last executing test programs: 6m9.96451715s ago: executing program 1 (id=3100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0205710, &(0x7f00000004c0)={0x0, 0x83e56, 0x10, 0x0, 0x3}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) unshare(0x6020400) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r7, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a0101000000000000000002000000091f010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000"], 0xcdc}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 6m9.03465071s ago: executing program 1 (id=3103): socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000100)={0x1b0001, 0x0, {[0x2, 0x8, 0x2, 0x7fff, 0x3, 0x2, 0x5, 0x8000000000000001]}}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 6m8.762945792s ago: executing program 1 (id=3104): r0 = socket$alg(0x26, 0x5, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./file1\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setrlimit(0x6, &(0x7f0000000080)={0x4, 0x9}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000000000000000900001d00009500000000008909fd44f025a397163e9950de343d550000c35bfa02c10fa6953baa21d8dd34851097983af8081f43734aecc5e9ec7411464c658246ac856782d0d46ebd1fbe6321d7fde2677d964af7b0cc74424fdfed1fe19db03d10c476"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f00000001c0)=""/4096) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000001300)=ANY=[@ANYBLOB="7b717c4618a2fd8fb6a37a1ee5c5ba2d24c0a889b045be122cd6e20850143676caa1462189318882f27a74680a4294aa0035f3d2c97f0589c35207a3031866c606d02f4bfd37358b", @ANYRES16=r3, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRESHEX, @ANYRESHEX=r4], 0x48, 0xffffffffffffffff) keyctl$set_timeout(0xf, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0xd) socket(0x400000000010, 0x3, 0x200101) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r7}, 0x18) 6m8.671952494s ago: executing program 1 (id=3105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x17, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000086fc000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x2008, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0xc9, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x2, @any, 0x6, 0x2}, 0xe) r7 = dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, 0x0, &(0x7f0000000240)) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x23, @loopback, 0x3}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000700)=ANY=[], 0x8) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') close_range(r4, 0xffffffffffffffff, 0x0) 6m7.784278496s ago: executing program 1 (id=3108): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x16d) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) unshare(0x62040200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r3, 0x0, 0x4, &(0x7f0000000080)="d69012", 0x3) socket$inet6(0xa, 0x2, 0x3a) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket(0x29, 0x3, 0x2) syz_open_dev$hidraw(&(0x7f0000000240), 0x7ff, 0x400040) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) 6m7.45245786s ago: executing program 1 (id=3111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0x3}]}) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x1, 0x0) ptrace(0x10, r4) ptrace$peekuser(0x3, r4, 0x3f) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) keyctl$instantiate_iov(0x14, r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="96fedf9a4dcf4ab331ba30010125369de25251e39a796537444adbe14c5e48cfca1a4916ecb045572ad340279e8c64960b8edb578e19c71b93a1dad1c0af096d551f4ed9af33ae3bc4a85b8061a8c6af7cfaef0a4fbd30ec7c796bdd7868d725d6cde5b2e82143923e27571edb5b4b1cafccc9b71bdcbbb9ef8a6cb78e96f6b7a415f0fd064e9e2345c37cb6b0bc0d093d21ca37910dc0b5cadc4417373fe30838eb10cc8367080a89b0598f67e77bedbdcec58d9058fc01e0030817f385e7b72270f4d3bb7a9054cc19ed7fe1b9ef15c2ffd504457065c4f8099177a64cae2eee56e0a45290f72d52a18b647f87468c8d00a384cc9311d46a", 0xf9}, {&(0x7f0000000080)}, {&(0x7f0000000280)="5136dafd20b5b1466db96feea0cc80b37abe4b37921013469b4a80bab6a6226dbc848143604378cecb337af8536b75b8b7a050968efcdbe6783feb1142662eac13ebcf1040d24b5b41ccbb0c11071b52ee7d2567a3710adaf67a7aa37f2b43e18837b7837f947e3e830f56dc3423ed46b2ae04cad2c4c3e3de7463761df49b4a5d1381", 0x83}, {&(0x7f00000000c0)="fbe577efe3484c73c9bd8ef2a360f4ab5f982f5c7847f1a9c6c42e8532f01f990447733917119f9b3a98107f6be779ebb916d59f04639460885e4c763179c9fd2b9462629bdaf9956ff4f662dec1f6d0f4e9e876f5c8314520e50efc2db9b1f45267ffb6eb09e8cb7f8ce40a", 0x6c}, {&(0x7f0000000340)="44a0a9b3a28e01056eea0232b719861338784a1d66be8e3a7de652f2cf5ac607719080387bd30eccc39bf9788fd57adabd3b2567421260d6aeb772e5e0f6ed5d9f72711a40b5844b701bef199b5581cab028e2ee8add62e087b0dd608e9b19b332a8a13e48a7271d67", 0x69}], 0x5, r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001900010000000000000000000a0000000000000a00000000140005000000000000000000000000b7820a1a0d"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=0x0], 0x50) r7 = syz_io_uring_setup(0x2f5, &(0x7f0000000240)={0x0, 0x75a, 0x800, 0x2, 0x22ab}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) pidfd_send_signal(r11, 0x2, 0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f00000008c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f00000003c0)=0x2, 0x12) syz_clone3(&(0x7f0000000480)={0x180000a00, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000001780)=[0x0], 0x1, {r12}}, 0x58) 6m7.384795197s ago: executing program 32 (id=3111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0x3}]}) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x1, 0x0) ptrace(0x10, r4) ptrace$peekuser(0x3, r4, 0x3f) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) keyctl$instantiate_iov(0x14, r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="96fedf9a4dcf4ab331ba30010125369de25251e39a796537444adbe14c5e48cfca1a4916ecb045572ad340279e8c64960b8edb578e19c71b93a1dad1c0af096d551f4ed9af33ae3bc4a85b8061a8c6af7cfaef0a4fbd30ec7c796bdd7868d725d6cde5b2e82143923e27571edb5b4b1cafccc9b71bdcbbb9ef8a6cb78e96f6b7a415f0fd064e9e2345c37cb6b0bc0d093d21ca37910dc0b5cadc4417373fe30838eb10cc8367080a89b0598f67e77bedbdcec58d9058fc01e0030817f385e7b72270f4d3bb7a9054cc19ed7fe1b9ef15c2ffd504457065c4f8099177a64cae2eee56e0a45290f72d52a18b647f87468c8d00a384cc9311d46a", 0xf9}, {&(0x7f0000000080)}, {&(0x7f0000000280)="5136dafd20b5b1466db96feea0cc80b37abe4b37921013469b4a80bab6a6226dbc848143604378cecb337af8536b75b8b7a050968efcdbe6783feb1142662eac13ebcf1040d24b5b41ccbb0c11071b52ee7d2567a3710adaf67a7aa37f2b43e18837b7837f947e3e830f56dc3423ed46b2ae04cad2c4c3e3de7463761df49b4a5d1381", 0x83}, {&(0x7f00000000c0)="fbe577efe3484c73c9bd8ef2a360f4ab5f982f5c7847f1a9c6c42e8532f01f990447733917119f9b3a98107f6be779ebb916d59f04639460885e4c763179c9fd2b9462629bdaf9956ff4f662dec1f6d0f4e9e876f5c8314520e50efc2db9b1f45267ffb6eb09e8cb7f8ce40a", 0x6c}, {&(0x7f0000000340)="44a0a9b3a28e01056eea0232b719861338784a1d66be8e3a7de652f2cf5ac607719080387bd30eccc39bf9788fd57adabd3b2567421260d6aeb772e5e0f6ed5d9f72711a40b5844b701bef199b5581cab028e2ee8add62e087b0dd608e9b19b332a8a13e48a7271d67", 0x69}], 0x5, r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001900010000000000000000000a0000000000000a00000000140005000000000000000000000000b7820a1a0d"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=0x0], 0x50) r7 = syz_io_uring_setup(0x2f5, &(0x7f0000000240)={0x0, 0x75a, 0x800, 0x2, 0x22ab}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) pidfd_send_signal(r11, 0x2, 0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f00000008c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f00000003c0)=0x2, 0x12) syz_clone3(&(0x7f0000000480)={0x180000a00, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000001780)=[0x0], 0x1, {r12}}, 0x58) 6m3.863729864s ago: executing program 4 (id=3112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(0x0, 0x0) r6 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0205710, &(0x7f00000004c0)={0x0, 0x83e56, 0x10, 0x0, 0x3}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r8, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a0101000000000000000002000000091f010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000"], 0xcdc}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 6m2.666978831s ago: executing program 4 (id=3123): r0 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0xfe06d13ea76220fa, 0x1e1, 0x12}, 0x18) r1 = openat(r0, &(0x7f0000000240)='./bus\x00', 0x8041, 0x100) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff3, 0x5}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x8, 0x10, 0x16, 0x0, 0x5a, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "cb030890171319da1db2ec01d014fa61d80db9d1aae91311c2fa1fbaa1b121dbc9bcb117c6d06e02899d62bff57c457012e3ede4edd01614d35a2b4811b96355622adb97b2b5d959ad0701bd80bab191266fa9b9c7ca9fa090d8fa9aa9b6d66e507bf362e54e58a05278c77be644c2166e269cfaea59f28d065bd081bae32b1b5bf1275793ff29544807b351a156f03e898356441281edfe501d38fcbc8d970ecd330863d4a6f56f2c0bf2e469dfc9c17d200edc77b7f3318b487c855b4ef49c0dd30fdaea6ac1f97860e2bedd01502759b7df9bf98fd36cd8be5045fc3c5a0aea1c48f7858aaee1d51d4137da7af9c7c68900"}, @TCA_RED_MAX_P={0x8, 0x3, 0x2}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4048801}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x0, 0x0, @local, @local}}}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r5 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r5], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x101}, 0x18) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mknod$loop(&(0x7f0000000180)='./bus\x00', 0x800, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000001c0)={0x5000, 0x111000}) open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x43f00, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket(0xa, 0x5, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000000100)) close_range(r4, 0xffffffffffffffff, 0x0) 6m1.744844823s ago: executing program 4 (id=3126): readv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000080)=""/200, 0xc8}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc0008cd}, 0x20048000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0380c20000000180c200000008004500005c0000000000019078ac1e0001ac1414aa050190787f000001409e000300640200ff2f0000ac1e0101ac14141a94f404010036243641ac14143900000009ac1414aa040009bfac49414300000008ac1414aa000000058303cf00"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0xffffffffffffffd9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r5, 0x1) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 5m59.798823011s ago: executing program 4 (id=3131): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$vcs(0xffffff9c, &(0x7f0000000280), 0x20000, 0x0) pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe80000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000004400050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400"/176], 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m59.720726725s ago: executing program 33 (id=3131): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$vcs(0xffffff9c, &(0x7f0000000280), 0x20000, 0x0) pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe80000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000004400050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400"/176], 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m47.523995546s ago: executing program 3 (id=3386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xc) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='lowerdir', &(0x7f0000000100)='{\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) 4m46.050108104s ago: executing program 3 (id=3389): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r2, 0x5, 0x4) getdents(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)={0x30, r4, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x30}}, 0x40000) bind$xdp(r1, &(0x7f0000000000)={0x2c, 0x8, 0x0, 0x35, r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @empty, @remote}}) syz_emit_vhci(&(0x7f00000017c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x2}}}}, 0xf) 4m45.818764646s ago: executing program 3 (id=3392): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4m45.649423467s ago: executing program 3 (id=3393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_FD(r4, 0x4c05, r4) dup2(r3, r1) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) 4m45.458260087s ago: executing program 3 (id=3395): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4, 0x0, 0x4002}) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000240)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x404c010) bind$inet(r4, 0x0, 0x0) r8 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r9 = open$dir(0x0, 0x428000, 0x40) mknodat(r9, 0x0, 0x8, 0xb7e) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4m45.099781221s ago: executing program 3 (id=3396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xc) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='lowerdir', &(0x7f0000000100)='{\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) 4m45.0434682s ago: executing program 34 (id=3396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xc) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='lowerdir', &(0x7f0000000100)='{\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) 9.150672828s ago: executing program 0 (id=4376): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) r2 = userfaultfd(0x801) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, 0x0) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0xfe}) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x40, 0xffff, 0x9, 0x3ff, 0x6}, &(0x7f0000000440)=0x14) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x19) ioctl$TIOCSTI(r7, 0x5412, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400000010001fff000000000000000100000200", @ANYRES32=0x0, @ANYBLOB="000000000005000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="090c0000800001000a0001000180c20000000000"], 0x54}}, 0x0) (async) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={r6, 0x3}, 0x8) (async) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002b00)='/sys/kernel/warn_count', 0x40, 0x82) read$FUSE(r10, &(0x7f0000002b40)={0x2020}, 0x2020) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r11, &(0x7f0000001300)='7', 0x1) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.75059975s ago: executing program 6 (id=4384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(0x0, 0x0) r6 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0205710, &(0x7f00000004c0)={0x0, 0x83e56, 0x10, 0x0, 0x3}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) unshare(0x6020400) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r8, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) 6.119092211s ago: executing program 6 (id=4388): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0xaefcbf4cebd621e1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@getchain={0x34, 0x66, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0xffff}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xd, 0xf, 0xfffff038}, {0x6, 0x0, 0x5, 0x2}]}, 0x8) sendmmsg(r1, &(0x7f0000001c00), 0x0, 0x40840) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newchain={0x24, 0x64, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xc}, {0x4, 0x3}, {0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041880) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={@private1, 0x64}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "37bb54f0"}, 0xfffffffc}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe23, 0x46, 0x8, 0xfffffed4, 0x0}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.026333173s ago: executing program 0 (id=4389): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES8=r2, @ANYRES16=0x0, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="00d04a4c5d79580b69dc9d4ac8", @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_io_uring_setup(0x43d2, &(0x7f0000000080)={0x0, 0x3670, 0x10100, 0x2, 0x4}, &(0x7f0000000100), &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 5.442672018s ago: executing program 6 (id=4391): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0xaefcbf4cebd621e1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@getchain={0x34, 0x66, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0xffff}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xd, 0xf, 0xfffff038}, {0x6, 0x0, 0x5, 0x2}]}, 0x8) sendmmsg(r1, &(0x7f0000001c00), 0x0, 0x40840) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newchain={0x24, 0x64, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xc}, {0x4, 0x3}, {0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041880) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={@private1, 0x64}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "37bb54f0"}, 0xfffffffc}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe23, 0x46, 0x8, 0xfffffed4, 0x0}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.936897372s ago: executing program 0 (id=4392): mknod$loop(0x0, 0x10, 0x0) socket$kcm(0x21, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=@newtaction={0x1270, 0x30, 0x20, 0x0, 0x25dfdbfb, {}, [{0x125c, 0x1, [@m_ct={0x34, 0x24, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x1224, 0x15, 0x0, 0x0, {{0xb}, {0x1164, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x6dbc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x6, 0x8001, 0x4, 0x7fffffff, 0x4, 0x9, 0x31, 0xa1, 0x4, 0x4, 0x34, 0x400, 0x3, 0x3, 0x6, 0x9e, 0x0, 0xfffffffb, 0x0, 0xfffffffb, 0x8, 0x80, 0x1ff, 0x9, 0x62, 0x6, 0x1, 0x4, 0xffffff05, 0x3, 0x630, 0x1, 0x9, 0x4, 0x9, 0x364, 0x800, 0x9, 0x4, 0x0, 0x5, 0x6, 0x0, 0x197863b6, 0x6521, 0x8, 0x10, 0x9, 0x8001, 0xd, 0x7, 0x302, 0xf33, 0x4, 0xffff5a0a, 0x2, 0x5, 0x8, 0x101, 0x1, 0xf22, 0x4, 0xfff, 0x401, 0x4, 0x3, 0xffff8001, 0xfffff9f3, 0x1c3f, 0x3a, 0x8, 0x5, 0x22, 0x97, 0x1, 0x3, 0x4, 0x1000000, 0x9, 0xffffffff, 0x4, 0x394, 0x1, 0x8fd, 0xfffffffb, 0x9, 0x8, 0x6, 0x4, 0xb5b, 0x3, 0x4, 0x2, 0x40, 0x9, 0xe, 0x81, 0x6000000, 0xe, 0x401, 0x4, 0x4, 0x5, 0x4, 0x0, 0x400, 0xa, 0x2d90, 0xfff, 0x4, 0xffff8001, 0x4, 0x5, 0xf, 0x784, 0x81, 0x8, 0x7fff, 0x2, 0x7, 0x1, 0x6b, 0x7, 0x0, 0x9, 0x6, 0x6, 0x2, 0x80000000, 0x0, 0x9, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0, 0x8, 0x6, 0x6, 0xffff, 0x6, 0x5eac, 0x6, 0x92f, 0x3ff, 0x1, 0xffffff82, 0x8, 0x0, 0x8, 0x8001, 0x6, 0x10001, 0xe, 0x5, 0xb, 0x8, 0x3, 0x7, 0x7, 0x9, 0x8, 0x1000, 0x2, 0x7ff, 0x4, 0xfffff000, 0x3, 0xfffffffa, 0x54, 0x4, 0x2, 0x1e, 0x6, 0x3, 0x3, 0x8, 0xe152, 0x0, 0x0, 0x7, 0x9, 0x0, 0x2, 0xffffff80, 0x1, 0xd27a, 0x2, 0x6b47, 0x0, 0xfffffbff, 0x4, 0x0, 0x8, 0xc, 0xcb, 0x0, 0x8, 0x8c, 0x91, 0x4, 0x3, 0x8, 0x8, 0x400, 0xfffffc51, 0x401, 0x5, 0x1, 0x6, 0xf3dc, 0x6, 0x96, 0x2, 0x3, 0x5704, 0xff, 0x401, 0x9, 0x4, 0x16aacf6c, 0x8, 0x8, 0xd7ed, 0x10000000, 0x5, 0x0, 0xffff, 0x8dc, 0xffffffff, 0x5b1a, 0x1, 0x6, 0x6000000, 0x9, 0x90, 0x5, 0x5, 0x2, 0x1, 0x5ac1e677, 0x3, 0xffffff81, 0x5, 0x42, 0x6, 0xc, 0x7f, 0x8, 0x4, 0x3, 0x8001, 0x3ff, 0x26]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x26}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x72d7, 0x10001, 0x10000, 0x2, 0x7, 0x8000, 0x61ac9752, 0x0, 0xd, 0x2000f6, 0x7, 0xfffffff8, 0x100, 0xe75c, 0x7, 0x7f, 0x2, 0x4, 0x6, 0x8, 0x6, 0x9b48, 0x1, 0x4, 0x4abfb9cb, 0x200, 0x2e, 0x6, 0xffffffff, 0x93, 0x8001, 0x4b800000, 0x6, 0x9, 0x0, 0x9, 0x2000000, 0x81, 0x7fffffff, 0xffffffff, 0xfff, 0x1, 0x100, 0x9, 0x6, 0x7, 0xdf, 0xdc59, 0x3, 0x40, 0xb46a, 0x0, 0x7, 0x6, 0x1, 0x3, 0xffffff80, 0x659, 0xaec, 0xfff000, 0x8001, 0xa0000000, 0x1, 0x9, 0x1000, 0x1, 0x8, 0x6, 0x1, 0xa4, 0xfffffff7, 0x4, 0x5, 0x6, 0xf43b, 0x6, 0x100, 0x8, 0x0, 0x9, 0x10000, 0x80000001, 0x81, 0x5, 0x10000, 0xffff, 0x65, 0x2, 0x4, 0xba1, 0x7ff, 0x7, 0x2, 0x20, 0x2, 0x401, 0x3, 0xff, 0x6, 0x1806, 0x7, 0x0, 0x6, 0x1, 0x0, 0x5, 0xda9, 0x8, 0x10000, 0xfbb, 0x2, 0x4, 0x5, 0x3, 0x2, 0x800, 0x6, 0x9, 0x9, 0x3, 0x2, 0x47, 0x7, 0x77c, 0x3, 0x4, 0x2, 0xffffff80, 0x3, 0x1c, 0xa4, 0x7, 0x1, 0x8, 0xca76, 0x4, 0xd, 0xa428, 0x80000001, 0x80, 0x7, 0x2, 0x9, 0x1, 0xfffffffa, 0x4, 0xfffffff9, 0x8, 0x400, 0xd, 0x4, 0x401, 0x0, 0x3, 0x3, 0x9, 0x6, 0x695, 0x400, 0x6, 0x7, 0x78, 0xffff, 0x2, 0x0, 0x4, 0x7f, 0x6dd, 0xa, 0x5, 0x0, 0x3ff, 0xfffffff3, 0x0, 0x5, 0x7, 0x8fb8, 0x7f, 0x400000, 0x9, 0x4, 0x10, 0x29c, 0xbfb, 0x6, 0x1, 0x2, 0x968, 0x9b, 0x6, 0x7, 0x8, 0xfff, 0xa55, 0x0, 0x7fffffff, 0x6, 0x3, 0x8, 0x1, 0x5d4, 0x7, 0xb, 0x9, 0x2, 0x80e, 0x9, 0xffffff04, 0x4, 0xf, 0x6c2b, 0x496, 0x2, 0x6, 0x97f, 0x1, 0xe, 0x100, 0x8001, 0x83, 0x0, 0x9, 0x7, 0x3c0000, 0x8000, 0x9, 0x75, 0x2, 0x200, 0x6, 0x5, 0x6, 0x4, 0x12b, 0xc, 0x4, 0xd, 0x4, 0x8d6, 0x5, 0x4, 0x7, 0x56, 0xfc9, 0x7fff, 0x2, 0x9, 0x4, 0x3, 0x20000000, 0x8, 0x8001, 0x10001, 0x10001, 0x35, 0xd37]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x33000, 0x544a, 0x5, 0x5, 0x3, 0x10000, 0x6, 0x9, 0x8001, 0x40, 0xc, 0xb5d3, 0x100, 0xd, 0x6, 0x1000, 0x8, 0x8, 0x5, 0x0, 0x0, 0x8, 0x5, 0x0, 0xb6, 0x7f, 0xfff, 0xfffff800, 0x2aa, 0x6, 0x81, 0x6eab, 0x9, 0x4, 0x81, 0x9, 0xbf7, 0xc4f, 0x1, 0x1094fba5, 0x6d, 0x7, 0x9, 0x7d, 0x8, 0x7, 0x6, 0x2, 0xfff, 0x0, 0x8, 0xc2ab, 0x5, 0xe7, 0xa8, 0x4, 0x10000, 0x7, 0x173, 0x3, 0xffff8001, 0x1, 0x6, 0x78, 0x6, 0x6, 0x9d, 0x9, 0x3, 0x10, 0x6aa5, 0x3ff, 0xffffffff, 0x3, 0x101, 0xfffffff8, 0x3, 0x7c, 0x21d, 0x10, 0x80000000, 0x9, 0x3, 0x101, 0x5, 0x7fffffff, 0x53, 0x6, 0x2, 0xe, 0x7, 0x6b5, 0x0, 0x401, 0xd487, 0xf895, 0xece4, 0x9, 0x370000, 0x1000, 0x2, 0x7, 