last executing test programs: 6m52.702152291s ago: executing program 2 (id=211): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x2200, 0xd) sendfile(r1, r1, 0x0, 0x200) bpf$MAP_CREATE(0x0, 0x0, 0x1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) r4 = eventfd(0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000540)='./file1/file0\x00', 0xc0) r5 = eventfd(0x6) io_submit(0x0, 0x4, &(0x7f0000000700)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f00000002c0)="289dbe5ac53905af13475c535b589603dcd799f329765a50aab34f4f7dab84cd9157b7d579beaf", 0x27, 0x9, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000380)="aac3df", 0x3, 0x642, 0x0, 0x3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1, r4}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000640)="b878ceccefb3420c20e784c4c45a70e5cf561ac9fec30d02adef13a79fb467606f09354115b496ca8e45274a4165fef73a443eb5d33a9ced7ab56a9e18027548e2a9bb0a9ea17f3098b33134b99a1bfe7194002ccb82797001eb2afa4cb62a088aba331e99d7c5b92851ee304f170e8e68d065e3", 0x74, 0x1, 0x0, 0x0, r5}]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x7f, 0x17, 0x2c, 0x40, 0x5}, 0x22, &(0x7f00000001c0)={0x5, 0xf, 0x22, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "966f55e00339e8c28ac7127b17a86d8b"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x816}}, {0x8c, &(0x7f0000001180)=ANY=[@ANYBLOB="8c030000274c4495ff84971620815c3b045a0bbda4cc4a1f9b8e0ab436440c22ccee8e13fbb44b220e9500a21b7f445b3b31a4b6e26f46bc60aaf858cd791bbf2397067ce57215db6cbace635193d828cd25a39bccea00bac180cd7be60263a1e8af451b4dc1d90b85dc8a41b1159e3f5b61bf4b2bb4c8226133e4529f235dd49a382f0ff33d4f4a78801a2a2b05ca4de7b3604f53ccbc95863b2867260540272ec08bf1ae09cb17689358287bc036190495b6eae610a98f80fc441b4c5fc35a4b9b1b308f84ef9c3da099c6952d2846d58c14e4e5a78861382d1db92e2e336e0ac2b11bf30f776e8150200c321211616f3ed86b36359f83"]}]}) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 6m52.115440544s ago: executing program 3 (id=204): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x6, 0x101240) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x62b80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) unshare(0x6a040000) unshare(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 6m52.113678042s ago: executing program 2 (id=213): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r7}, 0x10) alarm(0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 6m51.21852772s ago: executing program 3 (id=207): ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0x0, 0x101, 0x1ff, 0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x98f90d, 0xce39, '\x00', @value64=0x7}}) 6m51.20213615s ago: executing program 2 (id=208): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x722) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x4000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x9, 0x0, 0xfc, '\x00', 0xff}, {0x0, 0xa, 0x0, '\x00', 0x7e}, {0xfc, 0x5, 0x4, '\x00', 0xbb}, {0x11, 0xb, 0x0, '\x00', 0xfe}, {}, {0x0, 0x9, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xa}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0xfd, 0x1, 0x5, '\x00', 0x3}, {0x2, 0x0, 0x6, '\x00', 0x4}, {0xc3, 0xfd, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x88, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0xb, 0x9, 0x1}, {0x0, 0x6a}, {0x0, 0x4, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x6, 0x9}, {0x80, 0xff, 0x3}]}}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4004af61, &(0x7f0000000940)) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 6m51.085727379s ago: executing program 3 (id=209): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) lseek(0xffffffffffffffff, 0x10001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x8}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x557, 0x0) readv(r7, &(0x7f0000001800)=[{&(0x7f00000000c0)=""/92, 0x5c}], 0x1) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={0x1}) r8 = io_uring_setup(0x4edd, &(0x7f0000000080)={0x0, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x14, 0x0, 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000000), 0x2) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f0000000440)={0x7, 0x8002, 0x0, 0x0, 0xf}) 6m50.246821518s ago: executing program 3 (id=216): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000380)='omfs\x00', 0x2808088, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0xc0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4f400, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000600)={0x1f, @none}, 0x8) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x10420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{0x0}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x60087e52, @rand_addr=' \x01\x00', 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@rthdr_2292={{0x14, 0x29, 0x39, {0x6, 0x0, 0x2, 0x10}}}, @dstopts_2292={{0x1c, 0x29, 0x4, {0x2, 0x1, '\x00', [@generic={0x8}, @jumbo={0xc2, 0x4, 0x800}]}}}], 0x30}}], 0x2, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)=ANY=[], 0x1000f) 6m49.894154583s ago: executing program 3 (id=217): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x722) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) 6m49.763705841s ago: executing program 2 (id=219): ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0x0, 0x101, 0x1ff, 0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x98f90d, 0xce39, '\x00', @value64=0x7}}) 6m49.762212008s ago: executing program 2 (id=220): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) alarm(0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6m48.88595955s ago: executing program 3 (id=224): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x722) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x4000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x9, 0x0, 0xfc, '\x00', 0xff}, {0x0, 0xa, 0x0, '\x00', 0x7e}, {0xfc, 0x5, 0x4, '\x00', 0xbb}, {0x11, 0xb, 0x0, '\x00', 0xfe}, {}, {0x0, 0x9, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xa}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0xfd, 0x1, 0x5, '\x00', 0x3}, {0x2, 0x0, 0x6, '\x00', 0x4}, {0xc3, 0xfd, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x88, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0xb, 0x9, 0x1}, {0x0, 0x6a}, {0x0, 0x4, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x6, 0x9}, {0x80, 0xff, 0x3}]}}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4004af61, &(0x7f0000000940)) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 6m48.723725129s ago: executing program 2 (id=227): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x722) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) 6m47.864020863s ago: executing program 1 (id=228): r0 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x0, 0x101, 0x1ff, 0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x98f90d, 0xce39, '\x00', @value64=0x7}}) 6m47.863792744s ago: executing program 1 (id=229): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x6, 0x101240) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(0x0, 0x0) r2 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 6m47.0021028s ago: executing program 1 (id=230): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80047601, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e04e04020"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r5, &(0x7f0000000140)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f0000000080)}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 6m46.057433629s ago: executing program 1 (id=231): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80047601, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e04e04020"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r6, &(0x7f0000000140)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f0000000080)}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 6m45.137342599s ago: executing program 1 (id=232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x48, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0x32, 0x6, "355eb230e74a13801aeafdf9028cf89d23d4ccf09a29464fb5797739958dce731e94c4cfc94166816ae4c61710d3"}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0xb, 0x3}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x7e}]}, {0x0, [0x0, 0xc2, 0x0, 0x0, 0x30, 0x61, 0x2e]}}, &(0x7f0000001440), 0x41, 0x0, 0x0, 0xffffffb9, 0x0, @void, @value}, 0x28) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x17, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x18000000}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x60, '\x00', r2, @fallback=0x26, r3, 0x8, &(0x7f00000014c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0xa, 0x1ff, 0xbe}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000015c0)=[r4], &(0x7f0000001600)=[{0x2, 0x5, 0xe, 0x9}, {0x5, 0x3, 0xc, 0x3}, {0x2, 0x3, 0xc}], 0x10, 0x3, @void, @value}, 0x94) 6m45.074109314s ago: executing program 1 (id=233): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x722) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) 6m33.533090556s ago: executing program 32 (id=225): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000380)='omfs\x00', 0x2808088, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0xc0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4f400, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000600)={0x1f, @none}, 0x8) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x10420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{0x0}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x60087e52, @rand_addr=' \x01\x00', 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@rthdr_2292={{0x14, 0x29, 0x39, {0x6, 0x0, 0x2, 0x10}}}, @dstopts_2292={{0x1c, 0x29, 0x4, {0x2, 0x1, '\x00', [@generic={0x8}, @jumbo={0xc2, 0x4, 0x800}]}}}], 0x30}}], 0x2, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)=ANY=[], 0x1000f) 6m33.50070496s ago: executing program 33 (id=227): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x722) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) 6m33.496965101s ago: executing program 34 (id=224): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x722) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x4000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x9, 0x0, 0xfc, '\x00', 0xff}, {0x0, 0xa, 0x0, '\x00', 0x7e}, {0xfc, 0x5, 0x4, '\x00', 0xbb}, {0x11, 0xb, 0x0, '\x00', 0xfe}, {}, {0x0, 0x9, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xa}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0xfd, 0x1, 0x5, '\x00', 0x3}, {0x2, 0x0, 0x6, '\x00', 0x4}, {0xc3, 0xfd, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x88, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0xb, 0x9, 0x1}, {0x0, 0x6a}, {0x0, 0x4, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x6, 0x9}, {0x80, 0xff, 0x3}]}}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4004af61, &(0x7f0000000940)) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 6m30.027840019s ago: executing program 35 (id=233): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x722) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) 4m19.711728611s ago: executing program 5 (id=900): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x0, {0x40, 0x4, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x2, 0x0, 0x0, 0x40000902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x64100, 0xa1) 4m19.71045216s ago: executing program 5 (id=902): creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xc0046686, &(0x7f0000000d40)={{0x3, 0x2, 0x1200, 0x3, 0x5, 0xfffff800}, 0x262, [0xffffffff, 0xfffffffc, 0x10001, 0x8, 0x9, 0x1, 0x4, 0xfffffff4, 0x7, 0x6, 0xffffff40, 0xfffffff8, 0xfffffff9, 0x1, 0x80000000, 0x5, 0x9, 0xa, 0x200, 0x0, 0x7fffffff, 0x10, 0x7, 0x3, 0x7, 0x101, 0x7, 0x1, 0x7ff, 0xd6da, 0xf75, 0x6, 0x0, 0x20, 0xd, 0xfffffff9, 0x4, 0x0, 0x4, 0x1, 0x4, 0x6, 0x2, 0x9, 0x7, 0x8000, 0x4, 0x10000, 0x4, 0x10001, 0x5, 0x0, 0x4, 0xb58, 0x2527, 0x7, 0x80000000, 0x4, 0x1ff, 0xfffffffe, 0x379, 0x2, 0x8, 0x400, 0x10000, 0xffff9b66, 0x1, 0x7fff, 0xffffffff, 0x5, 0x9, 0x0, 0xa082, 0xffff0001, 0x3a97, 0x82, 0xa, 0x0, 0x0, 0x4, 0x1ff, 0x0, 0x6, 0x6, 0x7, 0x10000, 0x9, 0x7fff, 0x7f, 0x9, 0x9, 0x8001, 0x3ff, 0x7fff, 0x10001, 0xfffffff5, 0x4, 0x9, 0x6, 0x9, 0xfffffffd, 0xe68, 0x7ff, 0x9, 0x9, 0x5, 0x8, 0xffffffff, 0x3ee, 0x2, 0x8, 0x401, 0xf9, 0x9, 0x7fffffff, 0xfff, 0x51, 0x5, 0x6, 0xcd8, 0x1, 0x6, 0xfff, 0x9, 0xfff, 0x6, 0x2, 0x2, 0x2, 0xe, 0x8, 0x9, 0x5, 0x7fff, 0xfffffff0, 0x14000000, 0x140d0d3f, 0x4, 0x4, 0x8, 0x5, 0xfffffff1, 0x7, 0x8, 0x2, 0x1000000, 0x1, 0x1, 0x0, 0x7, 0x16fd, 0xffffe609, 0x80, 0x7, 0x3d22, 0x35, 0xfffffff8, 0x4, 0xfd0, 0x4a, 0x3, 0x200, 0x3, 0x4, 0x9, 0x6, 0x9a9de555, 0x0, 0xb605, 0x1, 0x4, 0x9, 0x9, 0xa022, 0x8, 0x6, 0x8, 0x9, 0x7, 0x9, 0xfff, 0xfffffff4, 0x7, 0xe, 0xaca8, 0x1, 0x7, 0x0, 0x1, 0xc, 0x2, 0x7, 0x8c, 0x29d3b8d1, 0x3, 0xb69e, 0x0, 0x27, 0xff, 0x658a, 0x7fff, 0xfffffffd, 0x2, 0x2, 0x0, 0x6, 0xda, 0x0, 0x1, 0x6, 0x385, 0x10001, 0x4, 0x9, 0x800, 0xb3, 0xc6, 0x8, 0x4, 0x200, 0x6, 0x400, 0x7ff, 0x6, 0x7ff, 0xffffffff, 0x46, 0xc4, 0x2, 0xaa, 0x7, 0x81, 0x5, 0x0, 0x401, 0x1, 0xfffffffc, 0x8, 0x7fff, 0x2, 0x10000, 0x5, 0x8, 0xffffd5dc, 0x80, 0x6, 0x1, 0x5, 0x4, 0xe767, 0x0, 0x8001, 0x8, 0xb, 0x7, 0x2, 0x7, 0x6, 0x0, 0x0, 0x8, 0x6, 0x7, 0x2, 0x2, 0x8000, 0xe5, 0x6, 0x9, 0x400, 0x673, 0xb, 0x187, 0x7, 0x6, 0x7f, 0x6, 0xfffff001, 0x44, 0x0, 0x5, 0x5, 0x6e1, 0xffff, 0x90e, 0xb, 0x0, 0x7, 0x24f1, 0xffffffc0, 0x101, 0x1, 0x3, 0x7, 0x200, 0x81, 0x5, 0x7fffffff, 0x4, 0xac3, 0x9, 0xbf1, 0xacde, 0x8, 0x0, 0x0, 0xedd, 0x7fffffff, 0x7, 0x24000000, 0x7, 0xffffffff, 0x5, 0x0, 0x9, 0x0, 0x6f, 0x0, 0xaeec, 0x4, 0x5, 0x6, 0x1, 0x4, 0x80000000, 0x5, 0x1b, 0x92fb, 0x9, 0x6, 0x5, 0x4, 0x1, 0x9, 0x80, 0xafb0, 0x1c, 0xff, 0x2, 0x40, 0x1, 0xd, 0x800, 0x1, 0x0, 0x7, 0x8, 0x5, 0x4, 0x1, 0xfffffff8, 0xfffffffa, 0x80, 0x8, 0x9, 0x9, 0x8001, 0xffffffff, 0x52d8, 0x74aa, 0x2, 0x2, 0x6, 0x5, 0xda7, 0x1, 0x6, 0x8, 0x2, 0x2, 0x8, 0x0, 0x3, 0xdf6, 0xff, 0x7, 0x8001, 0x9, 0x3, 0x6, 0x312, 0x4a, 0x6, 0xfffff1f3, 0x7ff, 0x5, 0x6, 0x5, 0x8, 0x5, 0x7, 0x7, 0x9, 0x1ff, 0x4, 0x8, 0x9, 0x1, 0x80000000, 0xa, 0x3, 0x3, 0x4, 0x186, 0x4, 0x80, 0x1566cf9f, 0x9, 0x7, 0xcbcc, 0x739, 0x6, 0x4, 0x0, 0xffffffff, 0xd7, 0xf, 0x81, 0x10000, 0x80000000, 0x3, 0x7ff, 0x1, 0x3, 0x811, 0x261, 0x0, 0x7ff, 0x9, 0x8, 0x5, 0xfffffff7, 0xfffffff0, 0x8, 0xcd, 0x3, 0x7, 0x3, 0xc5, 0xe, 0x6, 0xa, 0x7a, 0x4, 0x10001, 0x2, 0x8, 0x401, 0x7, 0x8, 0x4, 0x8, 0x2, 0x10001, 0x6, 0x2df, 0x7, 0x5, 0x4, 0x6, 0x27, 0x3, 0xa, 0xa, 0x8, 0x1000, 0x5, 0xa, 0x8f, 0x7, 0x7, 0x100, 0x10000, 0x30aa, 0x8, 0x2, 0x8, 0x400, 0x80000001, 0xfffffff7, 0xf, 0x9, 0xdf, 0x4, 0x5, 0xa, 0x101, 0x8, 0x7fff, 0x7, 0x400, 0x4, 0x0, 0x40, 0xc, 0x7fff, 0xc, 0x8000, 0x7, 0x4, 0x5, 0xffff0001, 0x1, 0x7ff, 0x0, 0x203, 0x7, 0x418, 0x4, 0x3, 0xfffff415, 0x501d1bf3, 0x0, 0x7, 0xe9, 0x124, 0x1, 0xd, 0x3, 0x25, 0x3, 0xe0000, 0x40, 0x0, 0x80d9, 0x3, 0xbe, 0x8, 0x1, 0x1, 0x400, 0xfffffffd, 0x7, 0x8, 0xffff, 0x5, 0x53, 0x5, 0x7, 0x100, 0x6, 0x5, 0x2, 0x1ff, 0xd5, 0x9, 0x6, 0x0, 0x0, 0x6, 0x3, 0x1, 0x401, 0x1f39, 0x5, 0x401, 0x8, 0x8, 0xc000000, 0xfffffffe, 0xa, 0x3, 0xc, 0x3, 0xb83, 0x6, 0x3, 0x9, 0x7, 0xb189, 0xf97, 0x80000001, 0x7ff, 0x9, 0x5, 0x3, 0x2, 0x3, 0x5f, 0x3, 0x1000, 0x8, 0x8, 0x8, 0x2, 0x2, 0x1000, 0x1, 0x696, 0x5, 0x1, 0x2, 0x0, 0x8, 0x1, 0x8, 0xffff7fff, 0x98, 0x8000, 0x7f, 0x9, 0x40, 0x81, 0x6, 0x0, 0x4, 0x4, 0x0, 0xffff, 0x0, 0x5, 0xffff, 0xffff, 0x1ff, 0x100, 0x0, 0xd5f1, 0x6, 0x9, 0x2, 0xffff, 0x83, 0x4a5acc4e, 0xd, 0x0, 0x10000, 0xe393, 0xfffffffa, 0x1000, 0x3, 0x4, 0xd, 0x0, 0x1, 0x6, 0x28, 0x5, 0x9, 0xb2, 0x6, 0x5d9df1c9, 0x3, 0xd02, 0xe444, 0x5, 0x6, 0x5, 0xbb, 0x0, 0x7, 0x7fffffff, 0x8, 0xf, 0x7, 0x9, 0x9, 0x3, 0x6, 0xa, 0xfffffea3, 0x9d94, 0x337, 0x1, 0x80000000, 0x80000, 0x8, 0x4, 0x1, 0x4, 0x9, 0x80, 0x0, 0x10, 0x0, 0x8, 0x8274, 0x7ff, 0x80, 0x1, 0xc, 0x5, 0x9, 0x1, 0x8, 0x9, 0x2, 0xd17, 0xfffffff9, 0xfffffffa, 0xae, 0x9, 0x6, 0x7, 0x2, 0x80000000, 0xfffff801, 0x6, 0x6, 0x4, 0x8, 0x8, 0x8, 0x1, 0x5, 0xe, 0x5, 0x1, 0x8, 0x4, 0x6, 0x0, 0xe, 0x6, 0x5, 0x1, 0x9, 0x5, 0x6, 0xa, 0x6, 0xca4, 0x8, 0x8, 0x7, 0x4, 0x9b94, 0x1, 0xfffffff1, 0x0, 0x4, 0x6, 0x6, 0x8001, 0xfff, 0x9, 0x3, 0x7fffffff, 0x3, 0x4, 0x9, 0x1, 0x8, 0x704, 0x4, 0x1, 0x0, 0x5, 0x5, 0x0, 0x5, 0x9, 0x9, 0xca1, 0x5, 0xffffff0b, 0x9, 0x10001, 0x2, 0xac, 0xffffe40e, 0x3, 0x1ff, 0xa3a, 0x7, 0x3, 0x3, 0xb8, 0x7, 0x1, 0x9, 0xb, 0x5, 0x5, 0xf, 0xfffffffa, 0xeea, 0x7, 0x5e9, 0x400, 0x5, 0x9, 0x6, 0xa, 0x5, 0x8, 0x7fffffff, 0x200, 0x5, 0x0, 0x0, 0x81, 0xb4, 0x8c, 0x0, 0x1, 0x100, 0xb, 0x2, 0x8b8, 0x2, 0x4, 0x7fff, 0x6, 0xfffffff8, 0x7, 0x0, 0x9a, 0xfffffffb, 0x0, 0xfffffffb, 0xfffffff6, 0xb0d80206, 0x4, 0x10001, 0x7, 0xcd, 0x2, 0x6, 0x0, 0x4, 0x0, 0x4f30325f, 0xc5e2, 0x11ca, 0x800, 0x101, 0x401, 0x8001, 0x1, 0x1, 0xce, 0x0, 0x8, 0x4, 0x3, 0x1, 0xf254, 0x4, 0x100, 0x10001, 0x7, 0x10000, 0xfffffffa, 0x3, 0x7, 0x6, 0xffffff7a, 0x4, 0x4, 0x0, 0x2, 0x8, 0x200, 0x5, 0x5, 0x6, 0x4, 0x0, 0x101, 0xffffffff, 0x1000, 0x401, 0xffff1b4d, 0x7, 0xffff, 0x41, 0x401, 0x3, 0xf, 0x7, 0x6, 0xffffffff, 0x7, 0x10000, 0x7fffffff, 0x5, 0x3, 0x2, 0xffffffff, 0x1, 0xeed, 0x3, 0x1, 0x6, 0x9, 0x6, 0x1, 0xe, 0x68, 0x675, 0x54, 0x5, 0x5, 0x100, 0xe3, 0xd, 0x7, 0xf, 0xe, 0x1, 0xd2, 0xbe, 0x8, 0x6, 0x0, 0x200, 0xb, 0x7, 0x8, 0x1, 0x2, 0x1, 0x6ea0, 0x0, 0x8, 0x200, 0x9, 0x9, 0x3ff, 0xd6d6, 0x8, 0x5, 0x1, 0x0, 0x7, 0x93, 0x8, 0x7fffffff, 0x84, 0x4, 0xdb, 0x0, 0x0, 0x6, 0x5, 0x4a4d, 0x6, 0x6, 0x8001, 0x9, 0x6, 0x1, 0x6424, 0x9, 0x5, 0x2, 0x5, 0x6, 0x7, 0x0, 0x7ff, 0x81, 0x4, 0xd, 0x7ff, 0x3, 0x200, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x6c02, 0x5, 0x288, 0x100, 0x800, 0x5, 0x5, 0x1, 0xb, 0x2, 0x80000000, 0x1, 0x0, 0x1, 0x8, 0x10001, 0x1, 0x80000001, 0x2, 0x100, 0xffffffff, 0x4, 0x3, 0xe5d3, 0xfffffee8, 0xffff, 0x9, 0xff, 0x0, 0xb012, 0x1, 0x3, 0x4, 0x1, 0x80000000, 0x80000000, 0x1, 0x3, 0x800080, 0x7ff, 0x2, 0xbc95, 0x3, 0xfa, 0x9, 0x2, 0x7f, 0xf, 0x3, 0x1ff, 0x2, 0x6, 0xff, 0xfffffff9, 0x7, 0x3, 0x9, 0x6c, 0x10, 0x580, 0x8]}) 4m16.502363266s ago: executing program 5 (id=911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000000000000000d2f97345e6da1b733a1d75aa594305b3616aac8f65b6fddd049d34dcfd7e77d1bc0104102cb0e3095130b28370aa3891fae5a6b9ef16e86b7d55ac4728f7771cbd69581bbce9c5ac1f774be8763b", @ANYRES16=r1, @ANYBLOB="010024bd7000fcdbdf2503000000180001801400020073797a5f74756e000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r5, &(0x7f0000000ec0)=""/4096, 0x1000) fcntl$setsig(r5, 0xa, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000000)='./bus\x00', 0x551481, 0x0) getdents64(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r6, &(0x7f0000001040)=""/4096, 0x1000) 4m16.399539929s ago: executing program 5 (id=914): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x2000005, 0x6}) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000240), 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0x1f, 0x3, 0x5, [{@remote, 0x2}, {@local, 0xaa1}, {@loopback, 0x40}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x9}, {@empty, 0xb02}, {@broadcast, 0x9}, {@remote, 0xfffffff8}, {@loopback, 0x5}, {@private=0xa010100, 0x85}]}, @ra={0x94, 0x4}, @generic={0x0, 0xd, "be47a7aebd2d7ebf439dc3"}]}}}], 0x74}, 0xc008c19) finit_module(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20000004) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(0xffffffffffffffff) dup(r4) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x20000000000000, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d72abdc81b8bcd097d45c7d8b"]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4048000) sched_setscheduler(0x0, 0x1, 0x0) 4m15.416513247s ago: executing program 5 (id=920): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket$kcm(0x29, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x3, 0x8) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000240)=0x2, 0x4) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000730124000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m14.562654853s ago: executing program 5 (id=923): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000380)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) 3m59.378875555s ago: executing program 36 (id=923): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000380)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) 3m24.265954013s ago: executing program 4 (id=1266): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000884}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2004001) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r4 = syz_io_uring_setup(0x17ee, &(0x7f0000000580)={0x0, 0xe29f, 0x80, 0xfffffbff, 0x2df, 0x0, r2}, &(0x7f0000000540)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x104, &(0x7f00000004c0)=0x3, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4000}}) io_uring_enter(r4, 0x47f4, 0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x4, 0x3, 0x0, 0x7, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b6d81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad3890900000006f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28113f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r7, 0x500e, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x645f, 0x200, 0x8003, 0x202}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 3m23.372112659s ago: executing program 4 (id=1275): r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}}) 3m23.371731819s ago: executing program 4 (id=1276): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x190, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3m23.333248196s ago: executing program 4 (id=1277): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (rerun: 64) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x225) 3m23.202231551s ago: executing program 4 (id=1278): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x190, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (fail_nth: 1) 3m22.991170571s ago: executing program 4 (id=1279): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x190, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./bus/file0\x00', &(0x7f0000002100), 0x1000000, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="59850f8a40f2d35fb5427431b59576276c8bad487fc256fe02de92df1606cc34b3a89ef61ed0da5d6238eb4c8a7e52242159"]) readlink(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)=""/143, 