last executing test programs: 29m13.777794633s ago: executing program 32 (id=997): syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x1, 0x7fffffff}]}) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) fsopen(&(0x7f0000001680)='nilfs2\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$isdn(0x22, 0x2, 0x26) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) 28m26.918699216s ago: executing program 1 (id=1271): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="10000000290000000b0000"], 0x10}}], 0x1, 0x40010) 28m26.806270871s ago: executing program 1 (id=1272): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="10000000290000000b0000"], 0x10}}], 0x1, 0x40010) (fail_nth: 2) 28m26.758057485s ago: executing program 1 (id=1273): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf3ff}, @exit, @alu={0x7, 0x0, 0x8, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) 28m26.757573381s ago: executing program 1 (id=1274): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) fchmodat(r2, &(0x7f0000000040)='./file0\x00', 0x101) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000200)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r4, 0x1, 0x14, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f00000000c0)={0x80, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000700)={r0, 0xffffffffffffffff, 0xe80, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x3}}, 0x1e) 28m25.788643862s ago: executing program 1 (id=1275): syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000080086dd6000cd0400343a00fe8000000000000000000000000000aaff0200000000000000000000000000010400907893033a0000000060c12c0000002b040000000002000000000000000000000100000000000000000000ffffac1414bbc76bd8be400b2ab7659947026ea6945c41df5eaf435718b670d53151f5fc255d26f4fde4fbbb038f4666a5a64dd7328887fa8249d2a1a01322e2a67c64c52bcc6da71193f4bf70f81d50c85d03b15a9523"], 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000002daf", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r5, 0x1, 0x7, 0x0, &(0x7f0000000080)) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0xffffffffffffffff, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40086436, &(0x7f0000000040)={0x0, 0x4}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r11 = socket$xdp(0x2c, 0x3, 0x0) r12 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r12, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000100)={{0x2d, 0x8}, {0x1, 0x8}, 0x301a, 0x1}) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) 28m25.338320953s ago: executing program 1 (id=1283): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x90, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x960, 0xf0, 0x384, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0xfffffffe}, {0xfffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x9, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000500)="ff3ea1e6a1480e879637319b8a95bae5b112a6b3117e33fc694ab6b0513fb7fda6007afcbbf73ea6ffcaeb557d2c3b37a218daedf559763f882e7c66ec64ea8d214d064813ca10724434d4a1ec6576ff956284942a7eda15a22dbe1060702b5c910da59a53ce0ae35f2ddec458412e3696db13adfb47ca2318dd7fca37cb7e21823fc159624dcca31eebe9959a836b8aa048d3b492f8b64e535cf6e7c64cc7d96821271de3076a", 0xa7, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="26fd1b2cffff3dedc48d30f108f98e58e3882c8b20cac1603d9920bf23574769177073f95ed74996e25b9f3cb91fe9b81d11c818ac7ce05ef7c8765920bc2beebe46d9eb83f0fe5f8b7a2174c36c6f2bc800891977f671ef00c2ba0a41161c2f2de6b10a8f0522e2d160baa66d31cb4779eaea11f3b755a04bfe9638dd6c613ec5615a206d48907944aa", 0x8a, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000900000085000000110000001801fff82020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000f1bcd399b81e1011f5aa5e5c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) 28m25.205543827s ago: executing program 33 (id=1283): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x90, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x960, 0xf0, 0x384, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0xfffffffe}, {0xfffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x9, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000500)="ff3ea1e6a1480e879637319b8a95bae5b112a6b3117e33fc694ab6b0513fb7fda6007afcbbf73ea6ffcaeb557d2c3b37a218daedf559763f882e7c66ec64ea8d214d064813ca10724434d4a1ec6576ff956284942a7eda15a22dbe1060702b5c910da59a53ce0ae35f2ddec458412e3696db13adfb47ca2318dd7fca37cb7e21823fc159624dcca31eebe9959a836b8aa048d3b492f8b64e535cf6e7c64cc7d96821271de3076a", 0xa7, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="26fd1b2cffff3dedc48d30f108f98e58e3882c8b20cac1603d9920bf23574769177073f95ed74996e25b9f3cb91fe9b81d11c818ac7ce05ef7c8765920bc2beebe46d9eb83f0fe5f8b7a2174c36c6f2bc800891977f671ef00c2ba0a41161c2f2de6b10a8f0522e2d160baa66d31cb4779eaea11f3b755a04bfe9638dd6c613ec5615a206d48907944aa", 0x8a, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000900000085000000110000001801fff82020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000f1bcd399b81e1011f5aa5e5c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) 19m12.173240453s ago: executing program 4 (id=3546): r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x1a1044, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) (async, rerun: 32) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x33, 0x400000) (rerun: 32) ioctl$USBDEVFS_IOCTL(r1, 0xc00c5512, &(0x7f0000000140)=@usbdevfs_driver={0x8, 0x10, &(0x7f00000000c0)="44881a7e04216b97dd92e2ab93a6c601f7a60fae4bcf86a03a0213fb447f53865d2c569b727308fb2ef724d08f21d6d504d57ba240a106556163484e8d9d253dca3c3e6d4cc6ad324bc5c7c7ec63dd4dfa32ffd7b431819adc7076dd74f06fce4aac"}) (async, rerun: 32) r2 = fsmount(0xffffffffffffffff, 0x1, 0x70) (rerun: 32) r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x100, 0x4) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/34, 0x22}], 0x1}, 0xc}, {{&(0x7f00000002c0), 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)}, {&(0x7f0000000380)=""/219, 0xdb}, {&(0x7f0000000480)=""/118, 0x76}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000580)=""/43, 0x2b}], 0x5}, 0x1}], 0x2, 0x0, &(0x7f0000000680)={r4, r5+60000000}) signalfd(r1, &(0x7f00000006c0)={[0x1, 0x3]}, 0x8) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xec, 0x51}}}}, ["", "", "", ""]}, 0x20}}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x916297d6e5683089}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)=@deltaction={0x15c, 0x31, 0x100, 0x70bd28, 0x200, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff38f2}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000055}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r6) futex(&(0x7f0000000a80)=0x2, 0x100, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)=0x2, 0x2) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r7, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2c}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000c40)=0x6) syz_genetlink_get_family_id$SEG6(&(0x7f0000000c80), r2) (async) socket$rds(0x15, 0x5, 0x0) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40046607, &(0x7f0000000cc0)=0x2) (async) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000d00)=0x5) (async, rerun: 32) pipe2(&(0x7f0000000d40)={0xffffffffffffffff}, 0x84040) (rerun: 32) mq_timedreceive(r8, &(0x7f0000000d80)=""/35, 0x23, 0xfffffff7, &(0x7f0000000dc0)={0x0, 0x3938700}) (async) unshare(0x38040200) (async, rerun: 64) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000e00)={0x2b, 0x6, 0x0, {0x2, 0x0, 0x2, 0x0, '-@'}}, 0x2b) (rerun: 64) bind$alg(r2, &(0x7f0000000e40)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000ec0)={0x9, "99bc19b3407dfc9141fdb195cc6eb6755859645217b9017e0cedad27facbd979"}) (async) syz_io_uring_setup(0x26ff, &(0x7f0000000f00)={0x0, 0xac9f, 0x40, 0x44db, 0x17a, 0x0, r8}, &(0x7f0000000f80), &(0x7f0000000fc0)) (async) openat$mixer(0xffffff9c, &(0x7f0000001000), 0x4000, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) 19m12.013229136s ago: executing program 4 (id=3549): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x6a040000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = dup(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x21, 0x2, 0x10000000000002) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r5, 0x7000}) 19m10.993588133s ago: executing program 4 (id=3553): syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000080086dd6000cd0400343a00fe8000000000000000000000000000aaff0200000000000000000000000000010400907893033a0000000060c12c0000002b040000000002000000000000000000000100000000000000000000ffffac1414bbc76bd8be400b2ab7659947026ea6945c41df5eaf435718b670d53151f5fc255d26f4fde4fbbb038f4666a5a64dd7328887fa8249d2a1a01322e2a67c64c52bcc6da71193f4bf70f81d50c85d03b15a9523"], 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000002daf88d83d5d5a", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYBLOB="b1f8a0bb09aaad85ddfc236d9c6e3625a24620098ad918ce188ff2e2bea344658cb1bb5db8d5269b917fd30752779e79d5dd558faaf30f13500c4555afe886abccf48cc6adf9a3ac43ddb391a2472b82e8116f5047f2bbd55f48f6c5aefa0dbb2da16f5524665710c7669b14d9c3ac7f61b86842c26497d5e0d0fc27a7de5c5d18d632ffbe"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r5, 0x1, 0x7, 0x0, &(0x7f0000000080)) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0xffffffffffffffff, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40086436, &(0x7f0000000040)={0x0, 0x4}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r11 = socket$xdp(0x2c, 0x3, 0x0) r12 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r12, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000100)={{0x2d, 0x8}, {0x1, 0x8}, 0x301a, 0x1}) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) 19m7.818940654s ago: executing program 4 (id=3563): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) setitimer(0x0, &(0x7f0000000080)={{}, {0x1}}, 0x0) getitimer(0x0, &(0x7f0000001740)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000100), 0x28002, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f00000001c0)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) setrlimit(0x9, &(0x7f0000000080)={0x2, 0x9}) chdir(&(0x7f0000000040)='./file0\x00') link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)=ANY=[]) 19m7.416610806s ago: executing program 2 (id=3566): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x8) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x982, 0x47, "0441920887e8d2b791f19dd026d76d7fcb3678", 0x4, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38ff, &(0x7f0000000480)={0x0, 0x200003, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r4 = syz_open_pts(r3, 0x141601) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x8, 0x25dfdbfc, {0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}]}, 0x30}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r7 = socket$pptp(0x18, 0x1, 0x2) getpeername(r7, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000010040) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r8 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) 19m6.941340998s ago: executing program 4 (id=3569): openat$tun(0xffffff9c, &(0x7f0000000000), 0x4040, 0x0) pipe2$watch_queue(0x0, 0x80) openat$tun(0xffffff9c, &(0x7f0000000000), 0x4040, 0x0) (async) pipe2$watch_queue(0x0, 0x80) (async) 19m6.671559984s ago: executing program 4 (id=3570): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff3}, @exit, @alu={0x7, 0x0, 0x8, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) 19m6.59912297s ago: executing program 34 (id=3570): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff3}, @exit, @alu={0x7, 0x0, 0x8, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) 19m6.523238933s ago: executing program 2 (id=3572): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x6a040000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) close(0x3) r5 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r5, 0x7000}) 19m5.518444291s ago: executing program 2 (id=3576): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) write$6lowpan_enable(r1, &(0x7f0000000180)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x1) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000080)={0xffff91cd, 0x4, {0x0}, {0xee00}, 0x1, 0x1000}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0xf) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r5, @ANYRESHEX=r3, @ANYBLOB="c00c56b90a7fb47614774027b00a78ea09330ae4695c31c95e78e5840604898e2f3f2fdcc36afc1be3205ed106edaabd00a7acb1328b01a175", @ANYRES16=r5, @ANYBLOB="963c58efddfcafbf011ff243763eb45828cac187902e40b54cd93f2f68599070c0f2d48aacaae447972cbaa48be4d71c2df149cbfadcde95c846895113055649f7784a50df9ca0c6ce1bdaf7a0aeb597624295eb64a61c2f67d5f7f2d28479e9d74fada5a3d13f979075dbedea8a6b43b2eeaa9cd000d11b14c966446dd41c12c0e85a25a87e095938ca1bdeb04323d6dc4a7e84115eadf05d1bd3b6ec5bd973181973fa431ad051e6806bff4e6ebaa077e49b37426dce87944149a6f83699fde2f29243843d223827d354792492"], 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000500)={{0x8, 0x4, 0x1, 0x0, '\x00', 0x6}, 0x0, 0x400, 0x2, r4, 0x5, 0x2, 'syz1\x00', &(0x7f0000000300)=['\\\x00', '\x00', '\x00', '%\x00', '\':^^\x00'], 0xb}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe6000000c850000003f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 19m5.423658772s ago: executing program 2 (id=3577): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) setitimer(0x0, &(0x7f0000000080)={{}, {0x1}}, 0x0) getitimer(0x0, &(0x7f0000001740)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000100), 0x28002, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f00000001c0)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) setrlimit(0x9, &(0x7f0000000080)={0x2, 0x9}) chdir(&(0x7f0000000040)='./file0\x00') link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)=ANY=[]) 19m5.264665967s ago: executing program 2 (id=3578): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x90, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x960, 0xf0, 0x384, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0xfffffffe}, {0xfffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x9, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000500)="ff3ea1e6a1480e879637319b8a95bae5b112a6b3117e33fc694ab6b0513fb7fda6007afcbbf73ea6ffcaeb557d2c3b37a218daedf559763f882e7c66ec64ea8d214d064813ca10724434d4a1ec6576ff956284942a7eda15a22dbe1060702b5c910da59a53ce0ae35f2ddec458412e3696db13adfb47ca2318dd7fca37cb7e21823fc159624dcca31eebe9959a836b8aa048d3b492f8b64e535cf6e7c64cc7d96821271de3076a", 0xa7, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="26fd1b2cffff3dedc48d30f108f98e58e3882c8b20cac1603d9920bf23574769177073f95ed74996e25b9f3cb91fe9b81d11c818ac7ce05ef7c8765920bc2beebe46d9eb83f0fe5f8b7a2174c36c6f2bc800891977f671ef00c2ba0a41161c2f2de6b10a8f0522e2d160baa66d31cb4779eaea11f3b755a04bfe9638dd6c613ec5615a206d48907944aa", 0x8a, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000900000085000000110000001801000020207325000000fffc2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000f1bcd399b81e1011f5aa5e5c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) 19m3.383369262s ago: executing program 2 (id=3584): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x6a040000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) close(0x3) r5 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r5, 0x7000}) 19m3.296236318s ago: executing program 35 (id=3584): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x6a040000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) close(0x3) r5 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r5, 0x7000}) 17m59.898889139s ago: executing program 6 (id=4107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x1b2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x68, 0x23b) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000005c0)) r5 = dup(r4) socket$inet_sctp(0x2, 0x5, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000004c0), 0x8002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) 17m59.822458796s ago: executing program 6 (id=4110): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x90, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x960, 0xf0, 0x384, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0xfffffffe}, {0xfffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x9, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000500)="ff3ea1e6a1480e879637319b8a95bae5b112a6b3117e33fc694ab6b0513fb7fda6007afcbbf73ea6ffcaeb557d2c3b37a218daedf559763f882e7c66ec64ea8d214d064813ca10724434d4a1ec6576ff956284942a7eda15a22dbe1060702b5c910da59a53ce0ae35f2ddec458412e3696db13adfb47ca2318dd7fca37cb7e21823fc159624dcca31eebe9959a836b8aa048d3b492f8b64e535cf6e7c64cc7d96821271de3076a", 0xa7, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="26fd1b2cffff3dedc48d30f108f98e58e3882c8b20cac1603d9920bf23574769177073f95ed74996e25b9f3cb91fe9b81d11c818ac7ce05ef7c8765920bc2beebe46d9eb83f0fe5f8b7a2174c36c6f2bc800891977f671ef00c2ba0a41161c2f2de6b10a8f0522e2d160baa66d31cb4779eaea11f3b755a04bfe9638dd6c613ec5615a206d48907944aa", 0x8a, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000011000000180100002020732500000000002020207b1af8fff8000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000f1bcd399b81e1011f5aa5e5c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) 17m57.252900881s ago: executing program 6 (id=4123): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = eventfd2(0xfffffffa, 0x80000) r3 = dup(r2) r4 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffdf, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x84) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0xc0089364, &(0x7f0000001240)) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r9, 0x25, 0x4, @val=@tcx}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=0x1, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x3, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x3112, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000004300)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r11 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r11, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) 17m53.904280991s ago: executing program 6 (id=4133): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(r0, &(0x7f0000000bc0)='./file0\x00', 0x801) move_mount(r1, &(0x7f00000001c0)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x220) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_settime(0xffffffffffffffff, 0x7, 0x0, 0x0) 17m53.672912615s ago: executing program 6 (id=4136): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xc, 0xa, 0x0, 0x1}, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x2, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0xf7, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xe}, 0x94) 17m53.321047325s ago: executing program 6 (id=4137): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) write$6lowpan_enable(r1, &(0x7f0000000180)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x1) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000080)={0xffff91cd, 0x4, {0x0}, {0xee00}, 0x1, 0x1000}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0xf) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r5, @ANYRESHEX=r3, @ANYBLOB="c00c56b90a7fb47614774027b00a78ea09330ae4695c31c95e78e5840604898e2f3f2fdcc36afc1be3205ed106edaabd00a7acb1328b01a175", @ANYRES16=r5, @ANYBLOB="963c58efddfcafbf011ff243763eb45828cac187902e40b54cd93f2f68599070c0f2d48aacaae447972cbaa48be4d71c2df149cbfadcde95c846895113055649f7784a50df9ca0c6ce1bdaf7a0aeb597624295eb64a61c2f67d5f7f2d28479e9d74fada5a3d13f979075dbedea8a6b43b2eeaa9cd000d11b14c966446dd41c12c0e85a25a87e095938ca1bdeb04323d6dc4a7e84115eadf05d1bd3b6ec5bd973181973fa431ad051e6806bff4e6ebaa077e49b37426dce87944149a6f83699fde2f29243843d223827d354792492"], 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000500)={{0x8, 0x4, 0x1, 0x0, '\x00', 0x6}, 0x0, 0x400, 0x2, r4, 0x5, 0x2, 'syz1\x00', &(0x7f0000000300)=['\\\x00', '\x00', '\x00', '%\x00', '\':^^\x00'], 0xb}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe90ff000c850000003f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 17m53.165710438s ago: executing program 36 (id=4137): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) write$6lowpan_enable(r1, &(0x7f0000000180)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x1) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000080)={0xffff91cd, 0x4, {0x0}, {0xee00}, 0x1, 0x1000}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0xf) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r5, @ANYRESHEX=r3, @ANYBLOB="c00c56b90a7fb47614774027b00a78ea09330ae4695c31c95e78e5840604898e2f3f2fdcc36afc1be3205ed106edaabd00a7acb1328b01a175", @ANYRES16=r5, @ANYBLOB="963c58efddfcafbf011ff243763eb45828cac187902e40b54cd93f2f68599070c0f2d48aacaae447972cbaa48be4d71c2df149cbfadcde95c846895113055649f7784a50df9ca0c6ce1bdaf7a0aeb597624295eb64a61c2f67d5f7f2d28479e9d74fada5a3d13f979075dbedea8a6b43b2eeaa9cd000d11b14c966446dd41c12c0e85a25a87e095938ca1bdeb04323d6dc4a7e84115eadf05d1bd3b6ec5bd973181973fa431ad051e6806bff4e6ebaa077e49b37426dce87944149a6f83699fde2f29243843d223827d354792492"], 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000500)={{0x8, 0x4, 0x1, 0x0, '\x00', 0x6}, 0x0, 0x400, 0x2, r4, 0x5, 0x2, 'syz1\x00', &(0x7f0000000300)=['\\\x00', '\x00', '\x00', '%\x00', '\':^^\x00'], 0xb}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 16m17.371724063s ago: executing program 8 (id=4789): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x44) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x18) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) 16m17.340414015s ago: executing program 8 (id=4790): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0xff, [0x4, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r9, 0x289e0cb5, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 16m16.441274727s ago: executing program 8 (id=4796): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@getchain={0x3c, 0x66, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x10}, {0xc, 0xfff1}, {0x9, 0x3}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x80}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x80c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r4, 0x9620}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4000275c, &(0x7f00000003c0)={0x0, 0x5bce, 0x800, 0x3, 0x10b}, &(0x7f0000000540), &(0x7f0000001180)) write$dsp(r4, &(0x7f0000000300)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x20) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0xfd, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000030228bd70000000003674101400000000071000010014000200fc020000000000000000000000000001080017004e236e231400011020010000000000000000000000000001"], 0x4c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 16m15.307811403s ago: executing program 8 (id=4802): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x80, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000ffffff900000851000000100000095000000000000001800000020646c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb702000008000000b7030000000000008500000076000000950000000000"], &(0x7f0000000180)='GPL\x00', 0x9}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x400c004) syz_usbip_server_init(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 16m13.861524849s ago: executing program 8 (id=4813): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) syz_create_resource$binfmt(&(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6(0xa, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x2) ioprio_get$pid(0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x2}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) gettid() r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') pread64(r5, &(0x7f000001a240)=""/102395, 0x18ffb, 0x41e) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x313002, 0x0) write$cgroup_int(r6, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x101001, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc}) 16m12.940410021s ago: executing program 8 (id=4816): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="79610400000000000000ae383bde38521a6b99aafd9b7e000000"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$set_timeout(0xf, 0x0, 0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4682010103fcffffffffffffff03003e000500000000010000000000004000000060b8f4a67718706a00000000000000003e00380001"], 0x78) close(r9) execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) syz_emit_ethernet(0x336, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) 15m57.41007609s ago: executing program 37 (id=4816): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="79610400000000000000ae383bde38521a6b99aafd9b7e000000"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$set_timeout(0xf, 0x0, 0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4682010103fcffffffffffffff03003e000500000000010000000000004000000060b8f4a67718706a00000000000000003e00380001"], 0x78) close(r9) execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) syz_emit_ethernet(0x336, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) 14m17.997162047s ago: executing program 5 (id=5447): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000001c0)={0x2, 0xffff, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x68e, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x80, 0x1d4, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) 14m17.11683302s ago: executing program 5 (id=5453): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 14m15.167531126s ago: executing program 5 (id=5456): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000c0ff0000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @val=@perf_event={0x10001}}, 0x18) 14m15.131281869s ago: executing program 5 (id=5458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x1, 0xfffffffffffffcbd, 0x0, 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26beeef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000001c0)="051a000200", 0x5}], 0x2) 14m14.898203219s ago: executing program 5 (id=5460): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000001c0)={0x2, 0xffff, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x68e, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x80, 0x1d4, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) 14m13.970531712s ago: executing program 5 (id=5466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffd, 0x0) read$msr(r1, &(0x7f0000000d40)=""/102400, 0xfffffffffffffd1d) (async) r2 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x1d, &(0x7f0000000840)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000000854eef4f7ffffff18140000", @ANYRES32, @ANYBLOB="000000004d00000000ac711001ffffffff181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000005184f8ff01000000184a0000feffffff00000000000000008c840100ffffffff4c381000ffffffff185700000300"/88], &(0x7f0000000700)='syzkaller\x00', 0x0, 0xc4, &(0x7f0000000a40)=""/196, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x3, 0x6, 0xc85}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c00)=[0xffffffffffffffff], &(0x7f0000000c40)=[{0x3, 0x5, 0x3}, {0x2, 0x2, 0x4}, {0x5, 0x4, 0x0, 0x7}, {0x1, 0x5, 0x11, 0xd487a30c4aee8ca7}], 0x10, 0x2}, 0x54) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async, rerun: 32) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000200)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000006000, 0x8000}]}) (rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) gettid() (async) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, 0x0, &(0x7f00000004c0)=0x1, 0x2) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @private=0xa010182}, 0x10) (async) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008010, 0x0, 0x34) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x2, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000140)={0x9}) (async) syz_emit_ethernet(0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="35ab2788d003aaaaaaaaaabb080045000024000000000011907800000000e00000014e240e22001090780201000080000000ef501340d1bb804977438bb9cf903e9ad6ca7ef9f50180f20c120699c7a842e7df77abf50ae329bab965f5c5dfdd6541194c68df"], 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, 0x0, 0xf26f5a31d1e29085) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYBLOB="3aadca36f01f1b4c3e21caa067fa3a5f256967248d0a41392876298ae61a635f5e01ee61526ab73ae6ec3091eb6768b283dc4f9410aae67ac2cb46ea5fb3fdf3c4c7778821f60686f064858b4f5fd14433d6f3d6ac185ccd89f77f2c1f43d0815adac8c63c936f921619c36164567b147ddba9f56826ad2016ee004d94f760fd", @ANYRES64=0x0], 0x10) (async) close(r5) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x94) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x23f, &(0x7f0000000100)=0x2) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1a24080, &(0x7f0000000600)=ANY=[@ANYRESDEC=r6, @ANYBLOB="407e99", @ANYRESHEX=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRESDEC=0x0, @ANYRESOCT=r1]) (async) pipe(0x0) (async) creat(0x0, 0x8) 13m58.859074612s ago: executing program 38 (id=5466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffd, 0x0) read$msr(r1, &(0x7f0000000d40)=""/102400, 0xfffffffffffffd1d) (async) r2 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x1d, &(0x7f0000000840)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000000854eef4f7ffffff18140000", @ANYRES32, @ANYBLOB="000000004d00000000ac711001ffffffff181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000005184f8ff01000000184a0000feffffff00000000000000008c840100ffffffff4c381000ffffffff185700000300"/88], &(0x7f0000000700)='syzkaller\x00', 0x0, 0xc4, &(0x7f0000000a40)=""/196, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x3, 0x6, 0xc85}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c00)=[0xffffffffffffffff], &(0x7f0000000c40)=[{0x3, 0x5, 0x3}, {0x2, 0x2, 0x4}, {0x5, 0x4, 0x0, 0x7}, {0x1, 0x5, 0x11, 0xd487a30c4aee8ca7}], 0x10, 0x2}, 0x54) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async, rerun: 32) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000200)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000006000, 0x8000}]}) (rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) gettid() (async) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, 0x0, &(0x7f00000004c0)=0x1, 0x2) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @private=0xa010182}, 0x10) (async) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008010, 0x0, 0x34) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x2, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000140)={0x9}) (async) syz_emit_ethernet(0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="35ab2788d003aaaaaaaaaabb080045000024000000000011907800000000e00000014e240e22001090780201000080000000ef501340d1bb804977438bb9cf903e9ad6ca7ef9f50180f20c120699c7a842e7df77abf50ae329bab965f5c5dfdd6541194c68df"], 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, 0x0, 0xf26f5a31d1e29085) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYBLOB="3aadca36f01f1b4c3e21caa067fa3a5f256967248d0a41392876298ae61a635f5e01ee61526ab73ae6ec3091eb6768b283dc4f9410aae67ac2cb46ea5fb3fdf3c4c7778821f60686f064858b4f5fd14433d6f3d6ac185ccd89f77f2c1f43d0815adac8c63c936f921619c36164567b147ddba9f56826ad2016ee004d94f760fd", @ANYRES64=0x0], 0x10) (async) close(r5) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x94) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x23f, &(0x7f0000000100)=0x2) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1a24080, &(0x7f0000000600)=ANY=[@ANYRESDEC=r6, @ANYBLOB="407e99", @ANYRESHEX=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRESDEC=0x0, @ANYRESOCT=r1]) (async) pipe(0x0) (async) creat(0x0, 0x8) 6.268623388s ago: executing program 3 (id=8775): r0 = syz_io_uring_setup(0x3c6b, &(0x7f0000000040)={0x0, 0xa7a8, 0x2000, 0x0, 0x17}, &(0x7f0000000140), &(0x7f0000000180)) r1 = io_uring_setup(0x5101, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x10000000, 0x0, 0x0, r0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) io_uring_enter(r1, 0x0, 0xcbffffff, 0x5, &(0x7f0000000000)={[0x71]}, 0x8) r5 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_ep_write(r5, 0x4, 0x68, &(0x7f00000001c0)="222d10d23615ba8623c373e0ec5cbc281cc311e4d9d6d90d572fa4a6b34142a70d707f8102ff959d70c18641a8f26a8badb43975dfd579382890728e70a9cc08f0ffa3e8c6a1131b8bd33de2ae47d17f8408adef5476b30e7af7408bdeb44009759e6036b07b6b5d") syz_usb_control_io$lan78xx(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r6, r8, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x9}}, 0x30) syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000003cd00012c000000541fcf50bb42f8d46d230200000000006f9d00000000000000000000000001000084ffff00000000000001000000020000000000"], 0x0, 0x3e}, 0x20) ioctl$EVIOCGMASK(r9, 0x80015b12, 0x0) 4.44309646s ago: executing program 0 (id=8782): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x80, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000d0ff00851000000100000095000000000000001800000020646c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb702000008000000b7030000000000008500000076000000950000000000"], &(0x7f0000000180)='GPL\x00', 0x9}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x400c004) syz_usbip_server_init(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4.048233809s ago: executing program 9 (id=8784): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x32}) (async) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1f9) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x200840d, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6a6c6b73697a65721fa7445322e0853d30783030303030303030303030303034303de3c88789425c7e66302c616c6c6f775f6f6b6865722c00"]) (async) socketpair$unix(0x1, 0xcd28ee4107a2c8ec, 0x0, 0x0) setfsgid(0xee00) (async) setresgid(0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000200)=0xe4) (async) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r3, r4) (async) read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) 3.98792843s ago: executing program 9 (id=8785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010ffe8222b2979b769f19c19001c04fd", @ANYRES32=0x0, @ANYBLOB="00a30000000000001c0012800b0001006d616373656300000c0002800500030010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24008085}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@multicast1}}, 0xe8) socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r2, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x1c9243, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}, 0x1, 0x0, 0x0, 0xf0ff}, 0x0) 3.824382367s ago: executing program 9 (id=8786): socket$nl_route(0x10, 0x3, 0x0) socket(0x1a, 0x0, 0x42) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), 0x0, 0x1}, 0x1c) bind$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001580), 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000100)='\bf\xce1\xd5\xb8\x86\xb4\xd3\xdf\xf7:W8urHx\x80\xe3\x15\x81_}`\xb8\xfc{9\x00\x00\x00\x80\xbe2\xc1', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x1000) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sync_file_range(r0, 0xffffffffffffa525, 0x7, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) 3.336074231s ago: executing program 3 (id=8787): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="000048000053c92e02ff8fc90200bcbfc097cc790aab018040000000000000000006000000000000bc"], 0x44}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r1, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = getegid() fchown(r1, 0x0, r5) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="00000000000000001c001a8008000280"], 0x44}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r8, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r8, 0x540a, 0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x20, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x9, 0xfff2}}}, 0x24}}, 0x20008010) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 2.826072931s ago: executing program 7 (id=8788): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = memfd_secret(0x0) fchownat(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfff, 0xf, &(0x7f0000000000)=0x3) 2.471599987s ago: executing program 3 (id=8789): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = userfaultfd(0x801) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000228bd700000000000ac1e0401000000000000000000000000ac14141b0000000000000000000000004e230001000000030200000033"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x5c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @initial, {0x0, 0x400}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x18, {0x0, 0xfffa, @val=0x1, @val=0x5, @val="6635d477e1ed3e9d28a2e58b21ddef69"}}}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r2 = socket$netlink(0x10, 0x3, 0x2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x20008810) r5 = dup(r3) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00004a2000/0x2000)=nil, &(0x7f00008ec000/0x3000)=nil, 0x2000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x7f, &(0x7f0000000040)="03020000008002ff", 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@random="34190beaeb39", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @generic={0x206, 0xf9, 0x6, 0xb, 0x9, @local, "abc0fcb1a82a6df78b6ded", @local, "8c121e3516710be04f9dc49ad1"}}}}, &(0x7f00000001c0)={0x1, 0x2, [0x6e2, 0x14b, 0xfd6, 0x4df]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000040)={0x3, r10, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) 2.413946297s ago: executing program 9 (id=8790): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r0 = openat$audio1(0xffffff9c, &(0x7f0000002680), 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f00000026c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xff7b) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000001fc0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f0000000440)=""/144, 0x90}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000500)=""/32, 0x20}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000640)=""/19, 0x13}, {&(0x7f0000000680)=""/140, 0x8c}, {&(0x7f0000000740)=""/22, 0x16}, {&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f0000000780)}], 0xa}, 0x8}, {{&(0x7f0000000a00)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000a80)=""/54, 0x36}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/78, 0x4e}, {&(0x7f0000001b40)=""/201, 0xc9}, {&(0x7f0000001c40)=""/201, 0xc9}, {&(0x7f0000001d40)=""/126, 0x7e}, {&(0x7f0000001dc0)=""/222, 0xde}, {&(0x7f0000001ec0)=""/5, 0x5}], 0x8, &(0x7f0000001f40)=""/65, 0x41}, 0x8001}], 0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) (async) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) (async) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00ff00", @ANYRES16=r7, @ANYBLOB="170928bd700000000000010000000500070000000000080009000100000008000a0000000000060002003f00000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) 2.287089754s ago: executing program 3 (id=8791): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(0xffffffffffffffff, 0x32d7, 0x0, 0x46, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in6=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x7, 0x1, 0x0, 0xffffffffffffffff, 0x9}, {}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xffffffffffffffbe) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'team0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 2.269153192s ago: executing program 0 (id=8792): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.702626105s ago: executing program 7 (id=8793): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) write$6lowpan_enable(r1, &(0x7f0000000180)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x1) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000080)={0xffff91cd, 0x4, {0x0}, {0xee00}, 0x1, 0x1000}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0xf) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r5, @ANYRESHEX=r3, @ANYBLOB="c00c56b90a7fb47614774027b00a78ea09330ae4695c31c95e78e5840604898e2f3f2fdcc36afc1be3205ed106edaabd00a7acb1328b01a175", @ANYRES16=r5, @ANYBLOB="963c58efddfcafbf011ff243763eb45828cac187902e40b54cd93f2f68599070c0f2d48aacaae447972cbaa48be4d71c2df149cbfadcde95c846895113055649f7784a50df9ca0c6ce1bdaf7a0aeb597624295eb64a61c2f67d5f7f2d28479e9d74fada5a3d13f979075dbedea8a6b43b2eeaa9cd000d11b14c966446dd41c12c0e85a25a87e095938ca1bdeb04323d6dc4a7e84115eadf05d1bd3b6ec5bd973181973fa431ad051e6806bff4e6ebaa077e49b37426dce87944149a6f83699fde2f29243843d223827d354792492"], 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000500)={{0x8, 0x4, 0x1, 0x0, '\x00', 0x6}, 0x0, 0x400, 0x2, r4, 0x5, 0x2, 'syz1\x00', &(0x7f0000000300)=['\\\x00', '\x00', '\x00', '%\x00', '\':^^\x00'], 0xb}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.568142657s ago: executing program 9 (id=8794): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) rt_sigsuspend(0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) prctl$PR_SET_THP_DISABLE(0x41, 0x3) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000340)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 1.296179933s ago: executing program 0 (id=8795): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) syz_emit_ethernet(0x245, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xf, 0x6, "30799d", 0x20f, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0xb}, @local, {[@srh={0x87, 0x69, 0x4, 0xa, 0xd, 0x48, 0xf, [@local, @local, @private2, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', @mcast2, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x6, 0x8, 0x2, 0xbf, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x3e}, @private1, @private0]}, @routing={0x0, 0xa, 0x2, 0x4, 0x0, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}]}], {0x4e22, 0x4e20, 0xc7, 0x0, @gue={{0x2, 0x0, 0x0, 0x2e, 0x100, @val=0x80}, "ad153477bc67f6da62997db938aec8824b0e4367cdb36caa84bcc9e0454bd32a5ef1a8ee323a17158e356bd3c4d2cd7ec071bd6c3fc45c7933fcc474190373c80d3fb919db2b47689d61e280d58c7f7e169e504e33207059b0e7e5fb4ff893174b765f1fbffdd2ac2ce8a284df5ce2375f4d6eb51e6e788be67899197a156924a7039a23f81619c98ebb23e2ab7564df9ada59a82aba5544765e52b75956a70e78c29d5a4225ff7ba5ab59b85ad7674c2130ed869a758f"}}}}}}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) (async) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x106, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="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", 0x0, 0x10, 0x0, 0x1, 0x0}) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x2}}, 0x2e) (async) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000740)={0x3a, 0x10, 0x2, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private2, @local, @local, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2]}, 0x88) (async) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000500)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) mount$afs(&(0x7f0000000000), 0x0, &(0x7f0000000080), 0x20, &(0x7f0000000640)=ANY=[@ANYBLOB='autocell,flock=local,autocell,flock=strict,flock=local,audit,euid<', @ANYRESDEC=r0, @ANYBLOB=',dont_measure,subj_user=xcbc(aes)\x00,appraise,pcr=000000000041,smackfshat=\',dont_hash,seclabel,defcon^ext=user_u,\x00\x00\x00\x00\x00\x00\x00\x00\x00']) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) (async) sendto$inet6(r6, &(0x7f0000000280)="09da", 