last executing test programs: 15m15.894578764s ago: executing program 1 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x5) r3 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0) 15m15.814718864s ago: executing program 1 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/102392, 0x18ff8}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x677c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @rand_addr=0x64010301}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="42040000801000001400350077673200"/28], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) socket(0x15, 0x5, 0x0) r5 = memfd_create(0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20242, 0x0) 15m15.63898235s ago: executing program 1 (id=61): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x3}}, 0x20) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}}], 0x9, 0x40000040, 0x0) 15m15.55527324s ago: executing program 1 (id=62): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000006000000020000000400000005000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open_tree(r4, &(0x7f0000000300)='./file0\x00', 0x82100) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 15m15.36468764s ago: executing program 1 (id=65): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f044}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="ecce24a0", @ANYRES16=r2, @ANYBLOB="010329bd7000fcdbdf2502000000080005000d0000000800040008000000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%ps \x00'}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x2a8, '\x00', r3, r5, 0x0, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) r8 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0xb, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x829}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x1, 0x81, 0x97}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x87, 0x97, 0xfb, 0x20, 0xc}, 0x21, &(0x7f0000000140)=ANY=[@ANYBLOB="050f2100030a10046925cebb6510020c0205000b1001049d000c070200e6000000"], 0x5, [{0xc2, &(0x7f0000000a80)=@string={0xc2, 0x3, "ed40339f3217ebc9fbb3d63d2785c1afc58e353b61925a53b285f2cf56214e3b8b30836040804f2606bba50ff9c60fccd7995962e84abaf38972f6e393af39ef30e2f65bf702c779e299002e0e6fb82cce983308f6ba0a0a34d6e3174320ed9346350dcf0f8c08e41424711a84cb22a0d50df87b915e4a0e4978e18753853533068b0466ea22d8f40f06545eeb304329957edb060c32529c39c3343500ffc269f26ce1b108f90266f4bcd04977cb4baf8fabdf9f7227e965e52a9802c63548e3"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io$hid(r8, &(0x7f0000000480)={0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="40054800000048277071a417b83ba52643eda67f2884f2d04fcd8e4ebf34eac557fc06143cba27a5dd71347b80852c65bec4a91a8e005dfe2f18ecab6b216c76906db08b97204974fe93b47009cf"], &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000400)=ANY=[@ANYBLOB="002208000000257b821824804000"], &(0x7f0000000440)={0x0, 0x21, 0xffca, {0x9, 0x21, 0x5255, 0x2, 0x1, {0x22, 0xe76}}}}, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x40, 0x17, 0x36, "cd008bbce53316e0ea040cd260c5ea82784c7a3b9bb2fc592c15633b95b7890d9ab2450dc140505d5e91a4e0e7970e8e6e15f23ad27a"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x1, 0xb7, "cbef6d32eb35e55265f9a43d244d6b5f608acb1ee4b4d52820f2f88a0820d6a90e131559631b355e1ad6566a982e583a012a9294f24fcba58204f645ee093ee0af7dc6d7aa895860f78178400f17361d8493eaea6cf5451071ee45747772eb2ae696283cfaa7bae90aacddf87992d0712997a3a93944662441ea5e6f316515e309afcaa33b0d3f96047d0c7b91a1928373a5be828ee41ef64c5c6989cfa76332259bd396736f36734c209daa328f1a4e7375f49386ce8d"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x6}}) ppoll(&(0x7f0000000080)=[{r0, 0xa221}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="00000000b7040000080000008500000095000000950000000000000000000000016ad8c47a6335d7488d84bb552754280a1017d726bf2a9afdba3872739ffc3d1b8b36d4f847f5d8ec677685e8a7731fb1d732076c262ae3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 15m13.785209117s ago: executing program 1 (id=72): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev}, &(0x7f00000004c0)=0xc) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000500)={@dev, 0x0}, &(0x7f0000000540)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x54, 0x42, 0xc, @dev={0xfe, 0x80, '\x00', 0x3b}, @local, 0x700, 0x80, 0x3, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000e80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f00000007c0)={0x678, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r7}, {0x168, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xff, 0xfc, 0x7f, 0xbce4}, {0x7, 0x7, 0x2, 0x7}, {0x7, 0x92, 0x20, 0xe34}, {0x9e, 0x10, 0x4, 0x2}, {0x2, 0x7, 0x13, 0x80}, {0x1, 0x7, 0x0, 0x200}, {0x7, 0x2, 0x4, 0x2}, {0xfff9, 0xe, 0x7, 0x6}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x678}, 0x1, 0x0, 0x0, 0x44000}, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r15 = openat$cgroup_ro(r14, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r15, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r15, &(0x7f0000000180), 0x12) 5.194941472s ago: executing program 0 (id=3688): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800088008000100677470000c00028008000200", @ANYRES32, @ANYBLOB], 0x38}}, 0x0) keyctl$dh_compute(0x18, 0x0, &(0x7f00000002c0)=""/13, 0xd, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f0000000200)=""/19, 0x13) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r1, 0xb9}, 0x0, &(0x7f00000003c0)="d3c69fbbc4305d2012e3100c4c382e58207d6e2432a6e7e20b6f10a132231f13538175e9718d57832d20fa5225e50291cd3e5c3a3808aa6521c6298f6b7b83d4a4c931e1faf83d9266e7f01bb52d3a7988757321f957dd83a9f9e89fea3d81e85f9fe0d004da666cb732fc0b923eab591abdc44458cc20c70f33d021f52ecbb9d72b6f0ede59e15fbaf84883937871fa382f4e4646da7c5b2e04d55fb353da903f3ac36bbd2999c203aa62de448bfe85d24997e7b415e52624", &(0x7f0000000700)) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa706ab144ffe0080045090000000000000000000000000000ffffffff"], 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x891d, &(0x7f0000000100)={'veth1_to_batadv\x00', @ifru_data=0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="bfeb010018000000000000003000000030080000020000000000000001d236b6f36752b34b000064040800000004000000020000002000000000000000000000090300000000798ff54240866b2faef01900"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bind$802154_raw(r2, &(0x7f0000000300)={0x24, @long}, 0x14) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x3}) msgctl$IPC_SET(0x0, 0x1, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0xa0800) bind$802154_raw(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000007b0000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000680)={0x67, 0x9, 0x6}) r6 = openat$cdrom(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500003d5e000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r10 = dup2(r9, r7) ioctl$DRM_IOCTL_SET_MASTER(r10, 0x641e) ioctl$CDROM_SELECT_DISK(r6, 0x5322, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000000c0)={0x3, 0xd0, 0x7, 0x3, 0x0, 0x5, 0x14, "c1853b568dd3660cb6697db9ac144a1b18f019bd", "436b2d2f6f747dbd04c74cf5eb2ce0b5f67993e5"}) 5.146760297s ago: executing program 0 (id=3690): r0 = io_uring_setup(0x2a0c, &(0x7f0000000380)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0xfffffffa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f}, 0x4c) socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r2, r3, 0x0, 0x10007) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r7}, 0x10) setrlimit(0x7, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x102, 0x0, 0x0, 0xc1, &(0x7f0000000000), &(0x7f00000004c0)="98cfd9b3d95735bb254c825d70dfc3f05fda1ad8121ad3951407df24c66d5df5b246f57e2cbc76488a7cefe4e07fda4416772890a9a840ffb5026bb5af5eac95ee6507c5389031180dae4cf819010a0285abc18370c933ec7bd00d3c7403c954d6f362bb1d2b181736232b174e56920a032b5c67c3ead036e9bcedf6c66c4fe21ed2f301fb378aba3f1d36acc1c97ba27f703538c8dbdc04975f8b006f9ae8a8d92c9177f311387a9baa1baade83c9653ab05f6a421d6a4c4c9a0e2d71c872892a"}, 0x4c) recvmsg(r1, &(0x7f0000003e80)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 4.996832494s ago: executing program 0 (id=3692): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f010000"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000104000000000000eeffff000000", @ANYRES32=0x0, @ANYBLOB="f779000000000000200012800c0001006d6163766c616e00100002800a0009000180c200000e000008000500", @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) semget$private(0x0, 0x0, 0x54c) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) modify_ldt$write2(0x11, &(0x7f0000000000)={0x4, 0x20001000, 0x400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESOCT=r4], 0x2e) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)=0x3) 3.976844813s ago: executing program 3 (id=3695): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x402243) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02a200000004000000080000000800000000000000b22460beff30abf14f424009d9f161f0143be8d7d6616e9cbfff1e8d1c9bcbcfde68b571349b1e1513e8aea0c851cdd3a7715623d5d08dec9d9edcc4ce4a67e8c91ed4774c049875830d42c3521a05512f6ab1525ab246708dcef95f5358d90bb4a9c911bce412f382679f84a4e6f961b0745d3bb91ade46fee1ac2f75d97f46ce06a0720ab6b25370c597e4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00\x00\x00\b\x00'/28], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r2 = getpgid(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x6) futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2) futex(0x0, 0xb, 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x22020600) r5 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) fstat(r5, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x6d63, 0x3, 0xc, 0x7f}, {0x802, 0xf8, 0x77, 0x8}, {0x1e3, 0x53, 0x5}, {0xfff7, 0x14, 0x81, 0x1}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x10010, r1, 0xe5050000) syz_clone(0x3610d27ea72f8336, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) 3.313575269s ago: executing program 0 (id=3696): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd2a}, 0x24}, 0x1, 0x0, 0x0, 0x30000854}, 0x0) recvmmsg(r1, &(0x7f0000002880)=[{{0x0, 0xf0ff, &(0x7f00000027c0)=[{&(0x7f0000000640)=""/29, 0x1d}, {&(0x7f0000002680)=""/57, 0x39}], 0x2}, 0x1}], 0x1, 0x10021, 0x0) sendmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000f00)="96f682", 0x3}], 0x1, &(0x7f0000006dc0)=ANY=[@ANYBLOB="1010"], 0x1010}}], 0x1, 0x4800) 3.239626445s ago: executing program 0 (id=3698): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f010000"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000104000000000000eeffff000000", @ANYRES32=0x0, @ANYBLOB="f779000000000000200012800c0001006d6163766c616e00100002800a0009000180c200000e000008000500", @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) semget$private(0x0, 0x0, 0x54c) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) modify_ldt$write2(0x11, &(0x7f0000000000)={0x4, 0x20001000, 0x400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESOCT=r4], 0x2e) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)=0x3) 3.116483203s ago: executing program 2 (id=3700): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f00000004c0)="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", 0x17b}], 0x2}}, {{&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="5825be57aff9352b356be67ca2746357d17879ae", 0x14}, {&(0x7f0000000840)="598fd6d0ad2dc5c4086d1aaa", 0xc}], 0x2}}], 0x2, 0x0) munlockall() ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000014c0)=ANY=[@ANYBLOB="3a2f08000003030001000000000046b70fc00065000001029078ac1414bbac1414aa940400001407907864010102121c78ace5f640b3c04d94f791874c6c6c5d6eb0a09028564a3f4a6e5b72d2adbd79c62ca584f53bfb528f4d0687b5622dbab2b2513be93ef1b84bec75fcf0fb871b7a708c8738716e81558bfef76a71b62d7279e5788e93b84cb94b9530cee51858be3fcfbdee37d837b6329d2ad7fa1872b14491932874c4ba6a53e8bea1706c84c49c1f0b8767c3aaff5e78984cb7bed0c20bd0c7c68567f645b77d455f85babc8d89202225af952261d034477c37364b113f4d74e7c420e6e34be16f84349f2e09cb29dfba33218691955d075db4bb60757262193f84d0e75524bc5f62ffb1f59eabd0daa8b843922d26247dc48469204f7d1c5086b5b0f15eb69a1f4c169896e99612da1ae7404f75c577bf41aa9cd6bae1aa786f36e4549f13eb1409dca4f2ce0624771e6b7c2ba86f88f344ed3b834aaf57eeb50a59a875976fac6a3860f187fb5c80c5bf54c327159808b99a6ada4dd1097c8d465da17bd650ab1fed097c96507564db38655ac027d4f5a464b7d9412968774c9a563124a31fd691361e67bca541633da9560713d50ddf99c0ce549c8d55f40de32af065dba01f52c5a2e957c46d6c210b118f09c16d6789dbdddfbcdd80a881b940ba60ffd9980517cd1edf9dc3268f74badb324e12b1a1b8ee1ff75e4693993d274c8934f4b18aec6ef2ea81b7beaaa8285610800b7b4d5054a2aeea43a7402dcba74c3f24602bb3055bda6692ace822307f2a34b69a4c5f7604626b237d5e986151956b22771e17c02abc2d048748b9eb1fc5ddadc88733e46d0f8967d30c40ef6405159ee9cace75c2a2aad207bef2f3da06b988104c2836f9fdeed2befa87f5c56b668e4b426bb54f2849dd2331ed106c78d9ef62c79899ef72d60435b16f2ff6e20c934053121557696980b3b79609b2a3f650dd4f5762c4ecb2e03cb6cdf65c8ec9373a9a4c721f9085cb47ad58d0a0ed56d6273bcd362e718f35dced76970f8673332394fc55c3574b7139f43b04d5ea2fe5f1f1c4579ddbcdd59c5d46a657060a482a2353fd7fb21fd20b4e04910f0a2aa561364e888efe71e97b69a906a0ef5d38ca4c105c2469756fab9e86e549ecacc5df1db83c257d001527ce4af365c6a66bede65e9ec4784a2f436342e442c119a0c2a627e2ea0a7661250dd94e482623926829fda547864e0d38bb6264acc4681450de6879469c4b63169aec191857ca3ef2319ca5534a83a482af583e90e5b87d27e12b01c82a43301e72a6b2872bba838c39817a4467e10de88951831b666a00d72e8f955f06c15835bd103f7e4913a2ba16b049e9bf4832a6fb0a911e7226d1f1d40426c0f19902588d0bfa4c763d01f6144449cc7fe6f3101453d158365b69d7884bd596edc0c3bdd44b6c28780a0576280f2c14421d311245b44dba2d13eae1ebf1a7990c0714dfef79f5f6eaab4af726d838df526bde0a867a3910625cc4c1a52aef1902ea1df164de404549c544caf6ead71cc34126a49c882525b3d8580da5d47d9522bfddc9808a8e6d76b6cb2aae141acc6cc1350ccd36305fc9329fdfb97d9f5331caf64e658609b1ece9c94003e3c453ad2ff74b39cb6b434c0e658a51a7a008bf6d00021b10aad3fc072f9b3ea256bef52ecb79d75dc57864d8830bbf1dee89cdceb51a2979b688300453caa6a4513809d9c91628b1eb4538d124efe34daa46d891072d2df0cffd840072145c8a544f0acfbc33459d78732566a0c88fae34bca3841ba5804349b364ca9cbdea9da33e006d737a54ddfd101ec8e855ce8bd319c62359e7e03c10db84654e842e5d10381fd74ec238bf19e24cc1d285c55c06a96f8747cb801e89c084957f59befbed47647324122c68b42b752eb7358e4e88b3e998de84ea43e02c2ffb037b60a2542fb5f4ca2cce119a99981b17017937a2183e553c9eb5d4d71fbc01fcebef15a108c8a07594d44ad0f55db1c8e6f840094253c257c6952c3032eab7fb4ce8f06b1852efb06444ff526bed9cc9d5c3208d61345754d85326a5eb9bf741ac08656475d8db06707c8e257af0455532321feaee836cf0630341c9421076c4558b89a0f4c97c14b7856c80b4b5022753405e537f923bed2fdaf725a32da9f2d94909f39b9db06da5f6035fb01d65a2cb4c7ffcaa0059a3318b935c4624c183fe0617759361f9ca55f1715a820255562389541d02d12130dcce320c901f4eb8e7ca0e29868f62985c1e5276c01cee6d08a59392da072731f85d99912d357aa5e045bb62cbd01bab243837fe0e3f19ddee6d083c6137cad4b9a5c3088544e2133dd9b117f5831c60c319efe5397b81c3a115df2fa4f3e692d973149019bba17bbfd1d05ccc847a66f44fbb51e30a42c5a12165868dd830b831efd36dc921b8c778eaddedf9226963220f83856e1d3ad6fa29a7b8953fce296cf7853f1164b9855815f673971e7bb8292e6e851551750115fc2b915f62ca7f30c7303f7dbce49e65f6961c49ad5db4c58c9f6f897cb0b4b2f73893c06a53ca961eac8b8fb5712f486f9eb80684c970cce377d8941848b0664bb05e4e256926f846c16edf83746ab3addda328d18e55767a46a532f6c0164796fecbcc0aab07189f6805db8ab9ab57a548d292487ba285d65baab0f51ecf736b18d429ef2a028b60491382738d9e0b4c7e405b39868c0c78bea655471767d89ae05b867ccbe7e1e1a2b06acffbda819d0326931717f8bf422740054873d70a0d5984466462fe513730e781de0dbe264476953b82a25c8743896c05e538ba41af8cf52b4f5f0819f7e6a342701925c610cbb08136b463feb6c77b9dc22c9f7e991f39c65a75424e555ea170cd4cc2ea056844e34e132ec42f1a9c2d1985ba618683f851a0023608eb328b0b80bd5dbd175bad6b9c71c3462444277cd40aa36267598c3c73742d730dadbae80bdc9d3cefeca528ca3920ac64c77623e1aac8aa11015d3663bebd2f6d9fead3dbe99960518999687c7750fe1cff1822402d84f7d7a2f2d2ebecac2e1832a2ce72791cd68ae1ac3622b97ff4fdbbcb16d8c9b1275f6a80127d6a625a3f854fc6a3fffe31e7c366eae8152706335863cc583d037f152fdd2dbb49105658d4557680ed531cc57025546110863788363e279bbcfc2b2e80d7cc05565b024b4b0fb0e7f87693f2c6817947b0232108dc201ec333bb3ba53f6fa467c88ed61347e1363f3eeb704ef6ebbd41c1699209a742abb393eee3508cf51c1307441d979ce4bee5e1fda53e737d1abb0324468c71a1a94557b88664d0f1ed3ac6ddbacc64558b355a63b859dbf1aab82b9d5be293c30b5e0cf29a68814c07f24a69e8dda34432087f10bf402e4a0a9417834acfdd296784909c9099e54a03bb470d6faaa78fcd936f75f3968fa8769c5bb890a5f0c7bb1622e06886e82fd19f49b1c6b56c9a4e8a427d5f04039251a1d3e0dda1e5b74686ba47942fb28f7095f02ec76f3933ed850394a9c7e7c126a85ecee6b103844b945060bf35999a147f649ce7809cb8b1b539c748a96fdc11529263d4c0f1a156c74ed011744d4cfe442f9105c4b946f01a9db5583eccd387bb6088d0fe534c29aa1649f9cad23d501f4012a1c2f12821b971b93259e5c778bf708f87a703a1c9f7a022ac31349ecc7ac41c1b2c2fb311c36b1ec852155228a19ec49482470118b8d5d8fcd892a24c20fa79f2ba8303905820f6f802ac649b1a210e990279d15eb7c3e096423980ea0dcb206f7c5ae8a924e14db3ec4651e6747f8e32b3d22363d836d2dd4d22cb1bebc9cfc63d5fd9d297b45ecf542c10fa0bbff6158d2b907cf953ec8f60613af50f5f034d7c8bb89330201a981ec91b0ce7e6ee4ac6885b741a0afb6c4bbabaad12558ce71953d2f6c4b126eba1e1cfbccdfe5899a24cb2917b666027b229825a7bb5eda25910b84456c680b8d4da3835146b36c55d27859f2d1e1cca871cf98ed0ccb6e0a453c9cc17fd330f6aef279e60a5779bd70119c3ddb59de7b331b2cdcf1a72dad3b6b489c16d331572b3ade67c9de525f84d4e77457ea6c408c2b9baf12f74d7db637e4057a34526f2c34fe30d8a8c8399fc2fb72346044684f8c978a25f3fa536e737b73fb5681f0abf533ced3111ace11d042e01dd68b284de338bac52395a97095d59be3bef2bb83fcd83478825b159006a37df8a4ec750a033034475a7d3b9d25e99fb09122dbdaa6cce0d93a9d22ba5f23d23ccb1b37d68cdd753f55599f25556efe490fd91fbf4315609cbe531d8e00ee819a419add4d0b36f067fc50e053d9b3dd4f8c5652b447a232d5b928e8711563fff9d5ab06a644bce254233a6fe91140ba2c2c7e4b14942a2ed9fb367e4299f5e1c77bd68a90404a603fc8cf83790b2cefda5fd46579042056032ef33cc750d7bd8927fa762bfb2f1160ea2a9de3f3e6814fad7e490db49751a7900732b288d2857a09d10f930146e231f2b4f75c21ee828dd795e2c4b7089e831e7e7a9d7b02e5761629a53a98cce000a4d3edb942fc7991fa5bac8d606d52970e6bca19821152e9637c7bd5a8bee7ec07be0355d91c358d5825173b53b4e24520eaa4c8a30165cdca055663e947a9a2d03262d144f171e717f9efacf4e4156e228086b16b92e26b66d4ab4c70f1c20d9912391b1b3a69d78746ed9e5cbbe2efc94523a96b99590c08725c765398a8330a90f1940a4865f19367979857133b4148df92e5a052f159e2e139f6cf755f77986ccbbb61f630f43635f4a79c1d2a55b962f45ea222e355dcdb070d9eabebb4dd4484384ba6341584a53829bf4c75d4cd3ffd164de6c8731c45f008a6a1a42d05aa4c7f5f5a4268aaf070020cf74149bba03508e86fb9ec5c52d8fdf1940a35a0cbb9d5d61729c8a76d54e008f086be530458c290c74463fe4ae7d8190f8049e48c21f1fd979b974bd2a8b0c3e98780b4415dd6414b5095c1c06493d2edead64f8449184416fcbc5fcab14ba7a82ababd9e444314251f48724047c2e5afb94903cbf12c970776916e1258a824b56a5468beb23fce99230eb3fc40f0de80f33d6cf4e24982fb59fa3ee45d03434461e2c02d4b50b7dc85210ccb4e1465cc5280aad7f4f8549e9bf132f2a07d0c20120ddab5fadca9f390729f0372ffde8c7516a699c6ce127f626fac3f9f4ebfd17194edb5c5a99c3b9009c09b4b8cd691a0990f2d291e670802e4f1576a9432c57baf5383ece6653121ce3f3580c04c7d271a194f294035d83a19b0c1cbdd2e47972928dd830abd839041b32d99401f2a6160e8f0e84ca92206f1e247489c7f7aa71051273eaac4831195785b65a9f7b61b8a45ab9d7fb4c3d9283bb4952bac61610954ba11c42b398d12d604f54a0887a8df9eab47973f9db719a42ecda8303846c7a4cde5834df9e0da1de9f801570c9172026c049b5bf4167b23db37a4b5b0d6242801cd854ae8c923ff8558364aece73225330e905239c3ad2afc7833088b2a75113199608b370a02d5ee4f216ede3dab2003c1060713cb17b97c91cfbbc16c4e6bda3322576b8b6ae208b5e2e768048c25df49cff2023d23715823a2a011e2e9789212c9615851e5d62b5e2a09824d141c1f4f5eeca63557f433ed1cdd66c2e07d0d9dcb63192e16e4c7df5a8909fc747dbd15cea0e1a924f6fb57488c84ff2ea0d607362361952347d24"], 0xfce) 2.946380515s ago: executing program 2 (id=3701): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbfdf9a684a51b86dd60108f8400283afffe8000000000000000000000000000bbfe8000000000000000000000000000aa8900907800000000fe"], 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) inotify_init1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0x4018aee2, &(0x7f0000000040)=""/75) io_uring_setup(0x1694, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x200000}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x1b, 0x20000038, r8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000002c0)=""/233, 0xe9, 0x0, &(0x7f0000000000)=""/44, 0x2c}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r9, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="6b88ef00083a00fc010000000000000000000000ee0000fe800000000000000000aa8100907800000000"], 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r10) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt(r11, 0x1, 0x4, 0x0, &(0x7f00000000c0)) 2.708043794s ago: executing program 2 (id=3702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002380)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) sendmmsg$unix(r2, &(0x7f0000002640)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000400)="5767547ce2b2a9d551a3cf484d2271d0bcf0f2eb712bb86f8786968482e5ac6a841fa8b849d8b954844366dc25cb91b2761acee6b684c697b0fdba504cea5943a629a10cadf4e3e4f747c0ae0f4c6e7797d3695758c1732139a1184098a5be74f7f8", 0x62}, {&(0x7f00000001c0)="4228990f068476c75c2d6cdca8cd0685245a8bda12898906890cc9f4abeb437cbe1f2212b58429e9", 0x28}], 0x2, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [r2, r5]}}], 0x18, 0x4000080}}, {{&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000640)="aef8ecb833695e8900f0904e00d46c2601b2696f5888f31b66beda9c1d2985a0f4bd0988db4245c94c8bd4d9fe36d8d8f44c5949921802039cdede4cf820e0df6928eae293b30fa44258702ce8372f88b5edf1681f381d7b48d36f270eaed77be589795662da54a8db6e9e5ca822d1dabcffd271d4362be8fa6d8f41cbe10761db04e37c56b705d476af537aa2bcf1a7838c0fe4019409da0869dc45bc4abd3fd8020cfdc6849e04782cda76e75f6a38d3fb21ecb288ad892449cb18a3ae552517ab65f107f772c6d0", 0xc9}, {&(0x7f0000000740)="af9d900952728ecce02e299e076bcdcdf8141c40c4048f9c23019f7bf138f243400d72baded28cfbd425b73a06b39a665268196b67a26a52416197a6df6e0ff8b27b08e980a44887aa7a19fa383dd5b4b85ce8e69dc974c967b57d70ba781860d702002feb2a8a0caa2597dd41b542cde55783", 0x73}], 0x2, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, r5, r2, r4, r2, r2]}}], 0x68, 0x4000090}}, {{&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)="b85fef08f75464902be4ef535627119f3dbe4c72f973801a495f2a008460bbd8e0dc123794", 