open "./file0", error -22 [ 773.127891][T20877] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3979'. [ 773.653940][T20888] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 773.722567][ T39] audit: type=1326 audit(1736784058.177:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.1.3985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 773.729063][ T39] audit: type=1326 audit(1736784058.177:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.1.3985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 773.735385][ T39] audit: type=1326 audit(1736784058.177:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.1.3985" exe="/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 773.741667][ T39] audit: type=1326 audit(1736784058.177:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.1.3985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 773.748129][ T39] audit: type=1326 audit(1736784058.177:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.1.3985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 773.755001][ T39] audit: type=1326 audit(1736784058.177:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.1.3985" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 773.761243][ T39] audit: type=1326 audit(1736784058.177:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.1.3985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 773.769674][ T39] audit: type=1326 audit(1736784058.177:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.1.3985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 773.776001][ T39] audit: type=1326 audit(1736784058.177:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.1.3985" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 773.782476][ T39] audit: type=1326 audit(1736784058.177:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.1.3985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 773.963333][T20896] 9pnet_fd: Insufficient options for proto=fd [ 774.680089][T20918] input: syz1 as /devices/virtual/input/input40 [ 774.814392][T20924] Invalid source name [ 774.815672][T20924] UBIFS error (pid: 20924): cannot open "./file0", error -22 [ 774.816936][T20924] validate_nla: 8 callbacks suppressed [ 774.817009][T20924] netlink: 'syz.0.3996': attribute type 2 has an invalid length. [ 774.823025][T20924] netlink: 'syz.0.3996': attribute type 8 has an invalid length. [ 774.825500][T20924] __nla_validate_parse: 3 callbacks suppressed [ 774.825622][T20924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3996'. [ 775.848193][T20937] 9pnet_fd: Insufficient options for proto=fd [ 776.016776][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880121f2800: rx timeout, send abort [ 776.019381][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880121f2800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 776.026292][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880121f1800: rx timeout, send abort [ 776.030476][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880121f1800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 776.253751][T20960] Invalid source name [ 776.255371][T20960] UBIFS error (pid: 20960): cannot open "./file0", error -22 [ 776.257471][T20960] netlink: 'syz.2.4008': attribute type 2 has an invalid length. [ 776.261970][T20960] netlink: 'syz.2.4008': attribute type 8 has an invalid length. [ 776.264685][T20960] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4008'. [ 776.307063][T20961] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 776.795158][T20965] FAULT_INJECTION: forcing a failure. [ 776.795158][T20965] name failslab, interval 1, probability 0, space 0, times 0 [ 776.799798][T20965] CPU: 2 UID: 0 PID: 20965 Comm: syz.0.4009 Not tainted 6.13.0-rc7-syzkaller #0 [ 776.802326][T20965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 776.805377][T20965] Call Trace: [ 776.806333][T20965] [ 776.807196][T20965] dump_stack_lvl+0x16c/0x1f0 [ 776.808560][T20965] should_fail_ex+0x497/0x5b0 [ 776.809919][T20965] ? fs_reclaim_acquire+0xae/0x150 [ 776.811373][T20965] should_failslab+0xc2/0x120 [ 776.812739][T20965] __kmalloc_cache_noprof+0x68/0x420 [ 776.814234][T20965] cfg80211_sinfo_alloc_tid_stats+0x8b/0x150 [ 776.815905][T20965] sta_set_sinfo+0x228f/0x4400 [ 776.817255][T20965] ? kasan_save_track+0x14/0x30 [ 776.818612][T20965] __sta_info_destroy_part2+0x2da/0x540 [ 776.820150][T20965] __sta_info_flush+0x50a/0x730 [ 776.821518][T20965] ? __pfx___sta_info_flush+0x10/0x10 [ 776.823003][T20965] ? lockdep_hardirqs_on+0x7c/0x110 [ 776.824428][T20965] ? cfg80211_put_bss+0x1b4/0x280 [ 776.825862][T20965] ? __local_bh_enable_ip+0xa4/0x120 [ 776.827367][T20965] ieee80211_ibss_disconnect+0x15c/0x8f0 [ 776.828979][T20965] ieee80211_ibss_leave+0x16/0x160 [ 776.830421][T20965] cfg80211_leave_ibss+0x1b4/0x490 [ 776.831851][T20965] cfg80211_change_iface+0x422/0xda0 [ 776.833330][T20965] nl80211_set_interface+0x7f2/0xb70 [ 776.834818][T20965] ? __pfx_nl80211_set_interface+0x10/0x10 [ 776.836466][T20965] ? nl80211_pre_doit+0x71e/0xb10 [ 776.837900][T20965] ? nl80211_pre_doit+0x1b0/0xb10 [ 776.839336][T20965] genl_family_rcv_msg_doit+0x202/0x2f0 [ 776.840906][T20965] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 776.842601][T20965] ? genl_get_cmd+0x195/0x580 [ 776.843922][T20965] ? bpf_lsm_capable+0x9/0x10 [ 776.845238][T20965] ? security_capable+0x7e/0x260 [ 776.846628][T20965] ? ns_capable+0xd7/0x110 [ 776.847872][T20965] genl_rcv_msg+0x565/0x800 [ 776.849187][T20965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 776.850632][T20965] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 776.852120][T20965] ? __pfx_nl80211_set_interface+0x10/0x10 [ 776.853749][T20965] ? __pfx_nl80211_post_doit+0x10/0x10 [ 776.855276][T20965] netlink_rcv_skb+0x165/0x410 [ 776.856626][T20965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 776.858015][T20965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 776.859530][T20965] ? down_read+0xc9/0x330 [ 776.860777][T20965] ? __pfx_down_read+0x10/0x10 [ 776.862148][T20965] ? netlink_deliver_tap+0x1ae/0xca0 [ 776.863638][T20965] genl_rcv+0x28/0x40 [ 776.864790][T20965] netlink_unicast+0x53c/0x7f0 [ 776.866160][T20965] ? __pfx_netlink_unicast+0x10/0x10 [ 776.867677][T20965] ? __phys_addr_symbol+0x30/0x80 [ 776.869115][T20965] ? __check_object_size+0x488/0x710 [ 776.870602][T20965] netlink_sendmsg+0x8b8/0xd70 [ 776.871952][T20965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 776.873416][T20965] ____sys_sendmsg+0x9ae/0xb40 [ 776.874758][T20965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 776.876237][T20965] ? get_compat_msghdr+0x11b/0x170 [ 776.877639][T20965] ___sys_sendmsg+0x135/0x1e0 [ 776.878977][T20965] ? __pfx____sys_sendmsg+0x10/0x10 [ 776.880460][T20965] ? __pfx_lock_release+0x10/0x10 [ 776.881856][T20965] ? trace_lock_acquire+0x14e/0x1f0 [ 776.883310][T20965] ? __fget_files+0x206/0x3a0 [ 776.884628][T20965] __sys_sendmsg+0x16e/0x220 [ 776.885922][T20965] ? __pfx___sys_sendmsg+0x10/0x10 [ 776.887353][T20965] __do_fast_syscall_32+0x73/0x120 [ 776.888798][T20965] do_fast_syscall_32+0x32/0x80 [ 776.890147][T20965] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.891846][T20965] RIP: 0023:0xf7ff3579 [ 776.892995][T20965] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 776.898225][T20965] RSP: 002b:00000000f514655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 776.900516][T20965] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000100 [ 776.902660][T20965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 776.904813][T20965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 776.906987][T20965] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 776.909146][T20965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 776.911282][T20965] [ 777.066870][ T6017] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 777.105479][T20971] netlink: 'syz.0.4011': attribute type 2 has an invalid length. [ 777.107794][T20971] netlink: 'syz.0.4011': attribute type 8 has an invalid length. [ 777.110083][T20971] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4011'. [ 777.222728][ T6017] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 777.225271][ T6017] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 777.228139][ T6017] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 777.230634][ T6017] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 777.236962][ T6017] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 777.241224][ T6017] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 777.244351][ T6017] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 777.246610][ T6017] usb 9-1: Product: syz [ 777.247804][ T6017] usb 9-1: Manufacturer: syz [ 777.253785][ T6017] cdc_wdm 9-1:1.0: skipping garbage [ 777.255777][ T6017] cdc_wdm 9-1:1.0: skipping garbage [ 777.257658][ T6017] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 777.259877][ T6017] cdc_wdm 9-1:1.0: Unknown control protocol [ 777.474653][ T2293] usb 9-1: USB disconnect, device number 9 [ 778.169759][ T5977] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 778.332073][ T5977] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 778.335549][ T5977] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 778.339609][ T5977] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 778.348224][ T5977] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 778.352758][ T5977] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 778.362565][ T5977] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 778.366436][ T5977] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 778.369637][ T5977] usb 9-1: Product: syz [ 778.371307][ T5977] usb 9-1: Manufacturer: syz [ 778.377559][ T5977] cdc_wdm 9-1:1.0: skipping garbage [ 778.379684][ T5977] cdc_wdm 9-1:1.0: skipping garbage [ 778.383068][ T5977] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 778.385441][ T5977] cdc_wdm 9-1:1.0: Unknown control protocol [ 778.468998][T21003] Invalid source name [ 778.470677][T21003] UBIFS error (pid: 21003): cannot open "./file0", error -22 [ 778.479768][T21003] netlink: 'syz.1.4020': attribute type 2 has an invalid length. [ 778.485622][T21003] netlink: 'syz.1.4020': attribute type 8 has an invalid length. [ 778.488569][T21003] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4020'. [ 778.593726][T21008] netlink: 'syz.1.4021': attribute type 4 has an invalid length. [ 778.604634][T21008] netlink: 'syz.1.4021': attribute type 4 has an invalid length. [ 778.971827][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 778.973493][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 778.975388][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 778.977055][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 778.979162][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 778.981095][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 778.982787][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 778.984523][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 778.986489][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 778.988569][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 778.990513][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 778.992636][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 