last executing test programs: 30m44.946041033s ago: executing program 32 (id=1099): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='^@(\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000040)={'\x00', 0x4, 0x2, 0x400, 0x1, 0x6, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, &(0x7f0000000080)) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80000) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x200000c, 0x100010, r1, 0x82000000) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000100)={0x1}) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/kernel/notes', 0x0, 0x2a) openat$vhost_vsock(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x23, 0xcb, &(0x7f0000000240)="8d30b10f6ac06bf3a8a7c4b03a82174f1ebca0d527e1d8146aee0d76e730ad2615edc4", &(0x7f0000000280)=""/203, 0x8, 0x0, 0x9d, 0x36, &(0x7f0000000380)="99e7f5b8281341c106dd80bee98210fb688341bfc8fe0db814c98e1bf8f1fdc13dec7cc0080e53c5cc1205aa4e1858c1ad94ba39b3d6becf4ac424803df38de1f86f2f84cbffc61365a4cbab6f17065f3d1adcaa597ec3f77b907b6d3932fec92d142056e26e22ab5079e671a87cc1e81cdfb26cb3f57d07655ac9b9801b7b26362399b301c54493ce777da3e91646ceb2a8b72273e902972aaae3231d", &(0x7f0000000440)="c205906b973880285b4c7e7148c6938ad8f5e59a4950b9f0327e395fae39ca922bf17b08bfd7dadaff2862798028cd8232fabd859dd0", 0x1, 0x0, 0x9}, 0x4c) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ff5000/0xb000)=nil, r5, 0x1000003, 0x10, r6, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000f, 0x50, r2, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000500)=0x2520406) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000540)) listen(r3, 0x6) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x400c4152, &(0x7f0000000800)={0x0, &(0x7f00000007c0)=[&(0x7f00000005c0)="d7a2e3fc74cd9be811fc16459e41e527f5cfe4354d9ba27bbc9ddf4b74a867eebf16dc21fc098bee04d31bff9b509ae1da01a87beb1fa6aea19f8ad8fb126699b3deed93cce138bafcd17acc40b6f6d3a6e883fc0f291ba1e7dc0032ba086400ba5ae2049ccb4805ede790eb00000d6ada0702cd1cfda5d2e48de012f5499c6ea6d15b50ea71573c65b827c1ce6b25f971481fee0f487ef7c10beb65d362ca8cc54410b0228f53f5c1f5ea28731c855b51e8602c985662e6a6469742dff52a325e7f7ef6e10c5a", &(0x7f00000006c0)="24e14e39dd58a79204", &(0x7f0000000700)="dccc5b6f67f58c2a28a81d0a1fad89b48f7b9c721cb2a2c887bd870eb24a98f25b580f4379517932b88356ae7f60a8f833a3fb81e0bd5cfd9bf65753101c2f7296c9fc3152f8b3c1ed36a0dc408cb10f84be5b6f0a9341f2b0cc4989cf5c3d782fc1129d861dc4e0e4695957a4919131ed595658c1fdc2fdaa914396010a498418fac0"], 0x3}) recvmsg$can_raw(r3, &(0x7f0000001b40)={&(0x7f0000000840)=@un=@abs, 0x80, &(0x7f0000001a00)=[{&(0x7f00000008c0)=""/186, 0xba}, {&(0x7f0000000980)=""/103, 0x67}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x3, &(0x7f0000001a40)=""/195, 0xc3}, 0x63) chdir(&(0x7f0000001b80)='./file0\x00') socket$inet6(0xa, 0x4, 0x53b) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) read$eventfd(r1, &(0x7f0000001bc0), 0x8) mbind(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000001c00)=0x2, 0x80, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_uring_enter(r1, 0x738, 0xf2b4, 0x1, &(0x7f0000001c40)={[0xd6, 0x5]}, 0x8) flock(r1, 0xa) rt_sigprocmask(0x0, &(0x7f0000001c80)={[0x1, 0x101]}, &(0x7f0000001cc0), 0x8) 30m11.62346986s ago: executing program 33 (id=1361): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 64) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000040)) (async, rerun: 64) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x2}) (async) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d04, &(0x7f00000000c0)) (async, rerun: 32) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) (async, rerun: 32) r1 = syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc04c565d, &(0x7f00000001c0)=@overlay={0x2, 0x5, 0x4, 0x4000, 0x400, {}, {0x2, 0xc, 0x1, 0xc, 0x4, 0x8, "f011616d"}, 0x1, 0x3, {}, 0x4, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f00000002c0)={0xed, 0x0, 0x37}) (async) openat$sysctl(0xffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) (async) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc04c560f, &(0x7f0000000400)=@overlay={0x9, 0x2, 0x4, 0x2000, 0x6, {r6, r7/1000+10000}, {0x1, 0xc, 0x18, 0x4, 0x81, 0x22, "e6684911"}, 0x4982, 0x3, {}, 0x8, 0x0, r2}) (async) r8 = getpgid(0xffffffffffffffff) prlimit64(r8, 0x7, &(0x7f0000000480)={0xe5ee, 0x9}, &(0x7f00000004c0)) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0x8001}}, './file0\x00'}) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000003540)={0x0, 0x0}) recvmmsg(r9, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)=""/147, 0x93}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/55, 0x37}, {&(0x7f0000001640)=""/79, 0x4f}, {&(0x7f00000016c0)=""/110, 0x6e}, {&(0x7f0000001740)=""/27, 0x1b}, {&(0x7f0000001780)=""/89, 0x59}], 0x7}, 0x7}, {{&(0x7f0000001840)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001c00)=[{&(0x7f00000018c0)=""/11, 0xb}, {&(0x7f0000001900)=""/49, 0x31}, {&(0x7f0000001940)=""/235, 0xeb}, {&(0x7f0000001a40)=""/100, 0x64}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)=""/94, 0x5e}, {&(0x7f0000001b80)=""/108, 0x6c}], 0x7, &(0x7f0000001c40)=""/215, 0xd7}, 0x8}, {{&(0x7f0000001d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000001dc0)=""/213, 0xd5}, {&(0x7f0000001ec0)=""/250, 0xfa}, {&(0x7f0000001fc0)=""/175, 0xaf}, {&(0x7f0000002080)=""/36, 0x24}, {&(0x7f00000020c0)=""/133, 0x85}, {&(0x7f0000002180)=""/229, 0xe5}, {&(0x7f0000002280)=""/20, 0x14}, {&(0x7f00000022c0)=""/248, 0xf8}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x9, &(0x7f0000003440)=""/108, 0x6c}, 0x1}], 0x3, 0x1, &(0x7f0000003580)={r10, r11+10000000}) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000036c0)={r4, r3, 0x25, 0x0, @val=@uprobe_multi={&(0x7f00000035c0)='./file0\x00', &(0x7f0000003600)=[0x80000000, 0x3e, 0x8000000000000001, 0x5, 0xe010, 0x0, 0x9, 0x1, 0x3, 0xfffffffffffeffff], &(0x7f0000003680)=[0x5], 0x7, 0xa, 0x0, r8}}, 0x3c) ioctl$int_in(r2, 0x5421, &(0x7f0000003700)=0x7) (async) r12 = openat2$dir(0xffffff9c, &(0x7f0000003740)='./file0\x00', &(0x7f0000003780)={0x102, 0x110}, 0x18) (async) r13 = getpgid(r8) prlimit64(r13, 0x7, &(0x7f00000037c0)={0xa1, 0x8}, &(0x7f0000003800)) (async) umount2(&(0x7f0000003840)='./file0\x00', 0x4) openat2(0xffffffffffffffff, &(0x7f0000003880)='./file0\x00', &(0x7f00000038c0)={0x0, 0x30, 0x20}, 0x18) syz_io_uring_setup(0x2cd, &(0x7f0000003900)={0x0, 0xd728, 0x2010, 0x1, 0x24, 0x0, r9}, &(0x7f0000003980)=0x0, &(0x7f00000039c0)) syz_io_uring_submit(r14, 0x0, &(0x7f0000003a80)=@IORING_OP_RENAMEAT={0x23, 0x62, 0x0, r12, &(0x7f0000003a00)='./file0\x00', &(0x7f0000003a40)='./file0\x00', r4}) 25m38.177305113s ago: executing program 34 (id=2928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0xfff1, 0xfff1}, {0xa}}}, 0x24}}, 0x20004804) 25m19.441069096s ago: executing program 35 (id=3042): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}}, 0x24}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 25m13.869216104s ago: executing program 36 (id=3071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x40007) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x111, 0xa}}, 0x20) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5}) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x0) 24m2.127681369s ago: executing program 37 (id=3589): socket$inet(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x4004092b, 0x7) 23m23.633000116s ago: executing program 38 (id=3808): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) syz_clone3(0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0x8) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r4, 0x8010640b, &(0x7f00001859c0)={0xfdfd, &(0x7f0000185780)=[{0x4000000, 0x0, 0x0, 0x0, 0x3}]}) 20m2.375712424s ago: executing program 39 (id=5181): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) read$FUSE(0xffffffffffffffff, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 20m2.161807642s ago: executing program 0 (id=5186): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa3503b96084b85aacf24fe78ba0e1347daa0245c06ee5afbf13674206d95a899d9610e6bf644b475eb378db7ceba0f98b13c1c01722b00000005001b0001"], 0xb0}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000140)=@ethtool_eee={0x44, 0x4, 0x9, 0x7, 0x1, 0xfffffe00, 0x5, 0x80000000, [0x6, 0xfffffffd]}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) close(0x3) recvmsg(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000480)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500f42b99e92a5a3a315f16505ea672c74e7ca3bd1faffab4f7e2200e38fe8304e72dfaa38838d7abdf20519789076e7067e89900"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000ac0141ef1516dfd53bd9482e9c8b000000000000000a20000000000a010100000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000044000000060a010400000000000000000100000008000b40000000001800048014000180090001007866726d00000000040002800900010073797a300000000004000740140000001100"], 0xb8}}, 0x4000040) recvmsg(r3, &(0x7f0000000440)={&(0x7f0000000200)=@nfc, 0xffffffffffffff82, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000340)=""/227, 0xe1}, {&(0x7f0000000580)=""/133, 0x9b}], 0x3, &(0x7f0000000680)=""/174, 0xae}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 19m59.963421014s ago: executing program 0 (id=5197): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r0) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 19m58.467746817s ago: executing program 0 (id=5201): r0 = accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x9, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0xba, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x24, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x4, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x200, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x7, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x7, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x9, 0x7f, 0xa, 0xfc, 0x1000, 0xf1, 0x6, 0x6, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0xfffffff3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x200, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x7, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x12, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x206, 0x8, 0x431, 0x6, 0x5, 0x4, 0x78, 0x7fa, 0x9]}, 0x45c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe4}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000cd200000000000000000400000002000000000000130200000000005f002b31f50bd638c13a78f04395ce9e9572893ac630e0c74458620bfa2410484cf82387d45a0457bb96a6b9ccaf65d5dc0c3b94c0714b71d37dfc6d8f10f66bd8947c38d74b74f8bd37af0791c1927d650f235d3b4d3db0d602597e98ef02d96b98d6ac9e1c5c69abc9382bfd195481185d20f97f5bc35a91563d33f5ebc62e1e5622e38da47c39f0b19f4b3953ad3378b7731bf414598e47590bb9d52e34de13f69c4defeb0278deaa2cc333f02590844650bf6fff32a41b21fb2540101302bf54a18b60af0eddb8e4fd1f8cac990f"], 0x0, 0x28}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000700)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f00000001c0)) 19m57.34751309s ago: executing program 0 (id=5204): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x1c100, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 19m57.284231289s ago: executing program 0 (id=5206): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe64, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0xd3a, 0x0, &(0x7f0000000a40)=0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x20004080) io_uring_setup(0x3f2c, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, 0x0, 0x0) listen(r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_connect$uac1(0x3, 0x9e, &(0x7f0000000bc0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x8, 0x50, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@processing_unit={0xa, 0x24, 0x7, 0x5, 0x6, 0x2, "9cee9c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0xffff, 0x2, "9a10de6323fb2cb4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x7, 0xe, {0x7, 0x25, 0x1, 0x82, 0xfb, 0x9f33}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8001, 0x7e, 0x2, "91cb"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x1, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xa4, 0x5, {0x7, 0x25, 0x1, 0x40, 0x6, 0xc00b}}}}}}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x3d, 0x8, 0x8, 0x40, 0x1d}, 0x2f, &(0x7f0000000c80)={0x5, 0xf, 0x2f, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x80, 0x0, 0x400}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x0, 0x58, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "b4c40ba8975057a73908f92a6c3f5558"}]}, 0x2, [{0x46, &(0x7f0000000e80)=@string={0x46, 0x3, "d0c695fabc7fa6ff794fd099a9d0b99f2013f2b2c49957ee9055a867b4b610051734ed2fd27da24faddd2d76bc0707f65b62ca5583a53732b363ab4c0ac6a862c1931dc9"}}, {0x3, &(0x7f0000000a80)=@string={0x3, 0x3, "bc"}}]}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r4, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x2a, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB]) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 