0x8f) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x2, {0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xee01, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000140)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', r2, r3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r5 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)=']', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r5], 0x10}, 0x0) recvmmsg$unix(r7, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3m22.950536788s ago: executing program 37 (id=1279): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x190, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./bus/file0\x00', &(0x7f0000002100), 0x1000000, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="59850f8a40f2d35fb5427431b59576276c8bad487fc256fe02de92df1606cc34b3a89ef61ed0da5d6238eb4c8a7e52242159"]) readlink(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)=""/143, 0x8f) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x2, {0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xee01, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000140)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', r2, r3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r5 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)=']', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r5], 0x10}, 0x0) recvmmsg$unix(r7, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m50.921246866s ago: executing program 6 (id=1466): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newtaction={0x41, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000400)={0xfefe, 0x5, 0x8, 0x800c, 0xb, "0100000000000080"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x26, 0x10000180}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r6, &(0x7f0000000000)=""/40, 0x28) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x4, @mcast2, 0x5}}, 0x2, 0x9, 0x2, 0x34, 0x1}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={r8, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0xdc05, @private0}]}, &(0x7f0000000000)=0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000030a08000a00", @ANYRES32, @ANYBLOB="b1cc811b30dbfc9557314aaeb4aee451d6a46294174575a93daa5fcd8738d5f3a377e5d431ab"], 0x48}}, 0x0) 2m49.899997518s ago: executing program 6 (id=1473): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x27000, 0x0, 0xffff1dd2, 0x2}, 0x1c) r1 = openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee000000", @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="400002"], 0x5c}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) io_uring_setup(0x7d94, 0x0) open(0x0, 0x60840, 0x1d2) syz_open_procfs(0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() openat$sw_sync(0xffffff9c, &(0x7f00000001c0), 0x40001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x4) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000080)={0x1, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m48.828204927s ago: executing program 6 (id=1484): r0 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000002c0)) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@md0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x2e) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000300)='smb3\x00', 0x81432, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@remote, 0x1, 0x1, 0x3, 0x5, 0x9, 0xd}, 0x20) fcntl$notify(r2, 0x402, 0x8000003d) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)='./file1\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = dup3(r3, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) pselect6(0x40, &(0x7f0000000180)={0x7, 0xdba, 0x81, 0x1, 0x0, 0x1, 0x9, 0xffff}, &(0x7f0000000200)={0x40, 0x1, 0x7ff, 0xf17, 0x8d, 0xf2, 0x3, 0x4}, 0x0, &(0x7f0000000340)={0x0, 0x3938700}, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x1000000}], 0xf41, 0x0, 0x0) 2m48.761886248s ago: executing program 6 (id=1486): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @local}}}, 0x104) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r2 = epoll_create1(0x0) syz_emit_ethernet(0x22, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa9f81a45f49f1c916c0d3826d6607aabb0800450c00140004df228ebb46c1d93b9c77fd2ac500000089907800800000ffffffff"], 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x30000009}) epoll_pwait2(r2, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) r6 = getpid() sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs(r6, &(0x7f0000000480)='net/snmp\x00') write$P9_RLERRORu(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYBLOB="a4d1c56c30ee84"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="b36666646e6f3d0000000000000000", @ANYRESHEX=r5, @ANYBLOB=',k']) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0xff, 0x4, 0x53e0e040, 0x7, 0x0, 0x14f39802, 0x1, 0x5}, &(0x7f0000000200)={0x9, 0x4, 0xfff, 0x8, 0x60, 0x8, 0x4, 0x9}, &(0x7f0000000240)={0x8, 0x0, 0x3, 0x5, 0x8, 0x8, 0x81, 0xd}, &(0x7f00000003c0)={r7, r8+60000000}, &(0x7f0000000440)={&(0x7f0000000400)={[0x7fff, 0xfff]}, 0x8}) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x7e, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) pidfd_getfd(r12, r10, 0x0) setrlimit(0x7, &(0x7f0000000200)={0x5, 0x7}) socket$inet(0x2, 0x2000000080002, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) writev(r9, &(0x7f0000000280)=[{&(0x7f0000000300)="e7", 0x1}], 0x1) 2m48.621766227s ago: executing program 6 (id=1487): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000), 0x20a01, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='trylock none'], 0xd) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x3a, 0x45, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x8601, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e000000100081", 0x7}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)={0xb0000005}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000140)={0x9505, 0x1, 'client1\x00', 0x80000000, "0000000000a85700", "8cc9468f3506aadde8ecc3b9c558a81f9bb0d36505b4d74d52b32fae35a0ff5c", 0x0, 0x3}) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x200000, &(0x7f0000000400)) mkdirat(r1, &(0x7f00000003c0)='./file1\x00', 0x1a2) chdir(&(0x7f0000000080)='./file1\x00') r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB="031f00163fdd601f165f02e1b2dfe74b0ca8ad0000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES16=r5], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000200)="299f28552562b78f9fdf6decac", &(0x7f0000000280)=""/44, &(0x7f0000000440)="1c217595b6ada17186e5df240b10915996f7dea7c8ac1c75cb6f804e2c1cc090792455026bfb591eef8a26fa7f16848c1576c8135112b7abbd3b46b335c6456a1cdb141ca97a121cfc5fd90611050e417e98dedd6292f9fea22ea6f02b253a691d3e01ccf4e4e5b8dfd07d409aa9a2213670630669a7800e191258d650e57c0928d7511ea9eb9ace959430fb0ba9abb01f20fe2fe17685173153636f117c0e04f1597fda4e17626d8a4cdc0aa38e4c1bf9a79eee1c885d6e559d", &(0x7f0000000500)="fbb2487db2266d756eae222acf212d337e5d999cc87d48919991848fbf6237db56bcef0d50d2aa74a424730c519906516d001673489610b85d54bcf48f883715609229298c4e4c64", 0xfffffffe, r7}, 0x38) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r8, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000340), 0x28200, 0x0) writev(r9, &(0x7f0000000b80)=[{&(0x7f0000000240)="04000000000203", 0x7}, {&(0x7f0000000600)="87a7d2f0f6bc16", 0x7}], 0x2) setpgid(0x0, r8) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) 2m48.541840771s ago: executing program 6 (id=1488): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) dup(r0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x90009427, &(0x7f0000000180)) write$UHID_INPUT(r2, &(0x7f0000000000)={0x17, {"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", 0x1000}}, 0x1006) 2m33.500009056s ago: executing program 38 (id=1488): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) dup(r0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x90009427, &(0x7f0000000180)) write$UHID_INPUT(r2, &(0x7f0000000000)={0x17, {"a2e3ad214fc752f91b5d0a0787f70e06d038e7ff7fc6e5539b326d078b089b0708385d090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d170708c523c921b1b5b31320d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a1047bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ca4d24ad92f243941ed274f12a29ff962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d9583d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4dfafffffff48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483c01b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9b97474a5966a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715680700000000000000ca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe193d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c6ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd01000100807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034ef8e9745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741258c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a941f0000005f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174f2f1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60a842b09eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f49013a3a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000b2c037ba30e1ef450000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000600", 0x1000}}, 0x1006) 5.020594571s ago: executing program 8 (id=2694): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000040)=0x2, 0x4) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x480}}, 0x0) read$alg(r3, &(0x7f0000000380)=""/171, 0xab) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0xcce, 0x2000) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000100)=""/216) 4.131379217s ago: executing program 8 (id=2698): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004a00003c0000000000069078ac141400ac1e0001070f08e0000002ac1414bbe0000002440400000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009077fff7"], 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0xac, 0x18840}}], 0x1, 0x8000) r5 = io_uring_setup(0x4668, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x1, 0xa2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b2e4331211bbbffbf20c32e9f4c5bd6a090f9c3787608471"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090200000000000000000f000000050030000000000008000300", @ANYRES32=r8], 0x24}}, 0x0) r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r10, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) dup3(0xffffffffffffffff, r10, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff}}, 0x20}}, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r11, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fc}, 0xe) r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r12, 0x400448c8, &(0x7f0000000340)={r11, r11, 0xb, 0x0, 0x0, 0x8, 0xb6, 0x7f, 0x7, 0x801, 0x2, 0x10, 'syz0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.286301838s ago: executing program 8 (id=2707): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x89}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x8006, @private2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1f, 0x6, @private1}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f000013d000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mknodat(r2, 0x0, 0x8000, 0x9) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x2, 0x21, 0x1, 0x200, &(0x7f00000003c0)="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"}) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) 900.122696ms ago: executing program 8 (id=2708): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x20040) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) io_uring_setup(0x7d94, 0x0) open(0x0, 0x60840, 0x1d2) syz_open_procfs(0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() openat$sw_sync(0xffffff9c, &(0x7f00000001c0), 0x40001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x4) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000080)={0x1, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 898.838106ms ago: executing program 9 (id=2713): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x4004000000000002, 0x981000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x1c, "2000001ea89de2b7fb0000e60080b8785d97000100000000000000df000000000000000000000000000011000e00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a910bbc6af823aaffb177d3d458dd4992861acca00000000000000000000000100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1, 0xd93]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000340)=""/181, 0xb5}], 0x1, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000004c0)={0x18, 0x2, 0x0, "dd3e1ddbc8e90cb57346e6c94dfa5bf04abc3e8fc2976136531a27a41db375d7"}) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) socketpair(0x9, 0x80000, 0xf8, &(0x7f0000001600)={0xffffffffffffffff}) bind(r6, &(0x7f0000001640)=@caif=@dgm={0x25, 0x3, 0xf3}, 0x80) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x800, @local}, 0x10, 0x0, 0x0, &(0x7f0000001500)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0xfffff000}, &(0x7f00000000c0)=0x72, &(0x7f0000000100)=0x8, 0x7fffffffffffffff, 0x10000, 0x81, 0x0, 0x4, 0xffffffffffffff60}}, @rdma_args={0x48, 0x114, 0x1, {{0x40, 0x7}, {&(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001400)=[{&(0x7f0000001140)=""/233, 0xe9}, {&(0x7f0000001240)=""/22, 0x16}, {&(0x7f0000001280)=""/164, 0xa4}, {&(0x7f0000001340)=""/99, 0x63}, {&(0x7f00000013c0)=""/60, 0x3c}], 0x5, 0x2, 0x87d8}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000001480)=""/18, 0x12}, &(0x7f00000014c0), 0x18}}], 0xcc, 0x4001}, 0x0) 898.617926ms ago: executing program 8 (id=2714): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04101a0c"], 0x7) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fcff00040600005f35000000850000004100"/32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1000}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x2ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x2, 0x1}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2111, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 898.424675ms ago: executing program 0 (id=2715): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x722) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4004af61, &(0x7f0000000940)) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mmap$xdp(&(0x7f0000573000/0x2000)=nil, 0x2000, 0x6, 0x30, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000300)='map\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000002f3c69889811bf5ad2c3744ccab8e266850b307ab5b32953da70aca0122a77af8d6e3addafcb15e6d041d400a2412f11456c85dab38c96f4a393fc7e0cddac9cf3e8809835db1b59df3760cd02b3bc2bcc958ba022cb15e563049ac38dca4b49467aa6b5871cf9ae1698696b40a2f4242f7d78768dbf800656991e0f13aae9d0b60", @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000140001800d0001007564703a73797a3000000000"], 0x28}}, 0x800) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r9, 0x0, 0x0}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000740000007400000005000000030000000000000c04000000020000000000000b040000000400000000000001000000000ecfa45215ae359053000007000000000000000003000004b7b600000a00000004000000bb0e0000040000000000000099dc0000060000000000000002000000060000000000000e030000000200000000002ede00b9452b793c4b8a88abaa7272dd26de2c3b76e8281f306b9af9f37c5e66a27b2c39990c18548c1eba843c17e96be9a7ab1430e517207a973ad36a435af5da9b209034f0acb4f64368c8df9758faf9988d84886f3335a8d7e43be07d32112413e98b500c"], &(0x7f0000000440)=""/87, 0x91, 0x57, 0x1, 0x6, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) 898.294279ms ago: executing program 9 (id=2716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x300, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}, 0x1, 0x0, 0x0, 0x4004}, 0x20000008) 894.995031ms ago: executing program 9 (id=2717): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) io_uring_setup(0x2c8c, &(0x7f0000000380)={0x0, 0x4eef, 0x2, 0x0, 0xffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) pipe2(0x0, 0x4800) ioctl$KDFONTOP_GET(r0, 0x560f, 0x0) 894.695369ms ago: executing program 8 (id=2719): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init1(0x80000) r1 = getpid() r2 = socket$inet(0x2, 0xa, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c00000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000003f0300000000000000000000000000000000000000000000000000000000000000000000000000000001000a001000010000000000"], 0xc0}}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000100)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x38) socket$pppoe(0x18, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, r7, 0x25, 0x8, @val=@iter={0x0}}, 0x20) 894.486174ms ago: executing program 0 (id=2720): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0041000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r2, @ANYBLOB="14000600fe8000000000000000000000000000151400070020010000000000000000000000000000abea2577fa68e7e2f852690fdba45f9f43f723a525b2f587cc0c6aacccbd550fbe78"], 0x68}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c00018006000600800a0000b8200280b4201580ad2001"], 0x20dc}}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x922, 0x8000, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{}, 0x3c, 0x2, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r6 = socket(0x200000100000011, 0x803, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000780)='\xef~\r\x8c\x93NT\x1b\x0e\xc0o\xe1V\xbbEZ\xf2\x1d\xba\xe3\xf7te\x96Y\xc6d\x1f\xbc\x05\x0f\xa7hh^\x97\x96!d;n5\xfc\xae\x9fZ\xd8\xa8A\xfc\xab\xa5\x01\x8a\x8a\xe2I,\xe0\x97\x9e\xf5g\xa3\x19^\xc4oR\a\r\'#(\x9d\x1dKp!\xa8\xc2\xe3\xb8\x8et\xa8\x0fh\x88\xfc\xe2\x13\xdbe0\x99\xcf<\xdf\f\xa6\x02\xaafT\xc5(\a\x85\x8e\xdbn\xd7\x8f)\xads\xda\xbbZm D\x9ej\x18\xae\x94\x13\'\xa5\xa9\xfa\xaa~\x1d\xb32\\ \x98\xfd\xc5i\xfc\xf5g\xac3K\x82cD:\xe8\xcdz:\xe9Y\xef\x0e\xcb\x03\xe7R\xdd.\xa0\xb0W\xf9Q\xcc\x7f7\b\xfe\xd7\x8a\x12\x94H\xc4&\x962\x93\xcfhE\xa5\x11&H\xe3\x95\x98\x84\x90\xf3l\xc1\x95\xbf3|z\xc2\x95j\x04\xd2\x87\xc9c\x94ky\xc7\xfaL\xd0\x9bP\xd59/\x1b\x10\x18\xdd\xa0\xcdw\xa5\xe8\xda[\x86\xd6\xab0x0}) sendto$packet(r6, &(0x7f0000000100)="4d01000000000000000100e566a5dea20414090b", 0x14, 0x64980, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x6}, 0x14) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x23}}) r12 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r12, 0x40044160, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x48}}, 0x0) 846.598054ms ago: executing program 9 (id=2721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0xffff0000, 0x2000c094}, 0x4040084) 845.524324ms ago: executing program 0 (id=2722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7200ffdbdf", @ANYRES32=r9], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x2084) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="50004000f4", @ANYRES16=r6, @ANYBLOB="040029bd7000fddbdf250a00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900ff0300006700000005000800050000000a000600ffffffffffff00000a00060008021100000000000800090005ac0f00"], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000800) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x6db6ec49e3ab5510}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x400c084) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) brk(0x5ede6002) brk(0x5ede6000) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xa, 0xfff3}, {0x0, 0xfff1}, {0xffe0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x4041080) syz_open_dev$sndctrl(&(0x7f0000000480), 0x2, 0x102) 776.528099ms ago: executing program 9 (id=2723): r0 = openat$dir(0xffffff9c, &(0x7f0000000300)='./file0\x00', 0x412002, 0x1) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x302) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) r2 = io_uring_setup(0x6b66, &(0x7f0000000040)={0x0, 0xffbffffc, 0x400, 0x0, 0x3bd}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x52}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r4) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000011"], 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) close(0x3) syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 720.171768ms ago: executing program 9 (id=2725): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x20040) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) io_uring_setup(0x7d94, 0x0) open(0x0, 0x60840, 0x1d2) syz_open_procfs(0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() openat$sw_sync(0xffffff9c, &(0x7f00000001c0), 0x40001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x4) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000080)={0x1, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 719.930949ms ago: executing program 7 (id=2726): r0 = socket$pppoe(0x18, 0x1, 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) r1 = gettid() getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) r2 = open(0x0, 0x242040, 0x0) flock(r2, 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0x5, 0x52, {}, 0x0, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0xc05c5340, &(0x7f0000000440)) tkill(r1, 0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x426a00, 0x0) 706.430778ms ago: executing program 7 (id=2727): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000000740)=[{0x0, 0xfdc5}, {&(0x7f0000000500)=""/97, 0x61}], 0x2, 0x7fff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local}) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000040)={0x9, 0xc}) close_range(r2, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xe562f56fd3a08839}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0xa0}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x0) 638.975932ms ago: executing program 0 (id=2728): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x5, 0x3, 0x5, 0x400000, 0x2, 0x4}, 0x1c) (async) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r3 = dup2(r2, r2) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) write$tun(r3, &(0x7f0000000040)=ANY=[], 0x46) (async) recvmmsg(r3, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) 638.688496ms ago: executing program 0 (id=2729): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) (fail_nth: 6) 510.172465ms ago: executing program 0 (id=2730): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) (fail_nth: 8) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='objagg_obj_create\x00', r6}, 0x18) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4090000000000006111100000000000851000000200f02ec84e00000800000095000000000000009b00000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r0, 0x0, 0x1) fchdir(r7) 509.916385ms ago: executing program 7 (id=2731): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x3) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) r2 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) syz_genetlink_get_family_id$devlink(0x0, r3) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x9) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close(0x3) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 84.765116ms ago: executing program 7 (id=2732): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b200, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0xc0105702, &(0x7f0000000040)=0x8001) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x6c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x3800048, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = getgid() write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78, 0x0, r3, {0x7, 0x9, 0x0, {0x0, 0x3, 0x6a, 0x7, 0x0, 0x5, 0x4, 0x8001, 0x2b, 0x4000, 0x0, 0xee01, r4, 0x8}}}, 0x78) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts_2292={{0x30, 0x29, 0xb, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x23}}]}}}], 0x30}, 0x0) (async) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts_2292={{0x30, 0x29, 0xb, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x23}}]}}}], 0x30}, 0x0) 530.363µs ago: executing program 7 (id=2733): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @ldst, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 0s ago: executing program 7 (id=2734): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800dfffffffff54a89e8c114f9200"/27], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = openat$sndseq(0xffffff9c, &(0x7f00000001c0), 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000400)={0xfffffffa, 0x1, 0x4, {0x80, 0x5}, 0xe95, 0x46}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x19e41e7a, 0x20000000, 0x4, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xa08}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = gettid() prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r4, r7, 0x0, 0x6, &(0x7f0000000180)='!