last executing test programs: 4m13.412208663s ago: executing program 2 (id=1826): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) r3 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) r4 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000002f00)={0x0, 0xffffffffffffffee, 0x0, 0x0, 0x62, 0x0, 0x0, 0x4, 0x0, &(0x7f0000002d80)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, 0x0) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x13}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r7) write$FUSE_POLL(r6, 0x0, 0x0) signalfd(r6, &(0x7f0000000000)={[0x0, 0x7]}, 0x8) 4m12.530516179s ago: executing program 2 (id=1835): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000a00)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(r0, &(0x7f0000000000)="869a4c86f1ec7d10ffd9e3c0d99b2d76134c76c5d2438ce756a4f4d2f569bfb3eada8e08d7e0d99d2c2bf3089e7f24bd31f4d290eb0f8835601fc2dbc11a2a1496511935ce32c11f3ff016ad7fb6f43fc7c820272a28b5cc13702f0659f08607438b0d86782bdd05be7149e762e005596b91217caa1fb6cd64b9c6e4137bea0bf8a413a064edcfc3de5d2b5af27c70221dceea08866b791afed8bed976ef414c0da3b01027ea5625f4b37e05e4740d8a0f1a8ea8244c5a1973e38fce603ba1ccb2c14f6d47d5ad3d6c6d96c25350205692da73be365c979f2d8448c839e60a4b02a921dc62829a2bb06e67eb65dfd34538b90dc3871714ef", 0xf8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@rand_addr=0xfffffffc, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, 0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x5, 0x4, 0x0, 0x20000, r1, 0xffffffff, '\x00', r6, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000a00)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) write(r0, &(0x7f0000000000)="869a4c86f1ec7d10ffd9e3c0d99b2d76134c76c5d2438ce756a4f4d2f569bfb3eada8e08d7e0d99d2c2bf3089e7f24bd31f4d290eb0f8835601fc2dbc11a2a1496511935ce32c11f3ff016ad7fb6f43fc7c820272a28b5cc13702f0659f08607438b0d86782bdd05be7149e762e005596b91217caa1fb6cd64b9c6e4137bea0bf8a413a064edcfc3de5d2b5af27c70221dceea08866b791afed8bed976ef414c0da3b01027ea5625f4b37e05e4740d8a0f1a8ea8244c5a1973e38fce603ba1ccb2c14f6d47d5ad3d6c6d96c25350205692da73be365c979f2d8448c839e60a4b02a921dc62829a2bb06e67eb65dfd34538b90dc3871714ef", 0xf8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) dup(r2) (async) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@rand_addr=0xfffffffc, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, 0xe8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x4) (async) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x5, 0x4, 0x0, 0x20000, r1, 0xffffffff, '\x00', r6, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) 4m12.45258857s ago: executing program 2 (id=1836): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$video4linux(&(0x7f0000000040), 0x401, 0x2000000) 4m12.282133553s ago: executing program 2 (id=1837): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000006c0)={0x400000000000, 0x8, 0xd90, 0xffffffffffffffff, 0x10002, 0x1, 0x0, 0x0, 0xe1}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1810c0, 0x0) fchown(r1, 0xee01, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xc0842) dup(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, &(0x7f00000000c0)=0xc) r7 = socket$qrtr(0x2a, 0x2, 0x0) iopl(0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01af18ffffffff00fcdbdf253b0000000800d4c0705a68d8438e70d3fa1e26835304ec9646feb15a4574ba6eef95", @ANYRES32=r10, @ANYBLOB="52003300500800000802110000010802110000005050505050500b0000000000000000003d00a92000060101010101010100060207002d1a08000b06000000000000000f000e000800000001000300000002000004008e00"], 0x74}, 0x1, 0x0, 0x0, 0xba4820d6e6815606}, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r7, 0x0, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000100)={@remote, @empty, r6}, 0xc) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 4m12.212125393s ago: executing program 2 (id=1839): set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x44}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_setup(0x1008, &(0x7f0000000180)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYRESDEC=r5, @ANYRESOCT=r1, @ANYBLOB="ee2bb825c027d29b8c89420c127b9177aec142f28b55d8c0eaa5249c1015f19335ba4843eddae496b317a4db7f01b6ace3cc5245252db6bfcd3ed83331eea4a07be2b3d58b21d2eba541aa85c213d06bf286a10f40125e6a951addddbae7f4a8307d7f97a1b08ffc49ce68966c421cbc2b274456a5fd0d3509e9c1dee9729fa96a2c254bfa5cd6feacf4891256dadfff14007e822a1abacb59dd99c8694156e39f83318d41ea925a856a2c17a5d340dc80a6344fd93a74df891d0e002a602e9d45a5ba8e90c9c07c124cab62c65d7b743cde791fcbcae09016648d70ba041be0c1edeba0c80bcf4d72ac4527f061f99fff9521067c56a757", @ANYRES32, @ANYRES64=r3], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') pread64(r6, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) setresuid(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x2209000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14b27e, 0x0) openat$zero(0xffffff9c, &(0x7f0000000240), 0x664d82, 0x0) r8 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r8, 0x7) inotify_init() write$cgroup_int(r7, &(0x7f0000000040)=0x1c8, 0x12) 4m11.819782816s ago: executing program 2 (id=1847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)="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", 0x12d) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xe) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 4m11.762259709s ago: executing program 32 (id=1847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)="908dc774517a2c36dc9b6be3e376dde88a94697c8719e779cc5a4911cc8d0d77abf5f3c6c999fd6f67bbf29695526ff6b119b1bb92df4d5509d5fc9da4e73d22094edcf9c429a8000954808bf3f4ca303876eac4b4dc9d2c3925bfc0a0900f2353e9daafb7991291b50c7a91690af5350b79fef0b531a5d52fd034aa6eb958bfe7b03df75bfe169894d9ada9c4ca7ff668d582f996b63b6d8d5a11cccfaed45d34debdfe86c773fb985806caa0cd524fbbca318ef663e548ffbfc330ec186c35f7f988ed1137c7d955b816f4a6248858ed3254f80ff069975111f801f7facd50b50446bdc5bf93b424689b44b8563725f038a20e888ff9072cb1ea4b3bcbc4342f826a1befee8c6bfb002595105e5513fd6b5378013ce73806186781d3f55bbb4033d3d23f93d1bdb8891a9399", 0x12d) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xe) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2m59.093820378s ago: executing program 3 (id=2423): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = syz_io_uring_setup(0x7e86, &(0x7f00000005c0)={0x0, 0x1ffffe, 0x2, 0xfffffffe, 0xfffffffe, 0x0, r2}, 0x0, &(0x7f00000001c0)) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_mr_cache\x00') r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefd91d3d9a9fd43dd92f491488a4ea7f50e285f6a54460d82bfed69629ca866d8c96bcf857faa0d6331c47570853a59d9c35eb50959f9f1a4694110057fb31b2735a0115e550c32a738277dac34c4f099d5baf5375003b36317e9c386e681a1aa460047b346ce5323723800283a3abb1414629000001634e02855543b4c7c64f3ef6f17ea7ff60600c5f19a620098fcac44ba30b9fa08000000d0f6f4d42ed06c8f61c900000000000000", 0xb3, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, &(0x7f00000004c0)=""/243, 0xf3, &(0x7f0000000400)={&(0x7f0000000380)={'crc32c\x00'}}) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0xffffffff, 0x0, 0xf}}, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYRESHEX=r4, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x94, &(0x7f0000000140)=""/148, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000910000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 2m58.221501801s ago: executing program 3 (id=2426): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="643c003a20ef11e47b0381fa162c13c1", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0001000000000000000002080000080001005900000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x1c, r4, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc323}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xf}]}, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x50, &(0x7f0000000280)=""/80, 0x40f00, 0x8, '\x00', r6, 0x25, r2, 0x8, &(0x7f0000000200)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x1, 0x4, 0xd, 0x9}], 0x10, 0xfffffffd, @void, @value}, 0x94) 2m58.221033931s ago: executing program 3 (id=2427): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x425e, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x1df, 0x0, r1}, &(0x7f0000000380)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_create(0x1, 0x80800) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'veth0_virt_wifi\x00', 0x800}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9}, 0x18) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r11 = socket$can_j1939(0x1d, 0x2, 0x7) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x20000000, 0x20000000, 0x20000000], 0x0, 0x0, 0x0}, 0x50) r14 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r14, 0xae60) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r15, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000ddb1000040"]) bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r7}, 0x18) 2m56.730350536s ago: executing program 3 (id=2435): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x3, 0xa, [{}, {0x5}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x7ff}], 0x1}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (fail_nth: 1) 2m55.339053091s ago: executing program 3 (id=2445): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioprio_get$pid(0x2, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket(0x31, 0x4, 0xffffffff) acct(&(0x7f00000001c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xd) unshare(0x62040200) 2m54.311149438s ago: executing program 3 (id=2452): syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/l2cap\x00') fchdir(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0xfffffeff) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x2, 0x1}, 0x0, 0x0) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x800000000000000}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r3, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000) socket(0x40000000015, 0x5, 0x0) 2m39.081155406s ago: executing program 33 (id=2452): syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/l2cap\x00') fchdir(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0xfffffeff) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x2, 0x1}, 0x0, 0x0) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x800000000000000}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r3, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000) socket(0x40000000015, 0x5, 0x0) 6.369185862s ago: executing program 5 (id=3564): syz_emit_vhci(0x0, 0x8) syz_io_uring_setup(0x110, &(0x7f00000005c0)={0x0, 0x2b7a, 0x2004, 0x0, 0x4}, 0x0, &(0x7f0000000800)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0xfffffffffffffeb8) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f00000004c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000240)=""/63, 0x3f}], 0x1, &(0x7f00000006c0)=""/62, 0x3e}, 0x1}, {{&(0x7f0000000740)=@in, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/230, 0xe6}], 0x1, &(0x7f0000000940)=""/98, 0x62}, 0x2}, {{&(0x7f00000009c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/20, 0x14}, {&(0x7f0000000a80)=""/192, 0xc0}, {&(0x7f0000000b40)=""/222, 0xde}], 0x3, &(0x7f0000000c80)=""/233, 0xe9}, 0x9}, {{&(0x7f0000000d80)=@alg, 0x80, &(0x7f0000002000)=[{&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/48, 0x30}, {&(0x7f0000001e40)=""/162, 0xa2}, {&(0x7f0000001f00)=""/66, 0x42}, {&(0x7f0000001f80)=""/67, 0x43}], 0x5, &(0x7f0000002040)=""/14, 0xe}, 0x7}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002080)=""/198, 0xc6}, {&(0x7f0000002180)=""/243, 0xf3}], 0x2, &(0x7f00000022c0)=""/104, 0x68}, 0x1}, {{&(0x7f0000002340)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003480)=[{&(0x7f00000023c0)=""/75, 0x4b}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/50, 0x32}], 0x3, &(0x7f00000034c0)=""/149, 0x95}, 0x7d}, {{&(0x7f0000003580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003600)=""/214, 0xd6}, {&(0x7f0000003700)=""/188, 0xbc}], 0x2, &(0x7f0000003800)=""/130, 0x82}, 0x80000000}, {{&(0x7f00000038c0)=@nl=@unspec, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003940)=""/111, 0x6f}], 0x1, &(0x7f0000003a00)=""/76, 0x4c}, 0xb7}, {{&(0x7f0000003a80)=@rc, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003b00)=""/8, 0x8}], 0x1, &(0x7f0000003b80)=""/19, 0x13}, 0x5}, {{&(0x7f0000003bc0)=@xdp, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003c40)=""/242, 0xf2}, {&(0x7f0000003d40)=""/107, 0x6b}, {&(0x7f0000003dc0)=""/24, 0x18}, {&(0x7f0000003e00)=""/65, 0x41}], 0x4, &(0x7f0000003ec0)=""/178, 0xb2}, 0x3}, {{&(0x7f0000003f80)=@qipcrtr, 0x80, &(0x7f00000040c0)=[{&(0x7f0000004000)=""/160, 0xa0}], 0x1, &(0x7f0000004100)=""/147, 0x93}, 0x4}], 0xb, 0x1a143, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x101000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000580)={0x2004}) r5 = geteuid() quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, r5, &(0x7f00000002c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) getpeername(r2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYRES8=r0], 0x48) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604030800000000000000000002003e"], 0x98) close(r7) execve(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00', r8}, 0x10) unshare(0x40000000) 5.978212305s ago: executing program 5 (id=3569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400a052a22f36f248a75d29e0e31cb280c400001000010000000000000000000000000a1426000000030a01010000000000a50002000000140000001100010000000000000000000000000af8fe0710ae078b29d0466cd4de12b546b01f9f4727a3839fdfc6ab3d46"], 0x3c}}, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f00000007c0)) r3 = openat$dir(0xffffff9c, &(0x7f0000000180)='./file0\x00', 0x20200, 0x120) mkdirat(r3, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75700434093d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r9 = openat$mixer(0xffffff9c, &(0x7f0000000780), 0x103001, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r9, 0xc4009420, &(0x7f0000001e00)={0x18, 0x4, {0x80, @struct={0x10, 0xb6e}, 0x0, 0x3, 0x9, 0x6, 0x7, 0x7fffffff, 0xe, @usage=0x5, 0x9, 0xfff, [0x8, 0x1, 0x9, 0x4, 0x2, 0x1]}, {0x2, @struct={0x79, 0x3fd}, 0x0, 0x3, 0x2, 0x6, 0x1, 0x930, 0xc, @usage=0x3, 0xffffffff, 0x3, [0x8000000000000001, 0xfffffffffffffff8, 0x9, 0xfffffffffffffff7, 0x7ff, 0x2c9ff072]}, {0x401, @usage=0x1, 0x0, 0xffff, 0x0, 0x5, 0x8, 0xff, 0x0, @usage=0xfff, 0x101, 0x5, [0x5, 0xfffffffffffffff7, 0x5, 0x6, 0xadfd]}, {0x100000000, 0xbe96, 0x6}}) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="2c006d4a1f6eab4ebbc099e2fdc8575b43041c3a04d497b3845b8b133aafaea71cc33c507c0e88574e40171210406e050bc9a154924bcb1f8e7334aa3d7931e45eee3fdd31d9eda8f177723e19236df247459e4400703aad568a8ff05d39fb32a4add17fb73bee0f294aa555966fe2f2fc769150f273202f173b410c80908aaeec4ed9aa6380fec478df8ffc22b1a4787a1e87004e74589b2d17819ee1b3c4349046fed1a19b08f52fc08ca5346daa54ce43fef26f0c57b414fe43cc9ca15d2089a01b"]) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) syz_fuse_handle_req(r4, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="b00000000000000000000000000000000800000000000000000000000000000066"], 0x0, 0x0, 0x0, 0x0}) r11 = socket(0x2, 0x6, 0x0) setsockopt(r11, 0x0, 0x5, &(0x7f0000000180)="b1f5d915", 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r11], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x24002800) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000030307010000000000000000000007000c000200fffffffb000000020800034000000006"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.08014764s ago: executing program 5 (id=3574): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b8680300021093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9463cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de0000", 0xf5) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000086d044fc200000400000109022400010000"], 0x0) syz_usb_control_io(r3, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000070000000500164272"], 0x0, 0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES16=r6, @ANYBLOB, @ANYRESHEX=r3], 0x20}, 0x1, 0x0, 0x0, 0x811}, 0x8000) listen(r4, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x644c0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r8, @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xb5971809a1ae7e65, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlink(&(0x7f0000000000)='./file1\x00') listen(r1, 0x9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 3.775324105s ago: executing program 0 (id=3583): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) r1 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) r2 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000002f00)={0x0, 0xffffffffffffffee, 0x0, 0x0, 0x62, 0x0, 0x0, 0x4, 0x0, &(0x7f0000002d80)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc01c7c02, 0x0) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x13}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r5) write$FUSE_POLL(r4, 0x0, 0x0) signalfd(r4, &(0x7f0000000000)={[0x0, 0x7]}, 0x8) 3.015569459s ago: executing program 0 (id=3592): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000012c0)=[{0x0, 0x0, 0x80000000}], 0x160000) syz_usb_disconnect(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000010000040"]) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xf4e}, @void, @val={0xc, 0x99, {0x5, 0x2}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000054}, 0x8040) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='fd/4\x00') 2.952247976s ago: executing program 1 (id=3585): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r0, 0xb03}, 0x14}}, 0x0) 2.88031314s ago: executing program 1 (id=3586): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0d03000000000000000013"], 0x38}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="03000000", @ANYRES16=r11, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r12], 0x30}}, 0x0) 2.018135986s ago: executing program 5 (id=3588): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xb0, 0x0, &(0x7f0000000740)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000900)={@ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/203, 0xcb, 0x2, 0x15}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000840)=""/192, 0xc0, 0x1, 0x39}}, &(0x7f0000000500)={0x0, 0x28, 0x40}}, 0x40}, @decrefs={0x40046307, 0x2}, @clear_death={0x400c630f, 0x2}, @register_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@fda={0x66646185, 0x1, 0x0, 0x20}, @fda={0x66646185, 0x6, 0x0, 0x2d}, @fda={0x66646185, 0x8, 0x2, 0x12}}, &(0x7f0000000800)={0x0, 0x1c, 0x38}}}], 0x0, 0x0, 0x0}) 2.017738789s ago: executing program 1 (id=3589): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) (fail_nth: 11) 1.95633662s ago: executing program 5 (id=3590): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x232) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000850000002a00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='neigh_update\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0x40045017, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r2 = syz_open_dev$usbmon(0x0, 0x81, 0x101000) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x9204, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f0000000200)='V', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) write$char_usb(r5, &(0x7f0000000200)='V', 0x1) write$char_usb(r3, 0x0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r7, 0x101, 0xa, &(0x7f0000000100)=0xffffffff, 0x4) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) 1.890432422s ago: executing program 0 (id=3591): bpf$MAP_CREATE(0x18000000, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.890114979s ago: executing program 0 (id=3593): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200), &(0x7f0000000040)=0x24) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) pipe2(&(0x7f0000000040), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0xfefffffe, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x19203}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xffffffffffffff0b, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_VLAN_FILTERING={0x0, 0x7, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_mr_cache\x00') r8 = socket(0x2b, 0x80801, 0x1) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) r9 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e909", 0xa8, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r10, r11}, &(0x7f0000000140)=""/243, 0xf3, &(0x7f0000000400)={&(0x7f0000000380)={'crc32c\x00'}}) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x3, 0x400}, 0x0, &(0x7f0000000440)={0x4, 0x0, 0x10001, 0x1, 0x101, 0x0, 0x1, 0xfffffffffffffffd}, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0xffffffff, 0x0, 0xf}}, 0x0, 0x0}}) r12 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r12, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 1.817976962s ago: executing program 1 (id=3594): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) socket$inet(0x2, 0x6, 0x100) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) writev(r5, &(0x7f0000000680)=[{&(0x7f0000000280)="75da", 0x4000}], 0x1) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000002c0), 0x2200800, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd70ce0c00000000000000070009000200000008000c00a80a000008000b000200000006000100070000000500120022000000b1334c59ec14f249dcfc023fec25bbaa8aeb049108dbd1f5960c7c47ea781d8fb4"], 0x3c}}, 0x20) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2040, 0x0) (fail_nth: 6) 1.558691619s ago: executing program 4 (id=3595): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) clock_gettime(0x0, &(0x7f0000001600)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001580)=[{{&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f00000001c0)=""/99, 0x63}, {&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/221, 0xdd}], 0x6, &(0x7f0000000740)=""/137, 0x89}, 0x1}, {{&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/222, 0xde}, {&(0x7f0000000980)=""/207, 0xcf}, {&(0x7f0000000a80)=""/178, 0xb2}, {&(0x7f0000000b40)=""/56, 0x38}], 0x4, &(0x7f0000000bc0)=""/40, 0x28}, 0x7}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000c00)=""/116, 0x74}, {&(0x7f0000000c80)=""/137, 0x89}, {&(0x7f0000000d40)=""/40, 0x28}, {&(0x7f0000000d80)=""/205, 0xcd}, {&(0x7f0000000e80)=""/30, 0x1e}, {&(0x7f0000000f80)=""/166, 0xa6}, {&(0x7f0000001040)=""/220, 0xdc}, {&(0x7f0000000ec0)=""/84, 0x54}, {&(0x7f0000001140)=""/83, 0x53}], 0x9, &(0x7f0000001240)=""/137, 0x89}, 0x7fffffff}, {{&(0x7f0000001300)=@hci, 0x80, &(0x7f0000001440)=[{&(0x7f0000001380)=""/165, 0xa5}], 0x1, &(0x7f0000001480)=""/209, 0xd1}, 0x80}], 0x4, 0x61, &(0x7f0000001640)={r2, r3+60000000}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000915a01001800128008000100677470000c00028008000300bba8003f"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) epoll_create1(0x0) unshare(0x2040400) pselect6(0x40, &(0x7f0000000000)={0x3c}, 0x0, 0x0, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x5, "23fed3c84fb8b58b8988a71d99485e9355328f7107e5244ad6c5336c64f72dff", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000080)={"48ed0ac3700ffc2225e2a1e99cbe609380dcc8beb2842485ead87d019af05093", r7}) 1.546814926s ago: executing program 4 (id=3596): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r3, 0x29, 0x1f, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0xc040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000300000008000840000004000700050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000001c0)={0x0, 0x9e, &(0x7f0000000180)={&(0x7f0000000000)={0x20, r9, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x188, r5, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ec745e74297cc63c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cd2fabd6db3b33"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0e9388396a9953f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ac731caf960284cce0706d18150ff159"}]}, @NL80211_ATTR_REKEY_DATA={0xc8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c9bb49daf5dd116e4d0da2ae70bd50842b8da21caff740d5752e5a3eff92d0de"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c22fd1174a6f7bd1e1543311ae66b6ab49c30c2f1406d1d5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="66b74b7454975e42c6e0a941d24ed7fb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "51b7f6cbd7864191"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4897103094bc6a688c6dc23b0907c2c96a511c3937d1065ce31e2fbf4b9adebf"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="57e43b5b7dbe69c9db277d1a01d45b4b3d55f8a115398453"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a47b5af25b47f7a6"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3a6cdde397d52ef0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="91182cc994f4582894014a76167d473c"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3791567cb38dd9d1a0ed3974df2ffc18"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4458e8c7a1f694e44060365599c48b11824a6bdde35cee88"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cb44efb81e4b96cb"}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1, @ANYBLOB="010000000000000075bd17b3b0a210525d6aa843e26b52932e779d6d4e765263e91a15779e67952f38631a1c85f8c5b6062ffc6ac292680b5cdc56d2be132da883c70e8095825cef3aa2fa24e7ec36661a43c8d4b35cf12fdd799c3c7994b9a97adbde4cdda39a981f88"], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.45541556s ago: executing program 4 (id=3597): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x4b4b, &(0x7f0000000000)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000140000000000000005000100070000000900020073797a30000000000c0007800800124000000000050005000a000000050004000000000012000300686173683a6e65742c706f727400"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a30"], 0x5c}}, 0x0) write$binfmt_register(r3, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) io_setup(0x6, &(0x7f0000001380)) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') 1.340340036s ago: executing program 1 (id=3598): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) vmsplice(r3, &(0x7f00000000c0), 0x0, 0xf) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x5}, 0x80, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x11000000}, 0x0) mount$binder(0x3e, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) sched_setaffinity(r7, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r6, r8, 0x0, 0x100800001) mount$binder(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="6d61783d30303030303030303030323030303030303030332c73746174733d676c6f73b8000000000000733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c736d61636b6673726f6f743d2f70726f632f706172746974696f6e73002c726f6f74636f6e746578743d726f6f742c726f6f74636f6e746578743d73746166665f752c7063723d30303030303030303030303030303030303033382c7375626a5f726f6c653d2c646f6e745f6d6561737572652c646f6e745f6d6561737572652c00"]) pipe2$watch_queue(&(0x7f0000000000), 0x80) r9 = syz_open_dev$vim2m(&(0x7f0000000200), 0xfffffffa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000240)=0x1) 999.037788ms ago: executing program 0 (id=3599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0d03000000000000000013"], 0x38}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="03000000", @ANYRES16=r11, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r12], 0x30}}, 0x0) 379.982793ms ago: executing program 1 (id=3600): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_CAPBSET_READ(0x17, 0x80000001) timerfd_create(0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[], 0xfe3c) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f00000010c0)=@v2={0x3, 0x2, 0xa, 0x3, 0x3b, "704da2ac089f0ce73790b08c9707c1b219439a70769a35934dd065c3e85f4dc0b26b0e9a22c94674d488b06a6aa6894ff91e0bc0233ce1d255cf8b"}, 0x44, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000e40)='./file0\x00') r6 = openat$binfmt(0xffffff9c, r5, 0x41, 0x1ff) write$binfmt_script(r6, 0x0, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000001140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file2\x00'}) 263.967569ms ago: executing program 5 (id=3601): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x202) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@dev, @in=@initdev}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe4) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000400)="66e000b8010000000f01c1b94c0300000f32b9be0200000f32b9800000c00f3235000400000f307373baf80cb8185c2989b8dd6a00000f23c80f21f8350c0000000f23f86619820c252566baf80cb89fa7d981ef66bafc0cec0f01c566ba4200b00dee0f01cb", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1, 0x9, 0x6, 0xae, 0x1000, 0xfab9, 0x1000}]}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r0}) 252.36696ms ago: executing program 4 (id=3602): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590288ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0xfe0e}], 0x1) r1 = io_uring_setup(0x2a2c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c00000400000014000180066e"], 0x2c}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) r5 = dup3(r4, r3, 0x0) read$rfkill(r5, &(0x7f00000002c0), 0x2) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_map={0xb1, 0x347, 0x215e, 0x9, 0x7, 0x4}}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r8, &(0x7f0000000280)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) connect$rose(r8, &(0x7f0000000300)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null]}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 60.229207ms ago: executing program 0 (id=3603): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x13}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_INIT(r2, &(0x7f0000000e80)={0x50}, 0x50) (fail_nth: 3) write$FUSE_POLL(r2, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 257.983µs ago: executing program 4 (id=3604): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x400}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 0s ago: executing program 4 (id=3605): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r3, 0x29, 0x1f, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0xc040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000300000008000840000004000700050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000001c0)={0x0, 0x9e, &(0x7f0000000180)={&(0x7f0000000000)={0x20, r9, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x188, r5, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ec745e74297cc63c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cd2fabd6db3b33"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0e9388396a9953f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ac731caf960284cce0706d18150ff159"}]}, @NL80211_ATTR_REKEY_DATA={0xc8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c9bb49daf5dd116e4d0da2ae70bd50842b8da21caff740d5752e5a3eff92d0de"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c22fd1174a6f7bd1e1543311ae66b6ab49c30c2f1406d1d5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="66b74b7454975e42c6e0a941d24ed7fb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "51b7f6cbd7864191"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4897103094bc6a688c6dc23b0907c2c96a511c3937d1065ce31e2fbf4b9adebf"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="57e43b5b7dbe69c9db277d1a01d45b4b3d55f8a115398453"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a47b5af25b47f7a6"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3a6cdde397d52ef0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="91182cc994f4582894014a76167d473c"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3791567cb38dd9d1a0ed3974df2ffc18"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4458e8c7a1f694e44060365599c48b11824a6bdde35cee88"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cb44efb81e4b96cb"}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1, @ANYBLOB="010000000000000075bd17b3b0a210525d6aa843e26b52932e779d6d4e765263e91a15779e67952f38631a1c85f8c5b6062ffc6ac292680b5cdc56d2be132da883c70e8095825cef3aa2fa24e7ec36661a43c8d4b35cf12fdd799c3c7994b9a97adbde4cdda39a981f88"], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) kernel console output (not intermixed with test programs): 00 [ 539.865660][T17496] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 539.867693][T17496] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 539.869744][T17496] [ 539.870605][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.911769][T17493] : renamed from bond0 (while UP) [ 540.197452][T17504] tipc: Enabling of bearer rejected, already enabled [ 540.438214][T17509] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 540.470818][T17512] FAULT_INJECTION: forcing a failure. [ 540.470818][T17512] name failslab, interval 1, probability 0, space 0, times 0 [ 540.474404][T17512] CPU: 3 UID: 0 PID: 17512 Comm: syz.0.3094 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 540.477156][T17512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 540.479951][T17512] Call Trace: [ 540.480873][T17512] [ 540.481651][T17512] dump_stack_lvl+0x16c/0x1f0 [ 540.482893][T17512] should_fail_ex+0x497/0x5b0 [ 540.484131][T17512] ? find_held_lock+0x2d/0x110 [ 540.485434][T17512] should_failslab+0xc2/0x120 [ 540.486809][T17512] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 540.488325][T17512] ? dst_alloc+0x99/0x1a0 [ 540.489485][T17512] dst_alloc+0x99/0x1a0 [ 540.490653][T17512] rt_dst_alloc+0x35/0x3a0 [ 540.491838][T17512] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 540.493398][T17512] ip_route_output_key_hash+0x138/0x2e0 [ 540.494879][T17512] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 540.496468][T17512] ? __call_rcu_common.constprop.0+0x36e/0x7a0 [ 540.498152][T17512] ? lockdep_hardirqs_on+0x7c/0x110 [ 540.499528][T17512] ip_route_output_flow+0x27/0x150 [ 540.500894][T17512] tcp_v4_connect+0x85b/0x1b80 [ 540.502151][T17512] ? __pfx_tcp_v4_connect+0x10/0x10 [ 540.503507][T17512] ? __local_bh_enable_ip+0xa4/0x120 [ 540.504927][T17512] mptcp_connect+0x66b/0xee0 [ 540.506183][T17512] __inet_stream_connect+0x3c7/0x1020 [ 540.507586][T17512] ? find_held_lock+0x2d/0x110 [ 540.508956][T17512] ? __pfx___inet_stream_connect+0x10/0x10 [ 540.510907][T17512] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 540.512792][T17512] ? __pfx_inet_stream_connect+0x10/0x10 [ 540.514666][T17512] ? mark_held_locks+0x9f/0xe0 [ 540.515936][T17512] ? __local_bh_enable_ip+0xa4/0x120 [ 540.517306][T17512] ? __pfx_inet_stream_connect+0x10/0x10 [ 540.518781][T17512] inet_stream_connect+0x57/0xa0 [ 540.520101][T17512] __sys_connect_file+0x13e/0x1a0 [ 540.521458][T17512] __sys_connect+0x14f/0x170 [ 540.522662][T17512] ? __pfx___sys_connect+0x10/0x10 [ 540.524002][T17512] ? __pfx_ksys_write+0x10/0x10 [ 540.525268][T17512] __ia32_sys_connect+0x71/0xb0 [ 540.526543][T17512] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 540.528260][T17512] __do_fast_syscall_32+0x73/0x120 [ 540.529612][T17512] do_fast_syscall_32+0x32/0x80 [ 540.530909][T17512] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.532559][T17512] RIP: 0023:0xf7f94579 [ 540.533638][T17512] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 540.539042][T17512] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 540.541259][T17512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 540.543337][T17512] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.545418][T17512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.547531][T17512] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 540.549629][T17512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.551706][T17512] [ 541.531162][T17531] syz.0.3100 (17531): drop_caches: 2 [ 541.628781][T17539] tipc: Enabling of bearer rejected, already enabled [ 541.644832][T17546] __nla_validate_parse: 4 callbacks suppressed [ 541.644843][T17546] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3105'. [ 541.880424][T17554] FAULT_INJECTION: forcing a failure. [ 541.880424][T17554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.883933][T17554] CPU: 2 UID: 0 PID: 17554 Comm: syz.1.3107 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 541.886689][T17554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 541.889454][T17554] Call Trace: [ 541.890297][T17554] [ 541.891047][T17554] dump_stack_lvl+0x16c/0x1f0 [ 541.892204][T17554] should_fail_ex+0x497/0x5b0 [ 541.893397][T17554] _copy_from_iter+0x29b/0x1400 [ 541.894622][T17554] ? trace_lock_acquire+0x14e/0x1f0 [ 541.895952][T17554] ? __alloc_skb+0x200/0x380 [ 541.897153][T17554] ? __pfx__copy_from_iter+0x10/0x10 [ 541.898528][T17554] ? __virt_addr_valid+0x1a4/0x590 [ 541.899879][T17554] ? __virt_addr_valid+0x5e/0x590 [ 541.901188][T17554] ? __phys_addr_symbol+0x30/0x80 [ 541.902492][T17554] ? __check_object_size+0x488/0x710 [ 541.903870][T17554] netlink_sendmsg+0x813/0xd70 [ 541.905113][T17554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.906498][T17554] ____sys_sendmsg+0x9ae/0xb40 [ 541.907743][T17554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.909136][T17554] ? get_compat_msghdr+0x11b/0x170 [ 541.910467][T17554] ___sys_sendmsg+0x135/0x1e0 [ 541.911689][T17554] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.913041][T17554] ? __pfx_lock_release+0x10/0x10 [ 541.914350][T17554] ? trace_lock_acquire+0x14e/0x1f0 [ 541.915780][T17554] ? __fget_files+0x206/0x3a0 [ 541.917037][T17554] __sys_sendmsg+0x16e/0x220 [ 541.918251][T17554] ? __pfx___sys_sendmsg+0x10/0x10 [ 541.919593][T17554] __do_fast_syscall_32+0x73/0x120 [ 541.920941][T17554] do_fast_syscall_32+0x32/0x80 [ 541.922216][T17554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 541.923877][T17554] RIP: 0023:0xf7f65579 [ 541.924946][T17554] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 541.929933][T17554] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 541.932076][T17554] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000380 [ 541.934110][T17554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 541.936151][T17554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.938194][T17554] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 