0x6, 0x2, 0x7, 0xe6c, 0xa7f0, 0xe, 0x1, 0x6, 0x178c8167, 0x3, 0x7, 0xff, 0xffffffff, 0x6, 0x9c, 0x9, 0x1, 0x5, 0xf, 0x27, 0x3, 0x80, 0xffffffff, 0x3, 0x3, 0x88a, 0xb5, 0xc7a, 0xbd6, 0x3, 0x9, 0x5, 0x7fffffff, 0xaa5, 0xb, 0xa, 0x8, 0xa, 0x6, 0x0, 0x4, 0x9, 0x9, 0x4, 0x3, 0xe858, 0xc, 0x6, 0x1, 0x3, 0x7, 0x8, 0x1, 0xffff, 0x8b0, 0x5, 0x0, 0x1, 0xe4b1, 0x6, 0x8233, 0x7fffffff, 0x8, 0x100, 0xc, 0x6e95, 0xe, 0x5, 0x9, 0x3, 0x1, 0x7bd, 0xc66c, 0x6, 0x0, 0x3, 0x6, 0x8, 0x8, 0x1, 0x3ff, 0x8, 0x100, 0xf2c, 0x6, 0x758, 0x4, 0xda5, 0x4, 0x7fffffff, 0x9, 0xaa0, 0xfffffffd, 0x113, 0x3, 0x0, 0x6, 0x97, 0x3, 0x8, 0x9, 0x8ea, 0x1, 0x5, 0xe0fe, 0xffff, 0x9236, 0x80, 0x1, 0x4, 0xb, 0x4, 0xcad, 0xe73, 0xd4, 0x2, 0x9af, 0xef42, 0x101, 0xfffffff9, 0x0, 0x4, 0x6aa, 0xabbe, 0x8, 0x2, 0xc29, 0x10, 0xe, 0x0, 0x0, 0x80000001, 0x2, 0x8, 0x3, 0x9, 0x0, 0xf, 0x2, 0xe, 0x80, 0x3, 0x6, 0x576, 0xb376, 0x400, 0x3, 0x70e3, 0xdd, 0x80000001, 0x40, 0x2dd7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x189, 0x2, 0x5, {0x8, 0x1, 0xfb7b, 0x1, 0x3, 0x8}, {0x8, 0x1, 0x200, 0x2, 0x0, 0x1}, 0x3ff, 0x6, 0x9}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x20000000, 0x7, 0x7fff, 0x3, {0x7f, 0x1, 0x800, 0x8, 0xf0, 0x5}, {0x8, 0x1, 0x100, 0x0, 0xca00, 0x5}, 0xe, 0x10000, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800005}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x4, 0x8, 0x4649748a, {0xf, 0x1, 0x0, 0x145d, 0x95, 0x5}, {0xfd, 0x0, 0x2e96, 0x8000, 0x3a9, 0x8000000}, 0x800, 0xa, 0x10001}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xc5000, 0x1ef479c4, 0x8, 0x9000, 0x2, 0x3, 0x9, 0x5, 0xf, 0x7f, 0x6dc4, 0x80000000, 0x90, 0x100, 0x100, 0x76, 0x9, 0x1, 0x800, 0x7, 0xa3, 0x1, 0x6, 0x2, 0x7fffffff, 0x0, 0x8, 0x6, 0x2, 0x8, 0x7, 0xc, 0x10, 0xca82, 0xd, 0xae, 0x1, 0x0, 0x800, 0xedc, 0x3, 0x3, 0x6, 0xe90, 0x40, 0x6, 0x7, 0x7, 0x5, 0x8, 0x3d26, 0x5, 0x9, 0x8, 0x9, 0x2, 0x554, 0x1, 0x7a4, 0x9, 0x6, 0xff, 0x4, 0x7, 0x3, 0x1, 0xba, 0x2ade, 0x400, 0x101a, 0x1, 0x3, 0x3, 0x80, 0xa6e, 0x1, 0x7, 0xfffffff7, 0xfffffff9, 0x1, 0x7ff, 0x10001, 0x1, 0x7, 0x1, 0x4, 0xca57, 0x8, 0x13ea000, 0x9, 0x5, 0x1ff, 0x3, 0x5, 0xe9, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x2, 0x5, 0x3, 0xffffffff, 0x1, 0xfffffffc, 0x4, 0xffff0000, 0x0, 0x0, 0xe8e, 0x0, 0x101, 0x7, 0x8, 0x200, 0x8, 0x0, 0xb6f, 0x2, 0x2, 0x101, 0x4, 0xf, 0x2, 0xfffffff9, 0x1ff, 0xffffff13, 0x1, 0x8, 0x3, 0xe, 0x39, 0x8, 0x1, 0x1ff, 0x8, 0xe, 0x277f, 0x10001, 0x78a, 0xa04a, 0x9ba6, 0x5, 0x3, 0x5a, 0x7ff, 0x9, 0x6, 0x92a, 0x3, 0x366b, 0x8, 0x80000000, 0x7ff, 0x3, 0x4a0e, 0x0, 0x8, 0x1, 0x8000, 0x8, 0x9, 0xc77b, 0x400, 0x0, 0xffff, 0xd, 0x66e, 0x1, 0xeaa, 0x8001, 0x9, 0x3, 0x4, 0x4, 0x3, 0x4, 0x4, 0x7ff, 0x1, 0xfffffff8, 0x1, 0x2, 0x80000000, 0xb24f, 0x2, 0x7, 0x3f, 0x7, 0x100, 0x4, 0x8, 0x5, 0xc, 0x1, 0x10000000, 0x1, 0x9, 0x200, 0x3, 0x4, 0x5, 0x3, 0xffffffff, 0x4, 0x3, 0x7, 0x1, 0x5, 0x8, 0x2ef, 0x2, 0x40, 0x0, 0x1, 0x8, 0xf5c7, 0x8, 0xffffffff, 0x6, 0xd1, 0xffffffff, 0x6, 0x0, 0x8, 0x36f, 0x0, 0xa, 0x6, 0x3, 0x5, 0x5, 0xfff, 0x8, 0x9, 0x7, 0x74, 0x480000, 0x0, 0xdb30, 0x8c7e, 0x1, 0x64, 0x9, 0x0, 0x80, 0x8e3, 0x10000, 0x8, 0x1, 0x4, 0x7, 0x3, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}]]}, {0x95, 0x6, "172606c53b077c97153aa033d54fb343b905abc471813d973cea003f02b3f2a94fc4f32dce1e7f0210f9c510702dd6ccc6b3c46aa093abf34cf83af92ce6ed1fce746920dbb8aba6c9395f496b2bb5a805bec1668319080a950c805cb376439cc88080f38f49d838ec60755ee270cd5f91e2ee4cc1874d1051d800ac7ddb2a7841dd8960aeedc8f651c6052c18aebab933"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1270}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=@newtaction={0x1270, 0x30, 0x20, 0x0, 0x25dfdbfb, {}, [{0x125c, 0x1, [@m_ct={0x34, 0x24, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x1224, 0x15, 0x0, 0x0, {{0xb}, {0x1164, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x6dbc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x6, 0x8001, 0x4, 0x7fffffff, 0x4, 0x9, 0x31, 0xa1, 0x4, 0x4, 0x34, 0x400, 0x3, 0x3, 0x6, 0x9e, 0x0, 0xfffffffb, 0x0, 0xfffffffb, 0x8, 0x80, 0x1ff, 0x9, 0x62, 0x6, 0x1, 0x4, 0xffffff05, 0x3, 0x630, 0x1, 0x9, 0x4, 0x9, 0x364, 0x800, 0x9, 0x4, 0x0, 0x5, 0x6, 0x0, 0x197863b6, 0x6521, 0x8, 0x10, 0x9, 0x8001, 0xd, 0x7, 0x302, 0xf33, 0x4, 0xffff5a0a, 0x2, 0x5, 0x8, 0x101, 0x1, 0xf22, 0x4, 0xfff, 0x401, 0x4, 0x3, 0xffff8001, 0xfffff9f3, 0x1c3f, 0x3a, 0x8, 0x5, 0x22, 0x97, 0x1, 0x3, 0x4, 0x1000000, 0x9, 0xffffffff, 0x4, 0x394, 0x1, 0x8fd, 0xfffffffb, 0x9, 0x8, 0x6, 0x4, 0xb5b, 0x3, 0x4, 0x2, 0x40, 0x9, 0xe, 0x81, 0x6000000, 0xe, 0x401, 0x4, 0x4, 0x5, 0x4, 0x0, 0x400, 0xa, 0x2d90, 0xfff, 0x4, 0xffff8001, 0x4, 0x5, 0xf, 0x784, 0x81, 0x8, 0x7fff, 0x2, 0x7, 0x1, 0x6b, 0x7, 0x0, 0x9, 0x6, 0x6, 0x2, 0x80000000, 0x0, 0x9, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0, 0x8, 0x6, 0x6, 0xffff, 0x6, 0x5eac, 0x6, 0x92f, 0x3ff, 0x1, 0xffffff82, 0x8, 0x0, 0x8, 0x8001, 0x6, 0x10001, 0xe, 0x5, 0xb, 0x8, 0x3, 0x7, 0x7, 0x9, 0x8, 0x1000, 0x2, 0x7ff, 0x4, 0xfffff000, 0x3, 0xfffffffa, 0x54, 0x4, 0x2, 0x1e, 0x6, 0x3, 0x3, 0x8, 0xe152, 0x0, 0x0, 0x7, 0x9, 0x0, 0x2, 0xffffff80, 0x1, 0xd27a, 0x2, 0x6b47, 0x0, 0xfffffbff, 0x4, 0x0, 0x8, 0xc, 0xcb, 0x0, 0x8, 0x8c, 0x91, 0x4, 0x3, 0x8, 0x8, 0x400, 0xfffffc51, 0x401, 0x5, 0x1, 0x6, 0xf3dc, 0x6, 0x96, 0x2, 0x3, 0x5704, 0xff, 0x401, 0x9, 0x4, 0x16aacf6c, 0x8, 0x8, 0xd7ed, 0x10000000, 0x5, 0x0, 0xffff, 0x8dc, 0xffffffff, 0x5b1a, 0x1, 0x6, 0x6000000, 0x9, 0x90, 0x5, 0x5, 0x2, 0x1, 0x5ac1e677, 0x3, 0xffffff81, 0x5, 0x42, 0x6, 0xc, 0x7f, 0x8, 0x4, 0x3, 0x8001, 0x3ff, 0x26]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x26}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x72d7, 0x10001, 0x10000, 0x2, 0x7, 0x8000, 0x61ac9752, 0x0, 0xd, 0x2000f6, 0x7, 0xfffffff8, 0x100, 0xe75c, 0x7, 0x7f, 0x2, 0x4, 0x6, 0x8, 0x6, 0x9b48, 0x1, 0x4, 0x4abfb9cb, 0x200, 0x2e, 0x6, 0xffffffff, 0x93, 0x8001, 0x4b800000, 0x6, 0x9, 0x0, 0x9, 0x2000000, 0x81, 0x7fffffff, 0xffffffff, 0xfff, 0x1, 0x100, 0x9, 0x6, 0x7, 0xdf, 0xdc59, 0x3, 0x40, 0xb46a, 0x0, 0x7, 0x6, 0x1, 0x3, 0xffffff80, 0x659, 0xaec, 0xfff000, 0x8001, 0xa0000000, 0x1, 0x9, 0x1000, 0x1, 0x8, 0x6, 0x1, 0xa4, 0xfffffff7, 0x4, 0x5, 0x6, 0xf43b, 0x6, 0x100, 0x8, 0x0, 0x9, 0x10000, 0x80000001, 0x81, 0x5, 0x10000, 0xffff, 0x65, 0x2, 0x4, 0xba1, 0x7ff, 0x7, 0x2, 0x20, 0x2, 0x401, 0x3, 0xff, 0x6, 0x1806, 0x7, 0x0, 0x6, 0x1, 0x0, 0x5, 0xda9, 0x8, 0x10000, 0xfbb, 0x2, 0x4, 0x5, 0x3, 0x2, 0x800, 0x6, 0x9, 0x9, 0x3, 0x2, 0x47, 0x7, 0x77c, 0x3, 0x4, 0x2, 0xffffff80, 0x3, 0x1c, 0xa4, 0x7, 0x1, 0x8, 0xca76, 0x4, 0xd, 0xa428, 0x80000001, 0x80, 0x7, 0x2, 0x9, 0x1, 0xfffffffa, 0x4, 0xfffffff9, 0x8, 0x400, 0xd, 0x4, 0x401, 0x0, 0x3, 0x3, 0x9, 0x6, 0x695, 0x400, 0x6, 0x7, 0x78, 0xffff, 0x2, 0x0, 0x4, 0x7f, 0x6dd, 0xa, 0x5, 0x0, 0x3ff, 0xfffffff3, 0x0, 0x5, 0x7, 0x8fb8, 0x7f, 0x400000, 0x9, 0x4, 0x10, 0x29c, 0xbfb, 0x6, 0x1, 0x2, 0x968, 0x9b, 0x6, 0x7, 0x8, 0xfff, 0xa55, 0x0, 0x7fffffff, 0x6, 0x3, 0x8, 0x1, 0x5d4, 0x7, 0xb, 0x9, 0x2, 0x80e, 0x9, 0xffffff04, 0x4, 0xf, 0x6c2b, 0x496, 0x2, 0x6, 0x97f, 0x1, 0xe, 0x100, 0x8001, 0x83, 0x0, 0x9, 0x7, 0x3c0000, 0x8000, 0x9, 0x75, 0x2, 0x200, 0x6, 0x5, 0x6, 0x4, 0x12b, 0xc, 0x4, 0xd, 0x4, 0x8d6, 0x5, 0x4, 0x7, 0x56, 0xfc9, 0x7fff, 0x2, 0x9, 0x4, 0x3, 0x20000000, 0x8, 0x8001, 0x10001, 0x10001, 0x35, 0xd37]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x33000, 0x544a, 0x5, 0x5, 0x3, 0x10000, 0x6, 0x9, 0x8001, 0x40, 0xc, 0xb5d3, 0x100, 0xd, 0x6, 0x1000, 0x8, 0x8, 0x5, 0x0, 0x0, 0x8, 0x5, 0x0, 0xb6, 0x7f, 0xfff, 0xfffff800, 0x2aa, 0x6, 0x81, 0x6eab, 0x9, 0x4, 0x81, 0x9, 0xbf7, 0xc4f, 0x1, 0x1094fba5, 0x6d, 0x7, 0x9, 0x7d, 0x8, 0x7, 0x6, 0x2, 0xfff, 0x0, 0x8, 0xc2ab, 0x5, 0xe7, 0xa8, 0x4, 0x10000, 0x7, 0x173, 0x3, 0xffff8001, 0x1, 0x6, 0x78, 0x6, 0x6, 0x9d, 0x9, 0x3, 0x10, 0x6aa5, 0x3ff, 0xffffffff, 0x3, 0x101, 0xfffffff8, 0x3, 0x7c, 0x21d, 0x10, 0x80000000, 0x9, 0x3, 0x101, 0x5, 0x7fffffff, 0x53, 0x6, 0x2, 0xe, 0x7, 0x6b5, 0x0, 0x401, 0xd487, 0xf895, 0xece4, 0x9, 0x370000, 0x1000, 0x2, 0x7, 0x6, 0x2, 0x7, 0xe6c, 0xa7f0, 0xe, 0x1, 0x6, 0x178c8167, 0x3, 0x7, 0xff, 0xffffffff, 0x6, 0x9c, 0x9, 0x1, 0x5, 0xf, 0x27, 0x3, 0x80, 0xffffffff, 0x3, 0x3, 0x88a, 0xb5, 0xc7a, 0xbd6, 0x3, 0x9, 0x5, 0x7fffffff, 0xaa5, 0xb, 0xa, 0x8, 0xa, 0x6, 0x0, 0x4, 0x9, 0x9, 0x4, 0x3, 0xe858, 0xc, 0x6, 0x1, 0x3, 0x7, 0x8, 0x1, 0xffff, 0x8b0, 0x5, 0x0, 0x1, 0xe4b1, 0x6, 0x8233, 0x7fffffff, 0x8, 0x100, 0xc, 0x6e95, 0xe, 0x5, 0x9, 0x3, 0x1, 0x7bd, 0xc66c, 0x6, 0x0, 0x3, 0x6, 0x8, 0x8, 0x1, 0x3ff, 0x8, 0x100, 0xf2c, 0x6, 0x758, 0x4, 0xda5, 0x4, 0x7fffffff, 0x9, 0xaa0, 0xfffffffd, 0x113, 0x3, 0x0, 0x6, 0x97, 0x3, 0x8, 0x9, 0x8ea, 0x1, 0x5, 0xe0fe, 0xffff, 0x9236, 0x80, 0x1, 0x4, 0xb, 0x4, 0xcad, 0xe73, 0xd4, 0x2, 0x9af, 0xef42, 0x101, 0xfffffff9, 0x0, 0x4, 0x6aa, 0xabbe, 0x8, 0x2, 0xc29, 0x10, 0xe, 0x0, 0x0, 0x80000001, 0x2, 0x8, 0x3, 0x9, 0x0, 0xf, 0x2, 0xe, 0x80, 0x3, 0x6, 0x576, 0xb376, 0x400, 0x3, 0x70e3, 0xdd, 0x80000001, 0x40, 0x2dd7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x189, 0x2, 0x5, {0x8, 0x1, 0xfb7b, 0x1, 0x3, 0x8}, {0x8, 0x1, 0x200, 0x2, 0x0, 0x1}, 0x3ff, 0x6, 0x9}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x20000000, 0x7, 0x7fff, 0x3, {0x7f, 0x1, 0x800, 0x8, 0xf0, 0x5}, {0x8, 0x1, 0x100, 0x0, 0xca00, 0x5}, 0xe, 0x10000, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800005}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x4, 0x8, 0x4649748a, {0xf, 0x1, 0x0, 0x145d, 0x95, 0x5}, {0xfd, 0x0, 0x2e96, 0x8000, 0x3a9, 0x8000000}, 0x800, 0xa, 0x10001}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xc5000, 0x1ef479c4, 0x8, 0x9000, 0x2, 0x3, 0x9, 0x5, 0xf, 0x7f, 0x6dc4, 0x80000000, 0x90, 0x100, 0x100, 0x76, 0x9, 0x1, 0x800, 0x7, 0xa3, 0x1, 0x6, 0x2, 0x7fffffff, 0x0, 0x8, 0x6, 0x2, 0x8, 0x7, 0xc, 0x10, 0xca82, 0xd, 0xae, 0x1, 0x0, 0x800, 0xedc, 0x3, 0x3, 0x6, 0xe90, 0x40, 0x6, 0x7, 0x7, 0x5, 0x8, 0x3d26, 0x5, 0x9, 0x8, 0x9, 0x2, 0x554, 0x1, 0x7a4, 0x9, 0x6, 0xff, 0x4, 0x7, 0x3, 0x1, 0xba, 0x2ade, 0x400, 0x101a, 0x1, 0x3, 0x3, 0x80, 0xa6e, 0x1, 0x7, 0xfffffff7, 0xfffffff9, 0x1, 0x7ff, 0x10001, 0x1, 0x7, 0x1, 0x4, 0xca57, 0x8, 0x13ea000, 0x9, 0x5, 0x1ff, 0x3, 0x5, 0xe9, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x2, 0x5, 0x3, 0xffffffff, 0x1, 0xfffffffc, 0x4, 0xffff0000, 0x0, 0x0, 0xe8e, 0x0, 0x101, 0x7, 0x8, 0x200, 0x8, 0x0, 0xb6f, 0x2, 0x2, 0x101, 0x4, 0xf, 0x2, 0xfffffff9, 0x1ff, 0xffffff13, 0x1, 0x8, 0x3, 0xe, 0x39, 0x8, 0x1, 0x1ff, 0x8, 0xe, 0x277f, 0x10001, 0x78a, 0xa04a, 0x9ba6, 0x5, 0x3, 0x5a, 0x7ff, 0x9, 0x6, 0x92a, 0x3, 0x366b, 0x8, 0x80000000, 0x7ff, 0x3, 0x4a0e, 0x0, 0x8, 0x1, 0x8000, 0x8, 0x9, 0xc77b, 0x400, 0x0, 0xffff, 0xd, 0x66e, 0x1, 0xeaa, 0x8001, 0x9, 0x3, 0x4, 0x4, 0x3, 0x4, 0x4, 0x7ff, 0x1, 0xfffffff8, 0x1, 0x2, 0x80000000, 0xb24f, 0x2, 0x7, 0x3f, 0x7, 0x100, 0x4, 0x8, 0x5, 0xc, 0x1, 0x10000000, 0x1, 0x9, 0x200, 0x3, 0x4, 0x5, 0x3, 0xffffffff, 0x4, 0x3, 0x7, 0x1, 0x5, 0x8, 0x2ef, 0x2, 0x40, 0x0, 0x1, 0x8, 0xf5c7, 0x8, 0xffffffff, 0x6, 0xd1, 0xffffffff, 0x6, 0x0, 0x8, 0x36f, 0x0, 0xa, 0x6, 0x3, 0x5, 0x5, 0xfff, 0x8, 0x9, 0x7, 0x74, 0x480000, 0x0, 0xdb30, 0x8c7e, 0x1, 0x64, 0x9, 0x0, 0x80, 0x8e3, 0x10000, 0x8, 0x1, 0x4, 0x7, 0x3, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}]]}, {0x95, 0x6, "172606c53b077c97153aa033d54fb343b905abc471813d973cea003f02b3f2a94fc4f32dce1e7f0210f9c510702dd6ccc6b3c46aa093abf34cf83af92ce6ed1fce746920dbb8aba6c9395f496b2bb5a805bec1668319080a950c805cb376439cc88080f38f49d838ec60755ee270cd5f91e2ee4cc1874d1051d800ac7ddb2a7841dd8960aeedc8f651c6052c18aebab933"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1270}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0x7fff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, 0x0, 0x4004101) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) kexec_load(0x8582, 0x0, &(0x7f0000000000), 0x320000) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04230dde18ad1f02e82dca9a0967216a"], 0x10) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) open(&(0x7f0000000100)='./file0\x00', 0x141081, 0x89) (async) r7 = open(&(0x7f0000000100)='./file0\x00', 0x141081, 0x89) fcntl$notify(r6, 0x402, 0x80000008) close_range(r7, 0xffffffffffffffff, 0x8650f99f0401678c) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000000)=0xfffffffd, 0x4) 4.483297904s ago: executing program 6 (id=4393): socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket(0x2, 0x2, 0x1) sendto$isdn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket(0x1d, 0x2, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x250480) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000100)={0x40, 0x7}) 3.920133902s ago: executing program 0 (id=4396): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0xaefcbf4cebd621e1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@getchain={0x34, 0x66, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0xffff}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xd, 0xf, 0xfffff038}, {0x6, 0x0, 0x5, 0x2}]}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newchain={0x24, 0x64, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xc}, {0x4, 0x3}, {0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041880) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={@private1, 0x64}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) fsopen(&(0x7f0000000340)='zonefs\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "37bb54f0"}, 0xfffffffc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r3, 0x0, 0xffff}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe23, 0x46, 0x8, 0xfffffed4, 0x0}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.00649188s ago: executing program 6 (id=4397): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) socket$netlink(0x10, 0x3, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setattr(r1, &(0x7f0000000380)={0x38, 0x8, 0x0, 0x3, 0x0, 0x3, 0x607, 0xb, 0x6, 0x3}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000000)={0x3, 0xffffffff, 0x530, 0x7, 0x3, 0x5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x110, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)={[0x6a9, 0x8000]}, 0x8) 2.836530084s ago: executing program 0 (id=4400): r0 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x6, 0xc, 0x0, 0x3, 0x3}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0xffffffffffffffff) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3fb, 0x200, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) r7 = openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, r9, 0x1, 0x0, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}}, 0x4000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) prctl$PR_GET_TSC(0x19, &(0x7f0000000280)) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000400", @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf252600000008000300", @ANYRES32=r11, @ANYBLOB="1e001f0002001c00000000000000000700020003000000000400040000cb0000"], 0x3c}, 0x1, 0x0, 0x0, 0x8895}, 0x4004081) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000380)={0x6, 0x40}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x12}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x2) 2.700543199s ago: executing program 0 (id=4401): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}}, 0x20000020) socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r3}, 0x18) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xa800, 0x0) ioctl$RTC_WKALM_RD(r4, 0x80287010, 0x0) r5 = dup(r2) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x147040, 0x190) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x7, 0xffffffff88804015, 0x200, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x1ff, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x68801, 0x124) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) syz_fuse_handle_req(r7, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x0, 0x5, {0xa080, 0x0, 0xff, 0x4f74}}, 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r6}, 0x38) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000240)={0x2, 0x1000}) 2.227533323s ago: executing program 5 (id=4403): mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2.100452197s ago: executing program 5 (id=4404): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_clone3(&(0x7f0000000b40)={0x1000, &(0x7f0000000940), &(0x7f0000000980)=0x0, &(0x7f00000009c0), {0x3}, &(0x7f0000000a00)=""/108, 0x6c, &(0x7f0000000a80)=""/113, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x9}, 0x58) sendmmsg$unix(r4, &(0x7f0000000f00)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000d00)="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", 0x184}, {&(0x7f00000005c0)="61e59bee1baad0252bd6ba9439f090de1d18170a73ed79d0a42c4499d73f1853637b3f6da93a6e56d93a9eb768c6a6b82f15e239f904347c321346153150472a6323c064be4f3f9acdb06647dd01b38a6f389fbd4e6318a674db49b87c1a2d921945210c000bbe801f473e4920763cc35ea53e6c45df85ac55dd26887fa19879ea12cc2c64067b", 0x87}, {&(0x7f0000000680)="b9c84c577ed170b7cf83adcbfeacf345e51a41ac1aa33a7b9866e4c6cea9832af681812f43f29832d4c75c9b5930c7f4835b562c5da88b00e5f829478122f14c789fb32950a02332c4e5741096bf095ec339f43b95485aa8e740387734243e398733d5052b6faaf7e5bfc4b0e0db338114c11cb0fd97ee538cb7573e7b8047a02ed126d3f082d9493ccd6f38de94583f1214d278cc260bf97389438fd402dc611229de8d37dc9aab58c4f4b53198fef780ed2554249cd619849c208557119912c55432a0aa6f362c3c39fd674320665ef090e4447a67bb08c8222e6ad7dc6f9ad241155afa86b793", 0xe8}], 0x3, 0x0, 0x0, 0xc084}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000800)="0980c66646984b3bf632d10bc183b40e252ba4b4ea9bbf2a4713fd74ad2f0a53263cb2ca0624d2189150196cb9d8a6c74787867988ee7c81d649b8a02c2fab4b063b58ddba94106b57e5b77cf36adc7a2a3f1e7827fc157ac1ef3b729198e01a2c914e6c31d7b75c50b8e992f07ff831cbca4202", 0x74}, {&(0x7f0000000880)="e019a6ffc44093af70465a5d0b13bf77bef1df83b1b4d54731c03ff283f80fa821fd50b06cb1d78624209d1ee55567276a45501b1b51acb6ab257cd951e12876c93b9dc9872859165b303397069b25017dfc96add7525d15098b", 0x5a}, {&(0x7f00000001c0)="0b55d21a57e4ce8c6ef621f22a8175239880d2123c0fa83a7b09b433aa812eae5d02f700bccd0ed8", 0x28}], 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000080000000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0c0000000100000001000000"], 0x54, 0x4000000}}], 0x7fffcef, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000001, 0x0, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x17d701, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x10040010}, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0xfffffffb}}, 0x3, 0x0, 0x3, 0x0, 0x24, 0x10, 0x1}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c2800005000300040000006b1208576fa16a2258"], 0x48}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.066434669s ago: executing program 2 (id=4405): pipe2(&(0x7f0000000280), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) close(0x3) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) socket(0x21, 0x803, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x11) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={&(0x7f0000000000)="7e9420bc1ac720634a92d7f290ce926206ca5ea0ac7744d9b5e313340b66d4e878fd7edbc6207aca195777ae9dab1495ead048ace4", &(0x7f0000000340)="e7f6bb13943edda780bad864d538ce33c676a540cf8028ebe9bb3f07d6156d2b38f76c4d9b23e57b0a887900190d69092c904a6874ab030d05e5c57b296db8c57ed5cabd94f2f108af97df205f96cb40512950e6124f94e09a7101dab9"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000008c0)) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) r7 = fanotify_init(0x10, 0x1000) fanotify_mark(r7, 0x90, 0x8100000, r6, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) 1.20032735s ago: executing program 5 (id=4406): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0xaefcbf4cebd621e1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@getchain={0x34, 0x66, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0xffff}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xd, 0xf, 0xfffff038}, {0x6, 0x0, 0x5, 0x2}]}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newchain={0x24, 0x64, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xc}, {0x4, 0x3}, {0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041880) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={@private1, 0x64}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) fsopen(&(0x7f0000000340)='zonefs\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "37bb54f0"}, 0xfffffffc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r3, 0x0, 0xffff}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe23, 0x46, 0x8, 0xfffffed4, 0x0}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.175801203s ago: executing program 2 (id=4407): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x2}}, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40002, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000140)=@e={0xff, 0x0, 0xd, 0x9, @generic=0x4, 0x40, 0x10, 0x5}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x10, 0x0}}], 0x40000cf, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r7 = syz_clone3(0x0, 0x0) tgkill(r7, r7, 0x2d) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r6], 0x14}, 0x1, 0x0, 0x0, 0x404488d}, 0x20048001) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x89) fchdir(r10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r11, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001f0001"], 0x104}, 0x1, 0x0, 0x0, 0x40080}, 0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r12, 0x1, 0x28, &(0x7f0000000180)=0x5, 0x4) 979.439798ms ago: executing program 2 (id=4408): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x31, 0x6, 0x0, {0x6, 0x4, 0x8, 0x0, 'nl80211\x00'}}, 0x31) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0xbd, 0x3ff, {{0x7, 0x4, 0x2, 0x4, 0x1c, 0x66, 0x0, 0x20, 0x2f, 0x0, @private=0xa010101, @private=0xa010100, {[@generic={0x94, 0x2}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2000}, @random="589733b902f1", @broadcast, @device_a, {0x2, 0x500}, "", @void, @value=@ver_80211n={0x0, 0x5f, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 979.12386ms ago: executing program 2 (id=4409): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x3, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x3, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 790.11404ms ago: executing program 2 (id=4410): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x40040}, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x26, 0x0, 0x2}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r2, 0x708, 0x2) r3 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x3e, 0x3e, 0x1, 0x3e, 0x3e, 0x0, {0x0, 0x5}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x5, &(0x7f0000000080)={0x22, "14a6c63d876ff44271f19ca6e4482707dab729631eaed83463604d70b41d4008e3"}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60840, 0x0) r4 = openat$ptp0(0xffffff9c, &(0x7f00000002c0), 0x110000, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f0000000300)={0x9, 0xc}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000bb0000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 789.655694ms ago: executing program 2 (id=4411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(0x0, 0x0) r6 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0205710, &(0x7f00000004c0)={0x0, 0x83e56, 0x10, 0x0, 0x3}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) unshare(0x6020400) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r8, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a0101000000000000000002000000091f010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000"], 0xcdc}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 345.486037ms ago: executing program 5 (id=4412): r0 = socket$l2tp(0x2, 0x2, 0x73) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40002, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000140)=@e={0xff, 0x0, 0xd, 0x9, @generic=0x4, 0x40, 0x10, 0x5}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x10, 0x0}}], 0x40000cf, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r5, r5, 0x2d) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x89) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r9, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001f0001"], 0x104}, 0x1, 0x0, 0x0, 0x40080}, 0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r10, 0x1, 0x28, &(0x7f0000000180)=0x5, 0x4) 50.364419ms ago: executing program 5 (id=4413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {0xfff3, 0xffff}, {0xb, 0xffe0}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44845}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f00000002c0)={{0xffffffffffffffff, 0x1, 0x8, 0x1, 0x20000}, 0x7, 0xfffff0c2, 0xa}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x12, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000080", @ANYRES16=r1, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r2, @ANYBLOB="04003400"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4004454) 49.846147ms ago: executing program 6 (id=4414): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) 0s ago: executing program 5 (id=4415): mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile64(r3, r2, 0x0, 0x8) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000000)={0xff, 0x10001, 0x9, 0xffff9401}, 0x10) kernel console output (not intermixed with test programs): d.0: pdev(0) rhport(0) sockfd(5) [ 1164.786836][T20260] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1164.790081][T20260] vhci_hcd vhci_hcd.0: Device attached [ 1164.804888][T20260] smc: net device ip6_vti0 applied user defined pnetid SYZ1 [ 1165.077690][ T29] usb 38-1: SetAddress Request (17) to port 0 [ 1165.080030][ T29] usb 38-1: new SuperSpeed USB device number 17 using vhci_hcd [ 1165.429272][T20261] vhci_hcd: connection reset by peer [ 1165.431653][ T1176] vhci_hcd: stop threads [ 1165.433824][ T1176] vhci_hcd: release socket [ 1165.435899][ T1176] vhci_hcd: disconnect device [ 1165.919873][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3768'. [ 1169.634673][T20306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3777'. [ 1169.771997][T20308] tipc: Started in network mode [ 1169.773631][T20308] tipc: Node identity 462b1912a0a9, cluster identity 4711 [ 1169.777322][T20308] tipc: Enabled bearer , priority 0 [ 1169.780228][T20308] syzkaller0: entered promiscuous mode [ 1169.782387][T20308] syzkaller0: entered allmulticast mode [ 1169.797987][T20308] FAULT_INJECTION: forcing a failure. [ 1169.797987][T20308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.802230][T20308] CPU: 3 UID: 0 PID: 20308 Comm: syz.5.3778 Not tainted syzkaller #0 PREEMPT(full) [ 1169.802245][T20308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1169.802253][T20308] Call Trace: [ 1169.802256][T20308] [ 1169.802261][T20308] dump_stack_lvl+0x16c/0x1f0 [ 1169.802279][T20308] should_fail_ex+0x512/0x640 [ 1169.802299][T20308] _copy_from_user+0x2e/0xd0 [ 1169.802317][T20308] get_user_ifreq+0x116/0x1c0 [ 1169.802330][T20308] sock_do_ioctl+0x16b/0x280 [ 1169.802344][T20308] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1169.802357][T20308] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1169.802378][T20308] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1169.802400][T20308] compat_sock_ioctl+0x301/0x730 [ 1169.802416][T20308] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1169.802430][T20308] ? hook_file_ioctl_common+0x145/0x410 [ 1169.802445][T20308] ? __fget_files+0x20e/0x3c0 [ 1169.802459][T20308] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1169.802473][T20308] __ia32_compat_sys_ioctl+0x242/0x370 [ 1169.802506][T20308] __do_fast_syscall_32+0x7c/0x300 [ 1169.802521][T20308] do_fast_syscall_32+0x32/0x80 [ 1169.802536][T20308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1169.802550][T20308] RIP: 0023:0xf708d579 [ 1169.802558][T20308] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1169.802569][T20308] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1169.802580][T20308] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 1169.802587][T20308] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1169.802594][T20308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1169.802600][T20308] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1169.802606][T20308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1169.802621][T20308] [ 1169.805456][T20307] tipc: Resetting bearer [ 1169.906610][T20307] tipc: Disabling bearer [ 1170.184968][ T29] usb 38-1: device descriptor read/8, error -110 [ 1170.196072][T20320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3780'. [ 1170.326203][T20326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3782'. [ 1170.573054][ T29] usb usb38-port1: attempt power cycle [ 1170.967842][T20328] bridge1: entered allmulticast mode [ 1171.163317][ T29] usb usb38-port1: unable to enumerate USB device [ 1171.723256][ T29] usb usb38-port2: attempt power cycle [ 1172.042050][T20344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3789'. [ 1172.198951][T20345] geneve2: entered promiscuous mode [ 1172.257785][T11475] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1172.363505][ T29] usb usb38-port2: unable to enumerate USB device [ 1172.503680][T14754] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1173.104793][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3793'. [ 1174.508091][T20391] FAULT_INJECTION: forcing a failure. [ 1174.508091][T20391] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.513156][T20391] CPU: 0 UID: 0 PID: 20391 Comm: syz.6.3798 Not tainted syzkaller #0 PREEMPT(full) [ 1174.513172][T20391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1174.513180][T20391] Call Trace: [ 1174.513185][T20391] [ 1174.513190][T20391] dump_stack_lvl+0x16c/0x1f0 [ 1174.513207][T20391] should_fail_ex+0x512/0x640 [ 1174.513225][T20391] ? fs_reclaim_acquire+0xae/0x150 [ 1174.513241][T20391] should_failslab+0xc2/0x120 [ 1174.513257][T20391] __kmalloc_noprof+0xdd/0x880 [ 1174.513275][T20391] ? tomoyo_encode2+0x100/0x3e0 [ 1174.513290][T20391] ? tomoyo_encode2+0x100/0x3e0 [ 1174.513302][T20391] tomoyo_encode2+0x100/0x3e0 [ 1174.513316][T20391] tomoyo_encode+0x29/0x50 [ 1174.513328][T20391] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1174.513342][T20391] ? tomoyo_profile+0x47/0x60 [ 1174.513358][T20391] tomoyo_path_number_perm+0x245/0x580 [ 1174.513376][T20391] ? tomoyo_path_number_perm+0x237/0x580 [ 1174.513395][T20391] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1174.513428][T20391] ? find_held_lock+0x2b/0x80 [ 1174.513440][T20391] ? hook_file_ioctl_common+0x145/0x410 [ 1174.513455][T20391] ? __fget_files+0x20e/0x3c0 [ 1174.513469][T20391] security_file_ioctl_compat+0x9b/0x240 [ 1174.513482][T20391] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1174.513501][T20391] __do_fast_syscall_32+0x7c/0x300 [ 1174.513517][T20391] do_fast_syscall_32+0x32/0x80 [ 1174.513532][T20391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1174.513546][T20391] RIP: 0023:0xf701d579 [ 1174.513556][T20391] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1174.513567][T20391] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1174.513578][T20391] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000400448e7 [ 1174.513585][T20391] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1174.513592][T20391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1174.513598][T20391] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1174.513604][T20391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1174.513618][T20391] [ 1174.513630][T20391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1176.937444][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1190.090796][T20436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3803'. [ 1190.100898][T14754] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1190.274817][T14754] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1190.279476][T14754] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1190.283688][T14754] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1190.316279][T14754] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1190.344562][T14754] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1190.347656][T14754] usb 7-1: Product: syz [ 1190.349185][T14754] usb 7-1: Manufacturer: syz [ 1190.350886][T14754] usb 7-1: SerialNumber: syz [ 1190.356531][T14754] usb 7-1: config 0 descriptor?? [ 1190.566858][T14754] hub 7-1:0.0: bad descriptor, ignoring hub [ 1190.569074][T14754] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1190.573867][T14754] usb 7-1: selecting invalid altsetting 0 [ 1191.116126][T20425] usb 7-1: reset high-speed USB device number 89 using dummy_hcd [ 1191.293811][T20425] usb 7-1: device firmware changed [ 1191.298899][ T6003] usb 7-1: USB disconnect, device number 89 [ 1191.455027][ T6003] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1191.617009][ T6003] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1191.619604][ T6003] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1191.622612][ T6003] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1191.627378][ T6003] usb 7-1: language id specifier not provided by device, defaulting to English [ 1191.635681][ T6003] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1191.638505][ T6003] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1191.641038][ T6003] usb 7-1: Product: syz [ 1191.644557][ T6003] usb 7-1: config 0 descriptor?? [ 1191.647619][ T6003] hub 7-1:0.0: bad descriptor, ignoring hub [ 1191.651362][ T6003] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1191.655441][ T6003] usb 7-1: selecting invalid altsetting 0 [ 1191.973240][T20443] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1192.030719][T11475] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1193.110509][T20469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3810'. [ 1193.326314][ T6020] usb 7-1: USB disconnect, device number 90 [ 1193.391290][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3811'. [ 1193.394128][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3811'. [ 1194.393132][T20485] hub 8-0:1.0: USB hub found [ 1194.395209][T20485] hub 8-0:1.0: 1 port detected [ 1194.823967][T20491] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3816'. [ 1194.827142][T20491] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3816'. [ 1194.962992][T20497] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3818'. [ 1194.966135][T20497] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3818'. [ 1195.177425][T20504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3820'. [ 1196.615527][T11475] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1196.720220][T20523] hfs: unable to load iocharset "io#harset" [ 1197.249820][T20534] FAULT_INJECTION: forcing a failure. [ 1197.249820][T20534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.253879][T20534] CPU: 3 UID: 0 PID: 20534 Comm: syz.2.3826 Not tainted syzkaller #0 PREEMPT(full) [ 1197.253894][T20534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1197.253902][T20534] Call Trace: [ 1197.253907][T20534] [ 1197.253911][T20534] dump_stack_lvl+0x16c/0x1f0 [ 1197.253928][T20534] should_fail_ex+0x512/0x640 [ 1197.253948][T20534] _copy_from_user+0x2e/0xd0 [ 1197.253966][T20534] get_user_ifreq+0x116/0x1c0 [ 1197.253981][T20534] sock_do_ioctl+0x16b/0x280 [ 1197.253994][T20534] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1197.254007][T20534] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1197.254029][T20534] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1197.254049][T20534] compat_sock_ioctl+0x301/0x730 [ 1197.254065][T20534] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1197.254080][T20534] ? hook_file_ioctl_common+0x145/0x410 [ 1197.254095][T20534] ? __fget_files+0x20e/0x3c0 [ 1197.254109][T20534] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1197.254124][T20534] __ia32_compat_sys_ioctl+0x242/0x370 [ 1197.254142][T20534] __do_fast_syscall_32+0x7c/0x300 [ 1197.254158][T20534] do_fast_syscall_32+0x32/0x80 [ 1197.254173][T20534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1197.254187][T20534] RIP: 0023:0xf7fa7579 [ 1197.254196][T20534] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1197.254207][T20534] RSP: 002b:00000000f545455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1197.254218][T20534] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000008949 [ 1197.254225][T20534] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1197.254231][T20534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1197.254237][T20534] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1197.254243][T20534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1197.254257][T20534] [ 1197.509863][T20536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3827'. [ 1197.949305][ T61] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 1197.972857][T20540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3829'. [ 1197.977132][T20540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3829'. [ 1197.981834][T20540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3829'. [ 1198.101479][ T61] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.105897][ T61] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1198.109803][ T61] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1198.112624][ T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.116404][ T61] usb 10-1: config 0 descriptor?? [ 1198.122020][ T61] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1198.124205][ T61] dvb-usb: bulk message failed: -22 (3/0) [ 1198.125214][T20542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3830'. [ 1198.129666][ T61] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1198.133621][ T61] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1198.136808][ T61] usb 10-1: media controller created [ 1198.140210][ T61] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1198.146485][ T61] dvb-usb: bulk message failed: -22 (6/0) [ 1198.148861][ T61] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1198.162004][ T61] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input172 [ 1198.187759][ T61] dvb-usb: schedule remote query interval to 150 msecs. [ 1198.190459][ T61] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1198.360163][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 1198.362563][ T61] dvb-usb: error while querying for an remote control event. [ 1198.475271][T20554] syzkaller0: entered promiscuous mode [ 1198.477115][T20554] syzkaller0: entered allmulticast mode [ 1198.574866][T20557] afs: Unknown parameter 'dyn&aHt' [ 1198.685294][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 1198.687184][ T61] dvb-usb: error while querying for an remote control event. [ 1199.279942][T15938] usb 10-1: USB disconnect, device number 21 [ 1199.318450][T15938] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1199.381268][T20562] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3836'. [ 1199.384108][T20562] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3836'. [ 1199.490415][T20574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3839'. [ 1199.520299][ T5947] Bluetooth: hci3: command 0x0405 tx timeout [ 1199.699053][T20582] FAULT_INJECTION: forcing a failure. [ 1199.699053][T20582] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.703367][T20582] CPU: 0 UID: 0 PID: 20582 Comm: syz.2.3840 Not tainted syzkaller #0 PREEMPT(full) [ 1199.703393][T20582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1199.703401][T20582] Call Trace: [ 1199.703405][T20582] [ 1199.703410][T20582] dump_stack_lvl+0x16c/0x1f0 [ 1199.703427][T20582] should_fail_ex+0x512/0x640 [ 1199.703445][T20582] ? __kmalloc_noprof+0xca/0x880 [ 1199.703464][T20582] should_failslab+0xc2/0x120 [ 1199.703480][T20582] __kmalloc_noprof+0xdd/0x880 [ 1199.703498][T20582] ? iter_file_splice_write+0x1cc/0x12e0 [ 1199.703512][T20582] ? iter_file_splice_write+0x1cc/0x12e0 [ 1199.703523][T20582] iter_file_splice_write+0x1cc/0x12e0 [ 1199.703536][T20582] ? __pfx_filemap_splice_read+0x10/0x10 [ 1199.703555][T20582] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1199.703577][T20582] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1199.703590][T20582] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1199.703602][T20582] direct_splice_actor+0x192/0x6c0 [ 1199.703617][T20582] splice_direct_to_actor+0x345/0xa30 [ 1199.703630][T20582] ? __pfx_direct_splice_actor+0x10/0x10 [ 1199.703644][T20582] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1199.703684][T20582] do_splice_direct+0x174/0x240 [ 1199.703700][T20582] ? __pfx_do_splice_direct+0x10/0x10 [ 1199.703715][T20582] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1199.703737][T20582] ? bpf_lsm_file_permission+0x9/0x10 [ 1199.703751][T20582] ? security_file_permission+0x71/0x210 [ 1199.703764][T20582] ? rw_verify_area+0xcf/0x6c0 [ 1199.703776][T20582] do_sendfile+0xb06/0xe50 [ 1199.703790][T20582] ? __pfx_do_sendfile+0x10/0x10 [ 1199.703801][T20582] ? __pfx___schedule+0x10/0x10 [ 1199.703813][T20582] ? __fget_files+0x20e/0x3c0 [ 1199.703828][T20582] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 1199.703843][T20582] ? ksys_write+0x1ac/0x250 [ 1199.703854][T20582] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 1199.703876][T20582] ? rcu_is_watching+0x12/0xc0 [ 1199.703891][T20582] __do_fast_syscall_32+0x7c/0x300 [ 1199.703907][T20582] do_fast_syscall_32+0x32/0x80 [ 1199.703921][T20582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1199.703936][T20582] RIP: 0023:0xf7fa7579 [ 1199.703946][T20582] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1199.703961][T20582] RSP: 002b:00000000f547555c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 1199.703978][T20582] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000006 [ 1199.703985][T20582] RDX: 0000000000000000 RSI: 00000000002000fb RDI: 0000000000000000 [ 1199.703992][T20582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1199.703998][T20582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1199.704005][T20582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1199.704019][T20582] [ 1200.490779][ T6003] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1200.650920][ T6003] usb 10-1: Using ep0 maxpacket: 16 [ 1200.660447][ T6003] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1200.665886][ T6003] usb 10-1: config 0 has no interface number 0 [ 1200.674995][ T6003] usb 10-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1200.678321][ T6003] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.683014][ T6003] usb 10-1: Product: syz [ 1200.686051][ T6003] usb 10-1: Manufacturer: syz [ 1200.689406][ T6003] usb 10-1: SerialNumber: syz [ 1200.710984][ T6003] usb 10-1: config 0 descriptor?? [ 1200.737856][ T6003] hub 10-1:0.132: bad descriptor, ignoring hub [ 1200.747319][ T6003] hub 10-1:0.132: probe with driver hub failed with error -5 [ 1200.778551][ T6003] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.132/input/input173 [ 1201.289428][T20601] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3846'. [ 1201.547683][T20598] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1201.550409][T20598] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1201.554500][T20598] vhci_hcd vhci_hcd.0: Device attached [ 1201.791602][T10771] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 1201.887916][T20606] vhci_hcd: connection reset by peer [ 1201.890537][ T1146] vhci_hcd: stop threads [ 1201.892534][ T1146] vhci_hcd: release socket [ 1201.894510][ T1146] vhci_hcd: disconnect device [ 1202.061857][ T6002] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1202.077301][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3849'. [ 1203.042406][T14754] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 1203.195023][T14754] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 1203.198651][T14754] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1203.202958][T14754] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1203.208870][T14754] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1203.212883][T14754] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1203.217294][T14754] usb 11-1: Product: syz [ 1203.219217][T14754] usb 11-1: Manufacturer: syz [ 1203.221252][T14754] usb 11-1: SerialNumber: syz [ 1203.225348][T14754] usb 11-1: config 0 descriptor?? [ 1203.229649][T14754] hub 11-1:0.0: bad descriptor, ignoring hub [ 1203.232247][T14754] hub 11-1:0.0: probe with driver hub failed with error -5 [ 1203.237664][T14754] usb 11-1: selecting invalid altsetting 0 [ 1203.393132][ T6002] usb 10-1: USB disconnect, device number 22 [ 1203.593550][ T6003] usb 11-1: USB disconnect, device number 5 [ 1204.026030][T20633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3854'. [ 1204.073099][ T6003] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 1204.264816][ T6003] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 1204.267746][ T6003] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1204.271770][ T6003] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1204.279001][ T6003] usb 11-1: language id specifier not provided by device, defaulting to English [ 1204.290549][ T6003] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1204.294539][ T6003] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1204.297488][ T6003] usb 11-1: Product: syz [ 1204.300122][ T6003] usb 11-1: config 0 descriptor?? [ 1204.307871][ T6003] hub 11-1:0.0: bad descriptor, ignoring hub [ 1204.310342][ T6003] hub 11-1:0.0: probe with driver hub failed with error -5 [ 1204.316068][ T6003] usb 11-1: selecting invalid altsetting 0 [ 1204.325533][T20637] overlay: ./file1 is not a directory [ 1204.484412][T14754] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1204.601761][T20631] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1206.054440][ T6002] usb 11-1: USB disconnect, device number 6 [ 1206.944969][T10771] vhci_hcd: vhci_device speed not set [ 1212.568042][T20690] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1212.571015][T20690] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1212.578230][T20690] vhci_hcd vhci_hcd.0: Device attached [ 1213.008682][ T4160] usb 48-1: SetAddress Request (26) to port 0 [ 1213.018314][ T4160] usb 48-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1213.090607][T20693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1213.262760][T20691] vhci_hcd: connection reset by peer [ 1213.407071][ T90] vhci_hcd: stop threads [ 1213.408988][ T90] vhci_hcd: release socket [ 1213.411117][ T90] vhci_hcd: disconnect device [ 1213.686488][T20696] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3862'. [ 1213.689459][T20696] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3862'. [ 1214.959710][ T6002] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1215.312774][ T6002] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1215.316425][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1215.795745][T20720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3869'. [ 1215.810189][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1215.814039][ T6002] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1215.819016][ T6002] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1215.833157][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.840873][ T6002] usb 7-1: config 0 descriptor?? [ 1216.265521][ T6002] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 1216.284042][ T6002] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1217.251063][T20736] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3872'. [ 1218.008613][T20746] FAULT_INJECTION: forcing a failure. [ 1218.008613][T20746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1218.013167][T20746] CPU: 1 UID: 0 PID: 20746 Comm: syz.6.3875 Not tainted syzkaller #0 PREEMPT(full) [ 1218.013188][T20746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1218.013198][T20746] Call Trace: [ 1218.013204][T20746] [ 1218.013208][T20746] dump_stack_lvl+0x16c/0x1f0 [ 1218.013226][T20746] should_fail_ex+0x512/0x640 [ 1218.013246][T20746] _copy_from_iter+0x29f/0x1720 [ 1218.013267][T20746] ? __pfx__copy_from_iter+0x10/0x10 [ 1218.013286][T20746] ? kfree+0x252/0x6d0 [ 1218.013305][T20746] ? __pfx___might_resched+0x10/0x10 [ 1218.013320][T20746] file_tty_write.constprop.0+0x487/0x9b0 [ 1218.013338][T20746] vfs_write+0x7d3/0x11d0 [ 1218.013352][T20746] ? __pfx_tty_write+0x10/0x10 [ 1218.013365][T20746] ? __pfx_vfs_write+0x10/0x10 [ 1218.013375][T20746] ? find_held_lock+0x2b/0x80 [ 1218.013399][T20746] ksys_write+0x12a/0x250 [ 1218.013411][T20746] ? __pfx_ksys_write+0x10/0x10 [ 1218.013424][T20746] ? rcu_is_watching+0x12/0xc0 [ 1218.013439][T20746] __do_fast_syscall_32+0x7c/0x300 [ 1218.013462][T20746] do_fast_syscall_32+0x32/0x80 [ 1218.013476][T20746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1218.013491][T20746] RIP: 0023:0xf701d579 [ 1218.013504][T20746] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1218.013520][T20746] RSP: 002b:00000000f53ec55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1218.013548][T20746] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001040 [ 1218.013560][T20746] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000 [ 1218.013570][T20746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1218.013580][T20746] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1218.013586][T20746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1218.013601][T20746] [ 1218.095741][ T4160] usb 48-1: device descriptor read/8, error -110 [ 1218.344181][T14754] usb 7-1: USB disconnect, device number 91 [ 1218.492389][ T4160] usb usb48-port1: attempt power cycle [ 1219.320686][ T4160] usb usb48-port1: unable to enumerate USB device [ 1220.132828][T20761] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1220.134977][T20761] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1220.613364][ T4160] usb 38-1: SetAddress Request (25) to port 0 [ 1220.615368][ T4160] usb 38-1: new SuperSpeed USB device number 25 using vhci_hcd [ 1220.643173][T20761] vhci_hcd vhci_hcd.0: Device attached [ 1221.485789][T20767] hfs: unable to load iocharset "io#harset" [ 1221.562117][T20763] vhci_hcd: connection reset by peer [ 1221.565435][ T46] vhci_hcd: stop threads [ 1221.567299][ T46] vhci_hcd: release socket [ 1221.569486][ T46] vhci_hcd: disconnect device [ 1221.803900][T10771] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1221.966351][T10771] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1221.968878][T10771] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1221.971855][T10771] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1221.975731][T10771] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1221.978746][T10771] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1221.981338][T10771] usb 7-1: Product: syz [ 1221.982673][T10771] usb 7-1: Manufacturer: syz [ 1221.984266][T10771] usb 7-1: SerialNumber: syz [ 1221.987255][T10771] usb 7-1: config 0 descriptor?? [ 1221.990471][T10771] hub 7-1:0.0: bad descriptor, ignoring hub [ 1221.992427][T10771] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1221.996030][T10771] usb 7-1: selecting invalid altsetting 0 [ 1222.434698][T20775] usb 7-1: reset high-speed USB device number 92 using dummy_hcd [ 1222.597934][T20775] usb 7-1: device firmware changed [ 1222.600275][T10771] usb 7-1: USB disconnect, device number 92 [ 1222.654423][ T59] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1222.744415][T10771] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1222.816279][ T59] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1222.820144][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1222.823512][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1222.826681][ T59] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1222.830706][ T59] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1222.833541][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.837706][ T59] usb 10-1: config 0 descriptor?? [ 1222.925993][T10771] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1222.928575][T10771] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1222.931819][T10771] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1222.937333][T10771] usb 7-1: language id specifier not provided by device, defaulting to English [ 1222.946167][T10771] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1222.949160][T10771] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1222.951806][T10771] usb 7-1: Product: syz [ 1222.954309][T10771] usb 7-1: config 0 descriptor?? [ 1222.957550][T10771] hub 7-1:0.0: bad descriptor, ignoring hub [ 1222.959476][T10771] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1222.963264][T10771] usb 7-1: selecting invalid altsetting 0 [ 1223.238897][T20786] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1223.251497][ T59] plantronics 0003:047F:FFFF.0019: ignoring exceeding usage max [ 1223.264867][ T59] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1224.675743][ T6002] usb 7-1: USB disconnect, device number 93 [ 1225.357041][T10771] usb 10-1: USB disconnect, device number 23 [ 1225.498241][T20808] syzkaller0: entered promiscuous mode [ 1225.500040][T20808] syzkaller0: entered allmulticast mode [ 1225.634703][T20810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3888'. [ 1226.090962][ T4160] usb 38-1: device descriptor read/8, error -110 [ 1226.435485][T20806] syz.0.3889: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1226.444082][T20806] CPU: 2 UID: 0 PID: 20806 Comm: syz.0.3889 Not tainted syzkaller #0 PREEMPT(full) [ 1226.444114][T20806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1226.444126][T20806] Call Trace: [ 1226.444133][T20806] [ 1226.444142][T20806] dump_stack_lvl+0x16c/0x1f0 [ 1226.444182][T20806] warn_alloc+0x248/0x3a0 [ 1226.444206][T20806] ? __pfx_warn_alloc+0x10/0x10 [ 1226.444240][T20806] ? hash_ipmac_create+0x3ec/0x1250 [ 1226.444267][T20806] ? __vmalloc_node_noprof+0xad/0xf0 [ 1226.444299][T20806] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 1226.444333][T20806] ? hash_ipmac_create+0x3ec/0x1250 [ 1226.444366][T20806] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1226.444397][T20806] ? ___kmalloc_large_node+0xed/0x160 [ 1226.444429][T20806] __kvmalloc_node_noprof+0x431/0x9c0 [ 1226.444450][T20806] ? hash_ipmac_create+0x3ec/0x1250 [ 1226.444477][T20806] ? hash_ipmac_create+0x3ec/0x1250 [ 1226.444505][T20806] ? hash_ipmac_create+0x3ec/0x1250 [ 1226.444529][T20806] hash_ipmac_create+0x3ec/0x1250 [ 1226.444555][T20806] ? __nla_parse+0x13/0x60 [ 1226.444584][T20806] ? __pfx_hash_ipmac_create+0x10/0x10 [ 1226.444612][T20806] ip_set_create+0x7e4/0x14d0 [ 1226.444648][T20806] ? __pfx_ip_set_create+0x10/0x10 [ 1226.444700][T20806] ? find_held_lock+0x2b/0x80 [ 1226.444730][T20806] nfnetlink_rcv_msg+0x9fc/0x1200 [ 1226.444772][T20806] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1226.444803][T20806] ? consume_skb+0xcc/0x100 [ 1226.444854][T20806] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1226.444888][T20806] netlink_rcv_skb+0x158/0x420 [ 1226.444909][T20806] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1226.444937][T20806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1226.444974][T20806] ? ns_capable+0xd7/0x110 [ 1226.444999][T20806] nfnetlink_rcv+0x1b3/0x430 [ 1226.445025][T20806] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1226.445051][T20806] ? netlink_deliver_tap+0x1ae/0xd30 [ 1226.445078][T20806] netlink_unicast+0x5aa/0x870 [ 1226.445103][T20806] ? __pfx_netlink_unicast+0x10/0x10 [ 1226.445136][T20806] netlink_sendmsg+0x8c8/0xdd0 [ 1226.445162][T20806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1226.445186][T20806] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1226.445221][T20806] ____sys_sendmsg+0xa98/0xc70 [ 1226.445248][T20806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1226.445272][T20806] ? get_compat_msghdr+0x11a/0x170 [ 1226.445307][T20806] ? __pfx_futex_wake_mark+0x10/0x10 [ 1226.445342][T20806] ___sys_sendmsg+0x134/0x1d0 [ 1226.445364][T20806] ? __pfx____sys_sendmsg+0x10/0x10 [ 1226.445400][T20806] ? find_held_lock+0x2b/0x80 [ 1226.445441][T20806] __sys_sendmsg+0x16d/0x220 [ 1226.445461][T20806] ? __pfx___sys_sendmsg+0x10/0x10 [ 1226.445480][T20806] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 1226.445523][T20806] ? rcu_is_watching+0x12/0xc0 [ 1226.445547][T20806] __do_fast_syscall_32+0x7c/0x300 [ 1226.445580][T20806] do_fast_syscall_32+0x32/0x80 [ 1226.445605][T20806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1226.445628][T20806] RIP: 0023:0xf703d579 [ 1226.445645][T20806] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1226.445662][T20806] RSP: 002b:00000000f540c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1226.445679][T20806] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 1226.445691][T20806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1226.445702][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1226.445713][T20806] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1226.445724][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1226.445751][T20806] [ 1226.445758][T20806] Mem-Info: [ 1226.494109][ T4160] usb usb38-port1: attempt power cycle [ 1226.501888][T20806] active_anon:293 inactive_anon:1295 isolated_anon:16 [ 1226.501888][T20806] active_file:1712 inactive_file:1364 isolated_file:0 [ 1226.501888][T20806] unevictable:1768 dirty:74 writeback:0 [ 1226.501888][T20806] slab_reclaimable:7348 slab_unreclaimable:70850 [ 1226.501888][T20806] mapped:23683 shmem:1790 pagetables:1737 [ 1226.501888][T20806] sec_pagetables:341 bounce:0 [ 1226.501888][T20806] kernel_misc_reclaimable:0 [ 1226.501888][T20806] free:77207 free_pcp:4463 free_cma:0 [ 1226.641578][T20806] Node 0 active_anon:636kB inactive_anon:80kB active_file:3312kB inactive_file:32kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2268kB dirty:28kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8320kB pagetables:1716kB sec_pagetables:1164kB all_unreclaimable? yes Balloon:0kB [ 1226.654528][T20806] Node 1 active_anon:7936kB inactive_anon:3800kB active_file:3836kB inactive_file:5324kB unevictable:3536kB isolated(anon):64kB isolated(file):0kB mapped:98564kB dirty:268kB writeback:0kB shmem:9620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6336kB pagetables:5232kB sec_pagetables:200kB all_unreclaimable? no Balloon:0kB [ 1226.668353][T20806] Node 0 DMA free:2648kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1226.679609][T20806] lowmem_reserve[]: 0 294 294 294 294 [ 1226.681466][T20806] Node 0 DMA32 free:18628kB boost:2048kB min:15496kB low:18856kB high:22216kB reserved_highatomic:0KB free_highatomic:0KB active_anon:636kB inactive_anon:80kB active_file:3312kB inactive_file:32kB unevictable:3536kB writepending:28kB zspages:2672kB present:1032196kB managed:301148kB mlocked:0kB bounce:0kB free_pcp:1276kB local_pcp:132kB free_cma:0kB [ 1226.691911][T20806] lowmem_reserve[]: 0 0 0 0 0 [ 1226.693457][T20806] Node 1 DMA32 free:282016kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9356kB inactive_anon:3848kB active_file:3840kB inactive_file:5408kB unevictable:3536kB writepending:268kB zspages:4460kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:15676kB local_pcp:7412kB free_cma:0kB [ 1226.703816][T20806] lowmem_reserve[]: 0 0 0 0 0 [ 1226.705387][T20806] Node 0 DMA: 56*4kB (U) 33*8kB (U) 13*16kB (U) 3*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2648kB [ 1226.713966][T20806] Node 0 DMA32: 5*4kB (E) 46*8kB (UME) 26*16kB (UE) 173*32kB (UE) 68*64kB (UME) 30*128kB (UME) 6*256kB (UME) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18628kB [ 1226.724141][T20806] Node 1 DMA32: 439*4kB (UE) 391*8kB (UME) 491*16kB (UME) 508*32kB (UME) 173*64kB (UME) 220*128kB (UME) 172*256kB (UME) 116*512kB (UME) 106*1024kB (UM) 0*2048kB 0*4096kB = 280196kB [ 1226.737464][T20806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1226.741689][T20806] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1226.744854][T20806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1226.748489][T20806] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1226.752085][T20806] 8177 total pagecache pages [ 1226.757518][T20806] 827 pages in swap cache [ 1226.758964][T20806] Free swap = 92904kB [ 1226.760293][T20806] Total swap = 124996kB [ 1226.761623][T20806] 524155 pages RAM [ 1226.763288][T20806] 0 pages HighMem/MovableOnly [ 1226.764826][T20806] 207973 pages reserved [ 1226.766234][T20806] 0 pages cma reserved [ 1227.111471][ T4160] usb usb38-port1: unable to enumerate USB device [ 1227.708413][ T4160] usb usb38-port2: attempt power cycle [ 1227.868669][T20836] input: syz1 as /devices/virtual/input/input174 [ 1227.896286][T20833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3896'. [ 1228.278525][ T4160] usb usb38-port2: unable to enumerate USB device [ 1228.490717][T20852] hfs: unable to load iocharset "io#harset" [ 1228.898473][T20855] bridge3: entered allmulticast mode [ 1230.423058][T20875] 9p: Unknown uid 00000000004294967295 [ 1230.770849][T20876] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1231.188022][T20883] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1231.190102][T20883] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1231.205106][T20883] vhci_hcd vhci_hcd.0: Device attached [ 1231.489759][T11067] usb 48-1: SetAddress Request (30) to port 0 [ 1231.491780][T11067] usb 48-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1231.510902][T20891] vhci_hcd: connection closed [ 1231.511125][ T1140] vhci_hcd: stop threads [ 1231.514170][ T1140] vhci_hcd: release socket [ 1231.516125][ T1140] vhci_hcd: disconnect device [ 1232.615305][T20906] hfs: unable to load iocharset "io#harset" [ 1233.452874][T20912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3917'. [ 1234.440184][T20926] syzkaller0: entered promiscuous mode [ 1234.453048][T20926] syzkaller0: entered allmulticast mode [ 1234.854746][T20936] overlayfs: missing 'lowerdir' [ 1234.858212][T20936] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1234.870075][T20936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1235.749147][T20943] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1235.751237][T20943] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1235.754349][T20943] vhci_hcd vhci_hcd.0: Device attached [ 1236.251989][T20944] vhci_hcd: connection reset by peer [ 1236.256092][ T1140] vhci_hcd: stop threads [ 1236.258264][ T1140] vhci_hcd: release socket [ 1236.260155][ T1140] vhci_hcd: disconnect device [ 1236.582751][T11067] usb 48-1: device descriptor read/8, error -110 [ 1236.845627][T20959] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1236.847743][T20959] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1236.850567][T20959] vhci_hcd vhci_hcd.0: Device attached [ 1236.986746][T11067] usb usb48-port1: attempt power cycle [ 1237.182997][ T4160] usb 50-1: SetAddress Request (18) to port 0 [ 1237.185236][ T4160] usb 50-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1237.548268][T11067] usb usb48-port1: unable to enumerate USB device [ 1238.061023][T20975] hfs: unable to load iocharset "io#harset" [ 1238.287970][T20960] vhci_hcd: connection reset by peer [ 1238.291448][ T90] vhci_hcd: stop threads [ 1238.292807][ T90] vhci_hcd: release socket [ 1238.294848][ T90] vhci_hcd: disconnect device [ 1238.302406][T20985] syzkaller0: entered promiscuous mode [ 1238.304781][T20985] syzkaller0: entered allmulticast mode [ 1238.415714][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.499926][T20991] overlayfs: missing 'lowerdir' [ 1238.512490][T20991] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1238.532630][T20991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1239.052623][T20994] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3943'. [ 1239.073729][T20994] 9pnet: Unknown protocol version 9p2000.um}X6&iH 'I(G [ 1239.103397][T20995] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1239.106203][T20995] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1239.119384][T20995] vhci_hcd vhci_hcd.0: Device attached [ 1239.344804][T20996] vhci_hcd: connection closed [ 1239.344999][ T7665] vhci_hcd: stop threads [ 1239.347882][ T7665] vhci_hcd: release socket [ 1239.349896][ T7665] vhci_hcd: disconnect device [ 1239.394364][ T6002] usb 