19m56.948827661s ago: executing program 0 (id=5207): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) syz_open_procfs(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./file1\x00', 0xbd) r2 = socket$packet(0x11, 0x3, 0x300) close(r2) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) listen(0xffffffffffffffff, 0x8) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) syz_genetlink_get_family_id$nl80211(0x0, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x20}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90) 19m56.871682544s ago: executing program 40 (id=5207): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) syz_open_procfs(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./file1\x00', 0xbd) r2 = socket$packet(0x11, 0x3, 0x300) close(r2) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) listen(0xffffffffffffffff, 0x8) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) syz_genetlink_get_family_id$nl80211(0x0, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x20}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90) 19m27.802323814s ago: executing program 1 (id=5329): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x23, 0x5, 0x0) listen(r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) 19m26.924265757s ago: executing program 1 (id=5331): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) creat(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xb) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='io\x00') preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 19m25.912148843s ago: executing program 1 (id=5334): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020596c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 19m25.827399744s ago: executing program 1 (id=5336): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, 0x0, 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x1c100, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 19m25.739030639s ago: executing program 1 (id=5338): socket$kcm(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000005cc0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x8, @private0, 0x8}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000000740)="97243fcbd0e92e92878def91e29a297a9e55063e457924ec7434943adc873760d08048d08c2da5418a1822783cab3673a19bdc68704bde30c8f48e53f2649fea900fd62abb4ef3a58950f05b0c91c03f63e4a8ab95423ad982f998344351f242f4e20547a9af4965103083b73e1597fee9", 0x71}, {&(0x7f00000007c0)="4dd5c693e6461fe905e79c1eee6b6355595dda74eebc23ea610c6ddf7a557eb43866e4ce3db6a87849983bbd2dc84159f53e91578acf2af6845dc8ff5cdc13456e1590fa31070dd6c6", 0x49}, {&(0x7f0000000840)="c032d11381726ba40e6ac109da704d148c22ee0c5785d1ee9fd5703810c6428b0f8820d0c81e8deaed88dfd127892d70ae67a6f279ce242ebe1e4a872c19bbe2c572680eee973967c8", 0x49}, {&(0x7f00000008c0)="16422a0257eb37ed00524d618b99f41787d82ccf4a555f93009f2a8f1176763c6f27efff154001b0e6ffe25aa67c6a504c98f4a429c6b7d37da95776f2cd15e33251b8ffc9ef0e097187c0ceeea4386e794d4343e590a1c60b0fb683ee2576a82e2cd62bee9b51466be03a8c6c3abf0d0429928c27880db2ec3acc491223a7041f9626d1350ca3d7c63dd8d3d6", 0x8d}, {&(0x7f0000000980)="7920b97e0003dd4b505f50982bd0d07326e67b845482511b177855765f30f9e47c47c26e4f8501ae7acb378d5b091eda6472a255ff1c46d78a56adf883bbcaf41575d2e15e6d3f251faf8d078b1ec9c4bd15da32b4100e09a1314881b9d3d6091f323e47afd70946369cdc5368c281bc5a780a5679d8877f768034f46db1fa5b1b3377746c58f79ee7edfb9d5ab66fff301a4acaeffd52424a23dad13c045eb8a7b4abcee930634ed739f1903d5252f50fa156d75887346819339f8cf98af2dd4765c34f2409badff39f19485cde351a08a3c7e298ebcfe74030fb2bb7825f5330668da6ab366cdd741122c5a58eb2fbb83a9c342703f07efeca6a953da1", 0xfe}, {&(0x7f0000002240)="bf80b7e36123c745e3903a601c63a9ae738d8b39d292c30413c41929706659cafaca61dd66a6e3e837fa1346ac9189ce4e83415e1ed37af323c2019090c163719f3565cb9bb5a7a52b0183554d37dd21788c037dcabd3496135df8d308fbf56a0347332cc310c469a2db8dedec86c041df3c485be4f6f1f294451555413b9437d3a7578956375e166222e73b02079acf8bdd5164d63bbaa82cc5b67d7aa5095165cc57795e50af003b319a74701dbe4390550b05dfdf0f08a4657bd136644cfd91fc0b3d0d017c", 0xc7}, {&(0x7f0000000b00)="e4ca5a67e7329a23c31d785cc7960e5a7598484f76c1ca894aec09f2e124435f2fbad4cb694704975a644e23b9db9a73cbee7fc673a55a5310cd1b60d70dc8591cd68642d42559368f22dc1dfc67b0ae88da7e0eca841c49c19522ff529a68ec1f18082071671b3b5cf7bb324101a4e251f5bcf335721138f87fd0866abf0da22ebfcf7a1f65a2e7ade653dd576bc8410fdfff94addfc5faded76d2856415d625384aaeb21bf4aa7ef15a8e6e588d2055b35bf30d47e45ad0570ba82440e27f8096c33409a45170bb7a036db05ee4aa065f0ec618c9f6d349f3cba88508a70427b7f12b9e8d3c69d653a37dd0e38a2858ca51f4bba015550142972d8dc9ca89a8ea7bdfad97d278b4c11827b9da9e8044ac947a229568120257197439354f217784ffdbbf1ccc1e6cf2276609fdaa8fe2924d04a9e4aa671d67f84fdb1c067b83c90ac95a0a5596a61196e4ca958c79b2f25f5b9801cd5313fd65979f950cf73304434f71821fdf5d1410ca234470819e67a333c97e6d37332fadea92dde5b5a515026d73d00620f8a3ac9f3613cfc1101e7668425ee4ed34afcbe8ccfe8a91b9304efa1eb84374c2e47f0a1c8e23ae85530cb0faf70e35361cf0848ff2ee5b03b763e63f8b617317cecb0ea7d70c6a9585c9c99ce41f04e78951447fdca93d95361a827fdc0c771251e3a84f3e5c812b915e8d23a9fb4d2d5c55ff1c16f5c69cb6f3659abd665fefe88b6fd11af2f6c9fa26bd72349e3805547dce359034fcbed82c35ae8d6e80bee74f5d9a1b2286d0a9b11ff4c828e25586f57dc2b3a904fa45525539feb8184934f0b877b7b7e9b4f50eda568a9a04fd56461a2d47da9ab668a8cddeb1b40984eb832201008aa450b7994aab9e2aa48e1da33edc778a638d4bb469c849b7d2ed8811e9784c8522749d117997c985372dca59ba001299618e8882a3ba97f24def52619bbf4809632f51213ba2507cef9e15147433c30cf59015e503d77cbac3f4a1d01494aa41036a6f86973d60aef0fb14c731baa8a12f56827d7bcff70289e35cb736cb3c60ca3b852f55607c2bba548934690c551481b96630109928446a3e77eab457a9375b89e8b9f0ad7f1846a6eb80afa0c38a738d9d2e3051c3b559b218b22e2d2a3a3b5bcd9e350fa560a8747a8fd456312f4a4ec1d55fad21220f35f8f4c6515cdc01cf4c3a0e055f53b96ad0527e82424160d420d4ac6229034ed6157e0fe4bbc81f474ad2db6336d3b6609e6fbc67502202295093485767ac9796a583bd2c86f77d05ca406e4e72b0c54ad5c7ecf57ec808fb7f667b73fd603b48b4bf145f9c8c5c63edd41aa587eb064b44e9f130bc3f3c7762a092cdb23fc9f3aedf47b8a444ab6d4349be8234a3fde3a28c62f27a6ff6287cccfa7733819794a7b40d457a69c14ddcfabfcab4e44739af45742545ce19fa8a8f4e0da3f0feaed38340e7300399e4c6273b17a75d8a873efc7ab735f44b12eddef98c0ee2300571fa3886bd2e2ff95766cb1470d89cd3035d320ac657cf7176501e011c1c830a6822df02b2c25adbad5f08f9a86e4f5b8bf810ed571378c8c2b1d4cb7baf33a1e640339985390b6b0aee46e1006108a343e3b39029a886e763808158c1c7929daffbf9d789e6f2bbea708800804a021e8c134660d58be1b2581f8a5cf68b09fa3b9e4fa4bd687d0dfa49bd061df26d819ecedc6c3a2742c51cbbb2dc59817ff1de76fb01cb609ff400bd5c20f866bde7a6ddbbcf4317c1e711ad11f83a179176059c04bf77acd49349e654c3fc7aaf61fe61c41feeebf849c070b557cd02c399ab4af4bc3ea8ed7b2bb6219e8a838f13c347c703e42593afc9d9fea7c27b523c5743811508496eaa99851c5a2affed54dcb3a4d137dc84b276c336b2270abbe99a3a286e7b80935490cbb08a3cc6710c4ec13f2427448bb11bbde8214e12acb736404fca14b2ad6172c35f53e3b2562f3295f0f71408c6a8993b401a965a1311657200edda65044485989026c97a4c1d2d74523b06c425b4813a1da9328f8ffb135274a34cd75b3dec6614e9a0bff5da5cba2091e62e3cadd2a6bbd6095cd8730f9eb39824497e9d97e82ef9a01fe21e518ade4b23cd99e0875914c3dd800d536b53fa42c6b01d9c377feb94b90f52774de2917377809843f9b56a423427b3642112c150ac3b5fe62ddb163d42c35e1883ac8bb0fb6b20501bce73e3ce54872df30b007b588f82e6f9785c335bc06f04c8ca360b74fe61eb6783fc5febb2948508d9f92f4b092a51ad269deb966e346b2f0e6f6e2c958b1dd3eed9647b3b75449f8fb87f27b12951e856d59f8ed899dbb3a0f785ce5fc58b306c4f6e4623c7d8296b1cae2534022e0f545fb0e3333d267e977cc745a9d67a9493a9ac334c84a44ffc87050d51afc3039a33c61771db1bf3343fdbb6b5901defc1318088e451dc2a8043b5daf189378c2987bc4712001c56c33edd30ab20d22e2940e0b142ad920a5b625822167974611f69950def9e9976b1c4dfdeb86275abc1dce22fb2f99e159d974eebf48e829da6cb784491b952330d7efb87fef06ca1d0a77fceb2c52c9f7eae47118b6f210d67ff6c4a8c3c3dfbaeda43832a76a4941b70864aed366490cd79bda84981abc1cc57e8ca9b2492f6ccf9d80b4342eac2628e6aee6a07dfb623ca9e171a00b6c4058d63e7fa4f388c56939c94cb60f32bd6fe980ad104f11f34c5ffcf3d0a5f004cc66a6e2388a48bce4c448aa9e678e1360676bbaf1cc76096f5e857d8fe7736452de672a458c3757f10ae598912bb80fbbb71d8b439115c42fe549e641712e14f152542ef1394621b7767be919a1272dc342e165a33658e57a1093234ffb67abe400a6afd5fcb065c86691c47db0aae7eb89c149ddab1fbfb5501a729f65eebc0ab8da2159d5648362f7d7d18926129498cd4d52d04b8e0e695a334f68c9844c0da578fb0c116b76db9c204ab7be67a122bdcec57df9791f5f190f3a0b6be247fa03985ad5484572240e13e309d7b613c1e8c108dff45a5b82d96135b2970c5e89fc13e4c828b7c31e4c609377a2c7547e94bb87f1832438cc1ec2c27b25a6b781a5a5869e5ddbb55403afe211871e30c9cb22cf2b8817e74ed874da50b93af8f11ace4f01a4bd5c005228de2e6d2561fa9a921e7f8f8432dfe486f72eafb02569b3a4a628fecc253c8ccb453ef578f20ad5b590ab73d0f8ec99c9bb0bf9976c28d27514370b1fd0b2ee6a308af845a246a8356efa19fc79d6183cabc1aee94d234d01dffb9cde63bc71bc74747d6101d51347203f1b7d69bfbfa6f06502e8ab0f5c3e6d5396b8c1fb3c65e65c8bab185b18baa3d42db6219b5ebd87e2fdcf5d3b739bc8ae1565956c5c0495626627ff161cfec8f3b6a11ee712cd5ccc33b222ca4631dc9d0324324a3a58513b7db517d686e83f36911fa1a78f6416868879474b433d7f4bd13e11dd05506a2dc4665ec0e65479ece769b3512e8847fdcea3e3ae5674d4195af5e785ce8ca908fddf62dea0016eccfc06fa06e1c4c8e99bad7d38391a36110854ee6ca9313c06606d200fe961b5f63af21885397f9beb2ffa4459b0b8ed1af42fb4bd344468239a0cf7d4948c67e1ad148f2f386cfa17fe5d9781add37afa3171ed84bbb1cdd779bda40540d8447111600d480657fee5a29252532a413859863d34df3aa8c0928c2fabedf0c2e2a4ac7c32d28f60b4e1c436901901c88fa085927f882d233b378de5bbe7fdbd7973ced41ae686cfa3fa502231b8f03d579d583a0316bee45782dec74aef189802282c118d8c7e89c11ac0c9c2bc4f81f551a108fb3ec7da1cd5ed299c041a09ba79c4f09e2bec405bd50f0c616159402ac1315a8ec16412911fb3e165cc705e54c973b677c0e7043f41155b695ff185c99684c0254667743b6bb1f02c12f3c10cba3541210c2e6bac62ad18eec6b470ff12d1f0461b351c90230a5fc30f7b80e37632dc7e8c310f94215d93fe12a2e38d0b9f0a15e257169b673c60573213cc52097f6350d20ab3df7c889e2658a9e700433d369d99144c95f45d959c2709baedac297e29cea9f6b4b929f8587e6305f9edc37c2f213cc0ebad26667d384e6fc2a99cfe6998c4d9e4e921db0908e8dcb8165131918ba3fa44215b51f844ff117c731ac2f9c2bcae495a6a8ad7a72e86eb99e0ed0dcaf264e64cc6d924db77f2552208c3a359fc4fbc19a54b650fa0e2b7cfde595cfb3081a2c1fc0f237d602134e1635041a18fc0dec4d2d6acabfe4dfc57eea501b1193840bcf72c32ef4731bb5bb62567b4aa7efac3e4f83b6f4f730cddf9471e275d999971c80cd8d41b2e5de77c854175a37c195ec6ee0e198450993e6b19624d19db189101c0729f1311b08a129911f6a61fff3615ba98914c49dd5a5e6dcff90447ba40e9a9ad10ba5fdd3a3556bcd719b037c5eea2ee4ddff6d5e1dcdd3b5e1312194fc621cded0acae7a70253ab678e36d7e90abee82b0bc86af31a8a83254991b15ea6c5e04ae12d4ec9775f7a97e3a1e0e7b4aea52286376a02b14fa2346b7c40d68a1677c869102a971513bf9d2aa646ab8357f226a40693dbb5874bd17d37874aff613362cd195686a4f93fe3cad47cf2e42dc714bbb8bf8d1c66660085e743bd8c1cc5c444007528697b327f3bda530186b9e981703d825d63b1642f8fc754e8ed80fd55780aecd0ce97720a67b96ea87d2a6d311545f08f410a46a688359ccd402cba7e78d91a0df4e3da4951591c2ded6a1f6424dda7344a37df786be28bb02641cc8c525904139b807afe65b1a96758d86f6281ba71af2b7b71f1f3a9d34224b2b26acec36c08be5a6a6d6da73376e2c4336fd098d686b11735027d299e144a62f0fbf75dd2e9576b5d8ed8290e39fccd1e8a31e1708b0015f98ee379953d7c51d5aedd74e49381da1e4b2a20366acfe294dbce63fdee144435fc5d16546c12008f419566af2fd91e1f0fab6120a825086a1b3e8530a8b73584e3de0ef6d744dd72c625382bda50152923afcf41ad4863c4f44b30995615774624e422271adaab956074c65f8a20070a607f4ce1f93452909d3730d9cb2a2a92a28c0a7b6bb7a0a7ce534a2753df82abd66666f96ea3ecd7b9cb743008b2f595f38292161359205a6795e0385d5ab2ec8af665a56fa962b01bff5f36fd5ab9a7d797fe22727431ad8a91dea2ed346cf1156e0d089a3032cc36bb6801d82220a7844885393536546446808023e81fc20ddc227d60b3cee2f33d44d5b83057266561d59269f8e2aaded9e90f1ca5e1bcec123f1b3e84df6b9eb5a5b256c071bc38315d436ffc8b9ccf9fa5b50aff42bfacc33234ff5e2bfa2b9b0a005acab95d4369a15cc0c66e05534b488d4fa70731cd6884bef5aa85eafff8fe8f3adc2af24a94a0f0a5cbc4c02c2e0475c8af6ad51471cb2acdaa71cdd1396607a114126bd987970696e05b67b45db78eb67ec46a0e5d7608fc60987fb4628613d843ba468330bea924868b69b11cb9419c9a84e575d0ced6939ccd42a1cba4183e9b0ebee27b514b4e93efa6b72925ec300494cdc40f9105a7a09ce263c3d0816ee3f87b12794b0bda48c6ebb1440fd575f6bbfc69f9dd65b327a056b9882328b56e20ff3b78bead2e87f49a6f469648e954b1d124ca127ffac1d0520d5f945bbf472153aedfbc125d623691d56d7911ba141bdc29a6d991ba51c1be0ba0377b3bbc1778c22aedd0494ac01bf523f9dce9b13616eb1c92af96bc948d90852db9184fbc01bfb0e11afc72fb", 0x1000}], 0x7, &(0x7f0000001b40)}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001bc0)="71871f97dfab010e67a016367b33327b84e9b7aebbe9c582f3e3e7366db3494ded6b6ce0413d0b45da9ab2ed2859e369320000576cea505dfc4c5397b211ca0959f2f5f06d4863a2169204a35ea3191e61c8324482e58044ef5affb75a2f276f50190c705e4144b0b60df7d54d66a35279e045797e349ea47db940de28ec50f0ec8bf3790c47fabe4e695c860f210c8932de641cd7e9a5b66fa6cd46430e58a9bcc935f26ef27edc9e3e3649f3b412691cecc4ad8e9502c891d67beadd34c360722c13c7f1a625058c215b645a7f2454e4", 