(-@}\x00'}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$inet6(0xa, 0x1, 0x8000) sendto$inet6(r10, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe", 0x1f}], 0x1}}], 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3901323030302e75"]) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000340)='0', 0x1) kernel console output (not intermixed with test programs): 75763][T14555] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 436.175769][T14555] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 436.175775][T14555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 436.175787][T14555] [ 436.404088][T14558] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000003' [ 436.693051][ T7440] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 436.782916][ T5955] Bluetooth: hci1: command 0x0406 tx timeout [ 436.854190][ T7440] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 436.857725][ T7440] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.865030][ T7440] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 436.868569][ T7440] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.871619][ T7440] usb 12-1: Product: syz [ 436.874307][ T7440] usb 12-1: Manufacturer: syz [ 436.876097][ T7440] usb 12-1: SerialNumber: syz [ 436.894151][T14564] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 437.103919][ T7440] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 437.106488][T14564] __nla_validate_parse: 12 callbacks suppressed [ 437.106498][T14564] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2252'. [ 437.111974][T14564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.116465][T14564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.119250][T14564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.121794][T14564] mac80211_hwsim hwsim20 wlan1: left promiscuous mode [ 437.175992][T14563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.179245][ T7440] usb 12-1: USB disconnect, device number 14 [ 437.181685][ T7440] usblp0: removed [ 437.188304][T14583] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2258'. [ 437.190950][T14585] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2258'. [ 437.638134][ T40] audit: type=1326 audit(1742867610.925:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.8.2262" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 437.793923][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2263'. [ 437.805674][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2263'. [ 438.558258][ T5992] Process accounting resumed [ 439.345266][T14627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2272'. [ 439.350664][T14627] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2272'. [ 439.504274][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.506436][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.647357][T14646] bridge_slave_0: left allmulticast mode [ 439.649395][T14646] bridge_slave_0: left promiscuous mode [ 439.651472][T14646] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.667189][T14646] bridge_slave_1: left allmulticast mode [ 439.669097][T14646] bridge_slave_1: left promiscuous mode [ 439.670667][T14646] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.686537][T14646] bond0: (slave bond_slave_0): Releasing backup interface [ 439.702965][T14646] bond0: (slave bond_slave_1): Releasing backup interface [ 439.716164][T14646] team_slave_0: left allmulticast mode [ 439.726166][T14646] team0: Port device team_slave_0 removed [ 439.728553][T14646] team_slave_1: left allmulticast mode [ 439.743291][T14646] team0: Port device team_slave_1 removed [ 439.745637][T14646] geneve0: left allmulticast mode [ 439.763098][T14646] team0: Port device geneve0 removed [ 439.765387][T14646] bond1: (slave gretap1): Releasing active interface [ 439.826988][T14649] vlan0: entered promiscuous mode [ 440.263313][T14657] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.295977][T14660] EXT4-fs error: 1 callbacks suppressed [ 440.295992][T14660] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 440.303352][T14661] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 440.352139][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2282'. [ 440.356245][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2282'. [ 440.524968][ T40] audit: type=1326 audit(1742867613.815:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14667 comm="syz.9.2285" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x0 [ 440.536096][T14673] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:10: iget: checksum invalid [ 440.691849][T14681] bond2: entered promiscuous mode [ 440.693725][T14681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.062829][ T40] audit: type=1326 audit(1742867614.345:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.7.2292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 441.082818][ T40] audit: type=1326 audit(1742867614.345:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.7.2292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 441.088684][ T40] audit: type=1326 audit(1742867614.345:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.7.2292" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 441.094668][ T40] audit: type=1326 audit(1742867614.345:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.7.2292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 441.100340][ T40] audit: type=1326 audit(1742867614.345:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.7.2292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 441.106361][ T40] audit: type=1326 audit(1742867614.345:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.7.2292" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 441.112040][ T40] audit: type=1326 audit(1742867614.345:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.7.2292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 441.118724][ T40] audit: type=1326 audit(1742867614.345:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.7.2292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 441.125307][ T40] audit: type=1326 audit(1742867614.345:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.7.2292" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 441.448711][T14698] FAULT_INJECTION: forcing a failure. [ 441.448711][T14698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.452376][T14698] CPU: 0 UID: 0 PID: 14698 Comm: syz.8.2294 Not tainted 6.14.0-syzkaller #0 [ 441.452389][T14698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 441.452396][T14698] Call Trace: [ 441.452400][T14698] [ 441.452404][T14698] dump_stack_lvl+0x16c/0x1f0 [ 441.452422][T14698] should_fail_ex+0x50a/0x650 [ 441.452435][T14698] _copy_to_user+0x32/0xd0 [ 441.452448][T14698] simple_read_from_buffer+0xd0/0x160 [ 441.452463][T14698] proc_fail_nth_read+0x198/0x270 [ 441.452477][T14698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.452492][T14698] ? rw_verify_area+0xcf/0x680 [ 441.452505][T14698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.452517][T14698] vfs_read+0x1df/0xbf0 [ 441.452530][T14698] ? __fget_files+0x1fc/0x3a0 [ 441.452545][T14698] ? __pfx___mutex_lock+0x10/0x10 [ 441.452560][T14698] ? __pfx_vfs_read+0x10/0x10 [ 441.452577][T14698] ? __fget_files+0x206/0x3a0 [ 441.452594][T14698] ksys_read+0x12b/0x250 [ 441.452607][T14698] ? __pfx_ksys_read+0x10/0x10 [ 441.452624][T14698] __do_fast_syscall_32+0x73/0x120 [ 441.452640][T14698] do_fast_syscall_32+0x32/0x80 [ 441.452655][T14698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.452671][T14698] RIP: 0023:0xf73ee579 [ 441.452679][T14698] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 441.452699][T14698] RSP: 002b:00000000f5076590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 441.452710][T14698] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5076620 [ 441.452716][T14698] RDX: 000000000000000f RSI: 00000000f73dcff4 RDI: 0000000000000000 [ 441.452722][T14698] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 441.452727][T14698] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 441.452733][T14698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.452745][T14698] [ 441.506856][T14700] FAULT_INJECTION: forcing a failure. [ 441.506856][T14700] name failslab, interval 1, probability 0, space 0, times 0 [ 441.511262][T14700] CPU: 1 UID: 0 PID: 14700 Comm: syz.0.2295 Not tainted 6.14.0-syzkaller #0 [ 441.511282][T14700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 441.511292][T14700] Call Trace: [ 441.511298][T14700] [ 441.511304][T14700] dump_stack_lvl+0x16c/0x1f0 [ 441.511322][T14700] should_fail_ex+0x50a/0x650 [ 441.511333][T14700] ? fs_reclaim_acquire+0xae/0x150 [ 441.511347][T14700] should_failslab+0xc2/0x120 [ 441.511358][T14700] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 441.511374][T14700] ? __alloc_skb+0x2b1/0x380 [ 441.511390][T14700] __alloc_skb+0x2b1/0x380 [ 441.511405][T14700] ? __pfx___alloc_skb+0x10/0x10 [ 441.511420][T14700] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 441.511439][T14700] netlink_ack+0x15f/0xb80 [ 441.511458][T14700] netlink_rcv_skb+0x348/0x440 [ 441.511473][T14700] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 441.511489][T14700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.511511][T14700] ? netlink_deliver_tap+0x1ae/0xd30 [ 441.511527][T14700] netlink_unicast+0x53c/0x7f0 [ 441.511544][T14700] ? __pfx_netlink_unicast+0x10/0x10 [ 441.511559][T14700] ? __phys_addr_symbol+0x30/0x80 [ 441.511569][T14700] ? __check_object_size+0x488/0x710 [ 441.511581][T14700] netlink_sendmsg+0x8b8/0xd70 [ 441.511598][T14700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.511617][T14700] ____sys_sendmsg+0xaaf/0xc90 [ 441.511631][T14700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.511642][T14700] ? get_compat_msghdr+0x11b/0x170 [ 441.511661][T14700] ___sys_sendmsg+0x135/0x1e0 [ 441.511677][T14700] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.511698][T14700] ? __pfx_lock_release+0x10/0x10 [ 441.511712][T14700] ? trace_lock_acquire+0x14e/0x1f0 [ 441.511727][T14700] ? __fget_files+0x206/0x3a0 [ 441.511745][T14700] __sys_sendmsg+0x16e/0x220 [ 441.511754][T14700] ? __pfx___sys_sendmsg+0x10/0x10 [ 441.511771][T14700] __do_fast_syscall_32+0x73/0x120 [ 441.511787][T14700] do_fast_syscall_32+0x32/0x80 [ 441.511802][T14700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.511819][T14700] RIP: 0023:0xf7fb4579 [ 441.511828][T14700] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 441.511837][T14700] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 441.511847][T14700] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 441.511853][T14700] RDX: 0000000000044080 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.511859][T14700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.511865][T14700] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 441.511871][T14700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.511882][T14700] [ 441.642829][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.645486][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.647976][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.650256][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.652343][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.654681][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.657189][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.659270][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.661683][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.664543][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.666919][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.669297][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.671489][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.673507][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.675535][ T1323] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 441.680986][ T1323] hid-generic FFF9:0000:0203.000E: hidraw1: HID v0.00 Device [syz0] on syz1 [ 441.690530][T12320] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1120: comm udevd: iget: checksum invalid [ 441.792537][T14709] FAULT_INJECTION: forcing a failure. [ 441.792537][T14709] name failslab, interval 1, probability 0, space 0, times 0 [ 441.797575][T14709] CPU: 0 UID: 0 PID: 14709 Comm: syz.8.2298 Not tainted 6.14.0-syzkaller #0 [ 441.797590][T14709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 441.797597][T14709] Call Trace: [ 441.797601][T14709] [ 441.797605][T14709] dump_stack_lvl+0x16c/0x1f0 [ 441.797624][T14709] should_fail_ex+0x50a/0x650 [ 441.797634][T14709] ? fs_reclaim_acquire+0xae/0x150 [ 441.797649][T14709] ? genl_start+0x1e7/0x960 [ 441.797658][T14709] should_failslab+0xc2/0x120 [ 441.797668][T14709] __kmalloc_cache_noprof+0x68/0x410 [ 441.797683][T14709] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 441.797697][T14709] genl_start+0x1e7/0x960 [ 441.797708][T14709] __netlink_dump_start+0x607/0x970 [ 441.797725][T14709] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 441.797738][T14709] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 441.797748][T14709] ? genl_op_from_small+0x25/0x440 [ 441.797766][T14709] ? __pfx_genl_get_cmd+0x10/0x10 [ 441.797781][T14709] ? __pfx_genl_start+0x10/0x10 [ 441.797790][T14709] ? __pfx_genl_dumpit+0x10/0x10 [ 441.797799][T14709] ? __pfx_genl_done+0x10/0x10 [ 441.797821][T14709] ? __radix_tree_lookup+0x21f/0x2c0 [ 441.797839][T14709] genl_rcv_msg+0x470/0x800 [ 441.797856][T14709] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.797871][T14709] ? __pfx_thermal_genl_cmd_dumpit+0x10/0x10 [ 441.797888][T14709] ? __pfx___lock_acquire+0x10/0x10 [ 441.797905][T14709] netlink_rcv_skb+0x16b/0x440 [ 441.797920][T14709] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.797935][T14709] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.797956][T14709] ? down_read+0xc9/0x330 [ 441.797971][T14709] ? __pfx_down_read+0x10/0x10 [ 441.797987][T14709] ? netlink_deliver_tap+0x1ae/0xd30 [ 441.798003][T14709] genl_rcv+0x28/0x40 [ 441.798012][T14709] netlink_unicast+0x53c/0x7f0 [ 441.798029][T14709] ? __pfx_netlink_unicast+0x10/0x10 [ 441.798044][T14709] ? __phys_addr_symbol+0x30/0x80 [ 441.798055][T14709] ? __check_object_size+0x488/0x710 [ 441.798067][T14709] netlink_sendmsg+0x8b8/0xd70 [ 441.798085][T14709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.798105][T14709] sock_write_iter+0x4fe/0x5b0 [ 441.798118][T14709] ? __pfx_sock_write_iter+0x10/0x10 [ 441.798135][T14709] ? bpf_lsm_file_permission+0x9/0x10 [ 441.798150][T14709] ? security_file_permission+0x71/0x210 [ 441.798165][T14709] ? rw_verify_area+0xcf/0x680 [ 441.798178][T14709] vfs_write+0x5ae/0x1150 [ 441.798192][T14709] ? __pfx_sock_write_iter+0x10/0x10 [ 441.798206][T14709] ? __pfx_vfs_write+0x10/0x10 [ 441.798220][T14709] ? __fget_files+0x40/0x3a0 [ 441.798241][T14709] ksys_write+0x207/0x250 [ 441.798255][T14709] ? __pfx_ksys_write+0x10/0x10 [ 441.798272][T14709] __do_fast_syscall_32+0x73/0x120 [ 441.798288][T14709] do_fast_syscall_32+0x32/0x80 [ 441.798303][T14709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.798320][T14709] RIP: 0023:0xf73ee579 [ 441.798328][T14709] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 441.798338][T14709] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 441.798349][T14709] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 441.798355][T14709] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.798361][T14709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.798366][T14709] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 441.798372][T14709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.798384][T14709] [ 441.925290][T14713] random: crng reseeded on system resumption [ 441.967939][T14721] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2302'. [ 442.089541][T14725] kernel profiling enabled (shift: 7) [ 442.252932][ T1323] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 442.402791][ T1323] usb 12-1: Using ep0 maxpacket: 8 [ 442.405868][ T1323] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.408951][ T1323] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 442.411846][ T1323] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 442.415170][ T1323] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 442.418467][ T1323] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 442.421229][ T1323] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.426018][ T1323] hub 12-1:1.0: bad descriptor, ignoring hub [ 442.427746][ T1323] hub 12-1:1.0: probe with driver hub failed with error -5 [ 442.429925][ T1323] cdc_wdm 12-1:1.0: skipping garbage [ 442.431360][ T1323] cdc_wdm 12-1:1.0: skipping garbage [ 442.433505][ T1323] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 442.435398][ T1323] cdc_wdm 12-1:1.0: Unknown control protocol [ 442.446023][T12320] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1120: comm udevd: iget: checksum invalid [ 443.324566][T14723] usb 12-1: reset high-speed USB device number 15 using dummy_hcd [ 443.426862][T14751] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:4: iget: checksum invalid [ 443.438918][T14752] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:4: iget: checksum invalid [ 443.763154][ T6010] usb 12-1: USB disconnect, device number 15 [ 444.585623][T14766] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:13: iget: checksum invalid [ 444.597433][T14768] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:13: iget: checksum invalid [ 445.329804][T14777] lo speed is unknown, defaulting to 1000 [ 445.458752][T14783] lo speed is unknown, defaulting to 1000 [ 445.467609][T14781] __nla_validate_parse: 1 callbacks suppressed [ 445.467621][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2320'. [ 445.474155][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2320'. [ 445.477669][T14784] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:10: iget: checksum invalid [ 445.482034][T14785] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:13: iget: checksum invalid [ 445.487369][T14786] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:13: iget: checksum invalid [ 445.491799][T14787] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:13: iget: checksum invalid [ 445.671208][T14796] kAFS: unparsable volume name [ 445.778800][T14800] FAULT_INJECTION: forcing a failure. [ 445.778800][T14800] name failslab, interval 1, probability 0, space 0, times 0 [ 445.782155][T14800] CPU: 0 UID: 0 PID: 14800 Comm: syz.8.2324 Not tainted 6.14.0-syzkaller #0 [ 445.782169][T14800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.782176][T14800] Call Trace: [ 445.782180][T14800] [ 445.782184][T14800] dump_stack_lvl+0x16c/0x1f0 [ 445.782203][T14800] should_fail_ex+0x50a/0x650 [ 445.782218][T14800] ? fs_reclaim_acquire+0xae/0x150 [ 445.782232][T14800] ? tomoyo_encode2+0x100/0x3e0 [ 445.782249][T14800] should_failslab+0xc2/0x120 [ 445.782260][T14800] __kmalloc_noprof+0xcb/0x510 [ 445.782277][T14800] ? rcu_is_watching+0x12/0xc0 [ 445.782290][T14800] tomoyo_encode2+0x100/0x3e0 [ 445.782306][T14800] tomoyo_encode+0x29/0x50 [ 445.782319][T14800] tomoyo_realpath_from_path+0x19d/0x720 [ 445.782334][T14800] ? tomoyo_path_number_perm+0x235/0x590 [ 445.782348][T14800] tomoyo_path_number_perm+0x248/0x590 [ 445.782360][T14800] ? tomoyo_path_number_perm+0x235/0x590 [ 445.782373][T14800] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 445.782397][T14800] ? __pfx_lock_release+0x10/0x10 [ 445.782411][T14800] ? trace_lock_acquire+0x14e/0x1f0 [ 445.782424][T14800] ? lock_acquire+0x2f/0xb0 [ 445.782436][T14800] ? __fget_files+0x40/0x3a0 [ 445.782452][T14800] ? __fget_files+0x206/0x3a0 [ 445.782468][T14800] security_file_ioctl_compat+0x9b/0x240 [ 445.782483][T14800] __do_compat_sys_ioctl+0x4e/0x2c0 [ 445.782496][T14800] __do_fast_syscall_32+0x73/0x120 [ 445.782513][T14800] do_fast_syscall_32+0x32/0x80 [ 445.782528][T14800] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.782545][T14800] RIP: 0023:0xf73ee579 [ 445.782553][T14800] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 445.782563][T14800] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 445.782573][T14800] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800448d4 [ 