38-1: enqueue for inactive port 0 [ 1239.895683][ T6002] usb usb38-port1: attempt power cycle [ 1240.464757][T21016] syzkaller0: entered promiscuous mode [ 1240.472945][T21016] syzkaller0: entered allmulticast mode [ 1240.541051][ T6002] usb usb38-port1: unable to enumerate USB device [ 1241.164760][ T6002] usb usb38-port2: attempt power cycle [ 1241.792445][ T6002] usb usb38-port2: unable to enumerate USB device [ 1241.935727][T21043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3954'. [ 1242.256871][ T4160] usb 50-1: device descriptor read/8, error -110 [ 1242.686927][ T4160] usb usb50-port1: attempt power cycle [ 1243.146507][T11067] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1243.247108][ T4160] usb usb50-port1: unable to enumerate USB device [ 1243.305702][T11067] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 1243.309106][T11067] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1243.312548][T11067] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1243.317365][T11067] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1243.320941][T11067] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1243.323931][T11067] usb 10-1: Product: syz [ 1243.325450][T11067] usb 10-1: Manufacturer: syz [ 1243.327450][T11067] usb 10-1: SerialNumber: syz [ 1243.336925][T11067] usb 10-1: config 0 descriptor?? [ 1243.340419][T11067] hub 10-1:0.0: bad descriptor, ignoring hub [ 1243.342495][T11067] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1243.347773][T11067] usb 10-1: selecting invalid altsetting 0 [ 1243.425727][T21064] hfs: unable to load iocharset "io#harset" [ 1243.756873][T11067] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1243.910169][T11067] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1243.913582][T11067] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1243.918408][T11067] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1243.924134][T11067] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1243.928024][T11067] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1243.931472][T11067] usb 7-1: Product: syz [ 1243.933272][T11067] usb 7-1: Manufacturer: syz [ 1243.935260][T11067] usb 7-1: SerialNumber: syz [ 1243.940477][T11067] usb 7-1: config 0 descriptor?? [ 1243.947338][T21054] usb 10-1: reset high-speed USB device number 24 using dummy_hcd [ 1243.948435][T11067] hub 7-1:0.0: bad descriptor, ignoring hub [ 1243.953772][T11067] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1243.959551][T11067] usb 7-1: selecting invalid altsetting 0 [ 1244.029234][T21071] fuse: Bad value for 'fd' [ 1244.110695][T21054] usb 10-1: device firmware changed [ 1244.113083][ T6002] usb 10-1: USB disconnect, device number 24 [ 1244.247141][ T6002] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1244.401055][ T6002] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 1244.404609][ T6002] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1244.407254][ T6003] usb 7-1: reset high-speed USB device number 94 using dummy_hcd [ 1244.408996][ T6002] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1244.418146][ T6002] usb 10-1: language id specifier not provided by device, defaulting to English [ 1244.428211][ T6002] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1244.431003][ T6002] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1244.433556][ T6002] usb 10-1: Product: syz [ 1244.436620][ T6002] usb 10-1: config 0 descriptor?? [ 1244.439685][ T6002] hub 10-1:0.0: bad descriptor, ignoring hub [ 1244.441402][ T6002] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1244.445559][ T6002] usb 10-1: selecting invalid altsetting 0 [ 1244.571458][ T6003] usb 7-1: device firmware changed [ 1244.575773][ T6003] usb 7-1: USB disconnect, device number 94 [ 1244.671616][T21054] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1244.877601][ T6003] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1245.042257][ T6003] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1245.045755][ T6003] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1245.057792][ T6003] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1245.066338][ T6003] usb 7-1: language id specifier not provided by device, defaulting to English [ 1245.083119][ T6003] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1245.087086][ T6003] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1245.093377][ T6003] usb 7-1: Product: syz [ 1245.096357][ T6003] usb 7-1: config 0 descriptor?? [ 1245.100131][ T6003] hub 7-1:0.0: bad descriptor, ignoring hub [ 1245.102690][ T6003] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1245.106695][ T6003] usb 7-1: selecting invalid altsetting 0 [ 1245.209789][T21078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3968'. [ 1245.508105][T14754] usb 7-1: USB disconnect, device number 95 [ 1245.966917][T21093] syzkaller0: entered promiscuous mode [ 1245.969459][T21093] syzkaller0: entered allmulticast mode [ 1246.029249][T20578] usb 10-1: USB disconnect, device number 25 [ 1246.752017][T21097] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1246.754430][T21097] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1246.758017][T21097] vhci_hcd vhci_hcd.0: Device attached [ 1247.013928][T21098] vhci_hcd: connection closed [ 1247.014088][ T7665] vhci_hcd: stop threads [ 1247.017869][ T7665] vhci_hcd: release socket [ 1247.019973][ T7665] vhci_hcd: disconnect device [ 1247.178917][T20578] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 1247.340582][T20578] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 1247.343761][T20578] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1247.347588][T20578] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1247.352697][T21105] overlayfs: failed to resolve './file1': -2 [ 1247.353171][T20578] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1247.358775][T20578] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1247.362171][T20578] usb 11-1: Product: syz [ 1247.364052][T20578] usb 11-1: Manufacturer: syz [ 1247.366169][T20578] usb 11-1: SerialNumber: syz [ 1247.370160][T20578] usb 11-1: config 0 descriptor?? [ 1247.376718][T20578] hub 11-1:0.0: bad descriptor, ignoring hub [ 1247.379043][T20578] hub 11-1:0.0: probe with driver hub failed with error -5 [ 1247.382668][T20578] usb 11-1: selecting invalid altsetting 0 [ 1248.009401][T21102] usb 11-1: reset high-speed USB device number 7 using dummy_hcd [ 1248.164015][T21102] usb 11-1: device firmware changed [ 1248.166930][ T6003] usb 11-1: USB disconnect, device number 7 [ 1248.319587][ T6003] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 1248.471921][ T6003] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 1248.475307][ T6003] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1248.479389][ T6003] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1248.486160][ T6003] usb 11-1: language id specifier not provided by device, defaulting to English [ 1248.498223][ T6003] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1248.502894][ T6003] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1248.506267][ T6003] usb 11-1: Product: syz [ 1248.510769][ T6003] usb 11-1: config 0 descriptor?? [ 1248.515111][ T6003] hub 11-1:0.0: bad descriptor, ignoring hub [ 1248.517615][ T6003] hub 11-1:0.0: probe with driver hub failed with error -5 [ 1248.523589][ T6003] usb 11-1: selecting invalid altsetting 0 [ 1248.849013][T21109] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1249.552370][T21124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3979'. [ 1249.950537][T11067] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1250.080628][T20578] usb 11-1: USB disconnect, device number 8 [ 1250.122660][T11067] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1250.125968][T11067] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1250.129993][T11067] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1250.138708][T11067] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1250.141778][ T6002] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1250.148299][T11067] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1250.154696][T11067] usb 7-1: Product: syz [ 1250.158339][T11067] usb 7-1: Manufacturer: syz [ 1250.162575][T11067] usb 7-1: SerialNumber: syz [ 1250.170845][T11067] usb 7-1: config 0 descriptor?? [ 1250.179082][T11067] hub 7-1:0.0: bad descriptor, ignoring hub [ 1250.183971][T11067] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1250.193324][T11067] usb 7-1: selecting invalid altsetting 0 [ 1250.346034][ T6002] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1250.351235][ T6002] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1250.355653][ T6002] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1250.359775][ T6002] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1250.366411][ T6002] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1250.370232][ T6002] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.418110][ T6002] usb 10-1: config 0 descriptor?? [ 1250.834552][ T6002] plantronics 0003:047F:FFFF.001A: ignoring exceeding usage max [ 1250.840961][T21127] usb 7-1: reset high-speed USB device number 96 using dummy_hcd [ 1250.866867][ T6002] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1251.042539][T21127] usb 7-1: device firmware changed [ 1251.053486][T11067] usb 7-1: USB disconnect, device number 96 [ 1251.617064][T21153] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3986'. [ 1251.657287][T21153] 9pnet: Unknown protocol version 9p2000.um}X6&iH 'I(G [ 1251.896540][T21159] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3988'. [ 1251.899429][T21159] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3988'. [ 1251.901598][T11067] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1252.053632][T11067] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1252.060786][T11067] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1252.064363][T11067] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1252.070404][T11067] usb 7-1: language id specifier not provided by device, defaulting to English [ 1252.081371][T11067] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1252.092878][T11067] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1252.099451][T11067] usb 7-1: Product: syz [ 1252.103781][T11067] usb 7-1: config 0 descriptor?? [ 1252.109404][T11067] hub 7-1:0.0: bad descriptor, ignoring hub [ 1252.111466][T11067] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1252.115889][T11067] usb 7-1: selecting invalid altsetting 0 [ 1252.165865][T21163] hfs: unable to load iocharset "io#harset" [ 1252.335455][T21127] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1252.988963][T21170] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3998'. [ 1252.991851][T21170] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3998'. [ 1253.023969][T14754] usb 10-1: USB disconnect, device number 26 [ 1253.363127][T21177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3991'. [ 1253.623352][ T53] usb 7-1: USB disconnect, device number 97 [ 1253.930393][T21182] netlink: 196 bytes leftover after parsing attributes in process `syz.6.3993'. [ 1253.936143][T21182] netlink: 196 bytes leftover after parsing attributes in process `syz.6.3993'. [ 1254.433146][T21188] overlayfs: missing 'lowerdir' [ 1254.450256][T21188] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1254.482057][T21188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1254.583308][T21202] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1254.586161][T21202] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1254.591244][T21202] vhci_hcd vhci_hcd.0: Device attached [ 1254.852198][T21203] vhci_hcd: connection closed [ 1254.852651][T19942] vhci_hcd: stop threads [ 1254.861195][T19942] vhci_hcd: release socket [ 1254.863462][ T4160] usb 42-1: SetAddress Request (62) to port 0 [ 1254.866440][T19942] vhci_hcd: disconnect device [ 1254.866925][ T4160] usb 42-1: new SuperSpeed USB device number 62 using vhci_hcd [ 1254.904164][ T4160] usb 42-1: enqueue for inactive port 0 [ 1255.304432][ T4160] usb usb42-port1: attempt power cycle [ 1256.146373][T21221] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4005'. [ 1256.252067][T21225] hfs: unable to load iocharset "io#harset" [ 1256.304970][ T4160] usb usb42-port1: unable to enumerate USB device [ 1256.396095][T21219] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4004'. [ 1258.324180][T21253] __nla_validate_parse: 1 callbacks suppressed [ 1258.324191][T21253] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4014'. [ 1258.388835][T21255] syzkaller0: entered promiscuous mode [ 1258.390980][T21255] syzkaller0: entered allmulticast mode [ 1258.867513][T21260] hfs: unable to load iocharset "io#harset" [ 1261.134306][T21289] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4024'. [ 1261.261222][T21292] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1261.264916][T21292] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1261.825243][T21307] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4029'. [ 1261.831167][T21307] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4029'. [ 1263.004932][T21325] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4033'. [ 1263.464928][T21332] hfs: unable to load iocharset "io#harset" [ 1264.379471][T21345] overlayfs: missing 'lowerdir' [ 1264.382877][T21345] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1264.398110][T21345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1264.939678][T21350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4040'. [ 1265.366055][T21355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4043'. [ 1265.739094][T21356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4042'. [ 1265.789388][T21358] FAULT_INJECTION: forcing a failure. [ 1265.789388][T21358] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.793501][T21358] CPU: 0 UID: 0 PID: 21358 Comm: syz.2.4044 Not tainted syzkaller #0 PREEMPT(full) [ 1265.793518][T21358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1265.793525][T21358] Call Trace: [ 1265.793530][T21358] [ 1265.793535][T21358] dump_stack_lvl+0x16c/0x1f0 [ 1265.793554][T21358] should_fail_ex+0x512/0x640 [ 1265.793572][T21358] ? fs_reclaim_acquire+0xae/0x150 [ 1265.793590][T21358] should_failslab+0xc2/0x120 [ 1265.793607][T21358] __kmalloc_noprof+0xdd/0x880 [ 1265.793626][T21358] ? tomoyo_encode2+0x100/0x3e0 [ 1265.793642][T21358] ? tomoyo_encode2+0x100/0x3e0 [ 1265.793655][T21358] tomoyo_encode2+0x100/0x3e0 [ 1265.793669][T21358] tomoyo_encode+0x29/0x50 [ 1265.793682][T21358] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1265.793698][T21358] ? tomoyo_profile+0x47/0x60 [ 1265.793727][T21358] tomoyo_path_number_perm+0x245/0x580 [ 1265.793748][T21358] ? tomoyo_path_number_perm+0x237/0x580 [ 1265.793769][T21358] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1265.793804][T21358] ? find_held_lock+0x2b/0x80 [ 1265.793816][T21358] ? hook_file_ioctl_common+0x145/0x410 [ 1265.793832][T21358] ? __fget_files+0x20e/0x3c0 [ 1265.793847][T21358] security_file_ioctl_compat+0x9b/0x240 [ 1265.793860][T21358] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1265.793880][T21358] __do_fast_syscall_32+0x7c/0x300 [ 1265.793897][T21358] do_fast_syscall_32+0x32/0x80 [ 1265.793913][T21358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1265.793928][T21358] RIP: 0023:0xf7fa7579 [ 1265.793937][T21358] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1265.793949][T21358] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1265.793960][T21358] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004004ae99 [ 1265.793967][T21358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1265.793974][T21358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1265.793981][T21358] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1265.793990][T21358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1265.794006][T21358] [ 1265.794032][T21358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1266.256064][T21363] hfs: unable to load iocharset "io#harset" [ 1267.214139][T21388] hfs: unable to load iocharset "io#harset" [ 1267.221953][T21395] FAULT_INJECTION: forcing a failure. [ 1267.221953][T21395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.226157][T21395] CPU: 3 UID: 0 PID: 21395 Comm: syz.2.4053 Not tainted syzkaller #0 PREEMPT(full) [ 1267.226173][T21395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1267.226180][T21395] Call Trace: [ 1267.226185][T21395] [ 1267.226189][T21395] dump_stack_lvl+0x16c/0x1f0 [ 1267.226207][T21395] should_fail_ex+0x512/0x640 [ 1267.226227][T21395] _copy_from_user+0x2e/0xd0 [ 1267.226246][T21395] get_user_ifreq+0x116/0x1c0 [ 1267.226260][T21395] sock_do_ioctl+0x16b/0x280 [ 1267.226274][T21395] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1267.226298][T21395] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1267.226323][T21395] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1267.226343][T21395] compat_sock_ioctl+0x301/0x730 [ 1267.226360][T21395] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1267.226374][T21395] ? hook_file_ioctl_common+0x145/0x410 [ 1267.226390][T21395] ? __fget_files+0x20e/0x3c0 [ 1267.226405][T21395] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1267.226419][T21395] __ia32_compat_sys_ioctl+0x242/0x370 [ 1267.226438][T21395] __do_fast_syscall_32+0x7c/0x300 [ 1267.226454][T21395] do_fast_syscall_32+0x32/0x80 [ 1267.226468][T21395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1267.226483][T21395] RIP: 0023:0xf7fa7579 [ 1267.226492][T21395] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1267.226503][T21395] RSP: 002b:00000000f545455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1267.226515][T21395] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000008949 [ 1267.226522][T21395] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1267.226529][T21395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1267.226535][T21395] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1267.226542][T21395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1267.226556][T21395] [ 1267.340908][T21398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4056'. [ 1267.499744][T21401] hfs: unable to load iocharset "io#harset" [ 1267.543492][T21405] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4058'. [ 1267.694852][T21404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4055'. [ 1268.368522][T21416] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4058'. [ 1268.626816][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 1268.626828][ T40] audit: type=1326 audit(1762720742.531:60899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21417 comm="syz.5.4062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1268.637171][ T40] audit: type=1326 audit(1762720742.531:60900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21417 comm="syz.5.4062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1268.646956][ T40] audit: type=1326 audit(1762720742.531:60901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21417 comm="syz.5.4062" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1268.655882][ T40] audit: type=1326 audit(1762720742.531:60902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21417 comm="syz.5.4062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1268.664322][ T40] audit: type=1326 audit(1762720742.531:60903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21417 comm="syz.5.4062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1268.673424][ T40] audit: type=1326 audit(1762720742.531:60904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21417 comm="syz.5.4062" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1268.682566][ T40] audit: type=1326 audit(1762720742.531:60905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21417 comm="syz.5.4062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1268.694331][ T40] audit: type=1326 audit(1762720742.531:60906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21417 comm="syz.5.4062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1268.701644][ T40] audit: type=1326 audit(1762720742.531:60907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21417 comm="syz.5.4062" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1268.708532][ T40] audit: type=1326 audit(1762720742.531:60908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21417 comm="syz.5.4062" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1269.088333][T21430] hfs: unable to load iocharset "io#harset" [ 1269.970428][T21442] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4069'. [ 1270.372907][T21449] fuse: Bad value for 'fd' [ 1273.841832][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4082'. [ 1274.206023][T21501] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1274.208091][T21501] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1274.210753][T21501] vhci_hcd vhci_hcd.0: Device attached [ 1274.223929][ T4160] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1274.287061][T21506] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1274.289133][T21506] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1274.292291][T21506] vhci_hcd vhci_hcd.0: Device attached [ 1274.377325][ T4160] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1274.382234][ T4160] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1274.386923][ T4160] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1274.391265][ T4160] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1274.396548][ T4160] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1274.400649][ T4160] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.410275][ T4160] usb 7-1: config 0 descriptor?? [ 1274.461068][T21502] vhci_hcd: connection closed [ 1274.461347][ T1140] vhci_hcd: stop threads [ 1274.464363][ T1140] vhci_hcd: release socket [ 1274.465829][ T1140] vhci_hcd: disconnect device [ 1274.484073][ T6002] usb 48-1: enqueue for inactive port 0 [ 1274.554149][ T59] usb 50-1: SetAddress Request (22) to port 0 [ 1274.556229][ T59] usb 50-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1274.822021][ T4160] plantronics 0003:047F:FFFF.001B: ignoring exceeding usage max [ 1274.829419][ T4160] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1274.868388][T21507] vhci_hcd: connection reset by peer [ 1274.870317][ T1140] vhci_hcd: stop threads [ 1274.872108][ T1140] vhci_hcd: release socket [ 1274.873595][ T1140] vhci_hcd: disconnect device [ 1274.974861][ T6002] usb usb48-port1: attempt power cycle [ 1275.420968][T21519] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1275.423733][T21519] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1275.428003][T21519] vhci_hcd vhci_hcd.0: Device attached [ 1275.705104][ T6002] usb 48-1: SetAddress Request (38) to port 0 [ 1275.708378][ T6002] usb 48-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1276.679202][T21520] vhci_hcd: connection reset by peer [ 1276.681908][T14809] vhci_hcd: stop threads [ 1276.683663][T14809] vhci_hcd: release socket [ 1276.686788][T14809] vhci_hcd: disconnect device [ 1277.067372][ T53] usb 7-1: USB disconnect, device number 98 [ 1277.658812][T21538] hfs: unable to load iocharset "io#harset" [ 1278.056332][T21543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4095'. [ 1278.793844][T21554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4098'. [ 1279.616910][ T4160] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1279.636958][ T59] usb 50-1: device descriptor read/8, error -110 [ 1279.769000][ T4160] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1279.774056][ T4160] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.779349][ T4160] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1279.783596][ T4160] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1279.789900][ T4160] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1279.793883][ T4160] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.808473][ T4160] usb 7-1: config 0 descriptor?? [ 1280.028557][ T59] usb usb50-port1: attempt power cycle [ 1280.218987][ T4160] plantronics 0003:047F:FFFF.001C: ignoring exceeding usage max [ 1280.238441][ T4160] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1280.477304][T21574] hfs: unable to load iocharset "io#harset" [ 1280.603898][ T59] usb usb50-port1: unable to enumerate USB device [ 1280.757536][ T6002] usb 48-1: device descriptor read/8, error -110 [ 1280.877722][ T6002] usb usb48-port1: unable to enumerate USB device [ 1281.871104][T21588] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4107'. [ 1281.874688][T21588] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4107'. [ 1281.894430][T21589] hfs: unable to load iocharset "io#harset" [ 1282.328534][ T6003] usb 7-1: USB disconnect, device number 99 [ 1283.869242][T15938] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1283.970507][T21620] hfs: unable to load iocharset "io#harset" [ 1284.033849][T15938] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1284.050524][T15938] usb 10-1: can't read configurations, error -61 [ 1284.099625][T21623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4115'. [ 1284.185622][T21624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1284.191650][T15938] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1284.372647][T15938] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1284.375704][T15938] usb 10-1: can't read configurations, error -61 [ 1284.379149][T15938] usb usb10-port1: attempt power cycle [ 1284.719583][T15938] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1284.741873][T15938] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1284.744304][T15938] usb 10-1: can't read configurations, error -61 [ 1284.889768][T15938] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1284.914934][T21626] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4118'. [ 1284.918909][T21626] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4118'. [ 1284.920388][T15938] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1284.925527][T15938] usb 10-1: can't read configurations, error -61 [ 1284.931297][T15938] usb usb10-port1: unable to enumerate USB device [ 1285.042292][T21632] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4120'. [ 1285.045270][T21632] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4120'. [ 1285.393154][T21642] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1285.395362][T21642] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1285.398401][T21642] vhci_hcd vhci_hcd.0: Device attached [ 1285.660270][ T6002] usb 42-1: SetAddress Request (66) to port 0 [ 1285.663137][ T6002] usb 42-1: new SuperSpeed USB device number 66 using vhci_hcd [ 1285.929246][T21643] vhci_hcd: connection reset by peer [ 1285.935673][T19942] vhci_hcd: stop threads [ 1285.937504][T19942] vhci_hcd: release socket [ 1285.939509][T19942] vhci_hcd: disconnect device [ 1286.301988][T21654] hfs: unable to load iocharset "io#harset" [ 1286.536285][T21658] hfs: unable to load iocharset "io#harset" [ 1286.672645][T21661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4126'. [ 1286.964312][T21665] overlayfs: missing 'lowerdir' [ 1286.969392][T21665] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1287.007793][T21665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1287.309064][T21668] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4129'. [ 1287.312410][T21668] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4129'. [ 1287.905810][T21672] FAULT_INJECTION: forcing a failure. [ 1287.905810][T21672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.910434][T21672] CPU: 2 UID: 0 PID: 21672 Comm: syz.0.4130 Not tainted syzkaller #0 PREEMPT(full) [ 1287.910459][T21672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1287.910470][T21672] Call Trace: [ 1287.910477][T21672] [ 1287.910487][T21672] dump_stack_lvl+0x16c/0x1f0 [ 1287.910513][T21672] should_fail_ex+0x512/0x640 [ 1287.910543][T21672] _copy_to_user+0x32/0xd0 [ 1287.910575][T21672] simple_read_from_buffer+0xcb/0x170 [ 1287.910605][T21672] proc_fail_nth_read+0x197/0x240 [ 1287.910629][T21672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1287.910650][T21672] ? rw_verify_area+0xcf/0x6c0 [ 1287.910669][T21672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1287.910689][T21672] vfs_read+0x1e4/0xcf0 [ 1287.910730][T21672] ? __pfx_vfs_read+0x10/0x10 [ 1287.910749][T21672] ? find_held_lock+0x2b/0x80 [ 1287.910777][T21672] ? __fget_files+0x20e/0x3c0 [ 1287.910805][T21672] ksys_read+0x12a/0x250 [ 1287.910824][T21672] ? __pfx_ksys_read+0x10/0x10 [ 1287.910868][T21672] ? fput+0x9b/0xd0 [ 1287.910891][T21672] ? rcu_is_watching+0x12/0xc0 [ 1287.910915][T21672] __do_fast_syscall_32+0x7c/0x300 [ 1287.910941][T21672] do_fast_syscall_32+0x32/0x80 [ 1287.910965][T21672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1287.910988][T21672] RIP: 0023:0xf703d579 [ 1287.911002][T21672] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1287.911029][T21672] RSP: 002b:00000000f540c590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1287.911047][T21672] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f540c620 [ 1287.911060][T21672] RDX: 000000000000000f RSI: 00000000f73d6ff4 RDI: 0000000000000000 [ 1287.911072][T21672] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1287.911081][T21672] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1287.911093][T21672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1287.911119][T21672] [ 1288.135907][T21675] hfs: unable to load iocharset "io#harset" [ 1290.061185][T21700] binder: 21696:21700 ioctl 4038ae7a 0 returned -22 [ 1290.183452][T21702] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1290.186130][T21702] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1290.191346][T21702] vhci_hcd vhci_hcd.0: Device attached [ 1290.334927][T21707] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1290.337037][T21707] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1290.340043][T21707] vhci_hcd vhci_hcd.0: Device attached [ 1290.347543][T21711] bridge0: entered promiscuous mode [ 1290.349859][T21711] macvlan2: entered promiscuous mode [ 1290.390425][T21704] vhci_hcd: connection closed [ 1290.390721][ T46] vhci_hcd: stop threads [ 1290.402586][ T46] vhci_hcd: release socket [ 1290.404558][ T46] vhci_hcd: disconnect device [ 1290.656864][T21717] overlayfs: missing 'lowerdir' [ 1290.715093][T21718] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1290.750263][T21718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1290.956895][ T6002] usb 42-1: device descriptor read/8, error -110 [ 1291.203050][ T4160] usb 38-1: SetAddress Request (41) to port 0 [ 1291.206515][ T4160] usb 38-1: new SuperSpeed USB device number 41 using vhci_hcd [ 1291.221135][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 1291.221145][ T40] audit: type=1326 audit(1762720765.119:61001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21722 comm="syz.5.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1291.401492][ T6002] usb usb42-port1: attempt power cycle [ 1291.586850][T21730] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1291.661895][T21730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.707706][T21709] vhci_hcd: connection reset by peer [ 1291.710968][ T1146] vhci_hcd: stop threads [ 1291.713423][ T1146] vhci_hcd: release socket [ 1291.715981][ T1146] vhci_hcd: disconnect device [ 1292.004582][ T6002] usb usb42-port1: unable to enumerate USB device [ 1292.410021][T21734] hfs: unable to load iocharset "io#harset" [ 1293.984711][T21752] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4149'. [ 1293.987551][T21752] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4149'. [ 1294.339060][T21758] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1294.340051][T21759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4151'. [ 1294.341091][T21758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1294.348396][T21758] vhci_hcd vhci_hcd.0: Device attached [ 1294.457361][T21760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4147'. [ 1294.755312][T21761] vhci_hcd: connection closed [ 1294.762914][T19942] vhci_hcd: stop threads [ 1294.772076][T19942] vhci_hcd: release socket [ 1294.777618][T19942] vhci_hcd: disconnect device [ 1294.880098][T21768] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4153'. [ 1294.890514][T21768] 9pnet: Unknown protocol version 9p2000.um}X6&iH 'I(G [ 1296.257643][T21795] hfs: unable to load iocharset "io#harset" [ 1296.285975][ T4160] usb 38-1: device descriptor read/8, error -110 [ 1296.368183][T21797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4159'. [ 1296.457034][T21799] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4162'. [ 1296.470344][T21799] 9pnet: Unknown protocol version 9p2000.um}X6&iH 'I(G [ 1296.696757][ T4160] usb usb38-port1: attempt power cycle [ 1296.722935][T21802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4163'. [ 1296.924376][T21805] input: syz1 as /devices/virtual/input/input175 [ 1297.266687][ T4160] usb usb38-port1: unable to enumerate USB device [ 1297.914843][ T4160] usb usb38-port2: attempt power cycle [ 1298.576883][T21824] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4171'. [ 1298.588569][T21824] 9pnet: Unknown protocol version 9p2000.um}X6&iH 'I(G [ 1298.728430][T21833] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1298.730551][T21833] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1298.733238][T21833] vhci_hcd vhci_hcd.0: Device attached [ 1298.816983][T15938] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 1298.859341][T21834] vhci_hcd: connection closed [ 1298.970066][ T1176] vhci_hcd: stop threads [ 1298.973079][ T1176] vhci_hcd: release socket [ 1298.974985][ T1176] vhci_hcd: disconnect device [ 1298.991641][T15938] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1298.998981][T15938] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1299.002213][T15938] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1299.005091][T15938] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1299.012411][T15938] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1299.017101][ T6002] usb 48-1: enqueue for inactive port 0 [ 1299.020457][T15938] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1299.023380][T15938] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1299.025922][T15938] usb 11-1: Product: syz [ 1299.029012][T15938] usb 11-1: Manufacturer: syz [ 1299.044779][T15938] cdc_wdm 11-1:1.0: skipping garbage [ 1299.046984][T15938] cdc_wdm 11-1:1.0: skipping garbage [ 1299.058681][T15938] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 1299.065176][T15938] cdc_wdm 11-1:1.0: Unknown control protocol [ 1299.108173][ T4160] usb usb38-port2: unable to enumerate USB device [ 1299.245453][T21822] FAULT_INJECTION: forcing a failure. [ 1299.245453][T21822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1299.252334][T21822] CPU: 1 UID: 0 PID: 21822 Comm: syz.6.4169 Not tainted syzkaller #0 PREEMPT(full) [ 1299.252370][T21822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1299.252383][T21822] Call Trace: [ 1299.252390][T21822] [ 1299.252396][T21822] dump_stack_lvl+0x16c/0x1f0 [ 1299.252424][T21822] should_fail_ex+0x512/0x640 [ 1299.252454][T21822] _copy_from_user+0x2e/0xd0 [ 1299.252481][T21822] kstrtouint_from_user+0xd6/0x1d0 [ 1299.252503][T21822] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1299.252526][T21822] ? __lock_acquire+0xb8a/0x1c90 [ 1299.252561][T21822] proc_fail_nth_write+0x83/0x220 [ 1299.252583][T21822] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1299.252609][T21822] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1299.252633][T21822] vfs_write+0x2a0/0x11d0 [ 1299.252660][T21822] ? __pfx_vfs_write+0x10/0x10 [ 1299.252677][T21822] ? find_held_lock+0x2b/0x80 [ 1299.252701][T21822] ? __fget_files+0x20e/0x3c0 [ 1299.252730][T21822] ksys_write+0x12a/0x250 [ 1299.252749][T21822] ? __pfx_ksys_write+0x10/0x10 [ 1299.252771][T21822] ? rcu_is_watching+0x12/0xc0 [ 1299.252795][T21822] __do_fast_syscall_32+0x7c/0x300 [ 1299.252820][T21822] do_fast_syscall_32+0x32/0x80 [ 1299.252844][T21822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1299.252865][T21822] RIP: 0023:0xf701d579 [ 1299.252880][T21822] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1299.252896][T21822] RSP: 002b:00000000f540d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1299.252915][T21822] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540d620 [ 1299.252925][T21822] RDX: 0000000000000001 RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 1299.252937][T21822] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1299.252948][T21822] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1299.252959][T21822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1299.252983][T21822] [ 1299.365676][ T4160] usb 11-1: USB disconnect, device number 9 [ 1299.559272][ T6002] usb usb48-port1: attempt power cycle [ 1299.727431][ T4160] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 1299.889771][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.218368][ T6002] usb usb48-port1: unable to enumerate USB device [ 1302.348815][ T4160] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1302.352415][ T4160] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1302.355804][ T4160] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1302.521531][ T4160] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1302.525798][ T4160] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1302.528616][ T4160] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.560066][ T4160] usb 11-1: config 0 descriptor?? [ 1302.562039][ T4160] usb 11-1: can't set config #0, error -71 [ 1302.564665][ T4160] usb 11-1: USB disconnect, device number 10 [ 1302.621777][T21863] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4180'. [ 1302.631587][T21863] 9pnet: Unknown protocol version 9p2000.um}X6&iH 'I(G [ 1303.190588][ T4160] libceph: connect (1)[c::]:6789 error -101 [ 1303.197519][ T4160] libceph: mon0 (1)[c::]:6789 connect error [ 1303.297991][T21870] ceph: No mds server is up or the cluster is laggy [ 1303.675842][T21891] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1303.678113][T21891] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1303.683998][T21891] vhci_hcd vhci_hcd.0: Device attached [ 1303.797032][T21897] input: syz1 as /devices/virtual/input/input176 [ 1303.836605][T21892] vhci_hcd: connection closed [ 1303.840538][T19942] vhci_hcd: stop threads [ 1303.844309][T19942] vhci_hcd: release socket [ 1303.846183][T19942] vhci_hcd: disconnect device [ 1304.343115][T21900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4187'. [ 1304.649028][T21902] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4191'. [ 1304.666367][T21902] 9pnet: Unknown protocol version 9p2000.um}X6&iH 'I(G [ 1304.968726][T21912] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4194'. [ 1304.974028][T21912] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4194'. [ 1305.218879][T21930] hfs: unable to load iocharset "io#harset" [ 1305.529113][T21935] overlayfs: missing 'lowerdir' [ 1305.602757][T21936] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1305.663834][T21936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1305.922878][T21938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4199'. [ 1306.140577][T21940] FAULT_INJECTION: forcing a failure. [ 1306.140577][T21940] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.145152][T21940] CPU: 3 UID: 0 PID: 21940 Comm: syz.2.4201 Not tainted syzkaller #0 PREEMPT(full) [ 1306.145167][T21940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1306.145174][T21940] Call Trace: [ 1306.145179][T21940] [ 1306.145183][T21940] dump_stack_lvl+0x16c/0x1f0 [ 1306.145201][T21940] should_fail_ex+0x512/0x640 [ 1306.145219][T21940] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1306.145233][T21940] should_failslab+0xc2/0x120 [ 1306.145249][T21940] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1306.145260][T21940] ? __alloc_skb+0x2b2/0x380 [ 1306.145281][T21940] ? __alloc_skb+0x2b2/0x380 [ 1306.145297][T21940] __alloc_skb+0x2b2/0x380 [ 1306.145314][T21940] ? __pfx___alloc_skb+0x10/0x10 [ 1306.145332][T21940] ? find_held_lock+0x2b/0x80 [ 1306.145347][T21940] alloc_skb_with_frags+0xe0/0x860 [ 1306.145363][T21940] sock_alloc_send_pskb+0x7f9/0x980 [ 1306.145381][T21940] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1306.145403][T21940] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1306.145419][T21940] ? find_held_lock+0x2b/0x80 [ 1306.145431][T21940] ? dev_get_by_index+0x17c/0x380 [ 1306.145453][T21940] packet_sendmsg+0x2054/0x5850 [ 1306.145477][T21940] ? __pfx___might_resched+0x10/0x10 [ 1306.145492][T21940] ? aa_sk_perm+0x2f4/0xb10 [ 1306.145505][T21940] ? __pfx_packet_sendmsg+0x10/0x10 [ 1306.145522][T21940] ? __pfx_aa_sk_perm+0x10/0x10 [ 1306.145531][T21940] ? __might_fault+0xe3/0x190 [ 1306.145546][T21940] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1306.145565][T21940] __sys_sendto+0x4a3/0x520 [ 1306.145582][T21940] ? __pfx___sys_sendto+0x10/0x10 [ 1306.145611][T21940] ? ksys_write+0x1ac/0x250 [ 1306.145628][T21940] ? __pfx_ksys_write+0x10/0x10 [ 1306.145642][T21940] __ia32_sys_sendto+0xdd/0x1b0 [ 1306.145658][T21940] ? lockdep_hardirqs_on+0x7c/0x110 [ 1306.145671][T21940] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1306.145686][T21940] __do_fast_syscall_32+0x7c/0x300 [ 1306.145702][T21940] do_fast_syscall_32+0x32/0x80 [ 1306.145716][T21940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1306.145731][T21940] RIP: 0023:0xf7fa7579 [ 1306.145739][T21940] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1306.145750][T21940] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 1306.145761][T21940] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1306.145768][T21940] RDX: 00000000000005b2 RSI: 0000000000000000 RDI: 0000000080000140 [ 1306.145775][T21940] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1306.145781][T21940] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1306.145788][T21940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1306.145802][T21940] [ 1306.259446][T21942] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4202'. [ 1306.269693][T21942] 9pnet: Unknown protocol version 9p2000.um}X6&iH 'I(G [ 1307.775098][T21955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4206'. [ 1308.145510][T21971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4209'. [ 1308.202863][T20794] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1308.353773][T20794] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1308.356431][T20794] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1308.359436][T20794] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1308.364092][T20794] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1308.367027][T20794] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1308.369554][T20794] usb 