0xd1}, {&(0x7f0000001cc0)="172cb4593af8b10d40d89b78c1affca7786772667a94495efa0ca813ffcc1f9edcdd9a113e8fc2a39578f07a9bb824d3e5107ef840af9c01a69ca06304a6867ec2d9d69c1867fae1f0d9779c1ce1a97e1dc13c11cb80338f3d9f80b1d2ac6117662b3d034369d58f171ba3780922a5cc1c2c167e627214030188253bd583c09f623b19", 0x83}, {&(0x7f0000001d80)="3318b5ca7ca1b5675e13a0ea9adefb7d107e7bc43e84e659166c09ddf5a7", 0x1e}], 0x3, &(0x7f0000001e00)=ANY=[@ANYBLOB="10000000008318000010000000294000000b00000000000000"], 0x20}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001e40)="21bec21f90474fe9c66367a7f894cd0388db7d2df80c7da1cedc5bd6d2da11d2683ac270d58e505541ad20ac1a416fc68b", 0x31}, {&(0x7f0000001ec0)="bd78cb74d2fbd55491804eba88d0112982d46eb2078b504ad7bf71a296542d737694a41c1f30bceb59181e5eca51d5efd13edecffa95f551ac1707c4932ecc776613aa52c13e8499834b3f5e3192eca8d412c1c41a70268d92466059182de07c197a75c8110f64d6f1f7a15996c2f51a9f4a6349813d2055af4be845018b6d161afc666d8dc1e3b37e31c4112bf0533957aa1523cf41e8b70f9473fd1cd5117b71b55545e207b15608", 0xa9}, {&(0x7f0000001f80)="ba14b3b38cd8aaf1ff58670a059baeec64500ec2afde8d", 0x17}, {&(0x7f0000001fc0)="dc123002028123814733", 0xa}, {&(0x7f0000002000)="816206ae18853be5ea90e3ed7c78afacbf1d690ba1bdc9251317bbb92fc03318b0f6a71211311f484693b7d77594bfb817d63644dd063a270b82d115c367f4641dbaa9a9408b2046d93d7243719f5906fdf33709f246039284b27f86422b74f0ce8611cc5688e3938ff4535efdb18b84b1acd302aa33ca220a37daf5d152b3622af96d09c0ac657c8d97055e3c4973dd7921ff62e937014588c28462e234eb33dc3877380ef572f11db275e3d7516a9f83e71967391777ce2a37eb063e7add979ecbd4a8541cb558901168ed3ed45315c7f247fa1d8c7fbfd0184fa2cbaf", 0xde}, {&(0x7f0000002100)}, {&(0x7f00000021c0)="3ae4194d4d56b32e5a9bffdd2ef9b5bda778be307ce407d07f267d614801898dc6a9be2e835019e6bb94580c67dce40c2a0dacf9e9a72ae259749e781173841a723ccba81619db0fe2ca1dc807", 0x4d}, {&(0x7f0000002540)="5e52d0dcbc1f8d4473f98c868fe3dee27afc7408d42ed95ddfd49a792b3c01f49a432c6b81d020c5197e9f5269cd2d594e49ebf0152179a792a6b809013cae6eac95691287f929b9cc46794d8b669f83e04550231d27f09ed6d7cb3588403e8e24beb32c815799fc4035838157fe84f334ef22a58fe555fa60d95f3a47cafb0499e363556a3dc2f260f69921f2b72edf4b3729a891658d1c160b64c2919717a9e603b0f05929e6f2debb0d2ed4f58d3218a5f3510edb5acc68cbccd499dea24b6985eefb4f3da03b08b384dae2b95c04d729354babbd58e8b4f50978216b9a1ebe517a709d9071a69a44ff48", 0xec}], 0x8, &(0x7f0000002380)}}, {{&(0x7f0000002440)={0xa, 0x4e21, 0x2, @loopback, 0x1}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000002480)="83f001030000000000000069af2d4e42ec016f411d94db670c0775f931465854b6e75fbe6d9f1bb888288923a96d1506202f576112a9553853bbde6e1cc14b73af333a7356636d824e707f8a9272", 0x4e}], 0x1, &(0x7f0000002d40)=ANY=[@ANYBLOB="200000002900000032000000fe880000000000000000000000000001", @ANYRES32=0x0], 0xd8}}, {{&(0x7f0000002680)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c, &(0x7f0000002840)=[{0x0}, {&(0x7f0000002780)="230033dd88f5cf252ba0988a60726a02483860ecb8fbb774225e79e937f420e46ffa2bbddfede02455d0b30f1ae6d5f5c3421b3c74ab", 0x36}, {&(0x7f0000002800)="c8c5cdec07f4b31ec5324a94", 0xc}], 0x3, &(0x7f0000002880)}}, {{&(0x7f0000002a00)={0xa, 0x4e22, 0x80000001, @remote, 0x4d4}, 0x1c, &(0x7f0000002b80)=[{0x0}, {&(0x7f0000002ac0)="ca9d6446095fb28e379f9e2d57316af3494659a548b9dd9eeb871dad5c63f48be0", 0x21}], 0x2, &(0x7f0000001b40)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x2}}, @hopopts_2292={{0x24, 0x29, 0x36, {0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x3e09be54}]}}}], 0x34}}, {{&(0x7f0000002c00)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f0000002d00)=[{&(0x7f0000002c40)="99", 0x1}, {&(0x7f0000002c80)="a41a11491c8de54a13c3a516cf86439dcd6bd76ef3f8adc9e0e61a", 0x1b}, {&(0x7f0000002cc0)}], 0x3, 0x0, 0x102c}}, {{&(0x7f0000003d80)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x31}, 0x3f}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005740)=ANY=[@ANYBLOB="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"], 0x1a8}}, {{0x0, 0x0, &(0x7f0000005b80), 0x0, &(0x7f0000005bc0)=[@rthdr_2292={{0x14, 0x29, 0x39, {0x0, 0x0, 0x1, 0x4}}}, @rthdr_2292={{0x74, 0x29, 0x39, {0x1d, 0xc, 0x2, 0xf, 0x0, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x88}}], 0xa, 0x40) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r2, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) 19m25.439625078s ago: executing program 1 (id=5340): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000001090400000000000000000001000004300002002c00018014000300fe88000000000000000000000000000114000400fc000000"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x8) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [{@euid_lt}], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) 19m25.345806483s ago: executing program 41 (id=5340): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000001090400000000000000000001000004300002002c00018014000300fe88000000000000000000000000000114000400fc000000"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x8) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [{@euid_lt}], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) 19m18.631019387s ago: executing program 6 (id=5364): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ca007d05008686dd60ff38f5001c0600fe80000000000000000000000000000bfe8000000000000000000000000000aa730000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000000000000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001b00)=ANY=[@ANYBLOB="021070091c00000028bd7000fddbdf2502001000000004d6000004d4005700000005001a00ac1414aa000000000000000000000000e00000010000000000000000000000001800101002001000000004d2000004d4000000001100180010ac7d00f0a98eaac80517f1a57f72b1240b82a10d875aa2195b90abd17fa1cdfe1f588b99fff796db7b227151389b328015862bb9dae18cf15e4c8afd3067df0ab12338ae0f3f4ee324289876e8f63fccf459281d80df4d6594dfc799962003c31a71a13caad2c7ee34bfbd2481149797e5fdbfea41ff11f96a86038092b1ede9000000"], 0xe0}}, 0x44040800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040), 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000400)={0x8, &(0x7f0000000440)=[{0x5, 0xd0}, {0x0, 0x8fb3}, {0x5, 0x2}, {0x3, 0x9}, {0xfffd, 0x6}, {0x80, 0x1}, {0xc2, 0x9}, {0x2, 0x100}]}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x315, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x4000094) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/1, 0x1}, {&(0x7f0000000500)=""/222, 0xde}], 0x2, &(0x7f0000000340)=""/53, 0x35}, 0x60) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 19m17.660455953s ago: executing program 6 (id=5369): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ca007d05008686dd60ff38f5001c0600fe80000000000000000000000000000bfe8000000000000000000000000000aa730000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000000000000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001b00)=ANY=[@ANYBLOB="021070091c00000028bd7000fddbdf2502001000000004d6000004d4005700000005001a00ac1414aa000000000000000000000000e00000010000000000000000000000001800101002001000000004d2000004d4000000001100180010ac7d00f0a98eaac80517f1a57f72b1240b82a10d875aa2195b90abd17fa1cdfe1f588b99fff796db7b227151389b328015862bb9dae18cf15e4c8afd3067df0ab12338ae0f3f4ee324289876e8f63fccf459281d80df4d6594dfc799962003c31a71a13caad2c7ee34bfbd2481149797e5fdbfea41ff11f96a86038092b1ede9000000"], 0xe0}}, 0x44040800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040), 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000400)={0x8, &(0x7f0000000440)=[{0x5, 0xd0}, {0x0, 0x8fb3}, {0x5, 0x2}, {0x3, 0x9}, {0xfffd, 0x6}, {0x80, 0x1}, {0xc2, 0x9}, {0x2, 0x100}]}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x315, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x4000094) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/1, 0x1}, {&(0x7f0000000500)=""/222, 0xde}], 0x2, &(0x7f0000000340)=""/53, 0x35}, 0x60) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 19m16.690477787s ago: executing program 6 (id=5371): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bccc0c288a8", 0xe, 0x4000030, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @link_local}, 0x14) 19m16.630266579s ago: executing program 6 (id=5372): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(0x0, 0x1c100, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 19m16.529152496s ago: executing program 6 (id=5374): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r0) r1 = fsopen(0x0, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 19m16.205995373s ago: executing program 6 (id=5375): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 19m16.136684523s ago: executing program 42 (id=5375): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 7m27.096982213s ago: executing program 4 (id=8604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfffffff2}]}}]}, 0x40}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) r7 = socket$inet6(0xa, 0x802, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) sendmmsg$inet6(r7, &(0x7f0000001240)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001300)=[@pktinfo={{0x20, 0x29, 0x32, {@mcast2, r8}}}], 0x20}}], 0x1, 0x4000001) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) setuid(0xee01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffa}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004064}, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x3, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}}]}, 0x8c}}, 0x0) getsockname(r7, &(0x7f0000000380)=@alg, &(0x7f0000000280)=0x80) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001340)={0x55c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x338, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc8, 0x4, "4199c90c55abfae6419a70b42658ca7be2c49788ea367e595fcf7a8d703a681de6bf44b539d1591cfe9b6a5015b48788eddeed4ce2a8eb8849d396a4fa717784d21665545c3faef2f4069994cb7f8bed4ef1a593111934220553ca1da3e6f41ccb21a849e90980896c1bbf6b4cc3f8189a5ac8375ff0eb0c6a62a562ab58c3f4b6594737cb84a65101c4fa4a5ec32fc7e5d83f8bbb981c23302d259e774b63828e6255bfab3c62121e0ad932c4e12bf31ac1b0d62b64de96f6539bec19ec141306c97ee0"}, @ETHTOOL_A_BITSET_VALUE={0x9f, 0x4, "a7b918f29f2cbb0b915b55e5edd1289646841a21f781ddbb0a395ed1ecac9a0bef691b178d62638a3fc7c6202a704ad819bbe7e6732f96858f8c2b0f145ce6f3f3f81a8904c8044406fa20af091adcb75031603629292fb6b5b751c945082913d3121e10ae8ce37672d59bc519f209683f1782752fda24d3a5cdd2c25838c62973e8e81740b2b4fc1d13b48ceb6c3f7cd4149491512e28a8fd29da"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x26, 0x4, "2066d2a5b3214d016c7de9d6f2b179653be669cbf675b0607610b46b57325a5d2546"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "03dc38607af2915f34a1562106f70d91d21609fe7fb5dc9b1c8373780c04401a009581320aaa6b9bb146841ab1a19aca97fb6d1ddce4a990768ff61974fd5a894dabace48b476c03b4d3daf1cc696e1be089fdefec1bb7d9c998447d2c56cddaafefdfbf40"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x69, 0x4, "54598fabc5ff00eb776242cf174f5abd6fae69fd44cd617957e69b3a1a627c4edf5f58003a2f53539b2e32f6efdd6263452ec8dd1b38d2237c7f9806d79f2c571a04b17d4294a1bd2ac4f9a7dc814c7d0872bfae732c06af31fa6c5e0c33f3bf30e760592b"}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "b7f421e2651b0c770c3e4b9dd7cefe8a7939674328334b74e1fdfa340db5aedcceb72d738a9b9be4d109e483d7fd2b6040f7b3f581cc719326b365876b73c5eceb2a5cf4bf53e7893666073743dfc5d0fd59b55b5db992fa95780513ebe6c50a648e80f042a4e9608bfb913a8a4077372d216f25eb389f23649033e2f8786818ccf0aa43dfbd9b287ecaf8d47276410d82c1f5719fb5eaa4d748552d0be9ba2fc8321a06df46c1d4360fb49aa8a49054e2fbd3"}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "2ccb7b42d4c3775329c778e425fa4735f41016c99c0ddada6776290203412a596cda4153ace579261bc2afe06ec9179745e2e3bf67e443459fb88fb65cd5d32be2f472290a1d5a341f3ec382182d8bc52d6d47f789348d98910e97310c62863fe0da9e7eb8f395fec2cec29b005c51361bd70fab17e8ecddfd214fcc0271aa07b08923f219de5279ad5415840c0b20cb574225457424b932588a7a9bb7c8fba6ff9eced3953880f9aeedf50536e8d4a769ac6239844f927d15fee79be964f689036bc96f86244686e989dced282a5d9d73c2d021a2bf8bbcb80efd1ad34634"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xa4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x18, 0x4, "8ebd6b787ff165e621dc56b80438b83e41444928"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x7e, 0x4, "7b2f1a660b8c5411f29d642b48cccec88fac155708c119fa49ece0480d1e8885fcd76e5b6026b12ac723e092ee804f98ad1e05b401f6d996e9f5d977d0bd0eee576486d68599ba8ca99c04bbf39ecbe5489c53578979283a3dc93a6626a628dfa82ed367f46a55b881e691dcc15bd45588473fbbb1b84008615b"}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x55c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000300)={0x40, 0x0, 0x2}, 0x10) r13 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r13, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x44) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r13, 0xc0505350, &(0x7f0000000200)={{0x7, 0x8}, {0x5, 0x7}, 0x9, 0x6, 0x2}) 7m26.773352498s ago: executing program 4 (id=8607): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x2c, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {0x4}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 7m26.772608969s