778.994763][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 778.996609][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 778.998338][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 778.999924][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.001669][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.003276][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.004968][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.006571][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.008273][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.009928][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.011661][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.013294][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.015052][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.016724][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.018440][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.020024][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.021761][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.023343][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.025099][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.026725][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.028449][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.030059][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.031776][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.033383][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.035124][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.036760][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.038462][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.040097][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.041795][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.043390][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.045113][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.046820][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.048693][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.050445][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.052075][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.053810][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.055576][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.057471][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.059088][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.060829][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.062466][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.064409][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.066076][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.067836][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.069464][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.071198][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.072831][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.074592][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.076318][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.078052][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.079667][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.081418][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.083031][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.084754][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.086710][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.088871][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.090866][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.093071][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.095126][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.097368][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.099194][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.100836][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.102579][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.104199][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.105990][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.107641][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.109633][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.111238][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.112978][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.114542][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.117369][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.120198][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.121969][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.123573][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.127029][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.130913][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.133008][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.134979][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.136774][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.138719][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.140683][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.142484][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.144532][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.146599][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.148727][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.150392][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.152323][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.154384][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.156679][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.158745][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.160883][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.162809][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.164931][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.166689][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.169360][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.171356][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.173148][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.175248][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.177417][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.179591][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.181675][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.184089][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.186356][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.188410][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.190640][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.192317][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.194514][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.196354][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.197951][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.199691][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.201316][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.203032][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.204647][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.206686][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.208751][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.210587][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.212344][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.214125][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.216043][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.218081][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.220039][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.222280][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.224572][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.226329][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.228089][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.229689][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.231425][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.233187][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.234953][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.236600][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.238341][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.239936][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.241758][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.243675][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.245864][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.247823][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.249944][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.252172][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.254258][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.255994][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.257648][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.259859][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.262151][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.264304][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.266868][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.269154][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.270759][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.273626][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.275840][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.277943][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.279920][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.282154][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.284264][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.286375][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.288013][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.290295][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.292517][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.294467][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.296222][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.298009][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.299629][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.301394][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.303004][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.304722][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.306328][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.308093][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.310112][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.312350][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.314418][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.316630][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.318744][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.320948][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.323005][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.324824][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.327016][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.329149][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.331351][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.333305][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.335559][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.337362][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.339447][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