445.782579][T14800] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.782585][T14800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.782590][T14800] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 445.782596][T14800] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.782608][T14800] [ 445.782616][T14800] ERROR: Out of memory at tomoyo_realpath_from_path. [ 445.882424][T14804] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:4: iget: checksum invalid [ 445.887612][T14805] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:4: iget: checksum invalid [ 446.237184][T14812] netlink: 'syz.7.2328': attribute type 4 has an invalid length. [ 446.241237][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2327'. [ 446.247512][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2327'. [ 446.252771][T14813] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 446.257195][T14814] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 446.264883][T14815] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 446.268903][T14816] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 446.321054][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 446.321064][ T40] audit: type=1326 audit(1742867619.605:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz.8.2330" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 446.373160][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2331'. [ 446.605988][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2335'. [ 447.318990][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2339'. [ 447.324192][T14858] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2339'. [ 447.372236][T14865] FAULT_INJECTION: forcing a failure. [ 447.372236][T14865] name failslab, interval 1, probability 0, space 0, times 0 [ 447.378157][T14865] CPU: 0 UID: 0 PID: 14865 Comm: syz.9.2340 Not tainted 6.14.0-syzkaller #0 [ 447.378172][T14865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 447.378179][T14865] Call Trace: [ 447.378182][T14865] [ 447.378187][T14865] dump_stack_lvl+0x16c/0x1f0 [ 447.378211][T14865] should_fail_ex+0x50a/0x650 [ 447.378222][T14865] ? fs_reclaim_acquire+0xae/0x150 [ 447.378237][T14865] ? f2fs_fill_super+0xf2/0x90c0 [ 447.378251][T14865] should_failslab+0xc2/0x120 [ 447.378261][T14865] __kmalloc_cache_noprof+0x68/0x410 [ 447.378279][T14865] f2fs_fill_super+0xf2/0x90c0 [ 447.378295][T14865] ? __pfx_vsnprintf+0x10/0x10 [ 447.378312][T14865] ? snprintf+0xc8/0x100 [ 447.378325][T14865] ? __pfx_snprintf+0x10/0x10 [ 447.378340][T14865] ? do_raw_spin_lock+0x12d/0x2c0 [ 447.378350][T14865] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.378360][T14865] ? set_blocksize+0x29f/0x350 [ 447.378372][T14865] ? __pfx_f2fs_fill_super+0x10/0x10 [ 447.378386][T14865] ? sb_set_blocksize+0xf6/0x120 [ 447.378398][T14865] ? setup_bdev_super+0x369/0x730 [ 447.378412][T14865] ? __pfx_f2fs_fill_super+0x10/0x10 [ 447.378425][T14865] mount_bdev+0x1e3/0x2d0 [ 447.378439][T14865] ? __pfx_mount_bdev+0x10/0x10 [ 447.378453][T14865] ? apparmor_capable+0x114/0x1d0 [ 447.378465][T14865] ? __pfx_f2fs_mount+0x10/0x10 [ 447.378480][T14865] legacy_get_tree+0x109/0x220 [ 447.378496][T14865] vfs_get_tree+0x8b/0x340 [ 447.378508][T14865] path_mount+0x14e6/0x1f10 [ 447.378524][T14865] ? kmem_cache_free+0x2e2/0x4d0 [ 447.378538][T14865] ? __pfx_path_mount+0x10/0x10 [ 447.378556][T14865] ? putname+0x13c/0x180 [ 447.378567][T14865] __ia32_sys_mount+0x28d/0x310 [ 447.378577][T14865] ? __pfx___ia32_sys_mount+0x10/0x10 [ 447.378591][T14865] __do_fast_syscall_32+0x73/0x120 [ 447.378607][T14865] do_fast_syscall_32+0x32/0x80 [ 447.378622][T14865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.378639][T14865] RIP: 0023:0xf7f72579 [ 447.378647][T14865] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 447.378657][T14865] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 447.378666][T14865] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000080000040 [ 447.378673][T14865] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 447.378679][T14865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.378684][T14865] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 447.378690][T14865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.378702][T14865] [ 448.230903][T14881] bond1: entered promiscuous mode [ 448.233980][T14881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.650944][ T40] audit: type=1326 audit(1742867621.935:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14887 comm="syz.0.2346" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 448.694952][T14890] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2347'. [ 449.418338][T14917] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 449.420553][T14917] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 449.422972][T14917] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 449.425111][T14917] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 449.519660][T14921] VFS: could not find a valid V7 on nullb0. [ 449.664227][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2354'. [ 450.660774][ T40] audit: type=1326 audit(1742867623.945:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.9.2361" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x0 [ 451.534096][T14969] __nla_validate_parse: 1 callbacks suppressed [ 451.534108][T14969] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2371'. [ 451.661550][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2371'. [ 451.697004][T14969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.717153][T14969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.720747][T14969] bond0 (unregistering): Released all slaves [ 451.753112][T14975] FAULT_INJECTION: forcing a failure. [ 451.753112][T14975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.762857][T14975] CPU: 0 UID: 0 PID: 14975 Comm: syz.7.2372 Not tainted 6.14.0-syzkaller #0 [ 451.762883][T14975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 451.762891][T14975] Call Trace: [ 451.762895][T14975] [ 451.762900][T14975] dump_stack_lvl+0x16c/0x1f0 [ 451.762918][T14975] should_fail_ex+0x50a/0x650 [ 451.762931][T14975] _copy_from_user+0x2e/0xd0 [ 451.762943][T14975] snd_ctl_elem_add_compat+0x2fc/0x3f0 [ 451.762957][T14975] snd_ctl_ioctl_compat+0x13b/0x990 [ 451.762969][T14975] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 451.762982][T14975] ? __fget_files+0x206/0x3a0 [ 451.762998][T14975] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 451.763009][T14975] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 451.763023][T14975] __do_fast_syscall_32+0x73/0x120 [ 451.763040][T14975] do_fast_syscall_32+0x32/0x80 [ 451.763055][T14975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 451.763072][T14975] RIP: 0023:0xf743e579 [ 451.763080][T14975] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 451.763090][T14975] RSP: 002b:00000000f50a555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 451.763100][T14975] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c1105517 [ 451.763106][T14975] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.763112][T14975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.763118][T14975] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 451.763124][T14975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.763135][T14975] [ 452.676721][T14985] EXT4-fs error: 21 callbacks suppressed [ 452.676731][T14985] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 452.684479][T14986] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 452.942150][ T40] audit: type=1326 audit(1742867626.225:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14997 comm="syz.8.2379" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 452.993250][T15005] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:14: iget: checksum invalid [ 452.998609][T15006] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 453.002759][T15007] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:14: iget: checksum invalid [ 453.039195][T15009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.054064][T15009] mac80211_hwsim hwsim32 wlan1: left promiscuous mode [ 453.067877][T15008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.718871][T15018] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:10: iget: checksum invalid [ 453.724116][T15019] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:10: iget: checksum invalid [ 453.730864][T15020] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:10: iget: checksum invalid [ 453.735898][T15021] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:14: iget: checksum invalid [ 453.739942][T15023] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:14: iget: checksum invalid [ 454.704969][T15038] netlink: 'syz.8.2387': attribute type 1 has an invalid length. [ 454.707190][T15038] netlink: 'syz.8.2387': attribute type 1 has an invalid length. [ 454.709371][T15038] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2387'. [ 455.115829][T15055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.914184][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2396'. [ 455.925038][ T7440] IPVS: starting estimator thread 0... [ 456.012901][T15074] IPVS: using max 38 ests per chain, 91200 per kthread [ 456.299276][T15081] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 456.834681][T15097] FAULT_INJECTION: forcing a failure. [ 456.834681][T15097] name failslab, interval 1, probability 0, space 0, times 0 [ 456.838233][T15097] CPU: 3 UID: 0 PID: 15097 Comm: syz.7.2404 Not tainted 6.14.0-syzkaller #0 [ 456.838246][T15097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 456.838253][T15097] Call Trace: [ 456.838258][T15097] [ 456.838262][T15097] dump_stack_lvl+0x16c/0x1f0 [ 456.838284][T15097] should_fail_ex+0x50a/0x650 [ 456.838294][T15097] ? fs_reclaim_acquire+0xae/0x150 [ 456.838309][T15097] ? tomoyo_encode2+0x100/0x3e0 [ 456.838323][T15097] should_failslab+0xc2/0x120 [ 456.838334][T15097] __kmalloc_noprof+0xcb/0x510 [ 456.838348][T15097] ? d_absolute_path+0x137/0x1b0 [ 456.838362][T15097] tomoyo_encode2+0x100/0x3e0 [ 456.838378][T15097] tomoyo_encode+0x29/0x50 [ 456.838391][T15097] tomoyo_realpath_from_path+0x19d/0x720 [ 456.838406][T15097] ? tomoyo_path_perm+0x262/0x460 [ 456.838419][T15097] tomoyo_path_perm+0x276/0x460 [ 456.838430][T15097] ? tomoyo_path_perm+0x262/0x460 [ 456.838443][T15097] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 456.838459][T15097] ? lock_acquire+0x2f/0xb0 [ 456.838473][T15097] ? is_bpf_text_address+0x30/0x1a0 [ 456.838498][T15097] ? bpf_ksym_find+0x124/0x1c0 [ 456.838520][T15097] security_inode_getattr+0x116/0x290 [ 456.838533][T15097] vfs_getattr+0x25/0x60 [ 456.838544][T15097] ovl_copy_up_one+0x15a/0x38f0 [ 456.838560][T15097] ? hlock_class+0x4e/0x130 [ 456.838570][T15097] ? mark_lock+0xb5/0xc60 [ 456.838583][T15097] ? hlock_class+0x4e/0x130 [ 456.838593][T15097] ? mark_lock+0xb5/0xc60 [ 456.838606][T15097] ? __pfx_mark_lock+0x10/0x10 [ 456.838620][T15097] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 456.838634][T15097] ? __pfx_mark_lock+0x10/0x10 [ 456.838652][T15097] ? hlock_class+0x4e/0x130 [ 456.838662][T15097] ? __lock_acquire+0x15a9/0x3c40 [ 456.838693][T15097] ? do_raw_spin_unlock+0x172/0x230 [ 456.838707][T15097] ovl_copy_up_flags+0x18d/0x200 [ 456.838724][T15097] ovl_maybe_copy_up+0x124/0x170 [ 456.838739][T15097] ovl_open+0x178/0x330 [ 456.838748][T15097] ? __pfx_ovl_open+0x10/0x10 [ 456.838759][T15097] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 456.838775][T15097] do_dentry_open+0x735/0x1c40 [ 456.838793][T15097] ? __pfx_ovl_open+0x10/0x10 [ 456.838803][T15097] ? inode_permission+0xdd/0x5f0 [ 456.838815][T15097] vfs_open+0x82/0x3f0 [ 456.838825][T15097] ? may_open+0x1f2/0x400 [ 456.838837][T15097] path_openat+0x1e88/0x2d80 [ 456.838856][T15097] ? __pfx_path_openat+0x10/0x10 [ 456.838871][T15097] ? __pfx___lock_acquire+0x10/0x10 [ 456.838883][T15097] ? lock_acquire.part.0+0x11b/0x380 [ 456.838897][T15097] ? find_held_lock+0x2d/0x110 [ 456.838909][T15097] do_filp_open+0x20c/0x470 [ 456.838923][T15097] ? __pfx_do_filp_open+0x10/0x10 [ 456.838937][T15097] ? find_held_lock+0x2d/0x110 [ 456.838956][T15097] ? alloc_fd+0x41f/0x760 [ 456.838973][T15097] do_sys_openat2+0x17a/0x1e0 [ 456.838984][T15097] ? __pfx_do_sys_openat2+0x10/0x10 [ 456.838996][T15097] ? __fget_files+0x206/0x3a0 [ 456.839012][T15097] __ia32_compat_sys_openat+0x16e/0x210 [ 456.839024][T15097] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 456.839035][T15097] ? ksys_write+0x1ba/0x250 [ 456.839053][T15097] __do_fast_syscall_32+0x73/0x120 [ 456.839069][T15097] do_fast_syscall_32+0x32/0x80 [ 456.839084][T15097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.839101][T15097] RIP: 0023:0xf743e579 [ 456.839109][T15097] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 456.839119][T15097] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 456.839128][T15097] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 456.839134][T15097] RDX: 0000000000000042 RSI: 00000000000001ff RDI: 0000000000000000 [ 456.839140][T15097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.839146][T15097] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 456.839154][T15097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.839166][T15097] [ 456.839306][T15097] ERROR: Out of memory at tomoyo_realpath_from_path. [ 457.097387][T15099] netlink: 512 bytes leftover after parsing attributes in process `syz.7.2405'. [ 458.259289][T15110] EXT4-fs error: 2 callbacks suppressed [ 458.259303][T15110] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 458.352577][T15113] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 458.585275][T12320] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1120: comm udevd: iget: checksum invalid [ 458.727899][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2410'. [ 458.938884][T15128] netlink: 'syz.0.2415': attribute type 1 has an invalid length. [ 458.941083][T15128] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2415'. [ 459.786829][T15140] lo speed is unknown, defaulting to 1000 [ 459.836043][T15145] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2418'. [ 459.994264][T15149] lo speed is unknown, defaulting to 1000 [ 460.214502][T15154] FAULT_INJECTION: forcing a failure. [ 460.214502][T15154] name failslab, interval 1, probability 0, space 0, times 0 [ 460.218014][T15154] CPU: 3 UID: 0 PID: 15154 Comm: syz.8.2421 Not tainted 6.14.0-syzkaller #0 [ 460.218027][T15154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 460.218034][T15154] Call Trace: [ 460.218038][T15154] [ 460.218042][T15154] dump_stack_lvl+0x16c/0x1f0 [ 460.218061][T15154] should_fail_ex+0x50a/0x650 [ 460.218072][T15154] ? fs_reclaim_acquire+0xae/0x150 [ 460.218086][T15154] ? tomoyo_realpath_from_path+0xb9/0x720 [ 460.218101][T15154] should_failslab+0xc2/0x120 [ 460.218112][T15154] __kmalloc_noprof+0xcb/0x510 [ 460.218127][T15154] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 460.218144][T15154] tomoyo_realpath_from_path+0xb9/0x720 [ 460.218158][T15154] ? tomoyo_path_number_perm+0x235/0x590 [ 460.218171][T15154] ? tomoyo_path_number_perm+0x235/0x590 [ 460.218184][T15154] tomoyo_path_number_perm+0x248/0x590 [ 460.218196][T15154] ? tomoyo_path_number_perm+0x235/0x590 [ 460.218209][T15154] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 460.218232][T15154] ? __pfx_lock_release+0x10/0x10 [ 460.218246][T15154] ? trace_lock_acquire+0x14e/0x1f0 [ 460.218259][T15154] ? lock_acquire+0x2f/0xb0 [ 460.218271][T15154] ? __fget_files+0x40/0x3a0 [ 460.218287][T15154] ? __fget_files+0x206/0x3a0 [ 460.218303][T15154] security_file_ioctl_compat+0x9b/0x240 [ 460.218317][T15154] __do_compat_sys_ioctl+0x4e/0x2c0 [ 460.218331][T15154] __do_fast_syscall_32+0x73/0x120 [ 460.218348][T15154] do_fast_syscall_32+0x32/0x80 [ 460.218363][T15154] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 460.218380][T15154] RIP: 0023:0xf73ee579 [ 460.218389][T15154] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 460.218398][T15154] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 460.218408][T15154] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020aea5 [ 460.218414][T15154] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.218420][T15154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 460.218425][T15154] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 460.218431][T15154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 460.218443][T15154] [ 460.218447][T15154] ERROR: Out of memory at tomoyo_realpath_from_path. [ 461.116173][T15174] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2426'. [ 461.317955][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2429'. [ 461.321333][T15177] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:5: iget: checksum invalid [ 462.421111][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2434'. [ 462.427248][T15194] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2434'. [ 462.644833][T15201] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 462.875679][T15205] netlink: 'syz.8.2439': attribute type 21 has an invalid length. [ 462.878674][T15206] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:10: iget: checksum invalid [ 463.227097][T15214] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:13: iget: checksum invalid [ 463.231577][T15215] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:13: iget: checksum invalid [ 463.822983][ T5955] Bluetooth: hci1: command 0x0406 tx timeout [ 463.823435][T15191] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 463.827391][T15191] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 464.719065][T15238] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 464.723250][T15239] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 465.752900][ T66] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 465.905066][ T66] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 465.908224][ T66] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 465.911442][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 465.914552][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 465.917497][ T66] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.922866][ T66] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 465.925470][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.927731][ T66] usb 5-1: Product: syz [ 465.928994][ T66] usb 5-1: Manufacturer: syz [ 465.930289][ T66] usb 5-1: SerialNumber: syz [ 465.933323][ T66] usb 5-1: config 0 descriptor?? [ 465.935453][T15252] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 465.939442][ T66] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input22 [ 465.951700][T12320] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1120: comm udevd: iget: checksum invalid [ 465.967065][T12320] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1120: comm udevd: iget: checksum invalid [ 466.201485][ T65] usb 5-1: USB disconnect, device number 7 [ 466.902960][ T7452] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 467.049337][T15281] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2458'. [ 467.177111][T15285] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2459'. [ 467.181782][T15285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.199501][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2463'. [ 469.519667][T15307] netlink: 'syz.8.2465': attribute type 3 has an invalid length. [ 469.521853][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2465'. [ 469.525274][T15307] netlink: 'syz.8.2465': attribute type 3 has an invalid length. [ 469.527753][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2465'. [ 469.721884][T15319] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 469.882915][ T6010] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 470.034879][ T6010] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 470.038138][ T6010] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 470.040861][ T6010] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.043459][ T6010] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.046933][T15317] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 470.051077][ T6010] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.076085][T12320] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1120: comm udevd: iget: checksum invalid [ 470.267092][ T65] usb 13-1: USB disconnect, device number 16 [ 470.466278][T15320] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:13: iget: checksum invalid [ 470.470736][T15321] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 470.475227][T15322] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:13: iget: checksum invalid [ 470.479829][T15323] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:13: iget: checksum invalid [ 470.484139][T15324] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:13: iget: checksum invalid [ 470.488177][T15325] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 471.110515][T15329] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:5: iget: checksum invalid [ 471.114974][T15330] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:5: iget: checksum invalid [ 471.175163][T15328] sd 0:0:0:0: PR command failed: 1026 [ 471.177028][T15328] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 471.179155][T15328] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 471.422236][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2471'. [ 471.742906][ T5955] Bluetooth: hci3: command 0x1003 tx timeout [ 471.743229][ T5958] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 471.754571][T15339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.796581][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2474'. [ 471.815535][T15346] FAULT_INJECTION: forcing a failure. [ 471.815535][T15346] name failslab, interval 1, probability 0, space 0, times 0 [ 471.820228][T15346] CPU: 2 UID: 0 PID: 15346 Comm: syz.0.2474 Not tainted 6.14.0-syzkaller #0 [ 471.820241][T15346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 471.820247][T15346] Call Trace: [ 471.820251][T15346] [ 471.820255][T15346] dump_stack_lvl+0x16c/0x1f0 [ 471.820275][T15346] should_fail_ex+0x50a/0x650 [ 471.820288][T15346] should_failslab+0xc2/0x120 [ 471.820299][T15346] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 471.820315][T15346] ? skb_clone+0x190/0x3f0 [ 471.820328][T15346] skb_clone+0x190/0x3f0 [ 