0x25}, {&(0x7f0000000c00)="c7d07b9e5858da4a6099ac8fe493ec51671b1da6cb3d658e23d5ef05c9a212848ca3843fc7e27dad07d429198793ec7a6b0299a45c566e118c3bae37a0534d0e7fce607c40cddc57093f8ab9e0c8bb5e0d053e97871233f5aac09a51037f40e5edddb5cd7bd471f544dd90289c3bde894df9c1e0ecc020e67a5f1f90de07776a4284b99b210a93f7faea5db09f0df39852150efec284e344181a69bf567ba252ae530f0a6e12e202daf45611bde6bbf8a2743714d84d2a808f989c3610179027c004dbea22f76e187e0c5cf6b6fb11882209b29ce8fa598a89a801c1dcdad64b5fb189f77054de17cc3becffedf8e86e6a344ecc991271cfde16c05970c0f81e1fc28c05776cbf2510b3d834234688ca97eb1946b7fb06306f78451180eb8b5e173801ad1a7adbf59875477ed2a9d13c23940e510cbff799edccd9b9b6aa958bf55c3a8be89c63e1cc6b0d3a33747805498681fae29335f6c371e1f50c212a5205ec744e8f398d3bde2a65e2d9aefa59df261a8b8134305adbe2a605f204f05cf90772d941c4c320166589a99d882d0e48833afc680762175b0496d98eccb9791031aba834a564f5e67e64b596dcdf7f17eb80e3a7f630bee09a21386753194ffaa8c4db0a392795e317eec96a3590c956874be74740196529d462d7d14c4a89b842803d604c3409cb5e1ce9b11fe5e602f9f3b3a243a61c80ec8fb382c81f14d20fe58c47422624e19ad0760f43d8208c6c88db51be0f0f8234f8ff0e8080970fa49248bd3b23d32d4dd8c930c576c637bb2eb2cf409f9355887e3fd23639fc2112e864791d5f35573a3fd22d37c5dfeb1f5dbfeca37544bddfa2a23950823fd5c524da53bddd968f7000c689f972916d22933f8bf4c8b011ce302f85ec3387fc6365e26efee1382e05fb2e98de7e5c5e92acce2fafd6505bc49d2afdea97addda9ff7bc9455f6c56e6be76a14a2bc77f4ec832ba679a0fb680d06835d6c1cc5dccb8fcb719eb759b70c2be7446dc6648bb89b19b2b20a1f403a8cdd1e1a0d24d0f226df1db371450868401e4c5e49d9fc74043c143904d23351d72645471933a110461c584458111d6fe4d9a3ec0c2880924bed972c3b6bc7dd1e18da06b99256757aad2bfd78d1cdf2aaefb1f08a3a1c1417a4216c6ac7c2f0fb5a40610d678c0b29f06ad586bce41876c37bba4a4306fde8177ebed3d4b1894af932555e5a17824d42bacc985f79513c6e8c11b1a2aef0bdcd65aed4c0ed48180b114578ac96ed0aeb967ea6026594c02d85628561b0bb572a26598ce0508bfb1d92e6a74b8981e946b9391a2bb69fed09e75f0e1335ea4e20eff3b22dd38dcca98cc9c31b4f49d586b47a3793a1c63a9162f30a1f377573930e874c7574275b5c264a3d66ebb94ca765e4b37077eac4555fef0e856880c8b7453f29318e65f13ce9e3ff5ce4a6f74e8263977cb87eab44f43d3897fbbf5ac58f642251c330f65a0b38dbb6a4de42ff70107a6cdab473b161e69c120714f9eebeb2500627eb7fcfa46a9c1e521ffa1c67620910b9818c0d589ed13cf6b7354e2adcad8575ef50a3556d077b415fb26c49d0fced81b8fa3f26b46e251295376933abc4bb9f095214769592bbfbd38c917fa2e1b9ae79eb24628db8f45f8219fef59fa3fe9a4981f3912534a6903702e90019af00844daece99f0e569415570b37e0d74f815e0b382121b4c6a65839f7a0eb95cb92ddfe65c40a5d09534833294d33f8b4476a4be99649b62d05585ac5381120a3cc53700e9441c001681b8ac47a4cafa7fca4a8aa2fecabcd915603d5d0d3bf4979d65d015df965bf44977d2adc8335f0f89cf01f8b1010305537b7acc6446cde96def183ac7d1ad676f4ff805a18a3fba97578181db6f1b7d143de407a23ff7587e77f9cc2dfe348882665c0e557c443c7280b7d14471d2725d4cd39d9282fdbaf55ab9049f6195981d9d3d5988754cc4ca9fd1d445d056b4aa9d425366ac8d82be39e9041500cfaec00377adfdea7ab4ba99d42b857fe5350f897284c47c5c9817111cfdbdeb783b94885e71a7d3fe5099cf36e123e84afceb9ea83b70166cfe59524f3fa3d3bdfb5b13410528d38a4a0145eb0791c95277824f6ed9037941e0e936d2340bf9fd138bbcafc2ad0e025ab8c054a3dfeb5799a87aff5580bef6a10fb75471f1fcede2c353911d50cf59d8156a1f5cdfa2a1ab3e1f0e97280fc6f0c5c46064ebbb203a8ad71e7943a0cc3200c94b4e84f5389920bbe75dfa650aa7956bacd160d9f483fddce53946cb6185be7fb4d3a01d4b293f89b4de61fce8fcbb1dc5ac0e8d09ce21a8026301c4e4b0ebfbb4c43d7b183a76608cbd6a02d217793e5143bad1e26dd9947bf105b6b2b56e2e099d6eb11f11ceba2fdf10070b243646a72cba56acebfc44d7ad516201d28767b4726ab556c99b46e4a85294c18019840e5d95921d6d9212f7dbd734c1fbf7ab76c5c5368fb9ced7a4c0a80a9d38b3ec6a5d854abdb1f99c3e5478b777dc3a6b2a736930909d5a9ea5afec5c0e96a8679eee94b554a8ff293e7d62f5a70c91b339769d3e57436652dd9fd6ad7887a7fbb65002b047e62e70a3d1d6a3544da5745dc5005e8b75b0272aaf9b5ddd816911a28f5a951bca41cd038c18e4d4c4f2200eabac1da309e43b39f2654b530eeb9e95947a0c0184a102278d11c0fc62cbbd1676bd01926d49ac6466b9cfae52aff4267ca5eae2877a6e663e4799bd697efab02ca2c65ef69bbdac2e210d0f312d67ea279ba34991781ac8855b54337db4fe17fbae9cd8fa38dfe26a305f2d073d406c43d3f04d6456d8a07d1daf598c2feb58443dfc46b7fad4665e8864c78035e0bf8bc694e54fbd3685a2ab12bf47d28807ffcd7a8fcd3b7c1102d0c55f8eed4768e85ed16c2515b9104d83daaca865df48b2d6efa230379754ae83cff3f06ed0f2dd4a4b39b266b757f67360e779cd92f358195537ca258d59b75b18843d7487b859bf0d6217326ff9d7ad9db89651bdb5826ab23ec4454122844b1f95e47c56a1f0a88a00766d85488ab1cf137868faeb75372ba74fa3af995f8ce8c1b2272c220231dd4c1d345825b8177601bf1beb42bb71ee84034361cc60a3424152d51bdc2106a75a5cd380e6e2f99282cda0d23b9a44e6cc792b3cf93a723450ee9b7aaa1688a85b0aa23b42f43f150008f2e204a9cefc3ac3d4e3860a7fffb6c2ca712f1326205a205c76c57c153b1a35ae3f7e2e4ce5a6a409ed15a5a9b636f58e79b4c2567a667c1213197274e297d6f6a1b9c39db5ab076bfa5162d2455ac62c643cee44e45d44532f733be355cbebabd5a6c813c9f4f89a1b880ff100999b5627f088a2d717216663e1c27ec2f4cea8aefb118a4f9acca5d81fd633bc3450fde09c4a37cf5b2ded73be8589f21c27a7a5cd3f3f0fdd76c94b152f282a46cb641f5afe258f01c5b057716ff2d126773684e12250bd530c445ef7b105f5077ac0ce6a9d508db8c5c046fde55578074382d3c7883eb9b13e880d735c2e5c917e5c4676b596566b7d8b52ba0afb6ea72caba1f157281b0594a706a1fcb3ed77a00d296eba94a173b5223b11dda43d6935cd8aadd1e97516e5ddf894f689147c479d986709c186872ebec2627109ed23ebe39675535f2f749f5bf47d49c191e9c51762f59dc3eb29f1d00c777f123bd18aa174b87ada9bac5818c98e0ba0bad5f1cc5b516d5cf919b23f1fbe3312b0586c236e17be0322a4429d7766b287ce51e206018759f2f664a085b61593b0d0549a3046936339e9ff82c5422232557df28b089a83078a68b2342e213188801fa4045e676774535d4937530a0ecc88871eaafeeeeea02fc2d4956c4e36a55ebe8b59388640d55f8f41fe06e2db38f4eb6c739a24d460024f201eb3d088251b31c50a6947bbbdd14d961f1d24a236f3bd20de48cdb43334643849fcccceb972c59c839b4fe4e0a918a4c716feabb52ff5903e51a9aba47933d1ea76c4db9e891be22d29d932abf09e0fa25ba7fce4b56adbbf668dbcfe0bba2a16da9ee8bc6ec1aadcb72c0cb489feaefee56616e76ed8fe9bfbd097de9b24bbf8ceee359346bae074314a899e5303ad13af44b567e959a5d6e5d8207e3879aeb655b6f9eb952fa54883cfd5250fae0dd0aad728f7e91ba680fe6d24e857872e42b2488e159811599e50af62a6d18f514c4fb621329929bb0a3c4ef01a4b6a8ebf9b34cc8d9f8d45b759fa0078efba8f7a6d8c246a61831f8939d4c08894aaad3f71c578553b110304296754036fefb5f959d8ffb05f61fd3929c435d13ce31346669e94a5182a34576339e014f097607ca8f48dd4be7a406d5205ed356e51de651e04d3f13d273913021921ea6e3a6259e7ea10f9eb2a8a3e63909ed9026c0b8af515b2f8435c87776167e4d509114ed12d7c8bac99d671a80615e691560db3d139f733cb24c80ecc26a9b27153a21a99e163e4ceb7b2f28e1c98545b24da326be601b5bf450d45997d5b3b8f9dbd08fabad2f0bb7d8ee4bcab896d9910299fdded22563b23ba964805b6e7ff83f3df471c30442ec06e0325f9b21ccf9feb31806c0de943e2e185de78540d033cffbd2c2701f7544bf16f5bc8e144036f546b1530832fd54ac61d4fdfdd480a62943d728193f7ddc32d9c0baebc7ede6c2213e41a9b618fc003765ba09138893e762a6650656b1d2c26c5234641da0fd7c52cdccadf99dc8339d378e392eb3cb4b04fe557e94dd8dc99aad337d67934298e59262a701f3c3ba034e3761f4e6016987b28af975cb6b5743ac035159b1949415b4b9dec35fe72365a1cf7eaf68fb9fac4cacfd5bc53b0b5065065c25e2ba5259c815ebcf27dda99d01c574f4444e9247c9e13d2e67b2a10bcbc273a593739c7c3d389a39f5f8d186b9be8b83de797bf1875340409b504225692289d8573243fecae3541d38ae9a0e2446073406fc34d0ee0d51165c2ad88c87bb6a8c2457cdba612d320ed8c73e139f32b9e0643a16d3505ec698b08f0e1471bbcf4b59f8190e6efbb1fa99fef2ccbecbb0153405dcd6e639a4bcdfab98b1db2aaa0ab83e3bd25c5ab1cf2fa9a71ee2f2d56bac9ca674f9a58ef4a0b6fa2c30d4db41b8fe761ffb1aad03e78e9efadd43a9be9e913ef77a30f2a207eae38d95eb7abf07b5339eed1b7443c64d0e9dbadfa252a8bb0b9bdf4301bc0e478b293ac12d51064d1986fd2dfa3d6f98ae9c8086997acbc66177f846b7fb6dda854c833bce62846a0f4af61a3c6db39c7a1982e240c1f62588898f150154029360ec061b1cf5983e54b90527c77cf2e8d12fe7d3bdb0ee9153ec9ce121a108b4dec2efeecc4de7539f5a8e4e29ad0badfe32245c6f2286ff285d660e5c3dc6b0b68ade57c8937167d414b12284294bec387394cc294f4498350d7f3200f4e69fdf242c59ed7c0f33b9f5dda61838fa0ec3f598606b7a3e87390e95cc792713efc09dda700616a2a1e257c702d88c484c18ce292ea95be8e1414d48155a2ae01a675fb4c80a97a560b37d3924e60b9f072149479ffe0352ef17d903f472261689b960d21efd4350250ed9678d3c9f8542e4c2b874f0e11c525217dc7cc1d7cb39335bd0feee2cbd63abf4da9f47aabf28ddd484e42fb564eef1c2d5f08f07d80be0261dd33cf2558a3a3c436ed8613c26f801bb85cb84f038eba16602838db7fe38363644f8a06a40eb1b0288b0497eb151df8864e2109b799a693bcc7d905fadb9caf497020296227c66960048523597366f496adaa70ded595c67", 0x1000}, {&(0x7f0000001c00)="7a8d11a1951da58081879700f0d44f38a281ad036b348ef3794303a7032ebd74", 0x20}, {&(0x7f0000001c40)="4ab102ed8fd20c429a3bc7db52ef52025fd094516b51b97433b68e9a881b57618989f97a025401f0b049f90ff329d2e7262b64de3f9c813799b6dde0c6b637b8fc73f1aab6418ec27333b5c3a2d0bda79c52a789a9dff699077ef681dd557f6e159794b6a8df93714e328980a9666933109f79bd8cbefb5b2624cd424e95a2b573bfffa3376a978cdfdd49345655e6a89a06bf26e4ad6126197f45", 0x9b}, {&(0x7f0000001d00)="c74f33c3e9d6d2d209bfe9ce6040f325659ab9bdcfbec466cbb8e462b9841e2304fed41b57c7677aabc491837839312dd9c63bac3458f8271fac0b7b97554ae596843d8b656073e562a65e842f6e56084bbdf97553ce9312d57434e1127557ec80439df137817547199e91f62cdcc9216105bfa72025738efa69a8a99805a103a5dde1b69827c3d225cd26563ab8e57454cbf556b248be9b8a0e70e249edf69208f6137f18e1ed72", 0xa8}], 0x5}}, {{&(0x7f0000001e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001ec0)="5840addcd791905b820c59bd2c4ac24e61095782ca296e4d984340f09e8a20e0b9638cb460c4cdc9e7d9aa1062ed7178944a0bd8e156b6ebfd13bd02f62682708fd3506f4adf0f477bb90303760abb3a8ea6bce4af288c8908a8b3caf32424219b658f380b2c59c16ab8abfb7c2811c09384aa64434600d882b94a0c2b566c6d99811380113c0e00e30fe827ae83625bf07a54f89170de973fc256ea", 0x9c}, {&(0x7f0000001f80)="030d6107bc25544182f33d6ef338d4fdf077bc925bf4093e60cc02d4471deee282d95d73bd3c76da2bf957aa23bc960a61ffa8f1eb3b393a15264c913f35b02c823518ba5a327385f56113fc33ca46328aff4432829077400c61470e0b5a3176fe7943fe4379af70c5de534a6d3ef48015d8201cffcb2994f02b165ec40ee5bff504efa3df9d218bf7d791be4344a07ad029b37380dd32abf4f44cb7e9ade3250b2f722bd28f190fb35fefbd744385e8f5a44497f23f0887ab9a2242ace36da3c3b98428993a2e97a1219c5e5ba9869672", 0xd1}, {&(0x7f0000002080)="399e755f6a60e47538ba788337e460c6f9f9e5fc7498815d8177c2e24b4be3b569d5f7e5a907a335cdd410a97cdb35a43aa058c0125b299929bd5a6bbad16da1fae28beffa3fc2fc325a048ce2533040b07ef807137b23c93cc2c8b373065197a5eb163c16d72eb0a34bdb4216dc97fd3cd0d1bd77a08cac052597578a06648610637e307f6bb4e28f459fba676b12ba896f11bbdefe99c8835374cf07f4a620c765dab4306dff79bdfc395d28bf7025be02710775a7c43e219734b2e54c3fa78954f1ed814e89d97cdeceaeebb373a16a13e529be730c2da55c045a394cfe8806a70a4660", 0xe5}, {&(0x7f0000002180)="a5b2be21403651216e83d06309b7f3e06ef7a5bb05cc1006f2c3a87c2fe5628cfde5ca674fd6e0d946fd6c3e47430af4d7262bf01882f039a84fb0d1fa87568354a8f933721f9b530049e43f60620aa7acd7904a3722981a54632d", 0x5b}, {&(0x7f0000002200)="0ef38c4de17c072061a6ad273c4c5ab2ebbe785a6cc51f66fd9584f77fd189ccc630f4922f364df519d2a8e1f9162025bf555e26ad37339030908eadaf69fd3af776fdb1f69a64eb0e21ac65a40123bcd9a81b6443903224fd6eaf92ad7287e0d2e0e67235f7a96568645c3d4005ae8717233553079a5dd0b15b60f73c862dc1380373d2c3b6e8fd069adafcdae74e944abca4c31159ae30e5f531e153f28b06811888d6d202d47d4a4201b518d025b35bab9a9932d4fa605251", 0xba}, {&(0x7f00000022c0)="c08f2016b7ef54b69bc0f570f0a3144ea053c0a4a5d19d", 0x17}], 0x6, &(0x7f00000023c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, r6}}}], 0x20, 0x20000000}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002400)="2e16c7dbdeb90289941fd442779e1c7eb5127a782e1e1fa7b143bd1a38d4d5a87014da9db5ac669a65e43d104b5173c4202f170226dd7ebdfa667ace", 0x3c}, {&(0x7f0000002440)="35cfc186b81150269aabf06e4561114d2cb7d6fac762eb7e7c5fae45f236393447043d6be4ff0c2cc9cf54da02688f76e418f4b38596178fe2521b14d5cf584de279073cdc580dbae3f3912b72db04eb0a0d7e45f5ffe86ac4ce324ecb6b5917ac3a148ccdf73877917e9cce3214b88f1f81c705fc55a72b4d", 0x79}, {&(0x7f00000024c0)="8b006d4562c0f8364e131fe4eb3626dce232f4c9ac835304d950c77307cf1cf5e4723fbaeb0392a29cbe7e6d03aa148e039221c68dfd64420b28c9757ac1e84ff09b30985459352ba4e4dcae7b7708067a4b71f95e72c4a6e64ca1237ff2ffafccfdf7aad76cfd636944e661ab2b151c451405fdb38de1561d94a94164cdd83ba6058b6998b51cfc5cbf4dc0488ef8be04c7d86be2329ec2490b498d472e542e86c00807d0ac1a10c453bfe33dbcc7408627ef8798441b93fdf469d90ac9436ec1e480404846b83a32a519916d8593194fe47572b6620d5f372b17370740788f72d56cd75b2b53", 0xe7}, {&(0x7f00000025c0)="7401ac36a3d89bf9de7c44fc211bea724f343b34e41d2d72a075b1df", 0x1c}], 0x4, 0x0, 0x0, 0x10800}}], 0x5, 0x11) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000030603000000000000006517912bfd3b0000000000000500010007000000225865c369c711b258e1f6f510f42699356406c004fedc7ea912a0b7e3c11bb16e6252550f9c98a6f91621a1c36729fc6a823eeb9849f87b2f133fd0aa88718bb0a6f96a03c62eeeab79630fb34d7624"], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000c00)=ANY=[]) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000140)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f0000000600)='fd/4\x00') fsetxattr$system_posix_acl(r10, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [], {0x4, 0x2}, [{0x8, 0x1}], {}, {0x20, 0x2}}, 0x2c, 0x0) 2.119631507s ago: executing program 3 (id=3703): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x28c, 0x65, 0x0, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x8}, {0xffe0}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x45}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_bpf={{0x8}, {0x248, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x21c, 0x1, [@m_xt={0x218, 0xa, 0x0, 0x0, {{0x7}, {0x128, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xdd, 0x6, {0x3, 'mangle\x00', 0x9, 0x22, "4d30517618bcf691cd98ad7d14a37b639b46e740039ef53ee4194d86655d23e9f1896f6a27908c9c90bcae862de33139b86bf34ed260a594abb14a20a9f610e211718db599633e6ef77071ac6b6c23231515c1b161c66fbbcb4b557c9b5e163c7d91443aac5c514b530d0176ac87a23d18e170beea105129fcebef60dcc84f8ad6c73c814e5c664b951cb3ea95ca96f78a676823663efc3728e6cddb5891c92619918bf2198e702cadfc99db90065fa4bf7111"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xca, 0x6, "d3b36ef03810cfb9debe5bfc23486167e9f678709194d9c8a65d4a457a5e8bfc1b2b3e1ba5633d9d257c51a19075fecf94f3998e0a6dbb0bec6f602c31b378bb8011d8f687afcf0924b8346ea7e32e2d8c50c98c9227f789f12dd259ee37354d2b6d4a90cd985b1bf5f477af6d634ecbc2be3fe27465fa5538df90b6b951cb9c4e008875ebb7a4c22ca87646f7631aacd6c1737c05d85b408225e72b6656f6bd20d6fa1b5d81d20527fa6514ddfc93777a91c87a1a78247c6966ac39e4b329ae025e4aa90c67"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000010701d748a5cf000000000000000000"], 0x14}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000025300)=""/102392, 0x18ff8}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000001480)=""/4096) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0xd000}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'veth0_to_bridge\x00'}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) 2.026119567s ago: executing program 3 (id=3704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) keyctl$dh_compute(0x18, 0x0, &(0x7f00000002c0)=""/13, 0xd, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000000200)=""/19, 0x13) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r2, 0xb9}, 0x0, &(0x7f00000003c0)="d3c69fbbc4305d2012e3100c4c382e58207d6e2432a6e7e20b6f10a132231f13538175e9718d57832d20fa5225e50291cd3e5c3a3808aa6521c6298f6b7b83d4a4c931e1faf83d9266e7f01bb52d3a7988757321f957dd83a9f9e89fea3d81e85f9fe0d004da666cb732fc0b923eab591abdc44458cc20c70f33d021f52ecbb9d72b6f0ede59e15fbaf84883937871fa382f4e4646da7c5b2e04d55fb353da903f3ac36bbd2999c203aa62de448bfe85d24997e7b415e52624", &(0x7f0000000700)) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa706ab144ffe0080045090000000000000000000000000000ffffffff"], 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r4, 0x891d, &(0x7f0000000100)={'veth1_to_batadv\x00', @ifru_data=0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="bfeb010018000000000000003000000030080000020000000000000001d236b6f36752b34b000064040800000004000000020000002000000000000000000000090300000000798ff54240866b2faef01900"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bind$802154_raw(r3, &(0x7f0000000300)={0x24, @long}, 0x14) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000040)={0x3}) msgctl$IPC_SET(0x0, 0x1, 0x0) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0xa0800) bind$802154_raw(r3, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000007b0000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f0000000680)={0x67, 0x9, 0x6}) r7 = openat$cdrom(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500003d5e000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r11 = dup2(r10, r8) ioctl$DRM_IOCTL_SET_MASTER(r11, 0x641e) ioctl$CDROM_SELECT_DISK(r7, 0x5322, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000000c0)={0x3, 0xd0, 0x7, 0x3, 0x0, 0x5, 0x14, "c1853b568dd3660cb6697db9ac144a1b18f019bd", "436b2d2f6f747dbd04c74cf5eb2ce0b5f67993e5"}) 1.925997639s ago: executing program 3 (id=3705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = fcntl$getown(r0, 0x9) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000020605000000000000000000090000000900020073797a30000000000500040000000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000500050002000000"], 0x50}}, 0x0) r7 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsmount(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) dup(r8) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002100)={0x18, {"a2e3ad2119c752f91b5e09091bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838721a0890e0878f0e1ac6e7049b3d63959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1216e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70d998ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5af098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000108000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b2fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d180242c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f794c9eee1198751adaa13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d8872fe174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f980000000203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.766431379s ago: executing program 2 (id=3706): syz_open_dev$tty20(0xc, 0x4, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x212001, 0x0) socket$inet(0x2, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) memfd_create(0x0, 0x3) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000003240)={{}, 0x0, 0xe, @inherit={0x98, &(0x7f0000000300)=ANY=[]}, @name="10493012e86aec0552b2db4c22c74e8de7aaf00a6c42da5a0c07df36c0c3858fd72338d234f297f163008c800e6c3650be4311d64be48ab050f985bc544ef3c9327787f8aa1e482a591261e1cbc22f63dc073153526cfe1b0cbfbdf47c799694bb3952c95023ceb2c47983e58d4f42a593fedbfed48419f1e4a3cb8b85ef9e66e430b03eadc19120bdf9c78455d1b076c17bcfbebd89082062689c9fd9622c107fcc025ed9c9e928e983b3f1dd7fcaff62eca85ea4e08b43b8c192452cb94a663018f7715a5a174c90704a5a27b30fc266b5ba9ccc6600e05d00549098c51c6ef5c2f68f02958a01b67f54f5757483f08446e8a8d3bc3cac86357bb4733b32f955c3f91b06084f8255a9d04a4402c7e3ea95e4f62baeb1d00e5eb7cadd80f451a4312ee3bfc1a9c024838d56ce5e25e3bca899c5ca5f328837c60ce5f92ac3d229c8cd871ed99c1c0bbd1426b80b48f8a388434cd8bf3935df030d9cf2228469f172fa133cb017bb3c5a2f0d3828c548457c6aa7b8ab50c850189fccc0eb0014534079e06f5a1052dfffb909b01e6f23b2bf9112bca87d0c850cd9cbc3448aee9c93cd7422e0455c48b73fa5d5af6c4ae17d2de6373e85a1fcdba8d193d1246f067cfc1434727ea98af13472d823775b69abfa882864d8150569cc0f77eeb7c3ef00dfab5b8967af2446b71094dda544cc7b2ee6ca5e679d6258281dba1d0bf3757a43110fd82c69142059610af94f7c2fc7e8f6eea3ce4224e7f3bab4e056ba49bf741290718db739296bec9b0302a4a9c02fcf441fb57b946a7ac40c3a96b700c2d9665bab00f89577a5e16c57f5c42bb230111e5808aabce843813b8a005842d49a2cb7c4c58ce7bb502f6340b06b13e17d6755170a23c31c90efd0bdb89c6c7d4e9e994f9db4c8dc99ad38f73bbe576417c5c4f90a604c64bb0e58a4e8a19a39b73b3004d2d61fe6eda48df2a767f6cde620e021fb521c05acbc1e6c44278333477e0906f0491b7fc13521d577b76ee27ad0994d63634c567cba61768a5c8c19eaa84ab984960eccee21e02864783ebebf9d3563a9c918c1e59072c1ee2511cfd908b0b3865021164a069c851d6ee01dd9e7f19a1ce52aa766861b545f7f942739425005ef5fb36f411b6ec3a3bd6f045b41789052eab88eb903b1b771f7679f503265cf216cfae960ef388f2b1afde96aad229857862e112c191c9e514b8724cd36196eda5d538c338884026eebee26cac5db6894d3ea9f852eaf5892549d41c43d28fed72fa651735e4ef6a17445054319feccd8d47bd4c292d7fbca658625eb369e6116151e608b7419a09c8b29de868ffb693ab2da2c83dfc7115b99d9f1e023d0f7dc37ac4b13e4e5e4b489a3eeda00295ace4062ba4c812121eacaf8e8c3e92aa9a04363055f2dd8d19a3c1b1d2ba750c8c60aa3e797b1666a17010c0c33e27d7abff2805767ba40de0bcfa23eb511463554822ccae7ddd7c0f424eadc320d597043a7d65f193eaa92b0c82b8faf62a6291bf4c97f7eb909258792be4fb0b6cadf4077316f9e4ee156fb3d7295861a91cc6c83c423061a0d4483a09540fa7a864f026ca7887237126c1b80136f1bbbdae8b0ff444646e868dabcb7aa63385b376820cefc568c2031b1fc3c15cc11095cde7a6b9a21157f99e4ada1371f6b9fc4fec56d4c20b52eeacdc0f517b7370a8ea60bd2fe62e1c6ff1af9df5fc40b3e54c0f6226d2b5be620777d6f7a5758363adb1b9f543c3be4a29d812007f18d744fc60e961dfb6785795de0422e10ad87e23409eca81e14b7d2c0733576d2595cac229ee5f1918c25a40ed10ecff22c130378cddbf82c13862684058f02eabcbf17367f6f02ed0009b34e77620764adcc5bbcd48ffd53197bb534ee3ce21637fa1c2bc029c1b7a05ee26e9ec6517eece51974a958381600100fd07b0c0c4c9d37ce181d8e990e29a29f2bb263be6e28ec14a2342c130d0f8e8c72ecafa74cb26bc1c947636f8662b4ac0c972cbc05a4b1ec8a53d95db65a3dd7a2a863dc66fe76d87d4b7555fa104e0ec4ffab8ba1cc8e381c85f47f7939d2cc3b19481ae4ee507869035e5e32ea65c96d05e7052a8ae6a7e894e0c2f2590b3eb3cc1ab03f948135120ac1f0c79b8ada4312c6264a0a8b41279b896bdf8e3f8143c267681a464be8f84a274d33932d586f4b9d14fc6254c6e6d579117471533600a7abffb016fd0be0b079270c10f86adb0ea97dddebe619e677e2294f6f212b9d18704bca4dd775fb0037955d80f14c4f700a5a0ebe87c2e2356311596907c9fa70aad384606a60d96629b0a0d140ef1ba01e4bc25de36c229a495981ec0163944f9d40f17b815d57490b8b2d4bb9213c3b183e57ae5995dcbe10e3ed406bda349e557c6cbb6e902d018448fb043c94d3e01bf963809042450110985b141e92926594ec851c52de3a892c7cf2b04c3fe7bb2cb8359fc838296848a5a51a53408625b04a3e85c14ec7b790364e138abd3befe1e7c148f060af7ea4e20646356e87e549e692e9cf890795e7aa210d780d4239d91e9f24d5f2f3ca49892ffa9248524eab621f3ab615bc0842a46d5b91cbb36f210257e651d8268004b662f0b296ecfb159b0a513aad287d95de91d4e87e0be04780f851300c7fe7a855a91552b1c085e6dcb36b6aaa61c826f49d7e0e159b083f9d009864e22db55f56c326f7c5f4aaa2090881751aeb929d375a8b9f4fdbf75601edbdd63e31e7475ea4a800ed10791e2e7651cb8456067fc8844c23da78faf0d36851d5e23a863a9b480c140c10e0ec67979a4fa860d49a1ec2feb44945f52402147230f513669d3a8b803cbe2b9763796ba16091808dd7cf075ac65fd7b2e1b5efef724ca2a01447908ceb2d669fcc47e637206eab24d39ef35455fa6e3370ebb32122ec0efb1561e4f4dab3278a53bd0cef9d3ef652297b7495c4ff4e3a53d5ec05e19fa99cca35fd79994497ce206197d91c63e3e770cb52eccbf6a8b32260a695926248b2e8756cd1552c41734861c6433a2857a635dbe9d76dc1fd5d99e33f0831507fdada9b65f1b40ebc4607efb3fda34492a6dc6b67bc91d3d39e2880f4ee9b5b92cebceda67cb63d684b42204fc533d23e687ca4de96f5505d1ad32cecfe13adbab917d9318b161d4a23cd7534d2b2af496336da6c89fb30ac2e2caec57b067243a92d1c0bc3614999e236157e95cf873e1ef2ca8644a179fa43d6ba28c4373d509070c5107334fafe2d2f4d715d809f4e27e9104ccc20bf0d81982fc8767a666fbbbd2fb312e6e75f021ff60706005c753b7707113033c26f5343895dd428c6a73ff7ce95c7d54a25fe85925bae54a9563ad318488836d53478b5e1a98739cbe188ca7712875b53dbf199b54a751f99f8305d0a82e4df98651a91e8859c362ef3a03064d67b20c010a8bfb81df61eee59c27e47f6f7bc687edd495fd604d6c9c4975d3f5c1a527dcee83932d12f9cc3d827ac4ec18ffbc21eafcb3a7180d2b2bae6be26b93147b6d544f7879857a97475e1aeb5573fa0b1258ac0ce0e98b5df64a9bafa01644ef0da4f3834303a96f204e0e187a7ab133c40efe423d355d3006f857c97738732b1f218714c0cf3498d43d058f512334dadf5ef01979f4740ba2588c2321c60d9309ff9e930c9171edb3a0ada802d685c2bdd8305336937fb13c3127503884eef5e59d3cdae2abe66a8537f0ffe285c26adfd06b47482cdfaf74a6b8264a534b59c7400c09b19caf6e5f0b426becb6781ca864cdd4cd66c612d950d9141fe5d980622b9d89dd823da2c801c1ca4f99a7b6efa647eacbeff96c78a23f77cc18f3c54369e3ee038f268bab13563af2c2710fb30f148dfc86492e476c19c181f17bb3c356711927eaca92959efc2a7fe27f344136e273690c9a7284f4f7c14a60c4e5cf82c7974ccb1dd4886411422b79237218e03cf2c23cb9528c0c1cd87035ee87c88830f33e806281168eb2a5b2d69d78fccc6455e4b1fa004475aa98a80285098d0c364356a51f78a1e5c632fbb1890855fcba8aeabd08961856727e6448fb1f50e139983c838bf3a31b5ddfb4829c7eaa1308df57361fbb639c4451f715d5725da2c5426d2036c481e337bce30c5f3c31e0d308911943065a0aee3dad1b24fe1cca542e452d6c8d7680c15a372311f085a6542357200e9826c77ebb16ccfe5a06d7ff6da5a13a8ed025e3c4005f76571cdeb80e86872be49427cad7536887aececc9a69255e7fe8a15d3cb1ffdffaf2156c64f962eb4da9cca8a5498221ee803edd327452daeb701ebce97720b6375cc3a428c5079a27ba2dfe381703c090f060ac836a15cbf8f6e506d0f8f16ff20062c54bd81b4bbb8e2f82612e38c751fadd3c34dddb5f49416e5f51001ca21da7522919172ce20315c33d95665930a096bd59800d8e841c38e4266efce9158cbf2e4f2366cd99c392ebfae4d51827adbba03137d9ae8bcef3e8691b95753bf0b4c14dcc4f36d12bd92d1e166982e0af693bd073df9a0306f6a707b2f11432dde2c64d1d8ac1c4de98beade109df2628f79db27146df3d9a93d017b76130e927ce2a721f479a7550af35884c2e175bb93d9718e879ab25f57affe693a79ddb8520038ca157cfeb7159398a615c97c9605d2db2f6427b909e15ab9e62e4e339e8de2676c7fe544c3764225e34b580248b8ab6b7923c543e15c2cd84292ae974d043ff752a8fe06eea4052fec852fa7d23b556d3de73b2d5de412d2bace110b80ba331bfafadea75d1de4666209b70d187ed3a29c065d24ac68b79e48fb0df7cb2c986fa5c423a37e6a844f10edf32d79d45475f4261f7301aea11aea097aba5a0aa7804871c8ba89c136992f1c3a80a358db0f78112e45659cdcee351022b0bf90565f65b6e9c92a91f4d2976173a0f522ed40fe55a1e4dc881b41c7da59c6b94c31a9691c87cfef8fe201469ae87165b8570ffc47c67c149e2926d352f3a7697eb1e7a117982ee3c4f85de2430b2b2c991fa67bae6853c78e7ea0ad4a87fa9c9e5f371d65d728a38b4dd2a4989b1d183ffa625e46daf9edb178a06124505067b98597eb628c37012b9fa985b8c936123af1089ee5fde60479b9d9fa0c822e56f3921cbdd415f008f9ae9c2653f02ff383a8064340278c5e5e08b2fed5151b83e5b9152fec7f009f4e489a1fb9381706d13660a54621e332ecbaf15f9f04f24d8001a83376dada2ce3a6c82dce96f0d907dd6ace2627bc4ea0a72ba931e65b5a197a6da1ebe04f76c1d0b6459aa42cb92b65ee5f3e9f2a8db8d35bc166f2cb6ce707df776a2e3e1d0b47ca8e185dd3a2744f4426030543be2e1673bb9eeda77cb1cc33d3efb5d83aa7700a8d6c81fd9efc3bb9249bb8c89e4e34748df387390a59fef07e27cbb63d52795cb04a3ce98a167a874c8b59b0d1e08dc848b8a62e9afbe61c56d7ee2f03e009fd6343990ce4412b131e8515eb8eb02908e3fe9681891273bb1e1be4b5fb971160eec489193328cfc181e48e1fd163b295cb74868fbdd6eb14862984eb02a184ebfd57d75ed32e503339f42f615ccc268b2dcd50861c45c98908a34d0f87381ba6768e46d72da3ee3e8f6fa437bf3eb660963ed916aa0d23d864accd85d932070935603efeda2ebc1673fe108cb72d5f18b153926f58519a0ab383e11d941108e449b5936ca0c05dfb0596de30ecbf2532d309"}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000180)) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4e21, 