last executing test programs: 26m9.543391444s ago: executing program 1 (id=1892): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x61}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRESHEX=r1, @ANYRES64=r1, @ANYRES32, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x3) ppoll(&(0x7f0000003840)=[{r2, 0x40}], 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0x9eb6, 0x4) bind$inet6(r6, &(0x7f0000f65000)={0xa, 0x4e20, 0x8001, @loopback}, 0x1c) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000080)) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_bridge\x00', {0x2000001}, 0x26}) syz_emit_ethernet(0x32, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7, 0x645a95e3f2d9513}}}}}}}, 0x0) 26m7.724391172s ago: executing program 1 (id=1898): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4004743b, &(0x7f0000001200)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usbip_server_init(0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 26m6.79538456s ago: executing program 3 (id=1902): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002940)=[{0x0}, {0x0}, {&(0x7f00000025c0)=""/137, 0x89}], 0x3}, 0x1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44840) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010007bd7000fddbd72555000000080001006400000008000300", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x50bd28, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x4a}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) mknod$loop(0x0, 0x2000, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 26m4.94291135s ago: executing program 1 (id=1906): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x61}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRESHEX=r1, @ANYRES64=r1, @ANYRES32, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x3) ppoll(&(0x7f0000003840)=[{r2, 0x40}], 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0x9eb6, 0x4) bind$inet6(r6, &(0x7f0000f65000)={0xa, 0x4e20, 0x8001, @loopback}, 0x1c) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000080)) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_bridge\x00', {0x2000001}, 0x26}) syz_emit_ethernet(0x32, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7, 0x645a95e3f2d9513}}}}}}}, 0x0) 26m4.540751241s ago: executing program 0 (id=1912): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(0x0) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x0, 0x2f0}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x18) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 26m3.805389773s ago: executing program 1 (id=1913): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4004743b, &(0x7f0000001200)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 26m3.631129576s ago: executing program 0 (id=1916): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4004743b, &(0x7f0000001200)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 26m3.287353466s ago: executing program 3 (id=1917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r6 = dup(r2) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000020605000700000000000000000056973ee204000300000005000500030000000000000073797a31000000000c000300686173683a697000050001000700000060b9d99013dce10d47723df9e097001994845a9dc49b797428279fd4b1796819268012a18bd7a9d8178178e6e1b473e154066fa474a1a25358ba172bda7b068eb8152ab3bf05753a6e099e20527a2c95"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20044454) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff00"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000001cc0)={0x1270, 0x2e, 0x200, 0x0, 0x0, "", [@nested={0x125f, 0x0, 0x0, 0x1, [@nested={0x1162, 0xda, 0x0, 0x1, [@generic="8a2df6f6c50d74b1bd8b556e2afeb1820f0bc3322dad06c38d1070a2", @generic="df78ad279ac7637f3108cbea5a7c4c51d2fbd28013ea213ace7621ec2549b890c995e32d8ce3919282a8c0232e6c479aea60ac9e52c112aadd1a", @generic="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", @nested={0x14, 0x10e, 0x0, 0x1, [@nested={0x4, 0xac}, @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x4c}]}, @typed={0x8, 0x57, 0x0, 0x0, @u32=0x101}, @typed={0xe8, 0x13e, 0x0, 0x0, @binary="1c845ca1343396ca8fc1d38d628fee2557265735ec61504daacbb822dc84c22929a6cd5e59724ad7c6be50c0112f1ab2b0f125527f10090466e8d63c9a05da7fb4d46fb8861d13bb1797b7c24bcf93d03abec8694189551ea9eeca2d5d08c43eae6b3662b172918e86ad80b7179461bac77ed413cb16bbf751105ccc3556cb36709026d143ba78a2d609f49c8e9a5523ba989cb55c567a2572169d0eeb78aa8c697ca52789d79a0b09ce61d40e9ebfc6b56f5867ab5e09ec40fc9e3eb6ef18e964fdc0c0092c832cf39ccd72ed1586958677b47a649e0b34b99646228ca6c374f8645bb7"}, @typed={0x4, 0x117}]}, @typed={0xe, 0x65, 0x0, 0x0, @str='/dev/dsp1\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe81010000000100e923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000000000000000001f99e987be11005dd82a"]}]}, 0x1270}], 0x1}, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000280)='hostfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}}, 0x8000) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000340)={@in={0x2, 0x4e21, @multicast1}, {&(0x7f0000000440)=""/248, 0xf8}, &(0x7f0000000040), 0x32}, 0xa0) 26m0.286115618s ago: executing program 3 (id=1921): r0 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x400) r1 = socket(0x10, 0x803, 0x0) write(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x700, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b0000000000011907800000da70acdde5ec92400000000000000004e20009c907801000000000000007b4b14fcff61fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cd"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, 0x0, 0x119) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f4, 0x0, 0x0, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x6, &(0x7f0000000300)=""/153) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x9, {0x0, 0xe, 0x0, 0x800000}}) 25m59.046364322s ago: executing program 0 (id=1922): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 25m58.89919372s ago: executing program 1 (id=1924): creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x96) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffc3fa, 0x405, 0x8, 0x10000, 0x7, "0441920887e87fcb367800000000080100", 0x6, 0x6ea}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000140)={0xfffffffffffffffa, 0x0, 0x5, 0x200}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0xf, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={"5fc8ebbd", 0x9f6, 0x2e, 0x0, 0x2, 0x80000000, "7b1f3738d9a5c8926e073d9b2a3a32", "d9326d9c", "bc4a68eb", "df04f3c1", ["a7c604f8b6cce736a2a650e8", "20213e0c846e0c94cf19f559", "1c135eee34441b44403b9e44", "752273d218b58e4967b9c746"]}) mount$afs(&(0x7f0000000440)=ANY=[@ANYBLOB="230012ac1a"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 25m58.879589178s ago: executing program 0 (id=1925): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002940)=[{0x0}, {0x0}, {&(0x7f00000025c0)=""/137, 0x89}], 0x3}, 0x1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44840) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010007bd7000fddbd72555000000080001006400000008000300", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x50bd28, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x4a}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) mknod$loop(0x0, 0x2000, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 25m57.450603903s ago: executing program 3 (id=1926): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(0x0) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x0, 0x2f0}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x18) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 25m53.004476733s ago: executing program 1 (id=1927): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4004743b, &(0x7f0000001200)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usbip_server_init(0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 25m50.484192355s ago: executing program 0 (id=1929): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x850000, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@nodevmap}, {@cache_none}, {@access_client}, {@privport}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@euid_lt}, {@measure}, {@measure}]}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={0xffffffffffffffff, 0x8001, 0x7, 0x8000000000000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x20000000) 25m48.952643511s ago: executing program 3 (id=1930): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x61}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRESHEX=r1, @ANYRES64=r1, @ANYRES32, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x3) ppoll(&(0x7f0000003840)=[{r2, 0x40}], 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000f65000)={0xa, 0x4e20, 0x8001, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x5eff}, 0x1c) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000080)) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_bridge\x00', {0x2000001}, 0x26}) syz_emit_ethernet(0x32, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7, 0x645a95e3f2d9513}}}}}}}, 0x0) 25m46.509094142s ago: executing program 0 (id=1931): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4004743b, &(0x7f0000001200)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usbip_server_init(0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 25m30.535814597s ago: executing program 3 (id=1933): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4004743b, &(0x7f0000001200)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usbip_server_init(0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 25m29.457931173s ago: executing program 32 (id=1927): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4004743b, &(0x7f0000001200)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usbip_server_init(0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 25m29.439098393s ago: executing program 33 (id=1931): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4004743b, &(0x7f0000001200)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usbip_server_init(0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 25m29.274909123s ago: executing program 34 (id=1933): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4004743b, &(0x7f0000001200)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usbip_server_init(0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2m31.289563801s ago: executing program 5 (id=8684): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r2 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc0405626, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r4, 0xe4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xd, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0xfffffffffffffc4a}}, 0x70}}, 0x24040880) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0]) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) 2m28.533637957s ago: executing program 5 (id=8703): pselect6(0x40, &(0x7f0000000200)={0x8, 0xd8b8, 0x4, 0x8, 0x7, 0x4, 0x9, 0x5}, &(0x7f0000000240)={0x12, 0x0, 0x620e83b1, 0x2ca0000000000000, 0x8000000000000000, 0x7fffffffffffffff, 0x2, 0x2}, 0x0, 0x0, 0x0) 2m28.455416972s ago: executing program 5 (id=8696): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x2, 0x200000, 0x0, 0xb49, 0x9, 0x8, 0x3, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x6b9baa709c74be5b, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x84) 2m26.303514637s ago: executing program 5 (id=8707): socket(0x6, 0x1, 0xfffffffc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x18, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080007000028006400000402907800dfffffdf00000211009078e0000002000000020000002000000000"], 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000c00000000000000215f64c20f3f8dc2cea5b15780ea7cd3b64831aff2e850cd69014e75c75a56abe66802870e219911cf34f452f72981cb209887ba4125e4e246a5d40ad5db689a0d762f559d15cd666a582891ee", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x4, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0xb}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x4008840) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x6, 0x10000000) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') inotify_init() syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x800, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) socket$inet6(0xa, 0x80002, 0x0) 2m25.349530965s ago: executing program 5 (id=8714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f0000000140)={@any, 0x100}) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) 2m24.692397017s ago: executing program 5 (id=8717): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x1, 0x0, 0x5}}, 0x18) sendto$unix(r1, &(0x7f0000000140)="fa7e53f637a2bb", 0x7, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netpci0\x00', 0x0}) sendmsg$xdp(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x2c, 0x3, r3, 0x9}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="516d90368fa3ad260a7afbc7fed0e8f00bd1120a170493f5d2f3b21be090d1cdc9cb132a49f69a7b12aca63c4589946be0df7fc797e1b1e35818ef7a48d2fe080014e62f5198ec2d998f0d3ac9e5dbcfe8fdb2d498d41167adc5b12d72e65a5724a4e22150c99754841a595daed604961c161fd888605a8997f5f34adbc35439341d464db91fae39de21ba19f03405977a94b8bedb6336ac340fafcf304e2c9eca64fb66404fe2ec8fd77644880fa3fec5d4224777eacc097abcec0ec55b58b7dbd24f3745999bae1dc6bb8fee44d0c4cb309591db4a4be12c76fe1d373b5f902f1d5f52", 0xe4}, {&(0x7f0000000100)="2eb7ec37bc6e5d7b6ce5501edfc08589f4bf5e18f58f1669ec5b1843719dc06501bc9c55d10e88cef9cabbc05b308fe05b47", 0x32}, {&(0x7f0000000340)="55da7da46787b324cfe1dd48a10801b912c46fbcaac21bc5fe8f726354fecaff95056d04c87211c67e73dcae7ebce55ef4cede9ac0fbc81c9360a0ad6809503725e5f8f4c18254773e95c4a0df0ee39cc7d3056c02622109c40ba5bc5e9e264506648de62549e42322a419d37b2b1c85e25daa79261977af340ef4aec904ec62fd96cc26bc8dab217db281ac04", 0x8d}, {&(0x7f0000000400)="8926038071fd4e7fac30f520f047367e1658e2805a2659b40bc1102dc8f6f6b6de917f6fec06809f52a362e7abf9cb429a69e482ff800cbe87b94298c154ad42e81714362beae00d44159a1a1ff3cd019e5c50e59250bb636cd8a442104172", 0x5f}], 0x4, 0x0, 0x0, 0x40404c1}, 0x4000800) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)=0x1) pselect6(0x40, &(0x7f0000000200)={0x8, 0xd8b8, 0x4, 0x8, 0x7, 0x4, 0x9, 0x5}, &(0x7f0000000240)={0x12, 0x0, 0x620e83b1, 0x2ca0000000000000, 0x8000000000000000, 0x7fffffffffffffff, 0x2, 0x2}, 0x0, 0x0, 0x0) 2m24.212148126s ago: executing program 35 (id=8717): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x1, 0x0, 0x5}}, 0x18) sendto$unix(r1, &(0x7f0000000140)="fa7e53f637a2bb", 0x7, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netpci0\x00', 0x0}) sendmsg$xdp(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x2c, 0x3, r3, 0x9}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="516d90368fa3ad260a7afbc7fed0e8f00bd1120a170493f5d2f3b21be090d1cdc9cb132a49f69a7b12aca63c4589946be0df7fc797e1b1e35818ef7a48d2fe080014e62f5198ec2d998f0d3ac9e5dbcfe8fdb2d498d41167adc5b12d72e65a5724a4e22150c99754841a595daed604961c161fd888605a8997f5f34adbc35439341d464db91fae39de21ba19f03405977a94b8bedb6336ac340fafcf304e2c9eca64fb66404fe2ec8fd77644880fa3fec5d4224777eacc097abcec0ec55b58b7dbd24f3745999bae1dc6bb8fee44d0c4cb309591db4a4be12c76fe1d373b5f902f1d5f52", 0xe4}, {&(0x7f0000000100)="2eb7ec37bc6e5d7b6ce5501edfc08589f4bf5e18f58f1669ec5b1843719dc06501bc9c55d10e88cef9cabbc05b308fe05b47", 0x32}, {&(0x7f0000000340)="55da7da46787b324cfe1dd48a10801b912c46fbcaac21bc5fe8f726354fecaff95056d04c87211c67e73dcae7ebce55ef4cede9ac0fbc81c9360a0ad6809503725e5f8f4c18254773e95c4a0df0ee39cc7d3056c02622109c40ba5bc5e9e264506648de62549e42322a419d37b2b1c85e25daa79261977af340ef4aec904ec62fd96cc26bc8dab217db281ac04", 0x8d}, {&(0x7f0000000400)="8926038071fd4e7fac30f520f047367e1658e2805a2659b40bc1102dc8f6f6b6de917f6fec06809f52a362e7abf9cb429a69e482ff800cbe87b94298c154ad42e81714362beae00d44159a1a1ff3cd019e5c50e59250bb636cd8a442104172", 0x5f}], 0x4, 0x0, 0x0, 0x40404c1}, 0x4000800) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)=0x1) pselect6(0x40, &(0x7f0000000200)={0x8, 0xd8b8, 0x4, 0x8, 0x7, 0x4, 0x9, 0x5}, &(0x7f0000000240)={0x12, 0x0, 0x620e83b1, 0x2ca0000000000000, 0x8000000000000000, 0x7fffffffffffffff, 0x2, 0x2}, 0x0, 0x0, 0x0) 1m5.019418519s ago: executing program 6 (id=8998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000200)={@host, 0x2}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f0000000000)={@local, 0x8}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f0000000140)={@any, 0x100}) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) fsopen(&(0x7f0000000380)='pvfs2\x00', 0x0) 1m3.428646973s ago: executing program 6 (id=9005): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) close(r2) r3 = socket$inet6(0xa, 0x3, 0x7) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000480)=0x4, 0x4) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x1) flock(r5, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1d1, 0xa, 0x20, 0x0, 0xaa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xf}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev, 0xfffffffe, 0x0, 0x0, 0xfe}}, 0xe8) mount$fuse(0x0, &(0x7f0000000440)='./file0/file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRES32, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000500)='page_pool_update_nid\x00'}, 0x18) alarm(0x80000000) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f00000013c0)={0x50, 0x0, r7, {0x7, 0x2b, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10e}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) 59.697101427s ago: executing program 6 (id=9018): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c000200"], 0x20}}, 0x400c0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 57.993889357s ago: executing program 6 (id=9025): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x45833af92e4b39ff, 0x0) 57.980006004s ago: executing program 6 (id=9026): syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x17, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7e, 0xffffffffffffffff, 0x2c1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "f819ebf45608e22e7a4944572ae210d0125a4b55b61c5deb3eb574c486d27eb2"}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7, 0x0, 0x3, 0x40080, 0xffffffffffffffff, 0x5, '\x00', 0x0, r3, 0x5, 0x1, 0x5, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r5, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x80ffd000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 55.360106505s ago: executing program 6 (id=9034): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000240), 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00001a4000/0x1000)=nil, 0x1000}, 0x5, 0x2}) prctl$PR_SET_TIMERSLACK(0x1d, 0x3ff00000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x1, './cgroup\x00'}, 0xffffff44) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) sched_setattr(0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2d0bc1, 0x0) mq_open(0x0, 0x80, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x81, 0x56, 0x1ff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x40001) 40.20664615s ago: executing program 36 (id=9034): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000240), 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00001a4000/0x1000)=nil, 0x1000}, 0x5, 0x2}) prctl$PR_SET_TIMERSLACK(0x1d, 0x3ff00000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x1, './cgroup\x00'}, 0xffffff44) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) sched_setattr(0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2d0bc1, 0x0) mq_open(0x0, 0x80, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x81, 0x56, 0x1ff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x40001) 5.060337711s ago: executing program 8 (id=9196): r0 = socket(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000004c0)={0x18, 0x2, 0x0, "dd3e1ddbc8e90cb57346e6c94dfa5bf04abc3e8fc2976136531a27a41db375d7"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100b8}}}}}}, @IFLA_MTU={0x8, 0x4, 0x8d2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040890}, 