471.820338][T15346] netlink_deliver_tap+0xabd/0xd30 [ 471.820356][T15346] netlink_unicast+0x5e1/0x7f0 [ 471.820373][T15346] ? __pfx_netlink_unicast+0x10/0x10 [ 471.820388][T15346] ? __phys_addr_symbol+0x30/0x80 [ 471.820399][T15346] ? __check_object_size+0x488/0x710 [ 471.820411][T15346] netlink_sendmsg+0x8b8/0xd70 [ 471.820429][T15346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.820448][T15346] ____sys_sendmsg+0xaaf/0xc90 [ 471.820462][T15346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.820474][T15346] ? get_compat_msghdr+0x11b/0x170 [ 471.820493][T15346] ___sys_sendmsg+0x135/0x1e0 [ 471.820510][T15346] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.820531][T15346] ? __pfx_lock_release+0x10/0x10 [ 471.820545][T15346] ? trace_lock_acquire+0x14e/0x1f0 [ 471.820561][T15346] ? __fget_files+0x206/0x3a0 [ 471.820579][T15346] __sys_sendmsg+0x16e/0x220 [ 471.820589][T15346] ? __pfx___sys_sendmsg+0x10/0x10 [ 471.820607][T15346] __do_fast_syscall_32+0x73/0x120 [ 471.820624][T15346] do_fast_syscall_32+0x32/0x80 [ 471.820638][T15346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 471.820655][T15346] RIP: 0023:0xf7fb4579 [ 471.820663][T15346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 471.820673][T15346] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 471.820683][T15346] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 471.820689][T15346] RDX: 00000000000048c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.820695][T15346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 471.820700][T15346] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 471.820706][T15346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 471.820718][T15346] [ 471.853666][T15327] orangefs_mount: mount request failed with -4 [ 471.879134][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 472.771528][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2479'. [ 472.774756][T15349] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 472.775770][T15361] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:10: iget: checksum invalid [ 472.788889][T15360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 472.791128][T15360] IPv6: NLM_F_CREATE should be set when creating new route [ 472.839202][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2480'. [ 472.890707][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2482'. [ 473.092486][T15384] netlink: 'syz.7.2489': attribute type 1 has an invalid length. [ 473.102254][T15384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 473.212955][ T6010] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 473.382815][ T6010] usb 14-1: Using ep0 maxpacket: 8 [ 473.385539][ T6010] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 473.387889][ T6010] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 473.388336][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2492'. [ 473.390547][ T6010] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 473.396193][ T6010] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 473.398801][T15398] input: syz0 as /devices/virtual/input/input24 [ 473.398991][ T6010] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.404733][ T6010] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 473.407393][ T6010] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.054265][T15427] tmpfs: Unknown parameter 'quotavim2m' [ 474.078357][ T6010] usb 14-1: GET_CAPABILITIES returned 0 [ 474.080319][ T6010] usbtmc 14-1:16.0: can't read capabilities [ 474.222518][ T40] audit: type=1326 audit(1742867647.505:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15432 comm="syz.0.2499" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 474.635847][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2505'. [ 474.774152][T15452] block nbd8: shutting down sockets [ 474.935537][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2509'. [ 474.938715][T15456] loop6: detected capacity change from 0 to 63 [ 474.947369][ C2] blk_print_req_error: 7 callbacks suppressed [ 474.947383][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 474.953264][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 474.955755][ C2] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 474.956358][ C1] buffer_io_error: 7 callbacks suppressed [ 474.956366][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.959403][ C2] Buffer I/O error on dev loop6, logical block 1, async page read [ 474.963535][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 474.963560][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.964731][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 474.975919][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.979649][ C2] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 474.980557][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 474.982183][ C2] Buffer I/O error on dev loop6, logical block 1, async page read [ 474.984806][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.992150][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 474.994740][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.999452][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 475.002352][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.005311][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 475.008739][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.011879][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.033287][ T5835] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 475.060882][ T40] audit: type=1326 audit(1742867648.345:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.8.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 475.074874][ T40] audit: type=1326 audit(1742867648.345:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.8.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 475.083654][ T40] audit: type=1326 audit(1742867648.345:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.8.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 475.091960][ T40] audit: type=1326 audit(1742867648.345:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.8.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 475.100309][ T40] audit: type=1326 audit(1742867648.345:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.8.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 475.108847][ T40] audit: type=1326 audit(1742867648.345:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.8.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 475.115664][ T40] audit: type=1326 audit(1742867648.355:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.8.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 475.121754][ T40] audit: type=1326 audit(1742867648.355:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.8.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 475.128238][ T40] audit: type=1326 audit(1742867648.365:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.8.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 475.192823][ T5835] usb 12-1: Using ep0 maxpacket: 8 [ 475.195458][ T5835] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.198447][ T5835] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 475.201711][ T5835] usb 12-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 475.206002][ T5835] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.210823][ T5835] usb 12-1: config 0 descriptor?? [ 475.435756][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 475.437529][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 475.650691][T15478] EXT4-fs error: 9 callbacks suppressed [ 475.650707][T15478] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:10: iget: checksum invalid [ 475.656486][T15479] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:10: iget: checksum invalid [ 475.692969][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 475.694718][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 475.975885][ T65] usb 14-1: USB disconnect, device number 9 [ 475.996322][T15473] ceph: No mds server is up or the cluster is laggy [ 476.216336][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'. [ 476.326771][T15498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 476.329528][T15498] IPv6: NLM_F_CREATE should be set when creating new route [ 476.378769][T15504] sp0: Synchronizing with TNC [ 476.726895][T15511] FAULT_INJECTION: forcing a failure. [ 476.726895][T15511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.731597][T15511] CPU: 1 UID: 0 PID: 15511 Comm: syz.8.2521 Not tainted 6.14.0-syzkaller #0 [ 476.731631][T15511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 476.731642][T15511] Call Trace: [ 476.731648][T15511] [ 476.731655][T15511] dump_stack_lvl+0x16c/0x1f0 [ 476.731683][T15511] should_fail_ex+0x50a/0x650 [ 476.731703][T15511] _copy_from_iter+0x2a1/0x1560 [ 476.731723][T15511] ? irqentry_exit+0x3b/0x90 [ 476.731746][T15511] ? lockdep_hardirqs_on+0x7c/0x110 [ 476.731765][T15511] ? __pfx__copy_from_iter+0x10/0x10 [ 476.731787][T15511] ? __check_object_size+0x488/0x710 [ 476.731806][T15511] netlink_sendmsg+0x813/0xd70 [ 476.731851][T15511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.731883][T15511] ____sys_sendmsg+0xaaf/0xc90 [ 476.731905][T15511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.731923][T15511] ? get_compat_msghdr+0x11b/0x170 [ 476.731961][T15511] ___sys_sendmsg+0x135/0x1e0 [ 476.731988][T15511] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.732035][T15511] ? __pfx_lock_release+0x10/0x10 [ 476.732058][T15511] ? trace_lock_acquire+0x14e/0x1f0 [ 476.732085][T15511] ? __fget_files+0x206/0x3a0 [ 476.732115][T15511] __sys_sendmsg+0x16e/0x220 [ 476.732131][T15511] ? __pfx___sys_sendmsg+0x10/0x10 [ 476.732161][T15511] __do_fast_syscall_32+0x73/0x120 [ 476.732186][T15511] do_fast_syscall_32+0x32/0x80 [ 476.732207][T15511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.732231][T15511] RIP: 0023:0xf73ee579 [ 476.732243][T15511] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 476.732257][T15511] RSP: 002b:00000000f503455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 476.732273][T15511] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000080 [ 476.732284][T15511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 476.732293][T15511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.732302][T15511] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 476.732311][T15511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.732333][T15511] [ 477.301397][T15526] syz.8.2527: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 477.306288][T15526] CPU: 2 UID: 0 PID: 15526 Comm: syz.8.2527 Not tainted 6.14.0-syzkaller #0 [ 477.306302][T15526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 477.306309][T15526] Call Trace: [ 477.306313][T15526] [ 477.306318][T15526] dump_stack_lvl+0x16c/0x1f0 [ 477.306336][T15526] warn_alloc+0x24d/0x3a0 [ 477.306353][T15526] ? __pfx_warn_alloc+0x10/0x10 [ 477.306367][T15526] ? __pfx_stack_trace_save+0x10/0x10 [ 477.306384][T15526] ? kasan_save_stack+0x42/0x60 [ 477.306397][T15526] ? kasan_save_stack+0x33/0x60 [ 477.306410][T15526] ? kasan_save_track+0x14/0x30 [ 477.306423][T15526] ? __kasan_kmalloc+0xaa/0xb0 [ 477.306436][T15526] ? xskq_create+0x52/0x1d0 [ 477.306446][T15526] ? do_sock_setsockopt+0x222/0x480 [ 477.306457][T15526] ? __sys_setsockopt+0x1a0/0x230 [ 477.306471][T15526] ? __ia32_sys_setsockopt+0xbc/0x160 [ 477.306487][T15526] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 477.306505][T15526] ? xskq_create+0xfb/0x1d0 [ 477.306518][T15526] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 477.306536][T15526] ? xskq_create+0xfb/0x1d0 [ 477.306546][T15526] vmalloc_user_noprof+0x6b/0x90 [ 477.306559][T15526] ? xskq_create+0xfb/0x1d0 [ 477.306569][T15526] xskq_create+0xfb/0x1d0 [ 477.306580][T15526] xsk_setsockopt+0x7b7/0xa10 [ 477.306591][T15526] ? __pfx_xsk_setsockopt+0x10/0x10 [ 477.306604][T15526] ? find_held_lock+0x2d/0x110 [ 477.306617][T15526] ? __pfx_xsk_setsockopt+0x10/0x10 [ 477.306627][T15526] do_sock_setsockopt+0x222/0x480 [ 477.306638][T15526] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 477.306655][T15526] ? lock_acquire+0x2f/0xb0 [ 477.306675][T15526] __sys_setsockopt+0x1a0/0x230 [ 477.306692][T15526] __ia32_sys_setsockopt+0xbc/0x160 [ 477.306705][T15526] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.306719][T15526] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 477.306735][T15526] __do_fast_syscall_32+0x73/0x120 [ 477.306750][T15526] do_fast_syscall_32+0x32/0x80 [ 477.306764][T15526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.306780][T15526] RIP: 0023:0xf73ee579 [ 477.306801][T15526] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 477.306812][T15526] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 477.306822][T15526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 477.306828][T15526] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 477.306834][T15526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.306840][T15526] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 477.306845][T15526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.306857][T15526] [ 477.306873][T15526] Mem-Info: [ 477.355050][T15527] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:13: iget: checksum invalid [ 477.359253][T15526] active_anon:7363 inactive_anon:1107 isolated_anon:0 [ 477.359253][T15526] active_file:13712 inactive_file:7200 isolated_file:0 [ 477.359253][T15526] unevictable:1768 dirty:414 writeback:0 [ 477.359253][T15526] slab_reclaimable:6247 slab_unreclaimable:66522 [ 477.359253][T15526] mapped:30008 shmem:7670 pagetables:1024 [ 477.359253][T15526] sec_pagetables:319 bounce:0 [ 477.359253][T15526] kernel_misc_reclaimable:0 [ 477.359253][T15526] free:61003 free_pcp:10426 free_cma:0 [ 477.401068][T15526] Node 0 active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1272kB dirty:0kB writeback:0kB shmem:5396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9972kB pagetables:1236kB sec_pagetables:1176kB all_unreclaimable? yes [ 477.410275][T15526] Node 1 active_anon:29424kB inactive_anon:4428kB active_file:54848kB inactive_file:28788kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:118760kB dirty:1656kB writeback:0kB shmem:25284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3616kB pagetables:2860kB sec_pagetables:100kB all_unreclaimable? no [ 477.419724][T15526] Node 0 DMA free:2100kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:720kB local_pcp:224kB free_cma:0kB [ 477.421466][T15517] gtp0: entered promiscuous mode [ 477.427768][T15526] lowmem_reserve[]: 0 294 294 294 294 [ 477.429401][T15517] gtp0: entered allmulticast mode [ 477.430810][T15526] Node 0 DMA32 free:19380kB boost:2048kB min:15608kB low:18996kB high:22384kB reserved_highatomic:4096KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:3536kB writepending:0kB present:1032196kB managed:301724kB mlocked:0kB bounce:0kB free_pcp:3344kB local_pcp:1516kB free_cma:0kB [ 477.443968][T15526] lowmem_reserve[]: 0 0 0 0 0 [ 477.445446][T15526] Node 1 DMA32 free:222288kB boost:34816kB min:81960kB low:93744kB high:105528kB reserved_highatomic:2048KB active_anon:29424kB inactive_anon:4428kB active_file:54848kB inactive_file:28788kB unevictable:3536kB writepending:1656kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:37768kB local_pcp:916kB free_cma:0kB [ 477.457051][T15526] lowmem_reserve[]: 0 0 0 0 0 [ 477.458493][T15526] Node 0 DMA: 29*4kB (UM) 38*8kB (UM) 29*16kB (UM) 12*32kB (UM) 9*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2100kB [ 477.462557][T15526] Node 0 DMA32: 465*4kB (UH) 288*8kB (UEH) 75*16kB (UMEH) 144*32kB (UMEH) 55*64kB (UMEH) 26*128kB (UM) 6*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 19380kB [ 477.467934][T15526] Node 1 DMA32: 62*4kB (UMEH) 159*8kB (UMEH) 582*16kB (UMEH) 454*32kB (UMEH) 212*64kB (UMEH) 132*128kB (UMEH) 98*256kB (UMEH) 76*512kB (UM) 44*1024kB (UM) 20*2048kB (UM) 4*4096kB (M) = 222224kB [ 477.473599][T15526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.476238][T15526] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 477.478860][T15526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.481501][T15526] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=2 hugepages_size=2048kB [ 477.484324][T15526] 29230 total pagecache pages [ 477.485928][T15526] 648 pages in swap cache [ 477.487233][T15526] Free swap = 109052kB [ 477.488504][T15526] Total swap = 124996kB [ 477.489753][T15526] 524155 pages RAM [ 477.490888][T15526] 0 pages HighMem/MovableOnly [ 477.492273][T15526] 207821 pages reserved [ 477.493940][T15526] 0 pages cma reserved [ 477.700237][T15538] netlink: 'syz.0.2531': attribute type 1 has an invalid length. [ 477.702576][T15538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2531'. [ 477.705294][T15539] netlink: 'syz.0.2531': attribute type 1 has an invalid length. [ 477.707518][T15539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2531'. [ 477.711655][T15537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2531'. [ 477.713453][T15538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2531'. [ 477.745571][ T65] usb 12-1: USB disconnect, device number 17 [ 478.056862][T15558] netlink: 'syz.0.2535': attribute type 5 has an invalid length. [ 478.069966][T15558] : entered promiscuous mode [ 478.083229][ T26] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 478.754706][T15578] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:10: iget: checksum invalid [ 478.766906][T15579] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:5: iget: checksum invalid [ 479.136456][T15588] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2547'. [ 479.139070][T15588] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2547'. [ 479.161460][T15592] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:34: iget: checksum invalid [ 479.169403][T15594] overlay: Unknown parameter 'obj_user' [ 479.343302][T11043] syz_tun (unregistering): left allmulticast mode [ 479.345390][T11043] syz_tun (unregistering): left promiscuous mode [ 479.347631][T11043] bridge0: port 3(syz_tun) entered disabled state [ 479.349964][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 479.357073][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 479.361543][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 479.365584][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 479.369130][ T5955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 479.374012][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 479.382820][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 479.389975][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 479.394247][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 479.397801][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 479.400990][ T5958] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 479.405067][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 479.427634][T15601] lo speed is unknown, defaulting to 1000 [ 479.429057][ T1] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1916: comm init: iget: checksum invalid [ 479.432610][ T1] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1916: comm init: iget: checksum invalid [ 479.436597][ T1] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1916: comm init: iget: checksum invalid [ 479.439642][ T1] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1916: comm init: iget: checksum invalid [ 479.452957][ T26] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 479.465471][T15604] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2554'. [ 479.522320][T15601] chnl_net:caif_netlink_parms(): no params data found [ 479.560484][T15601] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.562857][T15601] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.565535][T15601] bridge_slave_0: entered allmulticast mode [ 479.568165][T15601] bridge_slave_0: entered promiscuous mode [ 479.573625][T15601] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.576079][T15601] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.578119][T15601] bridge_slave_1: entered allmulticast mode [ 479.580267][T15601] bridge_slave_1: entered promiscuous mode [ 479.605644][T15601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.610984][T15601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.625506][ T26] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.635305][ T26] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 479.637940][ T26] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.640196][ T26] usb 14-1: Product: syz [ 479.641392][ T26] usb 14-1: Manufacturer: syz [ 479.645420][T15601] team0: Port device team_slave_0 added [ 479.649763][T15601] team0: Port device team_slave_1 added [ 479.652888][ T26] usb 14-1: SerialNumber: syz [ 479.685431][T15601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.687352][T15601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.694598][T15601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.698663][T15601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.700651][T15601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.707783][T15601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.736361][T15601] hsr_slave_0: entered promiscuous mode [ 479.738486][T15601] hsr_slave_1: entered promiscuous mode [ 479.740414][T15601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.742502][T15601] Cannot create hsr debugfs directory [ 479.745184][ T7449] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 479.794978][ T9677] bridge_slave_1: left allmulticast mode [ 479.796736][ T9677] bridge_slave_1: left promiscuous mode [ 479.798421][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.801565][ T9677] bridge_slave_0: left allmulticast mode [ 479.803432][ T9677] bridge_slave_0: left promiscuous mode [ 479.805413][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.849187][ T9677] batman_adv: batadv0: Removing interface: ip6gretap1 [ 479.864289][ T26] usblp 14-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 479.902946][ T7449] usb 13-1: Using ep0 maxpacket: 8 [ 479.905629][ T7449] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.908516][ T7449] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 479.910900][ T7449] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 479.914129][ T7449] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 