0xfffffffffffffccc, 0x40000, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000004c0)='wg2\x00', 0x4) 1.232944899s ago: executing program 3 (id=8796): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/0:0:0:0\x00', 0x48140, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) setsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000140)=0x8000045, 0x4) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1, &(0x7f0000000000)='i', 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) 1.176720355s ago: executing program 3 (id=8797): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101}, 0x14}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc300000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 1.174820274s ago: executing program 7 (id=8798): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x28}}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xffffffffffffff64, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0xffffffffffffffff, 0x803, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000740000000010800044000040000080002400000000e08000640000000070900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2003, @fd_index=0x4, 0x800000f6, 0x80000, 0x1, 0xa, 0x1, {0x2, r8}}) (async) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2003, @fd_index=0x4, 0x800000f6, 0x80000, 0x1, 0xa, 0x1, {0x2, r8}}) io_uring_enter(r5, 0x6e2, 0x620, 0x1, 0x0, 0x0) 1.174616196s ago: executing program 0 (id=8799): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) getdents64(r0, &(0x7f0000000380)=""/141, 0x8d) 1.130317653s ago: executing program 0 (id=8800): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve1\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) sched_setattr(0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000a40), 0x6, 0x98000) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000000)={0x0, 0xe1d, &(0x7f0000019600)=""/4096}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) listen(r7, 0xda90) accept4(r7, 0x0, 0x0, 0x80000) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_io_uring_setup(0x37ff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) unshare(0x62040200) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 746.766171ms ago: executing program 7 (id=8801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2000002) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x3) (async) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60000000003000000e9e00000000000000000000000000aaff0200000000bb02002cfc09d4d31a345b0400000000000007180000000204089f00050000000000000000000000000000000708000000010001010000000000669609d8aeaa3a8fd9b4a78459a14cc50fbb240dcd5fdba44fcd0170316908613fee9e9de6b0aecb240000000000000000"], 0x0) 529.891927ms ago: executing program 7 (id=8802): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0xe0600, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x120, 0x30, 0x1, 0x0, 0x0, {}, [{0x10c, 0x1, [@m_ctinfo={0xfffffffffffffe75, 0x16, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}]}, {0x91, 0x6, "9f4b4b76b084c52e4c8a48b62038964073439653a506bdd3b9e30ec2a8729c6ba63e0c10aca86869bc2e6ad591a32fc575dd77098b2ee7ef359711d23f44c476c503cf80c98e8946e52a1b420ff4a8b6e98feb125477c1e2261580b6016ac57589fd3afd97ee8ffe507c523b947342db0365cfd46de4717d09aa306849e7330c1ed7422a92c603f6430abfce4d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x38, 0x2, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}]}, {0x4, 0x6, "19a66d228cdc54848768fba238a8f6c3ded725e963b562456c9f8a28fcabdc085d246558efc85a8ee193e2c152ca61f3e8b688e251eb85dd1144ebb4e302233cdb6360d96b86e935317d59782e3af739bca870244edd0446ff4658db24efe62ac98c72a5a0e05e378b95741145983cae6fcb642ed9a52fe8a55e405854a973375c3994e39ac1804ceb9f584e28e33394a939c033687a22f99e862b8a6376d9866636"}, {0xc}, {0xc}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x804}, 0x4804) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x1, &(0x7f0000000340)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0xc0b45545, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440), 0x0) (async, rerun: 32) accept4$alg(r6, 0x0, 0x0, 0x80000) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d39"]) (async, rerun: 64) chdir(&(0x7f0000000280)='./file0\x00') (async, rerun: 64) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000240012800b00010062726964676500001400028805002c00020000000800040000000080"], 0x44}}, 0x0) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x4, 0x2, 0xddcd1000, 0x2000, &(0x7f0000ff8000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xd, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x4b, &(0x7f0000000580)=""/75, 0x41000, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xc, 0x7fff, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff], &(0x7f0000000900), 0x10, 0x1ff}, 0x94) 454.257217ms ago: executing program 7 (id=8803): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 73.265988ms ago: executing program 0 (id=8804): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/18}, 0x16, 0x0, 0x1000) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='io_uring_complete\x00'}, 0x18) r2 = syz_io_uring_setup(0x56c6, &(0x7f00000003c0)={0x0, 0x3, 0x1, 0x2, 0x220}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x30, 0x1, 0x14, 0x7, 0x9, 0x10, 0x6, 0x150, 0x1}}) io_uring_enter(r2, 0xce3, 0xfffffffe, 0x0, 0x0, 0x0) 0s ago: executing program 9 (id=8805): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) eventfd2(0x8001, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1d, 0x2, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000020000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) kernel console output (not intermixed with test programs): 483125][ T40] audit: type=1326 audit(2000000654.855:13742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3498 comm="syz.7.7766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1745.505381][ T3496] vhci_hcd: connection closed [ 1745.505843][T26602] vhci_hcd: stop threads [ 1745.510693][T26602] vhci_hcd: release socket [ 1745.512868][T26602] vhci_hcd: disconnect device [ 1745.793669][ T6232] vhci_hcd: vhci_device speed not set [ 1746.321185][T26580] team0 (unregistering): Port device team_slave_1 removed [ 1746.505584][T26580] team0 (unregistering): Port device team_slave_0 removed [ 1747.566413][ T63] Bluetooth: hci4: command tx timeout [ 1747.942645][ T3500] debugfs: '!' already exists in 'ieee80211' [ 1748.070458][ T3519] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7772'. [ 1748.075800][ T3519] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7772'. [ 1748.079755][ T3519] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7772'. [ 1748.133603][ T3520] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1748.136599][ T3520] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1748.141483][ T3520] vhci_hcd vhci_hcd.0: Device attached [ 1748.359804][ T3527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1748.403181][ T3527] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1748.404443][ T6232] usb 37-1: new high-speed USB device number 45 using vhci_hcd [ 1748.639029][ T3521] vhci_hcd: connection reset by peer [ 1748.641848][T26577] vhci_hcd: stop threads [ 1748.643686][T26577] vhci_hcd: release socket [ 1748.646172][T26577] vhci_hcd: disconnect device [ 1748.654621][ T3447] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1748.662382][ T3447] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1748.670932][ T3447] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1748.682054][ T3447] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1748.754707][ T3447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1748.770607][ T3447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1748.780217][T26580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.783261][T26580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1748.794621][T26580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.797653][T26580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1748.836079][ T3447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1748.983989][ T3447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1749.085157][ T3447] veth0_vlan: entered promiscuous mode [ 1749.092227][ T3447] veth1_vlan: entered promiscuous mode [ 1749.110568][ T3447] veth0_macvtap: entered promiscuous mode [ 1749.114700][ T3447] veth1_macvtap: entered promiscuous mode [ 1749.131344][ T3447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1749.143941][ T3447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1749.154378][T26577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.158421][T26577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.161897][T26577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.165281][T26577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.227878][T26577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1749.235357][T26577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1749.266854][T26598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1749.269991][T26598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1749.643796][ T63] Bluetooth: hci4: command tx timeout [ 1750.604640][ T3569] ceph: Path missing in source [ 1750.763779][ T3573] netlink: 'syz.3.7779': attribute type 1 has an invalid length. [ 1750.763801][ T3572] netlink: 'syz.3.7779': attribute type 1 has an invalid length. [ 1750.788574][ T3573] bond1 (unregistering): Released all slaves [ 1751.175940][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 1751.175956][ T40] audit: type=1326 audit(2000000660.555:13746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3580 comm="syz.9.7780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1751.193144][ T40] audit: type=1326 audit(2000000660.575:13747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3580 comm="syz.9.7780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1751.209505][ T40] audit: type=1326 audit(2000000660.585:13748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3580 comm="syz.9.7780" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1751.223559][ T40] audit: type=1326 audit(2000000660.585:13749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3580 comm="syz.9.7780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1751.233697][ T40] audit: type=1326 audit(2000000660.585:13750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3580 comm="syz.9.7780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1751.244398][ T40] audit: type=1326 audit(2000000660.585:13751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3580 comm="syz.9.7780" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1751.255142][ T40] audit: type=1326 audit(2000000660.585:13752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3580 comm="syz.9.7780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1751.266456][ T40] audit: type=1326 audit(2000000660.615:13753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3580 comm="syz.9.7780" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1751.275337][ T40] audit: type=1326 audit(2000000660.615:13754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3580 comm="syz.9.7780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1751.285770][ T40] audit: type=1326 audit(2000000660.635:13755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3580 comm="syz.9.7780" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1751.297111][ T3584] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7780'. [ 1751.851810][ T3604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1751.909584][ T3603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1751.995742][ T3603] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1752.020450][ T3610] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1752.023076][ T3610] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1752.026424][ T3610] vhci_hcd vhci_hcd.0: Device attached [ 1752.143040][ T3604] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1752.276408][ T6060] usb 51-1: new high-speed USB device number 22 using vhci_hcd [ 1752.338598][ T3615] FAULT_INJECTION: forcing a failure. [ 1752.338598][ T3615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1752.344369][ T3615] CPU: 0 UID: 0 PID: 3615 Comm: syz.9.7787 Not tainted syzkaller #0 PREEMPT(full) [ 1752.344411][ T3615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1752.344422][ T3615] Call Trace: [ 1752.344430][ T3615] [ 1752.344438][ T3615] dump_stack_lvl+0x16c/0x1f0 [ 1752.344470][ T3615] should_fail_ex+0x512/0x640 [ 1752.344500][ T3615] _copy_from_user+0x2e/0xd0 [ 1752.344520][ T3615] get_compat_msghdr+0xa7/0x170 [ 1752.344545][ T3615] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1752.344578][ T3615] ___sys_sendmsg+0x1ae/0x1d0 [ 1752.344605][ T3615] ? __pfx____sys_sendmsg+0x10/0x10 [ 1752.344641][ T3615] ? find_held_lock+0x2b/0x80 [ 1752.344677][ T3615] __sys_sendmsg+0x16d/0x220 [ 1752.344703][ T3615] ? __pfx___sys_sendmsg+0x10/0x10 [ 1752.344739][ T3615] ? rcu_is_watching+0x12/0xc0 [ 1752.344760][ T3615] __do_fast_syscall_32+0x7c/0x300 [ 1752.344789][ T3615] do_fast_syscall_32+0x32/0x80 [ 1752.344804][ T3615] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1752.344825][ T3615] RIP: 0023:0xf703e579 [ 1752.344839][ T3615] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1752.344855][ T3615] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1752.344872][ T3615] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000200 [ 1752.344882][ T3615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.344892][ T3615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1752.344909][ T3615] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1752.344919][ T3615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1752.344943][ T3615] [ 1753.095036][ T3611] vhci_hcd: connection reset by peer [ 1753.116253][T26580] vhci_hcd: stop threads [ 1753.118351][T26580] vhci_hcd: release socket [ 1753.121883][T26580] vhci_hcd: disconnect device [ 1753.556600][ T6232] vhci_hcd: vhci_device speed not set [ 1753.577702][ T3622] binder: 3619:3622 ioctl c0306201 80000080 returned -14 [ 1753.743365][ T3624] netlink: 'syz.7.7790': attribute type 1 has an invalid length. [ 1753.778467][ T3624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1753.834722][ T3624] bond2: (slave veth9): Enslaving as an active interface with a down link [ 1753.850710][ T3624] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7790'. [ 1753.857277][ T3624] random: crng reseeded on system resumption [ 1753.867740][ T3624] netlink: 'syz.7.7790': attribute type 10 has an invalid length. [ 1753.873044][ T3624] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7790'. [ 1753.877548][ T3624] dummy0: entered promiscuous mode [ 1754.702428][ T3634] ceph: Path missing in source [ 1755.817379][ T3653] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1755.820092][ T3653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1755.838058][ T3653] vhci_hcd vhci_hcd.0: Device attached [ 1756.142681][ T6232] usb 43-1: new high-speed USB device number 14 using vhci_hcd [ 1756.414113][ T3655] vhci_hcd: connection reset by peer [ 1756.457387][ T3509] vhci_hcd: stop threads [ 1756.463093][ T3509] vhci_hcd: release socket [ 1756.495345][ T3509] vhci_hcd: disconnect device [ 1757.396864][ T6060] vhci_hcd: vhci_device speed not set [ 1757.579636][ T3686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7808'. [ 1757.592987][ T3682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1757.601216][ T3682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1757.665862][ T3682] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1757.674027][ T3687] ip6erspan0: entered promiscuous mode [ 1757.859664][ T3694] ceph: Path missing in source [ 1759.005540][ T3702] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1759.008556][ T3702] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1759.016178][ T3702] vhci_hcd vhci_hcd.0: Device attached [ 1759.486716][ T3703] vhci_hcd: connection closed [ 1759.488573][T26599] vhci_hcd: stop threads [ 1759.493442][T26599] vhci_hcd: release socket [ 1759.496014][T26599] vhci_hcd: disconnect device [ 1761.396648][ T6232] vhci_hcd: vhci_device speed not set [ 1761.556437][ T6060] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 1761.726784][ T6060] usb 12-1: Using ep0 maxpacket: 16 [ 1761.850374][ T6060] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1761.857589][ T6060] usb 12-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1761.861287][ T6060] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.864859][ T6060] usb 12-1: Product: syz [ 1761.867028][ T6060] usb 12-1: Manufacturer: syz [ 1761.869133][ T6060] usb 12-1: SerialNumber: syz [ 1761.873073][ T6060] usb 12-1: config 0 descriptor?? [ 1761.879867][ T6060] hub 12-1:0.0: bad descriptor, ignoring hub [ 1761.882920][ T6060] hub 12-1:0.0: probe with driver hub failed with error -5 [ 1761.899806][ T6060] input: syz syz as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input42 [ 1763.085685][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7825'. [ 1763.093726][ T3739] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7825'. [ 1763.100960][ T3739] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7825'. [ 1764.069918][ T6232] usb 12-1: USB disconnect, device number 12 [ 1764.500840][ T3756] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1764.504116][ T3756] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1764.510096][ T3756] vhci_hcd vhci_hcd.0: Device attached [ 1765.046459][ T6232] usb 43-1: new low-speed USB device number 15 using vhci_hcd [ 1765.056592][ T3757] vhci_hcd: connection reset by peer [ 1765.059821][ T677] vhci_hcd: stop threads [ 1765.065354][ T677] vhci_hcd: release socket [ 1765.069846][ T677] vhci_hcd: disconnect device [ 1765.294965][ T3761] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1765.297812][ T3761] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1765.320996][ T3761] vhci_hcd vhci_hcd.0: Device attached [ 1765.482813][ T3764] vhci_hcd: connection closed [ 1765.483676][ T677] vhci_hcd: stop threads [ 1765.491345][ T677] vhci_hcd: release socket [ 1765.493866][ T677] vhci_hcd: disconnect device [ 1766.531481][ T3784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7835'. [ 1766.541222][ T3784] loop6: detected capacity change from 0 to 2560 [ 1766.544488][ T3784] buffer_io_error: 6 callbacks suppressed [ 1766.544502][ T3784] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.552829][ T3784] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.562483][ T3784] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.568130][ T3784] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.571815][ T3784] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.574955][ T3784] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.579511][ T3784] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.582899][ T3784] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.587886][ T3784] ldm_validate_partition_table(): Disk read failed. [ 1766.590638][ T3784] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.597467][ T3784] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.601944][ T3784] Dev loop6: unable to read RDB block 0 [ 1766.604784][ T3784] loop6: unable to read partition table [ 1766.609116][ T3784] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1767.137466][ T3793] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1767.140294][ T3793] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1767.145632][ T3793] vhci_hcd vhci_hcd.0: Device attached [ 1767.376453][ T53] usb 51-1: new high-speed USB device number 23 using vhci_hcd [ 1767.507515][ T3794] vhci_hcd: connection reset by peer [ 1767.512320][ T3509] vhci_hcd: stop threads [ 1767.514897][ T3509] vhci_hcd: release socket [ 1767.519654][ T3509] vhci_hcd: disconnect device [ 1768.030515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1768.363580][ T3806] netlink: 'syz.3.7843': attribute type 11 has an invalid length. [ 1768.368131][ T3806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7843'. [ 1768.457856][ T3809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7844'. [ 1768.466535][ T3809] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7844'. [ 1768.469498][ T3809] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7844'. [ 1768.491791][ T3810] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1768.495012][ T3810] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1768.500104][ T3810] vhci_hcd vhci_hcd.0: Device attached [ 1768.654654][ T3818] overlayfs: workdir and upperdir must reside under the same mount [ 1768.756341][ T6060] usb 37-1: new high-speed USB device number 46 using vhci_hcd [ 1768.863132][ T3823] dummy0: left promiscuous mode [ 1768.877568][ T3823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1768.898520][ T3823] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1768.999826][ T3811] vhci_hcd: connection reset by peer [ 1769.002339][T26599] vhci_hcd: stop threads [ 1769.003881][T26599] vhci_hcd: release socket [ 1769.005615][T26599] vhci_hcd: disconnect device [ 1769.890517][ T3828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1769.905713][ T3828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1769.925657][ T3828] bond0 (unregistering): Released all slaves [ 1770.196752][ T6232] vhci_hcd: vhci_device speed not set [ 1770.741000][ T3839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7852'. [ 1770.894871][ T3841] netlink: 'syz.0.7853': attribute type 11 has an invalid length. [ 1770.899057][ T3841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7853'. [ 1771.357577][ T3845] netlink: 2 bytes leftover after parsing attributes in process `syz.9.7855'. [ 1771.417663][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 1771.417801][ T40] audit: type=1326 audit(2000000680.805:13772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3844 comm="syz.9.