ago: executing program 4 (id=8608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0xd2, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000001e000086dd602a1c99009c110000000000000000000000000000000000ff02000000000000000000000000000100000000009c90"], 0x0) 7m26.693240833s ago: executing program 4 (id=8609): sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x416}}]}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="370200007d02000005"], 0xe9) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c461c02f9b7ff7f00bf0000000002000300fffeffffdf020000000000004000000000000000030300000000000000000000080038000100040004"], 0x78) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000800)={0x0, 0x3, 0xf3, @string={0xf3, 0x3, "83fc3a6549138d4581fa202d0dc3669d8acb7beadd5bab3dbfe8a697371f23d57e6bd8426d4364176e84ad95be42e87e4465d28896bd5cb2c7b528b31e9b54978e785a2f6cd848fe6bb917e64f5f74243e1ceebf9d0bf0b3ac84993e6405107fb7d2ff3443009a69f6c5f274cb00abfe3366908cc0be3462ac680fcbe74bf2d3e5e4158fdae56732994a946c4d1de89ad0e47b808817d17f769e42ce209e5b94f785da1715dd934d7ae1fb11a6398a111ee963d3fd5b4e75894b5f35833cc4c0137341003a7cd7ea8b8dbcccad69611281e95fdb158dc5ff2402cd8dd3277f35bef3645511a9595dd805de9d312679047b"}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000540)={0x0, 0x1, 0x6b, "d0765465c8247fcf44aa8caee63bd7c3233e2919934751a7ebda6325aabc85bd51aba748b2c5ec7de052ebf813d71c484a0245621b7a0b661d12518888d6318964ed086186cbb1ba1fcc9ec709a82ac8c4d8aff723cccd6a1af562349cdcfb5c47b8d7c078e7c77c2504f3"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x98}, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x1, 0xc}}) 7m26.043933591s ago: executing program 4 (id=8613): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x20, r2, 0xe23, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x4080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) sched_setscheduler(r4, 0x7, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r7, 0x0, 0x0, 0x0, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="010000000000000000000000005f00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) pipe2(&(0x7f0000000480), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000340)='hpfs\x00', 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r8, &(0x7f0000000200)=""/202, 0xca) tkill(0x0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r8, 0xc08c5336, &(0x7f0000000000)={0x1, 0x40000002, 0x0, 'queue0\x00', 0x3}) 7m24.922560437s ago: executing program 4 (id=8621): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x482, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) r0 = openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x2, 0x5, 0x3831354f, 0x0, 0x5, [{0xfffffff2, 0x22}, {0xcbd, 0x10010000}, {0x1, 0x6}, {0x40000001, 0x4}, {0x9, 0xd1}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0x9}], 0x6, 0xa, 0x3, 0x2}}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpgid(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102379, 0xffffffffffffff8b) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$UI_DEV_DESTROY(r4, 0x5502) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) accept4(r3, 0x0, 0x0, 0x800) r6 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402", @ANYRESDEC=r5], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x28000) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x7, &(0x7f0000003040)={0x0, "f4e1a232be8f46747aa95df8c01eaf07677d18bc2f00"}}) openat$hpet(0xffffffffffffff9c, 0x0, 0x40100, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f000065a000/0x2000)=nil, 0x2000, 0x200000a, 0x80010, r0, 0x10000000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000000280)="72161413c1274fc3166bd49932a70ed7f0c66400"/33, 0x21) 7m9.700505932s ago: executing program 43 (id=8621): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x482, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) r0 = openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x2, 0x5, 0x3831354f, 0x0, 0x5, [{0xfffffff2, 0x22}, {0xcbd, 0x10010000}, {0x1, 0x6}, {0x40000001, 0x4}, {0x9, 0xd1}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0x9}], 0x6, 0xa, 0x3, 0x2}}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpgid(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102379, 0xffffffffffffff8b) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$UI_DEV_DESTROY(r4, 0x5502) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) accept4(r3, 0x0, 0x0, 0x800) r6 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402", @ANYRESDEC=r5], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x28000) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x7, &(0x7f0000003040)={0x0, "f4e1a232be8f46747aa95df8c01eaf07677d18bc2f00"}}) openat$hpet(0xffffffffffffff9c, 0x0, 0x40100, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f000065a000/0x2000)=nil, 0x2000, 0x200000a, 0x80010, r0, 0x10000000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000000280)="72161413c1274fc3166bd49932a70ed7f0c66400"/33, 0x21) 5m12.892191899s ago: executing program 2 (id=9082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './cgroup.cpu/cgroup.procs\x00'}) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000240)={0x3, 0x0, [{0x35f, 0x0, 0xe}, {0x9cc, 0x0, 0x2}, {0x11, 0x0, 0x79}]}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r7, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}, {0x0}], 0x2, 0x6c, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x44}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000170a01ef3a00000000000000020000000900020073797a30000037000900010073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000880)=@ethtool_per_queue_op={0x4b, 0xf, [0x5, 0x10000, 0x4, 0x4, 0xe6, 0x3, 0xdc6, 0x5, 0x9, 0xf, 0x395, 0x7, 0x5, 0x0, 0x7f, 0x4, 0x1, 0xfffffe02, 0x3, 0x2, 0x0, 0x4, 0xed, 0x5, 0xe16, 0x120, 0x7, 0x5, 0x3, 0x7, 0x0, 0xb, 0xffff, 0xdd6, 0x2, 0x2, 0x1, 0xfff, 0x2, 0x23d, 0x7fffffff, 0xe3, 0x403, 0x77, 0x80000000, 0x100, 0x0, 0x7, 0xfff, 0x7, 0x400, 0x400, 0x4, 0x18f, 0x0, 0x4, 0x547, 0xfb1d, 0x8, 0x8, 0x7, 0x324, 0xffffffff, 0x4, 0x8000, 0x81, 0xd, 0x7f, 0xfffffffa, 0x7, 0x6, 0x7, 0xaffffe, 0x3, 0x1000, 0x6, 0x1, 0x1, 0x983, 0x3, 0x3, 0x0, 0xffff, 0x1, 0x80000000, 0xca1, 0x200, 0x8001, 0x10000, 0x1ff, 0x46a7, 0x6, 0x1b8, 0x0, 0x1, 0x4, 0x3, 0xced, 0xfff, 0x7, 0xb, 0x3, 0x820, 0x7, 0x9, 0x4, 0x0, 0x2, 0x5, 0x6, 0x4, 0x3ff, 0x1, 0x5, 0x7, 0x3, 0x3ff, 0x2, 0x9, 0xe, 0x1, 0x2, 0x10001, 0x9, 0x3, 0x7, 0x2, 0xffffffff], "d0a6bbb4a87ff8602920448272893db079909622aa1861145dc5abb7aa29894edb153df2e3351515965a7d8549452f651dada0726cbbd9b6d28da2feb33e26496fc72d31a0d54f4be101111cd17267659647c8497f94a9fa"}}) 5m10.44579238s ago: executing program 2 (id=9090): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ca007d05008686dd60ff38f5001c0600fe80000000000000000000000000000bfe8000000000000000000000000000aa730000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000000000000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001b00)=ANY=[@ANYBLOB="021070091c00000028bd7000fddbdf2502001000000004d6000004d4005700000005001a00ac1414aa000000000000000000000000e00000010000000000000000000000001800101002001000000004d2000004d4000000001100180010ac7d00f0a98eaac80517f1a57f72b1240b82a10d875aa2195b90abd17fa1cdfe1f588b99fff796db7b227151389b328015862bb9dae18cf15e4c8afd3067df0ab12338ae0f3f4ee324289876e8f63fccf459281d80df4d6594dfc799962003c31a71a13caad2c7ee34bfbd2481149797e5fdbfea41ff11f96a86038092b1ede9000000"], 0xe0}}, 0x44040800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000400)={0x8, &(0x7f0000000440)=[{0x5, 0xd0}, {0x0, 0x8fb3}, {0x5, 0x2}, {0x3, 0x9}, {0xfffd, 0x6}, {0x80, 0x1}, {0xc2, 0x9}, {0x2, 0x100}]}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0x315, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x4000094) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000340)=""/53, 0x35}, 0x60) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5m9.342131672s ago: executing program 2 (id=9095): openat$kvm(0xffffffffffffff9c, 0x0, 0xca000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m9.282591543s ago: executing program 2 (id=9096): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x1c100, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 5m9.150477347s ago: executing program 2 (id=9097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) get_robust_list(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0xfffffffffffffffd], 0x10000, 0x134700}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m8.848595845s ago: executing program 2 (id=9098): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f0000000200)=""/173, 0xad) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffff1f, 0x40000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='xen_cpu_load_idt\x00', r4, 0x0, 0x3ff}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x10000) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) unshare(0x20000600) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) timer_getoverrun(0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) 5m8.638255595s ago: executing program 44 (id=9098): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f0000000200)=""/173, 0xad) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffff1f, 0x40000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='xen_cpu_load_idt\x00', r4, 0x0, 0x3ff}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x10000) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) unshare(0x20000600) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) timer_getoverrun(0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) 1m28.110463627s ago: executing program 5 (id=10177): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/129, 0x81) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f1f}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000001180)='./bus\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 1m27.853836362s ago: executing program 5 (id=10180): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_setup(0x82, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x1c507c, 0x10) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000340)='p', 0x300}]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={'\x00', 0xa, 0x6, 0xfffffffe, 0x9, 0x1ff, 0xffffffffffffffff}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0xf}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r7, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9b, 0xa, 0x80, '\x00', 0x3}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1m26.472840295s ago: executing program 5 (id=10188): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0xb, [{}, {}, {0xd}, {}, {}, {}, {0x0, 0xfffffffc}, {0xfffffffe, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=0xffffffffffffffff], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031404002ab1000f4938c29ebda883bd7000ffdbdf250900020073797a32000000000800410073697700140033007465616d5f73"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="348bd2909098ab7508efd782fa91039b73d8e84bbabfe4a9c2040c1210175e81738c8b0185b3ec821c90f278822261d76956237366437c877e1a05b9ff0ecc6284ce3baf95c2497b58f4a8ae38ee6c76ec145176cb5f3f31d5272087224b927995f9da89d1d07c2a89895476e2b5e4f61823538b7f99a4023edb778925dbdaef589bba0752cc1a7e91479321", @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRES64=r2, @ANYRES64=r0, @ANYRESDEC=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x0, 0x141301) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) connect$inet6(r7, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r8, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r8, 0x540a, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x9}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 1m25.554583092s ago: executing program 5 (id=10194): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) getpid() setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x1c100, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 1m25.366991145s ago: executing program 5 (id=10197): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x39, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4050898}, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0), &(0x7f0000000140)={'L-', 0x9}, 0x16, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000400)=ANY=[]) r4 = dup(r2) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_mreqn(r4, 0x0, 0x24, 0x0, &(0x7f0000000380)) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={@private2, 0x1f}) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000740)=ANY=[], 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00-\x00', @ANYRES16=r8, @ANYBLOB="010000006200fbdbdf25250000000e0001106e657468657673696d006d300000"], 0x34}, 0x1, 0x0, 0x0, 0x20044015}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r9, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000480)={0x8, 0x120, 0xfa00, {0x4, {0x4, 0x4, "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", 0x80, 0x4, 0x4, 0x8, 0x7e, 0xa, 0xb, 