479.917214][ T7449] usb 13-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 479.920276][ T7449] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.928230][ T7449] hub 13-1:1.0: bad descriptor, ignoring hub [ 479.929899][ T7449] hub 13-1:1.0: probe with driver hub failed with error -5 [ 479.932373][ T7449] cdc_wdm 13-1:1.0: skipping garbage [ 479.936235][ T7449] cdc_wdm 13-1:1.0: skipping garbage [ 479.937943][ T9677] batman_adv: batadv0: Removing interface: gretap1 [ 479.938447][ T7449] cdc_wdm 13-1:1.0: cdc-wdm1: USB WDM device [ 479.941620][ T7449] cdc_wdm 13-1:1.0: Unknown control protocol [ 479.966375][T15585] 9pnet_fd: p9_fd_create_tcp (15585): problem connecting socket to 127.0.0.1 [ 480.014905][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 480.014916][ T40] audit: type=1326 audit(1742867653.305:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm=A1 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 480.022834][ T40] audit: type=1326 audit(1742867653.305:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm=A1 exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 480.028775][ T40] audit: type=1326 audit(1742867653.305:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm=A1 exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fb45a7 code=0x7ffc0000 [ 480.034568][ T40] audit: type=1326 audit(1742867653.305:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm=A1 exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 480.042374][ T40] audit: type=1326 audit(1742867653.305:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm=A1 exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fb45a7 code=0x7ffc0000 [ 480.050713][ T40] audit: type=1326 audit(1742867653.305:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm=A1 exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 480.057891][ T40] audit: type=1326 audit(1742867653.305:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm=A1 exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fb45a7 code=0x7ffc0000 [ 480.063681][ T40] audit: type=1326 audit(1742867653.305:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm=A1 exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 480.069281][ T40] audit: type=1326 audit(1742867653.305:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm=A1 exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fb45a7 code=0x7ffc0000 [ 480.078744][ T40] audit: type=1326 audit(1742867653.305:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm=A1 exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 480.166654][ T7449] usb 14-1: USB disconnect, device number 10 [ 480.166827][T15597] usblp0:failed reading printer status (-71) [ 480.312402][ T9677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.316614][ T9677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.320448][ T9677] bond0 (unregistering): Released all slaves [ 480.383513][T15597] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2551'. [ 480.459572][ T9677] bond1 (unregistering): Released all slaves [ 480.665568][ T9677] bond2 (unregistering): Released all slaves [ 480.688259][ T1323] usb 13-1: USB disconnect, device number 17 [ 480.718305][T15595] usblp0: removed [ 480.749147][ T9677] : left promiscuous mode [ 480.886694][ T9677] tipc: Disabling bearer [ 480.888424][ T9677] tipc: Left network mode [ 480.983290][ T1323] usb 13-1: new full-speed USB device number 18 using dummy_hcd [ 481.136078][ T1323] usb 13-1: unable to get BOS descriptor or descriptor too short [ 481.138793][ T1323] usb 13-1: no configurations [ 481.140186][ T1323] usb 13-1: can't read configurations, error -22 [ 481.331861][T15601] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 481.336687][T15601] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 481.341403][T15601] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 481.346526][T15601] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 481.393797][T15601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.400898][T15601] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.406682][ T9701] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.408730][ T9701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.416689][ T9701] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.418642][ T9701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.432824][T15636] EXT4-fs error: 5 callbacks suppressed [ 481.432839][T15636] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:34: iget: checksum invalid [ 481.433996][ T5955] Bluetooth: hci3: command tx timeout [ 481.441870][T15637] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:34: iget: checksum invalid [ 481.448354][T15639] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:34: iget: checksum invalid [ 481.456498][T15640] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:34: iget: checksum invalid [ 481.475731][T15601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.478818][T15641] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:34: iget: checksum invalid [ 481.484774][T15642] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:34: iget: checksum invalid [ 481.488200][ T9677] hsr_slave_0: left promiscuous mode [ 481.490165][ T9677] hsr_slave_1: left promiscuous mode [ 481.492018][ T9677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.495717][ T9677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.520024][ T9677] pim6reg (unregistering): left allmulticast mode [ 481.741765][ T9677] macvlan0 (unregistering): left allmulticast mode [ 482.067936][T15651] tmpfs: Unknown parameter 'quot' [ 482.453744][T15663] FAULT_INJECTION: forcing a failure. [ 482.453744][T15663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.457361][T15663] CPU: 1 UID: 0 PID: 15663 Comm: syz.8.2569 Not tainted 6.14.0-syzkaller #0 [ 482.457375][T15663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 482.457381][T15663] Call Trace: [ 482.457385][T15663] [ 482.457390][T15663] dump_stack_lvl+0x16c/0x1f0 [ 482.457409][T15663] should_fail_ex+0x50a/0x650 [ 482.457421][T15663] _copy_to_user+0x32/0xd0 [ 482.457434][T15663] simple_read_from_buffer+0xd0/0x160 [ 482.457449][T15663] proc_fail_nth_read+0x198/0x270 [ 482.457462][T15663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.457475][T15663] ? rw_verify_area+0xcf/0x680 [ 482.457488][T15663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.457500][T15663] vfs_read+0x1df/0xbf0 [ 482.457513][T15663] ? __fget_files+0x1fc/0x3a0 [ 482.457528][T15663] ? __pfx___mutex_lock+0x10/0x10 [ 482.457544][T15663] ? __pfx_vfs_read+0x10/0x10 [ 482.457560][T15663] ? __fget_files+0x206/0x3a0 [ 482.457583][T15663] ksys_read+0x12b/0x250 [ 482.457596][T15663] ? __pfx_ksys_read+0x10/0x10 [ 482.457613][T15663] __do_fast_syscall_32+0x73/0x120 [ 482.457630][T15663] do_fast_syscall_32+0x32/0x80 [ 482.457644][T15663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 482.457661][T15663] RIP: 0023:0xf73ee579 [ 482.457670][T15663] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 482.457680][T15663] RSP: 002b:00000000f5076590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 482.457689][T15663] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5076620 [ 482.457695][T15663] RDX: 000000000000000f RSI: 00000000f73dcff4 RDI: 0000000000000000 [ 482.457701][T15663] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 482.457707][T15663] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 482.457713][T15663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 482.457725][T15663] [ 482.606624][ T9677] team0 (unregistering): Port device team_slave_1 removed [ 482.709592][ T9677] team0 (unregistering): Port device team_slave_0 removed [ 482.945937][T15673] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2570'. [ 483.438777][T15677] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:4: iget: checksum invalid [ 483.443616][T15678] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:10: iget: checksum invalid [ 483.456344][T15670] lo speed is unknown, defaulting to 1000 [ 483.473602][T15679] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:0: iget: checksum invalid [ 483.490592][T15680] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:0: iget: checksum invalid [ 483.504069][ T5955] Bluetooth: hci3: command tx timeout [ 483.522919][T15601] veth0_vlan: entered promiscuous mode [ 483.528899][T15601] veth1_vlan: entered promiscuous mode [ 483.546979][T15601] veth0_macvtap: entered promiscuous mode [ 483.552021][T15601] veth1_macvtap: entered promiscuous mode [ 483.575732][T15601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.589637][T15601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.598273][T15601] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.601347][T15601] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.604263][T15601] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.606576][T15601] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.744120][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.746311][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.757717][ T1218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.760142][ T1218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.069514][T15698] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2575'. [ 484.075872][ T9677] IPVS: stop unused estimator thread 0... [ 484.153265][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2578'. [ 484.154515][T15708] netlink: 1608 bytes leftover after parsing attributes in process `syz.7.2577'. [ 484.160026][T15708] netlink: zone id is out of range [ 484.162166][T15708] netlink: zone id is out of range [ 484.163959][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2578'. [ 484.164191][T15708] netlink: zone id is out of range [ 484.169166][T15708] netlink: zone id is out of range [ 484.171178][T15708] netlink: del zone limit has 4 unknown bytes [ 484.227650][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2577'. [ 484.248880][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2579'. [ 484.266178][T15715] loop6: detected capacity change from 0 to 524287999 [ 484.268417][ C0] blk_print_req_error: 35 callbacks suppressed [ 484.268426][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.272867][ C0] buffer_io_error: 34 callbacks suppressed [ 484.272875][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.276949][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.279513][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.281779][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.284307][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.286572][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.289094][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.292258][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.294746][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.297127][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.299499][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.301708][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.304184][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.306433][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.308993][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.312824][T15715] ldm_validate_partition_table(): Disk read failed. [ 484.314844][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.317441][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.320252][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 484.322863][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.373230][T15715] Dev loop6: unable to read RDB block 0 [ 484.375351][T15715] loop6: unable to read partition table [ 484.377035][T15715] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 484.430211][T15725] FAULT_INJECTION: forcing a failure. [ 484.430211][T15725] name failslab, interval 1, probability 0, space 0, times 0 [ 484.434751][T15725] CPU: 3 UID: 0 PID: 15725 Comm: syz.0.2583 Not tainted 6.14.0-syzkaller #0 [ 484.434767][T15725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 484.434774][T15725] Call Trace: [ 484.434777][T15725] [ 484.434783][T15725] dump_stack_lvl+0x16c/0x1f0 [ 484.434803][T15725] should_fail_ex+0x50a/0x650 [ 484.434814][T15725] ? fs_reclaim_acquire+0xae/0x150 [ 484.434830][T15725] should_failslab+0xc2/0x120 [ 484.434841][T15725] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 484.434857][T15725] ? security_file_alloc+0x34/0x2b0 [ 484.434874][T15725] security_file_alloc+0x34/0x2b0 [ 484.434889][T15725] init_file+0x93/0x4c0 [ 484.434900][T15725] alloc_empty_file_noaccount+0x3d/0xd0 [ 484.434913][T15725] alloc_file_pseudo_noaccount+0x13b/0x230 [ 484.434926][T15725] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 484.434937][T15725] ? iput+0xd3/0x890 [ 484.434952][T15725] bdev_file_open_by_dev+0x13e/0x210 [ 484.434968][T15725] setup_bdev_super+0x39b/0x730 [ 484.434982][T15725] get_tree_bdev_flags+0x365/0x620 [ 484.434996][T15725] ? __pfx_gfs2_fill_super+0x10/0x10 [ 484.435010][T15725] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 484.435024][T15725] ? trace_cap_capable+0x1a2/0x210 [ 484.435038][T15725] ? apparmor_capable+0x114/0x1d0 [ 484.435051][T15725] gfs2_get_tree+0x4e/0x280 [ 484.435063][T15725] vfs_get_tree+0x8b/0x340 [ 484.435075][T15725] path_mount+0x14e6/0x1f10 [ 484.435093][T15725] ? kmem_cache_free+0x2e2/0x4d0 [ 484.435108][T15725] ? __pfx_path_mount+0x10/0x10 [ 484.435126][T15725] ? putname+0x13c/0x180 [ 484.435138][T15725] __ia32_sys_mount+0x28d/0x310 [ 484.435148][T15725] ? __pfx___ia32_sys_mount+0x10/0x10 [ 484.435162][T15725] __do_fast_syscall_32+0x73/0x120 [ 484.435180][T15725] do_fast_syscall_32+0x32/0x80 [ 484.435196][T15725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 484.435214][T15725] RIP: 0023:0xf7fb4579 [ 484.435223][T15725] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 484.435234][T15725] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 484.435244][T15725] RAX: ffffffffffffffda RBX: 0000000080000300 RCX: 0000000080000040 [ 484.435251][T15725] RDX: 00000000800000c0 RSI: 0000000000000800 RDI: 0000000000000000 [ 484.435257][T15725] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 484.435263][T15725] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 484.435269][T15725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.435282][T15725] [ 484.435358][T15725] /dev/nullb0: Can't open blockdev [ 484.701890][T15735] FAULT_INJECTION: forcing a failure. [ 484.701890][T15735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.706602][T15735] CPU: 1 UID: 0 PID: 15735 Comm: syz.8.2584 Not tainted 6.14.0-syzkaller #0 [ 484.706696][T15735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 484.706709][T15735] Call Trace: [ 484.706715][T15735] [ 484.706722][T15735] dump_stack_lvl+0x16c/0x1f0 [ 484.706749][T15735] should_fail_ex+0x50a/0x650 [ 484.706767][T15735] _copy_from_user+0x2e/0xd0 [ 484.706785][T15735] memdup_user+0x71/0xd0 [ 484.706805][T15735] strndup_user+0x78/0xe0 [ 484.706824][T15735] __ia32_sys_mount+0x138/0x310 [ 484.706840][T15735] ? __pfx___ia32_sys_mount+0x10/0x10 [ 484.706861][T15735] __do_fast_syscall_32+0x73/0x120 [ 484.706881][T15735] do_fast_syscall_32+0x32/0x80 [ 484.706903][T15735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 484.706926][T15735] RIP: 0023:0xf73ee579 [ 484.706939][T15735] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 484.706953][T15735] RSP: 002b:00000000f500155c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 484.706968][T15735] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080002840 [ 484.706977][T15735] RDX: 0000000080002880 RSI: 0000000000000700 RDI: 00000000800000c0 [ 484.706986][T15735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 484.706992][T15735] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 484.707000][T15735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.707020][T15735] [ 484.854123][T15739] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2586'. [ 485.036266][T15751] nftables ruleset with unbound chain [ 485.069064][T15753] pim6reg: entered allmulticast mode [ 485.072364][T15753] pim6reg: left allmulticast mode [ 485.123382][ T7452] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 485.274108][ T7452] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 485.277412][ T7452] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 485.280570][ T7452] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 485.283912][ T7452] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 485.287518][ T7452] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.290081][ T7452] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.293766][ T7452] usb 13-1: config 0 descriptor?? [ 485.295773][T15741] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 485.516083][T15762] lo speed is unknown, defaulting to 1000 [ 485.583364][ T5955] Bluetooth: hci3: command tx timeout [ 485.702813][ T40] kauditd_printk_skb: 249 callbacks suppressed [ 485.702831][ T40] audit: type=1326 audit(1742867658.985:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15740 comm="syz.8.2587" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 485.803142][T15765] Invalid source name [ 485.804382][T15765] UBIFS error (pid: 15765): cannot open "/dev/nullb0", error -22 [ 485.908448][T15769] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2595'. [ 485.953707][T15774] gfs2: not a GFS2 filesystem [ 486.176355][ T40] audit: type=1326 audit(1742867659.465:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15775 comm="syz.0.2598" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4579 code=0x0 [ 486.592819][ T5992] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 486.742831][ T5992] usb 14-1: Using ep0 maxpacket: 8 [ 486.744169][ T5992] usb 14-1: config index 0 descriptor too short (expected 5924, got 36) [ 486.744184][ T5992] usb 14-1: config 250 has an invalid interface number: 228 but max is -1 [ 486.744195][ T5992] usb 14-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 486.744206][ T5992] usb 14-1: config 250 has no interface number 0 [ 486.744221][ T5992] usb 14-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 486.744234][ T5992] usb 14-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 486.744246][ T5992] usb 14-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 486.744259][ T5992] usb 14-1: config 250 interface 228 has no altsetting 0 [ 486.745421][ T5992] usb 14-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 486.745435][ T5992] usb 14-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 486.745445][ T5992] usb 14-1: Product: syz [ 486.745452][ T5992] usb 14-1: SerialNumber: syz [ 486.750638][ T5992] hub 14-1:250.228: bad descriptor, ignoring hub [ 486.750653][ T5992] hub 14-1:250.228: probe with driver hub failed with error -5 [ 486.758127][T10543] EXT4-fs error: 6 callbacks suppressed [ 486.758137][T10543] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1120: comm udevd: iget: checksum invalid [ 486.945207][T15792] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:4: iget: checksum invalid [ 486.947397][T15793] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:4: iget: checksum invalid [ 486.948404][T15794] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:0: iget: checksum invalid [ 486.963351][T15795] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:0: iget: checksum invalid [ 486.997275][T15797] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2603'. [ 487.065787][T15804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2606'. [ 487.317047][T15814] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2610'. [ 487.361269][T15816] netlink: 'syz.0.2611': attribute type 1 has an invalid length. [ 487.361284][T15816] NCSI netlink: No device for ifindex 0 [ 487.662833][ T5955] Bluetooth: hci3: command tx timeout [ 488.536390][T15829] Cannot find del_set index 320 as target [ 488.545481][ T7452] usbhid 13-1:0.0: can't add hid device: -71 [ 488.550669][ T7452] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 488.555246][ T7452] usb 13-1: USB disconnect, device number 20 [ 488.560424][T12320] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1120: comm udevd: iget: checksum invalid [ 488.729859][T15844] input: syz0 as /devices/virtual/input/input26 [ 488.738552][T12320] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1120: comm udevd: iget: checksum invalid [ 489.213092][ T6021] usb 14-1: USB disconnect, device number 11 [ 489.546573][T15861] __nla_validate_parse: 2 callbacks suppressed [ 489.546589][T15861] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2626'. [ 489.627765][T15828] Set syz1 is full, maxelem 65536 reached [ 489.636018][T15866] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:4: iget: checksum invalid [ 489.640601][T15867] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:4: iget: checksum invalid [ 489.647944][T15865] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2627'. [ 489.659223][T15865] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input27 [ 489.668110][T12320] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1120: comm udevd: iget: checksum invalid [ 490.484047][T15893] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2636'. [ 490.520701][T15896] afs: Unknown parameter 'a' [ 490.664853][T15889] /dev/sr0: Can't open blockdev [ 490.962838][ T6021] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 490.972828][ T7452] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 491.112801][ T6021] usb 14-1: Using ep0 maxpacket: 8 [ 491.115484][ T6021] usb 14-1: config index 0 descriptor too short (expected 5924, got 36) [ 491.117882][ T6021] usb 14-1: config 250 has an invalid interface number: 228 but max is -1 [ 491.120408][ T6021] usb 14-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 491.123123][ T6021] usb 14-1: config 250 has no interface number 0 [ 491.124971][ T6021] usb 14-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 491.128236][ T6021] usb 14-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 491.131248][ T6021] usb 14-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 491.135464][ T6021] usb 14-1: config 250 interface 228 has no altsetting 0 [ 491.138611][ T6021] usb 14-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 491.141409][ T6021] usb 14-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 491.144005][ T6021] usb 14-1: Product: syz [ 491.145218][ T6021] usb 14-1: SerialNumber: syz [ 491.149544][ T6021] hub 14-1:250.228: bad descriptor, ignoring hub [ 491.151387][ T6021] hub 14-1:250.228: probe with driver hub failed with error -5 [ 491.152967][ T7452] usb 5-1: Using ep0 maxpacket: 8 [ 491.157061][ T7452] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.159813][ T7452] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 491.162474][ T7452] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 491.182796][ T7452] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.187408][ T7452] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 491.189955][ T7452] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.416338][ T7452] usb 5-1: GET_CAPABILITIES returned 0 [ 491.418418][ T7452] usbtmc 5-1:16.0: can't read capabilities [ 491.708455][T15917] FAULT_INJECTION: forcing a failure. [ 491.708455][T15917] name failslab, interval 1, probability 0, space 0, times 0 [ 491.711529][T15917] CPU: 0 UID: 0 PID: 15917 Comm: syz.7.2644 Not tainted 6.14.0-syzkaller #0 [ 491.711542][T15917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 491.711549][T15917] Call Trace: [ 491.711553][T15917] [ 491.711557][T15917] dump_stack_lvl+0x16c/0x1f0 [ 491.711576][T15917] should_fail_ex+0x50a/0x650 [ 491.711587][T15917] ? fs_reclaim_acquire+0xae/0x150 [ 491.711600][T15917] ? alloc_pipe_info+0x10e/0x590 [ 491.711615][T15917] should_failslab+0xc2/0x120 [ 491.711625][T15917] __kmalloc_cache_noprof+0x68/0x410 [ 491.711638][T15917] ? trace_lock_acquire+0x14e/0x1f0 [ 491.711652][T15917] alloc_pipe_info+0x10e/0x590 [ 491.711669][T15917] splice_direct_to_actor+0x793/0xa40 [ 491.711684][T15917] ? get_pid_task+0xfc/0x250 [ 491.711695][T15917] ? __pfx_direct_splice_actor+0x10/0x10 [ 491.711734][T15917] ? __pfx_aa_file_perm+0x10/0x10 [ 491.711749][T15917] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 491.711764][T15917] ? __fget_files+0x1fc/0x3a0 [ 491.711779][T15917] do_splice_direct+0x178/0x250 [ 491.711793][T15917] ? __pfx_do_splice_direct+0x10/0x10 [ 491.711806][T15917] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 491.711820][T15917] ? bpf_lsm_file_permission+0x9/0x10 [ 491.711836][T15917] ? security_file_permission+0x71/0x210 [ 491.711850][T15917] ? rw_verify_area+0xcf/0x680 [ 491.711863][T15917] do_sendfile+0xafb/0xe40 [ 491.711878][T15917] ? __pfx_do_sendfile+0x10/0x10 [ 491.711891][T15917] ? __fget_files+0x206/0x3a0 [ 491.711908][T15917] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 491.711918][T15917] ? ksys_write+0x1ba/0x250 [ 491.711931][T15917] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 491.711945][T15917] __do_fast_syscall_32+0x73/0x120 [ 491.711962][T15917] do_fast_syscall_32+0x32/0x80 [ 491.711977][T15917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.711993][T15917] RIP: 0023:0xf7ff3579 [ 491.712001][T15917] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 491.712012][T15917] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 491.712021][T15917] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 491.712027][T15917] RDX: 0000000000000000 RSI: 0000000000023893 RDI: 0000000000000000 [ 491.712033][T15917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.712039][T15917] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 491.712044][T15917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.712056][T15917] [ 491.814731][T15919] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2645'. [ 492.721749][T15942] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2654'. [ 493.142840][ T6021] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 493.666665][T15960] EXT4-fs error: 2 callbacks suppressed [ 493.666680][T15960] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:0: iget: checksum invalid [ 493.676546][T15961] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:0: iget: checksum invalid [ 493.766940][ T65] usb 14-1: USB disconnect, device number 12 [ 493.767567][ T5992] usb 5-1: USB disconnect, device number 8 [ 493.868621][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2661'. [ 493.990783][T15970] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:4: iget: checksum invalid [ 494.013273][T15974] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:4: iget: checksum invalid [ 494.094905][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2662'. [ 494.176122][T15976] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2664'. [ 494.335545][T15981] lo speed is unknown, defaulting to 1000 [ 494.382880][T15982] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2666'. [ 494.432677][T15987] Set syz1 is full, maxelem 65536 reached [ 494.477290][T15992] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2670'. [ 494.500117][T15992] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.512578][T15992] FAULT_INJECTION: forcing a failure. [ 494.512578][T15992] name failslab, interval 1, probability 0, space 0, times 0 [ 494.517021][T15992] CPU: 3 UID: 0 PID: 15992 Comm: syz.8.2670 Not tainted 6.14.0-syzkaller #0 [ 494.517035][T15992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 494.517041][T15992] Call Trace: [ 494.517045][T15992] [ 494.517049][T15992] dump_stack_lvl+0x16c/0x1f0 [ 494.517068][T15992] should_fail_ex+0x50a/0x650 [ 494.517079][T15992] ? fs_reclaim_acquire+0xae/0x150 [ 494.517093][T15992] should_failslab+0xc2/0x120 [ 494.517104][T15992] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 494.517120][T15992] ? __kernfs_new_node+0xd3/0x890 [ 494.517136][T15992] __kernfs_new_node+0xd3/0x890 [ 494.517151][T15992] ? __pfx___kernfs_new_node+0x10/0x10 [ 494.517171][T15992] ? __pfx___lock_acquire+0x10/0x10 [ 494.517188][T15992] kernfs_new_node+0x186/0x240 [ 494.517205][T15992] __kernfs_create_file+0x53/0x350 [ 494.517218][T15992] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 494.517233][T15992] sysfs_create_file_ns+0x13e/0x1d0 [ 494.517246][T15992] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 494.517258][T15992] ? down_read+0xc9/0x330 [ 494.517275][T15992] ? __pfx___up_read+0x10/0x10 [ 494.517290][T15992] ? kobject_put+0xab/0x5a0 [ 494.517308][T15992] device_create_file+0xf2/0x1e0 [ 494.517326][T15992] device_add+0x2c0/0x1a70 [ 494.517343][T15992] ? __pfx_dev_set_name+0x10/0x10 [ 494.517356][T15992] ? __pfx_device_add+0x10/0x10 [ 494.517377][T15992] ? __init_waitqueue_head+0xca/0x150 [ 494.517399][T15992] netdev_register_kobject+0x183/0x3a0 [ 494.517417][T15992] register_netdevice+0x147b/0x1eb0 [ 494.517437][T15992] ? __pfx_register_netdevice+0x10/0x10 [ 494.517454][T15992] ? rtnl_create_link+0xa51/0xfa0 [ 494.517480][T15992] vxcan_newlink+0x24d/0x540 [ 494.517498][T15992] ? ___sys_sendmsg+0x135/0x1e0 [ 494.517515][T15992] ? __pfx_vxcan_newlink+0x10/0x10 [ 494.517526][T15992] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.517563][T15992] ? __pfx_validate_linkmsg+0x10/0x10 [ 494.517578][T15992] ? alloc_netdev_mqs+0xed5/0x15d0 [ 494.517591][T15992] ? rtnl_create_link+0xa51/0xfa0 [ 494.517607][T15992] ? __pfx_vxcan_newlink+0x10/0x10 [ 494.517619][T15992] rtnl_newlink+0xb95/0x1d60 [ 494.517637][T15992] ? __pfx_rtnl_newlink+0x10/0x10 [ 494.517656][T15992] ? __pfx___lock_acquire+0x10/0x10 [ 494.517670][T15992] ? aa_get_newest_label+0x376/0x680 [ 494.517684][T15992] ? find_held_lock+0x2d/0x110 [ 494.517696][T15992] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 494.517711][T15992] ? __pfx_lock_release+0x10/0x10 [ 494.517724][T15992] ? trace_lock_acquire+0x14e/0x1f0 [ 494.517743][T15992] ? __pfx_rtnl_newlink+0x10/0x10 [ 494.517759][T15992] rtnetlink_rcv_msg+0x95b/0xea0 [ 494.517776][T15992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 494.517792][T15992] ? __pfx___lock_acquire+0x10/0x10 [ 494.517806][T15992] ? __pfx___lock_acquire+0x10/0x10 [ 494.517819][T15992] ? hlock_class+0x4e/0x130 [ 494.517829][T15992] ? __lock_acquire+0xcc5/0x3c40 [ 494.517845][T15992] netlink_rcv_skb+0x16b/0x440 [ 494.517860][T15992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 494.517876][T15992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.517898][T15992] ? netlink_deliver_tap+0x1ae/0xd30 [ 494.517915][T15992] netlink_unicast+0x53c/0x7f0 [ 494.517932][T15992] ? __pfx_netlink_unicast+0x10/0x10 [ 494.517947][T15992] ? __phys_addr_symbol+0x30/0x80 [ 494.517970][T15992] ? __check_object_size+0x488/0x710 [ 494.517983][T15992] netlink_sendmsg+0x8b8/0xd70 [ 494.518000][T15992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.518020][T15992] ____sys_sendmsg+0xaaf/0xc90 [ 494.518033][T15992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.518045][T15992] ? get_compat_msghdr+0x11b/0x170 [ 494.518064][T15992] ___sys_sendmsg+0x135/0x1e0 [ 494.518081][T15992] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.518102][T15992] ? __pfx_lock_release+0x10/0x10 [ 494.518115][T15992] ? trace_lock_acquire+0x14e/0x1f0 [ 494.518131][T15992] ? __fget_files+0x206/0x3a0 [ 494.518149][T15992] __sys_sendmsg+0x16e/0x220 [ 494.518159][T15992] ? __pfx___sys_sendmsg+0x10/0x10 [ 494.518177][T15992] __do_fast_syscall_32+0x73/0x120 [ 494.518193][T15992] do_fast_syscall_32+0x32/0x80 [ 494.518208][T15992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.518223][T15992] RIP: 0023:0xf73ee579 [ 494.518232][T15992] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 494.518241][T15992] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 494.518250][T15992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 494.518257][T15992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 494.518262][T15992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 494.518267][T15992] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 494.518273][T15992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 494.518285][T15992] [ 494.658772][ C3] vkms_vblank_simulate: vblank timer overrun [ 494.894300][T15996] netlink: 'syz.8.2672': attribute type 4 has an invalid length. [ 494.898707][ T7452] lo speed is unknown, defaulting to 1000 [ 494.901368][ T7452] lo speed is unknown, defaulting to 1000 [ 494.902369][T15997] netlink: 'syz.8.2672': attribute type 4 has an invalid length. [ 494.910606][ T65] lo speed is unknown, defaulting to 1000 [ 494.912520][ T65] lo speed is unknown, defaulting to 1000 [ 495.180305][T16027] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 495.196745][T16028] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:6: iget: checksum invalid [ 495.399023][T16034] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:0: iget: checksum invalid [ 495.407304][T16035] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:0: iget: checksum invalid [ 495.413163][T16036] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:0: iget: checksum invalid [ 495.419888][T16038] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:0: iget: checksum invalid [ 496.076839][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2687'. [ 496.374507][T16058] bio_check_eod: 2 callbacks suppressed [ 496.374518][T16058] syz.7.2689: attempt to access beyond end of device [ 496.374518][T16058] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 496.452188][T16061] Can't find a SQUASHFS superblock on nullb0 [ 496.559068][T16058] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 496.561001][T16058] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 496.575271][T16058] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 496.860508][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2692'. [ 497.049492][T16080] lo speed is unknown, defaulting to 1000 [ 497.256377][T16090] FAULT_INJECTION: forcing a failure. [ 497.256377][T16090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.261434][T16090] CPU: 2 UID: 0 PID: 16090 Comm: syz.7.2696 Not tainted 6.14.0-syzkaller #0 [ 497.261456][T16090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 497.261466][T16090] Call Trace: [ 497.261473][T16090] [ 497.261480][T16090] dump_stack_lvl+0x16c/0x1f0 [ 497.261511][T16090] should_fail_ex+0x50a/0x650 [ 497.261532][T16090] __kvm_read_guest_page+0x16b/0x210 [ 497.261556][T16090] kvm_fetch_guest_virt+0x128/0x1a0 [ 497.261587][T16090] __do_insn_fetch_bytes+0x420/0x6d0 [ 497.261617][T16090] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 497.261646][T16090] ? __pfx_vmx_vcpu_pi_load+0x10/0x10 [ 497.261682][T16090] x86_decode_insn+0xb91/0x5530 [ 497.261711][T16090] ? vmx_segment_cache_test_set+0x14b/0x400 [ 497.261738][T16090] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.261765][T16090] ? __pfx_x86_decode_insn+0x10/0x10 [ 497.261786][T16090] ? vmx_cache_reg+0x333/0x5e0 [ 497.261810][T16090] ? kvm_register_read_raw+0xe9/0x240 [ 497.261837][T16090] ? init_decode_cache+0xd/0x210 [ 497.261858][T16090] ? init_emulate_ctxt+0x338/0x510 [ 497.261877][T16090] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 497.261897][T16090] ? mark_lock+0xb5/0xc60 [ 497.261928][T16090] x86_emulate_instruction+0x9c1/0x1a90 [ 497.261958][T16090] handle_ud+0x104/0x280 [ 497.261975][T16090] ? __pfx_handle_ud+0x10/0x10 [ 497.262007][T16090] handle_exception_nmi+0x83e/0x1410 [ 497.262034][T16090] ? trace_lock_acquire+0x14e/0x1f0 [ 497.262054][T16090] ? __pfx_handle_exception_nmi+0x10/0x10 [ 497.262077][T16090] vmx_handle_exit+0x6a4/0x1a30 [ 497.262104][T16090] vcpu_run+0x2af3/0x4cc0 [ 497.262129][T16090] ? __pfx_vcpu_run+0x10/0x10 [ 497.262143][T16090] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 497.262165][T16090] ? rcu_is_watching+0x12/0xc0 [ 497.262183][T16090] ? trace_lock_acquire+0x14e/0x1f0 [ 497.262199][T16090] ? __local_bh_enable_ip+0xa4/0x120 [ 497.262223][T16090] ? lockdep_hardirqs_on+0x7c/0x110 [ 497.262245][T16090] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 497.262263][T16090] ? lock_acquire+0x2f/0xb0 [ 497.262285][T16090] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 497.262299][T16090] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 497.262320][T16090] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 497.262345][T16090] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 497.262363][T16090] ? tomoyo_path_number_perm+0x190/0x590 [ 497.262385][T16090] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 497.262404][T16090] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.262440][T16090] ? do_vfs_ioctl+0x513/0x1990 [ 497.262459][T16090] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 497.262491][T16090] ? __pfx_lock_release+0x10/0x10 [ 497.262511][T16090] ? trace_lock_acquire+0x14e/0x1f0 [ 497.262531][T16090] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 497.262551][T16090] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 497.262571][T16090] ? __fget_files+0x206/0x3a0 [ 497.262596][T16090] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 497.262615][T16090] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 497.262636][T16090] __do_fast_syscall_32+0x73/0x120 [ 497.262661][T16090] do_fast_syscall_32+0x32/0x80 [ 497.262681][T16090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.262728][T16090] RIP: 0023:0xf7ff3579 [ 497.262759][T16090] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 497.262772][T16090] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 497.262786][T16090] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae80 [ 497.262794][T16090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.262802][T16090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.262810][T16090] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 497.262818][T16090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.262835][T16090] [ 498.000810][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2700'. [ 498.255947][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2703'. [ 498.264554][T16114] serio: Serial port ptm0 [ 498.463011][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 499.143758][T16134] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 499.146247][T16134] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 499.148608][T16134] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 499.155175][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2711'. [ 499.182556][ T5955] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 499.186425][T16139] EXT4-fs error: 7 callbacks suppressed [ 499.186435][T16139] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:10: iget: checksum invalid [ 499.273019][T16141] block nbd0: shutting down sockets [ 499.861285][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2714'. [ 500.100134][T16152] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:4: iget: checksum invalid [ 500.104939][T16153] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:4: iget: checksum invalid [ 500.943865][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.945652][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.954175][ T66] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 501.208260][T16162] ip6gretap0: entered promiscuous mode [ 501.211006][T16163] netlink: 'syz.0.2720': attribute type 1 has an invalid length. [ 501.213567][T16163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.279307][T16172] input: syz0 as /devices/virtual/input/input28 [ 501.282925][T16172] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2723'. [ 501.293918][T12320] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1120: comm udevd: iget: checksum invalid [ 501.310287][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2722'. [ 501.341705][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2719'. [ 501.452882][T16190] FAULT_INJECTION: forcing a failure. [ 501.452882][T16190] name failslab, interval 1, probability 0, space 0, times 0 [ 501.456331][T16190] CPU: 0 UID: 0 PID: 16190 Comm: syz.0.2729 Not tainted 6.14.0-syzkaller #0 [ 501.456344][T16190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 501.456351][T16190] Call Trace: [ 501.456354][T16190] [ 501.456358][T16190] dump_stack_lvl+0x16c/0x1f0 [ 501.456376][T16190] should_fail_ex+0x50a/0x650 [ 501.456389][T16190] should_failslab+0xc2/0x120 [ 501.456400][T16190] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 501.456416][T16190] ? skb_clone+0x190/0x3f0 [ 501.456428][T16190] skb_clone+0x190/0x3f0 [ 501.456438][T16190] netlink_deliver_tap+0xabd/0xd30 [ 501.456460][T16190] netlink_unicast+0x5e1/0x7f0 [ 501.456476][T16190] ? __pfx_netlink_unicast+0x10/0x10 [ 501.456491][T16190] ? __phys_addr_symbol+0x30/0x80 [ 501.456502][T16190] ? __check_object_size+0x488/0x710 [ 501.456514][T16190] netlink_sendmsg+0x8b8/0xd70 [ 501.456531][T16190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.456551][T16190] __sys_sendto+0x488/0x4f0 [ 501.456566][T16190] ? __pfx___sys_sendto+0x10/0x10 [ 501.456585][T16190] ? __might_fault+0x13b/0x190 [ 501.456604][T16190] __do_compat_sys_socketcall+0x5e2/0x700 [ 501.456618][T16190] ? __fget_files+0x206/0x3a0 [ 501.456632][T16190] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 501.456648][T16190] ? fput+0x67/0x440 [ 501.456663][T16190] __do_fast_syscall_32+0x73/0x120 [ 501.456679][T16190] do_fast_syscall_32+0x32/0x80 [ 501.456694][T16190] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.456711][T16190] RIP: 0023:0xf7fb4579 [ 501.456719][T16190] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 501.456729][T16190] RSP: 002b:00000000f50d5430 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 501.456739][T16190] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f50d5444 [ 501.456745][T16190] RDX: 0000000000000000 RSI: 00000000f50d5560 RDI: 00000000f743cff4 [ 501.456751][T16190] RBP: 00000000f50d5560 R08: 0000000000000000 R09: 0000000000000000 [ 501.456756][T16190] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 501.456762][T16190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.456784][T16190] [ 501.922269][T16195] netlink: 'syz.7.2731': attribute type 4 has an invalid length. [ 501.940708][T16195] netlink: 'syz.7.2731': attribute type 4 has an invalid length. [ 501.989379][T16199] FAULT_INJECTION: forcing a failure. [ 501.989379][T16199] name failslab, interval 1, probability 0, space 0, times 0 [ 502.002862][T16199] CPU: 1 UID: 0 PID: 16199 Comm: syz.0.2730 Not tainted 6.14.0-syzkaller #0 [ 502.002877][T16199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 502.002883][T16199] Call Trace: [ 502.002886][T16199] [ 502.002890][T16199] dump_stack_lvl+0x16c/0x1f0 [ 502.002909][T16199] should_fail_ex+0x50a/0x650 [ 502.002919][T16199] ? fs_reclaim_acquire+0xae/0x150 [ 502.002934][T16199] ? rfkill_alloc+0xac/0x330 [ 502.002949][T16199] should_failslab+0xc2/0x120 [ 502.002959][T16199] __kmalloc_noprof+0xcb/0x510 [ 502.002978][T16199] rfkill_alloc+0xac/0x330 [ 502.002994][T16199] wiphy_new_nm+0x1217/0x2160 [ 502.003010][T16199] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 502.003026][T16199] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 502.003042][T16199] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 502.003056][T16199] ? __local_bh_enable_ip+0xa4/0x120 [ 502.003074][T16199] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 502.003096][T16199] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.003114][T16199] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 502.003134][T16199] hwsim_new_radio_nl+0xb42/0x12b0 [ 502.003150][T16199] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 502.003169][T16199] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 502.003182][T16199] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 502.003196][T16199] genl_family_rcv_msg_doit+0x202/0x2f0 [ 502.003207][T16199] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 502.003218][T16199] ? trace_cap_capable+0x1a2/0x210 [ 502.003233][T16199] ? bpf_lsm_capable+0x9/0x10 [ 502.003244][T16199] ? security_capable+0x7e/0x260 [ 502.003255][T16199] ? ns_capable+0xd7/0x110 [ 502.003270][T16199] genl_rcv_msg+0x565/0x800 [ 502.003283][T16199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.003294][T16199] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 502.003310][T16199] ? __pfx___lock_acquire+0x10/0x10 [ 502.003327][T16199] netlink_rcv_skb+0x16b/0x440 [ 502.003343][T16199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.003354][T16199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.003374][T16199] ? down_read+0xc9/0x330 [ 502.003390][T16199] ? __pfx_down_read+0x10/0x10 [ 502.003405][T16199] ? netlink_deliver_tap+0x1ae/0xd30 [ 502.003422][T16199] genl_rcv+0x28/0x40 [ 502.003430][T16199] netlink_unicast+0x53c/0x7f0 [ 