0x44180) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x104) write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a", 0x13) 4.944294408s ago: executing program 4 (id=9198): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x2, 0x200000, 0x0, 0xb49, 0x9, 0x8, 0x3, 0x3}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x6b9baa709c74be5b, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x84) 4.944000938s ago: executing program 8 (id=9199): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0, 0x7f00}, 0x1, 0x0, 0x0, 0x20044005}, 0x4000010) 4.853358442s ago: executing program 8 (id=9200): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write(r1, &(0x7f0000000200)="7ef9d8", 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000480)=@file={0xfd, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r2]}}], 0x10, 0x4010}}], 0x2, 0x20000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0xdf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000840)={'#! ', '', [{0x20, 'v\xcd\x90\x96+5\x12\xec\x92\xdeG\"\xe5q\x15\x1c\t\t\x7fJ;\x00\xb4\xd57\xe8\xaa^\xc3\xd0\xddg|0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_clone3(&(0x7f00000003c0)={0x200000, &(0x7f0000000140), &(0x7f00000001c0), 0x0, {0x18}, &(0x7f0000000280)=""/174, 0xae, 0x0, &(0x7f0000000380), 0x0, {r1}}, 0x58) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0x7d, &(0x7f0000000200)={0x1005, 0x400, 0x0, 0x5, 0x0, 0x4, 0x5b89, 0xd}, &(0x7f0000000340)=0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r1, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000d0400"/20, @ANYRES32=0x0, @ANYRES32=r5], 0x48}}, 0x0) recvmmsg(r3, &(0x7f0000003bc0), 0x0, 0x10000, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) prctl$PR_SET_SECUREBITS(0x1c, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r6, &(0x7f00000004c0)='pagemap\x00') syz_usb_disconnect(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'pimreg1\x00', {0x3}, 0x5}) 3.926858191s ago: executing program 4 (id=9210): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000280)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000240)={'\x00', 0x2e, 0x2, 0x8, 0x1, 0x3, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000200)='net/mcfilter6\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="5000000010000104000000000000ffeb00000000", @ANYRES32=0x0, @ANYBLOB="d978000000000000140003006970766c617e310000000000000000001c0012800b0001006970766c616e0000fcff01800600020002000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f0000000540)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) r6 = socket$key(0xf, 0x3, 0x2) timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) timer_delete(r7) sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"/291], 0x80}}, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x2003fe, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 3.332010485s ago: executing program 4 (id=9204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='mm_vmscan_throttled\x00', r0, 0x0, 0x1}, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000680)='/proc/asound/card0/oss_mixer\x00', 0x8040, 0x0) lseek(r1, 0x6, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r2, 0xdd8) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x1000, 0xa000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, &(0x7f0000000500)=0x4) r5 = openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi2\x00', 0x101000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000240)={'8255\x00', [0x8, 0xeff, 0xfffff001, 0x7fffffff, 0x0, 0x6, 0x40000fe, 0x3, 0x7, 0x0, 0x8d7, 0x1, 0x1, 0xa, 0x8, 0x1, 0x10, 0xffff8001, 0x8, 0xfffffff9, 0xcc49, 0x0, 0xe, 0x2, 0x80000001, 0x7, 0xd, 0x7ffffffc, 0x6, 0x0, 0x1000, 0x7]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) fcntl$setstatus(r6, 0x4, 0x2800) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r8, &(0x7f00000006c0)="8774d7369257b570d5fbc8bb657b3f5d3d42b7e89727e88d916a4c37bd969d9bb2feae162ec951ef10dca7e212bf7555a15cf11e1dc28e302f0611577530f721cfe6eaf133da9ad3f21e5be091d05ad93c39df33c7b8fa9f17de8bcde58b8c8e1a345be21e22a533a60856413038bce04fbf8f157e419d796242b74ee74581f63afbef420e012bd316580bd66c29f7527366c27d0e666195b01c11668905c47a4b1fe137062e7cafc9d5d62121e7aa31756fc2148db2084be914835e494c58120caf6bbf0837f7c04dfb03b221e572d191cd7b245fa2d2eeffc58ced9a0ba768a5deae4000000000ff00000000000005871d04c5a3b5e39b0b3e9cc83a9b33cc0fc5572334387c2e331fb2403aa480e858aee1bfc260c1f1e8cf7b831eff65606269b18a006c3b22d4f061847b02000000000000008006499613898840364eca3815ad23464ac9baf54d0aae7db2db7908c13cb4867b657cb94a1ba5f6326d3fb02843af11829aa110f798684ebc7064bb257678225e082ac1f76bfdaa1579ab73f2a022a9915cb23736c627bdd306918856b5e992044608fee4ec66fbd0ab52a4efa5dd94be26eb86b06a1d5fe93ec6f703ef47a9e8", 0x1b6, 0xd) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) landlock_create_ruleset(&(0x7f0000000300)={0x2, 0x2, 0x3}, 0x18, 0x3) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r6, @ANYRESOCT=r8, @ANYRESDEC=r7, @ANYRES8=r6, @ANYRES32=r6, @ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f0000004000), 0x4, 0x0, 0x0, &(0x7f0000004000), 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r12 = fanotify_init(0x220, 0x0) fanotify_mark(r12, 0x1, 0x40000032, r11, 0x0) vmsplice(r11, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='inet_sk_error_report\x00', r10}, 0xa) 3.18593283s ago: executing program 8 (id=9205): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3a, 0x2c, 0x2, 0x76, 0x7, 0x6a, 0x4, 0x8, 0x80000000}}}}]}, 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}}}, 0x24}}, 0x0) 2.996336753s ago: executing program 4 (id=9206): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x2, 0x200000, 0x0, 0xb49, 0x9, 0x8, 0x3, 0x3}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x6b9baa709c74be5b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x84) 2.967141575s ago: executing program 2 (id=9207): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) prctl$PR_SET_SECUREBITS(0x1c, 0x2f) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x6, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="0f36", 0x2}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x6, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="0f36", 0x2}], 0x1}, 0x0) read(r0, &(0x7f0000000100)=""/45, 0x2d) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000002240)={@val={0x8, 0x800}, @void, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x28, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@end]}}, {{0x4e20, 0x4e29, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0x1}]}}, {"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"}}}}, 0xfc4) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0x2, 0x10}, @value=@ver_80211n={0x0, 0x88, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x0, @default, 0x10, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xb7}, @val={0x4, 0x6, {0xd, 0xb, 0x5, 0x1}}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0xb1, 0xf2}}, @void, @void, @void, @void, @void, @void}}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="18f89e083e27335464a5949d5156aee5e53e38bd8afbacaabec07d4ff6c529ca56290639546170fcb3c964cd9a6ad2", 0x2f}, {&(0x7f0000000580)}, {&(0x7f0000000780)="0fb423302e357d068482ad00a731bf36080825ff9b8f6217f4271aff69b0fc972daf0534e1b0ffff993480d7b6c7086bde63ce0e9eb6d0311204513ab2469a9c615a07a832fef4134b870dfe9396a106fe2d3b0c5a0bb1140176b725c155e33836e40b283c00ebafc9bf83f622", 0x6d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000980)="7cfb74fafe0b9e8b30b676d3abdbc0549b80acb76934c3e8d06f4ac0f0d7dcef56f47a6add8f7718f363c0268e04d2ff1cf2c0cc0a5f74989ada9091559af4bc5ec45c82cfcc1cbeeac788f5", 0x4c}], 0x1}}], 0x2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @multicast1}, &(0x7f00000001c0)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @multicast1}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'tunl0\x00', r8, 0x700, 0x700, 0x6, 0xfffff801, {{0xd, 0x4, 0x2, 0x23, 0x34, 0x65, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @rr={0x7, 0xf, 0xc6, [@private=0xa010102, @empty, @rand_addr=0x64010102]}, @ssrr={0x89, 0xf, 0x68, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty]}, @end]}}}}}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000004cc0)=ANY=[@ANYBLOB="f4f2229f", @ANYRESHEX=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="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", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 2.964381889s ago: executing program 8 (id=9208): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c000200"], 0x20}}, 0x400c0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.933006229s ago: executing program 2 (id=9209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x66}, 0x10) 2.820902971s ago: executing program 7 (id=9211): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000140)=""/79, 0x4f}], 0x2d) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffc, 0x0, r1}, &(0x7f0000000600)=0x0, &(0x7f00000001c0)=0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x8, 0x0, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r7, &(0x7f0000000700)=[{&(0x7f0000000200)=""/103, 0x67}], 0x1) 2.747829423s ago: executing program 2 (id=9212): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getpid() r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f0000002fc0)={0x2020}, 0x2020) 2.015748441s ago: executing program 8 (id=9213): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x1, 0x0, 0x5}}, 0x18) sendto$unix(r1, &(0x7f0000000140)="fa7e53f637a2bb", 0x7, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netpci0\x00', 0x0}) sendmsg$xdp(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x2c, 0x3, r3, 0x9}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="516d90368fa3ad260a7afbc7fed0e8f00bd1120a170493f5d2f3b21be090d1cdc9cb132a49f69a7b12aca63c4589946be0df7fc797e1b1e35818ef7a48d2fe080014e62f5198ec2d998f0d3ac9e5dbcfe8fdb2d498d41167adc5b12d72e65a5724a4e22150c99754841a595daed604961c161fd888605a8997f5f34adbc35439341d464db91fae39de21ba19f03405977a94b8bedb6336ac340fafcf304e2c9eca64fb66404fe2ec8fd77644880fa3fec5d4224777eacc097abcec0ec55b58b7dbd24f3745999bae1dc6bb8fee44d0c4cb309591db4a4be12c76fe1d373b5f902f1d5f52", 0xe4}, {&(0x7f0000000100)="2eb7ec37bc6e5d7b6ce5501edfc08589f4bf5e18f58f1669ec5b1843719dc06501bc9c55d10e88cef9cabbc05b308fe05b47", 0x32}, {&(0x7f0000000340)="55da7da46787b324cfe1dd48a10801b912c46fbcaac21bc5fe8f726354fecaff95056d04c87211c67e73dcae7ebce55ef4cede9ac0fbc81c9360a0ad6809503725e5f8f4c18254773e95c4a0df0ee39cc7d3056c02622109c40ba5bc5e9e264506648de62549e42322a419d37b2b1c85e25daa79261977af340ef4aec904ec62fd96cc26bc8dab217db281ac04", 0x8d}, {&(0x7f0000000400)="8926038071fd4e7fac30f520f047367e1658e2805a2659b40bc1102dc8f6f6b6de917f6fec06809f52a362e7abf9cb429a69e482ff800cbe87b94298c154ad42e81714362beae00d44159a1a1ff3cd019e5c50e59250bb636cd8a442104172", 0x5f}], 0x4, 0x0, 0x0, 0x40404c1}, 0x4000800) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)=0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x8, 0xd8b8, 0x4, 0x8, 0x7, 0x4, 0x9, 0x5}, &(0x7f0000000240)={0x12, 0x0, 0x620e83b1, 0x2ca0000000000000, 0x8000000000000000, 0x7fffffffffffffff, 0x2, 0x2}, 0x0, 0x0, 0x0) lsm_list_modules(0x0, &(0x7f00000010c0), 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008b40461de0000000000010902"], 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000390427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="3c45070000000000140012800900010076657468000000006800028008001300", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24004805}, 0xc080) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000400c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 1.762456212s ago: executing program 7 (id=9214): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fdatasync(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x3d) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000400)=@ethtool_cmd={0x7, 0x7, 0xd, 0xfffd, 0x0, 0x73, 0x5d, 0xfc, 0x6, 0x8, 0xffffff01, 0x9, 0x0, 0x4, 0x8, 0xfffffffc, [0x7f, 0x40009]}}) 1.760181586s ago: executing program 4 (id=9215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000200)={@host, 0x2}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f0000000000)={@local, 0x8}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f0000000140)={@any, 0x100}) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) fsopen(&(0x7f0000000380)='pvfs2\x00', 0x0) 1.532029638s ago: executing program 7 (id=9216): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0xff}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc811}, 0x48884) 1.50143609s ago: executing program 2 (id=9217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x12810400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044004}, 0x40000) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x8, &(0x7f0000000000)={0x22, "e922604a455494c905fd824393fe53e14fcab3d1eb0000000000000000000800"}}) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x10, 0x29, 0x36}}, @ip_tos_u8={{0xd, 0x29, 0x43}}, @ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_ttl={{0x10, 0x0, 0x2, 0x101}}], 0x40}, 0x0) 1.500477403s ago: executing program 2 (id=9218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r1) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2070b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x1, 0x594}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 915.75621ms ago: executing program 7 (id=9219): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000380)=0x26) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f00000000c0)={{0x87, @loopback, 0x4e21, 0x4, 'dh\x00', 0x0, 0xd, 0x13}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4e24, 0x4, 0x1, 0x5, 0xd5b}}, 0x44) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000012000/0x14000)=nil}) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="edb5"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="bb86"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20008040}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r10 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0x4008af12, &(0x7f0000000500)={0x0, 0x8}) fsetxattr$trusted_overlay_opaque(r8, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x1) read$usbmon(r8, &(0x7f0000000100)=""/233, 0xe9) sendmsg$netlink(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 881.76878ms ago: executing program 2 (id=9220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0xc00}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) landlock_create_ruleset(&(0x7f0000000080), 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x400c000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 652.62113ms ago: executing program 4 (id=9221): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c000200"], 0x20}}, 0x400c0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 0s ago: executing program 7 (id=9222): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x2, {0xa, 0x4e24, 0x21cd, @mcast1, 0xad6}, r4}}, 0x38) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21, 0xffffffff, 0xfffffffff12bd390, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}}, 0x50) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}], [{@obj_user={'obj_user', 0x3d, '9l<\x85\x11\t\xdb\x91\x9e\'\x10\xad\x9b\x9d(\xf1\x00\x00\x00\x00\x00\x00\x00\x01\x1d\xbc\x1dH\x03Y\x06\x00){C\xbf\xfd _\xd9\x02k\xdf\x14eo\xaa\x1b\'O\x9d\xb7\xf3-\xdb\x1b`0R\xc7\xb1\xcfF'}}]}}) kernel console output (not intermixed with test programs): T4923] Buffer I/O error on dev loop6, logical block 0, async page read [ 1808.869777][ T4923] Dev loop6: unable to read RDB block 0 [ 1808.892952][ T4923] loop6: unable to read partition table [ 1808.903479][ T4923] loop6: partition table beyond EOD, truncated [ 1808.908257][ T4923] loop_reread_partitions: partition scan of loop6 (™^L‹ ¦øíA;åó§Èb»ö@’†Ö”:B‚w¾<ØÈgønf. -Ó‘†³.ài ëí>^.¾dDd—Â) failed (rc=-5) [ 1808.926254][ T4875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.936297][ T4875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.939291][ T4875] bridge_slave_1: entered allmulticast mode [ 1808.943504][ T4875] bridge_slave_1: entered promiscuous mode [ 1809.094576][ T4875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1809.159939][ T4875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1809.226276][ C2] hpet: Lost 1 RTC interrupts [ 1809.317994][T21191] hsr_slave_0: left promiscuous mode [ 1809.351505][T21191] hsr_slave_1: left promiscuous mode [ 1809.354517][T21191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1809.380275][T21191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1809.450116][ C2] hpet: Lost 1 RTC interrupts [ 1809.466667][T21191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1809.470911][T21191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1809.502163][ C2] hpet: Lost 2 RTC interrupts [ 1809.624584][T21191] veth1_macvtap: left promiscuous mode [ 1809.632794][T21191] veth0_macvtap: left promiscuous mode [ 1809.648098][T21191] veth1_vlan: left promiscuous mode [ 1809.650562][T21191] veth0_vlan: left promiscuous mode [ 1809.977429][ T4943] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8735'. [ 1810.150253][ C2] hpet: Lost 1 RTC interrupts [ 1810.316319][T31944] Bluetooth: hci2: command tx timeout [ 1812.402226][T31944] Bluetooth: hci2: command tx timeout [ 1812.788361][ C2] hpet_rtc_timer_reinit: 10 callbacks suppressed [ 1812.788381][ C2] hpet: Lost 1 RTC interrupts [ 1812.999769][ C2] hpet: Lost 1 RTC interrupts [ 1813.155763][T21191] team0 (unregistering): Port device team_slave_1 removed [ 1813.497960][T21191] team0 (unregistering): Port device team_slave_0 removed [ 1813.798130][ C2] hpet: Lost 1 RTC interrupts [ 1813.844776][ C2] hpet: Lost 1 RTC interrupts [ 1814.404257][ C2] hpet: Lost 1 RTC interrupts [ 1815.293948][ C2] hpet: Lost 1 RTC interrupts [ 1815.895026][ C2] hpet: Lost 1 RTC interrupts [ 1815.941382][ T4875] team0: Port device team_slave_0 added [ 1816.062775][ T4946] batadv_slave_0: entered promiscuous mode [ 1816.065435][ T4946] batadv_slave_0: left promiscuous mode [ 1816.070864][ T4875] team0: Port device team_slave_1 added [ 1816.129267][ C2] hpet: Lost 1 RTC interrupts [ 1816.238134][ T4875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1816.256968][ T4875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1816.270383][ T4875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1816.282111][ T4875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1816.355874][ T4875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1816.370327][ T4875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1816.653604][ T4875] hsr_slave_0: entered promiscuous mode [ 1816.662376][ T4875] hsr_slave_1: entered promiscuous mode [ 1816.715151][ T4875] debugfs: 'hsr0' already exists in 'hsr' [ 1816.739821][ T4875] Cannot create hsr debugfs directory [ 1817.556041][ T4875] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1817.568633][ T4875] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1817.590466][ T4875] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1817.652860][ T4875] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1817.667338][ T4962] loop6: detected capacity change from 0 to 524287487 [ 1817.670562][ T4962] Buffer I/O error on dev loop6, logical block 0, async page read [ 1817.674237][ T4962] Buffer I/O error on dev loop6, logical block 0, async page read [ 1817.714489][ T4962] Buffer I/O error on dev loop6, logical block 0, async page read [ 1817.723941][ T4962] Buffer I/O error on dev loop6, logical block 0, async page read [ 1817.743766][ T4962] Buffer I/O error on dev loop6, logical block 0, async page read [ 1817.747431][ T4962] Buffer I/O error on dev loop6, logical block 0, async page read [ 1817.751099][ T4962] Buffer I/O error on dev loop6, logical block 0, async page read [ 1817.754611][ T4962] Buffer I/O error on dev loop6, logical block 0, async page read [ 1817.758284][ T4962] ldm_validate_partition_table(): Disk read failed. [ 1817.760978][ T4962] Buffer I/O error on dev loop6, logical block 0, async page read [ 1817.764265][ T4962] Buffer I/O error on dev loop6, logical block 0, async page read [ 1817.768265][ T4962] Dev loop6: unable to read RDB block 0 [ 1817.770988][ T4962] loop6: unable to read partition table [ 1817.773466][ T4962] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1817.791680][ T4875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.828716][ T4875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1817.882962][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.902255][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1817.906301][ C2] hpet: Lost 2 RTC interrupts [ 1817.951132][T24211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.954628][T24211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.019977][ T4962] loop6: detected capacity change from 524287487 to 0 [ 1818.021992][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8740'. [ 1818.522012][ T4875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1818.544329][ T4984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8743'. [ 1818.588291][ C2] hpet: Lost 1 RTC interrupts [ 1818.634118][ C2] hpet: Lost 1 RTC interrupts [ 1819.022520][ T4992] batadv_slave_0: entered promiscuous mode [ 1819.046114][ C2] hpet: Lost 1 RTC interrupts [ 1819.183246][ T4875] veth0_vlan: entered promiscuous mode [ 1819.202217][ T4875] veth1_vlan: entered promiscuous mode [ 1819.258107][ C2] hpet: Lost 1 RTC interrupts [ 1819.265669][ T4875] veth0_macvtap: entered promiscuous mode [ 1819.288355][ C2] hpet: Lost 1 RTC interrupts [ 1819.323662][ T4875] veth1_macvtap: entered promiscuous mode [ 1819.341357][ T4998] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8752'. [ 1819.377196][ T4875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.388504][ T4875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1819.452898][ T89] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.460267][ T89] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.463666][ T89] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.496947][ T89] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.633119][ C2] hpet: Lost 1 RTC interrupts [ 1819.639722][ T4986] batadv_slave_0: left promiscuous mode [ 1819.707887][T21191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.712112][T21191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.727942][ C2] hpet: Lost 1 RTC interrupts [ 1819.796824][T21191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.812567][T21191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.947371][ T5021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8753'. [ 1821.013147][ T5023] 9pnet_fd: Insufficient options for proto=fd [ 1821.150246][ C2] hpet: Lost 1 RTC interrupts [ 1821.488355][ C2] hpet: Lost 1 RTC interrupts [ 1821.798682][ T5044] batadv_slave_0: entered promiscuous mode [ 1821.808066][ T5042] batadv_slave_0: left promiscuous mode [ 1822.034480][ T5048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8758'. [ 1823.101948][ T5069] FAULT_INJECTION: forcing a failure. [ 1823.101948][ T5069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1823.126048][ T5069] CPU: 0 UID: 0 PID: 5069 Comm: syz.4.8765 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1823.126075][ T5069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1823.126085][ T5069] Call Trace: [ 1823.126093][ T5069] [ 1823.126100][ T5069] dump_stack_lvl+0x16c/0x1f0 [ 1823.126129][ T5069] should_fail_ex+0x512/0x640 [ 1823.126151][ T5069] _copy_from_user+0x2e/0xd0 [ 1823.126171][ T5069] ucma_create_id+0xca/0x380 [ 1823.126190][ T5069] ? __pfx_ucma_create_id+0x10/0x10 [ 1823.126207][ T5069] ? __might_fault+0xe3/0x190 [ 1823.126225][ T5069] ? __might_fault+0x13b/0x190 [ 1823.126250][ T5069] ? __pfx_ucma_create_id+0x10/0x10 [ 1823.126269][ T5069] ucma_write+0x1f8/0x330 [ 1823.126285][ T5069] ? __pfx_ucma_write+0x10/0x10 [ 1823.126300][ T5069] ? bpf_lsm_file_permission+0x9/0x10 [ 1823.126323][ T5069] ? security_file_permission+0x71/0x210 [ 1823.126345][ T5069] ? rw_verify_area+0xcf/0x6c0 [ 1823.126364][ T5069] ? __pfx_ucma_write+0x10/0x10 [ 1823.126377][ T5069] vfs_writev+0x5dc/0xde0 [ 1823.126400][ T5069] ? __pfx_vfs_writev+0x10/0x10 [ 1823.126435][ T5069] ? __fget_files+0x20e/0x3c0 [ 1823.126452][ T5069] ? __fget_files+0x180/0x3c0 [ 1823.126474][ T5069] ? do_writev+0x28c/0x340 [ 1823.126492][ T5069] do_writev+0x28c/0x340 [ 1823.126509][ T5069] ? __pfx_do_writev+0x10/0x10 [ 1823.126529][ T5069] ? rcu_is_watching+0x12/0xc0 [ 1823.126550][ T5069] __do_fast_syscall_32+0x7c/0x3a0 [ 1823.126569][ T5069] do_fast_syscall_32+0x32/0x80 [ 1823.126585][ T5069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1823.126605][ T5069] RIP: 0023:0xf7f03579 [ 1823.126620][ T5069] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1823.126637][ T5069] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 1823.126655][ T5069] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1823.126666][ T5069] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1823.126676][ T5069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1823.126686][ T5069] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1823.126696][ T5069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1823.126719][ T5069] [ 1823.210126][ C2] hpet_rtc_timer_reinit: 6 callbacks suppressed [ 1823.210144][ C2] hpet: Lost 1 RTC interrupts [ 1823.312231][ C2] hpet: Lost 5 RTC interrupts [ 1823.368884][ T5072] loop6: detected capacity change from 0 to 524287999 [ 1823.712104][ C2] hpet: Lost 1 RTC interrupts [ 1824.041359][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8769'. [ 1824.181648][ T5090] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8770'. [ 1824.208193][ T5087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8767'. [ 1824.393759][ T5087] veth7: entered promiscuous mode [ 1824.933040][ T5086] loop6: detected capacity change from 524287999 to 0 [ 1825.400989][ T5102] loop6: detected capacity change from 0 to 524287487 [ 1825.404606][ T5102] buffer_io_error: 6 callbacks suppressed [ 1825.404621][ T5102] Buffer I/O error on dev loop6, logical block 0, async page read [ 1825.419585][ T5102] Buffer I/O error on dev loop6, logical block 0, async page read [ 1825.422945][ T5102] Buffer I/O error on dev loop6, logical block 0, async page read [ 1825.430711][ T5102] Buffer I/O error on dev loop6, logical block 0, async page read [ 1825.436534][ T5102] Buffer I/O error on dev loop6, logical block 0, async page read [ 1825.446620][ T5102] Buffer I/O error on dev loop6, logical block 0, async page read [ 1825.453083][ T5102] Buffer I/O error on dev loop6, logical block 0, async page read [ 1825.459789][ T5102] Buffer I/O error on dev loop6, logical block 0, async page read [ 1825.462776][ T5102] ldm_validate_partition_table(): Disk read failed. [ 1825.465553][ T5102] Buffer I/O error on dev loop6, logical block 0, async page read [ 1825.476025][ C2] hpet: Lost 1 RTC interrupts [ 1825.479043][ T5102] Buffer I/O error on dev loop6, logical block 0, async page read [ 1825.482351][ T5102] Dev loop6: unable to read RDB block 0 [ 1825.484747][ T5102] loop6: unable to read partition table [ 1825.514853][ T5102] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1825.565124][ T5102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8775'. [ 1825.621970][ T5104] loop6: detected capacity change from 524287487 to 0 [ 1826.457962][ C2] hpet: Lost 1 RTC interrupts [ 1826.918995][ C2] hpet: Lost 2 RTC interrupts [ 1827.028224][ C2] hpet: Lost 1 RTC interrupts [ 1827.086501][ C2] hpet: Lost 1 RTC interrupts [ 1827.143543][ C2] hpet: Lost 1 RTC interrupts [ 1827.168227][ C2] hpet: Lost 1 RTC interrupts [ 1827.966015][ T5118] loop6: detected capacity change from 0 to 524287487 [ 1827.985805][ T5118] ldm_validate_partition_table(): Disk read failed. [ 1827.988821][ T5118] Dev loop6: unable to read RDB block 0 [ 1827.991411][ T5118] loop6: unable to read partition table [ 1828.064491][ T5118] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1828.196522][ T5127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8780'. [ 1828.264509][ T5123] loop6: detected capacity change from 524287487 to 0 [ 1828.300713][ T5130] FAULT_INJECTION: forcing a failure. [ 1828.300713][ T5130] name failslab, interval 1, probability 0, space 0, times 0 [ 1828.328147][ T5130] CPU: 3 UID: 0 PID: 5130 Comm: syz.2.8783 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1828.328175][ T5130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1828.328186][ T5130] Call Trace: [ 1828.328192][ T5130] [ 1828.328200][ T5130] dump_stack_lvl+0x16c/0x1f0 [ 1828.328230][ T5130] should_fail_ex+0x512/0x640 [ 1828.328246][ T5130] ? fs_reclaim_acquire+0xae/0x150 [ 1828.328271][ T5130] ? tomoyo_encode2+0x100/0x3e0 [ 1828.328289][ T5130] should_failslab+0xc2/0x120 [ 1828.328310][ T5130] __kmalloc_noprof+0xd2/0x510 [ 1828.328328][ T5130] ? d_absolute_path+0x136/0x1a0 [ 1828.328353][ T5130] tomoyo_encode2+0x100/0x3e0 [ 1828.328375][ T5130] tomoyo_encode+0x29/0x50 [ 1828.328393][ T5130] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1828.328420][ T5130] tomoyo_path_number_perm+0x245/0x580 [ 1828.328437][ T5130] ? tomoyo_path_number_perm+0x237/0x580 [ 1828.328456][ T5130] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1828.328497][ T5130] ? find_held_lock+0x2b/0x80 [ 1828.328513][ T5130] ? hook_file_ioctl_common+0x145/0x410 [ 1828.328535][ T5130] ? __fget_files+0x20e/0x3c0 [ 1828.328578][ T5130] ? __might_fault+0xb0/0x190 [ 1828.328601][ T5130] security_file_ioctl_compat+0x9b/0x240 [ 1828.328622][ T5130] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1828.328650][ T5130] __do_fast_syscall_32+0x7c/0x3a0 [ 1828.328668][ T5130] do_fast_syscall_32+0x32/0x80 [ 1828.328684][ T5130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1828.328704][ T5130] RIP: 0023:0xf711e579 [ 1828.328717][ T5130] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1828.328732][ T5130] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1828.328749][ T5130] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000932 [ 1828.328759][ T5130] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 1828.328769][ T5130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1828.328779][ T5130] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1828.328789][ T5130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1828.328811][ T5130] [ 1828.328886][ T5130] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1828.388248][ C2] hpet_rtc_timer_reinit: 6 callbacks suppressed [ 1828.388267][ C2] hpet: Lost 1 RTC interrupts [ 1828.399633][ T5130] md: md2 stopped. [ 1828.554655][ C2] hpet: Lost 10 RTC interrupts [ 1829.093382][ T5143] block device autoloading is deprecated and will be removed. [ 1829.155738][ T5141] md: md2 stopped. [ 1829.308290][ C2] hpet: Lost 2 RTC interrupts [ 1829.378396][ C2] hpet: Lost 1 RTC interrupts [ 1829.527244][ C2] hpet: Lost 1 RTC interrupts [ 1829.593746][ C2] hpet: Lost 2 RTC interrupts [ 1829.608082][ T5150] tmpfs: Bad value for 'mpol' [ 1829.621881][ T5150] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8788'. [ 1829.663785][ C2] hpet: Lost 1 RTC interrupts [ 1829.794463][ C2] hpet: Lost 2 RTC interrupts [ 1829.961973][ C2] hpet: Lost 1 RTC interrupts [ 1830.308542][ T5161] netlink: 'syz.2.8791': attribute type 4 has an invalid length. [ 1830.541476][ C2] hpet: Lost 2 RTC interrupts [ 1830.566187][ T5166] block device autoloading is deprecated and will be removed. [ 1830.712349][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8793'. [ 1831.792694][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8800'. [ 1831.895542][ T5198] loop6: detected capacity change from 0 to 524287487 [ 1831.898818][ T5198] buffer_io_error: 22 callbacks suppressed [ 1831.898849][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 1831.907109][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 1831.910340][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 1831.913570][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 1831.926279][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 1831.935339][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 1831.939027][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 1831.962312][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 1831.965762][ T5198] ldm_validate_partition_table(): Disk read failed. [ 1831.968748][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 1831.973030][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 1831.999279][ T5198] Dev loop6: unable to read RDB block 0 [ 1832.002431][ T5198] loop6: unable to read partition table [ 1832.010371][ T5198] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1832.031950][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8803'. [ 1832.151512][ T5199] loop6: detected capacity change from 524287487 to 0 [ 1832.786589][ T6044] usb 7-1: new low-speed USB device number 120 using dummy_hcd [ 1833.072439][ T6044] usb 7-1: config 0 has no interfaces? [ 1833.081973][ T6044] usb 7-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1833.105484][ T6044] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.135303][ T6044] usb 7-1: config 0 descriptor?? [ 1833.360273][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8807'. [ 1833.371110][T21142] usb 7-1: USB disconnect, device number 120 [ 1833.377926][ T5219] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8811'. [ 1833.399547][ T5219] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8811'. [ 1833.438361][ C2] vkms_vblank_simulate: vblank timer overrun [ 1833.442565][ C2] hpet_rtc_timer_reinit: 6 callbacks suppressed [ 1833.442583][ C2] hpet: Lost 1 RTC interrupts [ 1833.507987][ C2] hpet: Lost 1 RTC interrupts [ 1833.602061][ C2] hpet: Lost 1 RTC interrupts [ 1834.085829][ C2] vkms_vblank_simulate: vblank timer overrun [ 1834.088730][ C2] hpet: Lost 1 RTC interrupts [ 1834.195256][ T5231] tmpfs: Unknown parameter 'grpquota/[24Ò·¬þ‘¯Û;£ŽÅgmƒ„~O°ÅR¤QS3^è¼®}ao*RFå6YA›ÓÛa!°EüŽi [ 1838.482958][ T5283] dump_stack_lvl+0x16c/0x1f0 [ 1838.482987][ T5283] should_fail_ex+0x512/0x640 [ 1838.483008][ T5283] _copy_from_iter+0x29f/0x16f0 [ 1838.483034][ T5283] ? __pfx__copy_from_iter+0x10/0x10 [ 1838.483053][ T5283] ? rcu_is_watching+0x12/0xc0 [ 1838.483083][ T5283] ? rcu_is_watching+0x12/0xc0 [ 1838.483099][ T5283] ? kfree+0x24f/0x4d0 [ 1838.483114][ T5283] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 1838.483137][ T5283] file_tty_write.constprop.0+0x488/0x9b0 [ 1838.483162][ T5283] vfs_write+0x6c4/0x1150 [ 1838.483183][ T5283] ? __pfx_tty_write+0x10/0x10 [ 1838.483201][ T5283] ? __pfx_vfs_write+0x10/0x10 [ 1838.483218][ T5283] ? find_held_lock+0x2b/0x80 [ 1838.483250][ T5283] ksys_write+0x12a/0x250 [ 1838.483268][ T5283] ? __pfx_ksys_write+0x10/0x10 [ 1838.483289][ T5283] ? rcu_is_watching+0x12/0xc0 [ 1838.483308][ T5283] __do_fast_syscall_32+0x7c/0x3a0 [ 1838.483347][ T5283] do_fast_syscall_32+0x32/0x80 [ 1838.483364][ T5283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1838.483385][ T5283] RIP: 0023:0xf7f51579 [ 1838.483399][ T5283] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1838.483414][ T5283] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1838.483431][ T5283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1838.483441][ T5283] RDX: 0000000000000059 RSI: 0000000000000000 RDI: 0000000000000000 [ 1838.483451][ T5283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1838.483461][ T5283] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1838.483471][ T5283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1838.483494][ T5283] [ 1838.508373][ C2] hpet_rtc_timer_reinit: 1 callbacks suppressed [ 1838.508390][ C2] hpet: Lost 1 RTC interrupts [ 1838.664971][ C2] hpet: Lost 9 RTC interrupts [ 1838.673253][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8829'. [ 1838.697901][ C2] hpet: Lost 1 RTC interrupts [ 1839.061831][ T40] audit: type=1326 audit(2000001606.419:16144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8832" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 1839.071502][ T40] audit: type=1326 audit(2000001606.419:16145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8832" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 1839.173546][ T40] audit: type=1326 audit(2000001606.419:16146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8832" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 1839.220017][ T40] audit: type=1326 audit(2000001606.419:16147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8832" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 1839.232845][ T40] audit: type=1326 audit(2000001606.419:16148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8832" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 1839.247655][ T40] audit: type=1326 audit(2000001606.419:16149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8832" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 1839.260566][ T40] audit: type=1326 audit(2000001606.429:16150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8832" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 1840.569012][ T5313] 9pnet_fd: Insufficient options for proto=fd [ 1841.391228][ T5330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8842'. [ 1843.539327][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 1843.539345][ T40] audit: type=1326 audit(2000001610.930:16184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.4.8851" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x0 [ 1843.589194][ C2] hpet: Lost 1 RTC interrupts [ 1843.726459][ C2] hpet: Lost 1 RTC interrupts [ 1844.003827][ T40] audit: type=1326 audit(2000001611.390:16185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5377 comm="syz.6.8853" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x0 [ 1844.482949][ T5390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1844.558810][ T5390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1845.105888][ C2] hpet: Lost 1 RTC interrupts [ 1845.546300][ C2] hpet: Lost 1 RTC interrupts [ 1845.632109][ C2] hpet: Lost 1 RTC interrupts [ 1845.747251][ T5417] FAULT_INJECTION: forcing a failure. [ 1845.747251][ T5417] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.753008][ T5417] CPU: 0 UID: 0 PID: 5417 Comm: syz.4.8865 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1845.753034][ T5417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1845.753044][ T5417] Call Trace: [ 1845.753051][ T5417] [ 1845.753058][ T5417] dump_stack_lvl+0x16c/0x1f0 [ 1845.753086][ T5417] should_fail_ex+0x512/0x640 [ 1845.753103][ T5417] ? fs_reclaim_acquire+0xae/0x150 [ 1845.753127][ T5417] ? tomoyo_encode2+0x100/0x3e0 [ 1845.753145][ T5417] should_failslab+0xc2/0x120 [ 1845.753165][ T5417] __kmalloc_noprof+0xd2/0x510 [ 1845.753190][ T5417] tomoyo_encode2+0x100/0x3e0 [ 1845.753212][ T5417] tomoyo_encode+0x29/0x50 [ 1845.753229][ T5417] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1845.753252][ T5417] ? tomoyo_profile+0x47/0x60 [ 1845.753276][ T5417] tomoyo_path_number_perm+0x245/0x580 [ 1845.753292][ T5417] ? tomoyo_path_number_perm+0x237/0x580 [ 1845.753310][ T5417] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1845.753351][ T5417] ? find_held_lock+0x2b/0x80 [ 1845.753369][ T5417] ? hook_file_ioctl_common+0x145/0x410 [ 1845.753391][ T5417] ? __fget_files+0x20e/0x3c0 [ 1845.753412][ T5417] security_file_ioctl_compat+0x9b/0x240 [ 1845.753432][ T5417] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1845.753459][ T5417] __do_fast_syscall_32+0x7c/0x3a0 [ 1845.753477][ T5417] do_fast_syscall_32+0x32/0x80 [ 1845.753493][ T5417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1845.753511][ T5417] RIP: 0023:0xf7f03579 [ 1845.753557][ T5417] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1845.753573][ T5417] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1845.753590][ T5417] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004040ae79 [ 1845.753600][ T5417] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1845.753610][ T5417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1845.753619][ T5417] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1845.753628][ T5417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1845.753651][ T5417] [ 1845.753671][ T5417] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1847.257357][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8875'. [ 1847.266432][ T5455] bridge_slave_1: left allmulticast mode [ 1847.269492][ T5455] bridge_slave_1: left promiscuous mode [ 1847.273994][ T5455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.317422][ T5455] bridge_slave_0: left allmulticast mode [ 1847.329726][ T5455] bridge_slave_0: left promiscuous mode [ 1847.333164][ T5455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.422110][ T6044] usb 9-1: new low-speed USB device number 92 using dummy_hcd [ 1847.588837][ T6044] usb 9-1: config 0 has no interfaces? [ 1847.607270][ T6044] usb 9-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1847.619426][ T6044] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.633357][ T6044] usb 9-1: config 0 descriptor?? [ 1847.680351][ T5460] overlayfs: failed to resolve './file1': -2 [ 1847.853148][ T6044] usb 9-1: USB disconnect, device number 92 [ 1848.370501][ T5470] /dev/sr0: Can't open blockdev [ 1848.522756][ C2] hpet: Lost 1 RTC interrupts [ 1849.393583][ C2] hpet: Lost 2 RTC interrupts [ 1850.158244][ T5499] overlayfs: failed to clone upperpath [ 1850.398011][ C2] hpet: Lost 1 RTC interrupts [ 1850.403204][ T5508] FAULT_INJECTION: forcing a failure. [ 1850.403204][ T5508] name failslab, interval 1, probability 0, space 0, times 0 [ 1850.408649][ T5508] CPU: 3 UID: 0 PID: 5508 Comm: syz.4.8893 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1850.408676][ T5508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1850.408688][ T5508] Call Trace: [ 1850.408695][ T5508] [ 1850.408702][ T5508] dump_stack_lvl+0x16c/0x1f0 [ 1850.408734][ T5508] should_fail_ex+0x512/0x640 [ 1850.408752][ T5508] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1850.408776][ T5508] should_failslab+0xc2/0x120 [ 1850.408799][ T5508] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1850.408820][ T5508] ? __alloc_skb+0x2b2/0x380 [ 1850.408850][ T5508] __alloc_skb+0x2b2/0x380 [ 1850.408874][ T5508] ? __pfx___alloc_skb+0x10/0x10 [ 1850.408901][ T5508] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1850.408934][ T5508] netlink_alloc_large_skb+0x69/0x130 [ 1850.408962][ T5508] netlink_sendmsg+0x6a1/0xdd0 [ 1850.408993][ T5508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1850.409022][ T5508] ? __import_iovec+0x1dd/0x650 [ 1850.409054][ T5508] ____sys_sendmsg+0xa95/0xc70 [ 1850.409072][ T5508] ? btrfs_submit_dev_bio+0x310/0xe00 [ 1850.409097][ T5508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1850.409115][ T5508] ? get_compat_msghdr+0x11a/0x170 [ 1850.409152][ T5508] ___sys_sendmsg+0x134/0x1d0 [ 1850.409180][ T5508] ? __pfx____sys_sendmsg+0x10/0x10 [ 1850.409218][ T5508] ? find_held_lock+0x2b/0x80 [ 1850.409251][ T5508] __sys_sendmsg+0x16d/0x220 [ 1850.409278][ T5508] ? __pfx___sys_sendmsg+0x10/0x10 [ 1850.409315][ T5508] ? rcu_is_watching+0x12/0xc0 [ 1850.409337][ T5508] __do_fast_syscall_32+0x7c/0x3a0 [ 1850.409356][ T5508] do_fast_syscall_32+0x32/0x80 [ 1850.409373][ T5508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1850.409395][ T5508] RIP: 0023:0xf7f03579 [ 1850.409410][ T5508] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1850.409426][ T5508] RSP: 002b:00000000f500555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1850.409444][ T5508] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1850.409455][ T5508] RDX: 0000000004008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1850.409465][ T5508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1850.409475][ T5508] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1850.409516][ T5508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1850.409539][ T5508] [ 1850.525636][ C2] hpet: Lost 1 RTC interrupts [ 1850.570191][ C2] hpet: Lost 1 RTC interrupts [ 1850.853979][ C2] hpet: Lost 2 RTC interrupts [ 1851.521671][ C2] hpet: Lost 1 RTC interrupts [ 1851.742413][ C2] hpet: Lost 1 RTC interrupts [ 1851.767287][ T5527] FAULT_INJECTION: forcing a failure. [ 1851.767287][ T5527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1851.780051][ T5527] CPU: 2 UID: 0 PID: 5527 Comm: syz.4.8899 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1851.780079][ T5527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1851.780090][ T5527] Call Trace: [ 1851.780097][ T5527] [ 1851.780105][ T5527] dump_stack_lvl+0x16c/0x1f0 [ 1851.780137][ T5527] should_fail_ex+0x512/0x640 [ 1851.780160][ T5527] _copy_to_user+0x32/0xd0 [ 1851.780183][ T5527] sctp_getsockopt+0x67b9/0x69b0 [ 1851.780201][ T5527] ? __lock_acquire+0x62e/0x1ce0 [ 1851.780226][ T5527] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1851.780260][ T5527] ? __pfx___might_resched+0x10/0x10 [ 1851.780284][ T5527] ? aa_sk_perm+0x2f4/0xb10 [ 1851.780303][ T5527] ? __lock_acquire+0x62e/0x1ce0 [ 1851.780325][ T5527] ? __pfx_aa_sk_perm+0x10/0x10 [ 1851.780345][ T5527] ? ksys_write+0x190/0x250 [ 1851.780370][ T5527] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1851.780390][ T5527] do_sock_getsockopt+0x34a/0x440 [ 1851.780410][ T5527] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1851.780427][ T5527] ? __fget_files+0x204/0x3c0 [ 1851.780459][ T5527] __sys_getsockopt+0x123/0x1b0 [ 1851.780490][ T5527] __ia32_sys_getsockopt+0xbc/0x160 [ 1851.780513][ T5527] ? lockdep_hardirqs_on+0x7c/0x110 [ 1851.780540][ T5527] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1851.780568][ T5527] __do_fast_syscall_32+0x7c/0x3a0 [ 1851.780586][ T5527] do_fast_syscall_32+0x32/0x80 [ 1851.780604][ T5527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1851.780625][ T5527] RIP: 0023:0xf7f03579 [ 1851.780639][ T5527] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1851.780655][ T5527] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 1851.780671][ T5527] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 1851.780682][ T5527] RDX: 0000000000000018 RSI: 0000000080000300 RDI: 0000000080000340 [ 1851.780693][ T5527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1851.780702][ T5527] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1851.780719][ T5527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1851.780743][ T5527] [ 1851.991422][ C2] hpet: Lost 13 RTC interrupts [ 1852.329669][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8900'. [ 1852.488920][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.491870][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.052759][ C2] vkms_vblank_simulate: vblank timer overrun [ 1853.055572][ C2] hpet: Lost 2 RTC interrupts [ 1853.701702][ C2] vkms_vblank_simulate: vblank timer overrun [ 1853.704832][ C2] hpet: Lost 1 RTC interrupts [ 1855.037796][ C2] hpet: Lost 1 RTC interrupts [ 1855.277978][ C2] hpet: Lost 1 RTC interrupts [ 1855.294502][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8901'. [ 1855.934031][ T5546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8905'. [ 1856.245610][ T5564] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8911'. [ 1856.349569][ C2] vkms_vblank_simulate: vblank timer overrun [ 1856.352300][ C2] hpet: Lost 1 RTC interrupts [ 1856.381913][ C2] hpet: Lost 1 RTC interrupts [ 1856.900225][ C2] hpet: Lost 1 RTC interrupts [ 1856.903373][ C2] vkms_vblank_simulate: vblank timer overrun [ 1857.077739][ C2] hpet: Lost 1 RTC interrupts [ 1857.169562][ T5593] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8922'. [ 1857.209649][ C2] hpet: Lost 1 RTC interrupts [ 1857.524441][ C2] hpet: Lost 1 RTC interrupts [ 1857.536298][ C2] vkms_vblank_simulate: vblank timer overrun [ 1858.044846][ T5606] FAULT_INJECTION: forcing a failure. [ 1858.044846][ T5606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1858.063391][ T5606] CPU: 0 UID: 0 PID: 5606 Comm: syz.2.8927 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1858.063419][ T5606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1858.063431][ T5606] Call Trace: [ 1858.063438][ T5606] [ 1858.063445][ T5606] dump_stack_lvl+0x16c/0x1f0 [ 1858.063478][ T5606] should_fail_ex+0x512/0x640 [ 1858.063500][ T5606] _copy_from_iter+0x29f/0x16f0 [ 1858.063529][ T5606] ? __pfx__copy_from_iter+0x10/0x10 [ 1858.063549][ T5606] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1858.063583][ T5606] copy_page_from_iter+0xde/0x180 [ 1858.063607][ T5606] tun_build_skb.constprop.0+0x2e8/0x1500 [ 1858.063640][ T5606] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1858.063675][ T5606] ? __lock_acquire+0x62e/0x1ce0 [ 1858.063715][ T5606] tun_get_user+0x14ae/0x3ce0 [ 1858.063749][ T5606] ? __pfx_tun_get_user+0x10/0x10 [ 1858.063773][ T5606] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1858.063801][ T5606] ? find_held_lock+0x2b/0x80 [ 1858.063818][ T5606] ? tun_get+0x191/0x370 [ 1858.063844][ T5606] tun_chr_write_iter+0xdc/0x210 [ 1858.063868][ T5606] vfs_write+0x6c4/0x1150 [ 1858.063890][ T5606] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1858.063914][ T5606] ? __pfx_vfs_write+0x10/0x10 [ 1858.063932][ T5606] ? find_held_lock+0x2b/0x80 [ 1858.063965][ T5606] ksys_write+0x12a/0x250 [ 1858.063985][ T5606] ? __pfx_ksys_write+0x10/0x10 [ 1858.064007][ T5606] ? rcu_is_watching+0x12/0xc0 [ 1858.064029][ T5606] __do_fast_syscall_32+0x7c/0x3a0 [ 1858.064048][ T5606] do_fast_syscall_32+0x32/0x80 [ 1858.064064][ T5606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1858.064086][ T5606] RIP: 0023:0xf711e579 [ 1858.064101][ T5606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1858.064117][ T5606] RSP: 002b:00000000f510e520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1858.064134][ T5606] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000180 [ 1858.064145][ T5606] RDX: 0000000000000036 RSI: 00000000f7484ff4 RDI: 0000000000000000 [ 1858.064155][ T5606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1858.064166][ T5606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1858.064176][ T5606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1858.064199][ T5606] [ 1858.105231][T29940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1858.202241][ C2] hpet: Lost 1 RTC interrupts [ 1858.350442][ C2] hpet: Lost 9 RTC interrupts [ 1858.423875][T29940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1858.452361][T29940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1858.461229][T29940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1858.480725][T29940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1858.565925][ T5599] ALSA: mixer_oss: invalid OSS volume '' [ 1858.627513][ T5607] lo speed is unknown, defaulting to 1000 [ 1858.836681][ T5618] /dev/sr0: Can't open blockdev [ 1859.123864][ T5630] fuse: Unknown parameter 'rootmowe' [ 1859.157329][ T5607] chnl_net:caif_netlink_parms(): no params data found [ 1859.688590][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1859.688715][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1859.688865][ T5607] bridge_slave_0: entered allmulticast mode [ 1859.701275][ T5607] bridge_slave_0: entered promiscuous mode [ 1859.729382][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1859.729629][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.729804][ T5607] bridge_slave_1: entered allmulticast mode [ 1859.731215][ T5607] bridge_slave_1: entered promiscuous mode [ 1859.753196][ T1327] usb 9-1: new low-speed USB device number 93 using dummy_hcd [ 1859.992680][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1860.019826][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1860.024119][ T1327] usb 9-1: config 0 has no interfaces? [ 1860.024152][ T1327] usb 9-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1860.024171][ T1327] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.058743][ T1327] usb 9-1: config 0 descriptor?? [ 1860.101753][ C2] hpet_rtc_timer_reinit: 3 callbacks suppressed [ 1860.101772][ C2] hpet: Lost 1 RTC interrupts [ 1860.215727][ T5607] team0: Port device team_slave_0 added [ 1860.220789][ T5607] team0: Port device team_slave_1 added [ 1860.361714][ T5629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8933'. [ 1860.369947][ T2820] usb 9-1: USB disconnect, device number 93 [ 1860.474160][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1860.477503][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1860.486012][ T5652] FAULT_INJECTION: forcing a failure. [ 1860.486012][ T5652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1860.502374][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1860.513893][ T5652] CPU: 0 UID: 0 PID: 5652 Comm: syz.7.8938 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1860.513926][ T5652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1860.513936][ T5652] Call Trace: [ 1860.513943][ T5652] [ 1860.513950][ T5652] dump_stack_lvl+0x16c/0x1f0 [ 1860.513977][ T5652] should_fail_ex+0x512/0x640 [ 1860.513998][ T5652] _copy_from_user+0x2e/0xd0 [ 1860.514019][ T5652] sctp_setsockopt+0x2045/0xb870 [ 1860.514041][ T5652] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1860.514055][ T5652] ? __pfx_aa_sk_perm+0x10/0x10 [ 1860.514069][ T5652] ? __fget_files+0x204/0x3c0 [ 1860.514082][ T5652] ? sock_common_setsockopt+0x2e/0xf0 [ 1860.514094][ T5652] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1860.514107][ T5652] do_sock_setsockopt+0xf3/0x1d0 [ 1860.514120][ T5652] __sys_setsockopt+0x120/0x1a0 [ 1860.514138][ T5652] __ia32_sys_setsockopt+0xbc/0x160 [ 1860.514152][ T5652] ? lockdep_hardirqs_on+0x7c/0x110 [ 1860.514168][ T5652] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1860.514184][ T5652] __do_fast_syscall_32+0x7c/0x3a0 [ 1860.514207][ T5652] do_fast_syscall_32+0x32/0x80 [ 1860.514219][ T5652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1860.514232][ T5652] RIP: 0023:0xf7f51579 [ 1860.514241][ T5652] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1860.514252][ T5652] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 1860.514262][ T5652] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000084 [ 1860.514268][ T5652] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000010 [ 1860.514275][ T5652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1860.514281][ T5652] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1860.514287][ T5652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1860.514299][ T5652] [ 1860.665564][T29940] Bluetooth: hci4: command tx timeout [ 1860.672368][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1860.697495][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1860.725568][ C2] hpet: Lost 1 RTC interrupts [ 1860.733799][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1860.916436][T12602] bridge_slave_1: left allmulticast mode [ 1860.918836][T12602] bridge_slave_1: left promiscuous mode [ 1860.921094][T12602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.940481][T12602] bridge_slave_0: left allmulticast mode [ 1860.944721][T12602] bridge_slave_0: left promiscuous mode [ 1860.948083][T12602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.375581][ C2] hpet: Lost 1 RTC interrupts [ 1861.475209][ C2] hpet: Lost 1 RTC interrupts [ 1861.521664][ C2] hpet: Lost 1 RTC interrupts [ 1861.571541][ C2] hpet: Lost 2 RTC interrupts [ 1861.669799][ C2] hpet: Lost 1 RTC interrupts [ 1861.893715][T12602] bridge0 (unregistering): left allmulticast mode [ 1861.918804][ T5654] /dev/sr0: Can't open blockdev [ 1861.931876][ C2] hpet: Lost 1 RTC interrupts [ 1862.045577][ C2] hpet: Lost 1 RTC interrupts [ 1862.219261][ C2] hpet: Lost 2 RTC interrupts [ 1862.721870][T29940] Bluetooth: hci4: command tx timeout [ 1862.814330][T12602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1862.835475][T12602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1862.839538][T12602] bond0 (unregistering): Released all slaves [ 1862.936263][T12602] : left promiscuous mode [ 1863.020971][ T5607] hsr_slave_0: entered promiscuous mode [ 1863.036586][ T5607] hsr_slave_1: entered promiscuous mode [ 1863.040708][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 1863.044276][ T5607] Cannot create hsr debugfs directory [ 1863.923770][T12602] hsr_slave_0: left promiscuous mode [ 1863.927646][T12602] hsr_slave_1: left promiscuous mode [ 1864.797877][T29940] Bluetooth: hci4: command tx timeout [ 1865.256473][ C2] hpet_rtc_timer_reinit: 9 callbacks suppressed [ 1865.256492][ C2] hpet: Lost 1 RTC interrupts [ 1865.365755][ C2] hpet: Lost 1 RTC interrupts [ 1865.741693][ C2] hpet: Lost 1 RTC interrupts [ 1865.883049][ C2] hpet: Lost 2 RTC interrupts [ 1866.010280][ C2] hpet: Lost 1 RTC interrupts [ 1866.352779][ C2] hpet: Lost 1 RTC interrupts [ 1866.385711][ C2] hpet: Lost 1 RTC interrupts [ 1866.506953][ C2] hpet: Lost 1 RTC interrupts [ 1866.551781][ C2] hpet: Lost 1 RTC interrupts [ 1866.686099][ C2] hpet: Lost 2 RTC interrupts [ 1866.873736][T29940] Bluetooth: hci4: command tx timeout [ 1868.251170][T12602] team0 (unregistering): Port device team_slave_1 removed [ 1868.753683][T12602] team0 (unregistering): Port device team_slave_0 removed [ 1870.313671][ C2] hpet_rtc_timer_reinit: 12 callbacks suppressed [ 1870.313693][ C2] hpet: Lost 1 RTC interrupts [ 1870.367201][ C2] hpet: Lost 1 RTC interrupts [ 1870.400217][ C2] hpet: Lost 1 RTC interrupts [ 1872.032548][ C2] hpet: Lost 1 RTC interrupts [ 1872.249866][ T5715] FAULT_INJECTION: forcing a failure. [ 1872.249866][ T5715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1872.268072][ T5715] CPU: 2 UID: 0 PID: 5715 Comm: syz.4.8956 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1872.268100][ T5715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1872.268110][ T5715] Call Trace: [ 1872.268116][ T5715] [ 1872.268122][ T5715] dump_stack_lvl+0x16c/0x1f0 [ 1872.268154][ T5715] should_fail_ex+0x512/0x640 [ 1872.268174][ T5715] _copy_from_user+0x2e/0xd0 [ 1872.268196][ T5715] sctp_setsockopt+0x2045/0xb870 [ 1872.268221][ T5715] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1872.268240][ T5715] ? __pfx_aa_sk_perm+0x10/0x10 [ 1872.268259][ T5715] ? __fget_files+0x204/0x3c0 [ 1872.268299][ T5715] ? sock_common_setsockopt+0x2e/0xf0 [ 1872.268319][ T5715] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1872.268340][ T5715] do_sock_setsockopt+0xf3/0x1d0 [ 1872.268363][ T5715] __sys_setsockopt+0x120/0x1a0 [ 1872.268392][ T5715] __ia32_sys_setsockopt+0xbc/0x160 [ 1872.268416][ T5715] ? lockdep_hardirqs_on+0x7c/0x110 [ 1872.268441][ T5715] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1872.268468][ T5715] __do_fast_syscall_32+0x7c/0x3a0 [ 1872.268487][ T5715] do_fast_syscall_32+0x32/0x80 [ 1872.268503][ T5715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1872.268525][ T5715] RIP: 0023:0xf7f03579 [ 1872.268539][ T5715] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1872.268561][ T5715] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 1872.268579][ T5715] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 1872.268590][ T5715] RDX: 0000000000000071 RSI: 00000000800002c0 RDI: 0000000000000008 [ 1872.268601][ T5715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1872.268610][ T5715] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1872.268620][ T5715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1872.268643][ T5715] [ 1872.437384][ C2] hpet: Lost 9 RTC interrupts [ 1872.841671][ C2] hpet: Lost 1 RTC interrupts [ 1872.945633][ C2] hpet: Lost 1 RTC interrupts [ 1873.029696][ C2] hpet: Lost 1 RTC interrupts [ 1873.209707][ C2] hpet: Lost 1 RTC interrupts [ 1873.430289][ C2] hpet: Lost 1 RTC interrupts [ 1873.596710][ T5607] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1873.647994][ T5607] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1873.662002][ T5607] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1873.681575][ T5607] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1873.836707][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1873.854950][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 