0x1}}}, 0x128) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) preadv(r10, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000005c0)={0x9, [0x7, 0x2, 0x7ec9, 0x2, 0x1, 0x5, 0x3, 0x8001, 0x8000]}, &(0x7f0000000600)=0x16) 1m25.304900157s ago: executing program 5 (id=10198): setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x3, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x20000]}}, 0x5c) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) socket$kcm(0x11, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000340)=0xfffff7fc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2020) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000171, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x18) times(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000700)) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x3f}]}, 0xa8}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 1m25.26329897s ago: executing program 45 (id=10198): setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x3, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x20000]}}, 0x5c) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) socket$kcm(0x11, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000340)=0xfffff7fc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2020) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000171, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x18) times(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000700)) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x3f}]}, 0xa8}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 6.217629063s ago: executing program 3 (id=10590): r0 = socket(0x25, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async, rerun: 32) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a40)=@newtaction={0x190, 0x30, 0x1, 0x0, 0xfffffffc, {}, [{0x17c, 0x1, [@m_ct={0xe8, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0xc0, 0x6, "6000000000000090375272a2fa7b833d5cba5cb40705cbaafb18215ca772155b4f444a19c5828611258418e5d2c6f6666fb189032db670d8ef9afa9c0f362fd70e0700000000000000aa67200235049ecb30b434d4eb26f4eaedccd68b46381100000030ae3738b7b25e2dbf4f3f12bfd9c09fb51d5bfb02e18ca436ea7c7f4f293b2a341223c31c4583758a640cb9c9c34cd41a3bc114bf77b1b23e355521666ceec16862aff6691e39e68e54b509e4d1bb296bd18bac3300000000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x90, 0x8, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x80b5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x1ff, 0x7, 0x8, 0x10001}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffff7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x1, 0x5, 0xa}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x10000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xbb}]}, {0x9, 0x6, "f0d6a316bb"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async, rerun: 64) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) syz_io_uring_setup(0x6dfb, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x10278f, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000000200), &(0x7f00000000c0)) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000640)=""/147, 0x93}], 0x1, 0x0, 0xfff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, 0x0, 0x0, 0x0) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fsetxattr$security_ima(r6, &(0x7f00000001c0), &(0x7f0000000340)=ANY=[@ANYBLOB="02f790350dffb7d624ee845aace7b9321a3a409d008d6a6ab48ac81e20c9d8d7308dec4d36191172ac4c8e4fd496029ca773a7016cbd6f3816eb63f7a74ffe6b4c130fb31d9e48e91bc1f7ec18db07e6798166e1d5"], 0xe, 0x3) (async) write(r6, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000004000000040000000900000000000000", @ANYBLOB="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", @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r7 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) (async) socket(0x2, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x4, 0x101, 0xc3a5, 0x9, 0x1ff, 0x4, 0x2, 0xfffffff6, 0x7fb, 0x1, 0xc99d, 0x2, 0x9, 0x8d, 0x0, 0x2, 0xa98, 0x8, 0x6, 0x10000040, 0x3, 0xfd}}) (async) socket$netlink(0x10, 0x3, 0x0) 5.452617811s ago: executing program 8 (id=10597): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x18c) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) socket$kcm(0x10, 0x2, 0x0) close(r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff}, 0x38) 4.559470878s ago: executing program 3 (id=10602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './cgroup.cpu/cgroup.procs\x00'}) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000240)={0x3, 0x0, [{0x35f, 0x0, 0xe}, {0x9cc, 0x0, 0x2}, {0x11, 0x0, 0x79}]}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r7, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}, {0x0}], 0x2, 0x6c, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000170a01ef3a00000000000000020000000900020073797a30000037000900010073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000880)=@ethtool_per_queue_op={0x4b, 0xf, [0x5, 0x10000, 0x4, 0x4, 0xe6, 0x3, 0xdc6, 0x5, 0x9, 0xf, 0x395, 0x7, 0x5, 0x0, 0x7f, 0x4, 0x1, 0xfffffe02, 0x3, 0x2, 0x0, 0x4, 0xed, 0x5, 0xe16, 0x120, 0x7, 0x5, 0x3, 0x7, 0x0, 0xb, 0xffff, 0xdd6, 0x2, 0x2, 0x1, 0xfff, 0x2, 0x23d, 0x7fffffff, 0xe3, 0x403, 0x77, 0x80000000, 0x100, 0x0, 0x7, 0xfff, 0x7, 0x400, 0x400, 0x4, 0x18f, 0x0, 0x4, 0x547, 0xfb1d, 0x8, 0x8, 0x7, 0x324, 0xffffffff, 0x4, 0x8000, 0x81, 0xd, 0x7f, 0xfffffffa, 0x7, 0x6, 0x7, 0xaffffe, 0x3, 0x1000, 0x6, 0x1, 0x1, 0x983, 0x3, 0x3, 0x0, 0xffff, 0x1, 0x80000000, 0xca1, 0x200, 0x8001, 0x10000, 0x1ff, 0x46a7, 0x6, 0x1b8, 0x0, 0x1, 0x4, 0x3, 0xced, 0xfff, 0x7, 0xb, 0x3, 0x820, 0x7, 0x9, 0x4, 0x0, 0x2, 0x5, 0x6, 0x4, 0x3ff, 0x1, 0x5, 0x7, 0x3, 0x3ff, 0x2, 0x9, 0xe, 0x1, 0x2, 0x10001, 0x9, 0x3, 0x7, 0x2, 0xffffffff], "d0a6bbb4a87ff8602920448272893db079909622aa1861145dc5abb7aa29894edb153df2e3351515965a7d8549452f651dada0726cbbd9b6d28da2feb33e26496fc72d31a0d54f4be101111cd17267659647c8497f94a9fa"}}) 3.895581126s ago: executing program 7 (id=10603): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000400)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=']) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 3.820093934s ago: executing program 7 (id=10604): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x9) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000480)=""/102384, 0x18ff0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_emit_ethernet(0x106, &(0x7f00000195c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001300", 0xd0, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x10000000, {0x0, 0x6, '\t\x00', 0x0, 0x1, 0x0, @local, @empty, [@srh={0x11, 0x2, 0x4, 0x1, 0xf8, 0x40, 0x2, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x0, 0xf, '\x00', [@generic={0xf, 0x56, "b014432b76914601ce56536ca137ef436c9d7dc14ff312ecea71ee8430dde962f214cba689d3b28dfcfd578affb3853584c670e9288577922a32ada84b356cd2c615fcb19f2500b1a92ccf883a4abe19f0061ff860fd"}, @generic={0xa2}, @ra, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x40, 0xe, "8b168e4b48529453d91cea424030"}, @calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xfffc}}]}]}}}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000019480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00068008000600010000009868d2a19ef5fcd572bb8fb411ae26c5139c85c16c990dcd09b2f06d846f4f90d623b76e0312f8118c1d874a2b299a1d276195b24b0a48a4bb0251839b99acf4d5f4f8e5be5e0f82432d8aabc85206d236cd8893c73e78f376b2cc48dd22d725339478225b9fa902e1941e349c"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24000014) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x44044451}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d696f200672646d61202d6370756163637420b370696468202b6d656d6f7279202b64757669636573202d646576696365"], 0x4c) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x4) 3.409759625s ago: executing program 9 (id=10605): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x8000, 0x4) r1 = accept4(r0, &(0x7f0000000040)=@ethernet={0x0, @link_local}, &(0x7f00000000c0)=0x80, 0x80800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newtaction={0x68, 0x30, 0x48b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x0, 0x6, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) accept4$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14, 0x80000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x30, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffffc, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000480)=""/247, 0xf7}], 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x1000, 0x10ffff, 0xfffffffd}) ioctl$NBD_SET_SOCK(r9, 0xab00, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ERR(r8, 0x4001af84, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.228790052s ago: executing program 8 (id=10606): pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r2, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x10000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000}, [@alu={0x4, 0x1, 0xc, 0x0, 0x0, 0xffffffffffffffc0}]}, &(0x7f00000016c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x120}}, 0x50) 3.204401174s ago: executing program 9 (id=10607): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000640)=0x3) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x500, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="15714bc789a3"}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 3.11812994s ago: executing program 3 (id=10608): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009404, &(0x7f0000000140)) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000180)=""/156) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0xa8, 0x40, 0x5, 0x62, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x0, 0x8000}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x20, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @ldst={0x0, 0x2, 0x3, 0x7, 0x2, 0x40, 0x10}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r6, 0x9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r7, 0x0, 0x3}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = getpid() process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.045448807s ago: executing program 9 (id=10609): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x154, 0x30, 0x4, 0x0, 0x0, {}, [{0x140, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xf8, 0x18, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffd, 0xffffff01, 0x6, 0x95c7, 0x4}, @loopback, @broadcast, 0xff}}]}, {0xa6, 0x6, "2641c7e78f3447aaf2980887cef5e2d2cdf77af1363d0ab6b5904d97be86fe27cc70b38c13b19d92986429abf5921e91571a5c655fef89c648f084f9ac192b8892e686ba4492f712bd30f851443786a2c208a91e54a07803739537895928433e4c61891932090f480cade569209dd0f97ee0da861c9349fb748bb93e100fcd720d9bd4e57d89c4a941530b1ece6ae90153e75fe216db57b7a09fdafea02cd40819b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x40000ca) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x80000000) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0xc0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, &(0x7f00000015c0)=[{0x0}, {&(0x7f00000000c0)="7fe370522d6af6625215f1793293827ec1efafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81c437f58a141fc12ab2ab73461eb651a1e8e2fb2e51596", 0x6b}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)}, {&(0x7f00000017c0)="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", 0x7ff}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53", 0xc7}], 0x6, 0x9, 0x0) 2.690458821s ago: executing program 7 (id=10610): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x28, r1, 0x852dd6c070cd7e4d, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}]}, 0x28}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x8850) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x17) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOWNER(r5, 0x400454cc, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r4, 0x0, 0x0}, 0x10) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) userfaultfd(0x400) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r9 = mq_open(0x0, 0x42, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, 0x0) mq_open(0x0, 0x42, 0x11, 0x0) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 2.662462053s ago: executing program 8 (id=10611): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)=',\xea\x00\xd4\xd7\x02\x8dmbs\x0f\xb9\x80\xb9\x13\x92\'\x94N\xc3\xe0m\xa4\x01\x00\x00\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0h7\xa4\xed\x94 \x05q\xa4d\xda0y\xed\xdb\xf4\xeb\x85\x9b\xde\b\xa6\x1f\xaa\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\xecB\x0f', 0x4) ftruncate(r2, 0x7000000) r3 = dup(r2) mprotect(&(0x7f0000140000/0x3000)=nil, 0x3000, 0x1000000) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0xffffffce) r4 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001300)="65a35cc698d2cc9024a77994ccf0b1d7115dad4e494902d5c6c6b4f67d9cc0bac884c61c551cfd976da546197f130d224204f771c1bff157feef43f67c8b7e89d326f7f4deeade2dc01223c4ea65a3983ba5260ee91cf318fb861a8f40ecc7a681938774e45f998eca9d5533cdda4b76c4cd6e400f3c87daf346f59629eb661e91fc2a8f854be2cb1f2b8ed41dfd27949309e64ec164935f74c8e6a1219c3b9e16fb7a00619600000000000000", 