541.940249][T17554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.942293][T17554] [ 541.974200][T17556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3108'. [ 542.412964][ C1] net_ratelimit: 19 callbacks suppressed [ 542.412984][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 542.474734][T17562] netlink: 1068 bytes leftover after parsing attributes in process `syz.4.3110'. [ 542.499416][T16361] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 542.499434][T16361] Bluetooth: hci2: Malformed Event: 0x2f [ 542.555541][T17573] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3114'. [ 542.642945][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 542.802968][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 542.812943][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 542.812977][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 542.996644][T17574] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3109'. [ 543.008917][T17584] : renamed from bond0 (while UP) [ 543.042960][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 543.452995][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 543.535156][T17588] : renamed from bond0 (while UP) [ 543.585786][T17597] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.3120'. [ 543.617790][T17600] FAULT_INJECTION: forcing a failure. [ 543.617790][T17600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.621214][T17600] CPU: 2 UID: 0 PID: 17600 Comm: syz.4.3121 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 543.623991][T17600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 543.626652][T17600] Call Trace: [ 543.627512][T17600] [ 543.628271][T17600] dump_stack_lvl+0x16c/0x1f0 [ 543.629458][T17600] should_fail_ex+0x497/0x5b0 [ 543.630663][T17600] _copy_from_user+0x2e/0xd0 [ 543.631838][T17600] br_dev_read_uargs+0x22f/0x3b0 [ 543.633054][T17600] ? __pfx_br_dev_read_uargs+0x10/0x10 [ 543.634509][T17600] br_ioctl_stub+0x112/0x8b0 [ 543.635687][T17600] ? __pfx_br_ioctl_stub+0x10/0x10 [ 543.636999][T17600] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 543.638456][T17600] ? __pfx_br_ioctl_stub+0x10/0x10 [ 543.639747][T17600] br_ioctl_call+0x62/0xb0 [ 543.640882][T17600] sock_ioctl+0x36a/0x6c0 [ 543.641987][T17600] ? __pfx_sock_ioctl+0x10/0x10 [ 543.643185][T17600] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 543.644433][T17600] compat_sock_ioctl+0x505/0x7e0 [ 543.645644][T17600] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 543.647037][T17600] ? __fget_files+0x206/0x3a0 [ 543.648243][T17600] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 543.649647][T17600] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 543.650969][T17600] __do_fast_syscall_32+0x73/0x120 [ 543.652253][T17600] do_fast_syscall_32+0x32/0x80 [ 543.653466][T17600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 543.655052][T17600] RIP: 0023:0xf7f87579 [ 543.656098][T17600] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 543.660860][T17600] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 543.662940][T17600] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008940 [ 543.664930][T17600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.666923][T17600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 543.668852][T17600] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 543.670720][T17600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 543.672667][T17600] [ 543.692963][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 543.842985][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 543.843491][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 543.947530][T17612] FAULT_INJECTION: forcing a failure. [ 543.947530][T17612] name failslab, interval 1, probability 0, space 0, times 0 [ 543.948554][T17610] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3124'. [ 543.951960][T17612] CPU: 1 UID: 0 PID: 17612 Comm: syz.1.3125 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 543.956365][T17612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 543.959114][T17612] Call Trace: [ 543.960001][T17612] [ 543.960784][T17612] dump_stack_lvl+0x16c/0x1f0 [ 543.962012][T17612] should_fail_ex+0x497/0x5b0 [ 543.963249][T17612] should_failslab+0xc2/0x120 [ 543.964497][T17612] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 543.965933][T17612] ? skb_clone+0x190/0x3f0 [ 543.967111][T17612] skb_clone+0x190/0x3f0 [ 543.968234][T17612] netlink_deliver_tap+0xafd/0xca0 [ 543.969589][T17612] netlink_dump+0xb60/0xd00 [ 543.970790][T17612] ? __pfx_netlink_dump+0x10/0x10 [ 543.972109][T17612] ? __netlink_dump_start+0x154/0x980 [ 543.973510][T17612] ? lock_acquire+0x2f/0xb0 [ 543.974700][T17612] ? netlink_lookup+0x3d/0x270 [ 543.975961][T17612] __netlink_dump_start+0x6d9/0x980 [ 543.977315][T17612] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 543.978831][T17612] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 543.980294][T17612] nf_tables_getrule+0x249/0x2a0 [ 543.981584][T17612] ? __pfx_nf_tables_getrule+0x10/0x10 [ 543.982994][T17612] ? __pfx_nf_tables_dump_rules_start+0x10/0x10 [ 543.984618][T17612] ? __pfx_nf_tables_dump_rules+0x10/0x10 [ 543.986136][T17612] ? __pfx_nf_tables_dump_rules_done+0x10/0x10 [ 543.987746][T17612] ? __nla_parse+0x40/0x60 [ 543.988926][T17612] ? __pfx_nf_tables_getrule+0x10/0x10 [ 543.990339][T17612] nfnetlink_rcv_msg+0x560/0x11e0 [ 543.991669][T17612] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 543.993106][T17612] ? find_held_lock+0x2d/0x110 [ 543.994374][T17612] netlink_rcv_skb+0x165/0x410 [ 543.995628][T17612] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 543.997052][T17612] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 543.998433][T17612] ? __pfx_aa_get_newest_label+0x10/0x10 [ 543.999900][T17612] ? bpf_lsm_capable+0x9/0x10 [ 544.001366][T17612] ? security_capable+0x7e/0x260 [ 544.002661][T17612] ? ns_capable+0xd7/0x110 [ 544.003837][T17612] nfnetlink_rcv+0x1b4/0x430 [ 544.005067][T17612] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 544.006429][T17612] ? netlink_deliver_tap+0x1ae/0xca0 [ 544.007813][T17612] netlink_unicast+0x53c/0x7f0 [ 544.009081][T17612] ? __pfx_netlink_unicast+0x10/0x10 [ 544.010454][T17612] ? __phys_addr_symbol+0x30/0x80 [ 544.011766][T17612] ? __check_object_size+0x488/0x710 [ 544.013158][T17612] netlink_sendmsg+0x8b8/0xd70 [ 544.014411][T17612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.015796][T17612] ____sys_sendmsg+0x9ae/0xb40 [ 544.017048][T17612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.018419][T17612] ? get_compat_msghdr+0x11b/0x170 [ 544.019766][T17612] ___sys_sendmsg+0x135/0x1e0 [ 544.021013][T17612] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.022370][T17612] ? __pfx_lock_release+0x10/0x10 [ 544.023699][T17612] ? trace_lock_acquire+0x14e/0x1f0 [ 544.025086][T17612] ? __fget_files+0x206/0x3a0 [ 544.026401][T17612] __sys_sendmsg+0x16e/0x220 [ 544.027969][T17612] ? __pfx___sys_sendmsg+0x10/0x10 [ 544.028196][T17614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3126'. [ 544.029706][T17612] __do_fast_syscall_32+0x73/0x120 [ 544.033370][T17612] do_fast_syscall_32+0x32/0x80 [ 544.034645][T17612] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 544.036320][T17612] RIP: 0023:0xf7f65579 [ 544.037385][T17612] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 544.042432][T17612] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 544.044753][T17612] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 544.046843][T17612] RDX: 00000000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 544.048923][T17612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 544.051000][T17612] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 544.053059][T17612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 544.055105][T17612] [ 544.056012][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.344939][T17592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 544.347420][T17592] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 544.349330][T17592] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 544.351147][T17592] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 544.352867][T17592] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 544.447543][T17620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3127'. [ 544.807510][T17628] overlayfs: failed to resolve './file0': -2 [ 544.950269][T17632] FAULT_INJECTION: forcing a failure. [ 544.950269][T17632] name failslab, interval 1, probability 0, space 0, times 0 [ 544.957229][T17632] CPU: 2 UID: 0 PID: 17632 Comm: syz.5.3131 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 544.960009][T17632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 544.962763][T17632] Call Trace: [ 544.963631][T17632] [ 544.964412][T17632] dump_stack_lvl+0x16c/0x1f0 [ 544.965634][T17632] should_fail_ex+0x497/0x5b0 [ 544.966863][T17632] ? fs_reclaim_acquire+0xae/0x150 [ 544.968190][T17632] should_failslab+0xc2/0x120 [ 544.969420][T17632] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 544.970921][T17632] ? __alloc_skb+0x2b3/0x380 [ 544.972135][T17632] __alloc_skb+0x2b3/0x380 [ 544.973300][T17632] ? __pfx___alloc_skb+0x10/0x10 [ 544.974599][T17632] ? genl_rcv_msg+0x4bd/0x800 [ 544.975358][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3132'. [ 544.975820][T17632] netlink_ack+0x164/0xb20 [ 544.979279][T17632] netlink_rcv_skb+0x327/0x410 [ 544.980524][T17632] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.981820][T17632] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.983177][T17632] ? down_read+0xc9/0x330 [ 544.984306][T17632] ? __pfx_down_read+0x10/0x10 [ 544.985554][T17632] ? netlink_deliver_tap+0x1ae/0xca0 [ 544.986936][T17632] genl_rcv+0x28/0x40 [ 544.987987][T17632] netlink_unicast+0x53c/0x7f0 [ 544.989248][T17632] ? __pfx_netlink_unicast+0x10/0x10 [ 544.990609][T17632] ? __phys_addr_symbol+0x30/0x80 [ 544.991913][T17632] ? __check_object_size+0x488/0x710 [ 544.993278][T17632] netlink_sendmsg+0x8b8/0xd70 [ 544.994527][T17632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.995897][T17632] ____sys_sendmsg+0x9ae/0xb40 [ 544.997135][T17632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.998499][T17632] ? get_compat_msghdr+0x11b/0x170 [ 544.999827][T17632] ___sys_sendmsg+0x135/0x1e0 [ 545.001044][T17632] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.002392][T17632] ? __pfx_lock_release+0x10/0x10 [ 545.003692][T17632] ? trace_lock_acquire+0x14e/0x1f0 [ 545.005039][T17632] ? __fget_files+0x206/0x3a0 [ 545.006276][T17632] __sys_sendmsg+0x16e/0x220 [ 545.007475][T17632] ? __pfx___sys_sendmsg+0x10/0x10 [ 545.008823][T17632] __do_fast_syscall_32+0x73/0x120 [ 545.010145][T17632] do_fast_syscall_32+0x32/0x80 [ 545.011405][T17632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 545.013040][T17632] RIP: 0023:0xf7fd0579 [ 545.014066][T17632] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 545.018974][T17632] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 545.021110][T17632] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000140 [ 545.023126][T17632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 545.025155][T17632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 545.027184][T17632] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 545.029237][T17632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 545.031265][T17632] [ 545.277647][T17647] netlink: 'syz.1.3136': attribute type 4 has an invalid length. [ 545.665107][T17657] overlayfs: failed to resolve './file0': -2 [ 545.763350][T16361] Bluetooth: hci2: command 0x0c1a tx timeout [ 545.986991][T17668] overlayfs: upper fs does not support tmpfile. [ 546.094009][T17678] overlayfs: failed to resolve './file0': -2 [ 546.309238][T17681] tipc: Enabling of bearer rejected, already enabled [ 546.403254][T16361] Bluetooth: hci1: command 0x0c1a tx timeout [ 546.405200][T16361] Bluetooth: hci3: command 0x0c1a tx timeout [ 546.411227][T16361] Bluetooth: hci4: command 0x0c1a tx timeout [ 546.413006][T16361] Bluetooth: hci0: command 0x0c1a tx timeout [ 546.577394][T17698] overlayfs: upper fs does not support tmpfile. [ 546.623141][ T35] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 546.656779][T17702] __nla_validate_parse: 5 callbacks suppressed [ 546.656795][T17702] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3156'. [ 546.773115][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 546.775738][ T35] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 546.777916][ T35] usb 6-1: config 0 has no interface number 0 [ 546.779728][ T35] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 240, changing to 11 [ 546.782735][ T35] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 9790, setting to 1024 [ 546.786858][ T35] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 546.789312][ T35] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 546.791592][ T35] usb 6-1: Product: syz [ 546.792788][ T35] usb 6-1: SerialNumber: syz [ 546.795009][ T35] usb 6-1: config 0 descriptor?? [ 546.796745][T17694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 546.799614][ T35] cm109 6-1:0.8: invalid payload size 1024, expected 4 [ 546.802195][ T35] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input15 [ 547.020196][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.023901][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.025913][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.027959][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.030585][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.032593][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.034596][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.036603][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.038624][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.040657][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.044686][ T35] usb 6-1: USB disconnect, device number 15 [ 547.046336][ C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 547.067222][ T35] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 547.258314][T17711] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 547.263824][T17704] FAULT_INJECTION: forcing a failure. [ 547.263824][T17704] name failslab, interval 1, probability 0, space 0, times 0 [ 547.267270][T17704] CPU: 3 UID: 0 PID: 17704 Comm: syz.0.3157 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 547.270175][T17704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 547.273088][T17704] Call Trace: [ 547.274000][T17704] [ 547.274812][T17704] dump_stack_lvl+0x16c/0x1f0 [ 547.276140][T17704] should_fail_ex+0x497/0x5b0 [ 547.277455][T17704] should_failslab+0xc2/0x120 [ 547.278767][T17704] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 547.280230][T17704] ? skb_clone+0x190/0x3f0 [ 547.281498][T17704] skb_clone+0x190/0x3f0 [ 547.283014][T17704] netlink_deliver_tap+0xafd/0xca0 [ 547.284894][T17704] netlink_unicast+0x5e1/0x7f0 [ 547.286657][T17704] ? __pfx_netlink_unicast+0x10/0x10 [ 547.288596][T17704] ? __phys_addr_symbol+0x30/0x80 [ 547.290425][T17704] ? __check_object_size+0x488/0x710 [ 547.292356][T17704] netlink_sendmsg+0x8b8/0xd70 [ 547.294107][T17704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.296041][T17704] ____sys_sendmsg+0x9ae/0xb40 [ 547.297789][T17704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.299703][T17704] ? get_compat_msghdr+0x11b/0x170 [ 547.301589][T17704] ___sys_sendmsg+0x135/0x1e0 [ 547.303306][T17704] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.305201][T17704] ? __pfx_lock_release+0x10/0x10 [ 547.307058][T17704] ? trace_lock_acquire+0x14e/0x1f0 [ 547.308986][T17704] ? __fget_files+0x206/0x3a0 [ 547.310712][T17704] __sys_sendmsg+0x16e/0x220 [ 547.312408][T17704] ? __pfx___sys_sendmsg+0x10/0x10 [ 547.314288][T17704] __do_fast_syscall_32+0x73/0x120 [ 547.316149][T17704] do_fast_syscall_32+0x32/0x80 [ 547.317928][T17704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 547.320189][T17704] RIP: 0023:0xf7f94579 [ 547.321673][T17704] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 547.327041][T17704] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 547.329609][T17704] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000280 [ 547.332444][T17704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.334577][T17704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 547.336723][T17704] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 547.339149][T17704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 547.341300][T17704] [ 547.566939][T17715] FAULT_INJECTION: forcing a failure. [ 547.566939][T17715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.570416][T17715] CPU: 3 UID: 0 PID: 17715 Comm: syz.0.3159 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 547.573256][T17715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 547.576062][T17715] Call Trace: [ 547.576950][T17715] [ 547.577739][T17715] dump_stack_lvl+0x16c/0x1f0 [ 547.579001][T17715] should_fail_ex+0x497/0x5b0 [ 547.580257][T17715] _copy_from_user+0x2e/0xd0 [ 547.581481][T17715] kstrtouint_from_user+0xd7/0x1c0 [ 547.582835][T17715] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 547.584338][T17715] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 547.585857][T17715] proc_fail_nth_write+0x84/0x250 [ 547.587220][T17715] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 547.588696][T17715] ? ksys_write+0x12b/0x250 [ 547.589931][T17715] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 547.591395][T17715] vfs_write+0x24c/0x1150 [ 547.592533][T17715] ? __fget_files+0x1fc/0x3a0 [ 547.593777][T17715] ? __pfx___mutex_lock+0x10/0x10 [ 547.595093][T17715] ? __pfx_vfs_write+0x10/0x10 [ 547.596364][T17715] ? __fget_files+0x206/0x3a0 [ 547.597599][T17715] ksys_write+0x12b/0x250 [ 547.598738][T17715] ? __pfx_ksys_write+0x10/0x10 [ 547.600053][T17715] __do_fast_syscall_32+0x73/0x120 [ 547.601416][T17715] do_fast_syscall_32+0x32/0x80 [ 547.602759][T17715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 547.604481][T17715] RIP: 0023:0xf7f94579 [ 547.605551][T17715] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 547.610572][T17715] RSP: 002b:00000000f50e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 547.612751][T17715] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50e6620 [ 547.612937][ C1] net_ratelimit: 20 callbacks suppressed [ 547.612949][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 547.614845][T17715] RDX: 0000000000000001 RSI: 00000000f7423ff4 RDI: 0000000000000000 [ 547.620226][T17715] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 547.622441][T17715] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 547.624519][T17715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 547.626610][T17715] [ 547.852966][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 548.002944][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 548.002955][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 548.003063][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 