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1771.431931][ T40] audit: type=1326 audit(2000000680.815:13773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3844 comm="syz.9.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1771.441635][ T40] audit: type=1326 audit(2000000680.815:13774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3844 comm="syz.9.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1771.452006][ T40] audit: type=1326 audit(2000000680.815:13775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3844 comm="syz.9.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1771.462056][ T40] audit: type=1326 audit(2000000680.815:13776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3844 comm="syz.9.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1771.472282][ T40] audit: type=1326 audit(2000000680.815:13777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3844 comm="syz.9.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1771.481933][ T40] audit: type=1326 audit(2000000680.825:13778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3844 comm="syz.9.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1771.491262][ T40] audit: type=1326 audit(2000000680.825:13779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3844 comm="syz.9.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1771.501517][ T40] audit: type=1326 audit(2000000680.825:13780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3844 comm="syz.9.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1771.510737][ T40] audit: type=1326 audit(2000000680.825:13781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3844 comm="syz.9.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1772.294810][ T3857] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7859'. [ 1772.516394][ T53] vhci_hcd: vhci_device speed not set [ 1773.485087][ T3877] ceph: Path missing in source [ 1773.771414][ T3885] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7866'. [ 1773.876428][ T6060] vhci_hcd: vhci_device speed not set [ 1775.482088][ T3910] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1775.485151][ T3910] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1775.488677][ T3910] vhci_hcd vhci_hcd.0: Device attached [ 1775.634124][ T3916] netlink: 'syz.3.7873': attribute type 4 has an invalid length. [ 1775.637237][ T3916] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7873'. [ 1775.796490][ T6060] usb 37-1: new high-speed USB device number 47 using vhci_hcd [ 1775.850137][ T3913] vhci_hcd: connection reset by peer [ 1775.854274][T26584] vhci_hcd: stop threads [ 1775.856054][T26584] vhci_hcd: release socket [ 1775.858100][T26584] vhci_hcd: disconnect device [ 1776.412297][ T3924] netlink: 'syz.7.7876': attribute type 1 has an invalid length. [ 1776.420908][ T3924] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1776.739350][ T3937] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7880'. [ 1776.764653][ T3937] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7880'. [ 1777.364423][ T3951] orangefs_mount: mount request failed with -4 [ 1777.541262][ T3965] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7889'. [ 1778.526834][ T3915] delete_channel: no stack [ 1778.587739][ T3982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.591552][ T3982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.806586][ T3986] veth1_to_bond: entered allmulticast mode [ 1778.836409][ T6232] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1778.857112][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7894'. [ 1779.008809][ T3986] bond0: (slave bond_slave_1): Releasing backup interface [ 1779.113695][ T3986] veth1_to_bond (unregistering): left allmulticast mode [ 1779.725463][ T4005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1779.841352][ T4005] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1780.270584][ T4028] netlink: 2 bytes leftover after parsing attributes in process `syz.7.7904'. [ 1780.383844][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 1780.383883][ T40] audit: type=1326 audit(2000000689.715:13789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4027 comm="syz.7.7904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1780.606500][ T40] audit: type=1326 audit(2000000689.715:13790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4027 comm="syz.7.7904" exe="/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1780.617062][ T40] audit: type=1326 audit(2000000689.715:13791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4027 comm="syz.7.7904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1780.626977][ T40] audit: type=1326 audit(2000000689.725:13792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4027 comm="syz.7.7904" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1780.637093][ T40] audit: type=1326 audit(2000000689.725:13793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4027 comm="syz.7.7904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1780.679137][ T40] audit: type=1326 audit(2000000689.725:13794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4027 comm="syz.7.7904" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1780.701618][ T40] audit: type=1326 audit(2000000689.725:13795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4027 comm="syz.7.7904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1780.728712][ T40] audit: type=1326 audit(2000000689.725:13796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4027 comm="syz.7.7904" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1780.754134][ T40] audit: type=1326 audit(2000000689.725:13797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4027 comm="syz.7.7904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1780.780847][ T40] audit: type=1326 audit(2000000689.725:13798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4027 comm="syz.7.7904" exe="/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1780.906401][ T6060] vhci_hcd: vhci_device speed not set [ 1782.086991][ T4046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7908'. [ 1782.191422][ T6060] hid_parser_main: 8 callbacks suppressed [ 1782.191440][ T6060] hid-generic 0003:0007:0000.000B: unknown main item tag 0x0 [ 1782.198527][ T6060] hid-generic 0003:0007:0000.000B: unknown main item tag 0x0 [ 1782.202147][ T6060] hid-generic 0003:0007:0000.000B: unknown main item tag 0x0 [ 1782.205620][ T6060] hid-generic 0003:0007:0000.000B: unknown main item tag 0x0 [ 1782.211151][ T6060] hid-generic 0003:0007:0000.000B: unknown main item tag 0x0 [ 1782.227596][ T6060] hid-generic 0003:0007:0000.000B: unknown main item tag 0x0 [ 1782.230776][ T6060] hid-generic 0003:0007:0000.000B: unknown main item tag 0x0 [ 1782.233866][ T6060] hid-generic 0003:0007:0000.000B: unknown main item tag 0x0 [ 1782.237906][ T6060] hid-generic 0003:0007:0000.000B: unknown main item tag 0x0 [ 1782.242939][ T6060] hid-generic 0003:0007:0000.000B: unknown main item tag 0x0 [ 1782.248530][ T6060] hid-generic 0003:0007:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1782.688539][ T4070] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1782.691195][ T4070] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1782.694713][ T4070] vhci_hcd vhci_hcd.0: Device attached [ 1782.926360][ T6060] usb 43-1: new high-speed USB device number 16 using vhci_hcd [ 1783.164129][ T4071] vhci_hcd: connection reset by peer [ 1783.168557][ T677] vhci_hcd: stop threads [ 1783.174436][ T677] vhci_hcd: release socket [ 1783.177801][ T677] vhci_hcd: disconnect device [ 1783.562372][ T4088] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7918'. [ 1783.566207][ T4089] tipc: Enabled bearer , priority 10 [ 1784.203408][ T4098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7920'. [ 1784.526556][ T2179] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 1784.678952][ T2179] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1784.683996][ T2179] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.688692][ T2179] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1784.692771][ T2179] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1784.701191][ T2179] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1784.705153][ T2179] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1784.708800][ T2179] usb 12-1: Manufacturer: syz [ 1784.713724][ T2179] usb 12-1: config 0 descriptor?? [ 1785.131695][ T2179] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 1785.420891][T16244] usb 12-1: USB disconnect, device number 13 [ 1785.712164][T32669] libceph: connect (1)[c::]:6789 error -101 [ 1785.714606][T32669] libceph: mon0 (1)[c::]:6789 connect error [ 1785.852992][ T4122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1785.884128][ T4124] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1785.959630][ T4126] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7927'. [ 1785.966205][ T4126] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7927'. [ 1785.972837][ T4126] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7927'. [ 1785.987097][T32669] libceph: connect (1)[c::]:6789 error -101 [ 1785.997128][T32669] libceph: mon0 (1)[c::]:6789 connect error [ 1786.306125][ T4116] ceph: No mds server is up or the cluster is laggy [ 1786.529124][ T4138] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1786.532042][ T4138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1786.687600][ T4138] vhci_hcd vhci_hcd.0: Device attached [ 1786.768841][ T4144] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1786.772036][ T4144] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1786.775605][ T4144] vhci_hcd vhci_hcd.0: Device attached [ 1786.829163][ T4147] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1786.832040][ T4147] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1786.836031][ T4147] vhci_hcd vhci_hcd.0: Device attached [ 1786.956815][T32669] usb 51-1: new high-speed USB device number 24 using vhci_hcd [ 1787.027069][ T4145] vhci_hcd: connection closed [ 1787.028789][T26577] vhci_hcd: stop threads [ 1787.034223][T26577] vhci_hcd: release socket [ 1787.076720][ T53] usb 37-1: new low-speed USB device number 48 using vhci_hcd [ 1787.088984][T26577] vhci_hcd: disconnect device [ 1787.256449][ T4140] vhci_hcd: connection reset by peer [ 1787.259892][T26580] vhci_hcd: stop threads [ 1787.262084][T26580] vhci_hcd: release socket [ 1787.264207][T26580] vhci_hcd: disconnect device [ 1787.381091][ T4148] vhci_hcd: connection reset by peer [ 1787.383899][T26580] vhci_hcd: stop threads [ 1787.385767][T26580] vhci_hcd: release socket [ 1787.389323][T26580] vhci_hcd: disconnect device [ 1788.066435][ T6060] vhci_hcd: vhci_device speed not set [ 1788.191784][ T4160] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1788.194439][ T4160] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1788.197827][ T4160] vhci_hcd vhci_hcd.0: Device attached [ 1788.413067][ T4165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1788.559719][ T4165] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1788.701356][ T4170] ceph: Path missing in source [ 1788.926131][ T4161] vhci_hcd: connection closed [ 1788.933704][T26599] vhci_hcd: stop threads [ 1788.937702][T26599] vhci_hcd: release socket [ 1788.959532][T26599] vhci_hcd: disconnect device [ 1789.579870][ T4178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7938'. [ 1789.584920][ T4178] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7938'. [ 1789.588801][ T4178] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7938'. [ 1789.753456][ T4192] Malformed UNC in devname [ 1789.753456][ T4192] [ 1789.756715][ T4192] CIFS: VFS: Malformed UNC in devname [ 1789.764313][ T4192] netlink: 71 bytes leftover after parsing attributes in process `syz.7.7943'. [ 1790.241129][ T4200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1790.421051][ T4205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1790.579963][ T4205] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1791.240410][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.865093][ T4221] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1791.867826][ T4221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1791.881676][ T4221] vhci_hcd vhci_hcd.0: Device attached [ 1792.116427][T32669] vhci_hcd: vhci_device speed not set [ 1792.126407][ T6060] usb 55-1: new low-speed USB device number 27 using vhci_hcd [ 1792.206703][ T53] vhci_hcd: vhci_device speed not set [ 1792.598670][ T4222] vhci_hcd: connection reset by peer [ 1792.601686][ T4227] fuse: Bad value for 'fd' [ 1792.602295][T26599] vhci_hcd: stop threads [ 1792.605551][T26599] vhci_hcd: release socket [ 1792.607832][T26599] vhci_hcd: disconnect device [ 1793.285324][ T4234] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7953'. [ 1793.291986][ T4234] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7953'. [ 1793.296113][ T4234] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7953'. [ 1793.586415][ T4250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1794.714270][ T59] IPVS: starting estimator thread 0... [ 1794.749274][ T4258] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1794.754309][ T4258] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1794.757462][ T4258] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1794.760486][ T4258] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1794.797872][ T4258] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1794.806459][ T4268] IPVS: using max 26 ests per chain, 62400 per kthread [ 1794.855206][ T4273] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1794.857711][ T4273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1794.881511][ T4273] vhci_hcd vhci_hcd.0: Device attached [ 1795.146597][ T4276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1795.276476][ T4173] usb 51-1: new low-speed USB device number 25 using vhci_hcd [ 1795.353290][ T4276] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1795.534672][ T4274] vhci_hcd: connection reset by peer [ 1795.543881][T26584] vhci_hcd: stop threads [ 1795.547915][T26584] vhci_hcd: release socket [ 1795.549616][T26584] vhci_hcd: disconnect device [ 1795.591900][ T4283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7965'. [ 1795.601424][ T4283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7965'. [ 1795.608344][ T4283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7965'. [ 1796.756732][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 1796.756817][ T2028] Bluetooth: hci1: command 0x0c1a tx timeout [ 1796.836493][ T2028] Bluetooth: hci4: command 0x0405 tx timeout [ 1797.226412][ T6060] vhci_hcd: vhci_device speed not set [ 1797.439891][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7975'. [ 1797.448238][ T4309] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7975'. [ 1797.452050][ T4309] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7975'. [ 1798.509503][ T4328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1798.516139][ T4335] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1798.926648][ T2028] Bluetooth: hci4: command 0x0405 tx timeout [ 1800.436491][ T4173] vhci_hcd: vhci_device speed not set [ 1800.996533][ T2028] Bluetooth: hci4: command 0x0405 tx timeout [ 1801.576380][ T4374] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7992'. [ 1801.939086][ T4381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1802.036423][ T4384] netlink: 'syz.7.7994': attribute type 4 has an invalid length. [ 1802.046783][ T6060] lo speed is unknown, defaulting to 1000 [ 1802.048652][ T6060] syz2: Port: 1 Link DOWN [ 1803.771992][ T4399] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1803.775088][ T4399] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1803.780145][ T4399] vhci_hcd vhci_hcd.0: Device attached [ 1804.016444][ T4173] usb 43-1: new low-speed USB device number 17 using vhci_hcd [ 1804.255007][ T4400] vhci_hcd: connection reset by peer [ 1804.259663][T26584] vhci_hcd: stop threads [ 1804.263210][T26584] vhci_hcd: release socket [ 1804.265702][T26584] vhci_hcd: disconnect device [ 1804.417781][ T4409] FAULT_INJECTION: forcing a failure. [ 1804.417781][ T4409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1804.423754][ T4409] CPU: 0 UID: 0 PID: 4409 Comm: syz.7.8000 Not tainted syzkaller #0 PREEMPT(full) [ 1804.423781][ T4409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1804.423794][ T4409] Call Trace: [ 1804.423803][ T4409] [ 1804.423813][ T4409] dump_stack_lvl+0x16c/0x1f0 [ 1804.423848][ T4409] should_fail_ex+0x512/0x640 [ 1804.423884][ T4409] _copy_to_user+0x32/0xd0 [ 1804.423907][ T4409] simple_read_from_buffer+0xcb/0x170 [ 1804.423931][ T4409] proc_fail_nth_read+0x197/0x240 [ 1804.423954][ T4409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1804.423978][ T4409] ? rw_verify_area+0xcf/0x6c0 [ 1804.423998][ T4409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1804.424035][ T4409] vfs_read+0x1e1/0xcf0 [ 1804.424066][ T4409] ? __pfx_vfs_read+0x10/0x10 [ 1804.424086][ T4409] ? find_held_lock+0x2b/0x80 [ 1804.424114][ T4409] ? __fget_files+0x20e/0x3c0 [ 1804.424134][ T4409] ? rcu_watching_snap_stopped_since+0xc0/0x110 [ 1804.424165][ T4409] ksys_read+0x12a/0x250 [ 1804.424187][ T4409] ? __pfx_ksys_read+0x10/0x10 [ 1804.424210][ T4409] ? rcu_is_watching+0x12/0xc0 [ 1804.424234][ T4409] __do_fast_syscall_32+0x7c/0x300 [ 1804.424267][ T4409] do_fast_syscall_32+0x32/0x80 [ 1804.424285][ T4409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1804.424309][ T4409] RIP: 0023:0xf7f97579 [ 1804.424325][ T4409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1804.424344][ T4409] RSP: 002b:00000000f5465590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1804.424362][ T4409] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000f5465620 [ 1804.424375][ T4409] RDX: 000000000000000f RSI: 00000000f7425ff4 RDI: 0000000000000000 [ 1804.424387][ T4409] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1804.424397][ T4409] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1804.424408][ T4409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1804.424435][ T4409] [ 1804.915533][ T4418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1804.930425][T17438] lo speed is unknown, defaulting to 1000 [ 1804.932947][T17438] syz2: Port: 1 Link ACTIVE [ 1804.957001][ T4419] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1805.088676][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8003'. [ 1805.470964][ T4421] futex_wake_op: syz.3.8003 tries to shift op by 144; fix this program [ 1806.075718][ T4426] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8004'. [ 1806.087258][ T4426] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8004'. [ 1806.091775][ T4426] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8004'. [ 1806.190729][ T4428] netlink: 'syz.3.8005': attribute type 4 has an invalid length. [ 1806.701507][ T4433] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1806.704536][ T4433] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1806.708430][ T4433] vhci_hcd vhci_hcd.0: Device attached [ 1806.956393][ T6060] usb 55-1: new high-speed USB device number 28 using vhci_hcd [ 1807.155912][ T4434] vhci_hcd: connection reset by peer [ 1807.161221][ T677] vhci_hcd: stop threads [ 1807.163251][ T677] vhci_hcd: release socket [ 1807.170295][ T677] vhci_hcd: disconnect device [ 1807.888680][ T4447] input: syz0 as /devices/virtual/input/input43 [ 1807.925041][ T4451] netlink: 'syz.9.8010': attribute type 1 has an invalid length. [ 1808.061976][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8014'. [ 1809.044064][ T4457] futex_wake_op: syz.9.8014 tries to shift op by 144; fix this program [ 1809.156607][ T4173] vhci_hcd: vhci_device speed not set [ 1810.701885][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8024'. [ 1810.708929][ T4492] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8024'. [ 1810.715595][ T4492] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8024'. [ 1811.583853][ T4509] netlink: 'syz.0.8027': attribute type 11 has an invalid length. [ 1812.677732][ T6060] vhci_hcd: vhci_device speed not set [ 1816.005427][ T4550] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1816.026017][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8043'. [ 1816.034146][ T4555] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8043'. [ 1816.040122][ T4555] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8043'. [ 1816.270818][ T4553] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1816.273348][ T4553] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1816.277417][ T4553] vhci_hcd vhci_hcd.0: Device attached [ 1816.418763][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 1816.418781][ T40] audit: type=1326 audit(2000000725.805:13804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4561 comm="syz.7.8044" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1816.431261][ T40] audit: type=1326 audit(2000000725.815:13805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4561 comm="syz.7.8044" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1816.477614][ T4557] vhci_hcd: connection closed [ 1816.484072][T26577] vhci_hcd: stop threads [ 1816.488685][T26577] vhci_hcd: release socket [ 1816.490600][T26577] vhci_hcd: disconnect device [ 1816.526473][ T6060] usb 55-1: new high-speed USB device number 29 using vhci_hcd [ 1816.530366][ T6060] usb 55-1: enqueue for inactive port 0 [ 1816.596430][ T6060] vhci_hcd: vhci_device speed not set [ 1818.463942][ T4599] Bluetooth: MGMT ver 1.23 [ 1819.383990][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8060'. [ 1819.410068][ T4621] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8060'. [ 1819.419967][ T4621] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8060'. [ 1821.538580][ T4643] loop2: detected capacity change from 0 to 7 [ 1821.549576][ T4643] Dev loop2: unable to read RDB block 7 [ 1821.552972][ T4643] loop2: unable to read partition table [ 1821.558009][ T4643] loop2: partition table beyond EOD, truncated [ 1821.560563][ T4643] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1822.213234][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8069'. [ 1822.269994][ T4655] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8069'. [ 1822.340454][ T4655] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8069'. [ 1824.089345][ T4676] overlayfs: failed to resolve './file0': -2 [ 1824.169801][ T4676] afs: Unknown parameter 'dyeà' [ 1824.325386][T17438] lo speed is unknown, defaulting to 1000 [ 1824.325768][T26602] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.327860][T17438] syz2: Port: 1 Link DOWN [ 1824.331702][T26602] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1824.349777][T26602] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.360268][T26602] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1824.369643][T26602] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.374521][T26602] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1824.378998][T26602] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.384934][T26602] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1827.022163][ T4689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1827.095566][ T4689] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1827.387629][ T4701] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1827.390661][ T4701] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1827.396525][ T4701] vhci_hcd vhci_hcd.0: Device attached [ 1827.419688][ T40] audit: type=1800 audit(2000001508.265:13806): pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8083" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1827.689194][ T6060] usb 38-1: SetAddress Request (12) to port 0 [ 1827.734804][ T6060] usb 38-1: new SuperSpeed USB device number 12 using vhci_hcd [ 1827.916040][ T4702] vhci_hcd: connection reset by peer [ 1827.918562][T26602] vhci_hcd: stop threads [ 1827.920313][T26602] vhci_hcd: release socket [ 1827.922243][T26602] vhci_hcd: disconnect device [ 1830.781757][ T4734] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.8090'. [ 1830.821903][ T4731] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.8090'. [ 1831.325288][ T4742] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1831.693428][ T4747] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1832.109819][ T4745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1832.592456][ T6060] usb 38-1: device descriptor read/8, error -110 [ 1832.651831][ T4759] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1832.654752][ T4759] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1832.664182][ T4759] vhci_hcd vhci_hcd.0: Device attached [ 1832.820604][ T4751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1832.945102][ T53] usb 43-1: new low-speed USB device number 18 using vhci_hcd [ 1832.978051][ T6060] usb usb38-port1: attempt power cycle [ 1833.160306][ T4760] vhci_hcd: connection reset by peer [ 1833.164181][T26599] vhci_hcd: stop threads [ 1833.166032][T26599] vhci_hcd: release socket [ 1833.167963][T26599] vhci_hcd: disconnect device [ 1833.609362][ T6060] usb usb38-port1: unable to enumerate USB device [ 1834.450648][ T4772] ceph: Path missing in source [ 1835.024268][ T4781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8100'. [ 1835.029443][ T4781] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8100'. [ 1835.039847][ T4781] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8100'. [ 1836.991844][ T4816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1837.198165][ T4820] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1837.200699][ T4820] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1837.318060][ T4820] vhci_hcd vhci_hcd.0: Device attached [ 1837.563930][ T4173] usb 55-1: new low-speed USB device number 30 using vhci_hcd [ 1838.221761][ T53] vhci_hcd: vhci_device speed not set [ 1838.826251][ T4821] vhci_hcd: connection reset by peer [ 1838.829436][ T3509] vhci_hcd: stop threads [ 1838.837541][ T3509] vhci_hcd: release socket [ 1838.841097][ T4829] input: syz0 as /devices/virtual/input/input44 [ 1838.842557][ T3509] vhci_hcd: disconnect device [ 1839.986539][ T4843] ceph: Path missing in source [ 1840.751744][ T4863] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1840.884689][ T4859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1841.503535][ T4871] netlink: 'syz.0.8120': attribute type 10 has an invalid length. [ 1841.506592][ T4871] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8120'. [ 1841.511676][ T4871] team0: entered promiscuous mode [ 1841.513850][ T4871] team_slave_0: entered promiscuous mode [ 1841.526456][ T4871] team_slave_1: entered promiscuous mode [ 1841.539879][ T4871] bridge0: port 3(team0) entered blocking state [ 1841.542452][ T4871] bridge0: port 3(team0) entered disabled state [ 1841.546949][ T4871] team0: entered allmulticast mode [ 1841.549075][ T4871] team_slave_0: entered allmulticast mode [ 1841.552190][ T4871] team_slave_1: entered allmulticast mode [ 1841.570600][ T4871] bridge0: port 3(team0) entered blocking state [ 1841.573312][ T4871] bridge0: port 3(team0) entered forwarding state [ 1842.164344][ T4882] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1842.187723][ T4878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.217481][ T4878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1842.227275][T15338] lo speed is unknown, defaulting to 1000 [ 1842.231736][T15338] syz2: Port: 1 Link ACTIVE [ 1843.023840][ T4173] vhci_hcd: vhci_device speed not set [ 1844.416825][ T4905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1844.447049][ T4905] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1844.567392][ T4909] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1844.570412][ T4909] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1844.575291][ T4909] vhci_hcd vhci_hcd.0: Device attached [ 1844.869270][ T4173] usb 38-1: SetAddress Request (16) to port 0 [ 1844.910895][ T4173] usb 38-1: new SuperSpeed USB device number 16 using vhci_hcd [ 1845.051124][ T4910] vhci_hcd: connection reset by peer [ 1845.053897][ T3509] vhci_hcd: stop threads [ 1845.056061][ T3509] vhci_hcd: release socket [ 1845.059490][ T3509] vhci_hcd: disconnect device [ 1845.246627][ T4921] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1845.249491][ T4921] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1845.254149][ T4921] vhci_hcd vhci_hcd.0: Device attached [ 1845.478638][T32669] usb 51-1: new high-speed USB device number 26 using vhci_hcd [ 1845.664918][ T4922] vhci_hcd: connection reset by peer [ 1845.667409][ T3509] vhci_hcd: stop threads [ 1845.671562][ T3509] vhci_hcd: release socket [ 1845.673577][ T3509] vhci_hcd: disconnect device [ 1846.397244][ T4938] siw: device registration error -23 [ 1846.399735][ T4939] siw: device registration error -23 [ 1847.351786][ T4954] ceph: Path missing in source [ 1847.502892][ T4959] ceph: Path missing in source [ 1847.658316][ T4962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1847.723721][ T4962] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1848.980865][ T4975] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1848.983673][ T4975] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1848.988037][ T4975] vhci_hcd vhci_hcd.0: Device attached [ 1849.260252][ T6060] usb 44-1: SetAddress Request (2) to port 0 [ 1849.262964][ T6060] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1849.368314][ T4976] vhci_hcd: connection reset by peer [ 1849.374432][T26598] vhci_hcd: stop threads [ 1849.376415][T26598] vhci_hcd: release socket [ 1849.383319][T26598] vhci_hcd: disconnect device [ 1849.736073][ T4173] usb 38-1: device descriptor read/8, error -110 [ 1850.122420][ T4173] usb usb38-port1: attempt power cycle [ 1850.229248][ T4990] netlink: 'syz.9.8151': attribute type 10 has an invalid length. [ 1850.236376][ T4990] netlink: 2 bytes leftover after parsing attributes in process `syz.9.8151'. [ 1850.554213][ T4995] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1850.557861][ T4995] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1850.562782][ T4995] vhci_hcd vhci_hcd.0: Device attached [ 1850.680018][ T4173] usb usb38-port1: unable to enumerate USB device [ 1851.063209][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1851.107621][T32669] usb 51-1: new low-speed USB device number 27 using vhci_hcd [ 1851.183209][ T4996] vhci_hcd: connection reset by peer [ 1851.186176][ T3509] vhci_hcd: stop threads [ 1851.188077][ T3509] vhci_hcd: release socket [ 1851.190265][ T3509] vhci_hcd: disconnect device [ 1852.068946][ T5006] ceph: Path missing in source [ 1852.728464][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1852.746296][ T5017] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1852.750822][ T5017] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1853.213469][ T40] audit: type=1326 audit(2000001535.353:13807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.7.8162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1853.226099][ T40] audit: type=1326 audit(2000001535.353:13808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.7.8162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1853.236355][ T40] audit: type=1326 audit(2000001535.364:13809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.7.8162" exe="/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1853.245026][ T40] audit: type=1326 audit(2000001535.364:13810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.7.8162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1853.254912][ T40] audit: type=1326 audit(2000001535.364:13811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.7.8162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1853.264520][ T40] audit: type=1326 audit(2000001535.364:13812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.7.8162" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1853.295209][ T40] audit: type=1326 audit(2000001535.364:13813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.7.8162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1853.321376][ T40] audit: type=1326 audit(2000001535.364:13814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.7.8162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 1854.089221][ T6060] usb 44-1: device descriptor read/8, error -110 [ 1854.480558][ T6060] usb usb44-port1: attempt power cycle [ 1854.788493][ T5044] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1854.791428][ T5044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1854.803660][ T5044] vhci_hcd vhci_hcd.0: Device attached [ 1855.373670][ T5045] vhci_hcd: connection closed [ 1855.374082][ T3509] vhci_hcd: stop threads [ 1855.379314][ T3509] vhci_hcd: release socket [ 1855.381415][ T3509] vhci_hcd: disconnect device [ 1855.483380][ T6060] usb usb44-port1: unable to enumerate USB device [ 1855.975224][T32669] vhci_hcd: vhci_device speed not set [ 1856.079570][ T5050] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8169'. [ 1856.668122][ T5067] netlink: 'syz.7.8170': attribute type 10 has an invalid length. [ 1856.671548][ T5067] netlink: 2 bytes leftover after parsing attributes in process `syz.7.8170'. [ 1857.089955][ T5073] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1859.949874][ T5108] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1859.952880][ T5108] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1860.138737][ T5108] vhci_hcd vhci_hcd.0: Device attached [ 1860.366204][ T6060] usb 43-1: new low-speed USB device number 19 using vhci_hcd [ 1860.684142][ T5110] vhci_hcd: connection reset by peer [ 1860.686360][ T3509] vhci_hcd: stop threads [ 1860.687925][ T3509] vhci_hcd: release socket [ 1860.691782][ T3509] vhci_hcd: disconnect device [ 1861.486464][ T5116] infiniband syz1: set active [ 1861.488600][ T5116] infiniband syz1: added syz_tun [ 1861.552102][ T5116] RDS/IB: syz1: added [ 1861.553990][ T5116] smc: adding ib device syz1 with port count 1 [ 1861.556765][ T5116] smc: ib device syz1 port 1 has pnetid SYZ2 (user defined) [ 1862.019181][ T5125] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1862.022241][ T5125] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1862.026699][ T5125] vhci_hcd vhci_hcd.0: Device attached [ 1862.251665][T32669] usb 37-1: new high-speed USB device number 49 using vhci_hcd [ 1862.515465][ T5126] vhci_hcd: connection reset by peer [ 1862.523205][ T678] vhci_hcd: stop threads [ 1862.525456][ T678] vhci_hcd: release socket [ 1862.529412][ T678] vhci_hcd: disconnect device [ 1863.230046][ T5141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1863.840756][ T5152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1863.921420][ T5153] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1865.364890][ T6060] vhci_hcd: vhci_device speed not set [ 1867.118306][T32669] vhci_hcd: vhci_device speed not set [ 1868.921713][ T5196] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1868.924785][ T5196] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1868.942255][ T5196] vhci_hcd vhci_hcd.0: Device attached [ 1869.166618][T32669] usb 43-1: new high-speed USB device number 20 using vhci_hcd [ 1869.413324][ T5211] fuse: Bad value for 'rootmode' [ 1869.471984][ T5201] vhci_hcd: connection reset by peer [ 1869.481851][ T5213] 9pnet_fd: Insufficient options for proto=fd [ 1869.495152][T26580] vhci_hcd: stop threads [ 1869.497049][T26580] vhci_hcd: release socket [ 1869.499174][T26580] vhci_hcd: disconnect device [ 1869.557712][ T5211] netlink: 'syz.0.8213': attribute type 2 has an invalid length. [ 1869.561680][ T5211] netlink: 723 bytes leftover after parsing attributes in process `syz.0.8213'. [ 1869.866712][ T5222] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1869.869677][ T5222] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1869.878124][ T5222] vhci_hcd vhci_hcd.0: Device attached [ 1870.118592][ T6060] usb 51-1: new low-speed USB device number 28 using vhci_hcd [ 1870.463244][ T5223] vhci_hcd: connection reset by peer [ 1870.467019][T26599] vhci_hcd: stop threads [ 1870.468907][T26599] vhci_hcd: release socket [ 1870.470904][T26599] vhci_hcd: disconnect device [ 1873.138380][ T5262] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1874.006869][ T5266] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1874.010639][ T5266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1874.014145][ T5266] vhci_hcd vhci_hcd.0: Device attached [ 1874.182173][T32669] vhci_hcd: vhci_device speed not set [ 1874.303728][ T4173] usb 37-1: new high-speed USB device number 50 using vhci_hcd [ 1874.407308][ T5272] ceph: No mds server is up or the cluster is laggy [ 1874.416452][ T53] libceph: connect (1)[c::]:6789 error -101 [ 1874.426169][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 1874.573511][ T5267] vhci_hcd: connection reset by peer [ 1874.588600][T26599] vhci_hcd: stop threads [ 1874.591180][T26599] vhci_hcd: release socket [ 1874.593610][T26599] vhci_hcd: disconnect device [ 1875.023988][ T6060] vhci_hcd: vhci_device speed not set [ 1875.394353][ T5288] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1876.638742][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1876.646117][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1876.665879][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1876.672567][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1876.681207][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1876.739760][ T5298] lo speed is unknown, defaulting to 1000 [ 1877.039231][ T5298] chnl_net:caif_netlink_parms(): no params data found [ 1877.178541][ T5298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.181855][ T5298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.185350][ T5298] bridge_slave_0: entered allmulticast mode [ 1877.190335][ T5298] bridge_slave_0: entered promiscuous mode [ 1877.196545][ T5298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.200213][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1877.203536][ T5298] bridge_slave_1: entered allmulticast mode [ 1877.208408][ T5298] bridge_slave_1: entered promiscuous mode [ 1877.270642][ T5298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1877.278805][ T5298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1877.359837][ T5298] team0: Port device team_slave_0 added [ 1877.365519][ T5298] team0: Port device team_slave_1 added [ 1877.422653][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1877.426222][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1877.438105][ T5298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1877.444498][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1877.447435][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1877.460611][ T5298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.531535][ T5298] hsr_slave_0: entered promiscuous mode [ 1877.534774][ T5298] hsr_slave_1: entered promiscuous mode [ 1878.082146][ T5313] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8234'. [ 1878.144270][ T5313] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1878.271643][ T5315] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1878.274657][ T5315] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1878.281535][ T5315] vhci_hcd vhci_hcd.0: Device attached [ 1878.362271][ C2] vkms_vblank_simulate: vblank timer overrun [ 1878.531787][ T6060] usb 43-1: new high-speed USB device number 21 using vhci_hcd [ 1878.700508][ T63] Bluetooth: hci0: command tx timeout [ 1878.735883][ T5316] vhci_hcd: connection reset by peer [ 1878.741273][T26584] vhci_hcd: stop threads [ 1878.743187][T26584] vhci_hcd: release socket [ 1878.745405][T26584] vhci_hcd: disconnect device [ 1879.104315][T26580] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1879.108611][T26580] bond0 (unregistering): Released all slaves [ 1879.120513][T26580] bond1 (unregistering): Released all slaves [ 1879.229204][ T4173] vhci_hcd: vhci_device speed not set [ 1879.297936][T26580] bond2 (unregistering): (slave veth9): Releasing active interface [ 1879.302334][T26580] bond2 (unregistering): Released all slaves [ 1879.360926][ T5298] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1879.368269][ T5298] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1879.380861][ T5298] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1879.387752][ T5298] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1879.517353][ T5298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1879.627406][ T5298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1879.634436][T26598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1879.637272][T26598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1879.647038][ T678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1879.650096][ T678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1879.659474][ T5341] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1879.808462][T26580] hsr_slave_0: left promiscuous mode [ 1879.811216][T26580] hsr_slave_1: left promiscuous mode [ 1880.680466][ T63] Bluetooth: hci0: command tx timeout [ 1882.674627][ T63] Bluetooth: hci0: command tx timeout [ 1883.240085][ T2179] lo speed is unknown, defaulting to 1000 [ 1883.242773][ T2179] syz2: Port: 1 Link DOWN [ 1883.275172][ T5298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1883.413164][ T6060] vhci_hcd: vhci_device speed not set [ 1883.561359][ T5298] veth0_vlan: entered promiscuous mode [ 1883.570748][ T5298] veth1_vlan: entered promiscuous mode [ 1883.607946][ T5298] veth0_macvtap: entered promiscuous mode [ 1883.629871][ T5298] veth1_macvtap: entered promiscuous mode [ 1883.652373][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1883.665342][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1883.686255][T26584] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1883.689582][T26584] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1883.764219][T26584] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1883.769039][T26584] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1883.904557][T26599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1883.907843][T26599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1883.914278][ T5382] ceph: Path missing in source [ 1883.939195][T26602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1883.942341][T26602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.194413][ T5386] netlink: 'syz.7.8233': attribute type 1 has an invalid length. [ 1884.634063][ T63] Bluetooth: hci0: command tx timeout [ 1885.222381][ T5401] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1885.576886][ T5404] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1885.579049][ T5404] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1885.591043][ T5404] vhci_hcd vhci_hcd.0: Device attached [ 1885.843463][T32669] usb 55-1: new high-speed USB device number 31 using vhci_hcd [ 1886.262702][ T5405] vhci_hcd: connection reset by peer [ 1886.265034][T26602] vhci_hcd: stop threads [ 1886.266660][T26602] vhci_hcd: release socket [ 1886.268417][T26602] vhci_hcd: disconnect device [ 1887.104074][ T5423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1887.123121][ T5423] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1887.319163][ C1] vkms_vblank_simulate: vblank timer overrun [ 1888.138349][ C1] vkms_vblank_simulate: vblank timer overrun [ 1888.592196][ T5436] block device autoloading is deprecated and will be removed. [ 1888.596820][ T5436] blk_print_req_error: 6 callbacks suppressed [ 1888.596837][ T5436] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1889.285534][ T5452] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1889.655215][ T5453] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1889.657982][ T5453] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1889.682331][ T5453] vhci_hcd vhci_hcd.0: Device attached [ 1889.851193][ T5456] vhci_hcd: connection closed [ 1889.851476][T26580] vhci_hcd: stop threads [ 1889.855935][ T5460] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1889.856600][T26580] vhci_hcd: release socket [ 1889.858389][ T5460] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1889.864379][ T5460] vhci_hcd vhci_hcd.0: Device attached [ 1889.866440][T26580] vhci_hcd: disconnect device [ 1889.901074][ T6060] vhci_hcd: vhci_device speed not set [ 1890.196153][ T53] usb 37-1: new low-speed USB device number 51 using vhci_hcd [ 1890.257795][ T5466] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1890.260404][ T5466] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1890.263700][ T5466] vhci_hcd vhci_hcd.0: Device attached [ 1890.769457][ T5461] vhci_hcd: connection reset by peer [ 1890.774201][ T678] vhci_hcd: stop threads [ 1890.776630][ T678] vhci_hcd: release socket [ 1890.785781][ T678] vhci_hcd: disconnect device [ 1891.040037][ T5467] vhci_hcd: connection reset by peer [ 1891.042899][ T678] vhci_hcd: stop threads [ 1891.048161][ T678] vhci_hcd: release socket [ 1891.050256][ T678] vhci_hcd: disconnect device [ 1891.130865][T32669] vhci_hcd: vhci_device speed not set [ 1893.091741][ T5505] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1893.095393][ T5505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1893.102507][ T5505] vhci_hcd vhci_hcd.0: Device attached [ 1893.320879][ T6060] usb 43-1: new high-speed USB device number 23 using vhci_hcd [ 1893.457188][ T5507] vhci_hcd: connection reset by peer [ 1893.491972][ T678] vhci_hcd: stop threads [ 1893.494076][ T678] vhci_hcd: release socket [ 1893.497640][ T678] vhci_hcd: disconnect device [ 1894.082603][ T5513] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8279'. [ 1894.334639][ T5529] ceph: Path missing in source [ 1895.072601][ T53] vhci_hcd: vhci_device speed not set [ 1896.299797][ T5566] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1896.303528][ T5566] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1896.321775][ T5566] vhci_hcd vhci_hcd.0: Device attached [ 1896.634837][ T53] usb 37-1: new low-speed USB device number 52 using vhci_hcd [ 1896.912845][ T5567] vhci_hcd: connection reset by peer [ 1896.922880][ T678] vhci_hcd: stop threads [ 1896.925091][ T678] vhci_hcd: release socket [ 1896.927205][ T678] vhci_hcd: disconnect device [ 1897.714660][ T5582] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8303'. [ 1898.076743][ T5592] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1898.187784][ T6060] vhci_hcd: vhci_device speed not set [ 1900.349409][T15915] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 1900.492468][T15915] usb 14-1: Using ep0 maxpacket: 32 [ 1900.496998][T15915] usb 14-1: config 0 has an invalid interface number: 12 but max is 0 [ 1900.502763][T15915] usb 14-1: config 0 has no interface number 0 [ 1900.506634][T15915] usb 14-1: config 0 interface 12 has no altsetting 0 [ 1900.513129][T15915] usb 14-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1900.517845][T15915] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.523121][T15915] usb 14-1: Product: syz [ 1900.525517][T15915] usb 14-1: Manufacturer: syz [ 1900.528552][T15915] usb 14-1: SerialNumber: syz [ 1900.534071][T15915] usb 14-1: config 0 descriptor?? [ 1901.432130][ T5638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1901.439376][ T5638] 9pnet: Unknown protocol version 9p2000.u…áçïuK©ZD`qÏýãÉ«"šµWþ¦Ÿ4Œ«` Ê|yøcu{þÙþ?tOà [ 1901.540421][ T53] vhci_hcd: vhci_device speed not set [ 1901.573804][T15915] f81534 14-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1901.577491][T15915] f81534 14-1:0.12: f81534_find_config_idx: read failed: -71 [ 1901.580962][T15915] f81534 14-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1901.592900][T15915] f81534 14-1:0.12: probe with driver f81534 failed with error -71 [ 1901.608593][T15915] usb 14-1: USB disconnect, device number 4 [ 1902.473542][ T5648] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1902.475990][ T5648] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1902.483049][ T5648] vhci_hcd vhci_hcd.0: Device attached [ 1902.711708][ T53] usb 37-1: new high-speed USB device number 53 using vhci_hcd [ 1903.075728][ T5649] vhci_hcd: connection reset by peer [ 1903.078737][ T677] vhci_hcd: stop threads [ 1903.080479][ T677] vhci_hcd: release socket [ 1903.086331][ T677] vhci_hcd: disconnect device [ 1905.035217][T16244] hid_parser_main: 9 callbacks suppressed [ 1905.035237][T16244] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1905.051223][T16244] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1905.190422][ T5677] tipc: Started in network mode [ 1905.192585][ T5677] tipc: Node identity 4, cluster identity 4711 [ 1905.195384][ T5677] tipc: Node number set to 4 [ 1905.730330][ T5681] syzkaller0: entered promiscuous mode [ 1905.733034][ T5681] syzkaller0: entered allmulticast mode [ 1906.557657][ T5697] netlink: 'syz.7.8331': attribute type 3 has an invalid length. [ 1906.561040][ T5697] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8331'. [ 1907.626328][ T53] vhci_hcd: vhci_device speed not set [ 1909.449607][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8338'. [ 1909.469703][ T5721] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8338'. [ 1909.473585][ T5721] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8338'. [ 1909.553541][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1910.184119][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8348'. [ 1910.189101][ T5729] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8348'. [ 1910.192864][ T5729] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8348'. [ 1911.810849][ T5725] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1912.126266][ T5740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8342'. [ 1912.143067][ T5740] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1913.116618][ T5751] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1913.119542][ T5751] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1913.129259][ T5751] vhci_hcd vhci_hcd.0: Device attached [ 1913.369839][T32669] usb 43-1: new high-speed USB device number 24 using vhci_hcd [ 1913.382958][ T5752] vhci_hcd: connection closed [ 1913.383709][ T5753] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1913.645241][T26577] vhci_hcd: stop threads [ 1913.651807][T26577] vhci_hcd: release socket [ 1913.653848][T26577] vhci_hcd: disconnect device [ 1913.689280][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8349'. [ 1913.701873][ T5758] kvm: Disabled LAPIC found during irq injection [ 1914.886536][ T40] audit: type=1326 audit(2000001600.102:13815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.8355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1914.902977][ T40] audit: type=1326 audit(2000001600.102:13816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.8355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1914.908504][ T5778] debugfs: '!' already exists in 'ieee80211' [ 1914.921961][ T40] audit: type=1326 audit(2000001600.102:13817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.8355" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1914.930894][ T40] audit: type=1326 audit(2000001600.102:13818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.8355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1914.939331][ T40] audit: type=1326 audit(2000001600.102:13819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.8355" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1914.948553][ T40] audit: type=1326 audit(2000001600.102:13820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.8355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1914.958828][ T40] audit: type=1326 audit(2000001600.102:13821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.8355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1914.971492][ T40] audit: type=1326 audit(2000001600.102:13822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.8355" exe="/syz-executor" sig=0 arch=40000003 syscall=63 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1914.982344][ T40] audit: type=1326 audit(2000001600.102:13823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.8355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1914.992205][ T40] audit: type=1326 audit(2000001600.102:13824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.8355" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1915.015847][ T5781] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1915.400992][ T5789] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1915.403834][ T5789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1915.408719][ T5789] vhci_hcd vhci_hcd.0: Device attached [ 1915.664672][ T6060] usb 55-1: new low-speed USB device number 32 using vhci_hcd [ 1916.339380][ T5790] vhci_hcd: connection reset by peer [ 1916.343367][T26599] vhci_hcd: stop threads [ 1916.345133][T26599] vhci_hcd: release socket [ 1916.348473][T26599] vhci_hcd: disconnect device [ 1917.823325][ T5810] loop7: detected capacity change from 0 to 7 [ 1917.831725][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1917.835486][ C0] buffer_io_error: 6 callbacks suppressed [ 1917.835500][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1917.847956][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1917.852037][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1917.859798][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1917.863660][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1917.875529][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1917.879474][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1917.884670][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1917.888878][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 1917.892452][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1917.896015][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1917.902706][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1917.906480][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1917.909470][ T5810] ldm_validate_partition_table(): Disk read failed. [ 1917.920271][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1917.923736][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1917.928849][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1917.932509][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1917.938389][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1917.941838][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1917.945312][ T5810] Dev loop7: unable to read RDB block 0 [ 1917.958827][ T5810] loop7: unable to read partition table [ 1917.961681][ T5810] loop7: partition table beyond EOD, truncated [ 1917.964256][ T5810] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1918.040640][ T5814] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1918.043706][ T5814] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1918.050603][ T5814] vhci_hcd vhci_hcd.0: Device attached [ 1918.320316][ T5815] vhci_hcd: connection closed [ 1918.320477][T26577] vhci_hcd: stop threads [ 1918.327185][T26577] vhci_hcd: release socket [ 1918.329290][T26577] vhci_hcd: disconnect device [ 1918.374609][ T5823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1918.408178][ T5823] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1918.524055][ T5827] loop7: detected capacity change from 0 to 16384 [ 1918.744033][ T5832] debugfs: '!' already exists in 'ieee80211' [ 1918.914305][T32669] vhci_hcd: vhci_device speed not set [ 1920.538373][ T6060] vhci_hcd: vhci_device speed not set [ 1922.307189][ T5875] ceph: Path missing in source [ 1922.351243][ T5872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1922.354714][ T5872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1923.408532][ T2179] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 1923.658240][ T2179] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1923.662492][ T2179] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1923.686776][ T2179] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1923.690704][ T2179] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1923.706264][ T2179] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1923.711113][ T2179] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1923.719605][ T2179] usb 14-1: Product: syz [ 1923.721636][ T2179] usb 14-1: Manufacturer: syz [ 1923.735260][ T2179] cdc_wdm 14-1:1.0: skipping garbage [ 1923.737636][ T2179] cdc_wdm 14-1:1.0: skipping garbage [ 1923.742796][ T2179] cdc_wdm 14-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1923.937319][ T2179] usb 14-1: USB disconnect, device number 5 [ 1924.131886][ T5902] ceph: Path missing in source [ 1925.418157][ T5916] netlink: 'syz.9.8394': attribute type 11 has an invalid length. [ 1925.421238][ T5916] netlink: 'syz.9.8394': attribute type 10 has an invalid length. [ 1925.423993][ T5916] netlink: 224 bytes leftover after parsing attributes in process `syz.9.8394'. [ 1927.969575][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 1927.969590][ T40] audit: type=1326 audit(2000001613.835:13855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.8400" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1927.989188][ T40] audit: type=1326 audit(2000001613.856:13856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.8400" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1928.002104][ T40] audit: type=1326 audit(2000001613.856:13857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.8400" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1928.012234][ T40] audit: type=1326 audit(2000001613.856:13858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.8400" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1928.036214][ T40] audit: type=1326 audit(2000001613.856:13859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.8400" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1928.054087][ T40] audit: type=1326 audit(2000001613.856:13860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.8400" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1928.075397][ T40] audit: type=1326 audit(2000001613.856:13861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.8400" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1928.086602][ T40] audit: type=1326 audit(2000001613.856:13862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.8400" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1928.096723][ T40] audit: type=1326 audit(2000001613.866:13863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.8400" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1928.105719][ T40] audit: type=1326 audit(2000001613.887:13864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.8400" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1928.134332][ T5939] team0: Device ipvlan1 failed to register rx_handler [ 1928.225517][ T5948] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1928.228352][ T5948] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1928.231976][ T5948] vhci_hcd vhci_hcd.0: Device attached [ 1928.675406][ T5949] vhci_hcd: connection closed [ 1928.675941][T26577] vhci_hcd: stop threads [ 1928.680497][T26577] vhci_hcd: release socket [ 1928.694663][T26577] vhci_hcd: disconnect device [ 1928.715430][ T53] vhci_hcd: vhci_device speed not set [ 1929.109449][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8406'. [ 1929.122418][ T5960] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8406'. [ 1929.127859][ T5960] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8406'. [ 1929.410597][ T5972] : entered promiscuous mode [ 1929.842061][ T5978] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1929.845263][ T5978] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1929.854479][ T5978] vhci_hcd vhci_hcd.0: Device attached [ 1929.860322][ T5978] ata1.00: invalid multi_count 1 ignored [ 1930.057984][ T5979] vhci_hcd: connection closed [ 1930.059313][T26577] vhci_hcd: stop threads [ 1930.074337][T26577] vhci_hcd: release socket [ 1930.077072][T26577] vhci_hcd: disconnect device [ 1930.123068][T32669] usb 52-1: enqueue for inactive port 0 [ 1930.480639][ T5996] team0: Device ipvlan1 failed to register rx_handler [ 1930.619594][T32669] usb usb52-port1: attempt power cycle [ 1930.967405][ T6005] 9pnet_fd: Insufficient options for proto=fd [ 1931.509726][T32669] usb usb52-port1: unable to enumerate USB device [ 1931.651187][ T6011] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1931.889631][ T6022] : entered promiscuous mode [ 1932.283639][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8426'. [ 1932.391884][ T6024] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1932.395494][ T6024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1932.485058][ T6024] vhci_hcd vhci_hcd.0: Device attached [ 1933.190044][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8430'. [ 1933.199522][ T6045] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8430'. [ 1933.203309][ T6045] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8430'. [ 1933.323742][ T63] Bluetooth: hci0: command 0x0401 tx timeout [ 1933.373984][ T40] kauditd_printk_skb: 191 callbacks suppressed [ 1933.374000][ T40] audit: type=1326 audit(2000001619.515:14056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.9.8431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1933.381140][ T3240] usb 51-1: new low-speed USB device number 29 using vhci_hcd [ 1933.391551][ T40] audit: type=1326 audit(2000001619.536:14057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.9.8431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1933.437628][ T40] audit: type=1326 audit(2000001619.557:14058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.9.8431" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1933.450947][ T40] audit: type=1326 audit(2000001619.567:14059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.9.8431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1933.513950][ T6030] vhci_hcd: connection reset by peer [ 1933.809368][T26602] vhci_hcd: stop threads [ 1933.809372][ T40] audit: type=1326 audit(2000001619.567:14060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.9.8431" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1933.821523][ T40] audit: type=1326 audit(2000001619.567:14061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.9.8431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1933.835790][ T40] audit: type=1326 audit(2000001619.567:14062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.9.8431" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1933.845756][ T40] audit: type=1326 audit(2000001619.567:14063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.9.8431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1933.855519][ T40] audit: type=1326 audit(2000001619.567:14064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.9.8431" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1933.865061][ T40] audit: type=1326 audit(2000001619.567:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.9.8431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1933.879981][T26602] vhci_hcd: release socket [ 1933.882311][T26602] vhci_hcd: disconnect device [ 1934.494172][ T6072] : entered promiscuous mode [ 1935.052107][ T6085] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1935.054931][ T6085] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1935.060061][ T6085] vhci_hcd vhci_hcd.0: Device attached [ 1935.399500][T32669] usb 37-1: new high-speed USB device number 55 using vhci_hcd [ 1935.555066][ T6086] vhci_hcd: connection reset by peer [ 1935.601580][T26577] vhci_hcd: stop threads [ 1935.603997][T26577] vhci_hcd: release socket [ 1935.606619][T26577] vhci_hcd: disconnect device [ 1937.079693][ T6114] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1937.083337][ T6114] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1937.090354][ T6114] vhci_hcd vhci_hcd.0: Device attached [ 1937.339251][ T6103] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1937.345581][ T6103] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1937.349099][ T6103] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1937.356688][ T6103] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1937.360259][ T6103] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1937.385122][ T6103] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1937.479660][ T6125] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8450'. [ 1937.532500][ T6131] netlink: 'syz.3.8451': attribute type 1 has an invalid length. [ 1937.536355][ T6131] netlink: 216 bytes leftover after parsing attributes in process `syz.3.8451'. [ 1937.604779][ T6115] vhci_hcd: connection closed [ 1937.605209][T26577] vhci_hcd: stop threads [ 1937.612079][T26577] vhci_hcd: release socket [ 1937.614294][T26577] vhci_hcd: disconnect device [ 1937.984960][ T6149] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1937.987796][ T6149] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1937.999981][ T6149] vhci_hcd vhci_hcd.0: Device attached [ 1938.247299][ T6060] usb 55-1: new high-speed USB device number 33 using vhci_hcd [ 1938.266470][ T3240] vhci_hcd: vhci_device speed not set [ 1938.306363][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8460'. [ 1938.311908][ T6155] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8460'. [ 1938.317359][ T6155] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8460'. [ 1938.340767][ T6150] vhci_hcd: connection reset by peer [ 1938.355782][ T3509] vhci_hcd: stop threads [ 1938.357698][ T3509] vhci_hcd: release socket [ 1938.366520][ T3509] vhci_hcd: disconnect device [ 1938.735493][ T6173] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8466'. [ 1939.022502][ T6174] ubi: mtd0 is already attached to ubi31 [ 1939.038576][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 1939.286969][ T63] Bluetooth: hci0: command 0x0401 tx timeout [ 1939.290860][ T2028] Bluetooth: hci4: command 0x0405 tx timeout [ 1939.290911][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 1939.729639][ T6192] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1939.778163][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8472'. [ 1939.793314][ T6194] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8472'. [ 1939.806787][ T6194] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8472'. [ 1940.257497][T32669] vhci_hcd: vhci_device speed not set [ 1941.258811][ T63] Bluetooth: hci0: command 0x0401 tx timeout [ 1941.530999][ T6217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1941.618007][ T6217] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1942.143429][ T6226] ceph: Path missing in source [ 1942.395900][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8482'. [ 1942.401106][ T6230] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8482'. [ 1942.404843][ T6230] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8482'. [ 1943.162921][ T6060] vhci_hcd: vhci_device speed not set [ 1943.229126][ T6183] Bluetooth: hci0: command 0x0401 tx timeout [ 1943.546315][T32669] hid (null): bogus close delimiter [ 1943.644524][T32669] hid-generic 0000:0000:0000.000E: bogus close delimiter [ 1943.647692][T32669] hid-generic 0000:0000:0000.000E: item 0 2 2 10 parsing failed [ 1943.651676][T32669] hid-generic 0000:0000:0000.000E: probe with driver hid-generic failed with error -22 [ 1943.897273][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 1943.897287][ T40] audit: type=1326 audit(2000001630.560:14096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.9.8486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1943.904460][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8486'. [ 1943.910512][ T6250] openvswitch: netlink: Flow actions attr not present in new flow. [ 1943.925559][ T40] audit: type=1326 audit(2000001630.560:14097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.9.8486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1943.976409][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8486'. [ 1944.327557][ T40] audit: type=1326 audit(2000001630.560:14098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.9.8486" exe="/syz-executor" sig=0 arch=40000003 syscall=62 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1944.438236][ T40] audit: type=1326 audit(2000001630.560:14099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.9.8486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1944.447532][ T40] audit: type=1326 audit(2000001630.560:14100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.9.8486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1944.460341][ T40] audit: type=1326 audit(2000001630.560:14101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.9.8486" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1944.475319][ T40] audit: type=1326 audit(2000001630.560:14102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.9.8486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1944.488318][ T40] audit: type=1326 audit(2000001630.560:14103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.9.8486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1944.503532][ T40] audit: type=1326 audit(2000001630.560:14104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.9.8486" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1944.530956][ T40] audit: type=1326 audit(2000001630.560:14105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.9.8486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1945.210002][ T63] Bluetooth: hci0: command 0x0401 tx timeout [ 1945.505523][ T6275] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1946.041380][ T6279] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1946.044127][ T6279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1946.057590][ T6279] vhci_hcd vhci_hcd.0: Device attached [ 1946.295559][ T6060] usb 43-1: new low-speed USB device number 25 using vhci_hcd [ 1946.650575][ T6280] vhci_hcd: connection reset by peer [ 1946.655470][ T678] vhci_hcd: stop threads [ 1946.658314][ T678] vhci_hcd: release socket [ 1946.660471][ T678] vhci_hcd: disconnect device [ 1947.977917][ T6286] ceph: Path missing in source [ 1948.882349][ T6304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1949.083342][ T6306] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1949.879544][ T6312] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1949.882400][ T6312] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1949.956077][ T6312] vhci_hcd vhci_hcd.0: Device attached [ 1950.196252][ T6313] vhci_hcd: connection closed [ 1950.196603][T26577] vhci_hcd: stop threads [ 1950.201736][T26577] vhci_hcd: release socket [ 1950.203743][T26577] vhci_hcd: disconnect device [ 1950.210367][ T53] usb 55-1: new high-speed USB device number 34 using vhci_hcd [ 1950.213526][ T53] usb 55-1: enqueue for inactive port 0 [ 1950.276983][ T53] vhci_hcd: vhci_device speed not set [ 1950.408063][ T6321] sd 0:0:0:0: PR command failed: 1026 [ 1950.410783][ T6321] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 1950.413864][ T6321] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 1951.109287][ T6333] tipc: Started in network mode [ 1951.111118][ T6333] tipc: Node identity 080211000001, cluster identity 4711 [ 1951.113465][ T6333] tipc: Enabled bearer , priority 0 [ 1951.117236][ T6333] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode [ 1951.124917][ T6333] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode [ 1951.143524][ T6060] vhci_hcd: vhci_device speed not set [ 1951.151815][ T6333] tipc: Resetting bearer [ 1951.472652][ T6339] loop6: detected capacity change from 0 to 524287999 [ 1951.475499][ T6339] buffer_io_error: 5 callbacks suppressed [ 1951.475508][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 1951.480488][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 1951.483425][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 1951.486074][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 1951.489349][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 1951.492438][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 1951.495422][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 1951.498341][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 1951.501830][ T6339] ldm_validate_partition_table(): Disk read failed. [ 1951.504785][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 1951.507629][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 1951.511349][ T6339] Dev loop6: unable to read RDB block 0 [ 1951.514322][ T6339] loop6: unable to read partition table [ 1951.518056][ T6339] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1951.584277][ T6340] ldm_validate_partition_table(): Disk read failed. [ 1951.592019][ T6340] Dev loop6: unable to read RDB block 0 [ 1951.599210][ T6340] loop6: unable to read partition table [ 1951.606221][ T6340] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1952.105648][T15915] tipc: Node number set to 134418688 [ 1953.812884][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8518'. [ 1953.818727][ T6372] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8518'. [ 1953.827275][ T6372] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8518'. [ 1955.461423][ T6396] ceph: Path missing in source [ 1956.338302][ T6410] 9pnet_virtio: no channels available for device syz [ 1957.734725][ T6437] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8535'. [ 1957.942758][ T6441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1957.960639][ T6442] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1958.765339][ T6457] ceph: Path missing in source [ 1959.814970][ T6465] devtmpfs: Unknown parameter 'usrqu ' [ 1959.928897][ T6462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1960.687807][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8547'. [ 1960.698731][ T6478] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8547'. [ 1960.702098][ T6478] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8547'. [ 1961.879801][ T6503] ceph: Path missing in source [ 1963.195223][ T6518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1963.287635][ T6518] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1963.327805][ T6519] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1963.330506][ T6519] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1963.335890][ T6519] vhci_hcd vhci_hcd.0: Device attached [ 1963.573000][ T53] usb 51-1: new high-speed USB device number 30 using vhci_hcd [ 1963.656160][ T6520] vhci_hcd: connection reset by peer [ 1963.674641][ T678] vhci_hcd: stop threads [ 1963.676417][ T678] vhci_hcd: release socket [ 1963.686968][ T678] vhci_hcd: disconnect device [ 1964.382386][ T6539] ceph: Path missing in source [ 1965.754296][ T6552] lo speed is unknown, defaulting to 1000 [ 1965.757465][ T6552] lo speed is unknown, defaulting to 1000 [ 1965.761901][ T6552] lo speed is unknown, defaulting to 1000 [ 1965.782329][ T6552] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1965.799428][ T6552] lo speed is unknown, defaulting to 1000 [ 1965.802153][ T6552] lo speed is unknown, defaulting to 1000 [ 1965.804633][ T6552] lo speed is unknown, defaulting to 1000 [ 1965.807297][ T6552] lo speed is unknown, defaulting to 1000 [ 1965.809751][ T6552] lo speed is unknown, defaulting to 1000 [ 1966.465171][ T6576] lo speed is unknown, defaulting to 1000 [ 1967.045408][ T6591] Bluetooth: MGMT ver 1.23 [ 1967.469150][ T6597] ceph: Path missing in source [ 1968.071230][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1968.440555][ T53] vhci_hcd: vhci_device speed not set [ 1968.983461][ T63] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1968.983814][ T6183] Bluetooth: hci0: command 0x0401 tx timeout [ 1969.131255][ T6616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1969.403909][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8586'. [ 1969.408739][ T6627] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8586'. [ 1969.416354][ T6627] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8586'. [ 1969.705372][ T6637] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8589'. [ 1969.708408][ T6635] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8587'. [ 1969.716360][ T6637] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8589'. [ 1969.725764][ T6637] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8589'. [ 1970.026315][ T6644] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1970.028346][ T6644] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1970.031640][ T6644] vhci_hcd vhci_hcd.0: Device attached [ 1970.471276][T32669] usb 43-1: new low-speed USB device number 26 using vhci_hcd [ 1970.556401][ T6645] vhci_hcd: connection reset by peer [ 1970.558280][T26577] vhci_hcd: stop threads [ 1970.559678][T26577] vhci_hcd: release socket [ 1970.561443][T26577] vhci_hcd: disconnect device [ 1971.239871][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8595'. [ 1971.243624][ T6658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8595'. [ 1971.246406][ T6658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8595'. [ 1974.593545][ T6723] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1974.596130][ T6723] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1974.599609][ T6723] vhci_hcd vhci_hcd.0: Device attached [ 1974.810286][ T6724] vhci_hcd: connection closed [ 1974.810500][T26580] vhci_hcd: stop threads [ 1974.814746][T26580] vhci_hcd: release socket [ 1974.816773][T26580] vhci_hcd: disconnect device [ 1974.840659][ T53] usb 37-1: new high-speed USB device number 56 using vhci_hcd [ 1974.843219][ T53] usb 37-1: enqueue for inactive port 0 [ 1974.916873][ T53] vhci_hcd: vhci_device speed not set [ 1975.027273][ T6731] __nla_validate_parse: 3 callbacks suppressed [ 1975.027288][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8615'. [ 1975.034481][ T6731] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8615'. [ 1975.035078][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8615'. [ 1975.042438][ T6732] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8615'. [ 1975.375637][T32669] vhci_hcd: vhci_device speed not set [ 1976.415489][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8620'. [ 1976.420056][ T6746] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8620'. [ 1976.424316][ T6746] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8620'. [ 1976.734551][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8619'. [ 1977.236747][ T6764] geneve2: entered promiscuous mode [ 1977.262825][ T6764] geneve2: entered allmulticast mode [ 1979.456444][ T6801] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1979.458527][ T6801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1979.461309][ T6801] vhci_hcd vhci_hcd.0: Device attached [ 1979.879426][ T6806] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1979.886954][ T6806] UDF-fs: Scanning with blocksize 2048 failed [ 1979.893930][ T6806] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1979.899262][ T6806] UDF-fs: Scanning with blocksize 4096 failed [ 1979.926593][T32669] usb 55-1: new low-speed USB device number 35 using vhci_hcd [ 1979.982201][ T6802] vhci_hcd: connection reset by peer [ 1979.984558][T26599] vhci_hcd: stop threads [ 1979.986336][T26599] vhci_hcd: release socket [ 1979.988044][T26599] vhci_hcd: disconnect device [ 1981.969212][ T6842] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8645'. [ 1982.722527][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 1982.722539][ T40] audit: type=1800 audit(2000001671.318:14154): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.8649" name="/newroot/461/bus" dev="tmpfs" ino=2543 res=0 errno=0 [ 1982.908490][ T6864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1983.436923][ T6878] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1983.438995][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1983.442465][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 1983.760933][ T6891] ceph: Path missing in source [ 1984.332383][ T6880] vhci_hcd: connection closed [ 1984.332654][T26599] vhci_hcd: stop threads [ 1984.335549][T26599] vhci_hcd: release socket [ 1984.337346][T26599] vhci_hcd: disconnect device [ 1984.832322][T32669] vhci_hcd: vhci_device speed not set [ 1985.550832][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8665'. [ 1985.554591][ T6912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8665'. [ 1985.557644][ T6912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8665'. [ 1985.746431][ T6183] Bluetooth: hci0: command 0x0401 tx timeout [ 1985.866177][ T6917] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1985.883343][ T6917] batadv1: entered allmulticast mode [ 1986.225757][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8667'. [ 1986.372763][ T6923] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1986.466066][ T6926] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8669'. [ 1986.602840][ T6931] ceph: Path missing in source [ 1987.154195][ T6937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1987.380553][ T6929] geneve2: entered promiscuous mode [ 1987.382769][ T6929] geneve2: entered allmulticast mode [ 1987.860435][ T6951] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1987.862849][ T6951] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1987.869999][ T6951] vhci_hcd vhci_hcd.0: Device attached [ 1988.336755][T32669] usb 51-1: new high-speed USB device number 31 using vhci_hcd [ 1988.372818][ T6952] vhci_hcd: connection reset by peer [ 1988.375527][T26580] vhci_hcd: stop threads [ 1988.376873][T26580] vhci_hcd: release socket [ 1988.378429][T26580] vhci_hcd: disconnect device [ 1988.869788][ T6970] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1988.871933][ T6970] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1988.879144][ T6970] vhci_hcd vhci_hcd.0: Device attached [ 1988.927808][ T6974] input: syz0 as /devices/virtual/input/input46 [ 1989.118037][ T53] usb 55-1: new high-speed USB device number 36 using vhci_hcd [ 1989.332135][ T6980] lo speed is unknown, defaulting to 1000 [ 1989.408981][ T6972] vhci_hcd: connection reset by peer [ 1989.411658][T26577] vhci_hcd: stop threads [ 1989.414615][T26577] vhci_hcd: release socket [ 1989.416453][T26577] vhci_hcd: disconnect device [ 1990.236965][ T6998] tipc: Started in network mode [ 1990.238580][ T6998] tipc: Node identity 4ecd8fe53148, cluster identity 4711 [ 1990.241342][ T6998] tipc: Enabled bearer , priority 0 [ 1990.255252][ T6998] tipc: Disabling bearer [ 1990.452430][ T7006] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8683'. [ 1992.671998][ T7031] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1993.223250][T32669] vhci_hcd: vhci_device speed not set [ 1993.601370][ T7050] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1993.603444][ T7050] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1993.705114][ T7050] vhci_hcd vhci_hcd.0: Device attached [ 1994.009512][ T7051] vhci_hcd: connection reset by peer [ 1994.012128][T26599] vhci_hcd: stop threads [ 1994.016751][T26599] vhci_hcd: release socket [ 1994.017907][ T7055] random: crng reseeded on system resumption [ 1994.018875][T26599] vhci_hcd: disconnect device [ 1994.099301][ T53] vhci_hcd: vhci_device speed not set [ 1994.244577][ T7054] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8700'. [ 1994.249283][ T7054] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8700'. [ 1994.283338][ T7054] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8700'. [ 1994.288020][ T7054] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8700'. [ 1994.333307][ T7054] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8700'. [ 1994.336130][ T7054] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8700'. [ 1994.361466][ T7062] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1994.364172][ T7062] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1994.387332][ T7062] vhci_hcd vhci_hcd.0: Device attached [ 1994.582028][ T7067] ceph: Path missing in source [ 1994.613492][ T4173] usb 43-1: new low-speed USB device number 27 using vhci_hcd [ 1994.905199][ T40] audit: type=1326 audit(2000001684.117:14155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.9.8704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1994.947488][ T40] audit: type=1326 audit(2000001684.117:14156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.9.8704" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1994.958759][ T40] audit: type=1326 audit(2000001684.117:14157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.9.8704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1994.969933][ T40] audit: type=1326 audit(2000001684.117:14158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.9.8704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1994.979687][ T40] audit: type=1326 audit(2000001684.117:14159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.9.8704" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1994.988193][ T40] audit: type=1326 audit(2000001684.117:14160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.9.8704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1994.999271][ T40] audit: type=1326 audit(2000001684.127:14161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.9.8704" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1995.006922][ T40] audit: type=1326 audit(2000001684.127:14162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.9.8704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1995.016052][ T40] audit: type=1326 audit(2000001684.127:14163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.9.8704" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1995.023070][ T40] audit: type=1326 audit(2000001684.127:14164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.9.8704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1995.086256][ T7063] vhci_hcd: connection reset by peer [ 