1873.888318][T12602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.895315][T12602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1873.920152][T12602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1873.929500][T12602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1873.971162][ T5607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1873.981943][ T5607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1874.344130][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1874.819601][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1874.827775][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1874.857000][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1874.859988][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1875.077155][ T5607] veth0_vlan: entered promiscuous mode [ 1875.094185][ T5607] veth1_vlan: entered promiscuous mode [ 1875.159438][ T5607] veth0_macvtap: entered promiscuous mode [ 1875.168703][ T5607] veth1_macvtap: entered promiscuous mode [ 1875.228839][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1875.251712][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1875.269172][T12602] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.275994][T12602] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.302372][T12602] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.306149][T12602] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.345389][ C2] hpet_rtc_timer_reinit: 8 callbacks suppressed [ 1875.345405][ C2] hpet: Lost 1 RTC interrupts [ 1875.500212][T21191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.507430][T21191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.618699][T12602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.623205][T12602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.999336][ C2] hpet: Lost 1 RTC interrupts [ 1876.037840][ C2] hpet: Lost 1 RTC interrupts [ 1876.182220][ T5784] FAULT_INJECTION: forcing a failure. [ 1876.182220][ T5784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1876.190162][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: syz.4.8970 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1876.190185][ T5784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1876.190195][ T5784] Call Trace: [ 1876.190201][ T5784] [ 1876.190207][ T5784] dump_stack_lvl+0x16c/0x1f0 [ 1876.190233][ T5784] should_fail_ex+0x512/0x640 [ 1876.190251][ T5784] _copy_from_user+0x2e/0xd0 [ 1876.190269][ T5784] kstrtouint_from_user+0xd6/0x1d0 [ 1876.190289][ T5784] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1876.190308][ T5784] ? __lock_acquire+0xb97/0x1ce0 [ 1876.190329][ T5784] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1876.190352][ T5784] proc_fail_nth_write+0x83/0x220 [ 1876.190368][ T5784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1876.190388][ T5784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1876.190401][ T5784] vfs_write+0x29d/0x1150 [ 1876.190422][ T5784] ? __pfx_vfs_write+0x10/0x10 [ 1876.190436][ T5784] ? find_held_lock+0x2b/0x80 [ 1876.190455][ T5784] ? __fget_files+0x20e/0x3c0 [ 1876.190476][ T5784] ksys_write+0x12a/0x250 [ 1876.190491][ T5784] ? __pfx_ksys_write+0x10/0x10 [ 1876.190508][ T5784] ? rcu_is_watching+0x12/0xc0 [ 1876.190525][ T5784] __do_fast_syscall_32+0x7c/0x3a0 [ 1876.190540][ T5784] do_fast_syscall_32+0x32/0x80 [ 1876.190553][ T5784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1876.197907][ T5784] RIP: 0023:0xf7f03579 [ 1876.197924][ T5784] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1876.197937][ T5784] RSP: 002b:00000000f5026590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1876.197952][ T5784] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f5026620 [ 1876.197961][ T5784] RDX: 0000000000000001 RSI: 00000000f7394ff4 RDI: 0000000000000000 [ 1876.197969][ T5784] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1876.197977][ T5784] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1876.197986][ T5784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1876.198005][ T5784] [ 1876.209621][ C2] hpet: Lost 1 RTC interrupts [ 1876.332426][ C2] hpet: Lost 6 RTC interrupts [ 1876.517380][ C2] hpet: Lost 1 RTC interrupts [ 1876.667901][ T6556] usb 9-1: new low-speed USB device number 94 using dummy_hcd [ 1876.904894][ T6556] usb 9-1: config 0 has no interfaces? [ 1876.907140][ T6556] usb 9-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1876.921857][ T6556] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.943334][ T6556] usb 9-1: config 0 descriptor?? [ 1877.164781][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8971'. [ 1877.176181][ T6556] usb 9-1: USB disconnect, device number 94 [ 1877.887953][ T5821] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1878.516983][ C2] hpet: Lost 1 RTC interrupts [ 1878.712841][ T5833] FAULT_INJECTION: forcing a failure. [ 1878.712841][ T5833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1878.732818][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz.7.8983 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1878.732845][ T5833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1878.732856][ T5833] Call Trace: [ 1878.732862][ T5833] [ 1878.732870][ T5833] dump_stack_lvl+0x16c/0x1f0 [ 1878.732900][ T5833] should_fail_ex+0x512/0x640 [ 1878.732918][ T5833] _copy_to_user+0x32/0xd0 [ 1878.732940][ T5833] simple_read_from_buffer+0xcb/0x170 [ 1878.732967][ T5833] proc_fail_nth_read+0x197/0x240 [ 1878.732985][ T5833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1878.733004][ T5833] ? rw_verify_area+0xcf/0x6c0 [ 1878.733019][ T5833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1878.733035][ T5833] vfs_read+0x1e4/0xc60 [ 1878.733058][ T5833] ? __pfx_vfs_read+0x10/0x10 [ 1878.733073][ T5833] ? find_held_lock+0x2b/0x80 [ 1878.733095][ T5833] ? __fget_files+0x20e/0x3c0 [ 1878.733120][ T5833] ksys_read+0x12a/0x250 [ 1878.733136][ T5833] ? __pfx_ksys_read+0x10/0x10 [ 1878.733151][ T5833] ? fput+0x9b/0xd0 [ 1878.733170][ T5833] ? rcu_is_watching+0x12/0xc0 [ 1878.733186][ T5833] __do_fast_syscall_32+0x7c/0x3a0 [ 1878.733202][ T5833] do_fast_syscall_32+0x32/0x80 [ 1878.733215][ T5833] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1878.733262][ T5833] RIP: 0023:0xf7f51579 [ 1878.733275][ T5833] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1878.733291][ T5833] RSP: 002b:00000000f5076590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1878.733308][ T5833] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5076620 [ 1878.733319][ T5833] RDX: 000000000000000f RSI: 00000000f73e4ff4 RDI: 0000000000000000 [ 1878.733328][ T5833] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1878.733336][ T5833] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1878.733345][ T5833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1878.733368][ T5833] [ 1878.761574][ C2] hpet: Lost 1 RTC interrupts [ 1878.843023][ C2] hpet: Lost 4 RTC interrupts [ 1879.147802][ T6556] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 1879.154364][ T6556] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 1879.159279][ T6556] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1879.164102][ T6556] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1879.168384][ T6556] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1879.182779][ T6556] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1879.188494][ T6556] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1879.198003][ T6556] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1879.203362][ T6556] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1879.208698][ T6556] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1879.221189][ T6556] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 1879.512573][ C2] hpet: Lost 1 RTC interrupts [ 1879.742300][ T5840] macsec0: entered promiscuous mode [ 1879.764192][ T5840] macsec0: entered allmulticast mode [ 1879.766549][ T5840] veth1_macvtap: entered allmulticast mode [ 1880.366752][ T5868] FAULT_INJECTION: forcing a failure. [ 1880.366752][ T5868] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.375968][ T5868] CPU: 3 UID: 0 PID: 5868 Comm: syz.7.8992 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1880.375995][ T5868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1880.376005][ T5868] Call Trace: [ 1880.376012][ T5868] [ 1880.376018][ T5868] dump_stack_lvl+0x16c/0x1f0 [ 1880.376047][ T5868] should_fail_ex+0x512/0x640 [ 1880.376062][ T5868] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1880.376081][ T5868] should_failslab+0xc2/0x120 [ 1880.376102][ T5868] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1880.376118][ T5868] ? __asan_memset+0x23/0x50 [ 1880.376131][ T5868] ? snd_pcm_oss_change_params_locked+0x6f4/0x3a30 [ 1880.376154][ T5868] snd_pcm_oss_change_params_locked+0x6f4/0x3a30 [ 1880.376178][ T5868] ? __mutex_lock+0x1c4/0x10b0 [ 1880.376191][ T5868] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1880.376223][ T5868] ? get_pid_task+0xfc/0x250 [ 1880.376248][ T5868] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1880.376268][ T5868] snd_pcm_oss_read+0x39b/0x760 [ 1880.376287][ T5868] ? security_file_permission+0x71/0x210 [ 1880.376309][ T5868] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1880.376328][ T5868] vfs_read+0x1e4/0xc60 [ 1880.376350][ T5868] ? __pfx_vfs_read+0x10/0x10 [ 1880.376366][ T5868] ? find_held_lock+0x2b/0x80 [ 1880.376382][ T5868] ? __fget_files+0x204/0x3c0 [ 1880.376402][ T5868] ? __fget_files+0x20e/0x3c0 [ 1880.376417][ T5868] ? handle_mm_fault+0x1c0/0xd10 [ 1880.376450][ T5868] ksys_read+0x12a/0x250 [ 1880.376469][ T5868] ? __pfx_ksys_read+0x10/0x10 [ 1880.376489][ T5868] ? rcu_is_watching+0x12/0xc0 [ 1880.376509][ T5868] __do_fast_syscall_32+0x7c/0x3a0 [ 1880.376527][ T5868] do_fast_syscall_32+0x32/0x80 [ 1880.376542][ T5868] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1880.376562][ T5868] RIP: 0023:0xf7f51579 [ 1880.376577][ T5868] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1880.376593][ T5868] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 1880.376610][ T5868] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800063c0 [ 1880.376620][ T5868] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1880.376630][ T5868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1880.376639][ T5868] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1880.376649][ T5868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1880.376671][ T5868] [ 1880.556483][ C2] hpet_rtc_timer_reinit: 2 callbacks suppressed [ 1880.556503][ C2] hpet: Lost 1 RTC interrupts [ 1880.625630][ T6295] usb 11-1: new low-speed USB device number 84 using dummy_hcd [ 1880.794729][ T6295] usb 11-1: config 0 has no interfaces? [ 1880.796948][ T6295] usb 11-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1880.804458][ T6295] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.838155][ T6295] usb 11-1: config 0 descriptor?? [ 1881.074297][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8990'. [ 1881.081145][T11962] usb 11-1: USB disconnect, device number 84 [ 1882.042226][ C2] hpet: Lost 1 RTC interrupts [ 1882.255760][ T5897] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1882.947421][ C2] hpet: Lost 1 RTC interrupts [ 1883.398706][ C2] hpet: Lost 1 RTC interrupts [ 1883.557581][ C2] hpet: Lost 1 RTC interrupts [ 1884.205539][ C2] hpet: Lost 1 RTC interrupts [ 1884.321561][ C2] hpet: Lost 2 RTC interrupts [ 1884.461538][ C2] hpet: Lost 1 RTC interrupts [ 1884.837531][ C2] hpet: Lost 1 RTC interrupts [ 1884.861972][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9008'. [ 1884.897675][ C2] hpet: Lost 1 RTC interrupts [ 1884.898035][ T5927] netlink: 216 bytes leftover after parsing attributes in process `syz.7.9008'. [ 1884.920574][ T5927] netlink: 216 bytes leftover after parsing attributes in process `syz.7.9008'. [ 1885.709547][ C2] hpet_rtc_timer_reinit: 3 callbacks suppressed [ 1885.709565][ C2] hpet: Lost 1 RTC interrupts [ 1885.718675][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9014'. [ 1885.757501][ C2] hpet: Lost 1 RTC interrupts [ 1885.969640][ C2] hpet: Lost 1 RTC interrupts [ 1886.037593][ C2] hpet: Lost 1 RTC interrupts [ 1886.149387][ C2] hpet: Lost 2 RTC interrupts [ 1886.185426][ C2] hpet: Lost 1 RTC interrupts [ 1886.357507][ C2] hpet: Lost 1 RTC interrupts [ 1886.511878][ C2] hpet: Lost 2 RTC interrupts [ 1886.553488][ C2] hpet: Lost 1 RTC interrupts [ 1886.605131][ T5950] lo speed is unknown, defaulting to 1000 [ 1887.349916][ C2] hpet: Lost 1 RTC interrupts [ 1888.308165][ T5969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9021'. [ 1888.367795][ T5977] FAULT_INJECTION: forcing a failure. [ 1888.367795][ T5977] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.405837][ T5977] CPU: 0 UID: 0 PID: 5977 Comm: syz.7.9022 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1888.405867][ T5977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1888.405880][ T5977] Call Trace: [ 1888.405886][ T5977] [ 1888.405894][ T5977] dump_stack_lvl+0x16c/0x1f0 [ 1888.405927][ T5977] should_fail_ex+0x512/0x640 [ 1888.405944][ T5977] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1888.405968][ T5977] should_failslab+0xc2/0x120 [ 1888.405991][ T5977] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1888.406013][ T5977] ? d_instantiate+0x77/0x90 [ 1888.406035][ T5977] ? alloc_empty_file+0x55/0x1e0 [ 1888.406065][ T5977] alloc_empty_file+0x55/0x1e0 [ 1888.406093][ T5977] alloc_file_pseudo+0x13a/0x230 [ 1888.406122][ T5977] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1888.406148][ T5977] ? find_held_lock+0x2b/0x80 [ 1888.406168][ T5977] __anon_inode_getfile+0xe8/0x280 [ 1888.406207][ T5977] bpf_link_prime+0x10f/0x290 [ 1888.406231][ T5977] bpf_raw_tp_link_attach+0x2ad/0x630 [ 1888.406253][ T5977] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 1888.406274][ T5977] ? find_held_lock+0x2b/0x80 [ 1888.406290][ T5977] ? __fget_files+0x204/0x3c0 [ 1888.406316][ T5977] ? fput+0x9b/0xd0 [ 1888.406338][ T5977] ? __bpf_prog_get+0x97/0x2a0 [ 1888.406360][ T5977] __sys_bpf+0x23c2/0x4de0 [ 1888.406388][ T5977] ? __pfx___sys_bpf+0x10/0x10 [ 1888.406412][ T5977] ? ksys_write+0x190/0x250 [ 1888.406435][ T5977] ? __mutex_unlock_slowpath+0x163/0x800 [ 1888.406477][ T5977] ? fput+0x9b/0xd0 [ 1888.406498][ T5977] ? ksys_write+0x1ac/0x250 [ 1888.406517][ T5977] ? __pfx_ksys_write+0x10/0x10 [ 1888.406537][ T5977] __ia32_sys_bpf+0x76/0xe0 [ 1888.406558][ T5977] __do_fast_syscall_32+0x7c/0x3a0 [ 1888.406577][ T5977] do_fast_syscall_32+0x32/0x80 [ 1888.406590][ T5977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1888.406606][ T5977] RIP: 0023:0xf7f51579 [ 1888.406618][ T5977] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1888.406632][ T5977] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1888.406648][ T5977] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000080000480 [ 1888.406660][ T5977] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1888.406670][ T5977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1888.406679][ T5977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1888.406690][ T5977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1888.406712][ T5977] [ 1890.897414][ C2] hpet_rtc_timer_reinit: 13 callbacks suppressed [ 1890.897433][ C2] hpet: Lost 1 RTC interrupts [ 1890.938601][ T6006] FAULT_INJECTION: forcing a failure. [ 1890.938601][ T6006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1890.943579][ T6006] CPU: 0 UID: 0 PID: 6006 Comm: syz.7.9031 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1890.943610][ T6006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1890.943620][ T6006] Call Trace: [ 1890.943628][ T6006] [ 1890.943636][ T6006] dump_stack_lvl+0x16c/0x1f0 [ 1890.943668][ T6006] should_fail_ex+0x512/0x640 [ 1890.943691][ T6006] _copy_to_user+0x32/0xd0 [ 1890.943713][ T6006] simple_read_from_buffer+0xcb/0x170 [ 1890.943745][ T6006] proc_fail_nth_read+0x197/0x240 [ 1890.943765][ T6006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1890.943786][ T6006] ? rw_verify_area+0xcf/0x6c0 [ 1890.943804][ T6006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1890.943823][ T6006] vfs_read+0x1e4/0xc60 [ 1890.943847][ T6006] ? __pfx_vfs_read+0x10/0x10 [ 1890.943865][ T6006] ? find_held_lock+0x2b/0x80 [ 1890.943890][ T6006] ? __fget_files+0x20e/0x3c0 [ 1890.943916][ T6006] ksys_read+0x12a/0x250 [ 1890.943935][ T6006] ? __pfx_ksys_read+0x10/0x10 [ 1890.943956][ T6006] ? rcu_is_watching+0x12/0xc0 [ 1890.943979][ T6006] __do_fast_syscall_32+0x7c/0x3a0 [ 1890.943997][ T6006] do_fast_syscall_32+0x32/0x80 [ 1890.944014][ T6006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1890.944036][ T6006] RIP: 0023:0xf7f51579 [ 1890.944050][ T6006] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1890.944067][ T6006] RSP: 002b:00000000f5055590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1890.944085][ T6006] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5055620 [ 1890.944095][ T6006] RDX: 000000000000000f RSI: 00000000f73e4ff4 RDI: 0000000000000000 [ 1890.944106][ T6006] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1890.944116][ T6006] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1890.944126][ T6006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1890.944150][ T6006] [ 1890.959714][ C2] hpet: Lost 1 RTC interrupts [ 1891.157441][ C2] hpet: Lost 11 RTC interrupts [ 1891.311704][ T1327] usb 9-1: new low-speed USB device number 95 using dummy_hcd [ 1891.488006][ T1327] usb 9-1: config 0 has no interfaces? [ 1891.513220][ C2] hpet: Lost 1 RTC interrupts [ 1891.541848][ T1327] usb 9-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1891.547750][ T1327] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.576068][ T1327] usb 9-1: config 0 descriptor?? [ 1891.698556][ C2] hpet: Lost 1 RTC interrupts [ 1891.789444][ C2] hpet: Lost 1 RTC interrupts [ 1891.797347][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9029'. [ 1891.804037][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9030'. [ 1891.825418][ T1327] usb 9-1: USB disconnect, device number 95 [ 1891.983062][ T6020] syz.6.9034: attempt to access beyond end of device [ 1891.983062][ T6020] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1891.995059][ T6020] gfs2: error -5 reading superblock [ 1892.059428][ T6019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1892.233381][ C2] hpet: Lost 1 RTC interrupts [ 1892.958250][ T6027] 9pnet: Could not find request transport: fddno= [ 1893.041054][ C2] hpet: Lost 1 RTC interrupts [ 1893.957928][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9037'. [ 1894.540417][ C2] hpet: Lost 1 RTC interrupts [ 1894.569506][ C2] hpet: Lost 1 RTC interrupts [ 1894.602991][ T6040] lo speed is unknown, defaulting to 1000 [ 1895.093015][ T6051] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9050'. [ 1895.961577][ C2] hpet_rtc_timer_reinit: 2 callbacks suppressed [ 1895.961597][ C2] hpet: Lost 2 RTC interrupts [ 1895.994310][ C2] hpet: Lost 1 RTC interrupts [ 1896.497448][ C2] hpet: Lost 1 RTC interrupts [ 1896.822751][ C2] hpet: Lost 1 RTC interrupts [ 1897.211221][ C2] hpet: Lost 1 RTC interrupts [ 1897.385439][ C2] hpet: Lost 1 RTC interrupts [ 1898.012062][ T6089] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9052'. [ 1898.187021][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9055'. [ 1898.679438][ C2] hpet: Lost 1 RTC interrupts [ 1898.733207][ C2] hpet: Lost 1 RTC interrupts [ 1898.776546][ T6100] lo speed is unknown, defaulting to 1000 [ 1899.627683][ C2] hpet: Lost 1 RTC interrupts [ 1900.178327][ C2] hpet: Lost 1 RTC interrupts [ 1900.264561][ T6044] hid_parser_main: 6 callbacks suppressed [ 1900.264580][ T6044] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 1900.305206][ T6044] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 1900.339466][ T6044] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1900.345493][ T6044] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1900.411473][ T6044] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1900.430537][ T6044] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1900.434338][ T6044] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1900.455271][ T6044] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1900.459603][ T6044] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1900.470851][ T6044] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1900.593359][ T6044] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 1900.963132][ T6112] macsec0: entered promiscuous mode [ 1900.965942][ T6112] macsec0: entered allmulticast mode [ 1900.968937][ T6112] veth1_macvtap: entered allmulticast mode [ 1901.447559][ C2] hpet_rtc_timer_reinit: 4 callbacks suppressed [ 1901.447578][ C2] hpet: Lost 1 RTC interrupts [ 1901.553565][ C2] hpet: Lost 1 RTC interrupts [ 1902.491475][ C2] hpet: Lost 1 RTC interrupts [ 1902.975396][ C2] hpet: Lost 1 RTC interrupts [ 1903.900682][T11962] usb 12-1: new low-speed USB device number 2 using dummy_hcd [ 1904.057686][ C2] hpet: Lost 1 RTC interrupts [ 1904.118491][ C2] hpet: Lost 1 RTC interrupts [ 1904.126035][T11962] usb 12-1: config 0 has no interfaces? [ 1904.129473][T11962] usb 12-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1904.136003][T11962] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.149083][T11962] usb 12-1: config 0 descriptor?? [ 1904.369642][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9060'. [ 1904.376044][ T6044] usb 12-1: USB disconnect, device number 2 [ 1904.849793][ C2] hpet: Lost 1 RTC interrupts [ 1904.915510][ T6140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9063'. [ 1905.367318][ C2] hpet: Lost 1 RTC interrupts [ 1905.400032][ C2] hpet: Lost 1 RTC interrupts [ 1905.837525][ C2] hpet: Lost 2 RTC interrupts [ 1907.029075][ T6161] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9070'. [ 1907.621445][ C2] hpet_rtc_timer_reinit: 5 callbacks suppressed [ 1907.621465][ C2] hpet: Lost 1 RTC interrupts [ 1907.645775][T31944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1907.690869][T31944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1907.697811][T31944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1907.740613][T31944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1907.797444][T31944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1907.869189][ T6164] lo speed is unknown, defaulting to 1000 [ 1908.152819][ T6164] chnl_net:caif_netlink_parms(): no params data found [ 1908.657108][ C2] hpet: Lost 1 RTC interrupts [ 1908.845200][ C2] hpet: Lost 1 RTC interrupts [ 1908.940634][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.961246][ C2] hpet: Lost 1 RTC interrupts [ 1908.961833][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1908.962009][ T6164] bridge_slave_0: entered allmulticast mode [ 1908.972581][ T6164] bridge_slave_0: entered promiscuous mode [ 1908.988826][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.994052][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1908.999161][ T6164] bridge_slave_1: entered allmulticast mode [ 1909.003903][ T6164] bridge_slave_1: entered promiscuous mode [ 1909.033390][ C2] hpet: Lost 1 RTC interrupts [ 1909.289329][ C2] hpet: Lost 1 RTC interrupts [ 1909.537168][ C2] hpet: Lost 1 RTC interrupts [ 1909.546455][ T6185] netlink: 'syz.2.9074': attribute type 9 has an invalid length. [ 1909.549798][ T6185] netlink: 212384 bytes leftover after parsing attributes in process `syz.2.9074'. [ 1909.585758][ C2] hpet: Lost 2 RTC interrupts [ 1909.621172][ T6185] openvswitch: netlink: Message has 5 unknown bytes. [ 1909.885249][ C2] hpet: Lost 1 RTC interrupts [ 1909.897402][ T1140] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1909.911119][T29940] Bluetooth: hci3: command tx timeout [ 1909.947515][ T6164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1909.955440][ T6164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1909.963573][ C2] hpet: Lost 1 RTC interrupts [ 1910.218859][ T1140] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1910.442115][ T6164] team0: Port device team_slave_0 added [ 1910.450836][ T6164] team0: Port device team_slave_1 added [ 1910.817607][ T6295] usb 7-1: new low-speed USB device number 121 using dummy_hcd [ 1910.851626][ T1140] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.002673][ T6295] usb 7-1: config 0 has no interfaces? [ 1911.005163][ T6295] usb 7-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1911.028895][ T6295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.051710][ T6295] usb 7-1: config 0 descriptor?? [ 1911.143863][ T6216] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9078'. [ 1911.151709][ T6217] loop6: detected capacity change from 0 to 524287999 [ 1911.243278][ T1140] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.322070][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9077'. [ 1911.344233][ T6295] usb 7-1: USB disconnect, device number 121 [ 1911.345508][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1911.372747][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1911.385766][ T6164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1911.544610][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1911.547002][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1911.573335][ T6164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1911.889536][ T6164] hsr_slave_0: entered promiscuous mode [ 1911.893752][ T6164] hsr_slave_1: entered promiscuous mode [ 1911.909776][ T6164] debugfs: 'hsr0' already exists in 'hsr' [ 1911.913966][ T6164] Cannot create hsr debugfs directory [ 1911.990408][T29940] Bluetooth: hci3: command tx timeout [ 1912.525393][ T1140] bridge_slave_1: left allmulticast mode [ 1912.528866][ T1140] bridge_slave_1: left promiscuous mode [ 1912.541844][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.582421][ T6223] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9079'. [ 1912.601248][ T1140] bridge_slave_0: left allmulticast mode [ 1912.603659][ T1140] bridge_slave_0: left promiscuous mode [ 1912.606307][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.941367][ C2] hpet_rtc_timer_reinit: 11 callbacks suppressed [ 1912.941386][ C2] hpet: Lost 2 RTC interrupts [ 1913.532032][ C2] hpet: Lost 1 RTC interrupts [ 1913.552978][ C2] hpet: Lost 1 RTC interrupts [ 1913.791279][ C2] hpet: Lost 1 RTC interrupts [ 1913.917643][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1913.934779][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.021533][ C2] hpet: Lost 1 RTC interrupts [ 1914.031820][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1914.041398][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1914.049100][ T1140] bond0 (unregistering): Released all slaves [ 1914.083165][T29940] Bluetooth: hci3: command tx timeout [ 1914.165178][ C2] hpet: Lost 1 RTC interrupts [ 1914.282430][ C2] hpet: Lost 1 RTC interrupts [ 1914.313209][ C2] hpet: Lost 1 RTC interrupts [ 1914.369245][ C2] hpet: Lost 1 RTC interrupts [ 1914.609018][ T6164] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1914.676759][ T6164] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1914.719623][ T6164] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1914.828157][ T6164] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1914.905261][ C2] hpet: Lost 1 RTC interrupts [ 1915.432372][ T1140] hsr_slave_0: left promiscuous mode [ 1915.438223][ T1140] hsr_slave_1: left promiscuous mode [ 1915.442696][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1915.445934][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1915.458231][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1915.461523][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1915.579385][ T1140] veth1_macvtap: left promiscuous mode [ 1915.583057][ T1140] veth0_macvtap: left promiscuous mode [ 1915.587889][ T1140] veth1_vlan: left promiscuous mode [ 1915.591247][ T1140] veth0_vlan: left promiscuous mode [ 1915.697859][ T480] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 1915.892168][ T480] usb 12-1: not running at top speed; connect to a high speed hub [ 1915.908118][ T480] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1915.934013][ T480] usb 12-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 1915.954720][ T480] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.958742][ T480] usb 12-1: Product: syz [ 1915.963531][ T480] usb 12-1: Manufacturer: syz [ 1915.965582][ T480] usb 12-1: SerialNumber: syz [ 1915.972129][ T6257] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1916.170390][T29940] Bluetooth: hci3: command tx timeout [ 1916.250098][ T6295] usb 9-1: new low-speed USB device number 96 using dummy_hcd [ 1916.413216][ T9] IPVS: starting estimator thread 0... [ 1916.471292][ T6295] usb 9-1: config 0 has no interfaces? [ 1916.477529][ T6295] usb 9-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1916.483586][ T6295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.491566][ T6295] usb 9-1: config 0 descriptor?? [ 1916.519988][ T6270] IPVS: using max 25 ests per chain, 60000 per kthread [ 1916.698616][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9086'. [ 1918.479761][ C2] hpet_rtc_timer_reinit: 9 callbacks suppressed [ 1918.479780][ C2] hpet: Lost 1 RTC interrupts [ 1918.625989][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9088'. [ 1918.685210][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9088'. [ 1918.802728][ C2] hpet: Lost 1 RTC interrupts [ 1919.026235][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 1919.387091][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 1920.149192][ C2] hpet: Lost 1 RTC interrupts [ 1920.672158][ C2] hpet: Lost 2 RTC interrupts [ 1920.713162][ C2] hpet: Lost 1 RTC interrupts [ 1920.994520][ C2] hpet: Lost 1 RTC interrupts [ 1921.078763][ T480] usbhid 12-1:1.0: can't add hid device: -32 [ 1921.084693][ T480] usbhid 12-1:1.0: probe with driver usbhid failed with error -32 [ 1921.133872][ C2] hpet: Lost 1 RTC interrupts [ 1921.445767][ C2] hpet: Lost 1 RTC interrupts [ 1921.760448][ C2] hpet: Lost 1 RTC interrupts [ 1922.337879][ T6266] bridge0: port 3(syz_tun) entered blocking state [ 1922.342079][ T6266] bridge0: port 3(syz_tun) entered disabled state [ 1922.367635][ T6266] syz_tun: entered allmulticast mode [ 1922.376102][ T480] usb 9-1: USB disconnect, device number 96 [ 1922.384146][ T6266] syz_tun: entered promiscuous mode [ 1922.386245][ T6266] bridge0: port 3(syz_tun) entered blocking state [ 1922.386353][ T6266] bridge0: port 3(syz_tun) entered forwarding state [ 1922.627698][ T6164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1922.647014][ T6164] 8021q: adding VLAN 0 to HW filter on device team0 [ 1922.674216][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9090'. [ 1922.678722][T24204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.682043][T24204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1922.685272][ C2] hpet: Lost 1 RTC interrupts [ 1922.737959][ T480] usb 12-1: USB disconnect, device number 3 [ 1922.890988][T24207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.897525][T24207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1922.987753][ T6164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1922.997067][ T6164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1923.497699][ C2] hpet_rtc_timer_reinit: 4 callbacks suppressed [ 1923.497716][ C2] hpet: Lost 1 RTC interrupts [ 1923.537172][ C2] hpet: Lost 1 RTC interrupts [ 1923.761502][ T2771] IPVS: starting estimator thread 0... [ 1923.773724][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1923.903480][ T6309] IPVS: using max 31 ests per chain, 74400 per kthread [ 1924.686092][ T6164] veth0_vlan: entered promiscuous mode [ 1924.708838][ T6164] veth1_vlan: entered promiscuous mode [ 1924.736594][ T6328] tipc: Enabling of bearer rejected, failed to enable media [ 1924.836432][ T6164] veth0_macvtap: entered promiscuous mode [ 1924.844928][ T6164] veth1_macvtap: entered promiscuous mode [ 1924.860542][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1924.884775][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1924.911749][ T1140] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.915685][ T1140] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.940984][ T1140] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.944721][ T1140] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.085308][ C2] hpet: Lost 1 RTC interrupts [ 1925.122307][ C2] hpet: Lost 1 RTC interrupts [ 1925.125714][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1925.129145][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1925.148517][ C2] hpet: Lost 1 RTC interrupts [ 1925.152597][T24204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1925.158889][T24204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1925.344898][ C3] vkms_vblank_simulate: vblank timer overrun [ 1925.748921][ C3] vkms_vblank_simulate: vblank timer overrun [ 1926.056575][ C2] hpet: Lost 1 RTC interrupts [ 1926.128902][ C3] vkms_vblank_simulate: vblank timer overrun [ 1926.136697][ T6363] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 1926.254583][ C3] vkms_vblank_simulate: vblank timer overrun [ 1926.257146][ C2] hpet: Lost 1 RTC interrupts [ 1926.281999][ C3] vkms_vblank_simulate: vblank timer overrun [ 1926.329171][ C3] vkms_vblank_simulate: vblank timer overrun [ 1926.349171][ C2] hpet: Lost 2 RTC interrupts [ 1926.465397][ C2] hpet: Lost 2 RTC interrupts [ 1926.537035][ C2] hpet: Lost 1 RTC interrupts [ 1927.417767][ T6377] tipc: Enabling of bearer rejected, failed to enable media [ 1927.640985][ T6385] random: crng reseeded on system resumption [ 1928.235996][ C3] vkms_vblank_simulate: vblank timer overrun [ 1928.329694][ T6399] FAULT_INJECTION: forcing a failure. [ 1928.329694][ T6399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1928.340619][ T6399] CPU: 1 UID: 0 PID: 6399 Comm: syz.7.9120 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1928.340645][ T6399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1928.340655][ T6399] Call Trace: [ 1928.340661][ T6399] [ 1928.340668][ T6399] dump_stack_lvl+0x16c/0x1f0 [ 1928.340699][ T6399] should_fail_ex+0x512/0x640 [ 1928.340720][ T6399] _copy_to_user+0x32/0xd0 [ 1928.340742][ T6399] simple_read_from_buffer+0xcb/0x170 [ 1928.340796][ T6399] proc_fail_nth_read+0x197/0x240 [ 1928.340816][ T6399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1928.340836][ T6399] ? rw_verify_area+0xcf/0x6c0 [ 1928.340852][ T6399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1928.340870][ T6399] vfs_read+0x1e4/0xc60 [ 1928.340889][ T6399] ? __pfx_vfs_read+0x10/0x10 [ 1928.340903][ T6399] ? find_held_lock+0x2b/0x80 [ 1928.340925][ T6399] ? __fget_files+0x20e/0x3c0 [ 1928.340945][ T6399] ksys_read+0x12a/0x250 [ 1928.340960][ T6399] ? __pfx_ksys_read+0x10/0x10 [ 1928.340979][ T6399] ? rcu_is_watching+0x12/0xc0 [ 1928.340998][ T6399] __do_fast_syscall_32+0x7c/0x3a0 [ 1928.341015][ T6399] do_fast_syscall_32+0x32/0x80 [ 1928.341037][ T6399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1928.341056][ T6399] RIP: 0023:0xf7f51579 [ 1928.341068][ T6399] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1928.341083][ T6399] RSP: 002b:00000000f5076590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1928.341099][ T6399] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5076620 [ 1928.341108][ T6399] RDX: 000000000000000f RSI: 00000000f73e4ff4 RDI: 0000000000000000 [ 1928.341117][ T6399] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1928.341126][ T6399] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1928.341135][ T6399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1928.341156][ T6399] [ 1928.609770][ T6402] FAULT_INJECTION: forcing a failure. [ 1928.609770][ T6402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1928.637727][ C2] hpet_rtc_timer_reinit: 6 callbacks suppressed [ 1928.637746][ C2] hpet: Lost 1 RTC interrupts [ 1928.669451][ T6402] CPU: 2 UID: 0 PID: 6402 Comm: syz.2.9122 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1928.669480][ T6402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1928.669490][ T6402] Call Trace: [ 1928.669499][ T6402] [ 1928.669508][ T6402] dump_stack_lvl+0x16c/0x1f0 [ 1928.669537][ T6402] should_fail_ex+0x512/0x640 [ 1928.669559][ T6402] _copy_from_user+0x2e/0xd0 [ 1928.669579][ T6402] btf_new_fd+0x70a/0x5490 [ 1928.669602][ T6402] ? __lock_acquire+0xb97/0x1ce0 [ 1928.669626][ T6402] ? aa_get_newest_label+0x375/0x680 [ 1928.669657][ T6402] ? __pfx_btf_new_fd+0x10/0x10 [ 1928.669676][ T6402] ? trace_cap_capable+0x18d/0x200 [ 1928.669704][ T6402] ? apparmor_capable+0x114/0x1d0 [ 1928.669730][ T6402] ? bpf_lsm_capable+0x9/0x10 [ 1928.669746][ T6402] ? security_capable+0x7e/0x260 [ 1928.669772][ T6402] ? ns_capable+0xd7/0x110 [ 1928.669791][ T6402] __sys_bpf+0x38a/0x4de0 [ 1928.669817][ T6402] ? __pfx___sys_bpf+0x10/0x10 [ 1928.669840][ T6402] ? ksys_write+0x190/0x250 [ 1928.669861][ T6402] ? __mutex_unlock_slowpath+0x163/0x800 [ 1928.669896][ T6402] ? fput+0x9b/0xd0 [ 1928.669917][ T6402] ? ksys_write+0x1ac/0x250 [ 1928.669935][ T6402] ? __pfx_ksys_write+0x10/0x10 [ 1928.669958][ T6402] __ia32_sys_bpf+0x76/0xe0 [ 1928.669984][ T6402] __do_fast_syscall_32+0x7c/0x3a0 [ 1928.670001][ T6402] do_fast_syscall_32+0x32/0x80 [ 1928.670018][ T6402] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1928.670039][ T6402] RIP: 0023:0xf711e579 [ 1928.670053][ T6402] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1928.670069][ T6402] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1928.670087][ T6402] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000380 [ 1928.670098][ T6402] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 1928.670107][ T6402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1928.670117][ T6402] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1928.670127][ T6402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1928.670149][ T6402] [ 1928.813926][ C3] vkms_vblank_simulate: vblank timer overrun [ 1928.816190][ C2] hpet: Lost 7 RTC interrupts [ 1928.828395][ T6405] binder: 6404:6405 ioctl 541b 0 returned -22 [ 1928.845358][ C2] hpet: Lost 1 RTC interrupts [ 1928.912156][ T6405] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9123'. [ 1928.925269][ C2] hpet: Lost 1 RTC interrupts [ 1928.938593][ T6405] netlink: 'syz.7.9123': attribute type 1 has an invalid length. [ 1928.956253][ C2] hpet: Lost 1 RTC interrupts [ 1929.003636][ T6405] netlink: 'syz.7.9123': attribute type 2 has an invalid length. [ 1929.009630][ T6405] netlink: 'syz.7.9123': attribute type 3 has an invalid length. [ 1929.012506][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9123'. [ 1929.019577][ T6416] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9127'. [ 1929.186143][ T6422] FAULT_INJECTION: forcing a failure. [ 1929.186143][ T6422] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.207808][ T6422] CPU: 1 UID: 0 PID: 6422 Comm: syz.7.9129 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1929.207837][ T6422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1929.207849][ T6422] Call Trace: [ 1929.207855][ T6422] [ 1929.207862][ T6422] dump_stack_lvl+0x16c/0x1f0 [ 1929.207894][ T6422] should_fail_ex+0x512/0x640 [ 1929.207917][ T6422] should_failslab+0xc2/0x120 [ 1929.207941][ T6422] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1929.207960][ T6422] ? proc_self_get_link+0x1a9/0x230 [ 1929.207986][ T6422] proc_self_get_link+0x1a9/0x230 [ 1929.208008][ T6422] ? __pfx_proc_self_get_link+0x10/0x10 [ 1929.208027][ T6422] step_into+0x195b/0x2270 [ 1929.208051][ T6422] ? __pfx_step_into+0x10/0x10 [ 1929.208073][ T6422] ? lookup_fast+0x156/0x610 [ 1929.208093][ T6422] walk_component+0xfc/0x5b0 [ 1929.208113][ T6422] link_path_walk+0x627/0xe20 [ 1929.208140][ T6422] path_openat+0x1b0/0x2cb0 [ 1929.208159][ T6422] ? do_fast_syscall_32+0x32/0x80 [ 1929.208174][ T6422] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1929.208205][ T6422] ? __pfx_path_openat+0x10/0x10 [ 1929.208226][ T6422] ? __lock_acquire+0xb97/0x1ce0 [ 1929.208253][ T6422] do_filp_open+0x20b/0x470 [ 1929.208282][ T6422] ? __pfx_do_filp_open+0x10/0x10 [ 1929.208321][ T6422] ? _raw_spin_unlock+0x28/0x50 [ 1929.208343][ T6422] ? alloc_fd+0x471/0x7d0 [ 1929.208369][ T6422] do_sys_openat2+0x11b/0x1d0 [ 1929.208397][ T6422] ? __pfx_do_sys_openat2+0x10/0x10 [ 1929.208426][ T6422] ? __fget_files+0x20e/0x3c0 [ 1929.208442][ T6422] ? handle_mm_fault+0x1c0/0xd10 [ 1929.208464][ T6422] __ia32_compat_sys_openat+0x16d/0x210 [ 1929.208482][ T6422] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1929.208496][ T6422] ? ksys_write+0x1ac/0x250 [ 1929.208519][ T6422] ? rcu_is_watching+0x12/0xc0 [ 1929.208542][ T6422] __do_fast_syscall_32+0x7c/0x3a0 [ 1929.208560][ T6422] do_fast_syscall_32+0x32/0x80 [ 1929.208578][ T6422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1929.208597][ T6422] RIP: 0023:0xf7f51579 [ 1929.208610][ T6422] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1929.208626][ T6422] RSP: 002b:00000000f50764f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 1929.208644][ T6422] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7266c84 [ 1929.208655][ T6422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73e4ff4 [ 1929.208665][ T6422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1929.208675][ T6422] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1929.208685][ T6422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1929.208708][ T6422] [ 1929.226013][ T6425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9131'. [ 1929.272967][ C2] hpet: Lost 1 RTC interrupts [ 1929.412002][ C2] hpet: Lost 8 RTC interrupts [ 1929.709608][ C2] hpet: Lost 1 RTC interrupts [ 1929.786357][ T6434] FAULT_INJECTION: forcing a failure. [ 1929.786357][ T6434] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.808668][ C2] hpet: Lost 1 RTC interrupts [ 1929.817301][ T6434] CPU: 0 UID: 0 PID: 6434 Comm: syz.2.9134 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1929.817327][ T6434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1929.817337][ T6434] Call Trace: [ 1929.817344][ T6434] [ 1929.817351][ T6434] dump_stack_lvl+0x16c/0x1f0 [ 1929.817381][ T6434] should_fail_ex+0x512/0x640 [ 1929.817403][ T6434] should_failslab+0xc2/0x120 [ 1929.817423][ T6434] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1929.817444][ T6434] ? skb_clone+0x190/0x3f0 [ 1929.817474][ T6434] skb_clone+0x190/0x3f0 [ 1929.817501][ T6434] netlink_deliver_tap+0xabd/0xd30 [ 1929.817529][ T6434] netlink_unicast+0x64c/0x870 [ 1929.817557][ T6434] ? __pfx_netlink_unicast+0x10/0x10 [ 1929.817582][ T6434] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1929.817615][ T6434] netlink_sendmsg+0x8d1/0xdd0 [ 1929.817643][ T6434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1929.817668][ T6434] ? __import_iovec+0x1dd/0x650 [ 1929.817693][ T6434] ____sys_sendmsg+0xa95/0xc70 [ 1929.817713][ T6434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1929.817731][ T6434] ? get_compat_msghdr+0x11a/0x170 [ 1929.817766][ T6434] ___sys_sendmsg+0x134/0x1d0 [ 1929.817792][ T6434] ? __pfx____sys_sendmsg+0x10/0x10 [ 1929.817830][ T6434] ? find_held_lock+0x2b/0x80 [ 1929.817864][ T6434] __sys_sendmsg+0x16d/0x220 [ 1929.817891][ T6434] ? __pfx___sys_sendmsg+0x10/0x10 [ 1929.817926][ T6434] ? rcu_is_watching+0x12/0xc0 [ 1929.817949][ T6434] __do_fast_syscall_32+0x7c/0x3a0 [ 1929.817968][ T6434] do_fast_syscall_32+0x32/0x80 [ 1929.817985][ T6434] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1929.818006][ T6434] RIP: 0023:0xf711e579 [ 1929.818021][ T6434] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1929.818035][ T6434] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1929.818051][ T6434] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 1929.818062][ T6434] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1929.818072][ T6434] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1929.818081][ T6434] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1929.818091][ T6434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1929.818112][ T6434] [ 1930.180462][ T6438] FAULT_INJECTION: forcing a failure. [ 1930.180462][ T6438] name failslab, interval 1, probability 0, space 0, times 0 [ 1930.213290][ T6438] CPU: 0 UID: 0 PID: 6438 Comm: syz.2.9135 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1930.213317][ T6438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1930.213327][ T6438] Call Trace: [ 1930.213334][ T6438] [ 1930.213341][ T6438] dump_stack_lvl+0x16c/0x1f0 [ 1930.213370][ T6438] should_fail_ex+0x512/0x640 [ 1930.213393][ T6438] should_failslab+0xc2/0x120 [ 1930.213417][ T6438] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1930.213437][ T6438] ? skb_clone+0x190/0x3f0 [ 1930.213467][ T6438] skb_clone+0x190/0x3f0 [ 1930.213492][ T6438] netlink_deliver_tap+0xabd/0xd30 [ 1930.213523][ T6438] netlink_unicast+0x64c/0x870 [ 1930.213553][ T6438] ? __pfx_netlink_unicast+0x10/0x10 [ 1930.213578][ T6438] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1930.213609][ T6438] netlink_sendmsg+0x8d1/0xdd0 [ 1930.213639][ T6438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1930.213664][ T6438] ? __import_iovec+0x1dd/0x650 [ 1930.213691][ T6438] ____sys_sendmsg+0xa95/0xc70 [ 1930.213714][ T6438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1930.213733][ T6438] ? get_compat_msghdr+0x11a/0x170 [ 1930.213767][ T6438] ___sys_sendmsg+0x134/0x1d0 [ 1930.213793][ T6438] ? __pfx____sys_sendmsg+0x10/0x10 [ 1930.213824][ T6438] ? find_held_lock+0x2b/0x80 [ 1930.213854][ T6438] __sys_sendmsg+0x16d/0x220 [ 1930.213878][ T6438] ? __pfx___sys_sendmsg+0x10/0x10 [ 1930.213913][ T6438] ? rcu_is_watching+0x12/0xc0 [ 1930.213933][ T6438] __do_fast_syscall_32+0x7c/0x3a0 [ 1930.213958][ T6438] do_fast_syscall_32+0x32/0x80 [ 1930.213974][ T6438] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1930.213994][ T6438] RIP: 0023:0xf711e579 [ 1930.214007][ T6438] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1930.214022][ T6438] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1930.214038][ T6438] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1930.214048][ T6438] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1930.214057][ T6438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1930.214065][ T6438] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1930.214074][ T6438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1930.214096][ T6438] [ 1930.237284][ C2] hpet: Lost 1 RTC interrupts [ 1930.662176][ T60] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1930.682615][ T6435] qnx6: unable to read the first superblock [ 1930.854530][ T60] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1930.858853][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1930.879770][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1930.954096][ T60] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1930.960430][ T60] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1930.966072][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.049588][ T60] usb 7-1: config 0 descriptor?? [ 1931.446108][ T6459] FAULT_INJECTION: forcing a failure. [ 1931.446108][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.448933][ T6460] FAULT_INJECTION: forcing a failure. [ 1931.448933][ T6460] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.463970][ T6459] CPU: 3 UID: 0 PID: 6459 Comm: syz.7.9141 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1931.463996][ T6459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1931.464009][ T6459] Call Trace: [ 1931.464015][ T6459] [ 1931.464022][ T6459] dump_stack_lvl+0x16c/0x1f0 [ 1931.464054][ T6459] should_fail_ex+0x512/0x640 [ 1931.464073][ T6459] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1931.464095][ T6459] should_failslab+0xc2/0x120 [ 1931.464119][ T6459] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1931.464139][ T6459] ? sk_prot_alloc+0x60/0x2a0 [ 1931.464161][ T6459] sk_prot_alloc+0x60/0x2a0 [ 1931.464188][ T6459] sk_alloc+0x36/0xc20 [ 1931.464212][ T6459] inet6_create+0x381/0x12b0 [ 1931.464233][ T6459] ? inet6_create+0x7f/0x12b0 [ 1931.464256][ T6459] __sock_create+0x335/0x8d0 [ 1931.464281][ T6459] mptcp_subflow_create_socket+0xf5/0xed0 [ 1931.464305][ T6459] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1931.464331][ T6459] __mptcp_nmpc_sk+0x182/0x7d0 [ 1931.464353][ T6459] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1931.464375][ T6459] ? __local_bh_enable_ip+0xa4/0x120 [ 1931.464398][ T6459] mptcp_sendmsg+0x163d/0x1eb0 [ 1931.464425][ T6459] ? __pfx___might_resched+0x10/0x10 [ 1931.464443][ T6459] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1931.464471][ T6459] ? aa_sk_perm+0x2f4/0xb10 [ 1931.464489][ T6459] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1931.464517][ T6459] ? __import_iovec+0x1dd/0x650 [ 1931.464538][ T6459] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1931.464561][ T6459] inet6_sendmsg+0x11c/0x140 [ 1931.464581][ T6459] ____sys_sendmsg+0x705/0xc70 [ 1931.464600][ T6459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1931.464620][ T6459] ? get_compat_msghdr+0x11a/0x170 [ 1931.464648][ T6459] ? __pfx__kstrtoull+0x10/0x10 [ 1931.464677][ T6459] ___sys_sendmsg+0x134/0x1d0 [ 1931.464702][ T6459] ? __pfx____sys_sendmsg+0x10/0x10 [ 1931.464783][ T6459] __sys_sendmmsg+0x2f9/0x420 [ 1931.464814][ T6459] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1931.464848][ T6459] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1931.464886][ T6459] ? fput+0x9b/0xd0 [ 1931.464910][ T6459] ? ksys_write+0x1ac/0x250 [ 1931.464929][ T6459] ? __pfx_ksys_write+0x10/0x10 [ 1931.464954][ T6459] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1931.464979][ T6459] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1931.465004][ T6459] __do_fast_syscall_32+0x7c/0x3a0 [ 1931.465025][ T6459] do_fast_syscall_32+0x32/0x80 [ 1931.465042][ T6459] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1931.465061][ T6459] RIP: 0023:0xf7f51579 [ 1931.465078][ T6459] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1931.465093][ T6459] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1931.465111][ T6459] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080019680 [ 1931.465121][ T6459] RDX: 0000000000000001 RSI: 0000000020004855 RDI: 0000000000000000 [ 1931.465131][ T6459] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1931.465142][ T6459] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1931.465151][ T6459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1931.465179][ T6459] [ 1931.493613][ T60] hid_parser_main: 6 callbacks suppressed [ 1931.493632][ T60] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1931.499541][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.8.9139 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1931.499564][ T6460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1931.499573][ T6460] Call Trace: [ 1931.499580][ T6460] [ 1931.499587][ T6460] dump_stack_lvl+0x16c/0x1f0 [ 1931.499615][ T6460] should_fail_ex+0x512/0x640 [ 1931.499631][ T6460] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1931.499652][ T6460] should_failslab+0xc2/0x120 [ 1931.499672][ T6460] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1931.499689][ T6460] ? __up_read+0x1f8/0x750 [ 1931.499710][ T6460] ? __alloc_skb+0x2b2/0x380 [ 1931.499735][ T6460] __alloc_skb+0x2b2/0x380 [ 1931.499757][ T6460] ? __pfx___alloc_skb+0x10/0x10 [ 1931.499787][ T6460] netlink_ack+0x15d/0xb80 [ 1931.499811][ T6460] ? __lock_acquire+0x62e/0x1ce0 [ 1931.499837][ T6460] rdma_nl_rcv_skb.constprop.0.isra.0+0x330/0x430 [ 1931.499870][ T6460] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1931.499901][ T6460] ? netlink_deliver_tap+0x1ae/0xd30 [ 1931.499932][ T6460] ? is_vmalloc_addr+0x86/0xa0 [ 1931.499955][ T6460] netlink_unicast+0x5aa/0x870 [ 1931.499985][ T6460] ? __pfx_netlink_unicast+0x10/0x10 [ 1931.500012][ T6460] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1931.500044][ T6460] netlink_sendmsg+0x8d1/0xdd0 [ 1931.500071][ T6460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1931.500095][ T6460] ? __import_iovec+0x1dd/0x650 [ 1931.500120][ T6460] ____sys_sendmsg+0xa95/0xc70 [ 1931.500142][ T6460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1931.500161][ T6460] ? get_compat_msghdr+0x11a/0x170 [ 1931.500194][ T6460] ___sys_sendmsg+0x134/0x1d0 [ 1931.500219][ T6460] ? __pfx____sys_sendmsg+0x10/0x10 [ 1931.500254][ T6460] ? find_held_lock+0x2b/0x80 [ 1931.500286][ T6460] __sys_sendmsg+0x16d/0x220 [ 1931.500311][ T6460] ? __pfx___sys_sendmsg+0x10/0x10 [ 1931.500347][ T6460] ? rcu_is_watching+0x12/0xc0 [ 1931.500370][ T6460] __do_fast_syscall_32+0x7c/0x3a0 [ 1931.500389][ T6460] do_fast_syscall_32+0x32/0x80 [ 1931.500406][ T6460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1931.500428][ T6460] RIP: 0023:0xf7fa1579 [ 1931.500443][ T6460] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1931.500460][ T6460] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1931.500479][ T6460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000b80 [ 1931.500490][ T6460] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1931.500501][ T6460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1931.500511][ T6460] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1931.500522][ T6460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1931.500545][ T6460] [ 1931.720001][ T6443] sctp: [Deprecated]: syz.2.9137 (pid 6443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1931.720001][ T6443] Use struct sctp_sack_info instead [ 1931.810991][ T60] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1932.115260][ T60] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1932.119376][ T60] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1932.123508][ T60] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1932.134834][ T60] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1932.146075][ T60] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1932.159922][ T60] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1932.163035][ T60] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1932.166126][ T60] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1932.186583][ T60] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1932.203378][ T60] usb 7-1: USB disconnect, device number 122 [ 1932.598537][ T6479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9147'. [ 1933.837185][ C2] hpet_rtc_timer_reinit: 6 callbacks suppressed [ 1933.837203][ C2] hpet: Lost 1 RTC interrupts [ 1933.982685][ T6499] FAULT_INJECTION: forcing a failure. [ 1933.982685][ T6499] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.005019][ T6499] CPU: 1 UID: 0 PID: 6499 Comm: syz.2.9153 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1934.005060][ T6499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1934.005071][ T6499] Call Trace: [ 1934.005077][ T6499] [ 1934.005084][ T6499] dump_stack_lvl+0x16c/0x1f0 [ 1934.005116][ T6499] should_fail_ex+0x512/0x640 [ 1934.005139][ T6499] should_failslab+0xc2/0x120 [ 1934.005164][ T6499] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1934.005185][ T6499] ? __alloc_skb+0x2b2/0x380 [ 1934.005215][ T6499] __alloc_skb+0x2b2/0x380 [ 1934.005240][ T6499] ? __pfx___alloc_skb+0x10/0x10 [ 1934.005275][ T6499] hci_sock_sendmsg+0x1a6f/0x25f0 [ 1934.005306][ T6499] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1934.005338][ T6499] sock_write_iter+0x4ff/0x5b0 [ 1934.005359][ T6499] ? __pfx_sock_write_iter+0x10/0x10 [ 1934.005390][ T6499] ? bpf_lsm_file_permission+0x9/0x10 [ 1934.005415][ T6499] ? security_file_permission+0x71/0x210 [ 1934.005436][ T6499] ? rw_verify_area+0xcf/0x6c0 [ 1934.005457][ T6499] vfs_write+0x6c4/0x1150 [ 1934.005478][ T6499] ? __pfx_sock_write_iter+0x10/0x10 [ 1934.005500][ T6499] ? __pfx_vfs_write+0x10/0x10 [ 1934.005518][ T6499] ? find_held_lock+0x2b/0x80 [ 1934.005554][ T6499] ksys_write+0x1f8/0x250 [ 1934.005573][ T6499] ? __pfx_ksys_write+0x10/0x10 [ 1934.005596][ T6499] ? rcu_is_watching+0x12/0xc0 [ 1934.005618][ T6499] __do_fast_syscall_32+0x7c/0x3a0 [ 1934.005636][ T6499] do_fast_syscall_32+0x32/0x80 [ 1934.005654][ T6499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1934.005676][ T6499] RIP: 0023:0xf711e579 [ 1934.005690][ T6499] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1934.005708][ T6499] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1934.005725][ T6499] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 1934.005737][ T6499] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 1934.005747][ T6499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1934.005758][ T6499] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1934.005790][ T6499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1934.005815][ T6499] [ 1934.005862][ T6499] Bluetooth: MGMT ver 1.23 [ 1934.117743][ C2] hpet: Lost 1 RTC interrupts [ 1934.216376][ C2] hpet: Lost 5 RTC interrupts [ 1934.540642][ T6511] netlink: 4388 bytes leftover after parsing attributes in process `syz.7.9158'. [ 1934.592605][ C2] hpet: Lost 1 RTC interrupts [ 1934.662484][ C2] hpet: Lost 1 RTC interrupts [ 1934.729259][ C2] hpet: Lost 1 RTC interrupts [ 1934.898308][ T40] audit: type=1326 audit(2000001702.292:16186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.8.9159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 1934.907580][ T40] audit: type=1326 audit(2000001702.292:16187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.8.9159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 1934.955830][ T40] audit: type=1326 audit(2000001702.352:16188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.8.9159" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 1934.990210][ T40] audit: type=1326 audit(2000001702.372:16189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.8.9159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 1935.493002][ T6530] netlink: 'syz.7.9163': attribute type 2 has an invalid length. [ 1935.786624][ T6536] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9165'. [ 1935.967170][ T6539] evm: overlay not supported [ 1935.982038][T21142] usb 9-1: new full-speed USB device number 97 using dummy_hcd [ 1936.143666][T21142] usb 9-1: not running at top speed; connect to a high speed hub [ 1936.148656][T21142] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1936.167626][T21142] usb 9-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 1936.181718][T21142] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.188612][T21142] usb 9-1: Product: syz [ 1936.195089][T21142] usb 9-1: Manufacturer: syz [ 1936.203055][T21142] usb 9-1: SerialNumber: syz [ 1936.217556][ T6537] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1936.555139][ T6537] bridge0: port 1(syz_tun) entered blocking state [ 1936.570620][ T6537] bridge0: port 1(syz_tun) entered disabled state [ 1936.574236][ T6537] syz_tun: entered allmulticast mode [ 1936.580078][ T6537] syz_tun: entered promiscuous mode [ 1936.664844][T21142] usbhid 9-1:1.0: can't add hid device: -71 [ 1936.667534][T21142] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1936.673723][T21142] usb 9-1: USB disconnect, device number 97 [ 1939.305313][ C2] hpet_rtc_timer_reinit: 25 callbacks suppressed [ 1939.305333][ C2] hpet: Lost 2 RTC interrupts [ 1939.338876][ C2] hpet: Lost 1 RTC interrupts [ 1939.572963][ C2] hpet: Lost 1 RTC interrupts [ 1939.900382][ C2] hpet: Lost 1 RTC interrupts [ 1940.036981][ C2] hpet: Lost 1 RTC interrupts [ 1940.065215][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9184'. [ 1940.091402][ T6592] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9184'. [ 1940.244972][ T6596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1940.287199][T13139] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 1940.387091][ C2] hpet: Lost 1 RTC interrupts [ 