548.242961][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 548.643005][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 548.877707][T17737] tipc: Enabling of bearer rejected, already enabled [ 548.892955][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 548.899040][T17740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3165'. [ 548.944149][T17743] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3167'. [ 549.042995][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 549.052950][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 549.281455][T17748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3168'. [ 549.284724][T17748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 549.291967][T17748] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.294238][T17748] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.296451][T17748] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.298654][T17748] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.301113][T17748] vxlan1: entered promiscuous mode [ 549.843803][T17763] overlayfs: failed to resolve './file0': -2 [ 550.278176][T17772] overlayfs: failed to resolve './file1': -2 [ 550.576080][T17778] tipc: Enabling of bearer rejected, already enabled [ 550.728080][T17780] overlayfs: upper fs does not support tmpfile. [ 550.777868][T17783] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3179'. [ 550.863775][T17785] overlayfs: upper fs does not support tmpfile. [ 550.899086][T17788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3181'. [ 551.180205][T17797] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 551.463215][T17799] overlayfs: failed to resolve './file0': -2 [ 551.780841][T17811] overlayfs: upper fs does not support tmpfile. [ 551.813334][T17814] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3188'. [ 552.097278][T17832] tipc: Enabling of bearer rejected, already enabled [ 552.122743][T17823] could not allocate digest TFM handle hmac(sha256-ce) [ 552.719272][T17836] overlayfs: failed to resolve './file0': -2 [ 552.803032][ C1] net_ratelimit: 19 callbacks suppressed [ 552.803044][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 552.975217][T17847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3193'. [ 553.042945][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 553.202944][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 553.202967][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 553.212941][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 553.367018][T17852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3197'. [ 553.442967][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 553.684591][T17856] overlayfs: upper fs does not support tmpfile. [ 553.842949][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 553.913885][T17868] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 554.048186][T17872] misc userio: The device must be registered before sending interrupts [ 554.082981][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 554.095809][T17874] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 554.242945][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 554.242966][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 554.490403][T17888] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3206'. [ 554.649831][T17889] tipc: Enabling of bearer rejected, already enabled [ 554.699907][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3207'. [ 554.794111][T17891] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3210'. [ 554.796437][T17891] netlink: 'syz.4.3210': attribute type 1 has an invalid length. [ 554.890925][T17894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 554.897411][T17894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 555.133051][ T35] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 555.403523][ T35] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 555.406365][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 555.408797][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 555.411622][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 555.414095][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 555.416684][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 555.419558][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 555.421985][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 555.424380][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 555.427225][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 555.429693][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 555.432080][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 555.435063][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 555.437536][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 555.440206][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 555.443203][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 555.445687][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 555.448128][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 555.451002][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 555.458779][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 555.461192][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 555.464292][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 555.466884][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 555.469322][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 555.472188][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 555.478391][ T35] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 555.480897][ T35] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 555.483276][ T35] usb 9-1: Product: syz [ 555.484489][ T35] usb 9-1: Manufacturer: syz [ 555.485820][ T35] usb 9-1: SerialNumber: syz [ 555.488042][ T35] usb 9-1: config 0 descriptor?? [ 555.494939][ T35] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 555.562470][T17907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.704496][ T35] usb 9-1: USB disconnect, device number 13 [ 555.709658][ T35] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 556.887872][T17926] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3220'. [ 557.460740][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3224'. [ 557.467499][T17936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3224'. [ 557.560909][T17940] tipc: Enabling of bearer rejected, already enabled [ 557.576514][T17941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3226'. [ 557.661256][T17946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3228'. [ 557.666022][T17946] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.668403][T17946] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.670492][T17946] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.672680][T17946] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.674955][T17946] vxlan0: entered promiscuous mode [ 557.877485][T17950] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3229'. [ 558.003000][ C1] net_ratelimit: 19 callbacks suppressed [ 558.003014][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 558.242962][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 558.402991][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 558.403047][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 558.413277][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 558.527711][T17957] syzkaller0: entered promiscuous mode [ 558.529121][T17957] syzkaller0: entered allmulticast mode [ 558.652949][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 559.043029][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 559.285605][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 559.442940][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 559.442983][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 559.560330][T17974] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3236'. [ 560.582509][T17989] overlayfs: upper fs does not support tmpfile. [ 560.813125][T17994] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3241'. [ 562.010482][T18006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3244'. [ 562.017798][T18008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3245'. [ 562.167826][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.170130][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.514708][T18022] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3250'. [ 562.696457][ T63] libceph: connect (1)[c::]:6789 error -101 [ 562.698074][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 562.743300][T18031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3251'. [ 562.776563][T18027] ceph: No mds server is up or the cluster is laggy [ 563.203045][ C1] net_ratelimit: 20 callbacks suppressed [ 563.203064][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 563.397579][T18051] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3259'. [ 563.452966][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 563.603468][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 563.612954][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 563.613013][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 563.842969][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 563.979028][T18065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3262'. [ 564.252960][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 564.395480][T18067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3263'. [ 564.494030][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 564.642949][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 564.643029][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 564.733573][T18074] tipc: Enabling of bearer rejected, failed to enable media [ 564.824726][T18076] overlayfs: upper fs does not support tmpfile. [ 565.339712][T18083] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3274'. [ 565.425856][T18088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3265'. [ 565.427040][T18087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3277'. [ 565.444538][T18089] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.446917][T18089] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.449270][T18089] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.451759][T18089] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.454371][T18089] vxlan0: entered promiscuous mode [ 566.826975][T18109] tipc: Enabling of bearer rejected, already enabled [ 567.213697][T18111] __nla_validate_parse: 4 callbacks suppressed [ 567.213712][T18111] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3275'. [ 567.247302][T18113] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.3276'. [ 567.296057][T18115] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3278'. [ 567.327282][T18117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3286'. [ 567.413463][T18125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3279'. [ 567.447873][T18126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3289'. [ 567.646078][T18129] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3280'. [ 568.216142][T18131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3281'. [ 568.358773][T18136] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.3284'. [ 568.403014][ C1] net_ratelimit: 20 callbacks suppressed [ 568.403032][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 568.653018][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 568.803418][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 568.812936][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 568.812951][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 569.018370][T18143] tipc: Enabling of bearer rejected, already enabled [ 569.052954][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 569.452945][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 569.682979][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 569.717326][T18156] tipc: Enabling of bearer rejected, already enabled [ 569.767735][T18160] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3290'. [ 569.793682][ T5960] Bluetooth: hci3: unexpected event 0xff length: 509 > 260 [ 569.842957][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 569.842966][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 571.819093][T18183] netlink: 'syz.5.3297': attribute type 5 has an invalid length. [ 571.877437][T18187] overlayfs: upper fs does not support tmpfile. [ 572.008643][T18195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.458603][T18202] __nla_validate_parse: 7 callbacks suppressed [ 572.458633][T18202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3302'. [ 572.843809][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3304'. [ 572.963182][T18216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3303'. [ 573.602955][ C1] net_ratelimit: 20 callbacks suppressed [ 573.602968][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 573.698919][T18220] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3306'. [ 573.721920][T18222] netlink: 'syz.4.3307': attribute type 5 has an invalid length. [ 573.853005][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 573.995183][T18225] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 574.002955][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 574.002972][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 574.012997][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 574.025569][T18231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3309'. [ 574.025715][T18225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.031084][T18225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.129524][T18225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.132238][T18225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.227205][T18225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.229943][T18225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.242964][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 574.290233][T18225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.293167][T18225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.408865][T18225] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.412155][T18225] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.444828][T18225] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.447800][T18225] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.481662][T18225] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.484215][T18225] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.515871][T18225] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.518793][T18225] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.589873][T18238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3310'. [ 574.617217][T18237] dccp_invalid_packet: P.Data Offset(80) too large [ 574.642941][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 574.743893][T18243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3313'. [ 574.892981][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 575.052987][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 575.392232][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3316'. [ 575.457253][T18251] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3315'. [ 575.561948][T18254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3317'. [ 576.557833][T18270] tipc: Enabling of bearer rejected, already enabled [ 577.861023][T18284] __nla_validate_parse: 3 callbacks suppressed [ 577.861035][T18284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3324'. [ 577.987700][T18286] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3323'. [ 578.543088][T18292] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3325'. [ 578.802932][ C1] net_ratelimit: 21 callbacks suppressed [ 578.802944][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 578.959274][T18298] tipc: Enabling of bearer rejected, already enabled [ 579.042956][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 579.202942][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 579.202998][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 579.203125][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 579.337477][T18303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3329'. [ 579.442948][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 579.559254][T18306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3328'. [ 579.584985][T18307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3329'. [ 579.842952][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 580.082959][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 580.242944][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 580.242953][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 580.275266][T18318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3335'. [ 580.625087][T18328] netlink: 'syz.0.3337': attribute type 5 has an invalid length. [ 580.787590][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3338'. [ 580.793832][T18332] 9pnet_fd: Insufficient options for proto=fd [ 582.843690][T18339] tipc: Enabling of bearer rejected, already enabled [ 583.172853][T18362] netlink: 'syz.0.3347': attribute type 5 has an invalid length. [ 583.545617][T18372] tipc: Enabling of bearer rejected, already enabled [ 584.002949][ C1] net_ratelimit: 20 callbacks suppressed [ 584.002967][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 584.134727][T18380] tipc: Enabling of bearer rejected, already enabled [ 584.242944][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 584.402952][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 584.403005][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 584.403011][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 584.563594][T18395] tipc: Enabling of bearer rejected, already enabled [ 584.569543][T18394] tipc: Enabling of bearer rejected, already enabled [ 584.643007][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 585.042958][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 585.077822][T18404] netlink: 'syz.5.3360': attribute type 5 has an invalid length. [ 585.292950][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 585.341275][T18409] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3361'. [ 585.442942][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 585.442955][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 586.097889][T18414] FAULT_INJECTION: forcing a failure. [ 586.097889][T18414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.101222][T18414] CPU: 3 UID: 0 PID: 18414 Comm: syz.4.3363 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 586.104245][T18414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 586.107077][T18414] Call Trace: [ 586.108255][T18414] [ 586.109069][T18414] dump_stack_lvl+0x16c/0x1f0 [ 586.110294][T18414] should_fail_ex+0x497/0x5b0 [ 586.111515][T18414] _copy_to_user+0x32/0xd0 [ 586.112648][T18414] simple_read_from_buffer+0xd0/0x160 [ 586.114011][T18414] proc_fail_nth_read+0x198/0x270 [ 