7-1: Product: syz [ 1308.370881][T20794] usb 7-1: Manufacturer: syz [ 1308.372582][T20794] usb 7-1: SerialNumber: syz [ 1308.375281][T20794] usb 7-1: config 0 descriptor?? [ 1308.378065][T20794] hub 7-1:0.0: bad descriptor, ignoring hub [ 1308.379941][T20794] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1308.383592][T20794] usb 7-1: selecting invalid altsetting 0 [ 1308.512585][T21974] hfs: unable to load iocharset "io#harset" [ 1309.002666][T21967] usb 7-1: reset high-speed USB device number 100 using dummy_hcd [ 1309.194844][T21967] usb 7-1: device firmware changed [ 1309.197833][T20794] usb 7-1: USB disconnect, device number 100 [ 1309.412771][T20794] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1309.440395][T21986] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4215'. [ 1309.444858][T21986] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4215'. [ 1309.569076][T20794] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1309.577626][T20794] usb 7-1: language id specifier not provided by device, defaulting to English [ 1309.601828][T20794] usb 7-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.40 [ 1309.610285][T20794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.935148][T21967] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1311.196840][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4220'. [ 1311.309394][T20794] usbhid 7-1:1.0: can't add hid device: -71 [ 1311.311873][T20794] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1311.318075][T20794] usb 7-1: USB disconnect, device number 101 [ 1311.882842][T22018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4222'. [ 1312.289669][T22021] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4225'. [ 1312.294768][T22021] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4225'. [ 1312.411403][T22023] netlink: 196 bytes leftover after parsing attributes in process `syz.6.4224'. [ 1312.414474][T22023] netlink: 196 bytes leftover after parsing attributes in process `syz.6.4224'. [ 1312.845282][T22046] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4230'. [ 1312.848382][T22046] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4230'. [ 1313.018069][T22048] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4231'. [ 1313.034358][T22048] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4231'. [ 1313.338317][T22054] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4232'. [ 1313.345180][T22054] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4232'. [ 1315.256291][T22072] hfs: unable to load iocharset "io#harset" [ 1315.889049][T22079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1316.919832][T22091] syzkaller0: entered promiscuous mode [ 1316.921824][T22091] syzkaller0: entered allmulticast mode [ 1317.277521][T22096] hfs: unable to load iocharset "io#harset" [ 1317.298899][T22101] netlink: 'syz.2.4244': attribute type 4 has an invalid length. [ 1317.304642][T22101] loop6: detected capacity change from 0 to 63 [ 1317.318744][T22101] buffer_io_error: 75 callbacks suppressed [ 1317.318760][T22101] Buffer I/O error on dev loop6, logical block 0, async page read [ 1317.324629][T22101] Buffer I/O error on dev loop6, logical block 0, async page read [ 1317.334061][T22101] Buffer I/O error on dev loop6, logical block 0, async page read [ 1317.341681][T22101] Buffer I/O error on dev loop6, logical block 0, async page read [ 1317.345068][T22080] Buffer I/O error on dev loop6, logical block 0, async page read [ 1317.352237][T22080] Buffer I/O error on dev loop6, logical block 0, async page read [ 1317.355445][T22101] Buffer I/O error on dev loop6, logical block 0, async page read [ 1317.358956][T22101] Buffer I/O error on dev loop6, logical block 0, async page read [ 1317.362408][T22080] Buffer I/O error on dev loop6, logical block 0, async page read [ 1317.366505][T22101] Buffer I/O error on dev loop6, logical block 0, async page read [ 1318.161326][T22113] syzkaller1: entered promiscuous mode [ 1318.163278][T22113] syzkaller1: entered allmulticast mode [ 1318.169057][T22113] FAULT_INJECTION: forcing a failure. [ 1318.169057][T22113] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.173539][T22113] CPU: 1 UID: 0 PID: 22113 Comm: syz.6.4246 Not tainted syzkaller #0 PREEMPT(full) [ 1318.173574][T22113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1318.173585][T22113] Call Trace: [ 1318.173592][T22113] [ 1318.173599][T22113] dump_stack_lvl+0x16c/0x1f0 [ 1318.173623][T22113] should_fail_ex+0x512/0x640 [ 1318.173647][T22113] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1318.173667][T22113] should_failslab+0xc2/0x120 [ 1318.173689][T22113] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1318.173705][T22113] ? update_curr+0x3fb/0x550 [ 1318.173729][T22113] ? alloc_empty_file+0x55/0x1e0 [ 1318.173756][T22113] ? alloc_empty_file+0x55/0x1e0 [ 1318.173777][T22113] alloc_empty_file+0x55/0x1e0 [ 1318.173800][T22113] path_openat+0xda/0x2cb0 [ 1318.173826][T22113] ? __pfx_path_openat+0x10/0x10 [ 1318.173850][T22113] do_filp_open+0x20b/0x470 [ 1318.173869][T22113] ? __pfx_do_filp_open+0x10/0x10 [ 1318.173902][T22113] ? _raw_spin_unlock+0x3e/0x50 [ 1318.173919][T22113] ? alloc_fd+0x471/0x7d0 [ 1318.173941][T22113] do_sys_openat2+0x11b/0x1d0 [ 1318.173964][T22113] ? __pfx_do_sys_openat2+0x10/0x10 [ 1318.173989][T22113] ? __fget_files+0x20e/0x3c0 [ 1318.174009][T22113] __ia32_compat_sys_openat+0x16d/0x210 [ 1318.174034][T22113] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1318.174058][T22113] ? ksys_write+0x1ac/0x250 [ 1318.174078][T22113] ? rcu_is_watching+0x12/0xc0 [ 1318.174099][T22113] __do_fast_syscall_32+0x7c/0x300 [ 1318.174122][T22113] do_fast_syscall_32+0x32/0x80 [ 1318.174142][T22113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1318.174162][T22113] RIP: 0023:0xf701d579 [ 1318.174175][T22113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1318.174191][T22113] RSP: 002b:00000000f53cb55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1318.174207][T22113] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000340 [ 1318.174219][T22113] RDX: 0000000000020841 RSI: 0000000000000000 RDI: 0000000000000000 [ 1318.174229][T22113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1318.174238][T22113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1318.174249][T22113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1318.174271][T22113] [ 1319.817784][T22130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4250'. [ 1320.460320][T22139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4252'. [ 1321.299531][T22160] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1321.310490][T22160] CIFS: Unable to determine destination address [ 1321.322188][T22160] bridge0: Device is already in use. [ 1321.328948][T22160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4260'. [ 1322.053023][T22166] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1322.055127][T22166] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1322.057764][T22166] vhci_hcd vhci_hcd.0: Device attached [ 1322.337134][T22173] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1322.340865][T22173] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1322.369222][ T59] usb 50-1: SetAddress Request (26) to port 0 [ 1322.371165][ T59] usb 50-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1322.418967][T22167] vhci_hcd: connection reset by peer [ 1322.421366][ T1176] vhci_hcd: stop threads [ 1322.422983][ T1176] vhci_hcd: release socket [ 1322.427641][ T1176] vhci_hcd: disconnect device [ 1323.579638][ T4160] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1323.585445][T22199] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1323.587550][T22199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1323.593868][T22199] vhci_hcd vhci_hcd.0: Device attached [ 1323.615795][T22199] FAULT_INJECTION: forcing a failure. [ 1323.615795][T22199] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.621009][T22199] CPU: 1 UID: 0 PID: 22199 Comm: syz.6.4269 Not tainted syzkaller #0 PREEMPT(full) [ 1323.621036][T22199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1323.621043][T22199] Call Trace: [ 1323.621048][T22199] [ 1323.621052][T22199] dump_stack_lvl+0x16c/0x1f0 [ 1323.621069][T22199] should_fail_ex+0x512/0x640 [ 1323.621087][T22199] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1323.621101][T22199] should_failslab+0xc2/0x120 [ 1323.621116][T22199] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1323.621127][T22199] ? __lock_acquire+0x622/0x1c90 [ 1323.621143][T22199] ? alloc_empty_file+0x55/0x1e0 [ 1323.621162][T22199] ? alloc_empty_file+0x55/0x1e0 [ 1323.621176][T22199] alloc_empty_file+0x55/0x1e0 [ 1323.621192][T22199] path_openat+0xda/0x2cb0 [ 1323.621209][T22199] ? __pfx_path_openat+0x10/0x10 [ 1323.621225][T22199] do_filp_open+0x20b/0x470 [ 1323.621238][T22199] ? __pfx_do_filp_open+0x10/0x10 [ 1323.621260][T22199] ? _raw_spin_unlock+0x28/0x50 [ 1323.621271][T22199] ? alloc_fd+0x471/0x7d0 [ 1323.621286][T22199] do_sys_openat2+0x11b/0x1d0 [ 1323.621302][T22199] ? __pfx_do_sys_openat2+0x10/0x10 [ 1323.621320][T22199] ? __pfx___schedule+0x10/0x10 [ 1323.621331][T22199] ? __fget_files+0x20e/0x3c0 [ 1323.621345][T22199] __ia32_compat_sys_openat+0x16d/0x210 [ 1323.621363][T22199] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1323.621380][T22199] ? ksys_write+0x1ac/0x250 [ 1323.621394][T22199] ? rcu_is_watching+0x12/0xc0 [ 1323.621408][T22199] __do_fast_syscall_32+0x7c/0x300 [ 1323.621423][T22199] do_fast_syscall_32+0x32/0x80 [ 1323.621438][T22199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1323.621454][T22199] RIP: 0023:0xf701d579 [ 1323.621463][T22199] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1323.621474][T22199] RSP: 002b:00000000f53cb100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 1323.621485][T22199] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53cb150 [ 1323.621492][T22199] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73b6ff4 [ 1323.621499][T22199] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1323.621506][T22199] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1323.621512][T22199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1323.621527][T22199] [ 1323.791246][ T4160] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1323.795892][ T4160] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1323.800323][ T4160] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1323.804232][ T4160] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1323.808927][ T4160] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1323.813059][ T4160] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.817718][ T4160] usb 10-1: config 0 descriptor?? [ 1324.216359][T22200] vhci_hcd: connection closed [ 1324.216713][T14809] vhci_hcd: stop threads [ 1324.221952][T14809] vhci_hcd: release socket [ 1324.224115][T14809] vhci_hcd: disconnect device [ 1324.287444][ T4160] plantronics 0003:047F:FFFF.001D: ignoring exceeding usage max [ 1324.310608][ T4160] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1325.765198][T22220] FAULT_INJECTION: forcing a failure. [ 1325.765198][T22220] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.770201][T22220] CPU: 1 UID: 0 PID: 22220 Comm: syz.6.4273 Not tainted syzkaller #0 PREEMPT(full) [ 1325.770228][T22220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1325.770236][T22220] Call Trace: [ 1325.770240][T22220] [ 1325.770245][T22220] dump_stack_lvl+0x16c/0x1f0 [ 1325.770263][T22220] should_fail_ex+0x512/0x640 [ 1325.770280][T22220] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1325.770301][T22220] should_failslab+0xc2/0x120 [ 1325.770317][T22220] __kmalloc_cache_noprof+0x72/0x780 [ 1325.770336][T22220] ? btrfs_get_tree+0x1b1/0x2710 [ 1325.770356][T22220] ? btrfs_get_tree+0x1b1/0x2710 [ 1325.770372][T22220] btrfs_get_tree+0x1b1/0x2710 [ 1325.770393][T22220] ? __pfx_btrfs_get_tree+0x10/0x10 [ 1325.770410][T22220] ? aa_get_newest_label+0xd2/0x250 [ 1325.770427][T22220] ? apparmor_capable+0x114/0x1d0 [ 1325.770446][T22220] ? bpf_lsm_capable+0x9/0x10 [ 1325.770461][T22220] ? security_capable+0x7e/0x260 [ 1325.770510][T22220] vfs_get_tree+0x8e/0x340 [ 1325.770529][T22220] vfs_cmd_create+0xd7/0x2a0 [ 1325.770544][T22220] __do_sys_fsconfig+0x7b8/0xbe0 [ 1325.770561][T22220] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1325.770580][T22220] ? rcu_is_watching+0x12/0xc0 [ 1325.770595][T22220] __do_fast_syscall_32+0x7c/0x300 [ 1325.770611][T22220] do_fast_syscall_32+0x32/0x80 [ 1325.770625][T22220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1325.770639][T22220] RIP: 0023:0xf701d579 [ 1325.770649][T22220] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1325.770660][T22220] RSP: 002b:00000000f53cb55c EFLAGS: 00000296 ORIG_RAX: 00000000000001af [ 1325.770671][T22220] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000006 [ 1325.770679][T22220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1325.770685][T22220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1325.770696][T22220] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1325.770702][T22220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1325.770717][T22220] [ 1325.858341][T22220] hfsplus: unable to find HFS+ superblock [ 1326.061090][T22226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4275'. [ 1326.179909][T22227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4274'. [ 1326.230637][T22230] /dev/nullb0: Can't open blockdev [ 1326.648994][T20794] usb 10-1: USB disconnect, device number 31 [ 1326.731822][T22237] overlayfs: missing 'lowerdir' [ 1326.742206][T22237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1327.421509][ T59] usb 50-1: device descriptor read/8, error -110 [ 1327.431664][ T61] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1327.603033][ T61] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1327.605710][ T61] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1327.609002][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1327.615238][ T61] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1327.618192][ T61] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1327.620815][ T61] usb 7-1: Product: syz [ 1327.622631][ T61] usb 7-1: Manufacturer: syz [ 1327.624207][ T61] usb 7-1: SerialNumber: syz [ 1327.627343][ T61] usb 7-1: config 0 descriptor?? [ 1327.641800][ T61] hub 7-1:0.0: bad descriptor, ignoring hub [ 1327.644104][ T61] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1327.647927][ T61] usb 7-1: selecting invalid altsetting 0 [ 1327.812623][ T59] usb usb50-port1: attempt power cycle [ 1327.898105][T19246] vhci_hcd: vhci_device speed not set [ 1327.933061][T22255] geneve2: entered promiscuous mode [ 1328.251881][T22240] usb 7-1: reset high-speed USB device number 102 using dummy_hcd [ 1328.412474][T22240] usb 7-1: device firmware changed [ 1328.414653][ T61] usb 7-1: USB disconnect, device number 102 [ 1328.441898][ T4160] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1328.561947][ T61] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1328.593991][ T4160] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1328.597710][ T4160] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1328.601243][ T4160] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1328.604465][ T4160] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1328.608613][ T4160] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1328.611840][ T4160] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.616663][ T4160] usb 10-1: config 0 descriptor?? [ 1328.713973][ T61] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1328.719801][ T61] usb 7-1: language id specifier not provided by device, defaulting to English [ 1328.732887][ T61] usb 7-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.40 [ 1328.736538][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.989492][T22240] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1329.029911][ T4160] plantronics 0003:047F:FFFF.001E: ignoring exceeding usage max [ 1329.064649][ T4160] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1329.154965][ T59] usb usb50-port1: unable to enumerate USB device [ 1330.269916][ T61] usbhid 7-1:1.0: can't add hid device: -71 [ 1330.275526][ T61] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1330.279611][ T61] usb 7-1: USB disconnect, device number 103 [ 1330.446811][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4287'. [ 1330.582195][T22285] overlayfs: missing 'lowerdir' [ 1330.625009][T22286] overlayfs: missing 'lowerdir' [ 1330.671088][T22285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1330.737762][T22286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1331.267428][T22290] overlayfs: missing 'lowerdir' [ 1331.284984][T22290] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1331.330972][T22290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1332.193449][ T61] usb 10-1: USB disconnect, device number 32 [ 1332.193958][T22295] overlayfs: missing 'lowerdir' [ 1332.209463][T22295] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1332.230723][T22295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1332.274242][T22302] hfs: unable to load iocharset "io#harset" [ 1334.108485][T22320] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4300'. [ 1334.111166][T22320] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4300'. [ 1334.142787][T22323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4301'. [ 1334.145783][T22323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4301'. [ 1334.148777][T22323] netlink: 'syz.0.4301': attribute type 15 has an invalid length. [ 1335.094704][ T40] audit: type=1326 audit(1762720808.967:61002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.0.4302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7fc00000 [ 1335.764358][T22342] hfs: unable to load iocharset "io#harset" [ 1336.342304][T22345] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4306'. [ 1336.346021][T22345] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4306'. [ 1336.400785][T22350] 9pnet: Unknown protocol version 9p2000.um}X6&iH 'I(G [ 1337.987167][T22377] FAULT_INJECTION: forcing a failure. [ 1337.987167][T22377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1337.991404][T22377] CPU: 3 UID: 0 PID: 22377 Comm: syz.0.4318 Not tainted syzkaller #0 PREEMPT(full) [ 1337.991418][T22377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1337.991425][T22377] Call Trace: [ 1337.991430][T22377] [ 1337.991434][T22377] dump_stack_lvl+0x16c/0x1f0 [ 1337.991453][T22377] should_fail_ex+0x512/0x640 [ 1337.991472][T22377] _copy_from_user+0x2e/0xd0 [ 1337.991491][T22377] snd_seq_ioctl+0x1bf/0x430 [ 1337.991505][T22377] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1337.991527][T22377] ? __fget_files+0x20e/0x3c0 [ 1337.991541][T22377] snd_seq_ioctl_compat+0xea/0x310 [ 1337.991553][T22377] ? __pfx_snd_seq_ioctl_compat+0x10/0x10 [ 1337.991566][T22377] __ia32_compat_sys_ioctl+0x242/0x370 [ 1337.991585][T22377] __do_fast_syscall_32+0x7c/0x300 [ 1337.991602][T22377] do_fast_syscall_32+0x32/0x80 [ 1337.991616][T22377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1337.991630][T22377] RIP: 0023:0xf703d579 [ 1337.991639][T22377] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1337.991651][T22377] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1337.991662][T22377] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c058534f [ 1337.991669][T22377] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1337.991676][T22377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1337.991682][T22377] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1337.991688][T22377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1337.991702][T22377] [ 1338.051200][T22375] overlayfs: failed to resolve './file0': -2 [ 1338.056936][T22375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.268812][T22392] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4323'. [ 1338.271659][T22392] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4323'. [ 1339.771764][T22413] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4329'. [ 1340.068953][T22422] overlayfs: failed to resolve './file0': -2 [ 1340.072533][T22422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.178389][T22429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4332'. [ 1341.414896][T22439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4337'. [ 1341.509586][T22448] pim6reg: entered allmulticast mode [ 1341.653709][T22451] hfs: unable to load iocharset "io#harset" [ 1341.986075][T22458] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4343'. [ 1341.990033][T22458] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4343'. [ 1342.249691][T22462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4344'. [ 1342.496504][T22468] overlayfs: missing 'lowerdir' [ 1342.517606][T22468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1344.363126][T22489] netlink: 'syz.2.4352': attribute type 2 has an invalid length. [ 1344.575631][T22497] overlayfs: missing 'lowerdir' [ 1344.974788][T22499] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4355'. [ 1344.985415][T22499] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4355'. [ 