.341765][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.343383][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.345549][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.347588][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.349717][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.351863][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.353647][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.355661][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.357572][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.359760][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.361963][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.364245][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.366453][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.368704][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.370886][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.373150][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.375552][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.377699][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.379794][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.381652][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.383818][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.385935][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.388168][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.390277][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.392529][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.394239][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.396034][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.397674][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.399444][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.401092][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.402848][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.404516][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.406287][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.407907][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.409710][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.411342][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.413113][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.414757][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.416535][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.418172][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.419989][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.421623][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.423370][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.425001][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.426763][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.428408][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.430211][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.431852][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.433632][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.435667][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.437873][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.440177][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.442262][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.444022][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.445649][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.447377][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.449367][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.451130][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.453228][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.455158][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.457226][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.459512][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.461579][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.463279][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.465528][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.467603][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.469582][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.471465][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.473372][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.474964][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.476669][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.478536][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.480616][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.483044][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.485313][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.487314][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.489543][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.491647][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.493892][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.496010][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.500239][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.502363][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.504261][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.506346][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.508644][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.510750][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.512511][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.514123][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.515921][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.517584][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.519337][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.520985][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.522850][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.524461][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.526206][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.527831][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.529586][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.531207][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.532969][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.534760][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.536673][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.538605][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.540560][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.542199][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.544015][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.545631][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.547356][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.548997][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.550714][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.552378][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.554136][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.555790][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.557548][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.559188][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.560874][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.562455][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.564215][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.565797][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.567537][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.569117][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.570801][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.572380][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.574063][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.575630][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.577393][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.579142][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.580717][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.582417][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.583993][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.585695][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.587467][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.589204][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.594120][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.600222][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.602114][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.603973][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.605696][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.607450][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.609327][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.611009][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.612719][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.614282][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.616000][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.617564][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.619371][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.621174][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.622988][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.624752][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.626532][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.628409][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.630255][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.632051][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.633657][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.635447][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.637083][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.638852][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.640449][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.642191][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.643761][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.645485][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.647043][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.648733][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.650294][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.651987][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.653692][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.655809][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.657537][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.659107][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.660815][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.662447][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.664198][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.665935][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.667986][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.674480][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.679053][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.686805][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.688974][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.690868][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.692683][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.694543][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.696272][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.697870][