1995.091625][T26598] vhci_hcd: stop threads [ 1995.093046][T26598] vhci_hcd: release socket [ 1995.094460][T26598] vhci_hcd: disconnect device [ 1995.206424][ T7076] pim6reg: entered allmulticast mode [ 1995.582706][ T7072] pim6reg: left allmulticast mode [ 1995.929994][ T7096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8712'. [ 1995.934489][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8712'. [ 1996.135089][ T7107] overlayfs: missing 'lowerdir' [ 1996.641361][ T7115] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1996.644146][ T7115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1996.651933][ T7115] vhci_hcd vhci_hcd.0: Device attached [ 1996.722573][ T7120] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1996.807310][ T7117] vhci_hcd: connection closed [ 1996.807514][T26580] vhci_hcd: stop threads [ 1996.811170][T26580] vhci_hcd: release socket [ 1996.813328][T26580] vhci_hcd: disconnect device [ 1996.833082][T32669] vhci_hcd: vhci_device speed not set [ 1999.024112][ T7146] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1999.026233][ T7146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1999.029562][ T7146] vhci_hcd vhci_hcd.0: Device attached [ 1999.261542][ T53] usb 51-1: new low-speed USB device number 32 using vhci_hcd [ 1999.363572][ T7161] sg_write: data in/out 489/14 bytes for SCSI command 0xb-- guessing data in; [ 1999.363572][ T7161] program syz.3.8731 not setting count and/or reply_len properly [ 1999.452283][ T4173] vhci_hcd: vhci_device speed not set [ 1999.554964][ T7147] vhci_hcd: connection reset by peer [ 1999.557380][ T678] vhci_hcd: stop threads [ 1999.559215][ T678] vhci_hcd: release socket [ 1999.561176][ T678] vhci_hcd: disconnect device [ 1999.601283][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8727'. [ 1999.605136][ T7165] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8727'. [ 1999.625346][ T7165] geneve2: entered promiscuous mode [ 1999.627761][ T7165] geneve2: entered allmulticast mode [ 2000.758749][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 2000.758764][ T40] audit: type=1326 audit(2000001690.259:14204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.7.8736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 2000.774782][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8736'. [ 2000.778573][ T40] audit: type=1326 audit(2000001690.269:14205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.7.8736" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 2000.782170][ T7179] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 2000.782657][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8736'. [ 2000.787244][ T40] audit: type=1326 audit(2000001690.269:14206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.7.8736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 2000.789626][ T7179] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2000.793182][ T40] audit: type=1326 audit(2000001690.269:14207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.7.8736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 2000.801981][ T7179] vhci_hcd vhci_hcd.0: Device attached [ 2000.804865][ T40] audit: type=1326 audit(2000001690.269:14208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.7.8736" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 2000.825970][ T40] audit: type=1326 audit(2000001690.269:14209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.7.8736" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 2000.835874][ T40] audit: type=1326 audit(2000001690.269:14210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.7.8736" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 2000.844921][ T40] audit: type=1326 audit(2000001690.269:14211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.7.8736" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 2000.857040][ T40] audit: type=1326 audit(2000001690.269:14212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.7.8736" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 2000.866841][ T40] audit: type=1326 audit(2000001690.269:14213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.7.8736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 2000.987275][ T7181] vhci_hcd: connection closed [ 2000.987765][T26598] vhci_hcd: stop threads [ 2000.990678][T26598] vhci_hcd: release socket [ 2000.995189][T26598] vhci_hcd: disconnect device [ 2001.033522][T32669] vhci_hcd: vhci_device speed not set [ 2001.134423][ T7208] netlink: 'syz.3.8744': attribute type 10 has an invalid length. [ 2001.443817][ T7212] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2001.445828][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2001.449179][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 2001.671349][ T4173] usb 43-1: new low-speed USB device number 28 using vhci_hcd [ 2002.122966][ T7213] vhci_hcd: connection reset by peer [ 2002.124753][T26599] vhci_hcd: stop threads [ 2002.128890][T26599] vhci_hcd: release socket [ 2002.134005][T26599] vhci_hcd: disconnect device [ 2003.100211][ T59] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 2003.224057][ T59] usb 8-1: device descriptor read/64, error -71 [ 2003.481489][ T59] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 2003.482830][T32669] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 2003.624134][ T59] usb 8-1: device descriptor read/64, error -71 [ 2003.632881][T32669] usb 12-1: config 0 has no interfaces? [ 2003.652143][T32669] usb 12-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2003.655518][T32669] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.658873][T32669] usb 12-1: Product: syz [ 2003.660372][T32669] usb 12-1: Manufacturer: syz [ 2003.663766][T32669] usb 12-1: SerialNumber: syz [ 2003.689535][T32669] usb 12-1: config 0 descriptor?? [ 2003.748163][ T59] usb usb8-port1: attempt power cycle [ 2004.100033][ T59] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 2004.120363][ T53] vhci_hcd: vhci_device speed not set [ 2004.121297][ T59] usb 8-1: device descriptor read/8, error -71 [ 2004.347590][ T59] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 2004.379508][ T59] usb 8-1: device descriptor read/8, error -71 [ 2004.482665][ T59] usb usb8-port1: unable to enumerate USB device [ 2005.411060][ T7270] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2005.413410][ T7270] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2005.424194][ T7270] vhci_hcd vhci_hcd.0: Device attached [ 2005.672680][ T53] usb 37-1: new high-speed USB device number 57 using vhci_hcd [ 2005.940235][ T7271] vhci_hcd: connection reset by peer [ 2005.948291][T26577] vhci_hcd: stop threads [ 2005.950001][T26577] vhci_hcd: release socket [ 2005.951955][T26577] vhci_hcd: disconnect device [ 2006.024045][ T7279] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2006.026268][ T7279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2006.041295][ T7279] vhci_hcd vhci_hcd.0: Device attached [ 2006.186293][T32669] usb 12-1: USB disconnect, device number 14 [ 2006.597229][ T7280] vhci_hcd: connection reset by peer [ 2006.599924][T26577] vhci_hcd: stop threads [ 2006.601268][T26577] vhci_hcd: release socket [ 2006.602677][T26577] vhci_hcd: disconnect device [ 2006.662423][ T4173] vhci_hcd: vhci_device speed not set [ 2010.087880][ T7337] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 2010.089702][ T7337] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2010.106982][ T7337] vhci_hcd vhci_hcd.0: Device attached [ 2010.482385][ T7338] vhci_hcd: connection closed [ 2010.482670][T26598] vhci_hcd: stop threads [ 2010.486460][T26598] vhci_hcd: release socket [ 2010.488337][T26598] vhci_hcd: disconnect device [ 2010.586357][ T53] vhci_hcd: vhci_device speed not set [ 2010.891460][T16244] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 2011.036668][T16244] usb 8-1: Using ep0 maxpacket: 8 [ 2011.040159][T16244] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2011.043109][T16244] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2011.048737][T16244] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2011.052170][T16244] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2011.056332][T16244] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2011.060696][T16244] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2011.100934][T16244] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.301299][T16244] usb 8-1: usb_control_msg returned -32 [ 2011.316629][T16244] usbtmc 8-1:16.0: can't read capabilities [ 2012.760496][ T7372] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2012.763281][ T7372] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2012.768291][ T7372] vhci_hcd vhci_hcd.0: Device attached [ 2012.821561][ T7376] input: syz0 as /devices/virtual/input/input48 [ 2012.823875][ T7377] fuseblk: Unknown parameter 'jlksizer§DS"à…' [ 2013.005466][ T53] usb 37-1: new high-speed USB device number 58 using vhci_hcd [ 2013.226756][ T7373] vhci_hcd: connection reset by peer [ 2013.229209][T26577] vhci_hcd: stop threads [ 2013.230935][T26577] vhci_hcd: release socket [ 2013.232899][T26577] vhci_hcd: disconnect device [ 2013.495819][T16244] usb 8-1: USB disconnect, device number 16 [ 2013.515261][ T7388] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8787'. [ 2014.433409][ T7395] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.8789'. [ 2014.440898][ T7395] 9pnet_fd: Insufficient options for proto=fd [ 2014.739688][ T7397] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2014.741926][ T7398] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2014.756614][ T7403] lo speed is unknown, defaulting to 1000 [ 2016.043708][ T3538] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 2016.243660][ T3538] usb 8-1: Using ep0 maxpacket: 16 [ 2016.247322][ T3538] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2016.251033][ T3538] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2016.264247][ T3538] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2016.269378][ T3538] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2016.274686][ T3538] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.281855][ T3538] usb 8-1: config 0 descriptor?? [ 2016.388193][ T7454] lo speed is unknown, defaulting to 1000 [ 2016.683321][ T7439] random: crng reseeded on system resumption [ 2016.700193][ T3538] input: HID 0955:7214 Haptics as /devices/virtual/input/input49 [ 2016.745677][ T3538] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 2016.758227][ T3538] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 2016.978631][T17438] usb 8-1: USB disconnect, device number 17 [ 2016.993743][T17438] ------------[ cut here ]------------ [ 2016.995524][T17438] workqueue: work disable count underflowed [ 2016.997457][T17438] WARNING: CPU: 2 PID: 17438 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 2017.000234][T17438] Modules linked in: [ 2017.001863][T17438] CPU: 2 UID: 0 PID: 17438 Comm: kworker/2:5 Not tainted syzkaller #0 PREEMPT(full) [ 2017.006278][T17438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2017.009838][T17438] Workqueue: usb_hub_wq hub_event [ 2017.011410][T17438] RIP: 0010:enable_work+0x2f8/0x340 [ 2017.013069][T17438] Code: 89 ee e8 2b 2b 38 00 45 84 ed 0f 85 29 fe ff ff e8 3d 30 38 00 c6 05 78 22 11 0f 01 90 48 c7 c7 e0 03 ac 8b e8 69 27 f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 e7 a0 9d 00 e9 aa fe ff ff [ 2017.019266][T17438] RSP: 0018:ffffc900069473c0 EFLAGS: 00010086 [ 2017.021189][T17438] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90030646000 [ 2017.022266][ T3240] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2017.023659][T17438] RDX: 0000000000100000 RSI: ffffffff817a0305 RDI: 0000000000000001 [ 2017.030362][T17438] RBP: ffff88802ec20738 R08: 0000000000000001 R09: 0000000000000000 [ 2017.032863][T17438] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000d28e79 [ 2017.033822][ T3240] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2017.035371][T17438] R13: 0000000000000000 R14: ffff88802ec20698 R15: ffff88802ec20730 [ 2017.035381][T17438] FS: 0000000000000000(0000) GS:ffff8880976ba000(0000) knlGS:0000000000000000 [ 2017.035404][T17438] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2017.035414][T17438] CR2: 0000000056fa04c0 CR3: 000000005de75000 CR4: 0000000000352ef0 [ 2017.035422][T17438] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 0000000000000080 [ 2017.035434][T17438] DR3: 000000000f000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2017.043740][ T3240] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2017.044126][T17438] Call Trace: [ 2017.044134][T17438] [ 2017.044140][T17438] ? __pfx_enable_work+0x10/0x10 [ 2017.044158][T17438] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 2017.044174][T17438] __cancel_work_sync+0xe7/0x130 [ 2017.044189][T17438] thermal_zone_device_unregister+0x28e/0x4d0 [ 2017.044204][T17438] ? __pfx_shield_remove+0x10/0x10 [ 2017.051300][ T3240] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2017.053642][T17438] power_supply_unregister+0x10a/0x150 [ 2017.053661][T17438] shield_remove+0x75/0x130 [ 2017.053675][T17438] ? __pfx_shield_remove+0x10/0x10 [ 2017.053685][T17438] hid_device_remove+0xce/0x260 [ 2017.053702][T17438] ? __pfx_hid_device_remove+0x10/0x10 [ 2017.078710][T17438] device_remove+0xc8/0x170 [ 2017.080131][T17438] device_release_driver_internal+0x44b/0x620 [ 2017.082038][T17438] bus_remove_device+0x22f/0x420 [ 2017.083445][T17438] device_del+0x396/0x9f0 [ 2017.084770][T17438] ? __pfx_device_del+0x10/0x10 [ 2017.086295][T17438] ? do_raw_spin_lock+0x12c/0x2b0 [ 2017.087869][T17438] hid_destroy_device+0x19c/0x240 [ 2017.089452][T17438] usbhid_disconnect+0xa0/0xe0 [ 2017.090958][T17438] usb_unbind_interface+0x1dd/0x9e0 [ 2017.092578][T17438] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 2017.094419][T17438] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2017.096247][T17438] device_remove+0x125/0x170 [ 2017.097710][T17438] device_release_driver_internal+0x44b/0x620 [ 2017.099588][T17438] bus_remove_device+0x22f/0x420 [ 2017.101175][T17438] device_del+0x396/0x9f0 [ 2017.102529][T17438] ? __pfx_device_del+0x10/0x10 [ 2017.104110][T17438] ? kobject_put+0x210/0x5a0 [ 2017.105602][T17438] usb_disable_device+0x355/0x7d0 [ 2017.107167][T17438] usb_disconnect+0x2e1/0x9c0 [ 2017.108660][T17438] hub_event+0x1c81/0x4fe0 [ 2017.110079][T17438] ? __lock_acquire+0xb97/0x1ce0 [ 2017.111767][T17438] ? __pfx_hub_event+0x10/0x10 [ 2017.113302][T17438] ? assoc_array_rcu_cleanup+0x50/0x250 [ 2017.115067][T17438] ? rcu_is_watching+0x12/0xc0 [ 2017.116570][T17438] process_one_work+0x9cf/0x1b70 [ 2017.118071][T17438] ? __pfx_process_one_work+0x10/0x10 [ 2017.119674][T17438] ? assign_work+0x1a0/0x250 [ 2017.121163][T17438] worker_thread+0x6c8/0xf10 [ 2017.122647][T17438] ? __kthread_parkme+0x19e/0x250 [ 2017.124417][T17438] ? __pfx_worker_thread+0x10/0x10 [ 2017.125978][T17438] kthread+0x3c5/0x780 [ 2017.127246][T17438] ? __pfx_kthread+0x10/0x10 [ 2017.128694][T17438] ? rcu_is_watching+0x12/0xc0 [ 2017.130173][T17438] ? __pfx_kthread+0x10/0x10 [ 2017.131639][T17438] ret_from_fork+0x56d/0x730 [ 2017.132948][T17438] ? __pfx_kthread+0x10/0x10 [ 2017.134418][T17438] ret_from_fork_asm+0x1a/0x30 [ 2017.135879][T17438] [ 2017.136850][T17438] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2017.139088][T17438] CPU: 2 UID: 0 PID: 17438 Comm: kworker/2:5 Not tainted syzkaller #0 PREEMPT(full) [ 2017.141893][T17438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2017.145136][T17438] Workqueue: usb_hub_wq hub_event [ 2017.146684][T17438] Call Trace: [ 2017.147728][T17438] [ 2017.148654][T17438] dump_stack_lvl+0x3d/0x1f0 [ 2017.150109][T17438] vpanic+0x6e8/0x7a0 [ 2017.151392][T17438] ? __pfx_vpanic+0x10/0x10 [ 2017.152812][T17438] ? enable_work+0x2f8/0x340 [ 2017.154456][T17438] panic+0xca/0xd0 [ 2017.155653][T17438] ? __pfx_panic+0x10/0x10 [ 2017.157080][T17438] check_panic_on_warn+0xab/0xb0 [ 2017.158626][T17438] __warn+0xf6/0x3c0 [ 2017.159855][T17438] ? __pfx_vprintk_emit+0x10/0x10 [ 2017.161473][T17438] ? enable_work+0x2f8/0x340 [ 2017.162932][T17438] report_bug+0x3c3/0x580 [ 2017.164537][T17438] ? enable_work+0x2f8/0x340 [ 2017.166118][T17438] handle_bug+0x184/0x210 [ 2017.167489][T17438] exc_invalid_op+0x17/0x50 [ 2017.168901][T17438] asm_exc_invalid_op+0x1a/0x20 [ 2017.170429][T17438] RIP: 0010:enable_work+0x2f8/0x340 [ 2017.171876][T17438] Code: 89 ee e8 2b 2b 38 00 45 84 ed 0f 85 29 fe ff ff e8 3d 30 38 00 c6 05 78 22 11 0f 01 90 48 c7 c7 e0 03 ac 8b e8 69 27 f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 e7 a0 9d 00 e9 aa fe ff ff [ 2017.177837][T17438] RSP: 0018:ffffc900069473c0 EFLAGS: 00010086 [ 2017.179699][T17438] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90030646000 [ 2017.182134][T17438] RDX: 0000000000100000 RSI: ffffffff817a0305 RDI: 0000000000000001 [ 2017.184593][T17438] RBP: ffff88802ec20738 R08: 0000000000000001 R09: 0000000000000000 [ 2017.187057][T17438] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000d28e79 [ 2017.189515][T17438] R13: 0000000000000000 R14: ffff88802ec20698 R15: ffff88802ec20730 [ 2017.191941][T17438] ? __warn_printk+0x1a5/0x350 [ 2017.193457][T17438] ? __pfx_enable_work+0x10/0x10 [ 2017.195019][T17438] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 2017.196868][T17438] __cancel_work_sync+0xe7/0x130 [ 2017.198420][T17438] thermal_zone_device_unregister+0x28e/0x4d0 [ 2017.200310][T17438] ? __pfx_shield_remove+0x10/0x10 [ 2017.201933][T17438] power_supply_unregister+0x10a/0x150 [ 2017.203618][T17438] shield_remove+0x75/0x130 [ 2017.205164][T17438] ? __pfx_shield_remove+0x10/0x10 [ 2017.206775][T17438] hid_device_remove+0xce/0x260 [ 2017.208289][T17438] ? __pfx_hid_device_remove+0x10/0x10 [ 2017.209996][T17438] device_remove+0xc8/0x170 [ 2017.211429][T17438] device_release_driver_internal+0x44b/0x620 [ 2017.213586][T17438] bus_remove_device+0x22f/0x420 [ 2017.215631][T17438] device_del+0x396/0x9f0 [ 2017.217284][T17438] ? __pfx_device_del+0x10/0x10 [ 2017.218804][T17438] ? do_raw_spin_lock+0x12c/0x2b0 [ 2017.220390][T17438] hid_destroy_device+0x19c/0x240 [ 2017.221983][T17438] usbhid_disconnect+0xa0/0xe0 [ 2017.223483][T17438] usb_unbind_interface+0x1dd/0x9e0 [ 2017.225153][T17438] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 2017.226931][T17438] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2017.228773][T17438] device_remove+0x125/0x170 [ 2017.230331][T17438] device_release_driver_internal+0x44b/0x620 [ 2017.232164][T17438] bus_remove_device+0x22f/0x420 [ 2017.233592][T17438] device_del+0x396/0x9f0 [ 2017.235019][T17438] ? __pfx_device_del+0x10/0x10 [ 2017.236569][T17438] ? kobject_put+0x210/0x5a0 [ 2017.238097][T17438] usb_disable_device+0x355/0x7d0 [ 2017.239696][T17438] usb_disconnect+0x2e1/0x9c0 [ 2017.241282][T17438] hub_event+0x1c81/0x4fe0 [ 2017.242757][T17438] ? __lock_acquire+0xb97/0x1ce0 [ 2017.244332][T17438] ? __pfx_hub_event+0x10/0x10 [ 2017.245851][T17438] ? assoc_array_rcu_cleanup+0x50/0x250 [ 2017.247615][T17438] ? rcu_is_watching+0x12/0xc0 [ 2017.249140][T17438] process_one_work+0x9cf/0x1b70 [ 2017.250708][T17438] ? __pfx_process_one_work+0x10/0x10 [ 2017.252406][T17438] ? assign_work+0x1a0/0x250 [ 2017.253964][T17438] worker_thread+0x6c8/0xf10 [ 2017.255864][T17438] ? __kthread_parkme+0x19e/0x250 [ 2017.257893][T17438] ? __pfx_worker_thread+0x10/0x10 [ 2017.259491][T17438] kthread+0x3c5/0x780 [ 2017.260797][T17438] ? __pfx_kthread+0x10/0x10 [ 2017.262273][T17438] ? rcu_is_watching+0x12/0xc0 [ 2017.263803][T17438] ? __pfx_kthread+0x10/0x10 [ 2017.265268][T17438] ret_from_fork+0x56d/0x730 [ 2017.266727][T17438] ? __pfx_kthread+0x10/0x10 [ 2017.268179][T17438] ret_from_fork_asm+0x1a/0x30 [ 2017.269698][T17438] [ 2017.271357][T17438] Kernel Offset: disabled [ 2017.272715][T17438] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:46:20 Registers: info registers vcpu 0 CPU#0 RAX=00000000035ad53b RBX=0000000000000000 RCX=ffffffff8b91bb29 RDX=0000000000000000 RSI=ffffffff8de4f612 RDI=ffffffff8c163800 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90abac90 R15=0000000000000000 RIP=ffffffff8b91a66f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008014b000 CR3=00000000592fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff822c2ea2 RDX=ffff88802774a440 RSI=ffffffff822c2cdc RDI=0000000000000001 RBP=ffff88803fffa520 RSP=ffffc90004ea7610 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000008 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bb0a28 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975ba000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7316e44 CR3=000000006a9d0000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000080 DR3=000000000f000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561e695 RDI=ffffffff9b102780 RBP=ffffffff9b102740 RSP=ffffc90006946d30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006d R14=ffffffff9b102740 R15=ffffffff8561e630 RIP=ffffffff8561e6bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056fa04c0 CR3=000000005de75000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000080 DR3=000000000f000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff88802b5332a8 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8c163780 RDI=ffffffff8df5be98 RBP=0000000000000003 RSP=ffffc9000df4ec20 R8 =0000000000000000 R9 =0000000000000000 R10=00000000000000ff R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81a04cc0 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffa12f6f CR3=0000000056773000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000