0xad}, {&(0x7f00000013c0)="0fb606991534190a4a98ecfe4bf49b16492eb357ec9144c864f135f68160420477a01ca295e951419f943a359a37e95cf06b26679460bc9c7e16764edf6c1ef9182dcd00f1a36f1aa78bcb85a6b86b46868f8e36a634b437ef6180a97c2da121476abae119c2aafa4d78219742eac6", 0x6f}, {&(0x7f00000024c0)="9eb5351d117970a3038b0acd91e1336179d3be4db67e20466c73db225785c624ce0a279f07d73f992aaeb5fceb5e3a6d4c007abbbed673f65ea2c486bd8d8c9c5f235ecd031414d986d2a29a6faa426c945f1351b2bd8d5d10ad6810f1ae9834d533bdf2", 0x64}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008800}], 0x1, 0x4040800) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x3}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf5, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000), &(0x7f0000000000)) 2.292015644s ago: executing program 8 (id=10612): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ca007d05008686dd60ff38f5001c0600fe80000000000000000000000000000bfe8000000000000000000000000000aa730000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000000000000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001b00)=ANY=[@ANYBLOB="021070091c00000028bd7000fddbdf2502001000000004d6000004d4005700000005001a00ac1414aa000000000000000000000000e00000010000000000000000000000001800101002001000000004d2000004d4000000001100180010ac7d00f0a98eaac80517f1a57f72b1240b82a10d875aa2195b90abd17fa1cdfe1f588b99fff796db7b227151389b328015862bb9dae18cf15e4c8afd3067df0ab12338ae0f3f4ee324289876e8f63fccf459281d80df4d6594dfc799962003c31a71a13caad2c7ee34bfbd2481149797e5fdbfea41ff11f96a86038092b1ede9000000"], 0xe0}}, 0x44040800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000400)={0x8, &(0x7f0000000440)=[{0x5, 0xd0}, {0x0, 0x8fb3}, {0x5, 0x2}, {0x3, 0x9}, {0xfffd, 0x6}, {0x80, 0x1}, {0xc2, 0x9}, {0x2, 0x100}]}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x301880) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ftruncate(r3, 0x3292e291) 2.263882949s ago: executing program 8 (id=10613): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x9c, 0x1, [@m_ct={0x50, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x10, 0x6, "aafedbabf87448287bc7ba2d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@uid_eq}, {@hash}, {@subj_user={'subj_user', 0x3d, '\\/'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '&'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = creat(0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) 2.103494996s ago: executing program 9 (id=10614): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000280)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth0_to_bond\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x80047453, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) 2.080879345s ago: executing program 3 (id=10615): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x4, &(0x7f0000000040)) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900), 0x0, 0x4048884) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @private1, 0x1}, 0x1c) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x2, {0x0, 0x100}}) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.999387943s ago: executing program 9 (id=10616): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x4, &(0x7f0000000040)) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900), 0x0, 0x4048884) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @private1, 0x1}, 0x1c) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x2, {0x0, 0x100}}) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.375645554s ago: executing program 7 (id=10617): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r6, 0x701, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40404) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x38, 0xd, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) 1.164256983s ago: executing program 3 (id=10618): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) memfd_create(&(0x7f0000019080)='@@\x00', 0x1) r3 = dup(r2) syz_usb_connect$hid(0x4, 0xffffffffffffff33, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x0, 0x4, [0x4, 0x1, 0x6, 0x6]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000300)={0x2, 0x20c, 0x3d25dd96, 0x5, r7}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77f792949c07", @ANYBLOB=',cache=readahead,k']) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) bpf$MAP_CREATE(0x141e000000000000, &(0x7f00000000c0)=@base={0x5, 0x4, 0x6c03, 0xee}, 0x48) io_setup(0x20, 0x0) 1.078893526s ago: executing program 9 (id=10619): pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r2, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x10000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000}, [@alu={0x4, 0x1, 0xc, 0x0, 0x0, 0xffffffffffffffc0}]}, &(0x7f00000016c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x120}}, 0x50) 628.081048ms ago: executing program 8 (id=10620): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = syz_io_uring_setup(0x512d, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x11, r6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r3, 0x68be, 0x5002, 0x4, 0x0, 0x0) 342.626025ms ago: executing program 7 (id=10621): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x20020680) r0 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x1, 0x200000c}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 220.954411ms ago: executing program 7 (id=10622): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r1 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @empty, 0xe}}, 0x24) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000400)={0x0, @ethernet={0x6, @multicast}, @llc={0x1a, 0x30b, 0x40, 0x3, 0x1, 0x1, @broadcast}, @generic={0x1a, "5a2e3d6f6e3de3cf899ee6f69d72"}, 0x10c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)='macvtap0\x00', 0x10000, 0x6, 0xa}) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r8 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000200)={0x100, r9}, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000280)={0x100, r10}, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x0, 0x48) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000340)={0x100, r11}, 0x0) landlock_restrict_self(r8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) socket$rxrpc(0x21, 0x2, 0x2) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) mkdirat(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x1000, 0x100) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) 0s ago: executing program 3 (id=10623): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ca007d05008686dd60ff38f5001c0600fe80000000000000000000000000000bfe8000000000000000000000000000aa730000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000000000000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001b00)=ANY=[@ANYBLOB="021070091c00000028bd7000fddbdf2502001000000004d6000004d4005700000005001a00ac1414aa000000000000000000000000e00000010000000000000000000000001800101002001000000004d2000004d4000000001100180010ac7d00f0a98eaac80517f1a57f72b1240b82a10d875aa2195b90abd17fa1cdfe1f588b99fff796db7b227151389b328015862bb9dae18cf15e4c8afd3067df0ab12338ae0f3f4ee324289876e8f63fccf459281d80df4d6594dfc799962003c31a71a13caad2c7ee34bfbd2481149797e5fdbfea41ff11f96a86038092b1ede90000"], 0xe0}}, 0x44040800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000400)={0x7, &(0x7f0000000440)=[{0x5, 0xd0}, {0x0, 0x8fb3}, {0x5, 0x2}, {0x3, 0x9}, {0x80, 0x1}, {0xc2, 0x9}, {0x2, 0x100}]}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0x315, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x4000094) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/1, 0x1}, {&(0x7f0000000500)=""/222, 0xde}], 0x2, &(0x7f0000000340)=""/53, 0x35}, 0x60) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 2046.865074][T12496] usb 54-1: device descriptor read/8, error -110 [ 2046.868564][T10398] CPU: 2 UID: 0 PID: 10398 Comm: syz.7.10144 Not tainted syzkaller #0 PREEMPT(full) [ 2046.868589][T10398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2046.868600][T10398] Call Trace: [ 2046.868606][T10398] [ 2046.868614][T10398] dump_stack_lvl+0x16c/0x1f0 [ 2046.868642][T10398] should_fail_ex+0x512/0x640 [ 2046.868670][T10398] _copy_from_user+0x2e/0xd0 [ 2046.868699][T10398] kvm_arch_vm_ioctl+0xe94/0x1860 [ 2046.868723][T10398] ? is_bpf_text_address+0x94/0x1a0 [ 2046.868746][T10398] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 2046.868766][T10398] ? __kernel_text_address+0xd/0x40 [ 2046.868781][T10398] ? unwind_get_return_address+0x59/0xa0 [ 2046.868799][T10398] ? arch_stack_walk+0xa6/0x100 [ 2046.868821][T10398] ? __lock_acquire+0x62e/0x1ce0 [ 2046.868846][T10398] ? __pfx_stack_trace_save+0x10/0x10 [ 2046.868868][T10398] ? __lock_acquire+0x62e/0x1ce0 [ 2046.868893][T10398] ? __lock_acquire+0x62e/0x1ce0 [ 2046.868922][T10398] ? __lock_acquire+0x62e/0x1ce0 [ 2046.868958][T10398] ? __lock_acquire+0x62e/0x1ce0 [ 2046.868995][T10398] ? find_held_lock+0x2b/0x80 [ 2046.869013][T10398] ? is_bpf_text_address+0x8a/0x1a0 [ 2046.869035][T10398] ? bpf_ksym_find+0x124/0x1c0 [ 2046.869051][T10398] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2046.869073][T10398] ? is_bpf_text_address+0x94/0x1a0 [ 2046.869095][T10398] ? kernel_text_address+0x8d/0x100 [ 2046.869112][T10398] ? __kernel_text_address+0xd/0x40 [ 2046.869128][T10398] ? unwind_get_return_address+0x59/0xa0 [ 2046.869146][T10398] ? arch_stack_walk+0xa6/0x100 [ 2046.869169][T10398] kvm_vm_ioctl+0x1a91/0x4000 [ 2046.869191][T10398] ? stack_trace_save+0x8e/0xc0 [ 2046.869210][T10398] ? __pfx_stack_trace_save+0x10/0x10 [ 2046.869230][T10398] ? stack_depot_save_flags+0x29/0x9c0 [ 2046.869256][T10398] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 2046.869275][T10398] ? kasan_save_stack+0x42/0x60 [ 2046.869294][T10398] ? kasan_save_stack+0x33/0x60 [ 2046.869312][T10398] ? kasan_save_track+0x14/0x30 [ 2046.869331][T10398] ? kasan_save_free_info+0x3b/0x60 [ 2046.869355][T10398] ? __kasan_slab_free+0x60/0x70 [ 2046.869375][T10398] ? kfree+0x2b4/0x4d0 [ 2046.869390][T10398] ? tomoyo_path_number_perm+0x470/0x580 [ 2046.869410][T10398] ? security_file_ioctl_compat+0x9b/0x240 [ 2046.869432][T10398] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 2046.869458][T10398] ? __do_fast_syscall_32+0x7c/0x3a0 [ 2046.869481][T10398] ? do_fast_syscall_32+0x32/0x80 [ 2046.869501][T10398] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2046.869523][T10398] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 2046.869548][T10398] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 2046.869594][T10398] ? kasan_quarantine_put+0x10a/0x240 [ 2046.869615][T10398] ? lockdep_hardirqs_on+0x7c/0x110 [ 2046.869641][T10398] ? find_held_lock+0x2b/0x80 [ 2046.869659][T10398] ? tomoyo_path_number_perm+0x295/0x580 [ 2046.869684][T10398] ? tomoyo_path_number_perm+0x18d/0x580 [ 2046.869708][T10398] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2046.869739][T10398] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2046.869768][T10398] ? do_vfs_ioctl+0x128/0x14f0 [ 2046.869795][T10398] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2046.869825][T10398] kvm_vm_compat_ioctl+0x393/0x430 [ 2046.869844][T10398] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 2046.869863][T10398] ? find_held_lock+0x2b/0x80 [ 2046.869880][T10398] ? hook_file_ioctl_common+0x145/0x410 [ 2046.869914][T10398] ? __fget_files+0x20e/0x3c0 [ 2046.869938][T10398] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 2046.869957][T10398] __ia32_compat_sys_ioctl+0x23f/0x370 [ 2046.869988][T10398] __do_fast_syscall_32+0x7c/0x3a0 [ 2046.870015][T10398] do_fast_syscall_32+0x32/0x80 [ 2046.870040][T10398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2046.870061][T10398] RIP: 0023:0xf706e579 [ 2046.870076][T10398] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2046.870094][T10398] RSP: 002b:00000000f541c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2046.870111][T10398] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004070aea0 [ 2046.870122][T10398] RDX: 0000000080002400 RSI: 0000000000000000 RDI: 0000000000000000 [ 2046.870133][T10398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2046.870143][T10398] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2046.870153][T10398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2046.870176][T10398] [ 2046.885818][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10141'. [ 2047.338397][T12496] usb usb54-port1: attempt power cycle [ 2047.369391][T10403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2047.412670][T10408] openvswitch: netlink: Missing key (keys=40, expected=80) [ 2047.462119][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10147'. [ 2047.498500][T10414] FAULT_INJECTION: forcing a failure. [ 2047.498500][T10414] name failslab, interval 