0x7, @private2, 0xfffffffd}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) 1.556436816s ago: executing program 2 (id=3707): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @tail_call, @call={0x85, 0x0, 0x0, 0x96}, @ldst={0x1, 0x2, 0x3, 0x9, 0x4, 0x4, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xf3, &(0x7f00000000c0)=""/243, 0x41000, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xf, 0x744, 0x8}, 0x10, 0x212b, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000240)=[{0x0, 0x4, 0xa, 0x7}, {0x0, 0x2556, 0x1, 0xa}, {0x4, 0x4, 0xf, 0x2}, {0x1, 0x5, 0x2, 0x9}, {0x0, 0x2, 0x1, 0x3}, {0x3, 0x5, 0x4, 0x2}], 0x10, 0xfffffff3, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x1d, 0x1, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pK \x00'}, 0x20) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map=r2, r0, 0x5, 0x0, 0x0, @void, @value=r3, @void, @void, r1}, 0x20) waitid$P_PIDFD(0x3, r3, &(0x7f00000005c0), 0x0, &(0x7f0000000640)) syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "1e98ac"}}}, 0xd) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000740)={{0x3, 0x5, 0x0, 0xb, '\x00', 0x2}, 0x0, [0x4, 0x90, 0xffffffff, 0x5, 0x7bfb7fc4, 0xffffffffffffecca, 0x9a40, 0x8, 0x3, 0x7, 0x1, 0x4, 0x1, 0xfe20, 0x71, 0x0, 0x100000001, 0x8000, 0x9, 0x3, 0x0, 0x1ff, 0xfffffffffffff517, 0x1, 0x52c11f71, 0xd4, 0x10000, 0xfffffffffffffff9, 0xf248, 0xfffffffffffffffb, 0x1, 0x2, 0xb976, 0xa2f2, 0x7f, 0x7, 0x7, 0x43, 0x65, 0x6, 0x8, 0x0, 0x1, 0x6, 0x7, 0x32, 0xe1, 0x901c, 0x1, 0x101, 0x10, 0xf, 0xb, 0x93, 0xfffffffffffffffc, 0x6, 0x5, 0x1, 0x2, 0x4, 0x6, 0x3, 0xe39, 0x3ff, 0x0, 0x200, 0x401, 0x5, 0x1ff, 0x5, 0x10, 0x8, 0x8, 0x7, 0x4, 0x7, 0x906, 0x8, 0x700000000, 0x284, 0x200, 0x0, 0x1, 0xc10, 0x8, 0x40, 0xf, 0x7f, 0x7, 0x8001, 0x0, 0x9, 0x28b6, 0x3c, 0x2, 0x9, 0x3, 0x1ff, 0x5, 0x2, 0x2, 0x3, 0x0, 0x1, 0x8ea, 0xffffffff, 0x1, 0x3, 0x100000000, 0x5, 0x0, 0x100000001, 0x100, 0x7, 0x4, 0xa51, 0x5, 0x0, 0x10, 0x8, 0xfffffffffffffff5, 0xa0b, 0x7, 0x600000000000, 0x8, 0x40c, 0x40, 0x1000]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000c40)) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000cc0)=0x6, 0x4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000d00)={0x2, r3}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000fc0), r3) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000001140)=0x3, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000001400)={{}, {0x100}, 0x22, 0x0, 0x0, &(0x7f0000001180)='./file1\x00', &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)="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", 0x127, 0x0, &(0x7f0000001340)={0x2, 0x57, {0x0, 0xc, 0x12, "68da0d3ede940e1d52b3817b0d896d99c0ff", 0x38, "c7cba6c3b86727b15a4db12a7710b07ef76bc5353c9f062d311950ebf8998b9b626e29e9aab95da3b6e7de4c704dfd5bdd73bdbf933234cf"}, 0x4e, "2c2916a21caa5afb92e9ff7bf3a18a8c8faaa58ef8f9fdbb93292a78f312756180a2b033d9c5f8ab082a3f261cd8a3fe47aac6907f4f8d2c5272d56c06d8fc4bcb2c97c4bdd00ec8ed72d1939b35"}, 0xb1}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_vhci(&(0x7f0000001d40)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x1, 0x428}}}, 0x7) 1.555868149s ago: executing program 2 (id=3708): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f044}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="ecce24a0", @ANYRES16=r3, @ANYBLOB="010329bd7000fcdbdf2502000000080005000d0000000800040008000000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%ps \x00'}, 0x20) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x2a8, '\x00', r4, r6, 0x0, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0x0) recvmmsg(r8, &(0x7f0000001140), 0x700, 0x2, 0x0) r9 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0xb, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x829}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x1, 0x81, 0x97}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x87, 0x97, 0xfb, 0x20, 0xc}, 0x21, &(0x7f0000000140)=ANY=[@ANYBLOB="050f2100030a10046925cebb6510020c0205000b1001049d000c070200e6000000"], 0x5, [{0xc2, &(0x7f0000000a80)=@string={0xc2, 0x3, "ed40339f3217ebc9fbb3d63d2785c1afc58e353b61925a53b285f2cf56214e3b8b30836040804f2606bba50ff9c60fccd7995962e84abaf38972f6e393af39ef30e2f65bf702c779e299002e0e6fb82cce983308f6ba0a0a34d6e3174320ed9346350dcf0f8c08e41424711a84cb22a0d50df87b915e4a0e4978e18753853533068b0466ea22d8f40f06545eeb304329957edb060c32529c39c3343500ffc269f26ce1b108f90266f4bcd04977cb4baf8fabdf9f7227e965e52a9802c63548e3"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io$hid(r9, &(0x7f0000000480)={0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="40054800000048277071a417b83ba52643eda67f2884f2d04fcd8e4ebf34eac557fc06143cba27a5dd71347b80852c65bec4a91a8e005dfe2f18ecab6b216c76906db08b97204974fe93b47009cf"], &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000400)=ANY=[@ANYBLOB="002208000000257b821824804000"], &(0x7f0000000440)={0x0, 0x21, 0xffca, {0x9, 0x21, 0x5255, 0x2, 0x1, {0x22, 0xe76}}}}, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x40, 0x17, 0x36, "cd008bbce53316e0ea040cd260c5ea82784c7a3b9bb2fc592c15633b95b7890d9ab2450dc140505d5e91a4e0e7970e8e6e15f23ad27a"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x1, 0xb7, "cbef6d32eb35e55265f9a43d244d6b5f608acb1ee4b4d52820f2f88a0820d6a90e131559631b355e1ad6566a982e583a012a9294f24fcba58204f645ee093ee0af7dc6d7aa895860f78178400f17361d8493eaea6cf5451071ee45747772eb2ae696283cfaa7bae90aacddf87992d0712997a3a93944662441ea5e6f316515e309afcaa33b0d3f96047d0c7b91a1928373a5be828ee41ef64c5c6989cfa76332259bd396736f36734c209daa328f1a4e7375f49386ce8d"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x6}}) ppoll(&(0x7f0000000080)=[{r0, 0xa221}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="00000000b7040000080000008500000095000000950000000000000000000000016ad8c47a6335d7488d84bb552754280a1017d726bf2a9afdba3872739ffc3d1b8b36d4f847f5d8ec677685e8a7731fb1d732076c262ae3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.136175374s ago: executing program 0 (id=3709): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000032b4abd6000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9b, {"a2e3ad09ed0d09f91a5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffebd}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaaaaaa50"], 0x22) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000ffffffe20000005c7300000000000000efea09db7d5181fb91318f65b8da0b1638e49968602105e72213f96c748fac3565f1b30a96d284e173dbe9f4b25f2ce0805080e82cf42dabb79b09d3ef7f71c4c2250e"], 0x48) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r6, r6, 0x0, 0x400000000003f) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x0, 0x7) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r7, @ANYBLOB="0800000090780000080a00000000000008b20000"], 0x0) 984.283086ms ago: executing program 3 (id=3710): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0)=0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x400, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r4, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000700207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r6, 0x0, 0x2, 0x0, &(0x7f0000000080), 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 0s ago: executing program 3 (id=3711): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r5, &(0x7f0000000a40)=[{&(0x7f00000003c0)="ff071d6ce89d96666b08e828be032f55097076e40148c200000000fb00000200"/50, 0x32}, {&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0ab17dfd1fbfa6955b751ed697ff263589987f3de711efae8e2342b2846c1c9d8febaecb3aef2d7650869408a287d92d06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab43a2f77234987d3b1130d31bd78fb28883050a1b8dd4ea2cdc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3dfa12d31fa32797f5a940475fd8947bde48c8126a44eb9d229126e34e0d8aace15047ccd5bd0932270c88dac48e0bbb2af55a35efca697fe5435b19f827cf2d9337109", 0xdd}, {&(0x7f0000000000)="a9e47d4ed965685b48214fff756364b93155b267f07697b50eede6ed45f973d3da857dba0deed519dc9a7267b99f19a1b405e7d2", 0x34}, {&(0x7f00000000c0)='z', 0x1}], 0x4) sendmmsg$unix(r0, &(0x7f0000001440)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000300)="719ae7a6b2ddd703faba830181d8ecf6981ccd052b867ed7352b2ee1b99569cae26fe480e71cc4f873fabec4e48505a1ecc6331d042aebac7f02eb8dbd92", 0x3e}, {&(0x7f0000000340)="7ad95fd9cbb6c7300e7bb64fa688bebfe77ed0bb64c949d8db17eff1e0a34497c6ea5833be82a345e0f760e291dbbb0e46756e376ecaebebdf092ff02294b1d7fbd6a9f9dea090c8cb5bd6e2b044cb88430684519e5f1eb90de2974b7f6dd635a2997f1b65856b4183f808438d85971fc4883976928591d073b25194faf3a530fdca086076317853d6e445aac68c994817", 0x91}, {&(0x7f0000000440)="656f5d854f9cad8f9a6758964d041c4d1f4003a9099f43e58fe7fcf0fc515f159dbe37b042b267a81362467df2", 0x2d}, {&(0x7f00000004c0)="8d355be3a17e2210e91b8de929aa19c6ed9612cf4ecf7ae7fabc4a57f702b34818a41430f8e0268de41e1a0611c1370887466f3287285c308d87291100a972f65073e4689733b255551abf80150df311a73a009c9907bbc5e51754fa11c44d9ac97aa4e9f862d8c601eccc07051fe089da406676b0d5972547afe5784b9505815eb64d1df9636f4f9ee4", 0x8a}, {&(0x7f0000000580)="b4e1c061ae67ab40cc1044fac28fb63e34c7a229f083bfcc634cb6e3ff62e2b25b060a0b2b839a9ff0b883de7458273f73585ed652110fbefcb177e788a249c8a9cc01c4769f9bd976d9847a00d0733ca2e0", 0x52}], 0x5, 0x0, 0x0, 0x404009b}}, {{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000700)="d89f583ed0967a38230af2cc0c4c9a3cb518b55f63057d0009f43fac33e94a1d7ebdb4e967d10179adf7b27534b6cdf5ddd4df319da5b34ef7f961ea9f6aa89e0dac0125e4c69c70bd7b948c5a68bcc0d0e9ab34ba209b8993b1dcaf71c816f0d319a1afcf18d91c6e2fcbcf3cec8507fd4dd3b4613575b91c2be89babab699a306c0b354f0986200244c37547f9b18dad7629de7527f61bb7cdb98176350fef2b6b72c95ed7bb552d59289629cd0b8fc58daf70649200d34a5f9a829f9daeabc629c13ef118ededd40b985f9e1f71a2aaa2553f6bf7b0598ac84589137ac1f47e3c1227b523415149d1060e7d4da8", 0xef}, {&(0x7f0000001540)="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", 0x151}, {&(0x7f0000000880)="5ad8087db5048182ae67fb7b83899a82834ffc34a7747b5f08782dd1a7b03e67008c49d2e0fd248d8e43bd053c8a91a646a455f99b541e5feaa35073cd83bbdc761c03438b54ecc335e777c6777de2bb01ce21b3923b82a9b9a50f5cc1c1af81561a252f9b49ae946905f425213929261af94412ce34a32f0a7d76de3755883d8bb8d8b9b1520032045809007f3707f5544c57fcc84841631d6fbfd2f4186ff8354834e9c1d853b3d2cbe62f3e", 0xad}, {&(0x7f0000000940)="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", 0xfc}, {&(0x7f0000000a40)="9c515dde5eb7cc681840813c4bc13e9d795bc9b7d54864c96f51b6cf3a2341ab5feab2a6705ad23aedb1351c14aa35e51929e5889391397b8532ce3781d9260613e84382ca4fa86c12475637efb44550fb4b56d7240dfd3a6ffe48ecad0d0c42d4799b623963f2b39d81ea3096", 0xffffffffffffff29}], 0x5, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40, 0x80}}, {{&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000d00)="561fc744066d9f08869fbdf735ed7fd4de3ea64a79965e2d3cd53d1747e897a1c9271a39145f08193477323de8c394e0314bb3b1f551924c96ea15eb7e2073ce8f93655bf48d4f470ba7f9d232b9df7dbfa68fdedc13b2550230e89b70f88fa3c41d81407b87259d7dcc2ef21fe631415a0651536f16ab236c65f6e16d01ca997f0409460673988aba9380aa0d58ce9bc4f09cae45", 0x95}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)="aa4c2efe2216de4f40b59d6e2da3b41878730b75c7236918b023dbe0dec33b53b0929b0d5ee99db9105846482bcc4399a26d22b86a364d36ab968dbacfd7972d6c1598acdb676aa0f1260fe9b4babf3746df521bb314d6629699ce8ce636a6a02231ff1d40b95915bc239f3003c18d9a13f87ea09e4a97fab7971a63f33759b94709813b03baf28f47b675f4636a2e6e05e2d67a92979b4bd9039bc1f111b03de6f9db5d88", 0xa5}], 0x3, 0x0, 0x0, 0x80}}, {{&(0x7f0000000f00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000f80)="78b435479abf543bc800611f92e51f0b1882a44ddd0118b54924967c3a8c25ba1fd4f7c265f3a6638da17d5a36e2ffb77b31892258de60d653ee93f30cb6167adb46e8d3f28f278f343b17f23e7dd25ace7e0ba81d9929985900759f70d1e8c0188e123ae26ec771df14fe23f06de7ef4fc6074848f113316a76cfc7ced8db9af376db1ad8490746bbe05a560145afe0a058fbee102fe4ef992f9b97ee4233a25c1ed0ab6f67e63de4e9c5deba402bc3c33a992963a184", 0xb7}, {&(0x7f0000001040)="baba4d3b07482c309559f40fba121a8bcfd314c67765bedcbf8567afc42277937835dab2676066880a65971e282058b3ee2b71f5cbf5ef9d0ac186d7d8ab0ee32d50ef019cf4281be21299d46b7264b1b28efd3caaaa746fe922c76e9e92e11379f77dbf21f5482fc98de47eca3fcf8338f58553c19ced5cbcba564525f2173f96cfed8278e9cc66b0aa96276ef33baee3204353c2bd73ae78a1b36f4ecd1e12182aa5947f0342", 0xa7}, {&(0x7f0000001100)="38c05e", 0x3}, {&(0x7f0000001140)="7bfcc40e4fb4ef0aaef96b23c8cdc3338315cf13d94ce631330812e271173ab17c435f58926f1a9d8334e8740df7e36926af0402665c864aa52aed3346c23fdae539061be6e8bbd592dc21368a5055940ca0bf9804661774cd3437c28b2247e2ff010278074be1cf9db7115e450748c6225d8ee39d0e932bf2573243172fc269ba871e8e6d2798ad675c814a33ff82ef4cbdb7572c719612cf", 0x99}, {&(0x7f0000001200)="9031c0cb07cc81f2c32a8f3c1361b2381e036d1b48ccf1f1740464bc796b5dca29902229caefece02a50634e11a0077616658ba986d4b7776472dad4569718df66d4924d6c15766171140d3038eebfe8c3db9f5c0c17454f0a3a71a9f5136107aa17cd8031aa10c49f9785e7b7cc045075a76ab016b689eac86e88e6cc13ec1287556e408eb9f7ceca547e6f548ce772b8c405cea588f976d26eb5037175c310034133fa5c642cd75c35da91f3c2c316cb9fc3b479550beedbfe77ce0f744ae8a7696454b8fd0e", 0xc7}, {&(0x7f0000001300)="2d1ebc16264af3f69817a9cdd9de13fac1bde9750019a500e7a21d23a23ec43e678f1902871633b15e5e01a8ca5230c9456959d6c4678718e848cd07fee21aefac2f3b33ab635561d87b865408893af05a2495", 0x53}], 0x6, &(0x7f0000001400)=[@rights={{0x30, 0x1, 0x1, [r5, r1, r1, r1, r1, r3, r5, r4]}}], 0x30, 0x2}}], 0x4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x40000a0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(r5, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) write$sysctl(r0, &(0x7f00000001c0)='3\x00', 0x2) read$rfkill(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 871.924260][T17526] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 872.085543][T16466] usb 8-1: USB disconnect, device number 10 [ 872.270043][T17353] Bluetooth: hci1: command tx timeout [ 872.550107][T17526] kernel write not supported for file /1437/attr/keycreate (pid: 17526 comm: kworker/2:4) [ 872.694239][T18677] netlink: 'syz.3.3209': attribute type 1 has an invalid length. [ 872.696348][T18677] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3209'. [ 872.710618][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 872.787849][T18673] syzkaller0: entered promiscuous mode [ 872.789430][T18673] syzkaller0: entered allmulticast mode [ 872.990070][T17526] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 873.150025][T17526] usb 8-1: Using ep0 maxpacket: 8 [ 873.152849][T17526] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 873.155733][T17526] usb 8-1: config 179 has no interface number 0 [ 873.157951][T17526] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 873.161551][T17526] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 873.165768][T17526] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 873.169625][T17526] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 873.172972][T17526] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 873.177452][T17526] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 873.180691][T17526] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.185312][T18677] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 873.395320][T17526] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input99 [ 874.630355][ T39] audit: type=1400 audit(874.508:7250): avc: denied { ioctl } for pid=18690 comm="syz.0.3211" path="socket:[85206]" dev="sockfs" ino=85206 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 875.160016][T16466] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 875.283004][ T5378] kernel write not supported for file /3266/attr/keycreate (pid: 5378 comm: kworker/1:3) [ 875.312354][T16466] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 875.314745][T16466] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.317416][T16466] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 875.319946][T16466] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 875.324538][T16466] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 875.326985][T16466] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 875.329117][T16466] usb 5-1: Product: syz [ 875.330778][T16466] usb 5-1: Manufacturer: syz [ 875.337915][T16466] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 875.557044][T18698] netlink: 'syz.0.3213': attribute type 9 has an invalid length. [ 875.565605][T18698] macvlan4: entered promiscuous mode [ 875.572136][T18698] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 876.285876][T16466] usb 5-1: USB disconnect, device number 126 [ 876.303573][ T5844] usb 8-1: USB disconnect, device number 11 [ 876.305248][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 876.305269][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 876.310397][ T5844] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 876.476473][T18723] IPVS: Unknown mcast interface: veth0_to_bridge [ 876.574726][T18714] syzkaller0: entered promiscuous mode [ 876.576717][T18714] syzkaller0: entered allmulticast mode [ 876.750274][ T8076] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 876.931184][ T8076] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 876.933591][ T8076] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.936002][ T8076] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 876.938109][ T8076] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 876.944030][ T8076] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 876.946164][ T8076] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 876.948077][ T8076] usb 8-1: Product: syz [ 876.949068][ T8076] usb 8-1: Manufacturer: syz [ 876.954319][ T8076] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 878.604822][T18727] netlink: 'syz.3.3221': attribute type 9 has an invalid length. [ 878.613864][T18727] macvlan24: entered promiscuous mode [ 878.616626][T18727] 8021q: adding VLAN 0 to HW filter on device macvlan24 [ 878.624866][T15582] usb 8-1: USB disconnect, device number 12 [ 878.979630][T18747] netlink: 'syz.2.3227': attribute type 1 has an invalid length. [ 878.982558][T18747] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3227'. [ 879.012651][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3227'. [ 879.530109][T15582] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 879.681465][T15582] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 879.683756][T15582] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.686541][T15582] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 879.688870][T15582] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 879.694389][T15582] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 879.697346][T15582] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 879.699783][T15582] usb 8-1: Product: syz [ 879.701083][T15582] usb 8-1: Manufacturer: syz [ 879.704328][T15582] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 879.820027][ T8076] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 879.909186][T18755] netlink: 'syz.3.3229': attribute type 9 has an invalid length. [ 879.914774][T18755] macvlan25: entered promiscuous mode [ 879.916782][T18755] 8021q: adding VLAN 0 to HW filter on device macvlan25 [ 879.975335][ T8076] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 879.978325][ T8076] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 879.982011][ T8076] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 879.985272][ T8076] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 879.989137][ T8076] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 879.994819][ T8076] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 879.998054][ T8076] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 880.001053][ T8076] usb 5-1: Product: syz [ 880.002591][ T8076] usb 5-1: Manufacturer: syz [ 880.009496][ T8076] cdc_wdm 5-1:1.0: skipping garbage [ 880.011658][ T8076] cdc_wdm 5-1:1.0: skipping garbage [ 880.014383][ T8076] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 880.016598][ T8076] cdc_wdm 5-1:1.0: Unknown control protocol [ 880.214576][ T58] usb 5-1: USB disconnect, device number 127 [ 880.275018][ T8076] usb 8-1: USB disconnect, device number 13 [ 880.860173][ T8076] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 880.956328][T18760] syzkaller0: entered promiscuous mode [ 880.958543][T18760] syzkaller0: entered allmulticast mode [ 881.011443][ T8076] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 881.013716][ T8076] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 881.017000][ T8076] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 881.019230][ T8076] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 881.022542][ T8076] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 881.027825][ T8076] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 881.030114][ T8076] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 881.032439][ T8076] usb 5-1: Product: syz [ 881.033746][ T8076] usb 5-1: Manufacturer: syz [ 881.038234][ T8076] cdc_wdm 5-1:1.0: skipping garbage [ 881.040336][ T8076] cdc_wdm 5-1:1.0: skipping garbage [ 881.042101][ T8076] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 881.043672][ T8076] cdc_wdm 5-1:1.0: Unknown control protocol [ 881.595923][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.597847][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.599827][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.614015][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.615901][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.617948][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.627688][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.630068][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.632696][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.639775][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.642358][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.652042][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.655154][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.657233][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.666719][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.669241][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.671852][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.683510][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.685714][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.688184][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.690257][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.692646][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.694655][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.696775][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.698767][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.700967][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.703217][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.705443][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.707571][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.709640][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.712018][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.714273][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.716327][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.718591][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.720794][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.723359][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.725534][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.727604][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.729806][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.732018][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.734220][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.736563][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.738655][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.740719][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.742938][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.745153][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.747307][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.749344][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.751555][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.753772][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.755810][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.757965][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.760118][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.762260][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.764390][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.766839][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.769052][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.771286][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.773641][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.775775][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.778552][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.780518][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.782607][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.784797][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.786768][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.788866][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.791131][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.793332][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.795311][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.796906][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.798383][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.800016][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.801630][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.803206][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.804686][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.806294][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.807782][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.809380][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.810881][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.812553][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.814163][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.815745][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.817360][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.818829][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.820447][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.821914][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.823454][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.824860][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.826384][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.827795][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.829298][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.830744][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.832204][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.833647][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.835144][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.836544][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.838060][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.839461][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.840949][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.842386][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.843990][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.845406][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.846998][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.848634][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.852568][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.854203][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.855694][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.857269][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.858701][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.860269][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 881.863937][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 881.865380][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 881.876977][ C2] cdc_wdm 5-1:1.0: Unexpected error -71 [ 881.877572][ T8076] usb 5-1: USB disconnect, device number 2 [ 883.480092][ T8076] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 883.600009][ T6011] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 883.641626][ T8076] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 883.643909][ T8076] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.646436][ T8076] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 883.648781][ T8076] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 883.653421][ T8076] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 883.655682][ T8076] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 883.657646][ T8076] usb 5-1: Product: syz [ 883.658691][ T8076] usb 5-1: Manufacturer: syz [ 883.663514][ T8076] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 883.752685][ T6011] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 883.755536][ T6011] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.758877][ T6011] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 883.780724][ T6011] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 883.786028][ T6011] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 883.788423][ T6011] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 883.790747][ T6011] usb 8-1: Product: syz [ 883.791851][ T6011] usb 8-1: Manufacturer: syz [ 883.795078][ T6011] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 883.873762][T18783] netlink: 'syz.0.3235': attribute type 9 has an invalid length. [ 883.877499][T18783] macvlan5: entered promiscuous mode [ 883.879318][T18783] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 883.998998][T18792] netlink: 'syz.3.3238': attribute type 9 has an invalid length. [ 884.004380][T18792] macvlan26: entered promiscuous mode [ 884.007249][T18792] 8021q: adding VLAN 0 to HW filter on device macvlan26 [ 884.516402][ T5378] usb 8-1: USB disconnect, device number 14 [ 884.722152][ T5378] usb 5-1: USB disconnect, device number 3 [ 885.220292][T17526] kernel write not supported for file /3308/attr/keycreate (pid: 17526 comm: kworker/2:4) [ 885.257670][T18816] FAULT_INJECTION: forcing a failure. [ 885.257670][T18816] name failslab, interval 1, probability 0, space 0, times 0 [ 885.261928][T18816] CPU: 2 UID: 0 PID: 18816 Comm: syz.2.3245 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 885.265414][T18816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 885.268907][T18816] Call Trace: [ 885.270009][T18816] [ 885.271741][T18816] dump_stack_lvl+0x16c/0x1f0 [ 885.273377][T18816] should_fail_ex+0x497/0x5b0 [ 885.275025][T18816] ? fs_reclaim_acquire+0xae/0x150 [ 885.276723][T18816] should_failslab+0xc2/0x120 [ 885.278317][T18816] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 885.280199][T18816] ? __d_alloc+0x31/0xaa0 [ 885.281630][T18816] __d_alloc+0x31/0xaa0 [ 885.283014][T18816] ? hugetlb_vma_lock_alloc+0xc/0x1f0 [ 885.284775][T18816] d_alloc_pseudo+0x1c/0xc0 [ 885.286326][T18816] alloc_file_pseudo+0xdc/0x210 [ 885.287939][T18816] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 885.289724][T18816] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 885.291819][T18816] ? hugetlbfs_get_inode+0x32d/0x530 [ 885.293557][T18816] hugetlb_file_setup+0x4cd/0x620 [ 885.295247][T18816] ksys_mmap_pgoff+0x189/0x5c0 [ 885.296823][T18816] __x64_sys_mmap+0x125/0x190 [ 885.298332][T18816] do_syscall_64+0xcd/0x250 [ 885.299777][T18816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.302060][T18816] RIP: 0033:0x7f0d08f7dff9 [ 885.303327][T18816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.308380][T18816] RSP: 002b:00007f0d09cb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 885.310560][T18816] RAX: ffffffffffffffda RBX: 00007f0d09135f80 RCX: 00007f0d08f7dff9 [ 885.312615][T18816] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000000020000000 [ 885.314684][T18816] RBP: 00007f0d09cb5090 R08: ffffffffffffffff R09: 0000000000000000 [ 885.316726][T18816] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 885.318907][T18816] R13: 0000000000000000 R14: 00007f0d09135f80 R15: 00007ffdd921c248 [ 885.321098][T18816] [ 885.562231][T17526] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 885.721673][T17526] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 885.723982][T17526] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.726713][T17526] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 885.728980][T17526] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 885.738159][T17526] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 885.740647][T17526] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 885.742817][T17526] usb 5-1: Product: syz [ 885.743897][T17526] usb 5-1: Manufacturer: syz [ 885.750737][T17526] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 885.980249][T18820] netlink: 'syz.0.3247': attribute type 9 has an invalid length. [ 885.986600][T18820] macvlan6: entered promiscuous mode [ 885.989016][T18820] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 886.493162][T17526] usb 5-1: USB disconnect, device number 4 [ 886.639306][ T6011] kernel write not supported for file /3316/attr/keycreate (pid: 6011 comm: kworker/0:5) [ 886.715962][T18841] IPVS: Unknown mcast interface: veth0_to_bridge [ 887.157865][ T58] kernel write not supported for file /3456/attr/keycreate (pid: 58 comm: kworker/3:1) [ 887.199672][ T58] kernel write not supported for file /3458/attr/keycreate (pid: 58 comm: kworker/3:1) [ 887.281108][T18860] IPVS: Unknown mcast interface: veth0_to_bridge [ 888.262608][ T58] kernel write not supported for file /3472/attr/keycreate (pid: 58 comm: kworker/3:1) [ 888.300676][T18879] IPVS: Unknown mcast interface: veth0_to_bridge [ 888.354533][ T6011] kernel write not supported for file /3476/attr/keycreate (pid: 6011 comm: kworker/0:5) [ 888.492533][T18892] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 889.325148][T18897] netdevsim netdevsim3: Direct firmware load for .prioidx failed with error -2 [ 889.327851][T18897] netdevsim netdevsim3: Falling back to sysfs fallback for: .prioidx [ 889.398909][ T6011] kernel write not supported for file /1503/attr/keycreate (pid: 6011 comm: kworker/0:5) [ 889.409517][T18906] IPVS: Unknown mcast interface: veth0_to_bridge [ 889.503217][T16466] kernel write not supported for file /3491/attr/keycreate (pid: 16466 comm: kworker/1:4) [ 890.048779][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.050894][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.052876][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.054815][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.056744][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.058717][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.060933][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.062875][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.064791][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.066735][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.068660][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.070813][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.072686][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.074614][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.076503][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.078533][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.080840][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.082768][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.084583][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.086429][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.088307][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.090244][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.092345][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.094332][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.096278][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.098242][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.102938][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.106265][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.109149][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.116216][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.118751][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.120971][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.123025][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.124949][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.126866][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.128734][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.131572][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.133524][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.135445][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.137345][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.139252][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.141677][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.143664][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.145678][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.147612][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.149538][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.151924][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.153857][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.155790][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.157696][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.159613][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.162246][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.164176][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.166077][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.168007][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.170492][ T58] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 890.174145][ T58] hid-generic 0001:0000:0000.000B: hidraw1: HID v0.00 Device [syz0] on syz1 [ 890.263837][T18917] syzkaller0: entered promiscuous mode [ 890.265446][T18917] syzkaller0: entered allmulticast mode [ 892.665825][T17526] kernel write not supported for file /1517/attr/keycreate (pid: 17526 comm: kworker/2:4) [ 892.726941][T18957] netdevsim netdevsim2: Direct firmware load for .prioidx failed with error -2 [ 892.729715][T18957] netdevsim netdevsim2: Falling back to sysfs fallback for: .prioidx [ 892.870101][ T58] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 893.035074][ T58] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 893.039490][ T58] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.045300][ T58] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 893.050572][ T58] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 893.060818][ T58] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 893.065653][ T58] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 893.070121][ T58] usb 8-1: Product: syz [ 893.073004][ T58] usb 8-1: Manufacturer: syz [ 893.085926][ T58] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 893.298421][T18956] netlink: 'syz.3.3291': attribute type 9 has an invalid length. [ 893.304189][T18956] macvlan27: entered promiscuous mode [ 893.307372][T18956] 8021q: adding VLAN 0 to HW filter on device macvlan27 [ 893.526873][ T5378] usb 8-1: USB disconnect, device number 15 [ 893.783611][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'. [ 895.003269][ T829] kernel write not supported for file /1536/attr/keycreate (pid: 829 comm: kworker/0:2) [ 896.270167][ T58] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 896.421176][ T58] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 896.425394][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.430666][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 896.434068][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 896.440248][ T58] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 896.442868][ T58] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 896.444983][ T58] usb 5-1: Product: syz [ 896.446097][ T58] usb 5-1: Manufacturer: syz [ 896.449230][ T58] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 896.559152][T19021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3308'. [ 896.592009][T16466] kernel write not supported for file /3518/attr/keycreate (pid: 16466 comm: kworker/1:4) [ 896.655660][T19013] netlink: 'syz.0.3306': attribute type 9 has an invalid length. [ 896.660854][T19013] macvlan7: entered promiscuous mode [ 896.662951][T19013] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 896.714926][T19030] ptrace attach of "/syz-executor exec"[5338] was attempted by "/syz-executor exec"[19030] [ 896.723883][T19030] openvswitch: netlink: nsh attr 11881 is out of range max 3 [ 897.285281][ T830] usb 5-1: USB disconnect, device number 5 [ 898.170015][ T5378] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 898.330033][ T5378] usb 5-1: Using ep0 maxpacket: 8 [ 898.332786][ T5378] usb 5-1: config 1 interface 0 has no altsetting 0 [ 898.336159][ T5378] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 898.338606][ T5378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.340877][ T5378] usb 5-1: Product: 䀁 [ 898.342085][ T5378] usb 5-1: Manufacturer: ᠁ [ 898.343504][ T5378] usb 5-1: SerialNumber: И [ 898.859927][T19051] syzkaller0: entered promiscuous mode [ 898.861440][T19051] syzkaller0: entered allmulticast mode [ 898.940681][T16466] kernel write not supported for file /3339/attr/keycreate (pid: 16466 comm: kworker/1:4) [ 900.870088][ T5378] usbhid 5-1:1.0: can't add hid device: -71 [ 900.871839][ T5378] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 900.874803][ T5378] usb 5-1: USB disconnect, device number 6 [ 901.310055][ T5378] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 901.468539][ T5378] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 901.473291][ T5378] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.480892][ T5378] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 901.484332][ T5378] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 901.491078][ T5378] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 901.494422][ T5378] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 901.497350][ T5378] usb 8-1: Product: syz [ 901.498946][ T5378] usb 8-1: Manufacturer: syz [ 901.508077][ T5378] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 901.712343][T19074] netlink: 'syz.3.3322': attribute type 9 has an invalid length. [ 901.718695][T19074] macvlan28: entered promiscuous mode [ 901.721449][T19074] 8021q: adding VLAN 0 to HW filter on device macvlan28 [ 901.841808][ T5378] usb 8-1: USB disconnect, device number 16 [ 902.025867][T19083] x_tables: unsorted underflow at hook 3 [ 902.029651][T19083] FAULT_INJECTION: forcing a failure. [ 902.029651][T19083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.033281][T19083] CPU: 3 UID: 0 PID: 19083 Comm: syz.2.3325 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 902.036161][T19083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 902.038978][T19083] Call Trace: [ 902.039888][T19083] [ 902.040830][T19083] dump_stack_lvl+0x16c/0x1f0 [ 902.042145][T19083] should_fail_ex+0x497/0x5b0 [ 902.043434][T19083] _copy_to_user+0x30/0xc0 [ 902.044690][T19083] simple_read_from_buffer+0xd0/0x160 [ 902.046119][T19083] proc_fail_nth_read+0x198/0x270 [ 902.047480][T19083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 902.048974][T19083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 902.050552][T19083] vfs_read+0x1ce/0xbd0 [ 902.051911][T19083] ? __fget_files+0x23a/0x3f0 [ 902.053406][T19083] ? fdget_pos+0x24c/0x360 [ 902.054782][T19083] ? __pfx_lock_release+0x10/0x10 [ 902.056178][T19083] ? trace_lock_acquire+0x14a/0x1d0 [ 902.057521][T19083] ? __pfx_vfs_read+0x10/0x10 [ 902.058730][T19083] ? __pfx___mutex_lock+0x10/0x10 [ 902.060098][T19083] ? __fget_files+0x244/0x3f0 [ 902.061333][T19083] ksys_read+0x12f/0x260 [ 902.062468][T19083] ? __pfx_ksys_read+0x10/0x10 [ 902.063715][T19083] do_syscall_64+0xcd/0x250 [ 902.064946][T19083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.066548][T19083] RIP: 0033:0x7f0d08f7ca3c [ 902.067733][T19083] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 902.073690][T19083] RSP: 002b:00007f0d09cb5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 902.075763][T19083] RAX: ffffffffffffffda RBX: 00007f0d09135f80 RCX: 00007f0d08f7ca3c [ 902.077926][T19083] RDX: 000000000000000f RSI: 00007f0d09cb50a0 RDI: 0000000000000009 [ 902.080190][T19083] RBP: 00007f0d09cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 902.082819][T19083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 902.084877][T19083] R13: 0000000000000000 R14: 00007f0d09135f80 R15: 00007ffdd921c248 [ 902.087061][T19083] [ 902.255386][T19095] syzkaller0: entered promiscuous mode [ 902.257330][T19095] syzkaller0: entered allmulticast mode [ 902.335369][T19110] netlink: 'syz.2.3331': attribute type 3 has an invalid length. [ 902.338112][T19110] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3331'. [ 902.710876][ T829] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 902.872001][ T829] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 902.875045][ T829] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.877689][ T829] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 902.880131][ T829] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 902.885300][ T829] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 902.887718][ T829] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 902.889762][ T829] usb 8-1: Product: syz [ 902.891209][ T829] usb 8-1: Manufacturer: syz [ 902.898182][ T829] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 904.061763][ T39] audit: type=1400 audit(903.938:7251): avc: denied { setcheckreqprot } for pid=19123 comm="syz.2.3334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 904.159004][T19126] siw: device registration error -23 [ 904.633497][T19115] netlink: 'syz.3.3339': attribute type 9 has an invalid length. [ 904.637506][T19115] macvlan29: entered promiscuous mode [ 904.640622][T19115] 8021q: adding VLAN 0 to HW filter on device macvlan29 [ 904.646681][ T830] usb 8-1: USB disconnect, device number 17 [ 905.242490][T19148] trusted_key: encrypted_key: keyword 'up-~(:qYault' not recognized [ 905.349247][T19151] syzkaller0: entered promiscuous mode [ 905.351306][T19151] syzkaller0: entered allmulticast mode [ 907.690403][T16466] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 907.848875][T16466] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 907.855220][T16466] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.858417][T16466] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 907.861664][T16466] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 907.867531][T16466] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 907.871228][T16466] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 907.873783][T16466] usb 5-1: Product: syz [ 907.875116][T16466] usb 5-1: Manufacturer: syz [ 907.964157][T16466] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 908.291233][T19179] netlink: 'syz.0.3353': attribute type 9 has an invalid length. [ 908.297016][T19179] macvlan8: entered promiscuous mode [ 908.299315][T19179] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 908.452658][ T829] usb 5-1: USB disconnect, device number 7 [ 908.892113][ T39] audit: type=1400 audit(908.778:7252): avc: denied { connect } for pid=19216 comm="syz.2.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 908.918400][T19217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3363'. [ 908.967415][T19208] syzkaller0: entered promiscuous mode [ 908.968930][T19208] syzkaller0: entered allmulticast mode [ 909.222277][ T39] audit: type=1400 audit(909.108:7253): avc: denied { append } for pid=19231 comm="syz.0.3369" name="nmem0" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 911.740976][T19264] IPVS: Unknown mcast interface: veth0_to_bridge [ 911.993930][T19270] Invalid option length (1047906) for dns_resolver key [ 913.017779][T19299] FAULT_INJECTION: forcing a failure. [ 913.017779][T19299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.026060][T19299] CPU: 2 UID: 0 PID: 19299 Comm: syz.0.3383 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 913.029764][T19299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 913.033433][T19299] Call Trace: [ 913.034645][T19299] [ 913.035703][T19299] dump_stack_lvl+0x16c/0x1f0 [ 913.037370][T19299] should_fail_ex+0x497/0x5b0 [ 913.039065][T19299] _copy_to_user+0x30/0xc0 [ 913.040710][T19299] simple_read_from_buffer+0xd0/0x160 [ 913.042689][T19299] proc_fail_nth_read+0x198/0x270 [ 913.044495][T19299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 913.046469][T19299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 913.048490][T19299] vfs_read+0x1ce/0xbd0 [ 913.050057][T19299] ? __fget_files+0x23a/0x3f0 [ 913.051759][T19299] ? fdget_pos+0x24c/0x360 [ 913.053376][T19299] ? __pfx_lock_release+0x10/0x10 [ 913.055172][T19299] ? trace_lock_acquire+0x14a/0x1d0 [ 913.056893][T19299] ? __pfx_vfs_read+0x10/0x10 [ 913.058462][T19299] ? __pfx___mutex_lock+0x10/0x10 [ 913.060145][T19299] ? __fget_files+0x244/0x3f0 [ 913.061683][T19299] ksys_read+0x12f/0x260 [ 913.063099][T19299] ? __pfx_ksys_read+0x10/0x10 [ 913.064685][T19299] do_syscall_64+0xcd/0x250 [ 913.066165][T19299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.067303][T19300] syzkaller0: entered promiscuous mode [ 913.068033][T19299] RIP: 0033:0x7fe04cd7ca3c [ 913.069485][T19300] syzkaller0: entered allmulticast mode [ 913.071028][T19299] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 913.071049][T19299] RSP: 002b:00007fe04dc2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 913.071068][T19299] RAX: ffffffffffffffda RBX: 00007fe04cf35f80 RCX: 00007fe04cd7ca3c [ 913.083410][T19299] RDX: 000000000000000f RSI: 00007fe04dc2e0a0 RDI: 0000000000000003 [ 913.085438][T19299] RBP: 00007fe04dc2e090 R08: 0000000000000000 R09: 0000000000000000 [ 913.087484][T19299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.089509][T19299] R13: 0000000000000000 R14: 00007fe04cf35f80 R15: 00007ffe7eedb1f8 [ 913.091540][T19299] [ 914.440437][T15582] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 914.593752][T15582] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 914.596132][T15582] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.598786][T15582] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 914.601443][T15582] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 914.606164][T15582] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 914.608510][T15582] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 914.610747][T15582] usb 5-1: Product: syz [ 914.611854][T15582] usb 5-1: Manufacturer: syz [ 914.623228][T15582] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 914.731082][T19315] netlink: 'syz.2.3388': attribute type 1 has an invalid length. [ 914.733812][T19315] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3388'. [ 914.770325][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'. [ 915.136144][T19312] netlink: 'syz.0.3387': attribute type 9 has an invalid length. [ 915.147926][T19312] macvlan9: entered promiscuous mode [ 915.150965][T19312] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 915.576110][ T58] usb 5-1: USB disconnect, device number 8 [ 915.665058][T19327] IPVS: Unknown mcast interface: veth0_to_bridge [ 915.975300][T19334] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 916.030491][T19334] ip6gretap0 speed is unknown, defaulting to 1000 [ 916.511957][T17526] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 916.661138][T17526] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 916.663373][T17526] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.666320][T17526] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 916.668552][T17526] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 916.674992][T17526] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 916.677249][T17526] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 916.693219][T17526] usb 5-1: Product: syz [ 916.694482][T17526] usb 5-1: Manufacturer: syz [ 916.708130][T17526] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 916.797334][T19377] syzkaller0: entered promiscuous mode [ 916.798855][T19377] syzkaller0: entered allmulticast mode [ 918.529123][T19355] netlink: 'syz.0.3395': attribute type 9 has an invalid length. [ 918.533653][T19355] macvlan10: entered promiscuous mode [ 918.536884][T19355] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 918.543166][ T8076] usb 5-1: USB disconnect, device number 9 [ 918.616725][T19398] fuse: Unknown parameter '' [ 918.621557][T19398] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3400'. [ 919.833424][T19416] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 920.273725][T19432] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3411'. [ 920.310901][T17526] kernel write not supported for file /3423/attr/keycreate (pid: 17526 comm: kworker/2:4) [ 920.357528][ T39] audit: type=1326 audit(920.238:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19426 comm="syz.0.3409" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe04cd7dff9 code=0x0 [ 920.363143][ T39] audit: type=1326 audit(920.238:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19426 comm="syz.0.3409" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe04cd7dff9 code=0x0 [ 920.399985][ T58] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 920.542679][ T8076] kernel write not supported for file /3425/attr/keycreate (pid: 8076 comm: kworker/3:4) [ 920.546733][T19441] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 920.559972][ T58] usb 8-1: Using ep0 maxpacket: 32 [ 920.563818][ T58] usb 8-1: config 0 has no interfaces? [ 920.567255][ T58] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 920.569684][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.571850][ T58] usb 8-1: Product: syz [ 920.572955][ T58] usb 8-1: Manufacturer: syz [ 920.574185][ T58] usb 8-1: SerialNumber: syz [ 920.576146][ T58] usb 8-1: config 0 descriptor?? [ 920.691854][T19462] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3421'. [ 920.739771][T19447] syzkaller0: entered promiscuous mode [ 920.741413][T19447] syzkaller0: entered allmulticast mode [ 920.983852][ T30] usb 8-1: USB disconnect, device number 18 [ 921.114192][ T39] audit: type=1400 audit(920.988:7256): avc: denied { audit_control } for pid=19424 comm="syz.3.3408" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 921.807903][T19467] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 922.758837][T17526] kernel write not supported for file /3624/attr/keycreate (pid: 17526 comm: kworker/2:4) [ 923.060090][T17526] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 923.220010][T17526] usb 8-1: Using ep0 maxpacket: 8 [ 923.223032][T17526] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 923.225453][T17526] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 923.228402][T17526] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 923.232029][T17526] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 923.235392][T17526] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 923.240103][T17526] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 923.242647][T17526] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.246799][T19487] vivid-004: disconnect [ 923.250163][T19485] vivid-004: reconnect [ 923.283016][T19489] netlink: 'syz.2.3430': attribute type 1 has an invalid length. [ 923.284241][T19484] FAULT_INJECTION: forcing a failure. [ 923.284241][T19484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.285414][T19489] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3430'. [ 923.294761][T19484] CPU: 1 UID: 0 PID: 19484 Comm: syz.0.3427 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 923.298408][T19484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 923.301475][T19484] Call Trace: [ 923.302361][T19484] [ 923.303119][T19484] dump_stack_lvl+0x16c/0x1f0 [ 923.304441][T19484] should_fail_ex+0x497/0x5b0 [ 923.306068][T19484] _copy_to_user+0x30/0xc0 [ 923.307602][T19484] simple_read_from_buffer+0xd0/0x160 [ 923.309403][T19484] proc_fail_nth_read+0x198/0x270 [ 923.310954][T19484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 923.312722][T19484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 923.314540][T19484] vfs_read+0x1ce/0xbd0 [ 923.315958][T19484] ? __fget_files+0x23a/0x3f0 [ 923.317583][T19484] ? fdget_pos+0x24c/0x360 [ 923.319134][T19484] ? __pfx_lock_release+0x10/0x10 [ 923.320754][T19484] ? trace_lock_acquire+0x14a/0x1d0 [ 923.322107][T19484] ? __pfx_vfs_read+0x10/0x10 [ 923.323331][T19484] ? __pfx___mutex_lock+0x10/0x10 [ 923.324939][T19484] ? __fget_files+0x244/0x3f0 [ 923.326569][T19484] ksys_read+0x12f/0x260 [ 923.328037][T19484] ? __pfx_ksys_read+0x10/0x10 [ 923.329644][T19484] do_syscall_64+0xcd/0x250 [ 923.331008][T19484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.333035][T19484] RIP: 0033:0x7fe04cd7ca3c [ 923.334488][T19484] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 923.337640][T19492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'. [ 923.340514][T19484] RSP: 002b:00007fe04dc2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 923.340532][T19484] RAX: ffffffffffffffda RBX: 00007fe04cf35f80 RCX: 00007fe04cd7ca3c [ 923.340539][T19484] RDX: 000000000000000f RSI: 00007fe04dc2e0a0 RDI: 0000000000000004 [ 923.340546][T19484] RBP: 00007fe04dc2e090 R08: 0000000000000000 R09: 0000000000000000 [ 923.340552][T19484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.340559][T19484] R13: 0000000000000000 R14: 00007fe04cf35f80 R15: 00007ffe7eedb1f8 [ 923.340572][T19484] [ 923.449708][T17526] usb 8-1: usb_control_msg returned -32 [ 923.451539][T17526] usbtmc 8-1:16.0: can't read capabilities [ 923.636949][ T30] kernel write not supported for file /1680/attr/keycreate (pid: 30 comm: kworker/1:0) [ 923.750568][ T39] audit: type=1400 audit(923.638:7257): avc: denied { connect } for pid=19506 comm="syz.0.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 923.760387][T19508] FAULT_INJECTION: forcing a failure. [ 923.760387][T19508] name failslab, interval 1, probability 0, space 0, times 0 [ 923.760406][T19508] CPU: 3 UID: 0 PID: 19508 Comm: syz.0.3434 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 923.760419][T19508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 923.760425][T19508] Call Trace: [ 923.760429][T19508] [ 923.760434][T19508] dump_stack_lvl+0x16c/0x1f0 [ 923.760454][T19508] should_fail_ex+0x497/0x5b0 [ 923.760464][T19508] ? fs_reclaim_acquire+0xae/0x150 [ 923.760476][T19508] should_failslab+0xc2/0x120 [ 923.760489][T19508] __kmalloc_node_noprof+0xd1/0x430 [ 923.760512][T19508] ? __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 923.760526][T19508] __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 923.760542][T19508] ? vc_do_resize+0x24e/0x10b0 [ 923.760559][T19508] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 923.760572][T19508] ? rcu_is_watching+0x12/0xc0 [ 923.760586][T19508] ? vc_do_resize+0x24e/0x10b0 [ 923.760599][T19508] vzalloc_noprof+0x6b/0x90 [ 923.760610][T19508] ? vc_do_resize+0x24e/0x10b0 [ 923.760623][T19508] vc_do_resize+0x24e/0x10b0 [ 923.760638][T19508] ? lockdep_hardirqs_on+0x7c/0x110 [ 923.760655][T19508] ? __pfx_vc_do_resize+0x10/0x10 [ 923.760668][T19508] ? set_vc_hi_font+0x382/0x6e0 [ 923.760678][T19508] ? set_vc_hi_font+0x39e/0x6e0 [ 923.760688][T19508] ? set_vc_hi_font+0x3c8/0x6e0 [ 923.760699][T19508] fbcon_do_set_font+0x427/0x910 [ 923.760715][T19508] fbcon_set_font+0x9c0/0xb60 [ 923.760729][T19508] ? __pfx_fbcon_set_font+0x10/0x10 [ 923.760739][T19508] con_font_op+0x7fd/0xf50 [ 923.760751][T19508] ? __pfx_con_font_op+0x10/0x10 [ 923.760762][T19508] ? lock_acquire+0x2f/0xb0 [ 923.760771][T19508] ? __might_fault+0xe3/0x190 [ 923.760785][T19508] ? __might_fault+0xe3/0x190 [ 923.760802][T19508] vt_ioctl+0x4ca/0x2f80 [ 923.760816][T19508] ? __pfx_vt_ioctl+0x10/0x10 [ 923.760839][T19508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 923.760856][T19508] ? do_vfs_ioctl+0x513/0x1990 [ 923.760868][T19508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 923.760884][T19508] ? tty_jobctrl_ioctl+0x152/0xe00 [ 923.760896][T19508] ? __pfx_vt_ioctl+0x10/0x10 [ 923.760908][T19508] tty_ioctl+0x651/0x15d0 [ 923.760924][T19508] ? __pfx_tty_ioctl+0x10/0x10 [ 923.760938][T19508] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 923.760953][T19508] ? trace_lock_acquire+0x14a/0x1d0 [ 923.760970][T19508] ? selinux_file_ioctl+0x180/0x270 [ 923.760981][T19508] ? selinux_file_ioctl+0xb4/0x270 [ 923.760993][T19508] ? __pfx_tty_ioctl+0x10/0x10 [ 923.761008][T19508] __x64_sys_ioctl+0x18f/0x220 [ 923.761021][T19508] do_syscall_64+0xcd/0x250 [ 923.761036][T19508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.761050][T19508] RIP: 0033:0x7fe04cd7dff9 [ 923.761060][T19508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.761070][T19508] RSP: 002b:00007fe04dc0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 923.761081][T19508] RAX: ffffffffffffffda RBX: 00007fe04cf36058 RCX: 00007fe04cd7dff9 [ 923.761088][T19508] RDX: 0000000020000100 RSI: 0000000000004b72 RDI: 0000000000000005 [ 923.761095][T19508] RBP: 00007fe04dc0d090 R08: 0000000000000000 R09: 0000000000000000 [ 923.761101][T19508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 923.761108][T19508] R13: 0000000000000000 R14: 00007fe04cf36058 R15: 00007ffe7eedb1f8 [ 923.761121][T19508] [ 923.761164][T19508] syz.0.3434: vmalloc error: size 8192, failed to allocated page array size 16, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 923.762040][T19508] CPU: 3 UID: 0 PID: 19508 Comm: syz.0.3434 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 923.762069][T19508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 923.762076][T19508] Call Trace: [ 923.762080][T19508] [ 923.762084][T19508] dump_stack_lvl+0x16c/0x1f0 [ 923.762101][T19508] warn_alloc+0x24d/0x3a0 [ 923.762115][T19508] ? __pfx_warn_alloc+0x10/0x10 [ 923.762126][T19508] ? dump_stack_lvl+0x197/0x1f0 [ 923.762139][T19508] ? dump_stack_lvl+0x1a1/0x1f0 [ 923.762154][T19508] ? should_fail_ex+0x2de/0x5b0 [ 923.762166][T19508] ? rcu_is_watching+0x12/0xc0 [ 923.762178][T19508] ? trace_kmalloc+0x2d/0xe0 [ 923.762190][T19508] ? __kmalloc_node_noprof+0x22f/0x430 [ 923.762204][T19508] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 923.762220][T19508] ? vc_do_resize+0x24e/0x10b0 [ 923.762237][T19508] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 923.762250][T19508] ? rcu_is_watching+0x12/0xc0 [ 923.762262][T19508] ? vc_do_resize+0x24e/0x10b0 [ 923.762276][T19508] vzalloc_noprof+0x6b/0x90 [ 923.762287][T19508] ? vc_do_resize+0x24e/0x10b0 [ 923.762300][T19508] vc_do_resize+0x24e/0x10b0 [ 923.762315][T19508] ? lockdep_hardirqs_on+0x7c/0x110 [ 923.762331][T19508] ? __pfx_vc_do_resize+0x10/0x10 [ 923.762344][T19508] ? set_vc_hi_font+0x382/0x6e0 [ 923.762354][T19508] ? set_vc_hi_font+0x39e/0x6e0 [ 923.762364][T19508] ? set_vc_hi_font+0x3c8/0x6e0 [ 923.762376][T19508] fbcon_do_set_font+0x427/0x910 [ 923.762391][T19508] fbcon_set_font+0x9c0/0xb60 [ 923.762405][T19508] ? __pfx_fbcon_set_font+0x10/0x10 [ 923.762416][T19508] con_font_op+0x7fd/0xf50 [ 923.762428][T19508] ? __pfx_con_font_op+0x10/0x10 [ 923.762439][T19508] ? lock_acquire+0x2f/0xb0 [ 923.762448][T19508] ? __might_fault+0xe3/0x190 [ 923.762461][T19508] ? __might_fault+0xe3/0x190 [ 923.762478][T19508] vt_ioctl+0x4ca/0x2f80 [ 923.762491][T19508] ? __pfx_vt_ioctl+0x10/0x10 [ 923.762509][T19508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 923.762525][T19508] ? do_vfs_ioctl+0x513/0x1990 [ 923.762538][T19508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 923.762554][T19508] ? tty_jobctrl_ioctl+0x152/0xe00 [ 923.762566][T19508] ? __pfx_vt_ioctl+0x10/0x10 [ 923.762578][T19508] tty_ioctl+0x651/0x15d0 [ 923.762593][T19508] ? __pfx_tty_ioctl+0x10/0x10 [ 923.762608][T19508] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 923.762622][T19508] ? trace_lock_acquire+0x14a/0x1d0 [ 923.762640][T19508] ? selinux_file_ioctl+0x180/0x270 [ 923.762650][T19508] ? selinux_file_ioctl+0xb4/0x270 [ 923.762662][T19508] ? __pfx_tty_ioctl+0x10/0x10 [ 923.762677][T19508] __x64_sys_ioctl+0x18f/0x220 [ 923.762694][T19508] do_syscall_64+0xcd/0x250 [ 923.762708][T19508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.762721][T19508] RIP: 0033:0x7fe04cd7dff9 [ 923.762730][T19508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.762739][T19508] RSP: 002b:00007fe04dc0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 923.762750][T19508] RAX: ffffffffffffffda RBX: 00007fe04cf36058 RCX: 00007fe04cd7dff9 [ 923.762756][T19508] RDX: 0000000020000100 RSI: 0000000000004b72 RDI: 0000000000000005 [ 923.762763][T19508] RBP: 00007fe04dc0d090 R08: 0000000000000000 R09: 0000000000000000 [ 923.762769][T19508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 923.762775][T19508] R13: 0000000000000000 R14: 00007fe04cf36058 R15: 00007ffe7eedb1f8 [ 923.762788][T19508] [ 923.762845][T19508] Mem-Info: [ 923.762853][T19508] active_anon:3786 inactive_anon:3633 isolated_anon:0 [ 923.762853][T19508] active_file:34965 inactive_file:14284 isolated_file:0 [ 923.762853][T19508] unevictable:6624 dirty:245 writeback:0 [ 923.762853][T19508] slab_reclaimable:6716 slab_unreclaimable:75318 [ 923.762853][T19508] mapped:14889 shmem:7135 pagetables:899 [ 923.762853][T19508] sec_pagetables:325 bounce:0 [ 923.762853][T19508] kernel_misc_reclaimable:0 [ 923.762853][T19508] free:488692 free_pcp:2398 free_cma:0 [ 923.762924][T19508] Node 0 active_anon:15144kB inactive_anon:14532kB active_file:139860kB inactive_file:56992kB unevictable:22960kB isolated(anon):0kB isolated(file):0kB mapped:59516kB dirty:980kB writeback:0kB shmem:25004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12016kB pagetables:3596kB sec_pagetables:1300kB all_unreclaimable? no [ 923.763010][T19508] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 923.763089][T19508] Node 0 DMA free:15116kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:240kB local_pcp:64kB free_cma:0kB [ 923.763176][T19508] lowmem_reserve[]: 0 1214 0 0 0 [ 923.763336][T19508] Node 0 DMA32 free:330056kB boost:0kB min:27636kB low:34544kB high:41452kB reserved_highatomic:0KB active_anon:15144kB inactive_anon:14532kB active_file:139860kB inactive_file:56992kB unevictable:22960kB writepending:980kB present:2080628kB managed:1272192kB mlocked:0kB bounce:0kB free_pcp:9068kB local_pcp:6384kB free_cma:0kB [ 923.763415][T19508] lowmem_reserve[]: 0 0 0 0 0 [ 923.763551][T19508] Node 1 Normal free:1609596kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:388kB local_pcp:336kB free_cma:0kB [ 923.770565][T19508] lowmem_reserve[]: 0 0 0 0 0 [ 923.770589][T19508] Node 0 DMA: 9*4kB (UM) 9*8kB (UM) 8*16kB (UM) 9*32kB (UM) 10*64kB (UM) 9*128kB (UM) 6*256kB (UM) 8*512kB (UM) 5*1024kB (UM) 1*2048kB (U) 0*4096kB = 15116kB [ 923.770674][T19508] Node 0 DMA32: 1863*4kB (UME) 2825*8kB (UME) 930*16kB (UME) 545*32kB (UME) 669*64kB (UME) 332*128kB (UME) 161*256kB (UME) 97*512kB (UME) 43*1024kB (UM) 16*2048kB (UM) 6*4096kB (UM) = 339940kB [ 923.770936][T19508] Node 1 Normal: 15*4kB (UM) 14*8kB (UME) 29*16kB (UME) 164*32kB (UME) 78*64kB (UME) 26*128kB (UME) 14*256kB (UME) 9*512kB (UM) 4*1024kB (UME) 3*2048kB (ME) 385*4096kB (M) = 1609596kB [ 923.771024][T19508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 923.771032][T19508] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 923.771040][T19508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 923.771048][T19508] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 923.771056][T19508] 56384 total pagecache pages [ 923.771060][T19508] 0 pages in swap cache [ 923.771064][T19508] Free swap = 124188kB [ 923.771068][T19508] Total swap = 124996kB [ 923.771073][T19508] 1048443 pages RAM [ 923.771076][T19508] 0 pages HighMem/MovableOnly [ 923.771080][T19508] 281074 pages reserved [ 923.771084][T19508] 0 pages cma reserved [ 923.804245][T19509] usbtmc 8-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 924.311485][ T85] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.400094][ T85] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.477668][ T85] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.555056][ T85] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.663460][ T85] bridge_slave_1: left allmulticast mode [ 924.665046][ T85] bridge_slave_1: left promiscuous mode [ 924.668295][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.671762][ T85] bridge_slave_0: left allmulticast mode [ 924.673381][ T85] bridge_slave_0: left promiscuous mode [ 924.675187][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.033768][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.037917][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.044643][ T85] bond0 (unregistering): Released all slaves [ 925.231616][ T4778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 925.236313][ T4778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 925.239172][ T4778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 925.245495][ T4778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 925.247922][ T4778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 925.262435][ T4778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 925.323095][T19532] ip6gretap0 speed is unknown, defaulting to 1000 [ 925.434814][T19531] syzkaller0: entered promiscuous mode [ 925.437025][T19531] syzkaller0: entered allmulticast mode [ 925.452318][ T85] hsr_slave_0: left promiscuous mode [ 925.454780][ T85] hsr_slave_1: left promiscuous mode [ 925.456910][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.458892][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.461966][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.463983][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.490870][ T85] veth1_macvtap: left promiscuous mode [ 925.492361][ T85] veth0_macvtap: left promiscuous mode [ 925.493919][ T85] veth1_vlan: left promiscuous mode [ 925.495307][ T85] veth0_vlan: left promiscuous mode [ 925.845074][ T5844] usb 8-1: USB disconnect, device number 19 [ 925.873732][T19554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'. [ 925.919945][ T8076] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 925.922408][ T8076] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 925.947139][ T8076] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz1 [ 926.704380][ T85] team0 (unregistering): Port device team_slave_1 removed [ 926.836694][ T85] team0 (unregistering): Port device team_slave_0 removed [ 927.312632][T17353] Bluetooth: hci1: command tx timeout [ 927.456741][ T39] audit: type=1326 audit(927.338:7258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19587 comm="syz.3.3448" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 927.467368][ T39] audit: type=1326 audit(927.348:7259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19587 comm="syz.3.3448" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 927.473547][ T39] audit: type=1326 audit(927.358:7261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19589 comm="syz.3.3448" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f20a6db00e5 code=0x7ffc0000 [ 927.479335][ T39] audit: type=1326 audit(927.348:7260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19587 comm="syz.3.3448" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 927.485017][ T39] audit: type=1326 audit(927.358:7262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19587 comm="syz.3.3448" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 927.490929][ T39] audit: type=1326 audit(927.358:7263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19587 comm="syz.3.3448" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 927.496732][ T39] audit: type=1326 audit(927.358:7264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19587 comm="syz.3.3448" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 927.502564][ T39] audit: type=1326 audit(927.358:7265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19587 comm="syz.3.3448" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 927.508311][ T39] audit: type=1326 audit(927.358:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19587 comm="syz.3.3448" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20a6d19959 code=0x7ffc0000 [ 927.513949][ T39] audit: type=1326 audit(927.358:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19587 comm="syz.3.3448" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 927.548452][T19575] slcan: can't register candev [ 927.554118][T19575] Falling back ldisc for ttyprintk. [ 929.287521][T19588] bridge_slave_1: left allmulticast mode [ 929.289569][T19588] bridge_slave_1: left promiscuous mode [ 929.295591][T19588] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.390067][T17353] Bluetooth: hci1: command tx timeout [ 929.506760][T19532] chnl_net:caif_netlink_parms(): no params data found [ 929.570954][T19532] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.572861][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.574787][T19532] bridge_slave_0: entered allmulticast mode [ 929.576806][T19532] bridge_slave_0: entered promiscuous mode [ 929.579519][T19532] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.582711][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.584603][T19532] bridge_slave_1: entered allmulticast mode [ 929.586605][T19532] bridge_slave_1: entered promiscuous mode [ 929.626088][T19532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.630203][T19532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.658604][T19532] team0: Port device team_slave_0 added [ 929.664329][T19532] team0: Port device team_slave_1 added [ 929.691183][T19532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.692941][T19532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.700711][T19532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.705979][T19532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.708284][T19532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.716918][T19532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.769422][T19532] hsr_slave_0: entered promiscuous mode [ 929.780731][T19532] hsr_slave_1: entered promiscuous mode [ 929.782708][T19532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 929.784674][T19532] Cannot create hsr debugfs directory [ 930.265641][T19532] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 930.268863][T19532] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 930.281223][T19532] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 930.284377][T19532] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 930.295733][T19532] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.297574][T19532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.299451][T19532] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.301399][T19532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.323551][T19532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.331412][T18135] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.334697][T18135] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.349641][T19532] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.354551][T18137] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.356415][T18137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.360489][T18135] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.362336][T18135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.474575][T19532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.492122][T19532] veth0_vlan: entered promiscuous mode [ 930.496195][T19532] veth1_vlan: entered promiscuous mode [ 930.506618][T19532] veth0_macvtap: entered promiscuous mode [ 930.509428][T19532] veth1_macvtap: entered promiscuous mode [ 930.515187][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.517842][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.521588][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.524274][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.527392][T19532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.531745][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.534430][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.536929][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.539576][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.542875][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.545603][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.548664][T19532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.553555][T19532] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.555797][T19532] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.558013][T19532] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.560517][T19532] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.597216][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.599210][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.618041][T18135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.623145][T18135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.240534][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.480051][T17353] Bluetooth: hci1: command tx timeout [ 932.930020][T17526] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 933.101419][T17526] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 933.103679][T17526] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 933.106273][T17526] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 933.108576][T17526] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 933.114310][T17526] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 933.116703][T17526] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 933.118798][T17526] usb 5-1: Product: syz [ 933.120059][T17526] usb 5-1: Manufacturer: syz [ 933.136594][T17526] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 933.265305][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 933.265316][ T39] audit: type=1400 audit(933.148:7270): avc: denied { write } for pid=19726 comm="syz.2.3470" name="sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 933.275423][T19729] sg_write: data in/out 32733/14 bytes for SCSI command 0x15-- guessing data in; [ 933.275423][T19729] program syz.2.3470 not setting count and/or reply_len properly [ 933.341445][T19721] netlink: 'syz.0.3467': attribute type 9 has an invalid length. [ 933.351681][T19721] macvlan11: entered promiscuous mode [ 933.354855][T19721] 8021q: adding VLAN 0 to HW filter on device macvlan11 [ 933.565228][T17353] Bluetooth: hci1: command tx timeout [ 934.157797][T19739] FAULT_INJECTION: forcing a failure. [ 934.157797][T19739] name failslab, interval 1, probability 0, space 0, times 0 [ 934.162803][T19739] CPU: 1 UID: 0 PID: 19739 Comm: syz.2.3473 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 934.166438][T19739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 934.169163][T19739] Call Trace: [ 934.170064][T19739] [ 934.170833][T19739] dump_stack_lvl+0x16c/0x1f0 [ 934.172063][T19739] should_fail_ex+0x497/0x5b0 [ 934.173511][T19739] should_failslab+0xc2/0x120 [ 934.175228][T19739] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 934.177155][T19739] ? skb_clone+0x190/0x3f0 [ 934.178799][T19739] skb_clone+0x190/0x3f0 [ 934.180335][T19739] netlink_deliver_tap+0xab3/0xd90 [ 934.182170][T19739] netlink_unicast+0x6b4/0x7f0 [ 934.183817][T19739] ? __pfx_netlink_unicast+0x10/0x10 [ 934.185539][T19739] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 934.187384][T19739] netlink_ack+0x6a8/0xb90 [ 934.188961][T19739] netlink_rcv_skb+0x348/0x440 [ 934.190735][T19739] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 934.192672][T19739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 934.194598][T19739] ? netlink_deliver_tap+0x1ae/0xd90 [ 934.196645][T19739] netlink_unicast+0x53c/0x7f0 [ 934.198360][T19739] ? __pfx_netlink_unicast+0x10/0x10 [ 934.200345][T19739] netlink_sendmsg+0x8b8/0xd70 [ 934.202128][T19739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.204046][T19739] ? __import_iovec+0x1fd/0x6e0 [ 934.205805][T19739] ____sys_sendmsg+0xaaf/0xc90 [ 934.207508][T19739] ? copy_msghdr_from_user+0x10b/0x160 [ 934.209463][T19739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.211543][T19739] ? __pfx___lock_acquire+0x10/0x10 [ 934.213497][T19739] ___sys_sendmsg+0x135/0x1e0 [ 934.215223][T19739] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.217198][T19739] ? lock_acquire+0x2f/0xb0 [ 934.218858][T19739] ? __fget_files+0x40/0x3f0 [ 934.220547][T19739] ? fdget+0x176/0x210 [ 934.222034][T19739] __sys_sendmmsg+0x1a1/0x450 [ 934.223642][T19739] ? __pfx___sys_sendmmsg+0x10/0x10 [ 934.225485][T19739] ? vfs_write+0x14d/0x1140 [ 934.227152][T19739] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 934.229310][T19739] ? fput+0x30/0x390 [ 934.230742][T19739] ? ksys_write+0x1ad/0x260 [ 934.232487][T19739] ? __pfx_ksys_write+0x10/0x10 [ 934.234286][T19739] __x64_sys_sendmmsg+0x9c/0x100 [ 934.236036][T19739] ? lockdep_hardirqs_on+0x7c/0x110 [ 934.238100][T19739] do_syscall_64+0xcd/0x250 [ 934.239783][T19739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.241964][T19739] RIP: 0033:0x7f0d08f7dff9 [ 934.243587][T19739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.250312][T19739] RSP: 002b:00007f0d09cb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 934.253252][T19739] RAX: ffffffffffffffda RBX: 00007f0d09135f80 RCX: 00007f0d08f7dff9 [ 934.256189][T19739] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000004 [ 934.259165][T19739] RBP: 00007f0d09cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 934.261769][T19739] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 934.263945][T19739] R13: 0000000000000000 R14: 00007f0d09135f80 R15: 00007ffdd921c248 [ 934.266759][T19739] [ 934.536957][ T5844] usb 5-1: USB disconnect, device number 10 [ 934.603946][T19747] tipc: Started in network mode [ 934.605683][T19747] tipc: Node identity 9, cluster identity 4711 [ 934.607333][T19747] tipc: Node number set to 9 [ 935.076315][T19763] netlink: 'syz.0.3481': attribute type 1 has an invalid length. [ 935.078726][T19763] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3481'. [ 935.360068][T13110] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 935.362883][ T58] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 935.510150][T13110] usb 8-1: Using ep0 maxpacket: 32 [ 935.512231][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 935.516128][T13110] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 935.519336][ T58] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 935.521699][ T58] usb 5-1: config 179 has no interface number 0 [ 935.523533][ T58] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 935.526725][ T58] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 935.529796][ T58] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 935.533083][ T58] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 935.536267][ T58] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 935.539731][ T58] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 935.543041][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.546911][T19763] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 935.548088][T13110] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 935.552349][T13110] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 935.554604][T13110] usb 8-1: Product: syz [ 935.555762][T13110] usb 8-1: Manufacturer: syz [ 935.557042][T13110] usb 8-1: SerialNumber: syz [ 935.561083][T13110] usb 8-1: config 0 descriptor?? [ 935.563895][T19768] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 935.754900][ T58] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input101 [ 935.830016][ T30] usb 8-1: USB disconnect, device number 20 [ 936.437743][T19774] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3483'. [ 937.340039][ T58] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 937.501253][ T58] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 937.503522][ T58] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.506041][ T58] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 937.508231][ T58] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 937.513065][ T58] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 937.515374][ T58] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 937.517426][ T58] usb 8-1: Product: syz [ 937.518554][ T58] usb 8-1: Manufacturer: syz [ 937.522372][ T58] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 937.727899][T19776] netlink: 'syz.3.3484': attribute type 9 has an invalid length. [ 937.733280][T19776] macvlan30: entered promiscuous mode [ 937.735809][T19776] 8021q: adding VLAN 0 to HW filter on device macvlan30 [ 937.863072][ T30] usb 8-1: USB disconnect, device number 21 [ 937.891574][T19781] netlink: 'syz.2.3486': attribute type 21 has an invalid length. [ 937.894291][T19781] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3486'. [ 937.897359][T19781] netlink: 'syz.2.3486': attribute type 5 has an invalid length. [ 937.900402][T19781] netlink: 'syz.2.3486': attribute type 6 has an invalid length. [ 937.903039][T19781] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3486'. [ 938.090519][ T58] usb 5-1: USB disconnect, device number 11 [ 938.092206][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 938.092226][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 938.097071][ T58] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 938.668145][T19800] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20003 [ 938.927186][T19805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3492'. [ 939.329052][T19807] ip_vti0: entered promiscuous mode [ 939.332933][T19807] vlan3: entered promiscuous mode [ 939.338454][T19807] ip_vti0: left promiscuous mode [ 939.871516][T19816] netlink: 'syz.0.3496': attribute type 1 has an invalid length. [ 939.874733][T19816] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3496'. [ 940.159986][ T5844] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 940.320049][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 940.323727][ T5844] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 940.326070][ T5844] usb 5-1: config 179 has no interface number 0 [ 940.327921][ T5844] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 940.331067][ T5844] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 940.334372][ T5844] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 940.337370][ T5844] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 940.340666][ T5844] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 940.344715][ T5844] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 940.347275][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.351215][T19816] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 940.492786][ T39] audit: type=1400 audit(940.378:7271): avc: denied { execute } for pid=19821 comm="syz.3.3497" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 940.556833][ T5844] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input102 [ 941.045661][T19826] netlink: 'syz.2.3498': attribute type 1 has an invalid length. [ 941.047821][T19826] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3498'. [ 941.066323][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3498'. [ 941.391601][T19838] IPVS: Unknown mcast interface: veth0_to_bridge [ 941.981159][ T58] kernel write not supported for file /3730/attr/keycreate (pid: 58 comm: kworker/3:1) [ 942.043886][T19851] IPVS: Unknown mcast interface: veth0_to_bridge [ 942.440081][T15582] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 942.590153][T15582] usb 8-1: Using ep0 maxpacket: 8 [ 942.593529][T15582] usb 8-1: config 1 interface 0 has no altsetting 0 [ 942.598311][T15582] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 942.601439][T15582] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.603564][T15582] usb 8-1: Product: 䀁 [ 942.604802][T15582] usb 8-1: Manufacturer: ᠁ [ 942.606075][T15582] usb 8-1: SerialNumber: И [ 942.864389][ T6011] usb 5-1: USB disconnect, device number 12 [ 942.864463][ C2] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 942.868841][ T6011] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 943.813016][ T39] audit: type=1400 audit(943.698:7272): avc: denied { ioctl } for pid=19862 comm="syz.0.3509" path="socket:[91120]" dev="sockfs" ino=91120 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 943.886328][T19870] FAULT_INJECTION: forcing a failure. [ 943.886328][T19870] name failslab, interval 1, probability 0, space 0, times 0 [ 943.891125][T19870] CPU: 1 UID: 0 PID: 19870 Comm: syz.0.3510 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 943.891152][T19870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 943.891164][T19870] Call Trace: [ 943.891172][T19870] [ 943.891181][T19870] dump_stack_lvl+0x16c/0x1f0 [ 943.901360][T19870] should_fail_ex+0x497/0x5b0 [ 943.902619][T19870] ? fs_reclaim_acquire+0xae/0x150 [ 943.904001][T19870] should_failslab+0xc2/0x120 [ 943.905228][T19870] __kmalloc_cache_noprof+0x6b/0x300 [ 943.906627][T19870] ? register_netdevice+0x504/0x1e90 [ 943.908006][T19870] register_netdevice+0x504/0x1e90 [ 943.909334][T19870] ? __pfx_register_netdevice+0x10/0x10 [ 943.910820][T19870] l2tp_eth_create+0x7ea/0xde0 [ 943.912128][T19870] ? __pfx_l2tp_eth_create+0x10/0x10 [ 943.914055][T19870] ? __pfx_l2tp_eth_create+0x10/0x10 [ 943.915960][T19870] l2tp_nl_cmd_session_create+0x846/0xb80 [ 943.917774][T19870] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 943.919976][T19870] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 943.922593][T19870] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 943.925228][T19870] genl_family_rcv_msg_doit+0x202/0x2f0 [ 943.927240][T19870] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 943.929428][T19870] ? bpf_lsm_capable+0x9/0x10 [ 943.931160][T19870] ? security_capable+0x7e/0x260 [ 943.932928][T19870] ? ns_capable+0xd7/0x110 [ 943.934566][T19870] genl_rcv_msg+0x565/0x800 [ 