586.115467][T18414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.117344][T18414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.118855][T18414] vfs_read+0x1df/0xbe0 [ 586.120272][T18414] ? __fget_files+0x1fc/0x3a0 [ 586.121887][T18414] ? __pfx___mutex_lock+0x10/0x10 [ 586.123600][T18414] ? __pfx_vfs_read+0x10/0x10 [ 586.125289][T18414] ? __fget_files+0x206/0x3a0 [ 586.126920][T18414] ksys_read+0x12b/0x250 [ 586.128385][T18414] ? __pfx_ksys_read+0x10/0x10 [ 586.130047][T18414] __do_fast_syscall_32+0x73/0x120 [ 586.131877][T18414] do_fast_syscall_32+0x32/0x80 [ 586.133502][T18414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 586.135183][T18414] RIP: 0023:0xf7f87579 [ 586.136236][T18414] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 586.140978][T18414] RSP: 002b:00000000f50d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 586.143050][T18414] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50d6620 [ 586.145008][T18414] RDX: 000000000000000f RSI: 00000000f7413ff4 RDI: 0000000000000000 [ 586.147018][T18414] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 586.149063][T18414] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 586.151068][T18414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 586.153075][T18414] [ 586.160237][T18416] fuse: Bad value for 'fd' [ 586.163917][T18417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 586.432058][T18421] tipc: Enabling of bearer rejected, already enabled [ 586.883994][ T5960] Bluetooth: hci4: command 0x0c1a tx timeout [ 586.976641][T18424] program syz.5.3366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.994653][T18424] trusted_key: syz.5.3366 sent an empty control message without MSG_MORE. [ 587.153951][T18427] usb 2-1: USB disconnect, device number 2 [ 587.289188][T18432] netlink: 'syz.5.3369': attribute type 5 has an invalid length. [ 587.289195][T18428] hub 2-0:1.0: USB hub found [ 587.303712][T18428] hub 2-0:1.0: 6 ports detected [ 587.563131][ T1019] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 587.581584][T18439] netlink: 'syz.4.3372': attribute type 1 has an invalid length. [ 587.591294][T18439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.602690][T18439] bond0: (slave bridge16): making interface the new active one [ 587.605276][T18439] bond0: (slave bridge16): Enslaving as an active interface with an up link [ 587.652075][T18439] bond0: (slave bridge17): Enslaving as an active interface with a down link [ 587.697851][T18442] tipc: Enabling of bearer rejected, already enabled [ 587.777731][ T1019] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 587.780097][ T1019] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 587.782129][ T1019] usb 2-1: Product: QEMU USB Tablet [ 587.785431][ T1019] usb 2-1: Manufacturer: QEMU [ 587.786656][ T1019] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 587.807550][ T1019] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0009/input/input16 [ 587.864299][ T1019] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 588.078290][T18446] tipc: Enabling of bearer rejected, already enabled [ 588.377581][T18451] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3375'. [ 589.135097][T18461] program syz.4.3378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.162411][T18462] tipc: Enabling of bearer rejected, already enabled [ 589.202960][ C1] net_ratelimit: 20 callbacks suppressed [ 589.202973][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 589.442956][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 589.491843][T18468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3380'. [ 589.603023][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 589.603075][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 589.613081][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 589.765172][T18470] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3381'. [ 589.767570][T18470] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3381'. [ 589.770035][T18471] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3381'. [ 589.773946][T18471] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3381'. [ 589.852984][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 590.034994][T18480] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3385'. [ 590.242966][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 590.301766][T18489] Sensor A: ================= START STATUS ================= [ 590.304152][T18489] Sensor A: Test Pattern: 75% Colorbar [ 590.306860][T18489] Sensor A: Show Information: All [ 590.308375][T18489] Sensor A: Vertical Flip: false [ 590.309964][T18489] Sensor A: Horizontal Flip: false [ 590.311335][T18489] Sensor A: Brightness: 128 [ 590.312538][T18489] Sensor A: Contrast: 128 [ 590.313843][T18489] Sensor A: Hue: 0 [ 590.314865][T18489] Sensor A: Saturation: 128 [ 590.316093][T18489] Sensor A: ================== END STATUS ================== [ 590.362938][ T39] audit: type=1326 audit(1734184267.377:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.5.3387" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x0 [ 590.492947][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 590.642980][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 590.643029][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 591.081950][T18505] tipc: Enabling of bearer rejected, already enabled [ 591.738715][T18504] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3390'. [ 591.906095][T18516] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3395'. [ 591.948005][T18518] netlink: 'syz.0.3397': attribute type 5 has an invalid length. [ 591.968810][T18520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3396'. [ 592.038883][T18524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3398'. [ 592.302011][T18534] Sensor A: ================= START STATUS ================= [ 592.304308][T18534] Sensor A: Test Pattern: 75% Colorbar [ 592.306027][T18534] Sensor A: Show Information: All [ 592.307429][T18534] Sensor A: Vertical Flip: false [ 592.308782][T18534] Sensor A: Horizontal Flip: false [ 592.310175][T18534] Sensor A: Brightness: 128 [ 592.311419][T18534] Sensor A: Contrast: 128 [ 592.312601][T18534] Sensor A: Hue: 0 [ 592.314028][T18534] Sensor A: Saturation: 128 [ 592.315477][T18534] Sensor A: ================== END STATUS ================== [ 592.835615][T18542] FAULT_INJECTION: forcing a failure. [ 592.835615][T18542] name failslab, interval 1, probability 0, space 0, times 0 [ 592.839917][T18542] CPU: 3 UID: 0 PID: 18542 Comm: syz.4.3402 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 592.842689][T18542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 592.845490][T18542] Call Trace: [ 592.846393][T18542] [ 592.847181][T18542] dump_stack_lvl+0x16c/0x1f0 [ 592.848435][T18542] should_fail_ex+0x497/0x5b0 [ 592.849691][T18542] ? fs_reclaim_acquire+0xae/0x150 [ 592.851027][T18542] should_failslab+0xc2/0x120 [ 592.852280][T18542] __kmalloc_node_noprof+0xd1/0x520 [ 592.853776][T18542] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 592.855685][T18542] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 592.857276][T18542] ? __lruvec_stat_mod_folio+0xa0/0x360 [ 592.858716][T18542] ? lock_acquire+0x2f/0xb0 [ 592.859926][T18542] ? bpf_check+0x206/0xc9b0 [ 592.861116][T18542] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 592.862749][T18542] ? rcu_is_watching+0x12/0xc0 [ 592.864087][T18542] ? trace_kmalloc+0x2d/0xd0 [ 592.865290][T18542] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 592.866838][T18542] ? __kvmalloc_node_noprof+0x6f/0x1a0 [ 592.868259][T18542] ? ktime_get+0x206/0x300 [ 592.869435][T18542] ? bpf_check+0x206/0xc9b0 [ 592.870619][T18542] vzalloc_noprof+0x6b/0x90 [ 592.871811][T18542] ? bpf_check+0x206/0xc9b0 [ 592.872994][T18542] bpf_check+0x206/0xc9b0 [ 592.874114][T18542] ? hlock_class+0x4e/0x130 [ 592.875290][T18542] ? __lock_acquire+0x15a9/0x3c40 [ 592.876605][T18542] ? __pfx___lock_acquire+0x10/0x10 [ 592.877949][T18542] ? __pfx_bpf_check+0x10/0x10 [ 592.879190][T18542] ? bpf_offload_find_netdev+0x134/0x2d0 [ 592.880660][T18542] ? find_held_lock+0x2d/0x110 [ 592.881903][T18542] ? bpf_prog_load+0xd45/0x2670 [ 592.883167][T18542] ? __pfx_lock_release+0x10/0x10 [ 592.884484][T18542] ? trace_lock_acquire+0x14e/0x1f0 [ 592.885844][T18542] ? bpf_prog_load+0xd45/0x2670 [ 592.887110][T18542] ? ktime_get_with_offset+0x273/0x3a0 [ 592.888531][T18542] ? lockdep_hardirqs_on+0x7c/0x110 [ 592.889861][T18542] ? read_tsc+0x9/0x20 [ 592.890937][T18542] ? ktime_get_with_offset+0x20f/0x3a0 [ 592.892368][T18542] ? bpf_obj_name_cpy+0x156/0x1b0 [ 592.893686][T18542] bpf_prog_load+0xe3f/0x2670 [ 592.894932][T18542] ? __pfx_bpf_prog_load+0x10/0x10 [ 592.896289][T18542] ? find_held_lock+0x2d/0x110 [ 592.897542][T18542] ? __might_fault+0x13b/0x190 [ 592.898797][T18542] ? __might_fault+0xe3/0x190 [ 592.900048][T18542] __sys_bpf+0x5677/0x57a0 [ 592.901213][T18542] ? __pfx_lock_release+0x10/0x10 [ 592.902529][T18542] ? __pfx___sys_bpf+0x10/0x10 [ 592.903790][T18542] ? vfs_write+0x306/0x1150 [ 592.904981][T18542] ? __mutex_unlock_slowpath+0x164/0x690 [ 592.906733][T18542] ? fput+0x67/0x440 [ 592.908070][T18542] ? ksys_write+0x1ba/0x250 [ 592.909247][T18542] ? __pfx_ksys_write+0x10/0x10 [ 592.910514][T18542] __ia32_sys_bpf+0x76/0xe0 [ 592.911718][T18542] __do_fast_syscall_32+0x73/0x120 [ 592.913041][T18542] do_fast_syscall_32+0x32/0x80 [ 592.914296][T18542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 592.915930][T18542] RIP: 0023:0xf7f87579 [ 592.916981][T18542] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 592.921875][T18542] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 592.924033][T18542] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000600 [ 592.926088][T18542] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 592.928141][T18542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 592.930673][T18542] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 592.933328][T18542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 592.935388][T18542] [ 592.937919][T18542] syz.4.3402: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 592.942803][T18542] CPU: 3 UID: 0 PID: 18542 Comm: syz.4.3402 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 592.945993][T18542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 592.948785][T18542] Call Trace: [ 592.949671][T18542] [ 592.950458][T18542] dump_stack_lvl+0x16c/0x1f0 [ 592.951715][T18542] warn_alloc+0x24d/0x3a0 [ 592.952858][T18542] ? __pfx_warn_alloc+0x10/0x10 [ 592.954148][T18542] ? rcu_is_watching+0x12/0xc0 [ 592.955416][T18542] ? trace_kmalloc+0x2d/0xd0 [ 592.956844][T18542] ? __kmalloc_node_noprof+0x23d/0x520 [ 592.958277][T18542] __vmalloc_node_range_noprof+0x1105/0x1530 [ 592.959854][T18542] ? __lruvec_stat_mod_folio+0xa0/0x360 [ 592.961293][T18542] ? lock_acquire+0x2f/0xb0 [ 592.962486][T18542] ? bpf_check+0x206/0xc9b0 [ 592.963690][T18542] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 592.965326][T18542] ? rcu_is_watching+0x12/0xc0 [ 592.966856][T18542] ? trace_kmalloc+0x2d/0xd0 [ 592.968083][T18542] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 592.969564][T18542] ? __kvmalloc_node_noprof+0x6f/0x1a0 [ 592.970996][T18542] ? ktime_get+0x206/0x300 [ 592.972188][T18542] ? bpf_check+0x206/0xc9b0 [ 592.973378][T18542] vzalloc_noprof+0x6b/0x90 [ 592.974567][T18542] ? bpf_check+0x206/0xc9b0 [ 592.975771][T18542] bpf_check+0x206/0xc9b0 [ 592.976904][T18542] ? hlock_class+0x4e/0x130 [ 592.978094][T18542] ? __lock_acquire+0x15a9/0x3c40 [ 592.979453][T18542] ? __pfx___lock_acquire+0x10/0x10 [ 592.980809][T18542] ? __pfx_bpf_check+0x10/0x10 [ 592.982069][T18542] ? bpf_offload_find_netdev+0x134/0x2d0 [ 592.983550][T18542] ? find_held_lock+0x2d/0x110 [ 592.984811][T18542] ? bpf_prog_load+0xd45/0x2670 [ 592.986456][T18542] ? __pfx_lock_release+0x10/0x10 [ 592.988179][T18542] ? trace_lock_acquire+0x14e/0x1f0 [ 592.989746][T18542] ? bpf_prog_load+0xd45/0x2670 [ 592.991021][T18542] ? ktime_get_with_offset+0x273/0x3a0 [ 592.992470][T18542] ? lockdep_hardirqs_on+0x7c/0x110 [ 592.993821][T18542] ? read_tsc+0x9/0x20 [ 592.994890][T18542] ? ktime_get_with_offset+0x20f/0x3a0 [ 592.996350][T18542] ? bpf_obj_name_cpy+0x156/0x1b0 [ 592.997663][T18542] bpf_prog_load+0xe3f/0x2670 [ 592.998910][T18542] ? __pfx_bpf_prog_load+0x10/0x10 [ 593.000263][T18542] ? find_held_lock+0x2d/0x110 [ 593.001469][T18542] ? __might_fault+0x13b/0x190 [ 593.002731][T18542] ? __might_fault+0xe3/0x190 [ 593.003986][T18542] __sys_bpf+0x5677/0x57a0 [ 593.005157][T18542] ? __pfx_lock_release+0x10/0x10 [ 593.006659][T18542] ? __pfx___sys_bpf+0x10/0x10 [ 593.007931][T18542] ? vfs_write+0x306/0x1150 [ 593.009514][T18542] ? __mutex_unlock_slowpath+0x164/0x690 [ 593.011100][T18542] ? fput+0x67/0x440 [ 593.012132][T18542] ? ksys_write+0x1ba/0x250 [ 593.013313][T18542] ? __pfx_ksys_write+0x10/0x10 [ 593.014573][T18542] __ia32_sys_bpf+0x76/0xe0 [ 593.015766][T18542] __do_fast_syscall_32+0x73/0x120 [ 593.017105][T18542] do_fast_syscall_32+0x32/0x80 [ 593.018374][T18542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.020023][T18542] RIP: 0023:0xf7f87579 [ 593.021082][T18542] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 593.026007][T18542] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 593.028154][T18542] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000600 [ 593.030262][T18542] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 593.032296][T18542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 593.034314][T18542] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 593.036342][T18542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 593.038368][T18542] [ 593.050139][T18542] Mem-Info: [ 593.051017][T18542] active_anon:9515 inactive_anon:1229 isolated_anon:0 [ 593.051017][T18542] active_file:23762 inactive_file:4254 isolated_file:0 [ 593.051017][T18542] unevictable:1768 dirty:381 writeback:0 [ 593.051017][T18542] slab_reclaimable:6817 slab_unreclaimable:72108 [ 593.051017][T18542] mapped:36240 shmem:6404 pagetables:692 [ 593.051017][T18542] sec_pagetables:317 bounce:0 [ 593.051017][T18542] kernel_misc_reclaimable:0 [ 593.051017][T18542] free:37692 free_pcp:9642 free_cma:0 [ 593.062555][T18542] Node 0 active_anon:3064kB inactive_anon:820kB active_file:9608kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4520kB dirty:36kB writeback:0kB shmem:4928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9552kB pagetables:588kB sec_pagetables:1156kB all_unreclaimable? yes [ 593.071545][T18542] Node 1 active_anon:34996kB inactive_anon:4096kB active_file:85440kB inactive_file:17016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:140440kB dirty:1488kB writeback:0kB shmem:20688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3812kB pagetables:2180kB sec_pagetables:112kB all_unreclaimable? no [ 593.079888][T18542] Node 0 DMA free:2924kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:252kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:436kB local_pcp:156kB free_cma:0kB [ 593.087642][T18542] lowmem_reserve[]: 0 273 0 0 0 [ 593.088981][T18542] Node 0 DMA32 free:31340kB boost:18432kB min:32336kB low:35812kB high:39288kB reserved_highatomic:4096KB active_anon:2812kB inactive_anon:820kB active_file:9600kB inactive_file:0kB unevictable:3536kB writepending:36kB present:1032196kB managed:306316kB mlocked:0kB bounce:0kB free_pcp:448kB local_pcp:0kB free_cma:0kB [ 593.096876][T18542] lowmem_reserve[]: 0 0 0 0 0 [ 593.098380][T18542] Node 1 DMA32 free:115804kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:34968kB inactive_anon:4096kB active_file:85440kB inactive_file:17016kB unevictable:3536kB writepending:1492kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:38256kB local_pcp:7516kB free_cma:0kB [ 593.106165][T18542] lowmem_reserve[]: 0 0 0 0 0 [ 593.107465][T18542] Node 0 DMA: 97*4kB (UM) 23*8kB (UM) 25*16kB (UM) 55*32kB (UM) 1*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2924kB [ 593.111428][T18542] Node 0 DMA32: 943*4kB (UMEH) 310*8kB (UME) 28*16kB (UMEH) 118*32kB (UMEH) 66*64kB (UME) 14*128kB (UME) 8*256kB (UM) 3*512kB (UM) 1*1024kB (U) 3*2048kB (M) 1*4096kB (M) = 31340kB [ 593.116513][T18542] Node 1 DMA32: 120*4kB (UME) 150*8kB (UE) 42*16kB (UE) 94*32kB (UME) 94*64kB (UME) 77*128kB (UME) 45*256kB (UM) 20*512kB (UME) 13*1024kB (UM) 9*2048kB (UM) 10*4096kB (UM) = 115696kB [ 593.121163][T18542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.124070][T18542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 593.126627][T18542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.129070][T18542] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 593.131453][T18542] 34404 total pagecache pages [ 593.132690][T18542] 0 pages in swap cache [ 593.133817][T18542] Free swap = 124472kB [ 593.134899][T18542] Total swap = 124996kB [ 593.135986][T18542] 524155 pages RAM [ 593.136973][T18542] 0 pages HighMem/MovableOnly [ 593.136979][T18542] 206673 pages reserved [ 593.136982][T18542] 0 pages cma reserved [ 593.202717][T18550] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3405'. [ 593.436955][T18558] netlink: 'syz.4.3407': attribute type 5 has an invalid length. [ 593.998322][T18561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3406'. [ 594.081598][T18567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3410'. [ 594.144498][T18571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3411'. [ 594.403084][ C1] net_ratelimit: 20 callbacks suppressed [ 594.403102][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 594.521261][T18580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'. [ 594.642989][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 594.802940][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 594.803071][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 594.803113][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 595.043008][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 595.205763][T18589] Sensor A: ================= START STATUS ================= [ 595.207781][T18589] Sensor A: Test Pattern: 75% Colorbar [ 595.209282][T18589] Sensor A: Show Information: All [ 595.210632][T18589] Sensor A: Vertical Flip: false [ 595.212042][T18589] Sensor A: Horizontal Flip: false [ 595.213548][T18589] Sensor A: Brightness: 128 [ 595.214796][T18589] Sensor A: Contrast: 128 [ 595.215933][T18589] Sensor A: Hue: 0 [ 595.216909][T18589] Sensor A: Saturation: 128 [ 595.218068][T18589] Sensor A: ================== END STATUS ================== [ 595.323455][ T62] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 595.452932][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 595.473354][ T62] usb 5-1: Using ep0 maxpacket: 8 [ 595.476336][ T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 595.479175][ T62] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 595.481527][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.484496][ T62] usb 5-1: config 0 descriptor?? [ 595.682970][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 595.688662][ T62] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 595.842955][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 595.842992][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 595.850955][T18597] 9pnet_fd: Insufficient options for proto=fd [ 595.899552][ T62] usb 5-1: USB disconnect, device number 6 [ 596.327839][T18608] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3420'. [ 596.916527][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3422'. [ 596.996019][T18618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3425'. [ 597.012917][T18620] netlink: 'syz.4.3426': attribute type 5 has an invalid length. [ 597.044158][T16361] Bluetooth: hci1: command 0x0c1a tx timeout [ 597.139138][ T39] audit: type=1326 audit(1734184274.157:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.5.3427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 597.145934][ T39] audit: type=1326 audit(1734184274.157:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.5.3427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 597.153581][ T39] audit: type=1326 audit(1734184274.157:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.5.3427" exe="/syz-executor" sig=0 arch=40000003 syscall=323 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 597.171181][ T39] audit: type=1326 audit(1734184274.157:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.5.3427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 597.175949][T18620] team0 (unregistering): Port device team_slave_0 removed [ 597.179110][ T39] audit: type=1326 audit(1734184274.157:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.5.3427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 597.185720][ T39] audit: type=1326 audit(1734184274.157:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.5.3427" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 597.188107][T18620] team0 (unregistering): Port device team_slave_1 removed [ 597.199823][T18620] team0 (unregistering): Port device vlan0 removed [ 597.232654][ T39] audit: type=1326 audit(1734184274.247:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.5.3427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 597.238874][ T39] audit: type=1326 audit(1734184274.247:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.5.3427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 597.245362][ T39] audit: type=1326 audit(1734184274.267:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.5.3427" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 597.250940][ T39] audit: type=1326 audit(1734184274.267:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.5.3427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 597.258806][T18622] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.261657][T18622] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.397480][T18622] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.402150][T18622] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.708317][T18622] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.712150][T18622] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.735279][T18642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3432'. [ 597.738530][T18635] netlink: 'syz.4.3430': attribute type 5 has an invalid length. [ 597.853088][T16361] Bluetooth: hci2: command 0x0c1a tx timeout [ 597.856485][T18622] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.863413][T18622] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.001189][T18622] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.005759][T18622] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.014041][T18622] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.016597][T18622] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.022169][T18622] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.024651][T18622] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.030901][T18622] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.033208][T18622] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.567090][T18655] tipc: Enabling of bearer rejected, already enabled [ 598.603466][T18656] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3435'. [ 598.805797][T16361] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 599.074647][T18669] FAULT_INJECTION: forcing a failure. [ 599.074647][T18669] name failslab, interval 1, probability 0, space 0, times 0 [ 599.078368][T18669] CPU: 2 UID: 0 PID: 18669 Comm: syz.1.3439 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 599.081122][T18669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 599.083886][T18669] Call Trace: [ 599.084752][T18669] [ 599.085524][T18669] dump_stack_lvl+0x16c/0x1f0 [ 599.086774][T18669] should_fail_ex+0x497/0x5b0 [ 599.088016][T18669] ? fs_reclaim_acquire+0xae/0x150 [ 599.089370][T18669] should_failslab+0xc2/0x120 [ 599.090606][T18669] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 599.092014][T18669] ? __kernfs_new_node+0xd3/0x890 [ 599.093324][T18669] __kernfs_new_node+0xd3/0x890 [ 599.094583][T18669] ? hlock_class+0x4e/0x130 [ 599.095780][T18669] ? __pfx___kernfs_new_node+0x10/0x10 [ 599.097202][T18669] ? __pfx___lock_acquire+0x10/0x10 [ 599.098561][T18669] ? kernfs_add_one+0x182/0x520 [ 599.099835][T18669] kernfs_new_node+0x186/0x240 [ 599.101092][T18669] ? lock_acquire.part.0+0x11b/0x380 [ 599.102473][T18669] kernfs_create_dir_ns+0x4c/0x150 [ 599.103821][T18669] sysfs_create_dir_ns+0x13b/0x2b0 [ 599.105162][T18669] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 599.106629][T18669] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 599.108033][T18669] ? kobject_add_internal+0x12d/0x990 [ 599.109447][T18669] ? class_dir_child_ns_type+0xd/0x60 [ 599.110852][T18669] kobject_add_internal+0x2c8/0x990 [ 599.112252][T18669] kobject_add+0x16f/0x240 [ 599.113400][T18669] ? __pfx_kobject_add+0x10/0x10 [ 599.114641][T18669] ? kobject_put+0xab/0x5a0 [ 599.115837][T18669] ? device_add+0xc02/0x1a70 [ 599.117058][T18669] device_add+0x289/0x1a70 [ 599.118233][T18669] ? __pfx_dev_set_name+0x10/0x10 [ 599.119558][T18669] ? __pfx_device_add+0x10/0x10 [ 599.120835][T18669] ? __init_waitqueue_head+0xca/0x150 [ 599.122238][T18669] wakeup_source_device_create+0x214/0x2a0 [ 599.123762][T18669] wakeup_source_sysfs_add+0x1c/0x90 [ 599.125140][T18669] wakeup_source_register+0xaa/0x140 [ 599.126524][T18669] ep_create_wakeup_source+0x1df/0x2e0 [ 599.127951][T18669] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 599.129540][T18669] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 599.130948][T18669] ? lock_acquire+0x2f/0xb0 [ 599.132151][T18669] ? do_epoll_ctl+0x2365/0x35d0 [ 599.133440][T18669] do_epoll_ctl+0x1dab/0x35d0 [ 599.134718][T18669] ? __pfx_do_epoll_ctl+0x10/0x10 [ 599.135973][T18669] ? __might_fault+0xe3/0x190 [ 599.137203][T18669] ? __ia32_sys_epoll_ctl+0x15c/0x1e0 [ 599.138600][T18669] __ia32_sys_epoll_ctl+0x15c/0x1e0 [ 599.139961][T18669] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 599.141435][T18669] __do_fast_syscall_32+0x73/0x120 [ 599.142758][T18669] do_fast_syscall_32+0x32/0x80 [ 599.144031][T18669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.145674][T18669] RIP: 0023:0xf7f65579 [ 599.146741][T18669] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 599.151561][T18669] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 00000000000000ff [ 599.153646][T18669] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 599.155624][T18669] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 0000000000000000 [ 599.157252][T18667] netlink: 'syz.5.3440': attribute type 5 has an invalid length. [ 599.157582][T18669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.161715][T18669] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 599.163749][T18669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.165801][T18669] [ 599.168606][T18669] kobject: kobject_add_internal failed for wakeup21 (error: -12 parent: wakeup) [ 599.407565][T18667] team0 (unregistering): Port device team_slave_0 removed [ 599.429668][T18667] team0 (unregistering): Port device team_slave_1 removed [ 599.603012][ C1] net_ratelimit: 20 callbacks suppressed [ 599.603025][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 599.777154][T18691] syz.0.3447[18691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 599.777206][T18691] syz.0.3447[18691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 599.785991][T18691] syz.0.3447[18691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 599.842966][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 600.002988][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 600.003002][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 600.003095][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 600.242976][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 600.397033][T18700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3449'. [ 600.642987][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 600.658949][T18702] tipc: Enabling of bearer rejected, already enabled [ 600.882947][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 601.042969][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 601.052974][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 602.131364][T18729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3456'. [ 602.546881][T18737] FAULT_INJECTION: forcing a failure. [ 602.546881][T18737] name failslab, interval 1, probability 0, space 0, times 0 [ 602.550402][T18737] CPU: 3 UID: 0 PID: 18737 Comm: syz.5.3459 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 602.553503][T18737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 602.556297][T18737] Call Trace: [ 602.557177][T18737] [ 602.557963][T18737] dump_stack_lvl+0x16c/0x1f0 [ 602.559219][T18737] should_fail_ex+0x497/0x5b0 [ 602.560472][T18737] ? fs_reclaim_acquire+0xae/0x150 [ 602.561857][T18737] should_failslab+0xc2/0x120 [ 602.563467][T18737] __kmalloc_cache_noprof+0x68/0x420 [ 602.565257][T18737] seg6_genl_sethmac+0x380/0x590 [ 602.566967][T18737] genl_family_rcv_msg_doit+0x202/0x2f0 [ 602.568732][T18737] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 602.570396][T18737] ? genl_get_cmd+0x195/0x580 [ 602.571921][T18737] ? bpf_lsm_capable+0x9/0x10 [ 602.573403][T18737] ? security_capable+0x7e/0x260 [ 602.574707][T18737] genl_rcv_msg+0x565/0x800 [ 602.575918][T18737] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.577236][T18737] ? __pfx_seg6_genl_sethmac+0x10/0x10 [ 602.578682][T18737] netlink_rcv_skb+0x165/0x410 [ 602.579945][T18737] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.581258][T18737] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 602.582633][T18737] ? down_read+0xc9/0x330 [ 602.584036][T18737] ? __pfx_down_read+0x10/0x10 [ 602.585364][T18737] ? netlink_deliver_tap+0x1ae/0xca0 [ 602.586765][T18737] genl_rcv+0x28/0x40 [ 602.587855][T18737] netlink_unicast+0x53c/0x7f0 [ 602.589404][T18737] ? __pfx_netlink_unicast+0x10/0x10 [ 602.590783][T18737] ? __phys_addr_symbol+0x30/0x80 [ 602.592125][T18737] ? __check_object_size+0x488/0x710 [ 602.593513][T18737] netlink_sendmsg+0x8b8/0xd70 [ 602.594808][T18737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.596229][T18737] ____sys_sendmsg+0x9ae/0xb40 [ 602.597540][T18737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.599212][T18737] ? get_compat_msghdr+0x11b/0x170 [ 602.600615][T18737] ___sys_sendmsg+0x135/0x1e0 [ 602.602072][T18737] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.603502][T18737] ? __pfx_lock_release+0x10/0x10 [ 602.604869][T18737] ? trace_lock_acquire+0x14e/0x1f0 [ 602.606297][T18737] ? __fget_files+0x206/0x3a0 [ 602.607575][T18737] __sys_sendmsg+0x16e/0x220 [ 602.608834][T18737] ? __pfx___sys_sendmsg+0x10/0x10 [ 602.610185][T18737] __do_fast_syscall_32+0x73/0x120 [ 602.611547][T18737] do_fast_syscall_32+0x32/0x80 [ 602.613162][T18737] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.615291][T18737] RIP: 0023:0xf7fd0579 [ 602.616668][T18737] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 602.623053][T18737] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 602.625806][T18737] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 602.628224][T18737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 602.630293][T18737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 602.632358][T18737] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 602.634827][T18737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 602.637273][T18737] [ 602.733106][T18329] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 602.883160][T16361] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 602.885684][T16361] Bluetooth: hci4: Injecting HCI hardware error event [ 602.912994][T18329] usb 9-1: Using ep0 maxpacket: 32 [ 602.918686][T18329] usb 9-1: config 0 has an invalid interface number: 219 but max is 0 [ 602.920931][T18329] usb 9-1: config 0 has no interface number 0 [ 602.922687][T18329] usb 9-1: config 0 interface 219 has no altsetting 0 [ 602.924987][T18329] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 602.927399][T18329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.936111][T18329] usb 9-1: config 0 descriptor?? [ 602.963066][T18746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3461'. [ 603.044977][T16361] Bluetooth: hci4: hardware error 0x00 [ 603.378525][T18329] usb 9-1: string descriptor 0 read error: -71 [ 603.381553][T18329] usb 9-1: USB disconnect, device number 14 [ 603.399369][T18748] tipc: Enabling of bearer rejected, already enabled [ 603.409938][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 603.409995][ T39] audit: type=1326 audit(1734184280.427:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18749 comm="syz.1.3463" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x0 [ 603.513199][ T5960] Bluetooth: hci3: unexpected event 0x04 length: 4 < 10 [ 604.262999][ T5994] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 604.428346][ T5994] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 604.435619][ T5994] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.444600][ T5994] usb 9-1: Product: syz [ 604.448503][ T5994] usb 9-1: Manufacturer: syz [ 604.453368][ T5994] usb 9-1: SerialNumber: syz [ 604.465143][ T5994] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 604.491646][ T5994] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 604.710330][T18770] (syz.4.3467,18770,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "ßÕ~gžœ<+‹€( ™.µ1 1'êƉÇ" or missing value [ 604.716303][T18770] (syz.4.3467,18770,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 604.749712][T18770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.753480][T18770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.803017][ C1] net_ratelimit: 20 callbacks suppressed [ 604.803046][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 604.832055][T18787] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 604.884155][ T9] usb 9-1: USB disconnect, device number 15 [ 604.924999][T18788] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3470'. [ 604.949318][T18788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3470'. [ 605.042943][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 605.203016][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 605.212937][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 605.212946][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 605.223051][T16361] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 605.238292][T18795] affs: No valid root block on device nullb0 [ 605.452932][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 605.458595][T18797] netlink: 'syz.4.3474': attribute type 5 has an invalid length. [ 605.523219][ T5994] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 605.525332][ T5994] ath9k_htc: Failed to initialize the device [ 605.528578][ T9] usb 9-1: ath9k_htc: USB layer deinitialized [ 605.843014][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 606.082978][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 606.162438][T18825] netlink: 'syz.1.3483': attribute type 5 has an invalid length. [ 606.205881][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 606.209820][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 606.243344][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 606.252939][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 606.456394][T18841] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3485'. [ 606.626239][T18842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3486'. [ 607.144342][T18848] tipc: Enabling of bearer rejected, already enabled [ 607.385043][T18858] syz.5.3487[18858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.385095][T18858] syz.5.3487[18858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.388153][T18858] syz.5.3487[18858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.773172][T18329] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 607.934646][T18329] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 607.937634][T18329] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 607.940254][T18329] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 607.942637][T18329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.976354][T18863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 607.983858][T18329] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 608.125050][T18870] netlink: 'syz.1.3494': attribute type 5 has an invalid length. [ 608.164422][T18877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 608.168309][T18884] binder: BINDER_SET_CONTEXT_MGR already set [ 608.170466][T18884] binder: 18883:18884 ioctl 4018620d 20004a80 returned -16 [ 608.354761][ T63] usb 5-1: USB disconnect, device number 7 [ 608.449797][T18892] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3497'. [ 608.859379][T18887] tipc: Enabling of bearer rejected, already enabled [ 608.912706][T18895] fuse: Unknown parameter 'group_id+00000000000000000000' [ 608.916016][T18895] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 608.917640][T18895] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 608.920275][T18895] vhci_hcd vhci_hcd.0: Device attached [ 608.979075][T18898] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(7) [ 608.980837][T18898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 608.982736][T18898] vhci_hcd vhci_hcd.0: Device attached [ 608.989125][T18898] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 609.024462][T18895] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(12) [ 609.026612][T18895] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 609.040455][T18895] vhci_hcd vhci_hcd.0: Device attached [ 609.049435][T18895] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 609.051931][T18895] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 609.054415][T18895] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 609.056839][T18895] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 609.079917][T18895] vhci_hcd vhci_hcd.0: port 0 already used [ 609.083012][T18901] vhci_hcd: connection closed [ 609.087683][T18899] vhci_hcd: connection closed [ 609.090144][T18896] vhci_hcd: connection closed [ 609.091666][T16270] vhci_hcd: stop threads [ 609.092978][ T1019] vhci_hcd: vhci_device speed not set [ 609.095642][T16270] vhci_hcd: release socket [ 609.096956][T16270] vhci_hcd: disconnect device [ 609.098525][T16270] vhci_hcd: stop threads [ 609.099691][T16270] vhci_hcd: release socket [ 609.100882][T16270] vhci_hcd: disconnect device [ 609.102278][T16270] vhci_hcd: stop threads [ 609.106876][T16270] vhci_hcd: release socket [ 609.108162][T16270] vhci_hcd: disconnect device [ 609.152965][ T1019] usb 47-1: new full-speed USB device number 3 using vhci_hcd [ 609.155394][ T1019] usb 47-1: enqueue for inactive port 0 [ 609.223301][ T1019] vhci_hcd: vhci_device speed not set [ 609.443088][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout [ 609.903312][ T35] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 610.003019][ C1] net_ratelimit: 20 callbacks suppressed [ 610.003033][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 610.053324][ T35] usb 10-1: Using ep0 maxpacket: 32 [ 610.060786][ T35] usb 10-1: config 0 has an invalid interface number: 219 but max is 0 [ 610.063792][ T35] usb 10-1: config 0 has no interface number 0 [ 610.065974][ T35] usb 10-1: config 0 interface 219 has no altsetting 0 [ 610.068366][ T35] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 610.072057][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.076425][ T35] usb 10-1: config 0 descriptor?? [ 610.119705][T18919] netlink: 'syz.4.3506': attribute type 5 has an invalid length. [ 610.148604][T18923] binder: BINDER_SET_CONTEXT_MGR already set [ 610.150266][T18923] binder: 18922:18923 ioctl 4018620d 20004a80 returned -16 [ 610.202096][T18927] vivid-007: disconnect [ 610.242945][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 610.403020][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 610.403223][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 610.412946][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 610.455521][T18931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3508'. [ 610.642934][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 610.673260][ T35] usb 10-1: string descriptor 0 read error: -71 [ 610.676908][ T35] usb 10-1: USB disconnect, device number 3 [ 610.856167][T18925] vivid-007: reconnect [ 610.922027][T18935] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3510'. [ 611.043000][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 611.292952][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 611.443109][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 611.446953][T18956] binder: BINDER_SET_CONTEXT_MGR already set [ 611.448571][T18956] binder: 18955:18956 ioctl 4018620d 20004a80 returned -16 [ 611.452941][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 611.612383][T18961] random: crng reseeded on system resumption [ 611.975867][T18974] FAULT_INJECTION: forcing a failure. [ 611.975867][T18974] name failslab, interval 1, probability 0, space 0, times 0 [ 611.980509][T18974] CPU: 3 UID: 0 PID: 18974 Comm: syz.5.3522 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 611.984281][T18974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 611.987582][T18974] Call Trace: [ 611.988659][T18974] [ 611.989677][T18974] dump_stack_lvl+0x16c/0x1f0 [ 611.991302][T18974] should_fail_ex+0x497/0x5b0 [ 611.992497][T18974] ? fs_reclaim_acquire+0xae/0x150 [ 611.993754][T18974] should_failslab+0xc2/0x120 [ 611.994926][T18974] __kmalloc_cache_noprof+0x68/0x420 [ 611.996220][T18974] __xdp_reg_mem_model+0x135/0x680 [ 611.997464][T18974] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 611.998870][T18974] ? page_pool_list+0x262/0x2f0 [ 612.000100][T18974] xdp_reg_mem_model+0x22/0x70 [ 612.001273][T18974] bpf_test_run_xdp_live+0x1cc/0x500 [ 612.002543][T18974] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 612.003972][T18974] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 612.005430][T18974] ? __pfx_lock_release+0x10/0x10 [ 612.006674][T18974] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 612.008166][T18974] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 612.009654][T18974] ? 0xffffffffa00045c0 [ 612.010697][T18974] ? 0xffffffffa00045c0 [ 612.011749][T18974] ? 0xffffffffa00045c0 [ 612.012785][T18974] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 612.014253][T18974] bpf_prog_test_run_xdp+0x827/0x1580 [ 612.015603][T18974] ? lock_acquire+0x2f/0xb0 [ 612.016740][T18974] ? __fget_files+0x40/0x3a0 [ 612.017891][T18974] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 612.019375][T18974] ? __fget_files+0x206/0x3a0 [ 612.020560][T18974] ? fput+0x67/0x440 [ 612.021537][T18974] ? __bpf_prog_get+0xa0/0x290 [ 612.022736][T18974] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 612.024177][T18974] __sys_bpf+0x1921/0x57a0 [ 612.025303][T18974] ? __pfx_lock_release+0x10/0x10 [ 612.026554][T18974] ? __pfx___sys_bpf+0x10/0x10 [ 612.027793][T18974] ? vfs_write+0x306/0x1150 [ 612.028985][T18974] ? __mutex_unlock_slowpath+0x164/0x690 [ 612.030451][T18974] ? fput+0x67/0x440 [ 612.031491][T18974] ? ksys_write+0x1ba/0x250 [ 612.032680][T18974] ? __pfx_ksys_write+0x10/0x10 [ 612.033954][T18974] __ia32_sys_bpf+0x76/0xe0 [ 612.035097][T18974] __do_fast_syscall_32+0x73/0x120 [ 612.036391][T18974] do_fast_syscall_32+0x32/0x80 [ 612.037663][T18974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 612.039325][T18974] RIP: 0023:0xf7fd0579 [ 612.040393][T18974] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 612.045362][T18974] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 612.047537][T18974] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 612.049582][T18974] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 612.051646][T18974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 612.053618][T18974] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 612.055594][T18974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 612.057545][T18974] [ 612.257188][T18978] team0 (unregistering): Port device team_slave_0 removed [ 612.262033][T18978] team0 (unregistering): Port device team_slave_1 removed [ 612.279939][T18980] IPv6: Can't replace route, no match found [ 612.309790][T18958] delete_channel: no stack [ 612.331057][T18983] tipc: Enabling of bearer rejected, already enabled [ 612.350992][T18986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3526'. [ 612.686464][T18993] affs: No valid root block on device nullb0 [ 613.069077][T18998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3528'. [ 613.379931][T19002] binder: BINDER_SET_CONTEXT_MGR already set [ 613.381541][T19002] binder: 19001:19002 ioctl 4018620d 20000040 returned -16 [ 613.906000][T19025] FAULT_INJECTION: forcing a failure. [ 613.906000][T19025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.910570][T19025] CPU: 2 UID: 0 PID: 19025 Comm: syz.4.3538 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 613.914288][T19025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 613.918087][T19025] Call Trace: [ 613.919289][T19025] [ 613.920386][T19025] dump_stack_lvl+0x16c/0x1f0 [ 613.922090][T19025] should_fail_ex+0x497/0x5b0 [ 613.923783][T19025] _copy_from_iter+0x29b/0x1400 [ 613.925524][T19025] ? trace_lock_acquire+0x14e/0x1f0 [ 613.927386][T19025] ? __alloc_skb+0x200/0x380 [ 613.929076][T19025] ? __pfx__copy_from_iter+0x10/0x10 [ 613.930957][T19025] ? __virt_addr_valid+0x1a4/0x590 [ 613.932766][T19025] ? __virt_addr_valid+0x5e/0x590 [ 613.934545][T19025] ? __phys_addr_symbol+0x30/0x80 [ 613.936307][T19025] ? __check_object_size+0x488/0x710 [ 613.938177][T19025] netlink_sendmsg+0x813/0xd70 [ 613.939776][T19025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.941196][T19025] ____sys_sendmsg+0x9ae/0xb40 [ 613.942488][T19025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 613.944047][T19025] ? get_compat_msghdr+0x11b/0x170 [ 613.945427][T19025] ___sys_sendmsg+0x135/0x1e0 [ 613.946678][T19025] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.948067][T19025] ? __pfx_lock_release+0x10/0x10 [ 613.949313][T19025] ? trace_lock_acquire+0x14e/0x1f0 [ 613.950509][T19025] ? __fget_files+0x206/0x3a0 [ 613.951649][T19025] __sys_sendmsg+0x16e/0x220 [ 613.952905][T19025] ? __pfx___sys_sendmsg+0x10/0x10 [ 613.954552][T19025] __do_fast_syscall_32+0x73/0x120 [ 613.955918][T19025] do_fast_syscall_32+0x32/0x80 [ 613.957206][T19025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 613.958900][T19025] RIP: 0023:0xf7f87579 [ 613.959994][T19025] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 613.965071][T19025] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 613.967295][T19025] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000600 [ 613.969399][T19025] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 613.971493][T19025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 613.973585][T19025] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 613.975665][T19025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 613.977751][T19025] [ 614.194347][T19034] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3542'. [ 614.406856][T19039] tipc: Enabling of bearer rejected, already enabled [ 614.840392][T19046] Bluetooth: hci5: Frame reassembly failed (-84) [ 614.845115][ T5960] Bluetooth: hci5: sending frame failed (-49) [ 614.847897][T16361] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 615.194087][T19056] sock: sock_timestamping_bind_phc: sock not bind to device [ 615.202969][ C1] net_ratelimit: 20 callbacks suppressed [ 615.202987][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 615.269652][T19063] FAULT_INJECTION: forcing a failure. [ 615.269652][T19063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.275477][T19063] CPU: 3 UID: 0 PID: 19063 Comm: syz.5.3552 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 615.278963][T19063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 615.282347][T19063] Call Trace: [ 615.283506][T19063] [ 615.284465][T19063] dump_stack_lvl+0x16c/0x1f0 [ 615.286026][T19063] should_fail_ex+0x497/0x5b0 [ 615.287588][T19063] _copy_to_user+0x32/0xd0 [ 615.289056][T19063] cec_ioctl+0x65b/0x2800 [ 615.290478][T19063] ? __pfx_cec_ioctl+0x10/0x10 [ 615.292065][T19063] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 615.293985][T19063] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 615.296016][T19063] ? do_vfs_ioctl+0x513/0x1950 [ 615.297590][T19063] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 615.299221][T19063] ? __pfx_lock_release+0x10/0x10 [ 615.300859][T19063] ? trace_lock_acquire+0x14e/0x1f0 [ 615.302598][T19063] ? __pfx_cec_ioctl+0x10/0x10 [ 615.304173][T19063] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 615.305897][T19063] __do_fast_syscall_32+0x73/0x120 [ 615.307541][T19063] do_fast_syscall_32+0x32/0x80 [ 615.309128][T19063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 615.311166][T19063] RIP: 0023:0xf7fd0579 [ 615.312516][T19063] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 615.318671][T19063] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 615.321352][T19063] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c05c6104 [ 615.323882][T19063] RDX: 0000000020000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 615.326420][T19063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 615.329026][T19063] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 615.331572][T19063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 615.334104][T19063] [ 615.442938][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 615.606746][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 615.612938][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 615.612968][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 615.624166][ T39] audit: type=1326 audit(1734184292.647:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19080 comm="syz.4.3559" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x0 [ 615.728221][ T5960] Bluetooth: hci2: unexpected event 0x04 length: 4 < 10 [ 615.852968][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 616.246428][T19089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3561'. [ 616.252967][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 616.492946][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 616.642959][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 616.643075][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 616.837272][T19110] 9pnet_fd: Insufficient options for proto=fd [ 617.064047][T19125] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3572'. [ 617.174632][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3573'. [ 617.680289][ T39] audit: type=1326 audit(1734184294.697:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19132 comm="syz.1.3575" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x0 [ 617.788103][ T5960] Bluetooth: hci3: unexpected event 0x04 length: 4 < 10 [ 617.833132][ T35] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 617.993111][ T35] usb 10-1: Using ep0 maxpacket: 8 [ 617.996247][ T35] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.998908][ T35] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 618.002153][ T35] usb 10-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 618.005368][ T35] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 618.007692][ T35] usb 10-1: Manufacturer: syz [ 618.010431][ T35] usb 10-1: config 0 descriptor?? [ 618.320270][T19140] tipc: Enabling of bearer rejected, already enabled [ 618.537829][T19142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3578'. [ 618.540200][T19142] netlink: 'syz.1.3578': attribute type 7 has an invalid length. [ 618.542149][T19142] netlink: 'syz.1.3578': attribute type 8 has an invalid length. [ 618.544196][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 618.576856][T19143] fuse: Bad value for 'user_id' [ 618.578200][T19143] fuse: Bad value for 'user_id' [ 618.620088][T19146] FAULT_INJECTION: forcing a failure. [ 618.620088][T19146] name failslab, interval 1, probability 0, space 0, times 0 [ 618.623326][T19146] CPU: 3 UID: 0 PID: 19146 Comm: syz.1.3579 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 618.626055][T19146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 618.628854][T19146] Call Trace: [ 618.629681][T19146] [ 618.630404][T19146] dump_stack_lvl+0x16c/0x1f0 [ 618.631625][T19146] should_fail_ex+0x497/0x5b0 [ 618.632803][T19146] should_failslab+0xc2/0x120 [ 618.633945][T19146] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 618.635320][T19146] ? skb_clone+0x190/0x3f0 [ 618.636440][T19146] skb_clone+0x190/0x3f0 [ 618.637567][T19146] netlink_deliver_tap+0xafd/0xca0 [ 618.638909][T19146] netlink_unicast+0x6b4/0x7f0 [ 618.640112][T19146] ? __pfx_netlink_unicast+0x10/0x10 [ 618.641459][T19146] ? genl_rcv_msg+0x4bd/0x800 [ 618.642647][T19146] netlink_ack+0x6a5/0xb20 [ 618.643842][T19146] netlink_rcv_skb+0x327/0x410 [ 618.645045][T19146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.646291][T19146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 618.647641][T19146] ? down_read+0xc9/0x330 [ 618.648825][T19146] ? __pfx_down_read+0x10/0x10 [ 618.650033][T19146] ? netlink_deliver_tap+0x1ae/0xca0 [ 618.651354][T19146] genl_rcv+0x28/0x40 [ 618.652363][T19146] netlink_unicast+0x53c/0x7f0 [ 618.653584][T19146] ? __pfx_netlink_unicast+0x10/0x10 [ 618.654997][T19146] ? __phys_addr_symbol+0x30/0x80 [ 618.656287][T19146] ? __check_object_size+0x488/0x710 [ 618.657656][T19146] netlink_sendmsg+0x8b8/0xd70 [ 618.658941][T19146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.660316][T19146] ____sys_sendmsg+0x9ae/0xb40 [ 618.661498][T19146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.662973][T19146] ? get_compat_msghdr+0x11b/0x170 [ 618.664355][T19146] ___sys_sendmsg+0x135/0x1e0 [ 618.665611][T19146] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.666915][T19146] ? __pfx_lock_release+0x10/0x10 [ 618.668227][T19146] ? trace_lock_acquire+0x14e/0x1f0 [ 618.669564][T19146] ? __fget_files+0x206/0x3a0 [ 618.670820][T19146] __sys_sendmsg+0x16e/0x220 [ 618.672009][T19146] ? __pfx___sys_sendmsg+0x10/0x10 [ 618.673277][T19146] __do_fast_syscall_32+0x73/0x120 [ 618.674569][T19146] do_fast_syscall_32+0x32/0x80 [ 618.675784][T19146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.677315][T19146] RIP: 0023:0xf7f65579 [ 618.678367][T19146] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 618.683128][T19146] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 618.685197][T19146] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 618.687122][T19146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.689100][T19146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.691062][T19146] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 618.693147][T19146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.695128][T19146] [ 618.759217][T19150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3581'. [ 618.786812][T19152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3582'. [ 619.293125][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout [ 619.893000][ T63] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 619.957466][T19166] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3586'. [ 619.961748][T19166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3586'. [ 620.043163][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 620.046630][ T63] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 620.048877][ T63] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 620.051160][ T63] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 620.053524][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 620.055946][ T63] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 620.058477][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 620.061796][ T63] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 620.064149][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.067117][ T63] usb 5-1: config 0 descriptor?? [ 620.151655][T19168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3587'. [ 620.284989][ T63] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 620.412938][ C1] net_ratelimit: 20 callbacks suppressed [ 620.412952][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 620.514632][ T62] usb 5-1: USB disconnect, device number 8 [ 620.520204][ T62] usblp0: removed [ 620.587714][ T35] usb 10-1: USB disconnect, device number 4 [ 620.642993][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 620.700565][T19176] FAULT_INJECTION: forcing a failure. [ 620.700565][T19176] name failslab, interval 1, probability 0, space 0, times 0 [ 620.704066][T19176] CPU: 0 UID: 0 PID: 19176 Comm: syz.1.3589 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 620.706901][T19176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 620.709767][T19176] Call Trace: [ 620.710652][T19176] [ 620.711445][T19176] dump_stack_lvl+0x16c/0x1f0 [ 620.712690][T19176] should_fail_ex+0x497/0x5b0 [ 620.713933][T19176] should_failslab+0xc2/0x120 [ 620.715183][T19176] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 620.716594][T19176] ? skb_clone+0x190/0x3f0 [ 620.717850][T19176] skb_clone+0x190/0x3f0 [ 620.718914][T19176] netlink_deliver_tap+0xafd/0xca0 [ 620.720221][T19176] netlink_unicast+0x6b4/0x7f0 [ 620.721448][T19176] ? __pfx_netlink_unicast+0x10/0x10 [ 620.722805][T19176] ? genl_rcv_msg+0x4bd/0x800 [ 620.724051][T19176] netlink_ack+0x6a5/0xb20 [ 620.725234][T19176] netlink_rcv_skb+0x327/0x410 [ 620.726501][T19176] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.727818][T19176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 620.729212][T19176] ? down_read+0xc9/0x330 [ 620.730349][T19176] ? __pfx_down_read+0x10/0x10 [ 620.731613][T19176] ? netlink_deliver_tap+0x1ae/0xca0 [ 620.732971][T19176] genl_rcv+0x28/0x40 [ 620.734007][T19176] netlink_unicast+0x53c/0x7f0 [ 620.735252][T19176] ? __pfx_netlink_unicast+0x10/0x10 [ 620.736633][T19176] ? __phys_addr_symbol+0x30/0x80 [ 620.737937][T19176] ? __check_object_size+0x488/0x710 [ 620.739337][T19176] netlink_sendmsg+0x8b8/0xd70 [ 620.740596][T19176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.741941][T19176] ____sys_sendmsg+0x9ae/0xb40 [ 620.743148][T19176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.744518][T19176] ? get_compat_msghdr+0x11b/0x170 [ 620.745825][T19176] ___sys_sendmsg+0x135/0x1e0 [ 620.747017][T19176] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.748374][T19176] ? __pfx_lock_release+0x10/0x10 [ 620.749694][T19176] ? trace_lock_acquire+0x14e/0x1f0 [ 620.751066][T19176] ? __fget_files+0x206/0x3a0 [ 620.752312][T19176] __sys_sendmsg+0x16e/0x220 [ 620.753527][T19176] ? __pfx___sys_sendmsg+0x10/0x10 [ 620.754877][T19176] __do_fast_syscall_32+0x73/0x120 [ 620.756226][T19176] do_fast_syscall_32+0x32/0x80 [ 620.757503][T19176] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.759156][T19176] RIP: 0023:0xf7f65579 [ 620.759598][T19180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3593'. [ 620.760195][T19176] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 620.767492][T19176] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 620.769657][T19176] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001280 [ 620.771717][T19176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.773926][T19176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.776031][T19176] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 620.778078][T19176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.780104][T19176] [ 620.802961][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 620.802964][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 620.803048][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 620.953123][T19186] FAULT_INJECTION: forcing a failure. [ 620.953123][T19186] name failslab, interval 1, probability 0, space 0, times 0 [ 620.957880][T19186] CPU: 1 UID: 0 PID: 19186 Comm: syz.1.3594 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 620.960589][T19186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 620.963252][T19186] Call Trace: [ 620.964108][T19186] [ 620.964884][T19186] dump_stack_lvl+0x16c/0x1f0 [ 620.966128][T19186] should_fail_ex+0x497/0x5b0 [ 620.967380][T19186] ? fs_reclaim_acquire+0xae/0x150 [ 620.968726][T19186] should_failslab+0xc2/0x120 [ 620.969928][T19186] __kmalloc_noprof+0xce/0x4f0 [ 620.971130][T19186] ? tomoyo_realpath_from_path+0xbf/0x710 [ 620.972492][T19186] tomoyo_realpath_from_path+0xbf/0x710 [ 620.973848][T19186] ? tomoyo_path_number_perm+0x235/0x5b0 [ 620.975287][T19186] tomoyo_path_number_perm+0x248/0x5b0 [ 620.976690][T19186] ? tomoyo_path_number_perm+0x235/0x5b0 [ 620.978145][T19186] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 620.979722][T19186] ? d_alloc_parallel+0x6b8/0x12b0 [ 620.981026][T19186] tomoyo_path_mknod+0x10d/0x190 [ 620.982297][T19186] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 620.983683][T19186] ? get_current_fs_domain+0x184/0x1f0 [ 620.985036][T19186] security_path_mknod+0x161/0x310 [ 620.986289][T19186] lookup_open.isra.0+0x54f/0x14c0 [ 620.987593][T19186] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 620.988911][T19186] ? unmap_huge_pmd_locked+0x8b0/0xbc0 [ 620.990265][T19186] ? lock_acquire+0x2f/0xb0 [ 620.991366][T19186] ? path_openat+0x153e/0x2d60 [ 620.992551][T19186] ? unmap_huge_pmd_locked+0x8b0/0xbc0 [ 620.993890][T19186] ? __pfx_down_write+0x10/0x10 [ 620.995082][T19186] ? mnt_get_write_access+0x20c/0x300 [ 620.996434][T19186] path_openat+0x904/0x2d60 [ 620.997575][T19186] ? __pfx_path_openat+0x10/0x10 [ 620.998813][T19186] ? __pfx___lock_acquire+0x10/0x10 [ 621.000116][T19186] ? lock_acquire.part.0+0x11b/0x380 [ 621.001398][T19186] ? find_held_lock+0x2d/0x110 [ 621.002573][T19186] do_filp_open+0x20c/0x470 [ 621.003702][T19186] ? __pfx_do_filp_open+0x10/0x10 [ 621.004940][T19186] ? find_held_lock+0x2d/0x110 [ 621.006177][T19186] ? alloc_fd+0x41f/0x760 [ 621.007252][T19186] do_sys_openat2+0x17a/0x1e0 [ 621.008406][T19186] ? __pfx_do_sys_openat2+0x10/0x10 [ 621.009683][T19186] ? __fget_files+0x206/0x3a0 [ 621.010828][T19186] __ia32_compat_sys_openat+0x16e/0x210 [ 621.012177][T19186] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 621.013662][T19186] ? ksys_write+0x1ba/0x250 [ 621.014740][T19186] __do_fast_syscall_32+0x73/0x120 [ 621.015992][T19186] do_fast_syscall_32+0x32/0x80 [ 621.017169][T19186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 621.018675][T19186] RIP: 0023:0xf7f65579 [ 621.019655][T19186] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 621.024279][T19186] RSP: 002b:00000000f509555c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 621.026318][T19186] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000280 [ 621.028280][T19186] RDX: 0000000000002040 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.030207][T19186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 621.032155][T19186] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 621.034064][T19186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 621.035993][T19186] [ 621.036871][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.040612][T19186] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.043347][ T35] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 621.043798][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 621.167599][T19193] netlink: 'syz.4.3596': attribute type 5 has an invalid length. [ 621.240282][ T35] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 621.252049][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.257935][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.260953][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 621.264476][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.266758][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.269596][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 621.280116][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.283023][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.285843][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 621.288491][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.292020][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.297255][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 621.299793][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.302048][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.305745][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 621.312140][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.314381][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.317074][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 621.319478][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.321682][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.324927][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 621.327554][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.330461][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.336737][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 621.339872][ T35] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 621.342625][ T35] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 621.352226][ T35] usb 10-1: Product: syz [ 621.369629][ T35] usb 10-1: Manufacturer: syz [ 621.373134][ T35] usb 10-1: SerialNumber: syz [ 621.382391][ T35] usb 10-1: config 0 descriptor?? [ 621.386837][ T35] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 621.452938][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 621.572360][T19202] binder: Bad value for 'max' [ 621.597056][ T5992] usb 10-1: USB disconnect, device number 5 [ 621.601387][ T5992] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 621.683008][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 621.842945][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 621.852942][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 621.896994][T19207] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3599'. [ 621.901401][T19207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3599'. [ 622.411092][ T39] audit: type=1800 audit(1734184299.427:379): pid=19210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.3600" name="/bus" dev="overlay" ino=1601 res=0 errno=0 [ 622.628863][T19223] FAULT_INJECTION: forcing a failure. [ 622.628863][T19223] name failslab, interval 1, probability 0, space 0, times 0 [ 622.632510][T19223] CPU: 3 UID: 0 PID: 19223 Comm: syz.0.3603 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 622.635276][T19223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 622.638036][T19223] Call Trace: [ 622.638935][T19223] [ 622.639708][T19223] dump_stack_lvl+0x16c/0x1f0 [ 622.640904][T19223] should_fail_ex+0x497/0x5b0 [ 622.642140][T19223] ? fs_reclaim_acquire+0xae/0x150 [ 622.643477][T19223] should_failslab+0xc2/0x120 [ 622.644722][T19223] __kmalloc_noprof+0xce/0x4f0 [ 622.645986][T19223] ? kasan_save_track+0x14/0x30 [ 622.647273][T19223] ? fuse_direct_io+0x5b3/0x2580 [ 622.648572][T19223] fuse_direct_io+0x5b3/0x2580 [ 622.649848][T19223] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 622.651316][T19223] ? __pfx_fuse_direct_io+0x10/0x10 [ 622.652677][T19223] ? __pfx_generic_write_checks+0x10/0x10 [ 622.654160][T19223] fuse_direct_write_iter+0x64f/0x830 [ 622.655595][T19223] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 622.657142][T19223] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 622.658576][T19223] ? rcu_is_watching+0x12/0xc0 [ 622.659833][T19223] ? trace_lock_acquire+0x14e/0x1f0 [ 622.661188][T19223] fuse_file_write_iter+0x66e/0x8c0 [ 622.662551][T19223] vfs_write+0x5ae/0x1150 [ 622.663783][T19223] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 622.665388][T19223] ? __pfx_vfs_write+0x10/0x10 [ 622.666655][T19223] ? __fget_files+0x40/0x3a0 [ 622.667894][T19223] ksys_write+0x207/0x250 [ 622.669031][T19223] ? __pfx_ksys_write+0x10/0x10 [ 622.670322][T19223] __do_fast_syscall_32+0x73/0x120 [ 622.671680][T19223] do_fast_syscall_32+0x32/0x80 [ 622.672958][T19223] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 622.674616][T19223] RIP: 0023:0xf7f94579 [ 622.675686][T19223] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 622.680482][T19223] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 622.682669][T19223] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000e80 [ 622.684724][T19223] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 622.686777][T19223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 622.688872][T19223] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 622.690937][T19223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 622.693010][T19223] [ 622.706038][T19228] netlink: 'syz.4.3605': attribute type 5 has an invalid length. [ 622.737121][T19223] ------------[ cut here ]------------ [ 622.738623][T19223] kernel BUG at lib/iov_iter.c:626! [ 622.740000][T19223] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 622.742573][T19223] CPU: 1 UID: 0 PID: 19223 Comm: syz.0.3603 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 622.746116][T19223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 622.748890][T19223] RIP: 0010:iov_iter_revert+0x533/0x5a0 [ 622.750299][T19223] Code: 89 e6 48 c7 c7 c0 1d 90 8e e8 49 db 31 00 e9 b1 fd ff ff e8 6f 46 65 fd eb 95 e8 98 46 65 fd e9 46 fb ff ff e8 5e be 02 fd 90 <0f> 0b 48 8b 3c 24 e8 82 46 65 fd e9 97 fb ff ff 48 8b 7c 24 08 e8 [ 622.755505][T19223] RSP: 0018:ffffc90003647948 EFLAGS: 00010293 [ 622.757082][T19223] RAX: 0000000000000000 RBX: 0000000000000050 RCX: ffffffff84967b80 [ 622.759136][T19223] RDX: ffff88802140a440 RSI: ffffffff84967f92 RDI: 0000000000000001 [ 622.761159][T19223] RBP: ffffc90003647d88 R08: 0000000000000001 R09: 0000000000000000 [ 622.763198][T19223] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000000 [ 622.765235][T19223] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88806817fe00 [ 622.767292][T19223] FS: 0000000000000000(0000) GS:ffff88802b500000(0063) knlGS:00000000f50e6b40 [ 622.769737][T19223] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 622.771448][T19223] CR2: 0000000020021000 CR3: 0000000072fa6000 CR4: 0000000000352ef0 [ 622.773551][T19223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 622.775594][T19223] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 622.777616][T19223] Call Trace: [ 622.778503][T19223] [ 622.779282][T19223] ? die+0x31/0x80 [ 622.780257][T19223] ? do_trap+0x232/0x430 [ 622.781357][T19223] ? iov_iter_revert+0x533/0x5a0 [ 622.782655][T19223] ? iov_iter_revert+0x533/0x5a0 [ 622.784170][T19223] ? do_error_trap+0xf4/0x230 [ 622.785405][T19223] ? iov_iter_revert+0x533/0x5a0 [ 622.786729][T19223] ? handle_invalid_op+0x34/0x40 [ 622.788017][T19223] ? iov_iter_revert+0x533/0x5a0 [ 622.789269][T19223] ? exc_invalid_op+0x2e/0x50 [ 622.790507][T19223] ? asm_exc_invalid_op+0x1a/0x20 [ 622.791839][T19223] ? iov_iter_revert+0x120/0x5a0 [ 622.793145][T19223] ? iov_iter_revert+0x532/0x5a0 [ 622.794489][T19223] ? iov_iter_revert+0x533/0x5a0 [ 622.795795][T19223] ? iov_iter_revert+0x532/0x5a0 [ 622.797092][T19223] fuse_direct_io+0xf0e/0x2580 [ 622.798383][T19223] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 622.799849][T19223] ? __pfx_fuse_direct_io+0x10/0x10 [ 622.801393][T19223] ? __pfx_generic_write_checks+0x10/0x10 [ 622.802872][T19223] fuse_direct_write_iter+0x64f/0x830 [ 622.804337][T19223] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 622.805930][T19223] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 622.807410][T19223] ? rcu_is_watching+0x12/0xc0 [ 622.808702][T19223] ? trace_lock_acquire+0x14e/0x1f0 [ 622.810064][T19223] fuse_file_write_iter+0x66e/0x8c0 [ 622.811433][T19223] vfs_write+0x5ae/0x1150 [ 622.812563][T19223] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 622.814118][T19223] ? __pfx_vfs_write+0x10/0x10 [ 622.815375][T19223] ? __fget_files+0x40/0x3a0 [ 622.816578][T19223] ksys_write+0x207/0x250 [ 622.817715][T19223] ? __pfx_ksys_write+0x10/0x10 [ 622.819009][T19223] __do_fast_syscall_32+0x73/0x120 [ 622.820345][T19223] do_fast_syscall_32+0x32/0x80 [ 622.821559][T19223] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 622.823211][T19223] RIP: 0023:0xf7f94579 [ 622.824305][T19223] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 622.829354][T19223] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 622.831494][T19223] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000e80 [ 622.833563][T19223] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 622.835617][T19223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 622.837658][T19223] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 622.839726][T19223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 622.841752][T19223] [ 622.842561][T19223] Modules linked in: [ 622.843678][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.845354][T19223] ---[ end trace 0000000000000000 ]--- [ 622.848782][T19223] RIP: 0010:iov_iter_revert+0x533/0x5a0 [ 622.850829][T19223] Code: 89 e6 48 c7 c7 c0 1d 90 8e e8 49 db 31 00 e9 b1 fd ff ff e8 6f 46 65 fd eb 95 e8 98 46 65 fd e9 46 fb ff ff e8 5e be 02 fd 90 <0f> 0b 48 8b 3c 24 e8 82 46 65 fd e9 97 fb ff ff 48 8b 7c 24 08 e8 [ 622.856475][T19223] RSP: 0018:ffffc90003647948 EFLAGS: 00010293 [ 622.858828][T19223] RAX: 0000000000000000 RBX: 0000000000000050 RCX: ffffffff84967b80 [ 622.861830][T19223] RDX: ffff88802140a440 RSI: ffffffff84967f92 RDI: 0000000000000001 [ 622.864818][T19223] RBP: ffffc90003647d88 R08: 0000000000000001 R09: 0000000000000000 [ 622.867763][T19223] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000000 [ 622.870240][T19223] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88806817fe00 [ 622.872407][T19223] FS: 0000000000000000(0000) GS:ffff88802b500000(0063) knlGS:00000000f50e6b40 [ 622.874845][T19223] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 622.876727][T19223] CR2: 0000000020021000 CR3: 0000000072fa6000 CR4: 0000000000352ef0 [ 622.878955][T19223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 622.881107][T19223] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 622.883307][T19223] Kernel panic - not syncing: Fatal exception [ 622.885508][T19223] Kernel Offset: disabled [ 622.886635][T19223] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:51:39 Registers: info registers vcpu 0 CPU#0 RAX=00000000fdcc81fd RBX=0000000034d2d523 RCX=000000000000000c RDX=ffffc90006aa7748 RSI=00000000fdcc81fd RDI=0000000044c55e99 RBP=0000000000000001 RSP=ffffc90006aa76b8 R8 =0000000000000000 R9 =0000000002337e02 R10=ffffffff901cc757 R11=00000000000a201e R12=0000000000000cc0 R13=ffffc90006aa7718 R14=000000000000000c R15=000000000000000c RIP=ffffffff84c7ff25 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f755c0 CR3=0000000063912000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142c35 RDI=ffffffff9a665300 RBP=ffffffff9a6652c0 RSP=ffffc90003647260 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7973203a6d6d6f43 R12=0000000000000000 R13=0000000000000020 R14=ffffffff85142bd0 R15=0000000000000000 RIP=ffffffff85142c5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020021000 CR3=0000000072fa6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90007240000 RBX=ffff8880218e8000 RCX=ffffffff817a6797 RDX=1ffff1100431d24d RSI=ffffffff86562d2f RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc90000548eb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000548ff8 R12=0000000000000000 R13=dffffc0000000000 R14=ffff8880218e9268 R15=0000000000000000 RIP=ffffffff86562d57 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3eba21 CR3=0000000059c3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000bc4084 RBX=0000000000000003 RCX=ffffffff8b1a17a9 RDX=ffffed10056e6fee RSI=ffffffff8bb15780 RDI=ffffffff81701db9 RBP=ffffed10039df488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901cc750 R15=0000000000000000 RIP=ffffffff8b1a2b8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50a4da4 CR3=0000000072fa6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000