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.699580][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.701437][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.703131][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.704857][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.706560][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.708324][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.710048][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.711746][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.713479][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.715224][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.717018][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.718737][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.720478][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.722494][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.724297][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.726118][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.727675][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.729805][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.732155][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.734266][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.736528][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.738820][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.741236][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.743739][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.745904][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.748077][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.750329][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.752439][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.754600][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.756578][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.758289][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.759871][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.761613][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.763237][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.764960][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.766554][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.768267][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.769874][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.771579][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.773167][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.774871][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.776444][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.778161][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.779816][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.781523][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.783107][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.784866][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.786443][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.788152][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.789726][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.791488][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.793143][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.794853][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.796658][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.798538][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.800313][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.801919][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.803623][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.805487][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.807135][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.808738][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.810674][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.812361][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.814040][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.815591][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.817373][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.818920][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.820615][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.822175][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.823883][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.825574][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.827096][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.828787][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.830306][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.831979][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.833508][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.835167][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.836757][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.838419][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.839983][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.841642][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.843337][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.845778][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.847787][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.849882][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.851910][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.853884][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.855660][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.857363][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.858946][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.860655][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.862370][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.864140][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.865905][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.867862][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.870051][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.871578][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.873407][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.875023][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.876936][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.879035][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.881034][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.883144][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.885065][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.887281][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.889377][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.891307][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.893387][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.895305][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.897117][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.898978][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.900699][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.902355][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.904185][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.905795][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.907536][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.909271][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.911309][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.913574][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.915798][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.917778][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.919818][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.921616][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.923391][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.924974][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.926641][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.928192][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.929908][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.931586][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.933348][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.934956][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.936712][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.938305][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.940093][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.941799][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.943372][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.945118][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.946668][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.948410][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.950011][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.951746][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.953327][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.954996][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.956739][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.958306][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.960039][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.961846][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.963709][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.965466][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.967210][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.969012][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.971595][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.973474][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.975063][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.976773][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.978401][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.980208][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.981813][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.983511][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.985269][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.986835][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.988555][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.990354][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.991936][ C2] cdc_wdm 9-1:1.0: Cannot schedule work [ 779.993667][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.995478][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.997266][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 