943.936213][T19870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.938058][T19870] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 943.939753][T19870] netlink_rcv_skb+0x16b/0x440 [ 943.941178][T19870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.942508][T19870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 943.944254][T19870] ? down_read+0xc9/0x330 [ 943.945661][T19870] ? __pfx_down_read+0x10/0x10 [ 943.946946][T19870] ? netlink_deliver_tap+0x1ae/0xd90 [ 943.948324][T19870] genl_rcv+0x28/0x40 [ 943.949389][T19870] netlink_unicast+0x53c/0x7f0 [ 943.950671][T19870] ? __pfx_netlink_unicast+0x10/0x10 [ 943.952061][T19870] netlink_sendmsg+0x8b8/0xd70 [ 943.953417][T19870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.955028][T19870] ? __import_iovec+0x1fd/0x6e0 [ 943.956392][T19870] ____sys_sendmsg+0xaaf/0xc90 [ 943.957633][T19870] ? copy_msghdr_from_user+0x10b/0x160 [ 943.959066][T19870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 943.960440][T19870] ? __pfx___lock_acquire+0x10/0x10 [ 943.961796][T19870] ___sys_sendmsg+0x135/0x1e0 [ 943.963116][T19870] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.964626][T19870] ? lock_acquire+0x2f/0xb0 [ 943.965826][T19870] ? __fget_files+0x40/0x3f0 [ 943.967056][T19870] ? fdget+0x176/0x210 [ 943.968109][T19870] __sys_sendmsg+0x117/0x1f0 [ 943.969323][T19870] ? __pfx___sys_sendmsg+0x10/0x10 [ 943.971118][T19870] ? __fget_files+0x244/0x3f0 [ 943.972857][T19870] do_syscall_64+0xcd/0x250 [ 943.974489][T19870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.976375][T19870] RIP: 0033:0x7fe04cd7dff9 [ 943.977562][T19870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.983318][T19870] RSP: 002b:00007fe04dc2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.985459][T19870] RAX: ffffffffffffffda RBX: 00007fe04cf35f80 RCX: 00007fe04cd7dff9 [ 943.987546][T19870] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 943.989599][T19870] RBP: 00007fe04dc2e090 R08: 0000000000000000 R09: 0000000000000000 [ 943.991661][T19870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 943.993769][T19870] R13: 0000000000000000 R14: 00007fe04cf35f80 R15: 00007ffe7eedb1f8 [ 943.995842][T19870] [ 944.065213][ T6011] kernel write not supported for file /1733/attr/keycreate (pid: 6011 comm: kworker/0:5) [ 944.107571][ T39] audit: type=1400 audit(943.988:7273): avc: denied { ioctl } for pid=19875 comm="syz.0.3513" path="socket:[91989]" dev="sockfs" ino=91989 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 945.012018][T13110] kernel write not supported for file /3501/attr/keycreate (pid: 13110 comm: kworker/3:3) [ 945.128790][T19906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3525'. [ 945.132370][T19906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3525'. [ 945.146783][T19906] FAULT_INJECTION: forcing a failure. [ 945.146783][T19906] name failslab, interval 1, probability 0, space 0, times 0 [ 945.150964][T19906] CPU: 3 UID: 0 PID: 19906 Comm: syz.2.3525 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 945.153952][T19906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 945.156712][T19906] Call Trace: [ 945.157576][T19906] [ 945.158394][T19906] dump_stack_lvl+0x16c/0x1f0 [ 945.159634][T19906] should_fail_ex+0x497/0x5b0 [ 945.160878][T19906] ? fs_reclaim_acquire+0xae/0x150 [ 945.162207][T19906] should_failslab+0xc2/0x120 [ 945.163455][T19906] kmem_cache_alloc_node_noprof+0x71/0x310 [ 945.164963][T19906] ? __alloc_skb+0x2b1/0x380 [ 945.166211][T19906] __alloc_skb+0x2b1/0x380 [ 945.166441][T15582] usbhid 8-1:1.0: can't add hid device: -71 [ 945.167321][T19906] ? __pfx___alloc_skb+0x10/0x10 [ 945.167339][T19906] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 945.168956][T15582] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 945.170192][T19906] netlink_alloc_large_skb+0x69/0x130 [ 945.170209][T19906] netlink_sendmsg+0x689/0xd70 [ 945.170225][T19906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.170237][T19906] ? __import_iovec+0x1fd/0x6e0 [ 945.170253][T19906] ____sys_sendmsg+0xaaf/0xc90 [ 945.172639][T15582] usb 8-1: USB disconnect, device number 22 [ 945.173765][T19906] ? copy_msghdr_from_user+0x10b/0x160 [ 945.183539][T19906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.185032][T19906] ? __pfx___lock_acquire+0x10/0x10 [ 945.186419][T19906] ___sys_sendmsg+0x135/0x1e0 [ 945.187671][T19906] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.189043][T19906] ? lock_acquire+0x2f/0xb0 [ 945.190261][T19906] ? __fget_files+0x40/0x3f0 [ 945.191484][T19906] ? fdget+0x176/0x210 [ 945.192547][T19906] __sys_sendmsg+0x117/0x1f0 [ 945.193865][T19906] ? __pfx___sys_sendmsg+0x10/0x10 [ 945.195259][T19906] ? __fget_files+0x244/0x3f0 [ 945.196495][T19906] do_syscall_64+0xcd/0x250 [ 945.197688][T19906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.199243][T19906] RIP: 0033:0x7f0d08f7dff9 [ 945.200417][T19906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.205379][T19906] RSP: 002b:00007f0d09cb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.207756][T19906] RAX: ffffffffffffffda RBX: 00007f0d09135f80 RCX: 00007f0d08f7dff9 [ 945.209838][T19906] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 945.211866][T19906] RBP: 00007f0d09cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 945.214233][T19906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.217250][T19906] R13: 0000000000000000 R14: 00007f0d09135f80 R15: 00007ffdd921c248 [ 945.219914][T19906] [ 945.269489][T13110] kernel write not supported for file /3744/attr/keycreate (pid: 13110 comm: kworker/3:3) [ 945.348985][T19928] ip6gretap0 speed is unknown, defaulting to 1000 [ 945.499274][T19930] syz.3.3533: attempt to access beyond end of device [ 945.499274][T19930] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 945.503120][ T39] audit: type=1400 audit(945.378:7274): avc: denied { mounton } for pid=19922 comm="syz.3.3533" path="/1198/file0" dev="tmpfs" ino=6471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 945.509260][T19930] SQUASHFS error: Failed to read block 0x0: -5 [ 945.511227][T19930] unable to read squashfs_super_block [ 945.594119][ T39] audit: type=1400 audit(945.478:7275): avc: denied { connect } for pid=19927 comm="syz.0.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 945.794286][T19942] syzkaller0: entered promiscuous mode [ 945.796017][T19942] syzkaller0: entered allmulticast mode [ 946.241077][T13110] kernel write not supported for file /1763/attr/keycreate (pid: 13110 comm: kworker/3:3) [ 947.544491][T19953] IPVS: Unknown mcast interface: veth0_to_bridge [ 947.829980][ T5844] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 947.981421][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.990815][ T5844] usb 5-1: New USB device found, idVendor=19d2, idProduct=1292, bcdDevice=f7.be [ 947.993965][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 947.996632][ T5844] usb 5-1: Product: syz [ 947.998170][ T5844] usb 5-1: SerialNumber: syz [ 948.003348][ T5844] usb 5-1: config 0 descriptor?? [ 948.216726][ T5844] usb 5-1: USB disconnect, device number 13 [ 948.290330][T16466] kernel write not supported for file /3773/attr/keycreate (pid: 16466 comm: kworker/1:4) [ 948.629987][ T5381] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 948.781209][ T5381] usb 8-1: Using ep0 maxpacket: 8 [ 948.784580][ T5381] usb 8-1: config 1 interface 0 has no altsetting 0 [ 948.788955][ T5381] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 948.792375][ T5381] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.795220][ T5381] usb 8-1: Product: 䀁 [ 948.796734][ T5381] usb 8-1: Manufacturer: ᠁ [ 948.798346][ T5381] usb 8-1: SerialNumber: И [ 949.017606][T20021] vxcan1: entered allmulticast mode [ 949.078567][ T39] audit: type=1400 audit(948.958:7276): avc: denied { accept } for pid=20024 comm="syz.0.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 949.354781][T20032] syzkaller0: entered promiscuous mode [ 949.356372][T20032] syzkaller0: entered allmulticast mode [ 951.126844][ T5378] kernel write not supported for file /3521/attr/keycreate (pid: 5378 comm: kworker/1:3) [ 951.129263][T20043] netlink: 'syz.0.3555': attribute type 1 has an invalid length. [ 951.132693][T20043] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3555'. [ 951.163078][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3555'. [ 951.374740][T20054] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3557'. [ 951.450012][T15582] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 951.510940][ T5381] usbhid 8-1:1.0: can't add hid device: -71 [ 951.512577][ T5381] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 951.516044][ T5381] usb 8-1: USB disconnect, device number 23 [ 951.610626][T15582] usb 5-1: Using ep0 maxpacket: 8 [ 951.615360][T15582] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 951.619950][T15582] usb 5-1: config 179 has no interface number 0 [ 951.621644][T15582] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 951.624505][T15582] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 951.627411][T15582] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 951.638519][T15582] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 951.642013][T15582] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 951.644077][ T39] audit: type=1400 audit(951.528:7277): avc: denied { map } for pid=20061 comm="syz.3.3561" path="socket:[93414]" dev="sockfs" ino=93414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 951.645673][T15582] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 951.645690][T15582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.650473][T20043] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 951.651920][ T39] audit: type=1400 audit(951.528:7278): avc: denied { accept } for pid=20061 comm="syz.3.3561" path="socket:[93414]" dev="sockfs" ino=93414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 951.697506][T20064] netlink: 'syz.3.3562': attribute type 1 has an invalid length. [ 951.699794][T20064] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3562'. [ 951.859108][ T5381] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input103 [ 951.970027][T17526] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 952.083900][ T39] audit: type=1400 audit(951.968:7279): avc: denied { ioctl } for pid=20071 comm="syz.2.3564" path="mnt:[4026533159]" dev="nsfs" ino=4026533159 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 952.120000][T17526] usb 8-1: Using ep0 maxpacket: 8 [ 952.124411][T17526] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 952.127204][T17526] usb 8-1: config 179 has no interface number 0 [ 952.129351][T17526] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 952.133081][T17526] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 952.136892][T17526] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 952.140634][T17526] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 952.144415][T17526] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 952.148785][T17526] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 952.152028][T17526] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.160168][T20064] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 952.206884][T20084] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 952.366009][ T5844] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input104 [ 953.596931][T20098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=20098 comm=syz.2.3571 [ 954.134240][ T5381] usb 5-1: USB disconnect, device number 14 [ 954.136248][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 954.136268][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 954.148155][ T5381] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 954.665604][ T39] audit: type=1400 audit(954.548:7280): avc: denied { mounton } for pid=20111 comm="syz.0.3577" path="/597/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 954.706272][ T5378] usb 8-1: USB disconnect, device number 24 [ 954.706495][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 954.710890][ T5378] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 954.834624][ T39] audit: type=1400 audit(954.718:7281): avc: denied { connect } for pid=20118 comm="syz.3.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 954.843520][ T39] audit: type=1400 audit(954.728:7282): avc: denied { setattr } for pid=20118 comm="syz.3.3580" name="ttynull" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 955.794465][ T39] audit: type=1400 audit(955.678:7283): avc: denied { ioctl } for pid=20144 comm="syz.0.3586" path="socket:[94470]" dev="sockfs" ino=94470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 955.803864][ T39] audit: type=1400 audit(955.698:7284): avc: denied { connect } for pid=20144 comm="syz.0.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 955.824767][ T39] audit: type=1400 audit(955.708:7285): avc: denied { bind } for pid=20146 comm="syz.3.3587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 955.831086][ T39] audit: type=1400 audit(955.708:7286): avc: denied { listen } for pid=20146 comm="syz.3.3587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 956.051324][T20158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3591'. [ 956.108514][T20160] 9pnet_virtio: no channels available for device syz [ 956.479992][T20163] netlink: 'syz.2.3593': attribute type 10 has an invalid length. [ 956.486284][T20163] : entered promiscuous mode [ 957.075840][T20176] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 262395 (only 8 groups) [ 957.200757][ T5378] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 957.360064][ T5378] usb 5-1: Using ep0 maxpacket: 8 [ 957.367016][ T5378] usb 5-1: config 1 interface 0 has no altsetting 0 [ 957.375875][ T5378] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 957.383231][ T5378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.387870][ T5378] usb 5-1: Product: 䀁 [ 957.390401][ T5378] usb 5-1: Manufacturer: ᠁ [ 957.393829][ T5378] usb 5-1: SerialNumber: И [ 957.639807][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 957.639818][ T39] audit: type=1326 audit(957.518:7289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 957.649560][ T39] audit: type=1326 audit(957.518:7290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 957.657756][ T39] audit: type=1326 audit(957.538:7291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 957.665981][ T39] audit: type=1326 audit(957.538:7292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 957.673864][ T39] audit: type=1326 audit(957.538:7293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 957.682008][ T39] audit: type=1326 audit(957.538:7294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 957.688103][ T39] audit: type=1326 audit(957.538:7295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 957.696454][ T39] audit: type=1326 audit(957.538:7296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 957.704449][ T39] audit: type=1326 audit(957.538:7297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 957.711863][ T39] audit: type=1326 audit(957.538:7298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a6d7dff9 code=0x7ffc0000 [ 958.147745][T20204] ax25_connect(): syz.3.3606 uses autobind, please contact jreuter@yaina.de [ 959.192992][T20228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'. [ 959.226044][T20230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3615'. [ 959.309341][T20233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3616'. [ 959.333188][T20235] FAULT_INJECTION: forcing a failure. [ 959.333188][T20235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.336417][T20235] CPU: 1 UID: 0 PID: 20235 Comm: syz.2.3617 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 959.339015][T20235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 959.341683][T20235] Call Trace: [ 959.342539][T20235] [ 959.343297][T20235] dump_stack_lvl+0x16c/0x1f0 [ 959.344531][T20235] should_fail_ex+0x497/0x5b0 [ 959.345770][T20235] _copy_to_user+0x30/0xc0 [ 959.346897][T20235] simple_read_from_buffer+0xd0/0x160 [ 959.348270][T20235] proc_fail_nth_read+0x198/0x270 [ 959.349555][T20235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 959.350925][T20235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 959.352270][T20235] vfs_read+0x1ce/0xbd0 [ 959.353312][T20235] ? __fget_files+0x23a/0x3f0 [ 959.354527][T20235] ? fdget_pos+0x24c/0x360 [ 959.355661][T20235] ? __pfx_lock_release+0x10/0x10 [ 959.356966][T20235] ? trace_lock_acquire+0x14a/0x1d0 [ 959.358318][T20235] ? __pfx_vfs_read+0x10/0x10 [ 959.359542][T20235] ? __pfx___mutex_lock+0x10/0x10 [ 959.360856][T20235] ? __fget_files+0x244/0x3f0 [ 959.362085][T20235] ksys_read+0x12f/0x260 [ 959.363184][T20235] ? __pfx_ksys_read+0x10/0x10 [ 959.364435][T20235] do_syscall_64+0xcd/0x250 [ 959.365639][T20235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.367179][T20235] RIP: 0033:0x7f0d08f7ca3c [ 959.368336][T20235] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 959.373756][T20235] RSP: 002b:00007f0d09cb5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 959.375826][T20235] RAX: ffffffffffffffda RBX: 00007f0d09135f80 RCX: 00007f0d08f7ca3c [ 959.377811][T20235] RDX: 000000000000000f RSI: 00007f0d09cb50a0 RDI: 0000000000000003 [ 959.379798][T20235] RBP: 00007f0d09cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 959.381827][T20235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.383851][T20235] R13: 0000000000000000 R14: 00007f0d09135f80 R15: 00007ffdd921c248 [ 959.385825][T20235] [ 959.723018][T20262] fuse: Unknown parameter 'E|0x0000000000000004' [ 959.744102][T20264] dns_resolver: Unsupported content type (30) [ 959.746506][T20262] dns_resolver: Unsupported content type (30) [ 959.775662][T20267] FAULT_INJECTION: forcing a failure. [ 959.775662][T20267] name failslab, interval 1, probability 0, space 0, times 0 [ 959.779427][T20267] CPU: 3 UID: 0 PID: 20267 Comm: syz.2.3624 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 959.783321][T20267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 959.786487][T20267] Call Trace: [ 959.787368][T20267] [ 959.788148][T20267] dump_stack_lvl+0x16c/0x1f0 [ 959.789387][T20267] should_fail_ex+0x497/0x5b0 [ 959.790730][T20267] ? fs_reclaim_acquire+0xae/0x150 [ 959.791577][T20247] syzkaller0: entered promiscuous mode [ 959.792092][T20267] should_failslab+0xc2/0x120 [ 959.793948][T20247] syzkaller0: entered allmulticast mode [ 959.795101][T20267] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 959.798424][T20267] ? __d_alloc+0x31/0xaa0 [ 959.799611][T20267] __d_alloc+0x31/0xaa0 [ 959.800853][T20267] d_alloc+0x4a/0x1e0 [ 959.801987][T20267] d_alloc_parallel+0xe9/0x12b0 [ 959.803312][T20267] ? __pfx_d_alloc_parallel+0x10/0x10 [ 959.804686][T20267] ? lockdep_init_map_type+0x16d/0x7d0 [ 959.806133][T20267] ? lock_acquire.part.0+0x11b/0x380 [ 959.807518][T20267] ? lockdep_init_map_type+0x16d/0x7d0 [ 959.808918][T20267] __lookup_slow+0x194/0x460 [ 959.810108][T20267] ? __pfx___lookup_slow+0x10/0x10 [ 959.811775][T20267] ? walk_component+0x342/0x5b0 [ 959.813163][T20267] ? lookup_fast+0x155/0x540 [ 959.814350][T20267] walk_component+0x350/0x5b0 [ 959.815576][T20267] path_lookupat+0x17f/0x770 [ 959.816802][T20267] filename_lookup+0x1e5/0x5b0 [ 959.818173][T20267] ? find_held_lock+0x2d/0x110 [ 959.819543][T20267] ? __pfx_filename_lookup+0x10/0x10 [ 959.821060][T20267] ? __might_fault+0x13b/0x190 [ 959.822320][T20267] ? getname_flags.part.0+0x1c5/0x550 [ 959.823902][T20267] user_path_at+0x3a/0x60 [ 959.825383][T20267] path_setxattr+0x126/0x280 [ 959.826798][T20267] ? __pfx_path_setxattr+0x10/0x10 [ 959.828339][T20267] ? __pfx_lock_release+0x10/0x10 [ 959.829712][T20267] ? fput+0x30/0x390 [ 959.831051][T20267] ? ksys_write+0x1ad/0x260 [ 959.832720][T20267] ? __pfx_ksys_write+0x10/0x10 [ 959.834502][T20267] __x64_sys_setxattr+0xc4/0x160 [ 959.836296][T20267] ? do_syscall_64+0x91/0x250 [ 959.837992][T20267] ? lockdep_hardirqs_on+0x7c/0x110 [ 959.839855][T20267] do_syscall_64+0xcd/0x250 [ 959.841499][T20267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.843247][T20267] RIP: 0033:0x7f0d08f7dff9 [ 959.844663][T20267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.851273][T20267] RSP: 002b:00007f0d09cb5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 959.854272][T20267] RAX: ffffffffffffffda RBX: 00007f0d09135f80 RCX: 00007f0d08f7dff9 [ 959.857078][T20267] RDX: 00000000200001c0 RSI: 0000000020000100 RDI: 0000000020000380 [ 959.859921][T20267] RBP: 00007f0d09cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 959.862653][T20267] R10: 000000000000ff02 R11: 0000000000000246 R12: 0000000000000001 [ 959.865367][T20267] R13: 0000000000000000 R14: 00007f0d09135f80 R15: 00007ffdd921c248 [ 959.868117][T20267] [ 959.906554][ T5378] usbhid 5-1:1.0: can't add hid device: -71 [ 959.908188][ T5378] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 959.914638][ T5378] usb 5-1: USB disconnect, device number 15 [ 959.941012][T20271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3626'. [ 961.980058][T16466] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 962.132204][T16466] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 962.136851][T16466] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.140471][T16466] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 962.143774][T16466] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 962.151240][T16466] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 962.156877][T16466] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 962.159677][T16466] usb 5-1: Product: syz [ 962.161429][T16466] usb 5-1: Manufacturer: syz [ 962.166876][T16466] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 962.371811][T20286] netlink: 'syz.0.3630': attribute type 9 has an invalid length. [ 962.376466][T20286] macvlan12: entered promiscuous mode [ 962.378529][T20286] 8021q: adding VLAN 0 to HW filter on device macvlan12 [ 962.492680][ T5844] usb 5-1: USB disconnect, device number 16 [ 963.201903][T20304] netlink: 'syz.3.3634': attribute type 10 has an invalid length. [ 963.204852][T20304] syz_tun: entered promiscuous mode [ 963.216440][T20304] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 963.673921][T15582] kernel write not supported for file /1838/attr/keycreate (pid: 15582 comm: kworker/0:3) [ 963.846000][T20310] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3637'. [ 963.898722][T20315] IPVS: Unknown mcast interface: veth0_to_bridge [ 963.970007][ T5844] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 964.121600][ T5844] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 964.124554][ T5844] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.127170][ T5844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 964.130436][ T5844] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 964.135837][ T5844] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 964.138198][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 964.142598][ T5844] usb 5-1: Product: syz [ 964.144097][ T5844] usb 5-1: Manufacturer: syz [ 964.148110][ T5844] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 964.361234][T20308] netlink: 