1940.462372][T13139] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1940.471626][T13139] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1940.479163][T13139] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1940.485764][T13139] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1940.496103][T13139] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1940.503787][T13139] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.513822][T13139] usb 13-1: config 0 descriptor?? [ 1940.547030][ T6590] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1940.588018][ T480] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1940.682904][ T6600] random: crng reseeded on system resumption [ 1940.755957][ T480] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1940.773885][ T480] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1940.780477][ T480] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1940.807199][ T480] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.822435][T13139] usbhid 13-1:0.0: can't add hid device: -71 [ 1940.825989][T13139] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 1940.860102][ T6608] FAULT_INJECTION: forcing a failure. [ 1940.860102][ T6608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1940.867595][ T6597] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1940.877559][T13139] usb 13-1: USB disconnect, device number 2 [ 1940.882474][ T6608] CPU: 1 UID: 0 PID: 6608 Comm: syz.8.9189 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1940.882501][ T6608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1940.882512][ T6608] Call Trace: [ 1940.882518][ T6608] [ 1940.882525][ T6608] dump_stack_lvl+0x16c/0x1f0 [ 1940.882553][ T6608] should_fail_ex+0x512/0x640 [ 1940.882574][ T6608] _copy_to_user+0x32/0xd0 [ 1940.882595][ T6608] simple_read_from_buffer+0xcb/0x170 [ 1940.882624][ T6608] proc_fail_nth_read+0x197/0x240 [ 1940.882644][ T6608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1940.882662][ T6608] ? rw_verify_area+0xcf/0x6c0 [ 1940.882678][ T6608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1940.882695][ T6608] vfs_read+0x1e4/0xc60 [ 1940.882718][ T6608] ? __pfx_vfs_read+0x10/0x10 [ 1940.882734][ T6608] ? find_held_lock+0x2b/0x80 [ 1940.882756][ T6608] ? __fget_files+0x20e/0x3c0 [ 1940.882780][ T6608] ksys_read+0x12a/0x250 [ 1940.882798][ T6608] ? __pfx_ksys_read+0x10/0x10 [ 1940.882818][ T6608] ? rcu_is_watching+0x12/0xc0 [ 1940.882838][ T6608] __do_fast_syscall_32+0x7c/0x3a0 [ 1940.882855][ T6608] do_fast_syscall_32+0x32/0x80 [ 1940.882871][ T6608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1940.882890][ T6608] RIP: 0023:0xf7fa1579 [ 1940.882904][ T6608] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1940.882919][ T6608] RSP: 002b:00000000f50c6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1940.882936][ T6608] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50c6620 [ 1940.882946][ T6608] RDX: 000000000000000f RSI: 00000000f7434ff4 RDI: 0000000000000000 [ 1940.882956][ T6608] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1940.882965][ T6608] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1940.882975][ T6608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1940.882997][ T6608] [ 1940.889634][ T480] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1940.947289][ C2] hpet: Lost 1 RTC interrupts [ 1940.985543][ T6611] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9188'. [ 1940.989509][ C2] hpet: Lost 1 RTC interrupts [ 1941.106152][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9188'. [ 1941.177248][ T2771] usb 7-1: USB disconnect, device number 123 [ 1941.256551][ C2] hpet: Lost 1 RTC interrupts [ 1941.269410][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1941.543610][ C0] vkms_vblank_simulate: vblank timer overrun [ 1941.555512][ T6623] netlink: 88 bytes leftover after parsing attributes in process `syz.7.9193'. [ 1941.561951][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9193'. [ 1941.650182][T21191] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1941.654071][ T6625] Invalid source name [ 1941.661724][T21191] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1941.669206][ T6625] UBIFS error (pid: 6625): cannot open "usrquota", error -22 [ 1941.688473][ T6625] netlink: 744 bytes leftover after parsing attributes in process `syz.4.9194'. [ 1941.688938][ T480] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1941.725830][ T6625] openvswitch: netlink: Key type 166 is out of range max 32 [ 1941.813900][ T6625] netlink: 'syz.4.9194': attribute type 29 has an invalid length. [ 1941.818283][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9194'. [ 1941.864152][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9195'. [ 1941.867098][ C2] hpet: Lost 1 RTC interrupts [ 1941.889966][ T6625] lo speed is unknown, defaulting to 1000 [ 1942.052764][ C0] vkms_vblank_simulate: vblank timer overrun [ 1942.059319][ T480] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1942.199453][ T480] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1942.332766][ C0] vkms_vblank_simulate: vblank timer overrun [ 1942.533990][ C0] vkms_vblank_simulate: vblank timer overrun [ 1942.589345][T21142] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 1942.759082][T21142] usb 13-1: Using ep0 maxpacket: 8 [ 1942.766086][T21142] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1942.771593][T21142] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1942.775898][T21142] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1942.785167][T21142] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1942.791365][T21142] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1942.795408][T21142] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.033954][T21142] usb 13-1: GET_CAPABILITIES returned 0 [ 1943.044451][T21142] usbtmc 13-1:16.0: can't read capabilities [ 1943.183895][ T6653] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9202'. [ 1943.259478][ T2771] usb 13-1: USB disconnect, device number 3 [ 1943.440056][T29940] Bluetooth: hci3: command tx timeout [ 1943.540488][ T6658] random: crng reseeded on system resumption [ 1943.818167][ T6660] comedi comedi2: comedi_config --init_data is deprecated [ 1943.870899][T31944] Bluetooth: hci0: command 0x0406 tx timeout [ 1943.881818][ C0] vkms_vblank_simulate: vblank timer overrun [ 1943.928842][ T6660] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1945.224899][ C2] hpet_rtc_timer_reinit: 4 callbacks suppressed [ 1945.224917][ C2] hpet: Lost 1 RTC interrupts [ 1945.380043][T21142] usb 13-1: new low-speed USB device number 4 using dummy_hcd [ 1945.462951][ T6694] i2c i2c-1: Invalid block write size 34 [ 1945.591390][ T6696] tipc: Enabled bearer , priority 0 [ 1945.595274][ T6696] syzkaller0: entered promiscuous mode [ 1945.600777][ T6696] syzkaller0: entered allmulticast mode [ 1945.610787][ C0] vkms_vblank_simulate: vblank timer overrun [ 1945.661200][T21142] usb 13-1: config 0 has no interfaces? [ 1945.679229][T21142] usb 13-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1945.707224][T21142] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.749282][ T6695] tipc: Resetting bearer [ 1945.960855][ T6695] tipc: Disabling bearer [ 1946.054650][T21142] usb 13-1: config 0 descriptor?? [ 1946.070264][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1946.158471][ T6705] binder: 6704:6705 ioctl 4018620d 0 returned -22 [ 1946.241900][ T6707] tipc: Enabled bearer , priority 0 [ 1946.246458][ T6707] syzkaller0: entered promiscuous mode [ 1946.250171][ T6707] syzkaller0: entered allmulticast mode [ 1946.267488][ T6687] __nla_validate_parse: 2 callbacks suppressed [ 1946.267508][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9213'. [ 1946.281381][ T2771] usb 13-1: USB disconnect, device number 4 [ 1946.546504][ T6710] tipc: Resetting bearer [ 1946.616947][ C2] hpet: Lost 3 RTC interrupts [ 1946.823100][ T6706] tipc: Resetting bearer [ 1947.000291][ T6706] tipc: Disabling bearer [ 1947.116250][ T6715] ------------[ cut here ]------------ [ 1947.119295][ T6715] WARNING: CPU: 0 PID: 6715 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1947.131544][ T6715] Modules linked in: [ 1947.135984][ T6715] CPU: 0 UID: 0 PID: 6715 Comm: syz.7.9222 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1947.145082][ T6715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1947.155259][ T6715] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1947.158707][ T6715] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 0f 50 7e 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 7a dd 7f 0e 00 75 0b c6 05 71 dd 7f 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 1947.166459][ T6715] RSP: 0018:ffffc90003c3f7d0 EFLAGS: 00010246 [ 1947.168827][ T6715] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1947.171822][ T6715] RDX: 0000000000000000 RSI: 000000000000001c RDI: 0000000000040d40 [ 1947.174836][ T6715] RBP: 000000000000001c R08: 0000000000000005 R09: 0000000000000009 [ 1947.178022][ T6715] R10: 000000000000001c R11: 0000000000000000 R12: 0000000000040d40 [ 1947.181834][ T6715] R13: 1ffff92000787f0f R14: ffffffff9ae61a64 R15: 000000000000001c [ 1947.193524][ C2] hpet: Lost 1 RTC interrupts [ 1947.199832][ T6715] FS: 0000000000000000(0000) GS:ffff8880974d3000(0063) knlGS:00000000f5076b40 [ 1947.207318][ T6715] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1947.214145][ T6715] CR2: 000000002c20bff8 CR3: 0000000079bea000 CR4: 0000000000352ef0 [ 1947.225115][ T6715] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 1947.234910][ T6715] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1947.246861][ T6715] Call Trace: [ 1947.248567][ T6715] [ 1947.250503][ T6715] ? __do_fast_syscall_32+0x7c/0x3a0 [ 1947.253639][ T6715] ? do_fast_syscall_32+0x32/0x80 [ 1947.256159][ T6715] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1947.259416][ T6715] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1947.262689][ T6715] ? kasan_quarantine_put+0x10a/0x240 [ 1947.264836][ T6715] ? lockdep_hardirqs_on+0x7c/0x110 [ 1947.266908][ T6715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1947.270063][ T6715] ? policy_nodemask+0xea/0x4e0 [ 1947.274288][ T6715] alloc_pages_mpol+0x1fb/0x550 [ 1947.278047][ T6715] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1947.283441][ T6715] ? v9fs_fid_get_acl+0x7a/0x120 [ 1947.288092][ T6715] ___kmalloc_large_node+0xed/0x160 [ 1947.291701][ T6715] ? v9fs_fid_get_acl+0x7a/0x120 [ 1947.294753][ T6715] __kmalloc_large_node_noprof+0x1c/0x70 [ 1947.298268][ T6715] __kmalloc_noprof.cold+0xc/0x61 [ 1947.301727][ T6715] ? __pfx_iget5_locked+0x10/0x10 [ 1947.305148][ T6715] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 1947.308681][ T6715] v9fs_fid_get_acl+0x7a/0x120 [ 1947.311596][ T6715] v9fs_get_acl+0x3f4/0x530 [ 1947.314108][ T6715] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 1947.318461][ T6715] v9fs_mount+0x4fd/0xa90 [ 1947.321433][ T6715] ? rcu_is_watching+0x12/0xc0 [ 1947.324794][ T6715] ? __pfx_v9fs_mount+0x10/0x10 [ 1947.328631][ T6715] ? apparmor_capable+0x114/0x1d0 [ 1947.331775][ T6715] ? __pfx_v9fs_mount+0x10/0x10 [ 1947.335178][ T6715] legacy_get_tree+0x109/0x220 [ 1947.337270][ T6715] vfs_get_tree+0x8b/0x340 [ 1947.339363][ T6715] path_mount+0x1482/0x1fd0 [ 1947.341298][ T6715] ? __pfx_path_mount+0x10/0x10 [ 1947.343492][ T6715] ? kmem_cache_free+0x2d1/0x4d0 [ 1947.345834][ T6715] ? putname+0x154/0x1a0 [ 1947.347627][ T6715] ? getname_flags.part.0+0x1c5/0x550 [ 1947.351324][ T6715] ? __ia32_sys_mount+0x28b/0x310 [ 1947.353635][ T6715] __ia32_sys_mount+0x28b/0x310 [ 1947.355656][ T6715] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1947.358031][ T6715] ? rcu_is_watching+0x12/0xc0 [ 1947.360126][ T6715] __do_fast_syscall_32+0x7c/0x3a0 [ 1947.362465][ T6715] do_fast_syscall_32+0x32/0x80 [ 1947.364783][ T6715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1947.367687][ T6715] RIP: 0023:0xf7f51579 [ 1947.369756][ T6715] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1947.384386][ T6715] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 1947.393854][ T6715] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 1947.400796][ T6715] RDX: 0000000080000b80 RSI: 0000000000000000 RDI: 0000000080000180 [ 1947.407858][ T6715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1947.412703][ C2] hpet: Lost 1 RTC interrupts [ 1947.419300][ T6715] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1947.424916][ T6715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1947.428642][ T6715] [ 1947.430255][ T6715] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1947.433568][ T6715] CPU: 0 UID: 0 PID: 6715 Comm: syz.7.9222 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 1947.438605][ T6715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1947.443209][ T6715] Call Trace: [ 1947.457370][ T6715] [ 1947.468926][ T6715] dump_stack_lvl+0x3d/0x1f0 [ 1947.471038][ T6715] vpanic+0x6e8/0x7a0 [ 1947.472864][ T6715] ? __pfx_vpanic+0x10/0x10 [ 1947.474898][ T6715] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1947.478959][ T6715] panic+0xca/0xd0 [ 1947.480680][ T6715] ? __pfx_panic+0x10/0x10 [ 1947.482663][ T6715] check_panic_on_warn+0xab/0xb0 [ 1947.484865][ T6715] __warn+0xf6/0x3c0 [ 1947.486608][ T6715] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1947.509559][ T6715] report_bug+0x3c3/0x580 [ 1947.511585][ T6715] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1947.514311][ T6715] handle_bug+0x184/0x210 [ 1947.516286][ T6715] exc_invalid_op+0x17/0x50 [ 1947.553576][ T6715] asm_exc_invalid_op+0x1a/0x20 [ 1947.555715][ T6715] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1947.558716][ T6715] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 0f 50 7e 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 7a dd 7f 0e 00 75 0b c6 05 71 dd 7f 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 1947.578506][ T6715] RSP: 0018:ffffc90003c3f7d0 EFLAGS: 00010246 [ 1947.581196][ T6715] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1947.595877][ T6715] RDX: 0000000000000000 RSI: 000000000000001c RDI: 0000000000040d40 [ 1947.611355][ T6715] RBP: 000000000000001c R08: 0000000000000005 R09: 0000000000000009 [ 1947.614913][ T6715] R10: 000000000000001c R11: 0000000000000000 R12: 0000000000040d40 [ 1947.645970][ T6715] R13: 1ffff92000787f0f R14: ffffffff9ae61a64 R15: 000000000000001c [ 1947.649412][ T6715] ? __do_fast_syscall_32+0x7c/0x3a0 [ 1947.651424][ T6715] ? do_fast_syscall_32+0x32/0x80 [ 1947.653559][ T6715] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1947.656470][ T6715] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1947.674122][ T6715] ? kasan_quarantine_put+0x10a/0x240 [ 1947.676504][ T6715] ? lockdep_hardirqs_on+0x7c/0x110 [ 1947.678935][ T6715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1947.681550][ T6715] ? policy_nodemask+0xea/0x4e0 [ 1947.683711][ T6715] alloc_pages_mpol+0x1fb/0x550 [ 1947.685931][ T6715] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1947.702642][ T6715] ? v9fs_fid_get_acl+0x7a/0x120 [ 1947.704853][ T6715] ___kmalloc_large_node+0xed/0x160 [ 1947.707171][ T6715] ? v9fs_fid_get_acl+0x7a/0x120 [ 1947.721513][ T6715] __kmalloc_large_node_noprof+0x1c/0x70 [ 1947.723658][ T6715] __kmalloc_noprof.cold+0xc/0x61 [ 1947.725743][ T6715] ? __pfx_iget5_locked+0x10/0x10 [ 1947.727922][ T6715] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 1947.730383][ T6715] v9fs_fid_get_acl+0x7a/0x120 [ 1947.732199][ T6715] v9fs_get_acl+0x3f4/0x530 [ 1947.784208][ T6715] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 1947.786048][ T6715] v9fs_mount+0x4fd/0xa90 [ 1947.787799][ T6715] ? rcu_is_watching+0x12/0xc0 [ 1947.789791][ T6715] ? __pfx_v9fs_mount+0x10/0x10 [ 1947.791729][ T6715] ? apparmor_capable+0x114/0x1d0 [ 1947.803907][ T6715] ? __pfx_v9fs_mount+0x10/0x10 [ 1947.805944][ T6715] legacy_get_tree+0x109/0x220 [ 1947.807880][ T6715] vfs_get_tree+0x8b/0x340 [ 1947.809693][ T6715] path_mount+0x1482/0x1fd0 [ 1947.811503][ T6715] ? __pfx_path_mount+0x10/0x10 [ 1947.817141][ T6715] ? kmem_cache_free+0x2d1/0x4d0 [ 1947.824018][ T6715] ? putname+0x154/0x1a0 [ 1947.826026][ T6715] ? getname_flags.part.0+0x1c5/0x550 [ 1947.828520][ T6715] ? __ia32_sys_mount+0x28b/0x310 [ 1947.830863][ T6715] __ia32_sys_mount+0x28b/0x310 [ 1947.838193][ T6715] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1947.841770][ T6715] ? rcu_is_watching+0x12/0xc0 [ 1947.853217][ T6715] __do_fast_syscall_32+0x7c/0x3a0 [ 1947.856581][ T6715] do_fast_syscall_32+0x32/0x80 [ 1947.865506][ T6715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1947.869626][ T6715] RIP: 0023:0xf7f51579 [ 1947.873849][ T6715] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1947.883091][ T6715] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 1947.886595][ T6715] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 1947.903842][ T6715] RDX: 0000000080000b80 RSI: 0000000000000000 RDI: 0000000080000180 [ 1947.912429][ T6715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1947.915956][ T6715] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1947.926838][ T6715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1947.943410][ T6715] [ 1947.961702][ T6715] Kernel Offset: disabled [ 1947.964565][ T6715] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:06:01 Registers: info registers vcpu 0 CPU#0 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855fdb95 RDI=ffffffff9b0e9800 RBP=ffffffff9b0e97c0 RSP=ffffc90003c3f1d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000000a R14=ffffffff9b0e97c0 R15=ffffffff855fdb30 RIP=ffffffff855fdbbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974d3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002c20bff8 CR3=0000000079bea000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000005894d47 RBX=0000000000000001 RCX=ffffffff8b8ecbf9 RDX=0000000000000000 RSI=ffffffff8de44d9e RDI=ffffffff8c15ee00 RBP=ffffed1003bdd488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deea440 R14=ffffffff90ab0190 R15=0000000000000000 RIP=ffffffff8b8eb75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975d3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002c209ff8 CR3=0000000059f2c000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000004 RBX=0000000000000007 RCX=0000000000000000 RDX=ffff88801deec880 RSI=ffffffff815fff3c RDI=0000000000000007 RBP=ffffc90000538e30 RSP=ffffc90000538cd8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffc90000538e30 R13=0000000000000000 R14=000000000000000a R15=ffffffff87c9d930 RIP=ffffffff815fff42 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976d3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000240 CR3=000000005eea2000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffffff8b9174be RCX=1ffffffff35c8818 RDX=0000000000000000 RSI=ffffffff8c15ed80 RDI=ffffffff8b9174be RBP=0000000000000296 RSP=ffffc90003c8fab8 R8 =0000000000000000 R9 =fffffbfff2156032 R10=ffffffff90ab0197 R11=0000000000000000 R12=ffff888028740000 R13=ffffc90003c8fbd0 R14=ffffc90003c8fbd8 R15=ffff888023b94380 RIP=ffffffff81882236 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977d3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080003000 CR3=000000005eea2000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 80a0228d4fdcf5f5 e59e612ae84334a8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a1331755d4d5569 e3008d87142962b3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bdfd803cac79d18d 6b2ad435286c18b4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5cde9bbc8824d24b 864dd0481a67ccef ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000880 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 067617e089dc818a 0000049b0000049b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7847310e8cf49ff8 2db807030000049b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 798b6c6e0000049b 0000049b00000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8d9a129000800100 008001000000049b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 18a7ed602979a957 ce7bc607968fe954 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 54b7d982e51bbea0 e47b943702a463d5 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000