1345.487465][T22506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4356'. [ 1345.716780][T22509] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 1345.727788][T22509] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 1345.732572][T22509] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 1345.736913][T22509] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 1345.752500][T22509] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 1345.763156][T22509] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 1345.773775][T22509] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 1345.800125][T22509] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 1345.808832][T22509] kvm: requested 58666 ns i8254 timer period limited to 200000 ns [ 1345.813230][T22509] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 1346.625696][T22525] overlayfs: missing 'lowerdir' [ 1346.711749][T22525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.360578][T22534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4362'. [ 1347.496901][T22537] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4364'. [ 1347.501525][T22537] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4364'. [ 1347.540589][T22540] 9pnet: Unknown protocol version 9p2000.um}X6&iH 'I(G [ 1347.927143][ T53] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1348.027741][T22555] hfs: unable to load iocharset "io#harset" [ 1348.079678][ T53] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 1348.084341][ T53] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1348.088699][ T53] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1348.093841][ T53] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1348.098295][ T53] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1348.101763][ T53] usb 10-1: Product: syz [ 1348.103619][ T53] usb 10-1: Manufacturer: syz [ 1348.105608][ T53] usb 10-1: SerialNumber: syz [ 1348.110137][ T53] usb 10-1: config 0 descriptor?? [ 1348.118486][ T53] hub 10-1:0.0: bad descriptor, ignoring hub [ 1348.121004][ T53] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1348.126308][ T53] usb 10-1: selecting invalid altsetting 0 [ 1348.489539][T22562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.531374][T22562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.352673][T22573] overlayfs: failed to resolve './file0': -2 [ 1349.398314][T22573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1349.596128][T22576] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4374'. [ 1349.600100][T22576] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4374'. [ 1349.933905][T22582] overlayfs: missing 'lowerdir' [ 1349.971219][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1350.718900][ T6020] usb 10-1: USB disconnect, device number 33 [ 1350.903742][T22597] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4379'. [ 1350.907833][T22597] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4379'. [ 1351.065512][T22600] FAULT_INJECTION: forcing a failure. [ 1351.065512][T22600] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.070321][T22600] CPU: 0 UID: 0 PID: 22600 Comm: syz.2.4380 Not tainted syzkaller #0 PREEMPT(full) [ 1351.070337][T22600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1351.070345][T22600] Call Trace: [ 1351.070349][T22600] [ 1351.070354][T22600] dump_stack_lvl+0x16c/0x1f0 [ 1351.070371][T22600] should_fail_ex+0x512/0x640 [ 1351.070389][T22600] ? fs_reclaim_acquire+0xae/0x150 [ 1351.070405][T22600] should_failslab+0xc2/0x120 [ 1351.070421][T22600] __kmalloc_noprof+0xdd/0x880 [ 1351.070439][T22600] ? tomoyo_encode2+0x100/0x3e0 [ 1351.070455][T22600] ? tomoyo_encode2+0x100/0x3e0 [ 1351.070471][T22600] tomoyo_encode2+0x100/0x3e0 [ 1351.070485][T22600] tomoyo_encode+0x29/0x50 [ 1351.070497][T22600] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1351.070514][T22600] tomoyo_path_number_perm+0x245/0x580 [ 1351.070531][T22600] ? tomoyo_path_number_perm+0x237/0x580 [ 1351.070550][T22600] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1351.070583][T22600] ? find_held_lock+0x2b/0x80 [ 1351.070595][T22600] ? hook_file_ioctl_common+0x145/0x410 [ 1351.070610][T22600] ? __fget_files+0x20e/0x3c0 [ 1351.070624][T22600] security_file_ioctl_compat+0x9b/0x240 [ 1351.070637][T22600] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1351.070657][T22600] __do_fast_syscall_32+0x7c/0x300 [ 1351.070673][T22600] do_fast_syscall_32+0x32/0x80 [ 1351.070687][T22600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1351.070701][T22600] RIP: 0023:0xf7fa7579 [ 1351.070710][T22600] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1351.070721][T22600] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1351.070732][T22600] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000007b1 [ 1351.070739][T22600] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1351.070746][T22600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1351.070752][T22600] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1351.070758][T22600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1351.070772][T22600] [ 1351.070783][T22600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1351.085402][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4381'. [ 1351.153518][T22603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4381'. [ 1353.109351][T22621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4386'. [ 1353.443963][T19246] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1353.480623][T22634] hfs: unable to load iocharset "io#harset" [ 1353.697135][T19246] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1353.701103][T19246] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1353.704401][T19246] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1353.770496][T19246] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1353.796990][T19246] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1353.800657][T19246] usb 7-1: Product: syz [ 1353.803136][T19246] usb 7-1: Manufacturer: syz [ 1353.805391][T19246] usb 7-1: SerialNumber: syz [ 1353.809991][T19246] usb 7-1: config 0 descriptor?? [ 1353.813982][T19246] hub 7-1:0.0: bad descriptor, ignoring hub [ 1353.816024][T19246] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1353.823820][T19246] usb 7-1: selecting invalid altsetting 0 [ 1354.091720][T22642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.095946][T22642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.136213][T22627] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1355.038779][T22651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4394'. [ 1355.038828][T22652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4394'. [ 1355.050301][T22651] veth1_to_hsr: entered promiscuous mode [ 1355.054866][T22651] macvtap1: entered promiscuous mode [ 1355.059376][T22651] macvtap1: entered allmulticast mode [ 1355.062593][T22651] veth1_to_hsr: entered allmulticast mode [ 1355.076207][T22652] macvtap2: entered promiscuous mode [ 1355.079438][T22652] macvtap2: entered allmulticast mode [ 1355.141935][T22651] macvlan2: entered allmulticast mode [ 1355.144354][T22651] veth1_vlan: entered allmulticast mode [ 1355.149866][T22651] veth1_vlan: left allmulticast mode [ 1355.658366][T22664] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4395'. [ 1356.231521][T15938] usb 7-1: USB disconnect, device number 104 [ 1356.517737][T22671] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4399'. [ 1356.520566][T22671] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4399'. [ 1356.527210][T22675] random: crng reseeded on system resumption [ 1356.667486][ T53] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 1356.768770][T22679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4398'. [ 1356.829644][ T53] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1356.848117][ T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1356.861060][ T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1356.882560][ T53] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1356.900577][ T53] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1356.919278][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.937433][ T53] usb 11-1: config 0 descriptor?? [ 1357.023734][T22683] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4402'. [ 1357.026728][T22683] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4402'. [ 1357.091905][T22686] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 1357.178280][T22686] /dev/sr0: Can't open blockdev [ 1357.273689][T22691] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 1357.361576][ T53] plantronics 0003:047F:FFFF.001F: ignoring exceeding usage max [ 1357.370020][ T53] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1358.201586][T22701] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4407'. [ 1358.204562][T22701] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4407'. [ 1358.488367][T22708] 9pnet: Unknown protocol version 9p2000.um}X6&iH 'I(G [ 1358.892822][T22712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4411'. [ 1359.059354][T22715] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4412'. [ 1359.062720][T22715] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4412'. [ 1359.320240][T22723] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 1359.377560][T22724] [ 1359.378472][T22724] ====================================================== [ 1359.380729][T22724] WARNING: possible circular locking dependency detected [ 1359.383007][T22724] syzkaller #0 Not tainted [ 1359.385384][T22724] ------------------------------------------------------ [ 1359.388180][T22724] syz.5.4415/22724 is trying to acquire lock: [ 1359.390175][T22724] ffff88806e0e7eb0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 1359.394154][T22724] [ 1359.394154][T22724] but task is already holding lock: [ 1359.397085][T22724] ffff88805f492868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1359.400162][T22724] [ 1359.400162][T22724] which lock already depends on the new lock. [ 1359.400162][T22724] [ 1359.403262][T22724] [ 1359.403262][T22724] the existing dependency chain (in reverse order) is: [ 1359.406089][T22724] [ 1359.406089][T22724] -> #5 (&pipe->mutex){+.+.}-{4:4}: [ 1359.408451][T22724] __mutex_lock+0x193/0x1060 [ 1359.410090][T22724] pipe_lock+0x64/0x80 [ 1359.411588][T22724] iter_file_splice_write+0x1ea/0x12e0 [ 1359.413494][T22724] backing_file_splice_write+0x27f/0x890 [ 1359.415460][T22724] ovl_splice_write+0x38d/0x6c0 [ 1359.417153][T22724] do_splice+0x1478/0x1fc0 [ 1359.418741][T22724] __do_splice+0x32a/0x360 [ 1359.420318][T22724] __ia32_sys_splice+0x189/0x250 [ 1359.422033][T22724] __do_fast_syscall_32+0x7c/0x300 [ 1359.424036][T22724] do_fast_syscall_32+0x32/0x80 [ 1359.426172][T22724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1359.428787][T22724] [ 1359.428787][T22724] -> #4 (sb_writers#5){.+.+}-{0:0}: [ 1359.431234][T22724] mnt_want_write+0x6f/0x450 [ 1359.433094][T22724] ovl_create_object+0x12c/0x300 [ 1359.434906][T22724] lookup_open.isra.0+0x11d3/0x1580 [ 1359.436746][T22724] path_openat+0x893/0x2cb0 [ 1359.438415][T22724] do_filp_open+0x20b/0x470 [ 1359.440039][T22724] do_sys_openat2+0x11b/0x1d0 [ 1359.441744][T22724] __ia32_compat_sys_open+0x146/0x1e0 [ 1359.443673][T22724] __do_fast_syscall_32+0x7c/0x300 [ 1359.445505][T22724] do_fast_syscall_32+0x32/0x80 [ 1359.447256][T22724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1359.449503][T22724] [ 1359.449503][T22724] -> #3 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 1359.452274][T22724] down_read+0x9b/0x480 [ 1359.453820][T22724] lookup_one_unlocked+0xc7/0x120 [ 1359.455623][T22724] ovl_lookup_single+0x435/0x1330 [ 1359.457425][T22724] ovl_lookup_layer+0x3d4/0x480 [ 1359.459266][T22724] ovl_lookup+0x13f9/0x21a0 [ 1359.461250][T22724] __lookup_slow+0x251/0x460 [ 1359.463205][T22724] walk_component+0x353/0x5b0 [ 1359.464770][T22724] path_lookupat+0x142/0x6d0 [ 1359.466440][T22724] filename_lookup+0x224/0x5f0 [ 1359.468125][T22724] kern_path+0x35/0x50 [ 1359.469600][T22724] lookup_bdev+0xd8/0x280 [ 1359.471162][T22724] resume_store+0x1d6/0x460 [ 1359.472837][T22724] kobj_attr_store+0x58/0x80 [ 1359.474491][T22724] sysfs_kf_write+0xf2/0x150 [ 1359.476103][T22724] kernfs_fop_write_iter+0x3af/0x570 [ 1359.477934][T22724] vfs_write+0x7d3/0x11d0 [ 1359.479498][T22724] ksys_write+0x12a/0x250 [ 1359.481040][T22724] __do_fast_syscall_32+0x7c/0x300 [ 1359.482860][T22724] do_fast_syscall_32+0x32/0x80 [ 1359.484913][T22724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1359.487598][T22724] [ 1359.487598][T22724] -> #2 (&ovl_i_mutex_dir_key[depth]#3){.+.+}-{4:4}: [ 1359.488818][T19246] usb 11-1: USB disconnect, device number 11 [ 1359.490533][T22724] down_read+0x9b/0x480 [ 1359.493931][T22724] walk_component+0x345/0x5b0 [ 1359.495627][T22724] path_lookupat+0x142/0x6d0 [ 1359.497238][T22724] filename_lookup+0x224/0x5f0 [ 1359.498917][T22724] kern_path+0x35/0x50 [ 1359.500375][T22724] lookup_bdev+0xd8/0x280 [ 1359.501910][T22724] resume_store+0x1d6/0x460 [ 1359.503507][T22724] kobj_attr_store+0x58/0x80 [ 1359.505129][T22724] sysfs_kf_write+0xf2/0x150 [ 1359.506757][T22724] kernfs_fop_write_iter+0x3af/0x570 [ 1359.508596][T22724] vfs_write+0x7d3/0x11d0 [ 1359.510135][T22724] ksys_write+0x12a/0x250 [ 1359.511674][T22724] __do_fast_syscall_32+0x7c/0x300 [ 1359.513425][T22724] do_fast_syscall_32+0x32/0x80 [ 1359.515153][T22724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1359.517266][T22724] [ 1359.517266][T22724] -> #1 (&of->mutex){+.+.}-{4:4}: [ 1359.519538][T22724] __mutex_lock+0x193/0x1060 [ 1359.521149][T22724] kernfs_seq_start+0x4f/0x2a0 [ 1359.522823][T22724] seq_read_iter+0x2c1/0x12d0 [ 1359.524509][T22724] kernfs_fop_read_iter+0x46c/0x610 [ 1359.526308][T22724] vfs_read+0x8bf/0xcf0 [ 1359.527830][T22724] ksys_read+0x12a/0x250 [ 1359.529348][T22724] __do_fast_syscall_32+0x7c/0x300 [ 1359.531122][T22724] do_fast_syscall_32+0x32/0x80 [ 1359.532806][T22724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1359.534985][T22724] [ 1359.534985][T22724] -> #0 (&p->lock){+.+.}-{4:4}: [ 1359.537180][T22724] __lock_acquire+0x126f/0x1c90 [ 1359.538878][T22724] lock_acquire+0x179/0x350 [ 1359.540466][T22724] __mutex_lock+0x193/0x1060 [ 1359.542081][T22724] seq_read_iter+0xe1/0x12d0 [ 1359.543714][T22724] kernfs_fop_read_iter+0x46c/0x610 [ 1359.545579][T22724] copy_splice_read+0x618/0xc20 [ 1359.547674][T22724] do_splice_read+0x285/0x370 [ 1359.549727][T22724] splice_file_to_pipe+0x109/0x120 [ 1359.551935][T22724] do_sendfile+0x400/0xe50 [ 1359.553879][T22724] __ia32_sys_sendfile64+0x1d7/0x220 [ 1359.556036][T22724] __do_fast_syscall_32+0x7c/0x300 [ 1359.557814][T22724] do_fast_syscall_32+0x32/0x80 [ 1359.559540][T22724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1359.561672][T22724] [ 1359.561672][T22724] other info that might help us debug this: [ 1359.561672][T22724] [ 1359.564860][T22724] Chain exists of: [ 1359.564860][T22724] &p->lock --> sb_writers#5 --> &pipe->mutex [ 1359.564860][T22724] [ 1359.568533][T22724] Possible unsafe locking scenario: [ 1359.568533][T22724] [ 1359.570857][T22724] CPU0 CPU1 [ 1359.572533][T22724] ---- ---- [ 1359.574224][T22724] lock(&pipe->mutex); [ 1359.575557][T22724] lock(sb_writers#5); [ 1359.577641][T22724] lock(&pipe->mutex); [ 1359.579741][T22724] lock(&p->lock); [ 1359.580962][T22724] [ 1359.580962][T22724] *** DEADLOCK *** [ 1359.580962][T22724] [ 1359.583515][T22724] 1 lock held by syz.5.4415/22724: [ 1359.585153][T22724] #0: ffff88805f492868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1359.587873][T22724] [ 1359.587873][T22724] stack backtrace: [ 1359.589741][T22724] CPU: 3 UID: 0 PID: 22724 Comm: syz.5.4415 Not tainted syzkaller #0 PREEMPT(full) [ 1359.589755][T22724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1359.589762][T22724] Call Trace: [ 1359.589767][T22724] [ 1359.589772][T22724] dump_stack_lvl+0x116/0x1f0 [ 1359.589787][T22724] print_circular_bug+0x275/0x350 [ 1359.589803][T22724] check_noncircular+0x14c/0x170 [ 1359.589820][T22724] __lock_acquire+0x126f/0x1c90 [ 1359.589838][T22724] lock_acquire+0x179/0x350 [ 1359.589853][T22724] ? seq_read_iter+0xe1/0x12d0 [ 1359.589871][T22724] ? __pfx___might_resched+0x10/0x10 [ 1359.589882][T22724] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1359.589894][T22724] ? __kasan_kmalloc+0xaa/0xb0 [ 1359.589908][T22724] ? seq_read_iter+0xe1/0x12d0 [ 1359.589923][T22724] __mutex_lock+0x193/0x1060 [ 1359.589937][T22724] ? seq_read_iter+0xe1/0x12d0 [ 1359.589955][T22724] ? __pfx___mutex_lock+0x10/0x10 [ 1359.589970][T22724] ? alloc_pages_bulk_noprof+0xa67/0x1410 [ 1359.589981][T22724] ? seq_read_iter+0xe1/0x12d0 [ 1359.589997][T22724] seq_read_iter+0xe1/0x12d0 [ 1359.590013][T22724] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1359.590026][T22724] kernfs_fop_read_iter+0x46c/0x610 [ 1359.590039][T22724] copy_splice_read+0x618/0xc20 [ 1359.590058][T22724] ? __pfx_copy_splice_read+0x10/0x10 [ 1359.590081][T22724] ? __pfx___mutex_lock+0x10/0x10 [ 1359.590096][T22724] ? __fget_files+0x204/0x3c0 [ 1359.590107][T22724] ? __pfx_copy_splice_read+0x10/0x10 [ 1359.590123][T22724] do_splice_read+0x285/0x370 [ 1359.590141][T22724] splice_file_to_pipe+0x109/0x120 [ 1359.590175][T22724] do_sendfile+0x400/0xe50 [ 1359.590195][T22724] ? __pfx_do_sendfile+0x10/0x10 [ 1359.590206][T22724] ? __pfx___seccomp_filter+0x10/0x10 [ 1359.590224][T22724] __ia32_sys_sendfile64+0x1d7/0x220 [ 1359.590240][T22724] ? xfd_validate_state+0x61/0x180 [ 1359.590256][T22724] ? __pfx___ia32_sys_sendfile64+0x10/0x10 [ 1359.590272][T22724] ? __secure_computing+0x21c/0x320 [ 1359.590288][T22724] __do_fast_syscall_32+0x7c/0x300 [ 1359.590303][T22724] do_fast_syscall_32+0x32/0x80 [ 1359.590316][T22724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1359.590330][T22724] RIP: 0023:0xf708d579 [ 1359.590339][T22724] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1359.590349][T22724] RSP: 002b:00000000f545c55c EFLAGS: 00000296 ORIG_RAX: 00000000000000ef [ 1359.590360][T22724] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000005 [ 1359.590366][T22724] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 1359.590374][T22724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1359.590380][T22724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1359.590387][T22724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1359.590396][T22724] [ 1359.771733][T22723] /dev/sr0: Can't open blockdev [ 1361.348772][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 20:32:01 Registers: info registers vcpu 0 CPU#0 RAX=00000000012fe1c4 RBX=0000000000000000 RCX=ffffffff8b5d72a9 RDX=ffffed1005646656 RSI=ffffffff8bf07540 RDI=ffffffff8191cf0d RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000000 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=ffff88802b23b2d8 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff908242d0 R15=0000000000000000 RIP=ffffffff8b5d5d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809780d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000002 CR3=000000004ab3d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d99893ec90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d998937f60 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeda918b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dcc50b34d9 0000000000000021 0000000000000036 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 683d4d4554535953 4255530046313030 2e464646463a4637 34303a333030302f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68780e0412011c07 0c1c53440f766675 6a467b020f7d1072 70307e7a6566756b ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b7b7f77767f7f7f 7f7f7b7e7f7f7f75 6f7f7f7f6f7f7f77 7f777f7b6d7e7f7b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e303a312d3131 2f312d31312f3131 2f3d482f362e5645 4400646d69623d2f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e303a312d3131 2f310000312f3030 2e3d462f362e3d37 34003a333000302f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000002c293ec RBX=0000000000000001 RCX=ffffffff8b5d72a9 RDX=ffffed1005666656 RSI=ffffffff8bf07540 RDI=ffffffff8191cf0d RBP=ffffed1003b5e490 RSP=ffffc9000046fde8 R8 =0000000000000000 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801daf2480 R14=ffffffff908242d0 R15=0000000000000000 RIP=ffffffff8b5d5d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809790d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7456288 CR3=000000004ab3d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000f9eaf4 RBX=0000000000000002 RCX=ffffffff8b5d72a9 RDX=ffffed1005686656 RSI=ffffffff8bf07540 RDI=ffffffff8191cf0d RBP=ffffed1003b5e920 RSP=ffffc9000047fde8 R8 =0000000000000000 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801daf4900 R14=ffffffff908242d0 R15=0000000000000000 RIP=ffffffff8b5d5d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ebc18b2f40 CR3=000000004ab3d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85268e75 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc90006fcf228 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000066666666 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9adc5da0 R15=ffffffff85268e10 RIP=ffffffff85268e9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097b0d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d8c7c CR3=000000005ee61000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000