1, probability 0, space 0, times 0 [ 2047.502405][T10414] CPU: 3 UID: 0 PID: 10414 Comm: syz.7.10149 Not tainted syzkaller #0 PREEMPT(full) [ 2047.502420][T10414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2047.502427][T10414] Call Trace: [ 2047.502431][T10414] [ 2047.502435][T10414] dump_stack_lvl+0x16c/0x1f0 [ 2047.502452][T10414] should_fail_ex+0x512/0x640 [ 2047.502468][T10414] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2047.502481][T10414] should_failslab+0xc2/0x120 [ 2047.502495][T10414] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2047.502506][T10414] ? copy_mount_options+0x55/0x190 [ 2047.502522][T10414] copy_mount_options+0x55/0x190 [ 2047.502538][T10414] __ia32_sys_mount+0x1ac/0x310 [ 2047.502552][T10414] ? __pfx___ia32_sys_mount+0x10/0x10 [ 2047.502566][T10414] ? rcu_is_watching+0x12/0xc0 [ 2047.502579][T10414] __do_fast_syscall_32+0x7c/0x3a0 [ 2047.502595][T10414] do_fast_syscall_32+0x32/0x80 [ 2047.502609][T10414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2047.502623][T10414] RIP: 0023:0xf706e579 [ 2047.502632][T10414] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2047.502642][T10414] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 2047.502653][T10414] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 2047.502659][T10414] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000000 [ 2047.502665][T10414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2047.502671][T10414] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2047.502677][T10414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2047.502690][T10414] [ 2047.787521][T10430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2047.793639][T10430] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10155'. [ 2047.818390][T10430] syz.3.10155 (10430): drop_caches: 2 [ 2048.005777][T12496] usb usb54-port1: unable to enumerate USB device [ 2048.414603][T12230] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2048.641940][T10443] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2048.644258][T10443] overlayfs: failed to set xattr on upper [ 2048.651596][T10443] overlayfs: ...falling back to redirect_dir=nofollow. [ 2048.658774][T10443] overlayfs: ...falling back to index=off. [ 2048.662292][T10443] overlayfs: ...falling back to uuid=null. [ 2048.669038][T10443] overlayfs: ...falling back to xino=off. [ 2048.854599][T12230] usb 10-1: device descriptor read/64, error -71 [ 2049.312936][T10447] FAULT_INJECTION: forcing a failure. [ 2049.312936][T10447] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2049.329220][T10447] CPU: 1 UID: 0 PID: 10447 Comm: syz.7.10161 Not tainted syzkaller #0 PREEMPT(full) [ 2049.329247][T10447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2049.329254][T10447] Call Trace: [ 2049.329259][T10447] [ 2049.329264][T10447] dump_stack_lvl+0x16c/0x1f0 [ 2049.329282][T10447] should_fail_ex+0x512/0x640 [ 2049.329299][T10447] should_fail_alloc_page+0xe7/0x130 [ 2049.329315][T10447] prepare_alloc_pages+0x3c2/0x610 [ 2049.329333][T10447] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 2049.329349][T10447] ? __pfx_stack_trace_save+0x10/0x10 [ 2049.329364][T10447] ? look_up_lock_class+0x6b/0x150 [ 2049.329379][T10447] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2049.329403][T10447] ? find_held_lock+0x2b/0x80 [ 2049.329423][T10447] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2049.329439][T10447] ? policy_nodemask+0xea/0x4e0 [ 2049.329454][T10447] alloc_pages_mpol+0x1fb/0x550 [ 2049.329468][T10447] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2049.329483][T10447] ? __lock_acquire+0x62e/0x1ce0 [ 2049.329498][T10447] folio_alloc_mpol_noprof+0x36/0x2f0 [ 2049.329515][T10447] vma_alloc_folio_noprof+0xed/0x1e0 [ 2049.329530][T10447] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2049.329550][T10447] do_pte_missing+0x2230/0x3ba0 [ 2049.329561][T10447] ? find_held_lock+0x2b/0x80 [ 2049.329575][T10447] __handle_mm_fault+0x152a/0x2a50 [ 2049.329588][T10447] ? mt_find+0x3ef/0xa30 [ 2049.329603][T10447] ? __pfx___handle_mm_fault+0x10/0x10 [ 2049.329613][T10447] ? __pfx_mt_find+0x10/0x10 [ 2049.329635][T10447] ? find_vma+0xbf/0x140 [ 2049.329648][T10447] ? __pfx_find_vma+0x10/0x10 [ 2049.329663][T10447] handle_mm_fault+0x589/0xd10 [ 2049.329674][T10447] ? __bpf_trace_exceptions+0x1/0x40 [ 2049.329692][T10447] do_user_addr_fault+0x7a6/0x1370 [ 2049.329709][T10447] ? rcu_is_watching+0x12/0xc0 [ 2049.329721][T10447] exc_page_fault+0x5c/0xb0 [ 2049.329734][T10447] asm_exc_page_fault+0x26/0x30 [ 2049.329745][T10447] RIP: 0010:_copy_to_user+0xb6/0xd0 [ 2049.329755][T10447] Code: 89 ee 48 89 ef e8 fa 4d da fc 4d 85 ff 75 a8 e8 40 53 da fc 89 de 4c 89 e7 e8 86 bd 3f fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 80 66 2e 0f 1f 84 00 00 00 00 [ 2049.329765][T10447] RSP: 0018:ffffc90004547bd8 EFLAGS: 00050246 [ 2049.329775][T10447] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 2049.329782][T10447] RDX: 0000000000000000 RSI: ffff88804436a000 RDI: 0000000080001240 [ 2049.329788][T10447] RBP: 0000000080001240 R08: 0000000000000000 R09: ffffed100886d5ff [ 2049.329795][T10447] R10: ffff88804436afff R11: 0000000000000000 R12: ffff88804436a000 [ 2049.329801][T10447] R13: 0000000080002240 R14: 00007ffffffff000 R15: 0000000000000000 [ 2049.329818][T10447] ? _copy_to_user+0xaa/0xd0 [ 2049.329829][T10447] pagemap_read+0x52c/0x890 [ 2049.329843][T10447] ? __pfx_pagemap_read+0x10/0x10 [ 2049.329858][T10447] ? rw_verify_area+0xcf/0x6c0 [ 2049.329869][T10447] ? __pfx_pagemap_read+0x10/0x10 [ 2049.329881][T10447] vfs_read+0x1e4/0xcf0 [ 2049.329895][T10447] ? __pfx_vfs_read+0x10/0x10 [ 2049.329906][T10447] ? find_held_lock+0x2b/0x80 [ 2049.329916][T10447] ? __fget_files+0x204/0x3c0 [ 2049.329930][T10447] ? __fget_files+0x20e/0x3c0 [ 2049.329940][T10447] ? __fget_files+0x180/0x3c0 [ 2049.329954][T10447] ksys_pread64+0x161/0x1a0 [ 2049.329967][T10447] ? __pfx_ksys_pread64+0x10/0x10 [ 2049.329980][T10447] ? rcu_is_watching+0x12/0xc0 [ 2049.329993][T10447] __do_fast_syscall_32+0x7c/0x3a0 [ 2049.330008][T10447] do_fast_syscall_32+0x32/0x80 [ 2049.330022][T10447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2049.330035][T10447] RIP: 0023:0xf706e579 [ 2049.330043][T10447] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2049.330053][T10447] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000b4 [ 2049.330062][T10447] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001240 [ 2049.330068][T10447] RDX: 0000000000200000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2049.330074][T10447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2049.330080][T10447] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2049.330086][T10447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2049.330099][T10447] [ 2049.674642][T12230] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 2050.244735][T12230] usb 10-1: device descriptor read/64, error -71 [ 2050.354792][T12230] usb usb10-port1: attempt power cycle [ 2050.704572][T12230] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 2050.725468][T12230] usb 10-1: device descriptor read/8, error -71 [ 2051.054256][T10465] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2051.187807][T10467] FAULT_INJECTION: forcing a failure. [ 2051.187807][T10467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2051.191969][T10467] CPU: 1 UID: 0 PID: 10467 Comm: syz.5.10168 Not tainted syzkaller #0 PREEMPT(full) [ 2051.191985][T10467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2051.191991][T10467] Call Trace: [ 2051.191995][T10467] [ 2051.192000][T10467] dump_stack_lvl+0x16c/0x1f0 [ 2051.192018][T10467] should_fail_ex+0x512/0x640 [ 2051.192035][T10467] _copy_from_user+0x2e/0xd0 [ 2051.192052][T10467] do_handle_open+0x5ca/0xc50 [ 2051.192064][T10467] ? __pfx_do_handle_open+0x10/0x10 [ 2051.192077][T10467] ? ksys_write+0x1ac/0x250 [ 2051.192090][T10467] ? __pfx_ksys_write+0x10/0x10 [ 2051.192105][T10467] ? __do_fast_syscall_32+0x7c/0x3a0 [ 2051.192120][T10467] __do_fast_syscall_32+0x7c/0x3a0 [ 2051.192135][T10467] do_fast_syscall_32+0x32/0x80 [ 2051.192153][T10467] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2051.192166][T10467] RIP: 0023:0xf707e579 [ 2051.192175][T10467] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2051.192185][T10467] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000156 [ 2051.192196][T10467] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 2051.192202][T10467] RDX: 0000000000480041 RSI: 0000000000000000 RDI: 0000000000000000 [ 2051.192209][T10467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2051.192214][T10467] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2051.192221][T10467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2051.192234][T10467] [ 2052.045340][T10488] netlink: 'syz.3.10173': attribute type 3 has an invalid length. [ 2052.124916][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10172'. [ 2052.373333][T10494] 9pnet_fd: Insufficient options for proto=fd [ 2052.489009][ T7461] libceph: connect (1)[c::]:6789 error -101 [ 2052.491131][ T7461] libceph: mon0 (1)[c::]:6789 connect error [ 2052.527157][T10490] ceph: No mds server is up or the cluster is laggy [ 2052.678460][T10505] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2054.028389][T10532] FAULT_INJECTION: forcing a failure. [ 2054.028389][T10532] name failslab, interval 1, probability 0, space 0, times 0 [ 2054.033300][T10532] CPU: 3 UID: 0 PID: 10532 Comm: syz.8.10186 Not tainted syzkaller #0 PREEMPT(full) [ 2054.033323][T10532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2054.033332][T10532] Call Trace: [ 2054.033339][T10532] [ 2054.033346][T10532] dump_stack_lvl+0x16c/0x1f0 [ 2054.033372][T10532] should_fail_ex+0x512/0x640 [ 2054.033398][T10532] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 2054.033421][T10532] should_failslab+0xc2/0x120 [ 2054.033442][T10532] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2054.033461][T10532] ? __pfx___might_resched+0x10/0x10 [ 2054.033477][T10532] ? alloc_vmap_area+0x645/0x29c0 [ 2054.033507][T10532] alloc_vmap_area+0x645/0x29c0 [ 2054.033541][T10532] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2054.033571][T10532] __get_vm_area_node+0x1ca/0x330 [ 2054.033602][T10532] __vmalloc_node_range_noprof+0x271/0x14b0 [ 2054.033619][T10532] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2054.033641][T10532] ? find_held_lock+0x2b/0x80 [ 2054.033662][T10532] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2054.033689][T10532] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2054.033709][T10532] ? __lock_acquire+0x62e/0x1ce0 [ 2054.033734][T10532] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2054.033751][T10532] __vmalloc_node_noprof+0xad/0xf0 [ 2054.033766][T10532] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2054.033789][T10532] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2054.033808][T10532] ? security_capable+0x7e/0x260 [ 2054.033829][T10532] bpf_prog_alloc+0x3b/0x230 [ 2054.033848][T10532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2054.033875][T10532] bpf_prog_load+0x1a04/0x2490 [ 2054.033906][T10532] ? __pfx_bpf_prog_load+0x10/0x10 [ 2054.033955][T10532] __sys_bpf+0x4a3f/0x4de0 [ 2054.033983][T10532] ? __pfx___sys_bpf+0x10/0x10 [ 2054.034014][T10532] ? ksys_write+0x190/0x250 [ 2054.034039][T10532] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 2054.034078][T10532] ? fput+0x9b/0xd0 [ 2054.034101][T10532] ? ksys_write+0x1ac/0x250 [ 2054.034120][T10532] ? __pfx_ksys_write+0x10/0x10 [ 2054.034145][T10532] __ia32_sys_bpf+0x76/0xe0 [ 2054.034171][T10532] __do_fast_syscall_32+0x7c/0x3a0 [ 2054.034198][T10532] do_fast_syscall_32+0x32/0x80 [ 2054.034222][T10532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2054.034243][T10532] RIP: 0023:0xf70de579 [ 2054.034258][T10532] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2054.034274][T10532] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2054.034292][T10532] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 2054.034303][T10532] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 2054.034313][T10532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2054.034323][T10532] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2054.034333][T10532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2054.034356][T10532] [ 2054.034379][T10532] syz.8.10186: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 2054.155908][T10532] CPU: 0 UID: 0 PID: 10532 Comm: syz.8.10186 Not tainted syzkaller #0 PREEMPT(full) [ 2054.155932][T10532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2054.155944][T10532] Call Trace: [ 2054.155951][T10532] [ 2054.155958][T10532] dump_stack_lvl+0x16c/0x1f0 [ 2054.155986][T10532] warn_alloc+0x248/0x3a0 [ 2054.156008][T10532] ? __pfx_warn_alloc+0x10/0x10 [ 2054.156029][T10532] ? kfree+0x2b4/0x4d0 [ 2054.156051][T10532] ? __get_vm_area_node+0x208/0x330 [ 