502.003447][T16199] ? __pfx_netlink_unicast+0x10/0x10 [ 502.003462][T16199] ? __phys_addr_symbol+0x30/0x80 [ 502.003473][T16199] ? __check_object_size+0x488/0x710 [ 502.003486][T16199] netlink_sendmsg+0x8b8/0xd70 [ 502.003503][T16199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.003523][T16199] ____sys_sendmsg+0xaaf/0xc90 [ 502.003536][T16199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.003548][T16199] ? get_compat_msghdr+0x11b/0x170 [ 502.003568][T16199] ___sys_sendmsg+0x135/0x1e0 [ 502.003584][T16199] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.003618][T16199] ? __pfx_lock_release+0x10/0x10 [ 502.003638][T16199] ? trace_lock_acquire+0x14e/0x1f0 [ 502.003654][T16199] ? __fget_files+0x206/0x3a0 [ 502.003672][T16199] __sys_sendmsg+0x16e/0x220 [ 502.003682][T16199] ? __pfx___sys_sendmsg+0x10/0x10 [ 502.003700][T16199] __do_fast_syscall_32+0x73/0x120 [ 502.003717][T16199] do_fast_syscall_32+0x32/0x80 [ 502.003732][T16199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.003748][T16199] RIP: 0023:0xf7fb4579 [ 502.003757][T16199] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 502.003767][T16199] RSP: 002b:00000000f509455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 502.003777][T16199] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 502.003783][T16199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.003789][T16199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.003794][T16199] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 502.003800][T16199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.003812][T16199] [ 502.003819][T16199] INFO: trying to register non-static key. [ 502.112680][T16199] The code is fine but needs lockdep annotation, or maybe [ 502.114685][T16199] you didn't initialize this object before use? [ 502.118010][T16199] turning off the locking correctness validator. [ 502.120041][T16199] CPU: 1 UID: 0 PID: 16199 Comm: syz.0.2730 Not tainted 6.14.0-syzkaller #0 [ 502.120053][T16199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 502.120059][T16199] Call Trace: [ 502.120063][T16199] [ 502.120067][T16199] dump_stack_lvl+0x116/0x1f0 [ 502.120085][T16199] register_lock_class+0xc39/0x1240 [ 502.120100][T16199] ? irq_work_queue+0x2a/0x80 [ 502.120114][T16199] ? __wake_up_klogd.part.0+0x99/0xf0 [ 502.120129][T16199] ? vprintk_emit+0x39e/0x6f0 [ 502.120139][T16199] ? __pfx_register_lock_class+0x10/0x10 [ 502.120154][T16199] __lock_acquire+0x135/0x3c40 [ 502.120168][T16199] ? mark_lock+0xb5/0xc60 [ 502.120180][T16199] ? lock_acquire+0x2f/0xb0 [ 502.120192][T16199] ? is_bpf_text_address+0x30/0x1a0 [ 502.120205][T16199] ? __pfx_mark_lock+0x10/0x10 [ 502.120218][T16199] ? __pfx___lock_acquire+0x10/0x10 [ 502.120231][T16199] ? show_trace_log_lvl+0x29d/0x3d0 [ 502.120246][T16199] lock_acquire.part.0+0x11b/0x380 [ 502.120259][T16199] ? cfg80211_dev_free+0x30/0x3d0 [ 502.120270][T16199] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 502.120284][T16199] ? rcu_is_watching+0x12/0xc0 [ 502.120294][T16199] ? trace_lock_acquire+0x14e/0x1f0 [ 502.120305][T16199] ? lockdep_hardirqs_on+0x7c/0x110 [ 502.120319][T16199] ? cfg80211_dev_free+0x30/0x3d0 [ 502.120328][T16199] ? lock_acquire+0x2f/0xb0 [ 502.120340][T16199] ? cfg80211_dev_free+0x30/0x3d0 [ 502.120350][T16199] _raw_spin_lock_irqsave+0x3a/0x60 [ 502.120362][T16199] ? cfg80211_dev_free+0x30/0x3d0 [ 502.120371][T16199] cfg80211_dev_free+0x30/0x3d0 [ 502.120381][T16199] ? __pfx_wiphy_dev_release+0x10/0x10 [ 502.120391][T16199] device_release+0xa1/0x240 [ 502.120401][T16199] kobject_put+0x1e4/0x5a0 [ 502.120416][T16199] put_device+0x1f/0x30 [ 502.120424][T16199] wiphy_new_nm+0x1c1f/0x2160 [ 502.120439][T16199] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 502.120455][T16199] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 502.120470][T16199] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 502.120484][T16199] ? __local_bh_enable_ip+0xa4/0x120 [ 502.120500][T16199] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 502.120518][T16199] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.120535][T16199] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 502.120551][T16199] hwsim_new_radio_nl+0xb42/0x12b0 [ 502.120566][T16199] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 502.120581][T16199] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 502.120593][T16199] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 502.120605][T16199] genl_family_rcv_msg_doit+0x202/0x2f0 [ 502.120616][T16199] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 502.120626][T16199] ? trace_cap_capable+0x1a2/0x210 [ 502.120641][T16199] ? bpf_lsm_capable+0x9/0x10 [ 502.120652][T16199] ? security_capable+0x7e/0x260 [ 502.120662][T16199] ? ns_capable+0xd7/0x110 [ 502.120676][T16199] genl_rcv_msg+0x565/0x800 [ 502.120687][T16199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.120697][T16199] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 502.120712][T16199] ? __pfx___lock_acquire+0x10/0x10 [ 502.120726][T16199] netlink_rcv_skb+0x16b/0x440 [ 502.120740][T16199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.120750][T16199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.120766][T16199] ? down_read+0xc9/0x330 [ 502.120781][T16199] ? __pfx_down_read+0x10/0x10 [ 502.120796][T16199] ? netlink_deliver_tap+0x1ae/0xd30 [ 502.120810][T16199] genl_rcv+0x28/0x40 [ 502.120818][T16199] netlink_unicast+0x53c/0x7f0 [ 502.120833][T16199] ? __pfx_netlink_unicast+0x10/0x10 [ 502.120847][T16199] ? __phys_addr_symbol+0x30/0x80 [ 502.120857][T16199] ? __check_object_size+0x488/0x710 [ 502.120868][T16199] netlink_sendmsg+0x8b8/0xd70 [ 502.120883][T16199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.120899][T16199] ____sys_sendmsg+0xaaf/0xc90 [ 502.120912][T16199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.120924][T16199] ? get_compat_msghdr+0x11b/0x170 [ 502.120939][T16199] ___sys_sendmsg+0x135/0x1e0 [ 502.120954][T16199] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.120972][T16199] ? __pfx_lock_release+0x10/0x10 [ 502.120984][T16199] ? trace_lock_acquire+0x14e/0x1f0 [ 502.120997][T16199] ? __fget_files+0x206/0x3a0 [ 502.121012][T16199] __sys_sendmsg+0x16e/0x220 [ 502.121021][T16199] ? __pfx___sys_sendmsg+0x10/0x10 [ 502.121033][T16199] __do_fast_syscall_32+0x73/0x120 [ 502.121048][T16199] do_fast_syscall_32+0x32/0x80 [ 502.121062][T16199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.121078][T16199] RIP: 0023:0xf7fb4579 [ 502.121086][T16199] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 502.121095][T16199] RSP: 002b:00000000f509455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 502.121105][T16199] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 502.121111][T16199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.121116][T16199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.121122][T16199] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 502.121128][T16199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.121136][T16199] [ 502.121482][T16199] ------------[ cut here ]------------ [ 502.259891][T16199] WARNING: CPU: 1 PID: 16199 at net/wireless/core.c:1197 cfg80211_dev_free+0x2e7/0x3d0 [ 502.262529][T16199] Modules linked in: [ 502.263640][T16199] CPU: 1 UID: 0 PID: 16199 Comm: syz.0.2730 Not tainted 6.14.0-syzkaller #0 [ 502.266028][T16199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 502.269016][T16199] RIP: 0010:cfg80211_dev_free+0x2e7/0x3d0 [ 502.270598][T16199] Code: 00 00 49 8b bd e0 08 00 00 e8 d5 a1 6a f7 4c 89 ef 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 bf a1 6a f7 e8 0a 17 13 f7 90 <0f> 0b 90 e9 6f fd ff ff 4c 89 f7 e8 99 55 75 f7 e9 aa fe ff ff 4c [ 502.275881][T16199] RSP: 0018:ffffc9000edc71a8 EFLAGS: 00010093 [ 502.277573][T16199] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff81972ccd [ 502.279782][T16199] RDX: ffff888024ab4880 RSI: ffffffff8aa6d8c6 RDI: ffffc9000edc7118 [ 502.281980][T16199] RBP: ffff8880659a06a8 R08: 0000000000000001 R09: fffff52001db8e23 [ 502.284170][T16199] R10: 0000000000000003 R11: 000000000000001e R12: ffff8880659a06b8 [ 502.286367][T16199] R13: ffff8880659a0000 R14: ffff88806ae7ac80 R15: 0000000000000000 [ 502.288566][T16199] FS: 0000000000000000(0000) GS:ffff88802b500000(0063) knlGS:00000000f5094b40 [ 502.291028][T16199] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 502.292829][T16199] CR2: 00000000f5093fac CR3: 0000000053bd6000 CR4: 0000000000352ef0 [ 502.295014][T16199] Call Trace: [ 502.295972][T16199] [ 502.296821][T16199] ? __warn+0xea/0x3c0 [ 502.297973][T16199] ? cfg80211_dev_free+0x2e7/0x3d0 [ 502.299370][T16199] ? report_bug+0x3c0/0x580 [ 502.300655][T16199] ? handle_bug+0x54/0xa0 [ 502.301875][T16199] ? exc_invalid_op+0x17/0x50 [ 502.303205][T16199] ? asm_exc_invalid_op+0x1a/0x20 [ 502.304624][T16199] ? do_raw_spin_lock+0x12d/0x2c0 [ 502.306029][T16199] ? cfg80211_dev_free+0x2e6/0x3d0 [ 502.307465][T16199] ? cfg80211_dev_free+0x2e7/0x3d0 [ 502.308903][T16199] ? cfg80211_dev_free+0x2e6/0x3d0 [ 502.310330][T16199] ? __pfx_wiphy_dev_release+0x10/0x10 [ 502.311856][T16199] device_release+0xa1/0x240 [ 502.313154][T16199] kobject_put+0x1e4/0x5a0 [ 502.314410][T16199] put_device+0x1f/0x30 [ 502.315582][T16199] wiphy_new_nm+0x1c1f/0x2160 [ 502.316929][T16199] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 502.318738][T16199] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 502.320625][T16199] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 502.322152][T16199] ? __local_bh_enable_ip+0xa4/0x120 [ 502.323644][T16199] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 502.325217][T16199] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.326860][T16199] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 502.328582][T16199] hwsim_new_radio_nl+0xb42/0x12b0 [ 502.330017][T16199] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 502.331570][T16199] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 502.333619][T16199] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 502.335615][T16199] genl_family_rcv_msg_doit+0x202/0x2f0 [ 502.337129][T16199] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 502.338817][T16199] ? trace_cap_capable+0x1a2/0x210 [ 502.340237][T16199] ? bpf_lsm_capable+0x9/0x10 [ 502.341527][T16199] ? security_capable+0x7e/0x260 [ 502.342896][T16199] ? ns_capable+0xd7/0x110 [ 502.344137][T16199] genl_rcv_msg+0x565/0x800 [ 502.345401][T16199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.346810][T16199] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 502.348346][T16199] ? __pfx___lock_acquire+0x10/0x10 [ 502.349782][T16199] netlink_rcv_skb+0x16b/0x440 [ 502.351123][T16199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.352517][T16199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.353989][T16199] ? down_read+0xc9/0x330 [ 502.355204][T16199] ? __pfx_down_read+0x10/0x10 [ 502.356545][T16199] ? netlink_deliver_tap+0x1ae/0xd30 [ 502.358035][T16199] genl_rcv+0x28/0x40 [ 502.359145][T16199] netlink_unicast+0x53c/0x7f0 [ 502.360495][T16199] ? __pfx_netlink_unicast+0x10/0x10 [ 502.361953][T16199] ? __phys_addr_symbol+0x30/0x80 [ 502.363341][T16199] ? __check_object_size+0x488/0x710 [ 502.364798][T16199] netlink_sendmsg+0x8b8/0xd70 [ 502.366151][T16199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.367670][T16199] ____sys_sendmsg+0xaaf/0xc90 [ 502.369007][T16199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.370476][T16199] ? get_compat_msghdr+0x11b/0x170 [ 502.371887][T16199] ___sys_sendmsg+0x135/0x1e0 [ 502.373191][T16199] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.374620][T16199] ? __pfx_lock_release+0x10/0x10 [ 502.376048][T16199] ? trace_lock_acquire+0x14e/0x1f0 [ 502.377496][T16199] ? __fget_files+0x206/0x3a0 [ 502.378816][T16199] __sys_sendmsg+0x16e/0x220 [ 502.380115][T16199] ? __pfx___sys_sendmsg+0x10/0x10 [ 502.381547][T16199] __do_fast_syscall_32+0x73/0x120 [ 502.382962][T16199] do_fast_syscall_32+0x32/0x80 [ 502.384312][T16199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.386070][T16199] RIP: 0023:0xf7fb4579 [ 502.387206][T16199] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 502.392483][T16199] RSP: 002b:00000000f509455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 502.394797][T16199] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 502.396959][T16199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.399159][T16199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.401289][T16199] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 502.403400][T16199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.405527][T16199] [ 502.406403][T16199] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 502.408406][T16199] CPU: 1 UID: 0 PID: 16199 Comm: syz.0.2730 Not tainted 6.14.0-syzkaller #0 [ 502.410752][T16199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 502.413638][T16199] Call Trace: [ 502.414559][T16199] [ 502.415384][T16199] dump_stack_lvl+0x3d/0x1f0 [ 502.416698][T16199] panic+0x71d/0x800 [ 502.417817][T16199] ? __pfx_panic+0x10/0x10 [ 502.419053][T16199] ? show_trace_log_lvl+0x29d/0x3d0 [ 502.420455][T16199] ? check_panic_on_warn+0x1f/0xb0 [ 502.421865][T16199] ? cfg80211_dev_free+0x2e7/0x3d0 [ 502.423240][T16199] check_panic_on_warn+0xab/0xb0 [ 502.424609][T16199] __warn+0xf6/0x3c0 [ 502.425719][T16199] ? cfg80211_dev_free+0x2e7/0x3d0 [ 502.427149][T16199] report_bug+0x3c0/0x580 [ 502.428406][T16199] handle_bug+0x54/0xa0 [ 502.429577][T16199] exc_invalid_op+0x17/0x50 [ 502.430858][T16199] asm_exc_invalid_op+0x1a/0x20 [ 502.432234][T16199] RIP: 0010:cfg80211_dev_free+0x2e7/0x3d0 [ 502.433811][T16199] Code: 00 00 49 8b bd e0 08 00 00 e8 d5 a1 6a f7 4c 89 ef 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 bf a1 6a f7 e8 0a 17 13 f7 90 <0f> 0b 90 e9 6f fd ff ff 4c 89 f7 e8 99 55 75 f7 e9 aa fe ff ff 4c [ 502.439106][T16199] RSP: 0018:ffffc9000edc71a8 EFLAGS: 00010093 [ 502.440796][T16199] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff81972ccd [ 502.442967][T16199] RDX: ffff888024ab4880 RSI: ffffffff8aa6d8c6 RDI: ffffc9000edc7118 [ 502.445164][T16199] RBP: ffff8880659a06a8 R08: 0000000000000001 R09: fffff52001db8e23 [ 502.447350][T16199] R10: 0000000000000003 R11: 000000000000001e R12: ffff8880659a06b8 [ 502.449482][T16199] R13: ffff8880659a0000 R14: ffff88806ae7ac80 R15: 0000000000000000 [ 502.451566][T16199] ? do_raw_spin_lock+0x12d/0x2c0 [ 502.452933][T16199] ? cfg80211_dev_free+0x2e6/0x3d0 [ 502.454289][T16199] ? cfg80211_dev_free+0x2e6/0x3d0 [ 502.455642][T16199] ? __pfx_wiphy_dev_release+0x10/0x10 [ 502.457108][T16199] device_release+0xa1/0x240 [ 502.458378][T16199] kobject_put+0x1e4/0x5a0 [ 502.459570][T16199] put_device+0x1f/0x30 [ 502.460711][T16199] wiphy_new_nm+0x1c1f/0x2160 [ 502.461988][T16199] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 502.463794][T16199] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 502.465606][T16199] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 502.467055][T16199] ? __local_bh_enable_ip+0xa4/0x120 [ 502.468560][T16199] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 502.470131][T16199] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.471802][T16199] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 502.473480][T16199] hwsim_new_radio_nl+0xb42/0x12b0 [ 502.474917][T16199] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 502.476479][T16199] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 502.478470][T16199] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 502.480457][T16199] genl_family_rcv_msg_doit+0x202/0x2f0 [ 502.482008][T16199] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 502.483704][T16199] ? trace_cap_capable+0x1a2/0x210 [ 502.485166][T16199] ? bpf_lsm_capable+0x9/0x10 [ 502.486450][T16199] ? security_capable+0x7e/0x260 [ 502.487834][T16199] ? ns_capable+0xd7/0x110 [ 502.489070][T16199] genl_rcv_msg+0x565/0x800 [ 502.490302][T16199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.491666][T16199] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 502.493166][T16199] ? __pfx___lock_acquire+0x10/0x10 [ 502.494559][T16199] netlink_rcv_skb+0x16b/0x440 [ 502.495861][T16199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.497219][T16199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.498644][T16199] ? down_read+0xc9/0x330 [ 502.499832][T16199] ? __pfx_down_read+0x10/0x10 [ 502.501130][T16199] ? netlink_deliver_tap+0x1ae/0xd30 [ 502.502601][T16199] genl_rcv+0x28/0x40 [ 502.503739][T16199] netlink_unicast+0x53c/0x7f0 [ 502.505084][T16199] ? __pfx_netlink_unicast+0x10/0x10 [ 502.506534][T16199] ? __phys_addr_symbol+0x30/0x80 [ 502.507909][T16199] ? __check_object_size+0x488/0x710 [ 502.509338][T16199] netlink_sendmsg+0x8b8/0xd70 [ 502.510625][T16199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.512051][T16199] ____sys_sendmsg+0xaaf/0xc90 [ 502.513357][T16199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.514777][T16199] ? get_compat_msghdr+0x11b/0x170 [ 502.516148][T16199] ___sys_sendmsg+0x135/0x1e0 [ 502.517496][T16199] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.518961][T16199] ? __pfx_lock_release+0x10/0x10 [ 502.520415][T16199] ? trace_lock_acquire+0x14e/0x1f0 [ 502.521882][T16199] ? __fget_files+0x206/0x3a0 [ 502.523219][T16199] __sys_sendmsg+0x16e/0x220 [ 502.524536][T16199] ? __pfx___sys_sendmsg+0x10/0x10 [ 502.525965][T16199] __do_fast_syscall_32+0x73/0x120 [ 502.527405][T16199] do_fast_syscall_32+0x32/0x80 [ 502.528807][T16199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.530565][T16199] RIP: 0023:0xf7fb4579 [ 502.531718][T16199] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 502.537017][T16199] RSP: 002b:00000000f509455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 502.539345][T16199] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 502.541549][T16199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.543743][T16199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.545933][T16199] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 502.548143][T16199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.550329][T16199] [ 502.551619][T16199] Kernel Offset: disabled [ 502.552838][T16199] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:54:35 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b43ff40 RCX=ffffffff81adfc64 RDX=ffff88801d2d2440 RSI=ffffffff81adfc3f RDI=0000000000000005 RBP=ffffc9000046fd10 RSP=ffffc9000046fc40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c38fd6 R12=1ffff9200008df8c R13=0000000000000001 R14=0000000000000003 R15=ffffed1005687fe9 RIP=ffffffff81adfc41 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000574484c0 CR3=000000004f810000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853eaad5 RDI=ffffffff9ab72ea0 RBP=ffffffff9ab72e60 RSP=ffffc9000edc69e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e64696420756f79 R12=0000000000000000 R13=0000000000000079 R14=ffffffff9ab72e60 R15=0000000000000000 RIP=ffffffff853eaaff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5093fac CR3=0000000053bd6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000004 RCX=ffffffff84c9152f RDX=ffff888025504880 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc9000363f440 RSP=ffffc9000363f300 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000012 R12=ffffffff8bd3b074 R13=1ffff920006c7e6a R14=ffff888028bd19c4 R15=0000000000000000 RIP=ffffffff81b9e99b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f78c54b0d00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fa1e5a4000 CR3=000000002a736000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=4727c5da4727c5da 4727c5da4727c5da 4727c5da4727c5da 4727c5da4727c5da 4727c5da4727c5da 4727c5da4727c5da 4727c5da4727c5da 4727c5da4727c5da ZMM22=fb2d0d39fb2d0d39 fb2d0d39fb2d0d39 fb2d0d39fb2d0d39 fb2d0d39fb2d0d39 fb2d0d39fb2d0d39 fb2d0d39fb2d0d39 fb2d0d39fb2d0d39 fb2d0d39fb2d0d39 ZMM23=38278aa038278aa0 38278aa038278aa0 38278aa038278aa0 38278aa038278aa0 38278aa038278aa0 38278aa038278aa0 38278aa038278aa0 38278aa038278aa0 ZMM24=e872a9c2e872a9c2 e872a9c2e872a9c2 e872a9c2e872a9c2 e872a9c2e872a9c2 e872a9c2e872a9c2 e872a9c2e872a9c2 e872a9c2e872a9c2 e872a9c2e872a9c2 ZMM25=8f43556f8f43556f 8f43556f8f43556f 8f43556f8f43556f 8f43556f8f43556f 8f43556f8f43556f 8f43556f8f43556f 8f43556f8f43556f 8f43556f8f43556f ZMM26=4e37d3414e37d341 4e37d3414e37d341 4e37d3414e37d341 4e37d3414e37d341 4e37d3414e37d341 4e37d3414e37d341 4e37d3414e37d341 4e37d3414e37d341 ZMM27=4060884040608840 4060884040608840 4060884040608840 4060884040608840 4060884040608840 4060884040608840 4060884040608840 4060884040608840 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=f4120000f4120000 f4120000f4120000 f4120000f4120000 f4120000f4120000 f4120000f4120000 f4120000f4120000 f4120000f4120000 f4120000f4120000 info registers vcpu 3 CPU#3 RAX=000000000007ffff RBX=ffff88802b546780 RCX=ffffc900266e1000 RDX=0000000000080000 RSI=ffffffff81ade0b4 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000f6e7588 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=000000000000001e R12=ffffed10056a8cf1 R13=0000000000000001 R14=ffff88802b73ffc0 R15=ffff88802b546788 RIP=ffffffff81b9f026 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000639ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000fff Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a3b4be8a166b0383 2753dfec697dabb4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fb7c58ce21e6b42f a5f77af5cc78bf56 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a58e889599c23e3c 6ee42b528097f000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 024f21fe68c380ff 8800000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001020304050607 08090a0b0c0d0e0f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cda419f600000000 0000010800000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc913ab0ed191ac3 5c7a013bc60721db ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45a611187c950d8b ecb7d19d15bb3f62 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b64a017f57b59ffa e605dd7adafbe09f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cda419f600000000 0000010800000008 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8779fc74e77d77ee c37ed04c7b3ddee3 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d51d6d828f7c7c0 5462ca4bb8d51bd6 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 c200000000000000 0000000000000001