'syz.0.3636': attribute type 9 has an invalid length. [ 964.366512][T20308] macvlan13: entered promiscuous mode [ 964.369261][T20308] 8021q: adding VLAN 0 to HW filter on device macvlan13 [ 964.514910][ T5844] usb 5-1: USB disconnect, device number 17 [ 964.737345][T20334] binder: 20333:20334 ioctl c00c6211 0 returned -14 [ 965.380036][T15582] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 965.530026][T15582] usb 8-1: Using ep0 maxpacket: 8 [ 965.533422][T15582] usb 8-1: config 1 interface 0 has no altsetting 0 [ 965.536572][T15582] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 965.539447][T15582] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.542235][T15582] usb 8-1: Product: 䀁 [ 965.543731][T15582] usb 8-1: Manufacturer: ᠁ [ 965.545429][T15582] usb 8-1: SerialNumber: И [ 965.967005][ T39] kauditd_printk_skb: 64 callbacks suppressed [ 965.967022][ T39] audit: type=1326 audit(965.848:7363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.0.3652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04cd7dff9 code=0x7ffc0000 [ 965.976906][ T39] audit: type=1326 audit(965.848:7364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.0.3652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04cd7dff9 code=0x7ffc0000 [ 965.984541][ T39] audit: type=1326 audit(965.848:7365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.0.3652" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe04cd7dff9 code=0x7ffc0000 [ 965.992823][ T39] audit: type=1326 audit(965.848:7366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.0.3652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04cd7dff9 code=0x7ffc0000 [ 966.000709][ T39] audit: type=1326 audit(965.858:7367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.0.3652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04cd7dff9 code=0x7ffc0000 [ 966.007936][ T39] audit: type=1326 audit(965.858:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.0.3652" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe04cd7dff9 code=0x7ffc0000 [ 966.015819][ T39] audit: type=1326 audit(965.858:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.0.3652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04cd7dff9 code=0x7ffc0000 [ 966.022938][ T39] audit: type=1326 audit(965.858:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.0.3652" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe04cd7dff9 code=0x7ffc0000 [ 966.028591][ T39] audit: type=1326 audit(965.858:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.0.3652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04cd7dff9 code=0x7ffc0000 [ 966.036714][ T39] audit: type=1326 audit(965.858:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.0.3652" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe04cd7dff9 code=0x7ffc0000 [ 966.047581][T18135] infiniband syz1: set down [ 966.049806][T20359] veth0_vlan: left promiscuous mode [ 966.053130][T20359] veth0_vlan: entered promiscuous mode [ 966.063174][T18135] infiniband syz1: set active [ 966.098659][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 968.139468][T15582] usbhid 8-1:1.0: can't add hid device: -71 [ 968.141124][T15582] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 968.144168][T15582] usb 8-1: USB disconnect, device number 25 [ 968.145572][T20413] netlink: 'syz.3.3673': attribute type 1 has an invalid length. [ 968.199863][T20415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 969.210146][T16466] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 969.360032][T16466] usb 5-1: Using ep0 maxpacket: 32 [ 969.363481][T16466] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 969.366236][T16466] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 969.370042][T16466] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 969.374016][T16466] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 969.378603][T16466] usb 5-1: config 0 interface 0 has no altsetting 0 [ 969.383037][T16466] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 969.386076][T16466] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 969.389002][T16466] usb 5-1: Product: syz [ 969.390597][T16466] usb 5-1: Manufacturer: syz [ 969.392408][T16466] usb 5-1: SerialNumber: syz [ 969.395966][T16466] usb 5-1: config 0 descriptor?? [ 969.399573][T16466] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 969.403674][T16466] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 969.604106][T16466] usb 5-1: USB disconnect, device number 18 [ 969.606399][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 969.609836][T16466] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 969.712201][T20433] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3681'. [ 969.804260][T20420] ldusb: No device or device unplugged -19 [ 969.810232][T20420] vxfs: WRONG superblock magic 00000000 at 1 [ 969.814020][T20420] vxfs: WRONG superblock magic 00000000 at 8 [ 969.816056][T20420] vxfs: can't find superblock. [ 971.257158][T20450] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.3684'. [ 971.364565][T20461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3687'. [ 971.367842][T20461] tipc: Invalid UDP bearer configuration [ 971.367875][T20461] tipc: Enabling of bearer rejected, failed to enable media [ 971.630236][ T829] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 971.792549][ T58] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 971.793620][ T829] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 971.798606][ T829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.801579][ T829] usb 8-1: Product: syz [ 971.803062][ T829] usb 8-1: Manufacturer: syz [ 971.804691][ T829] usb 8-1: SerialNumber: syz [ 971.807954][ T829] usb 8-1: config 0 descriptor?? [ 971.966671][ T58] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 971.968984][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.971654][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 971.973983][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 971.978427][ T58] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 971.981121][ T58] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 971.983300][ T58] usb 5-1: Product: syz [ 971.984572][ T58] usb 5-1: Manufacturer: syz [ 972.009994][ T58] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 972.025139][ T30] usb 8-1: USB disconnect, device number 26 [ 972.030098][ T39] kauditd_printk_skb: 73 callbacks suppressed [ 972.030109][ T39] audit: type=1400 audit(971.908:7446): avc: denied { append } for pid=20466 comm="syz.3.3689" name="sg1" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 972.207614][T20475] netlink: 'syz.0.3692': attribute type 9 has an invalid length. [ 972.212959][T20475] macvlan14: entered promiscuous mode [ 972.215225][T20475] 8021q: adding VLAN 0 to HW filter on device macvlan14 [ 972.232846][ T58] usb 5-1: USB disconnect, device number 19 [ 972.661443][ T39] audit: type=1326 audit(972.548:7447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20484 comm="syz.3.3695" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20a6d7dff9 code=0x0 [ 973.446956][T20498] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 973.452003][T20498] audit: out of memory in audit_log_start [ 973.496397][T20500] syzkaller1: entered promiscuous mode [ 973.498366][T20500] syzkaller1: entered allmulticast mode [ 973.611500][ T829] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 973.683769][ T39] audit: type=1400 audit(973.568:7448): avc: denied { read } for pid=20501 comm="syz.2.3701" path="socket:[96339]" dev="sockfs" ino=96339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 973.710840][ T39] audit: type=1400 audit(973.588:7449): avc: denied { getopt } for pid=20501 comm="syz.2.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 973.791895][ T829] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 973.794110][ T829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.797113][ T829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 973.800190][ T829] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 973.807511][ T829] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 973.810826][ T829] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 973.813318][ T829] usb 5-1: Product: syz [ 973.814676][ T829] usb 5-1: Manufacturer: syz [ 973.822668][ T829] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 974.029995][T20493] netlink: 'syz.0.3698': attribute type 9 has an invalid length. [ 974.036142][T20493] macvlan15: entered promiscuous mode [ 974.039022][T20493] 8021q: adding VLAN 0 to HW filter on device macvlan15 [ 974.103282][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3702'. [ 974.132949][ T39] audit: type=1400 audit(974.018:7450): avc: denied { setattr } for pid=20504 comm="syz.2.3702" name="syz.vj9fUW" dev="sda1" ino=1935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:update_mod" [ 974.516700][T20511] IPVS: Unknown mcast interface: veth0_to_bridge [ 974.872696][ T58] usb 5-1: USB disconnect, device number 20 [ 976.807941][T20535] ================================================================== [ 976.807956][T20535] BUG: KASAN: slab-out-of-bounds in fb_pad_unaligned_buffer+0x43c/0x470 [ 976.807986][T20535] Read of size 1 at addr ffff888041c73758 by task syz.3.3711/20535 [ 976.808003][T20535] [ 976.808010][T20535] CPU: 2 UID: 0 PID: 20535 Comm: syz.3.3711 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 976.808032][T20535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 976.808044][T20535] Call Trace: [ 976.808051][T20535] [ 976.808059][T20535] dump_stack_lvl+0x116/0x1f0 [ 976.808086][T20535] print_report+0xc3/0x620 [ 976.808110][T20535] ? __virt_addr_valid+0x5e/0x590 [ 976.808133][T20535] ? __phys_addr+0xc6/0x150 [ 976.808156][T20535] kasan_report+0xd9/0x110 [ 976.808177][T20535] ? fb_pad_unaligned_buffer+0x43c/0x470 [ 976.808197][T20535] ? fb_pad_unaligned_buffer+0x43c/0x470 [ 976.808216][T20535] fb_pad_unaligned_buffer+0x43c/0x470 [ 976.808232][T20535] ? lockdep_hardirqs_on+0x7c/0x110 [ 976.808257][T20535] bit_putcs+0x86a/0xdf0 [ 976.808284][T20535] ? __pfx_bit_putcs+0x10/0x10 [ 976.808307][T20535] ? fb_get_color_depth+0x120/0x250 [ 976.808327][T20535] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 976.808357][T20535] ? __pfx_bit_putcs+0x10/0x10 [ 976.808376][T20535] fbcon_putcs+0x364/0x480 [ 976.808394][T20535] do_update_region+0x1f8/0x3f0 [ 976.808417][T20535] update_region+0xc1/0x160 [ 976.808435][T20535] vcs_write+0x7cd/0xdb0 [ 976.808453][T20535] ? __pfx_vcs_write+0x10/0x10 [ 976.808468][T20535] ? bpf_lsm_file_permission+0x9/0x10 [ 976.808479][T20535] ? security_file_permission+0x71/0x210 [ 976.808493][T20535] ? __pfx_vcs_write+0x10/0x10 [ 976.808505][T20535] vfs_writev+0x6da/0xdd0 [ 976.808519][T20535] ? futex_wait+0x121/0x380 [ 976.808534][T20535] ? __pfx_vfs_writev+0x10/0x10 [ 976.808552][T20535] ? find_held_lock+0x2d/0x110 [ 976.808566][T20535] ? __pfx_lock_release+0x10/0x10 [ 976.808577][T20535] ? trace_lock_acquire+0x14a/0x1d0 [ 976.808593][T20535] ? __fget_files+0x244/0x3f0 [ 976.808609][T20535] ? do_writev+0x137/0x370 [ 976.808623][T20535] do_writev+0x137/0x370 [ 976.808638][T20535] ? __pfx_do_writev+0x10/0x10 [ 976.808654][T20535] do_syscall_64+0xcd/0x250 [ 976.808670][T20535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.808683][T20535] RIP: 0033:0x7f20a6d7dff9 [ 976.808693][T20535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.808703][T20535] RSP: 002b:00007f20a7aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 976.808714][T20535] RAX: ffffffffffffffda RBX: 00007f20a6f36058 RCX: 00007f20a6d7dff9 [ 976.808721][T20535] RDX: 0000000000000004 RSI: 0000000020000a40 RDI: 0000000000000007 [ 976.808727][T20535] RBP: 00007f20a6df0296 R08: 0000000000000000 R09: 0000000000000000 [ 976.808734][T20535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.808740][T20535] R13: 0000000000000000 R14: 00007f20a6f36058 R15: 00007ffc5a9e3328 [ 976.808749][T20535] [ 976.808753][T20535] [ 976.808755][T20535] Allocated by task 18704: [ 976.808760][T20535] kasan_save_stack+0x33/0x60 [ 976.808772][T20535] kasan_save_track+0x14/0x30 [ 976.808781][T20535] __kasan_kmalloc+0xaa/0xb0 [ 976.808790][T20535] __kmalloc_noprof+0x1e8/0x400 [ 976.808801][T20535] fbcon_set_font+0x434/0xb60 [ 976.808809][T20535] con_font_op+0x7fd/0xf50 [ 976.808818][T20535] vt_ioctl+0x4ca/0x2f80 [ 976.808828][T20535] tty_ioctl+0x651/0x15d0 [ 976.808840][T20535] __x64_sys_ioctl+0x18f/0x220 [ 976.808852][T20535] do_syscall_64+0xcd/0x250 [ 976.808864][T20535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.808878][T20535] [ 976.808880][T20535] The buggy address belongs to the object at ffff888041c70000 [ 976.808880][T20535] which belongs to the cache kmalloc-8k of size 8192 [ 976.808889][T20535] The buggy address is located 6728 bytes to the right of [ 976.808889][T20535] allocated 7440-byte region [ffff888041c70000, ffff888041c71d10) [ 976.808900][T20535] [ 976.808902][T20535] The buggy address belongs to the physical page: [ 976.808906][T20535] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888041c74000 pfn:0x41c70 [ 976.808916][T20535] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 976.808924][T20535] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 976.808933][T20535] page_type: f5(slab) [ 976.808943][T20535] raw: 00fff00000000240 ffff88801b043180 ffffea0001265810 ffffea000151d410 [ 976.808952][T20535] raw: ffff888041c74000 0000000000020001 00000001f5000000 0000000000000000 [ 976.808961][T20535] head: 00fff00000000240 ffff88801b043180 ffffea0001265810 ffffea000151d410 [ 976.808969][T20535] head: ffff888041c74000 0000000000020001 00000001f5000000 0000000000000000 [ 976.808978][T20535] head: 00fff00000000003 ffffea0001071c01 ffffffffffffffff 0000000000000000 [ 976.808986][T20535] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 976.808991][T20535] page dumped because: kasan: bad access detected [ 976.808996][T20535] page_owner tracks the page as allocated [ 976.808999][T20535] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5055, tgid 5055 (dhcpcd), ts 868171753255, free_ts 868153154119 [ 976.809016][T20535] post_alloc_hook+0x2d1/0x350 [ 976.809026][T20535] get_page_from_freelist+0x101e/0x3070 [ 976.809037][T20535] __alloc_pages_noprof+0x223/0x25a0 [ 976.809047][T20535] alloc_pages_mpol_noprof+0x2c9/0x610 [ 976.809059][T20535] new_slab+0x2ba/0x3f0 [ 976.809067][T20535] ___slab_alloc+0xdac/0x1880 [ 976.809075][T20535] __slab_alloc.constprop.0+0x56/0xb0 [ 976.809085][T20535] __kmalloc_node_track_caller_noprof+0x355/0x430 [ 976.809096][T20535] kmalloc_reserve+0xef/0x2c0 [ 976.809107][T20535] __alloc_skb+0x164/0x380 [ 976.809119][T20535] netlink_dump+0x2c1/0xcc0 [ 976.809130][T20535] netlink_recvmsg+0xa0d/0xf30 [ 976.809141][T20535] sock_recvmsg+0x1f6/0x250 [ 976.809152][T20535] ____sys_recvmsg+0x219/0x6b0 [ 976.809162][T20535] ___sys_recvmsg+0x115/0x1a0 [ 976.809170][T20535] __sys_recvmsg+0x114/0x1e0 [ 976.809178][T20535] page last free pid 18495 tgid 18495 stack trace: [ 976.809184][T20535] free_unref_page+0x5f4/0xdc0 [ 976.809193][T20535] __put_partials+0x14c/0x170 [ 976.809201][T20535] qlist_free_all+0x4e/0x120 [ 976.809210][T20535] kasan_quarantine_reduce+0x192/0x1e0 [ 976.809219][T20535] __kasan_slab_alloc+0x69/0x90 [ 976.809228][T20535] __kmalloc_cache_noprof+0x11e/0x300 [ 976.809237][T20535] ref_tracker_alloc+0x17c/0x5b0 [ 976.809246][T20535] register_netdevice+0x164b/0x1e90 [ 976.809270][T20535] veth_newlink+0x366/0x9e0 [ 976.809279][T20535] __rtnl_newlink+0x1197/0x1920 [ 976.809289][T20535] rtnl_newlink+0x67/0xa0 [ 976.809298][T20535] rtnetlink_rcv_msg+0x3c7/0xea0 [ 976.809312][T20535] netlink_rcv_skb+0x16b/0x440 [ 976.809325][T20535] netlink_unicast+0x53c/0x7f0 [ 976.809338][T20535] netlink_sendmsg+0x8b8/0xd70 [ 976.809351][T20535] __sys_sendto+0x479/0x4d0 [ 976.809365][T20535] [ 976.809367][T20535] Memory state around the buggy address: [ 976.809372][T20535] ffff888041c73600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 976.809378][T20535] ffff888041c73680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 976.809384][T20535] >ffff888041c73700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 976.809390][T20535] ^ [ 976.809395][T20535] ffff888041c73780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 976.809403][T20535] ffff888041c73800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 976.809409][T20535] ================================================================== [ 976.809418][T20535] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 976.809424][T20535] CPU: 2 UID: 0 PID: 20535 Comm: syz.3.3711 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 976.809435][T20535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 976.809441][T20535] Call Trace: [ 976.809444][T20535] [ 976.809449][T20535] dump_stack_lvl+0x3d/0x1f0 [ 976.809464][T20535] panic+0x71d/0x800 [ 976.809478][T20535] ? __pfx_panic+0x10/0x10 [ 976.809491][T20535] ? rcu_is_watching+0x12/0xc0 [ 976.809531][T20535] ? preempt_schedule_thunk+0x1a/0x30 [ 976.809543][T20535] ? preempt_schedule_common+0x44/0xc0 [ 976.809561][T20535] check_panic_on_warn+0xab/0xb0 [ 976.809575][T20535] end_report+0x117/0x180 [ 976.809587][T20535] kasan_report+0xe9/0x110 [ 976.809599][T20535] ? fb_pad_unaligned_buffer+0x43c/0x470 [ 976.809612][T20535] ? fb_pad_unaligned_buffer+0x43c/0x470 [ 976.809626][T20535] fb_pad_unaligned_buffer+0x43c/0x470 [ 976.809638][T20535] ? lockdep_hardirqs_on+0x7c/0x110 [ 976.809652][T20535] bit_putcs+0x86a/0xdf0 [ 976.809666][T20535] ? __pfx_bit_putcs+0x10/0x10 [ 976.809678][T20535] ? fb_get_color_depth+0x120/0x250 [ 976.809688][T20535] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 976.809704][T20535] ? __pfx_bit_putcs+0x10/0x10 [ 976.809715][T20535] fbcon_putcs+0x364/0x480 [ 976.809725][T20535] do_update_region+0x1f8/0x3f0 [ 976.809737][T20535] update_region+0xc1/0x160 [ 976.809750][T20535] vcs_write+0x7cd/0xdb0 [ 976.809764][T20535] ? __pfx_vcs_write+0x10/0x10 [ 976.809776][T20535] ? bpf_lsm_file_permission+0x9/0x10 [ 976.809785][T20535] ? security_file_permission+0x71/0x210 [ 976.809796][T20535] ? __pfx_vcs_write+0x10/0x10 [ 976.809808][T20535] vfs_writev+0x6da/0xdd0 [ 976.809820][T20535] ? futex_wait+0x121/0x380 [ 976.809834][T20535] ? __pfx_vfs_writev+0x10/0x10 [ 976.809846][T20535] ? find_held_lock+0x2d/0x110 [ 976.809859][T20535] ? __pfx_lock_release+0x10/0x10 [ 976.809868][T20535] ? trace_lock_acquire+0x14a/0x1d0 [ 976.809894][T20535] ? __fget_files+0x244/0x3f0 [ 976.809909][T20535] ? do_writev+0x137/0x370 [ 976.809921][T20535] do_writev+0x137/0x370 [ 976.809934][T20535] ? __pfx_do_writev+0x10/0x10 [ 976.809949][T20535] do_syscall_64+0xcd/0x250 [ 976.809963][T20535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.809975][T20535] RIP: 0033:0x7f20a6d7dff9 [ 976.809983][T20535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.809993][T20535] RSP: 002b:00007f20a7aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 976.810006][T20535] RAX: ffffffffffffffda RBX: 00007f20a6f36058 RCX: 00007f20a6d7dff9 [ 976.810014][T20535] RDX: 0000000000000004 RSI: 0000000020000a40 RDI: 0000000000000007 [ 976.810020][T20535] RBP: 00007f20a6df0296 R08: 0000000000000000 R09: 0000000000000000 [ 976.810026][T20535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.810032][T20535] R13: 0000000000000000 R14: 00007f20a6f36058 R15: 00007ffc5a9e3328 [ 976.810041][T20535] [ 976.810498][T20535] Kernel Offset: disabled VM DIAGNOSIS: 06:43:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81332410 RDX=ffffffff8de957c0 RSI=ffffffff81332458 RDI=ffffffff9377d7c0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff26efaf8 R10=ffffffff9377d7c7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81332459 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f20a6d74853 CR3=0000000028f5e000 CR4=00350ef0 DR0=0000000000000000 DR1=00000000872c9164 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5a9e36c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81332410 RDX=ffff88801dab4880 RSI=ffffffff81332458 RDI=ffffffff9377d7c0 RBP=0000000000000001 RSP=ffffc900008b0fd0 R8 =0000000000000001 R9 =fffffbfff26efaf8 R10=ffffffff9377d7c7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81332459 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2956041b0b CR3=0000000023e8a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd921c5e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d08ff1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d08ff1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d08ff113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d08ff114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d08ff11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d08ff12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850aedb5 RDI=ffffffff9aae6b80 RBP=ffffffff9aae6b40 RSP=ffffc900032e72f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=0000000000000039 R14=ffffffff850aed50 R15=0000000000000000 RIP=ffffffff850aeddf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f20a7aa26c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f20a7aa1f98 CR3=000000002cf98000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000872c9164 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff81334b05 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6f0b488 00007f20a6f0b480 00007f20a6f0b478 00007f20a6f0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a7a6d100 00007f20a6f0b440 00007f20a6f0b458 00007f20a6f0b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6f0b498 00007f20a6f0b490 00007f20a6f0b488 00007f20a6f0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010102 RBX=0000000000000000 RCX=ffffffff81332410 RDX=ffff88801de8a440 RSI=ffffffff81332458 RDI=ffffffff9377d7c0 RBP=0000000000000003 RSP=ffffc90000908878 R8 =0000000000000001 R9 =fffffbfff26efaf8 R10=ffffffff9377d7c7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81332459 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31b0eff8 CR3=000000002cf98000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a2bf ffffffff8100a2a3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a2a3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a6df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d373f945ede6ed0e b59776f067b25531 b9646375ff4f2148 5b6865d94e7de4a9 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d2e705b4a1199fb9 67729adc19d5ee0d ba7d85dad373f945 ede6ed0eb59776f0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea0f524cfe35e39d 8d6fbd8d6d929ea3 f0f3680a665d6fd0 927d288a40690865 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 62dc2cead48d1b0a 058388b28fd71bd3 30113b7d983472f7 a243ab35342cc6ff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 097133d9f27c829f b13554fe97a6fc5e a355afb2bbe048ac 8dc8702293d05bcd ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c0415ceaad8e034 6e1229d2b94ea426 818ce4bd4789fd75 04945a7f7932fa31 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2da1dff38c1e93a3 82fc4c333f89751b c221d60a62daa7db 0066b83e7062dc2c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ead48d1b0a058388 b28fd71bd330113b 7d983472f7a243ab 35342cc6ffea0f52 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000