779.999048][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.000799][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.002595][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.004308][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.006010][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.007733][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.009440][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.011143][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.012892][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.014978][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.016737][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.018456][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.020266][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.022047][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.023794][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.025499][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.027231][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.029131][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.030859][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.032604][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.034388][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.036166][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.037922][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.039657][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.041403][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.043158][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.044949][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.046693][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.048448][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.050238][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.051976][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.053716][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.055504][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.057418][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.059185][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.060945][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.062666][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.064417][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.066185][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.067940][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.069671][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.071454][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.073239][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.074973][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.076730][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.078462][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.080192][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.081934][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.083665][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.085414][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.087162][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.088943][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.090728][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.092459][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.094215][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.096009][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.097816][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.099642][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.100577][T21036] FAULT_INJECTION: forcing a failure. [ 780.100577][T21036] name failslab, interval 1, probability 0, space 0, times 0 [ 780.101368][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.104941][T21036] CPU: 1 UID: 0 PID: 21036 Comm: syz.0.4026 Not tainted 6.13.0-rc7-syzkaller #0 [ 780.106668][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.109231][T21036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 780.110958][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.114116][T21036] Call Trace: [ 780.115845][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.116682][T21036] [ 780.118397][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.119091][T21036] dump_stack_lvl+0x16c/0x1f0 [ 780.120842][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.122491][T21036] should_fail_ex+0x497/0x5b0 [ 780.124210][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.125393][T21036] should_failslab+0xc2/0x120 [ 780.127096][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.128338][T21036] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 780.130059][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.132098][T21036] ? __lock_acquire+0xcc5/0x3c40 [ 780.133854][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.135269][T21036] ? __alloc_skb+0x2b3/0x380 [ 780.137045][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.138370][T21036] __alloc_skb+0x2b3/0x380 [ 780.140246][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.141515][T21036] ? __pfx___alloc_skb+0x10/0x10 [ 780.143285][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.144777][T21036] _sctp_make_chunk+0x51/0x270 [ 780.146518][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.147759][T21036] sctp_make_control+0x2f/0x2d0 [ 780.149532][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.150804][T21036] sctp_make_shutdown+0xb7/0x1d0 [ 780.152570][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.154362][T21036] ? __pfx_sctp_make_shutdown+0x10/0x10 [ 780.156164][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.157619][T21036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 780.159349][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.160910][T21036] sctp_sf_do_9_2_start_shutdown+0x27/0x490 [ 780.162669][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.164382][T21036] sctp_sf_do_9_2_prm_shutdown+0x11c/0x150 [ 780.166127][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.167711][T21036] ? __pfx_sctp_pname+0x10/0x10 [ 780.169928][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.170729][T21036] sctp_do_sm+0x17f/0x5c90 [ 780.172543][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.173692][T21036] ? __pfx_lock_release+0x10/0x10 [ 780.175441][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.177110][T21036] ? trace_lock_acquire+0x14e/0x1f0 [ 780.178832][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.180150][T21036] ? __pfx_sctp_do_sm+0x10/0x10 [ 780.181896][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.183157][T21036] ? inet_shutdown+0x67/0x440 [ 780.185051][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.186338][T21036] ? __pfx_lock_release+0x10/0x10 [ 780.188055][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.189375][T21036] sctp_primitive_SHUTDOWN+0x9f/0xd0 [ 780.191155][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.192495][T21036] sctp_shutdown+0x137/0x180 [ 780.194225][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.195656][T21036] ? __pfx_sctp_shutdown+0x10/0x10 [ 780.197526][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.198855][T21036] inet_shutdown+0x1a2/0x440 [ 780.200611][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.201761][T21036] __sys_shutdown+0x113/0x1a0 [ 780.203482][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.204723][T21036] __ia32_sys_shutdown+0x53/0x80 [ 780.206437][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.208201][T21036] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 780.209967][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.211998][T21036] __do_fast_syscall_32+0x73/0x120 [ 780.213703][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.215033][T21036] do_fast_syscall_32+0x32/0x80 [ 780.216807][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.218235][T21036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 780.220012][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.221796][T21036] RIP: 0023:0xf7ff3579 [ 780.223558][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.224589][T21036] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 780.226345][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.232530][T21036] RSP: 002b:00000000f510455c EFLAGS: 00000296 [ 780.234262][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.234447][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.235989][T21036] ORIG_RAX: 0000000000000175 [ 780.237698][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.239051][T21036] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000001 [ 780.240547][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.241993][T21036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 780.244326][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.246315][T21036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 780.252601][T21036] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 780.255490][T21036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 780.257617][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.257854][T21036] [ 780.259705][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.260370][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.262062][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.264112][T21036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4026'. [ 780.265308][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.269491][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.271360][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.273142][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.274912][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.276617][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.278326][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.280071][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.281864][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.283639][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.285364][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.287071][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.288779][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.290524][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.292269][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.293967][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.295677][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.297379][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.299134][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.300900][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.302577][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.304288][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.305990][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.311407][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.315967][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.317790][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.319556][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.321301][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.323147][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.324923][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.326672][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.328412][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.330182][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.331940][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.333741][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.335505][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.337273][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.339028][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.340814][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.342868][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.345143][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.347379][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.349395][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.351177][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.352978][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.354787][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.356740][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.358517][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.360307][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.362054][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.363845][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.365645][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.367415][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.369191][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.370930][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.372729][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.374500][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.376308][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.378074][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.379877][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.381643][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.383416][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.385190][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.386939][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.388658][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.390464][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.392255][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.394047][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.395788][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.397561][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.399312][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.401052][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.402819][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.404577][ C2] cdc_wdm 9-1:1.0: Stall on int endpoint [ 780.406191][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 780.411105][ T6017] usb 9-1: USB disconnect, device number 10 [ 780.761049][T21055] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.4032'. [ 780.907726][T21061] netlink: 1080 bytes leftover after parsing attributes in process `syz.0.4033'. [ 781.247449][T21067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4034'. [ 781.875004][T21086] netlink: 1080 bytes leftover after parsing attributes in process `syz.4.4043'. [ 781.894892][T21092] FAULT_INJECTION: forcing a failure. [ 781.894892][T21092] name failslab, interval 1, probability 0, space 0, times 0 [ 781.898754][T21092] CPU: 1 UID: 0 PID: 21092 Comm: syz.2.4045 Not tainted 6.13.0-rc7-syzkaller #0 [ 781.901280][T21092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 781.904294][T21092] Call Trace: [ 781.905248][T21092] [ 781.906108][T21092] dump_stack_lvl+0x16c/0x1f0 [ 781.907457][T21092] should_fail_ex+0x497/0x5b0 [ 781.908825][T21092] should_failslab+0xc2/0x120 [ 781.910202][T21092] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 781.911727][T21092] ? trace_lock_acquire+0x14e/0x1f0 [ 781.913219][T21092] ? skb_clone+0x190/0x3f0 [ 781.914506][T21092] skb_clone+0x190/0x3f0 [ 781.915726][T21092] dev_queue_xmit_nit+0x38f/0xbc0 [ 781.917157][T21092] dev_hard_start_xmit+0x283/0x7b0 [ 781.918606][T21092] __dev_queue_xmit+0x7f0/0x43e0 [ 781.920018][T21092] ? __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 781.921601][T21092] ? __do_fast_syscall_32+0x73/0x120 [ 781.923101][T21092] ? do_fast_syscall_32+0x32/0x80 [ 781.924541][T21092] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 781.926355][T21092] ? __pfx___dev_queue_xmit+0x10/0x10 [ 781.927917][T21092] ? rcu_is_watching+0x12/0xc0 [ 781.929653][T21092] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 781.931348][T21092] ? kmem_cache_alloc_noprof+0x21b/0x3b0 [ 781.933011][T21092] ? __copy_skb_header+0x2e8/0x5b0 [ 781.934949][T21092] ? __skb_clone+0x570/0x760 [ 781.936713][T21092] netlink_deliver_tap+0xa61/0xca0 [ 781.938234][T21092] netlink_broadcast_filtered+0x92d/0xef0 [ 781.939857][T21092] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 781.941617][T21092] ? nla_put+0x188/0x1e0 [ 781.942839][T21092] xfrm_send_acquire+0x80d/0xc60 [ 781.944247][T21092] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 781.945765][T21092] ? trace_lock_acquire+0x14e/0x1f0 [ 781.947245][T21092] ? lock_acquire+0x2f/0xb0 [ 781.948538][T21092] ? km_query+0x43/0x260 [ 781.949742][T21092] km_query+0xb1/0x260 [ 781.950922][T21092] xfrm_state_find+0x3aab/0x7cf0 [ 781.952321][T21092] ? __pfx_find_match+0x10/0x10 [ 781.953691][T21092] ? __pfx_xfrm_state_find+0x10/0x10 [ 781.955203][T21092] ? __pfx___find_rr_leaf+0x10/0x10 [ 781.956648][T21092] ? hlock_class+0x4e/0x130 [ 781.957929][T21092] ? mark_lock+0xb5/0xc60 [ 781.959164][T21092] ? __pfx_mark_lock+0x10/0x10 [ 781.960566][T21092] ? rcu_is_watching+0x12/0xc0 [ 781.961921][T21092] xfrm_tmpl_resolve_one+0x288/0xa70 [ 781.963405][T21092] ? __pfx_xfrm_tmpl_resolve_one+0x10/0x10 [ 781.965075][T21092] ? __pfx___lock_acquire+0x10/0x10 [ 781.966537][T21092] xfrm_tmpl_resolve+0x1fd/0x3f0 [ 781.967953][T21092] ? __pfx_xfrm_tmpl_resolve+0x10/0x10 [ 781.969526][T21092] ? find_held_lock+0x2d/0x110 [ 781.970852][T21092] ? xfrm_sk_policy_lookup+0x4dd/0x730 [ 781.972379][T21092] ? __pfx_lock_release+0x10/0x10 [ 781.973802][T21092] ? trace_lock_acquire+0x14e/0x1f0 [ 781.975283][T21092] xfrm_resolve_and_create_bundle+0x104/0x410 [ 781.977013][T21092] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 781.978854][T21092] ? xfrm_expand_policies.constprop.0+0x250/0x6a0 [ 781.980649][T21092] xfrm_lookup_with_ifid+0x2b0/0x1f40 [ 781.982153][T21092] ? ip6_dst_lookup_tail.constprop.0+0x1d6/0x2150 [ 781.983913][T21092] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 781.985905][T21092] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 781.987918][T21092] ? find_held_lock+0x2d/0x110 [ 781.989310][T21092] xfrm_lookup_route+0x3b/0x200 [ 781.990694][T21092] ip6_dst_lookup_flow+0x15c/0x1d0 [ 781.992159][T21092] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 781.993774][T21092] rawv6_sendmsg+0xd37/0x4450 [ 781.995087][T21092] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 781.997097][T21092] ? hlock_class+0x4e/0x130 [ 781.998917][T21092] ? __pfx___might_resched+0x10/0x10 [ 782.000988][T21092] ? __pfx_aa_sk_perm+0x10/0x10 [ 782.002890][T21092] ? __import_iovec+0x1f2/0x6d0 [ 782.004784][T21092] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 782.006527][T21092] ? inet_sendmsg+0x119/0x140 [ 782.008241][T21092] inet_sendmsg+0x119/0x140 [ 782.009653][T21092] ____sys_sendmsg+0x907/0xb40 [ 782.010999][T21092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 782.012532][T21092] ? get_compat_msghdr+0x11b/0x170 [ 782.014012][T21092] ___sys_sendmsg+0x135/0x1e0 [ 782.015371][T21092] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.016886][T21092] ? trace_lock_acquire+0x14e/0x1f0 [ 782.018377][T21092] __sys_sendmmsg+0x2fa/0x420 [ 782.019752][T21092] ? __pfx___sys_sendmmsg+0x10/0x10 [ 782.021176][T21092] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 782.022862][T21092] ? fput+0x67/0x440 [ 782.024008][T21092] ? ksys_write+0x1ba/0x250 [ 782.025301][T21092] ? __pfx_ksys_write+0x10/0x10 [ 782.026700][T21092] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 782.028304][T21092] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 782.030200][T21092] __do_fast_syscall_32+0x73/0x120 [ 782.031673][T21092] do_fast_syscall_32+0x32/0x80 [ 782.033115][T21092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 782.034936][T21092] RIP: 0023:0xf70ee579 [ 782.036119][T21092] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 782.041538][T21092] RSP: 002b:00000000f50e055c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 782.043885][T21092] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000480 [ 782.046202][T21092] RDX: 00000000000002e9 RSI: 0000000000000000 RDI: 0000000000000000 [ 782.048328][T21092] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 782.050525][T21092] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 782.052725][T21092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 782.054940][T21092] [ 782.055853][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.853653][T20036] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 783.857746][T20036] CPU: 2 UID: 0 PID: 20036 Comm: kworker/u33:3 Not tainted 6.13.0-rc7-syzkaller #0 [ 783.861525][T20036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 783.865910][T20036] Workqueue: hci0 hci_rx_work [ 783.867954][T20036] Call Trace: [ 783.869065][T20036] [ 783.870101][T20036] dump_stack_lvl+0x16c/0x1f0 [ 783.871998][T20036] sysfs_warn_dup+0x7f/0xa0 [ 783.873908][T20036] sysfs_create_dir_ns+0x24d/0x2b0 [ 783.876097][T20036] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 783.878434][T20036] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 783.880542][T20036] ? kobject_add_internal+0x12d/0x990 [ 783.882650][T20036] ? do_raw_spin_unlock+0x172/0x230 [ 783.884782][T20036] kobject_add_internal+0x2c8/0x990 [ 783.886932][T20036] kobject_add+0x16f/0x240 [ 783.888825][T20036] ? __pfx_kobject_add+0x10/0x10 [ 783.890877][T20036] ? class_to_subsys+0x3e/0x160 [ 783.892918][T20036] ? do_raw_spin_unlock+0x172/0x230 [ 783.895114][T20036] ? kobject_put+0xab/0x5a0 [ 783.896735][T20036] device_add+0x289/0x1a70 [ 783.898030][T20036] ? __pfx_dev_set_name+0x10/0x10 [ 783.899514][T20036] ? __pfx_device_add+0x10/0x10 [ 783.900944][T20036] ? mgmt_send_event_skb+0x2f2/0x460 [ 783.902475][T20036] hci_conn_add_sysfs+0x17e/0x230 [ 783.904028][T20036] le_conn_complete_evt+0xfce/0x1d10 [ 783.905558][T20036] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 783.907201][T20036] ? __mutex_lock+0x1cc/0xa60 [ 783.908598][T20036] hci_le_conn_complete_evt+0x23c/0x370 [ 783.910207][T20036] hci_le_meta_evt+0x2e2/0x5d0 [ 783.911600][T20036] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 783.913356][T20036] hci_event_packet+0x666/0x1190 [ 783.914807][T20036] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 783.916343][T20036] ? __pfx_hci_event_packet+0x10/0x10 [ 783.917893][T20036] ? mark_held_locks+0x9f/0xe0 [ 783.919290][T20036] ? kcov_remote_start+0x3cf/0x6e0 [ 783.920771][T20036] ? lockdep_hardirqs_on+0x7c/0x110 [ 783.922276][T20036] hci_rx_work+0x2c5/0x16b0 [ 783.923598][T20036] ? process_one_work+0x8bb/0x1b30 [ 783.923987][ T6017] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 783.925078][T20036] process_one_work+0x958/0x1b30 [ 783.925124][T20036] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 783.931131][T20036] ? __pfx_process_one_work+0x10/0x10 [ 783.932779][T20036] ? rcu_is_watching+0x12/0xc0 [ 783.934293][T20036] ? assign_work+0x1a0/0x250 [ 783.935791][T20036] worker_thread+0x6c8/0xf00 [ 783.937235][T20036] ? __kthread_parkme+0x148/0x220 [ 783.938841][T20036] ? __pfx_worker_thread+0x10/0x10 [ 783.940426][T20036] kthread+0x2c1/0x3a0 [ 783.941661][T20036] ? _raw_spin_unlock_irq+0x23/0x50 [ 783.943158][T20036] ? __pfx_kthread+0x10/0x10 [ 783.944524][T20036] ret_from_fork+0x45/0x80 [ 783.945824][T20036] ? __pfx_kthread+0x10/0x10 [ 783.947173][T20036] ret_from_fork_asm+0x1a/0x30 [ 783.948576][T20036] [ 783.950274][T20036] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 783.954159][T20036] Bluetooth: hci0: failed to register connection device [ 784.105044][ T6017] usb 7-1: Using ep0 maxpacket: 8 [ 784.108323][ T6017] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 784.110871][ T6017] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 784.114345][ T6017] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 784.118260][ T6017] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 784.122046][ T6017] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 784.126960][ T6017] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 784.129917][ T6017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.355672][ T6017] usb 7-1: usb_control_msg returned -32 [ 784.357951][ T6017] usbtmc 7-1:16.0: can't read capabilities [ 784.490852][T21137] Invalid source name [ 784.492733][T21137] UBIFS error (pid: 21137): cannot open "./file0", error -22 [ 784.497726][T21137] netlink: 'syz.0.4057': attribute type 2 has an invalid length. [ 784.502798][T21137] netlink: 'syz.0.4057': attribute type 8 has an invalid length. [ 784.505022][T21137] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4057'. [ 784.768014][T21140] netlink: 'syz.1.4058': attribute type 2 has an invalid length. [ 784.770334][T21140] netlink: 'syz.1.4058': attribute type 8 has an invalid length. [ 784.772471][T21140] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4058'. [ 785.121563][T21147] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.4067'. [ 785.242186][T21155] Cannot find add_set index 0 as target [ 785.451444][T21170] 9pnet_fd: Insufficient options for proto=fd [ 785.497855][T21174] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.4070'. [ 785.542220][T21172] netlink: 'syz.4.4068': attribute type 2 has an invalid length. [ 785.544823][T21172] netlink: 'syz.4.4068': attribute type 8 has an invalid length. [ 785.547226][T21172] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4068'. [ 786.185632][T21177] Invalid source name [ 786.186837][T21177] UBIFS error (pid: 21177): cannot open "./file0", error -22 [ 786.191074][T21177] netlink: 'syz.1.4071': attribute type 2 has an invalid length. [ 786.195557][T21177] netlink: 'syz.1.4071': attribute type 8 has an invalid length. [ 786.197806][T21177] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4071'. [ 786.240072][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 786.240391][ T39] audit: type=1326 audit(1736784069.917:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21180 comm="syz.0.4073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 786.251076][ T39] audit: type=1326 audit(1736784069.917:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21180 comm="syz.0.4073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 786.258489][ T39] audit: type=1326 audit(1736784069.927:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21180 comm="syz.0.4073" exe="/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 786.265374][ T39] audit: type=1326 audit(1736784069.927:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21180 comm="syz.0.4073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 786.271867][ T39] audit: type=1326 audit(1736784069.927:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21180 comm="syz.0.4073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 786.279708][ T39] audit: type=1326 audit(1736784069.927:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21180 comm="syz.0.4073" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 786.879737][ T6017] usb 7-1: USB disconnect, device number 31 [ 786.995637][T12171] kernel write not supported for file /snd/midiC2D0 (pid: 12171 comm: kworker/2:0) [ 787.178214][ T39] audit: type=1326 audit(1736784070.799:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21180 comm="syz.0.4073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 787.184423][ T39] audit: type=1326 audit(1736784070.799:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21180 comm="syz.0.4073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 787.498164][T21206] random: crng reseeded on system resumption [ 787.635198][T21209] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 788.685160][T20036] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 788.729738][T21229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4085'. [ 789.123169][T21245] Invalid source name [ 789.124526][T21245] UBIFS error (pid: 21245): cannot open "./file0", error -22 [ 789.140262][T21245] netlink: 'syz.2.4089': attribute type 2 has an invalid length. [ 789.145068][T21245] netlink: 'syz.2.4089': attribute type 8 has an invalid length. [ 789.147641][T21245] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4089'. [ 789.636881][T21262] netlink: 1080 bytes leftover after parsing attributes in process `syz.4.4098'. [ 790.051188][T21266] wg2: entered promiscuous mode [ 790.052907][T21266] wg2: entered allmulticast mode [ 790.213212][T21272] Invalid source name [ 790.214527][T21272] UBIFS error (pid: 21272): cannot open "./file0", error -22 [ 790.225689][T21272] netlink: 'syz.2.4101': attribute type 2 has an invalid length. [ 790.231493][T21272] netlink: 'syz.2.4101': attribute type 8 has an invalid length. [ 790.234809][T21272] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4101'. [ 790.312930][T20036] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 790.317619][T20036] CPU: 2 UID: 0 PID: 20036 Comm: kworker/u33:3 Not tainted 6.13.0-rc7-syzkaller #0 [ 790.321112][T20036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 790.325136][T20036] Workqueue: hci2 hci_rx_work [ 790.326929][T20036] Call Trace: [ 790.328202][T20036] [ 790.329331][T20036] dump_stack_lvl+0x16c/0x1f0 [ 790.330886][T20036] sysfs_warn_dup+0x7f/0xa0 [ 790.332174][T20036] sysfs_create_dir_ns+0x24d/0x2b0 [ 790.333642][T20036] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 790.335248][T20036] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 790.336797][T20036] ? kobject_add_internal+0x12d/0x990 [ 790.338308][T20036] ? do_raw_spin_unlock+0x172/0x230 [ 790.339808][T20036] kobject_add_internal+0x2c8/0x990 [ 790.341306][T20036] kobject_add+0x16f/0x240 [ 790.342558][T20036] ? __pfx_kobject_add+0x10/0x10 [ 790.344074][T20036] ? class_to_subsys+0x3e/0x160 [ 790.345542][T20036] ? do_raw_spin_unlock+0x172/0x230 [ 790.347005][T20036] ? kobject_put+0xab/0x5a0 [ 790.348308][T20036] device_add+0x289/0x1a70 [ 790.349591][T20036] ? __pfx_dev_set_name+0x10/0x10 [ 790.351007][T20036] ? __pfx_device_add+0x10/0x10 [ 790.352423][T20036] ? mgmt_send_event_skb+0x2f2/0x460 [ 790.353905][T20036] hci_conn_add_sysfs+0x17e/0x230 [ 790.355284][T20036] le_conn_complete_evt+0xfce/0x1d10 [ 790.356738][T20036] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 790.358343][T20036] ? __mutex_lock+0x1cc/0xa60 [ 790.359710][T20036] hci_le_conn_complete_evt+0x23c/0x370 [ 790.361462][T20036] hci_le_meta_evt+0x2e2/0x5d0 [ 790.362839][T20036] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 790.364574][T20036] hci_event_packet+0x666/0x1190 [ 790.365923][T20036] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 790.367354][T20036] ? __pfx_hci_event_packet+0x10/0x10 [ 790.368906][T20036] ? mark_held_locks+0x9f/0xe0 [ 790.370326][T20036] ? kcov_remote_start+0x3cf/0x6e0 [ 790.371804][T20036] ? lockdep_hardirqs_on+0x7c/0x110 [ 790.373315][T20036] hci_rx_work+0x2c5/0x16b0 [ 790.374647][T20036] ? process_one_work+0x8bb/0x1b30 [ 790.376126][T20036] process_one_work+0x958/0x1b30 [ 790.377459][T20036] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 790.379010][T20036] ? __pfx_process_one_work+0x10/0x10 [ 790.380579][T20036] ? rcu_is_watching+0x12/0xc0 [ 790.382522][T20036] ? assign_work+0x1a0/0x250 [ 790.384412][T20036] worker_thread+0x6c8/0xf00 [ 790.386305][T20036] ? __kthread_parkme+0x148/0x220 [ 790.388353][T20036] ? __pfx_worker_thread+0x10/0x10 [ 790.390440][T20036] kthread+0x2c1/0x3a0 [ 790.392113][T20036] ? _raw_spin_unlock_irq+0x23/0x50 [ 790.394198][T20036] ? __pfx_kthread+0x10/0x10 [ 790.396111][T20036] ret_from_fork+0x45/0x80 [ 790.397892][T20036] ? __pfx_kthread+0x10/0x10 [ 790.399784][T20036] ret_from_fork_asm+0x1a/0x30 [ 790.401741][T20036] [ 790.405081][T20036] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 790.410635][T20036] Bluetooth: hci2: failed to register connection device [ 791.140148][T21288] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 791.492265][T21294] Invalid source name [ 791.493467][T21294] UBIFS error (pid: 21294): cannot open "./file0", error -22 [ 791.511638][T21296] Attempt to restore checkpoint with obsolete wellknown handles [ 791.535721][T21294] netlink: 'syz.1.4108': attribute type 2 has an invalid length. [ 791.538062][T21294] netlink: 'syz.1.4108': attribute type 8 has an invalid length. [ 791.540418][T21294] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4108'. [ 792.480014][T20036] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 792.485906][T21303] [ 792.486647][T21303] ====================================================== [ 792.488659][T21303] WARNING: possible circular locking dependency detected [ 792.490662][T21303] 6.13.0-rc7-syzkaller #0 Not tainted [ 792.492783][T21303] ------------------------------------------------------ [ 792.496489][T21303] syz.0.4111/21303 is trying to acquire lock: [ 792.499405][T21303] ffff8880412d05d8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 792.502714][T21303] [ 792.502714][T21303] but task is already holding lock: [ 792.504805][T21303] ffff8880412d00a8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 792.507910][T21303] [ 792.507910][T21303] which lock already depends on the new lock. [ 792.507910][T21303] [ 792.510683][T21303] [ 792.510683][T21303] the existing dependency chain (in reverse order) is: [ 792.513168][T21303] [ 792.513168][T21303] -> #4 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 792.515559][T21303] blk_mq_submit_bio+0x1fb6/0x24c0 [ 792.517159][T21303] __submit_bio+0x384/0x540 [ 792.518556][T21303] submit_bio_noacct_nocheck+0x698/0xd70 [ 792.520277][T21303] submit_bio_noacct+0x93a/0x1e20 [ 792.521840][T21303] block_read_full_folio+0x812/0xa50 [ 792.523486][T21303] filemap_read_folio+0xc6/0x2a0 [ 792.525040][T21303] filemap_get_pages+0x155f/0x1be0 [ 792.527043][T21303] filemap_read+0x3ca/0xd70 [ 792.528508][T21303] blkdev_read_iter+0x187/0x480 [ 792.530011][T21303] vfs_read+0x87f/0xbe0 [ 792.531333][T21303] ksys_read+0x12b/0x250 [ 792.532680][T21303] do_syscall_64+0xcd/0x250 [ 792.534073][T21303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.535885][T21303] [ 792.535885][T21303] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 792.538287][T21303] down_read+0x9a/0x330 [ 792.539587][T21303] page_cache_ra_unbounded+0x173/0x750 [ 792.541284][T21303] page_cache_ra_order+0x8f2/0xc80 [ 792.542839][T21303] filemap_fault+0x14a5/0x2820 [ 792.544299][T21303] __do_fault+0x10a/0x490 [ 792.545670][T21303] do_pte_missing+0x1a8/0x3e00 [ 792.547175][T21303] __handle_mm_fault+0x103c/0x2a40 [ 792.548744][T21303] handle_mm_fault+0x3fa/0xaa0 [ 792.550172][T21303] __get_user_pages+0x8d9/0x3b50 [ 792.551696][T21303] get_user_pages_unlocked+0x1c2/0x780 [ 792.553412][T21303] hva_to_pfn+0x8be/0xc20 [ 792.554808][T21303] kvm_follow_pfn+0x29f/0x3f0 [ 792.556277][T21303] __kvm_faultin_pfn+0x11c/0x1a0 [ 792.557797][T21303] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 792.559403][T21303] kvm_tdp_page_fault+0x182/0x3d0 [ 792.560986][T21303] kvm_mmu_do_page_fault+0x58d/0x690 [ 792.562631][T21303] kvm_mmu_page_fault+0x20f/0x1bb0 [ 792.564227][T21303] handle_ept_violation+0x25a/0x640 [ 792.565823][T21303] vmx_handle_exit+0x733/0x1f70 [ 792.567335][T21303] vcpu_run+0x2aaf/0x4c00 [ 792.568719][T21303] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 792.570426][T21303] kvm_vcpu_ioctl+0x6ce/0x1520 [ 792.571954][T21303] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 792.573645][T21303] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 792.575325][T21303] __do_fast_syscall_32+0x73/0x120 [ 792.576954][T21303] do_fast_syscall_32+0x32/0x80 [ 792.578508][T21303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.580476][T21303] [ 792.580476][T21303] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 792.582641][T21303] __might_fault+0x11b/0x190 [ 792.584139][T21303] _copy_from_user+0x29/0xd0 [ 792.585617][T21303] __blk_trace_setup+0xa8/0x180 [ 792.587155][T21303] blk_trace_setup+0x47/0x70 [ 792.588672][T21303] sg_ioctl+0x7a3/0x26b0 [ 792.590058][T21303] compat_ptr_ioctl+0x6b/0xa0 [ 792.591563][T21303] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 792.593255][T21303] __do_fast_syscall_32+0x73/0x120 [ 792.594884][T21303] do_fast_syscall_32+0x32/0x80 [ 792.596442][T21303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.598356][T21303] [ 792.598356][T21303] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 792.600562][T21303] __mutex_lock+0x19b/0xa60 [ 792.602007][T21303] blk_register_queue+0x13c/0x4f0 [ 792.603603][T21303] add_disk_fwnode+0x785/0x1300 [ 792.605160][T21303] brd_alloc.isra.0+0x50a/0x7c0 [ 792.606709][T21303] brd_init+0x12b/0x1d0 [ 792.608090][T21303] do_one_initcall+0x128/0x630 [ 792.609640][T21303] kernel_init_freeable+0x58f/0x8b0 [ 792.611281][T21303] kernel_init+0x1c/0x2b0 [ 792.612716][T21303] ret_from_fork+0x45/0x80 [ 792.614146][T21303] ret_from_fork_asm+0x1a/0x30 [ 792.615680][T21303] [ 792.615680][T21303] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 792.617869][T21303] __lock_acquire+0x249e/0x3c40 [ 792.619417][T21303] lock_acquire.part.0+0x11b/0x380 [ 792.621049][T21303] __mutex_lock+0x19b/0xa60 [ 792.622504][T21303] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 792.624389][T21303] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 792.626142][T21303] nbd_start_device+0x15b/0xd70 [ 792.627717][T21303] nbd_ioctl+0x21a/0xfd0 [ 792.629128][T21303] compat_blkdev_ioctl+0x2f7/0x750 [ 792.630749][T21303] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 792.632375][T21303] __do_fast_syscall_32+0x73/0x120 [ 792.633992][T21303] do_fast_syscall_32+0x32/0x80 [ 792.635531][T21303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.637463][T21303] [ 792.637463][T21303] other info that might help us debug this: [ 792.637463][T21303] [ 792.640315][T21303] Chain exists of: [ 792.640315][T21303] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#49 [ 792.640315][T21303] [ 792.643941][T21303] Possible unsafe locking scenario: [ 792.643941][T21303] [ 792.645786][T21303] CPU0 CPU1 [ 792.647118][T21303] ---- ---- [ 792.648464][T21303] lock(&q->q_usage_counter(io)#49); [ 792.649810][T21303] lock(mapping.invalidate_lock#2); [ 792.652042][T21303] lock(&q->q_usage_counter(io)#49); [ 792.654287][T21303] lock(&q->sysfs_lock); [ 792.655568][T21303] [ 792.655568][T21303] *** DEADLOCK *** [ 792.655568][T21303] [ 792.657880][T21303] 4 locks held by syz.0.4111/21303: [ 792.659379][T21303] #0: ffff888020d91198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 792.662042][T21303] #1: ffff888020d910d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 792.665116][T21303] #2: ffff8880412d00a8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 792.668484][T21303] #3: ffff8880412d00e0 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 792.671900][T21303] [ 792.671900][T21303] stack backtrace: [ 792.673589][T21303] CPU: 3 UID: 0 PID: 21303 Comm: syz.0.4111 Not tainted 6.13.0-rc7-syzkaller #0 [ 792.676154][T21303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 792.679193][T21303] Call Trace: [ 792.680176][T21303] [ 792.681034][T21303] dump_stack_lvl+0x116/0x1f0 [ 792.682385][T21303] print_circular_bug+0x41c/0x610 [ 792.683859][T21303] check_noncircular+0x31a/0x400 [ 792.685290][T21303] ? __pfx_check_noncircular+0x10/0x10 [ 792.686847][T21303] ? save_trace+0x42/0xa10 [ 792.688162][T21303] ? add_lock_to_list+0x17d/0x390 [ 792.689629][T21303] __lock_acquire+0x249e/0x3c40 [ 792.691035][T21303] ? __pfx___lock_acquire+0x10/0x10 [ 792.692545][T21303] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 792.694215][T21303] ? stack_depot_save_flags+0x36d/0x9e0 [ 792.695814][T21303] lock_acquire.part.0+0x11b/0x380 [ 792.697294][T21303] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 792.699093][T21303] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 792.700733][T21303] ? rcu_is_watching+0x12/0xc0 [ 792.702118][T21303] ? trace_lock_acquire+0x14e/0x1f0 [ 792.703630][T21303] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 792.705407][T21303] ? lock_acquire+0x2f/0xb0 [ 792.706719][T21303] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 792.708504][T21303] __mutex_lock+0x19b/0xa60 [ 792.709824][T21303] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 792.711587][T21303] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 792.713399][T21303] ? __pfx___mutex_lock+0x10/0x10 [ 792.714868][T21303] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 792.716638][T21303] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 792.718351][T21303] ? lock_acquire.part.0+0x11b/0x380 [ 792.719900][T21303] ? __mutex_trylock_common+0xea/0x250 [ 792.721460][T21303] ? __pfx___mutex_trylock_common+0x10/0x10 [ 792.723141][T21303] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 792.724777][T21303] ? rcu_is_watching+0x12/0xc0 [ 792.726146][T21303] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 792.727988][T21303] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 792.729616][T21303] ? __pfx___mutex_lock+0x10/0x10 [ 792.731065][T21303] ? lockdep_hardirqs_on+0x7c/0x110 [ 792.732592][T21303] ? __mutex_lock+0x1cc/0xa60 [ 792.733950][T21303] ? nbd_ioctl+0x151/0xfd0 [ 792.735250][T21303] ? __pfx___mutex_lock+0x10/0x10 [ 792.736738][T21303] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 792.738323][T21303] nbd_start_device+0x15b/0xd70 [ 792.739740][T21303] ? bpf_lsm_capable+0x9/0x10 [ 792.741111][T21303] nbd_ioctl+0x21a/0xfd0 [ 792.742337][T21303] ? __pfx_nbd_ioctl+0x10/0x10 [ 792.743718][T21303] ? __pfx_lock_release+0x10/0x10 [ 792.745181][T21303] ? trace_lock_acquire+0x14e/0x1f0 [ 792.746678][T21303] ? __pfx_nbd_ioctl+0x10/0x10 [ 792.748083][T21303] compat_blkdev_ioctl+0x2f7/0x750 [ 792.749554][T21303] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 792.751140][T21303] ? __fget_files+0x206/0x3a0 [ 792.752518][T21303] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 792.754129][T21303] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 792.755658][T21303] __do_fast_syscall_32+0x73/0x120 [ 792.757159][T21303] do_fast_syscall_32+0x32/0x80 [ 792.758576][T21303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.760399][T21303] RIP: 0023:0xf7ff3579 [ 792.761575][T21303] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 792.767035][T21303] RSP: 002b:00000000f512555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 792.769455][T21303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ab03 [ 792.771718][T21303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 792.773984][T21303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.776268][T21303] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 792.778560][T21303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.780841][T21303] [ 792.782607][T21308] Invalid source name [ 792.792056][T21308] UBIFS error (pid: 21308): cannot open "./file0", error -22 [ 792.798035][T21308] netlink: 'syz.1.4113': attribute type 2 has an invalid length. [ 792.802407][T21308] netlink: 'syz.1.4113': attribute type 8 has an invalid length. [ 792.805122][T21308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4113'. [ 792.847698][T21315] random: crng reseeded on system resumption [ 792.850543][T21315] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 792.852954][T21315] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 792.855328][T21315] PM: hibernation: Basic memory bitmaps created [ 792.857797][T21302] block nbd0: shutting down sockets [ 792.919673][T21315] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 796.779287][T20036] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 796.781750][T20036] Bluetooth: hci2: Injecting HCI hardware error event [ 797.621638][ T5936] Bluetooth: hci2: command 0x0406 tx timeout [ 797.621691][T20036] Bluetooth: hci2: hardware error 0x00 [ 799.850111][T20036] Bluetooth: hci2: Opcode 0x0c03 failed: -110 VM DIAGNOSIS: 15:57:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000001a89ac5 RBX=0000000000000000 RCX=ffffffff8b1a7889 RDX=0000000000000000 RSI=ffffffff8b4cd260 RDI=ffffffff8bb171c0 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cf550 R15=0000000000000000 RIP=ffffffff8b1a8c6f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002000013c CR3=000000005f712000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=000000000005ab84 RCX=ffffffff82073894 RDX=0000000000000000 RSI=ffffffff8bb17140 RDI=ffffffff8d830ce8 RBP=ffff88803fffa6a0 RSP=ffffc900038675f8 R8 =0000000000000000 R9 =fffffbfff2039eaa R10=ffffffff901cf557 R11=00000000000a201e R12=0000000000000000 R13=0000000000000002 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81765ca4 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f855c0 CR3=000000006ccc8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000017f400000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000002 RCX=ffffffff81756ddc RDX=fffffbfff2039eab RSI=0000000000000008 RDI=ffffffff901cf550 RBP=0000000000000000 RSP=ffffc9000c8376f8 R8 =0000000000000000 R9 =fffffbfff2039eaa R10=ffffffff901cf557 R11=0000000000005bae R12=0000000000000000 R13=000000000003da4c R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81756de4 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0b511bd440 CR3=000000005e392000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000084000 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9aafac90 0000003000000008 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9aafac90 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2772656c6c616b7a 79732d3763722d30 2e33312e3627206f 742079726f746365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 20726f20656c6966 2068637573206f4e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0079726f74636572 696420726f20656c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851452a5 RDI=ffffffff9a669200 RBP=ffffffff9a6691c0 RSP=ffffc9000c73f000 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff85145240 R15=0000000000000000 RIP=ffffffff851452cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2728d0 CR3=000000006068c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000