2054.156081][T10532] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 2054.156101][T10532] ? find_held_lock+0x2b/0x80 [ 2054.156121][T10532] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2054.156149][T10532] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2054.156169][T10532] ? __lock_acquire+0x62e/0x1ce0 [ 2054.156194][T10532] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2054.156213][T10532] __vmalloc_node_noprof+0xad/0xf0 [ 2054.156229][T10532] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2054.156251][T10532] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2054.156271][T10532] ? security_capable+0x7e/0x260 [ 2054.156291][T10532] bpf_prog_alloc+0x3b/0x230 [ 2054.156308][T10532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2054.156335][T10532] bpf_prog_load+0x1a04/0x2490 [ 2054.156366][T10532] ? __pfx_bpf_prog_load+0x10/0x10 [ 2054.156412][T10532] __sys_bpf+0x4a3f/0x4de0 [ 2054.156440][T10532] ? __pfx___sys_bpf+0x10/0x10 [ 2054.156466][T10532] ? ksys_write+0x190/0x250 [ 2054.156490][T10532] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 2054.156528][T10532] ? fput+0x9b/0xd0 [ 2054.156551][T10532] ? ksys_write+0x1ac/0x250 [ 2054.156570][T10532] ? __pfx_ksys_write+0x10/0x10 [ 2054.156594][T10532] __ia32_sys_bpf+0x76/0xe0 [ 2054.156620][T10532] __do_fast_syscall_32+0x7c/0x3a0 [ 2054.156647][T10532] do_fast_syscall_32+0x32/0x80 [ 2054.156670][T10532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2054.156691][T10532] RIP: 0023:0xf70de579 [ 2054.156705][T10532] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2054.156722][T10532] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2054.156739][T10532] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 2054.156750][T10532] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 2054.156760][T10532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2054.156769][T10532] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2054.156779][T10532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2054.156802][T10532] [ 2054.156817][T10532] Mem-Info: [ 2054.258375][T10532] active_anon:1157 inactive_anon:367 isolated_anon:0 [ 2054.258375][T10532] active_file:1511 inactive_file:17162 isolated_file:0 [ 2054.258375][T10532] unevictable:1768 dirty:920 writeback:0 [ 2054.258375][T10532] slab_reclaimable:6839 slab_unreclaimable:66329 [ 2054.258375][T10532] mapped:24056 shmem:1769 pagetables:1190 [ 2054.258375][T10532] sec_pagetables:346 bounce:0 [ 2054.258375][T10532] kernel_misc_reclaimable:0 [ 2054.258375][T10532] free:52564 free_pcp:20462 free_cma:0 [ 2054.275028][T10532] Node 0 active_anon:248kB inactive_anon:152kB active_file:60kB inactive_file:28kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3100kB dirty:0kB writeback:0kB shmem:5024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7452kB pagetables:1372kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB [ 2054.285723][T10532] Node 1 active_anon:4480kB inactive_anon:1316kB active_file:5984kB inactive_file:68620kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:93124kB dirty:3680kB writeback:0kB shmem:2052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5780kB pagetables:3188kB sec_pagetables:212kB all_unreclaimable? no Balloon:0kB [ 2054.295898][T10532] Node 0 DMA free:2088kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:524kB local_pcp:224kB free_cma:0kB [ 2054.306785][T10532] lowmem_reserve[]: 0 288 288 288 288 [ 2054.308651][T10532] Node 0 DMA32 free:16428kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:100KB active_anon:244kB inactive_anon:152kB active_file:60kB inactive_file:28kB unevictable:3536kB writepending:0kB present:1032196kB managed:295132kB mlocked:0kB bounce:0kB free_pcp:13064kB local_pcp:3776kB free_cma:0kB [ 2054.318752][T10532] lowmem_reserve[]: 0 0 0 0 0 [ 2054.320325][T10532] Node 1 DMA32 free:195344kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4448kB inactive_anon:1316kB active_file:5984kB inactive_file:68608kB unevictable:3536kB writepending:3768kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:65340kB local_pcp:16728kB free_cma:0kB [ 2054.330315][T10532] lowmem_reserve[]: 0 0 0 0 0 [ 2054.331896][T10532] Node 0 DMA: 18*4kB (UM) 20*8kB (UM) 8*16kB (UM) 6*32kB (U) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2088kB [ 2054.337176][T10532] Node 0 DMA32: 91*4kB (UMEH) 102*8kB (UMEH) 93*16kB (UMEH) 146*32kB (UMEH) 78*64kB (UM) 18*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16428kB [ 2054.343982][T10532] Node 1 DMA32: 3569*4kB (UM) 2445*8kB (UME) 1009*16kB (UE) 126*32kB (UME) 223*64kB (UME) 141*128kB (UME) 84*256kB (UME) 45*512kB (UME) 47*1024kB (UME) 8*2048kB (UM) 0*4096kB = 195388kB [ 2054.351914][T10532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2054.356069][T10532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2054.359839][T10532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2054.363727][T10532] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 2054.366994][T10532] 21089 total pagecache pages [ 2054.368497][T10532] 654 pages in swap cache [ 2054.369852][T10532] Free swap = 108364kB [ 2054.371173][T10532] Total swap = 124996kB [ 2054.372497][T10532] 524155 pages RAM [ 2054.373749][T10532] 0 pages HighMem/MovableOnly [ 2054.375307][T10532] 209477 pages reserved [ 2054.376631][T10532] 0 pages cma reserved [ 2054.435698][ T6003] usb 12-1: new low-speed USB device number 20 using dummy_hcd [ 2054.484645][T10545] 9pnet_fd: Insufficient options for proto=fd [ 2054.553011][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10188'. [ 2054.595657][T10546] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2054.598607][T10546] overlayfs: failed to set xattr on upper [ 2054.600875][T10546] overlayfs: ...falling back to redirect_dir=nofollow. [ 2054.603709][ T6003] usb 12-1: config 0 has no interfaces? [ 2054.604577][T10546] overlayfs: ...falling back to index=off. [ 2054.607721][T10546] overlayfs: ...falling back to uuid=null. [ 2054.609556][T10546] overlayfs: ...falling back to xino=off. [ 2054.614532][ T6003] usb 12-1: string descriptor 0 read error: -22 [ 2054.616555][ T6003] usb 12-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2054.619342][ T6003] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.622835][ T6003] usb 12-1: config 0 descriptor?? [ 2055.163911][T12496] usb 12-1: USB disconnect, device number 20 [ 2055.392092][T12888] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.473246][T10564] FAULT_INJECTION: forcing a failure. [ 2055.473246][T10564] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.477335][T10564] CPU: 3 UID: 0 PID: 10564 Comm: syz.8.10196 Not tainted syzkaller #0 PREEMPT(full) [ 2055.477352][T10564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2055.477359][T10564] Call Trace: [ 2055.477363][T10564] [ 2055.477368][T10564] dump_stack_lvl+0x16c/0x1f0 [ 2055.477386][T10564] should_fail_ex+0x512/0x640 [ 2055.477402][T10564] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2055.477416][T10564] should_failslab+0xc2/0x120 [ 2055.477430][T10564] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2055.477442][T10564] ? d_instantiate+0x77/0x90 [ 2055.477455][T10564] ? alloc_empty_file+0x55/0x1e0 [ 2055.477472][T10564] alloc_empty_file+0x55/0x1e0 [ 2055.477487][T10564] alloc_file_pseudo+0x13a/0x230 [ 2055.477503][T10564] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2055.477519][T10564] ? do_raw_spin_unlock+0x172/0x230 [ 2055.477537][T10564] __anon_inode_getfile+0xe8/0x280 [ 2055.477552][T10564] anon_inode_getfile_fmode+0x37/0xa0 [ 2055.477566][T10564] do_eventfd+0x19b/0x2c0 [ 2055.477581][T10564] __ia32_sys_eventfd2+0x53/0x80 [ 2055.477596][T10564] __do_fast_syscall_32+0x7c/0x3a0 [ 2055.477612][T10564] do_fast_syscall_32+0x32/0x80 [ 2055.477626][T10564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2055.477641][T10564] RIP: 0023:0xf70de579 [ 2055.477649][T10564] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2055.477659][T10564] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000148 [ 2055.477669][T10564] RAX: ffffffffffffffda RBX: 0000000000001000 RCX: 0000000000080800 [ 2055.477676][T10564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2055.477682][T10564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2055.477688][T10564] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2055.477694][T10564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2055.477706][T10564] [ 2055.487506][T12888] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.631758][ T3832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2055.641371][ T3832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2055.646147][ T3832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2055.651940][ T3832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2055.658408][ T3832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2055.699268][T10571] lo speed is unknown, defaulting to 1000 [ 2055.715428][T12888] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.780327][T12888] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.806354][T10571] chnl_net:caif_netlink_parms(): no params data found [ 2055.876557][T10571] bridge0: port 1(bridge_slave_0) entered blocking state [ 2055.878817][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.881052][T10571] bridge_slave_0: entered allmulticast mode [ 2055.883668][T10571] bridge_slave_0: entered promiscuous mode [ 2055.889525][T10571] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.891853][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 2055.894072][T10571] bridge_slave_1: entered allmulticast mode [ 2055.897691][T10571] bridge_slave_1: entered promiscuous mode [ 2055.939477][T10571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2055.943920][T10571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2055.993750][T10571] team0: Port device team_slave_0 added [ 2055.998465][T10571] team0: Port device team_slave_1 added [ 2056.067896][T10571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2056.070328][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2056.078440][T10571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2056.091368][T10571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2056.093563][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2056.101538][T10571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2056.237712][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10203'. [ 2056.342711][T12888] bond1 (unregistering): (slave erspan1): Releasing active interface [ 2056.345424][T12888] erspan1 (unregistering): left promiscuous mode [ 2056.347439][T12888] erspan1 (unregistering): left allmulticast mode [ 2056.509139][T12888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2056.513174][T12888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2056.517260][T12888] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2056.520213][T12888] bond0 (unregistering): Released all slaves [ 2056.526332][T12888] bond1 (unregistering): Released all slaves [ 2056.631399][T12888] tipc: Disabling bearer [ 2056.633789][T12888] tipc: Left network mode [ 2056.639537][T10571] hsr_slave_0: entered promiscuous mode [ 2056.641913][T10571] hsr_slave_1: entered promiscuous mode [ 2056.646697][T12888] IPVS: stopping backup sync thread 6381 ... [ 2057.451937][T12888] hsr_slave_0: left promiscuous mode [ 2057.454186][T12888] hsr_slave_1: left promiscuous mode [ 2057.458564][T12888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2057.460865][T12888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2057.463613][T12888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2057.466296][T12888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2057.500128][T12888] veth1_macvtap: left promiscuous mode [ 2057.502549][T12888] veth0_macvtap: left promiscuous mode [ 2057.505132][T12888] veth0_vlan: left promiscuous mode [ 2057.553461][T12888] pim6reg (unregistering): left allmulticast mode [ 2057.744677][ T3832] Bluetooth: hci0: command tx timeout [ 2059.369453][T12888] team0 (unregistering): Port device team_slave_1 removed [ 2059.490854][T12888] team0 (unregistering): Port device team_slave_0 removed [ 2059.824573][ T3832] Bluetooth: hci0: command tx timeout [ 2060.243120][T10646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2060.249967][T10646] netlink: 148 bytes leftover after parsing attributes in process `syz.7.10218'. [ 2060.267126][T10646] syz.7.10218 (10646): drop_caches: 2 [ 2060.710537][T10571] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2060.715958][T10571] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2060.733131][T10571] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2060.750903][T10571] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2060.771794][T10654] netlink: 'syz.3.10219': attribute type 1 has an invalid length. [ 2060.798626][T10571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2060.810280][T10571] 8021q: adding VLAN 0 to HW filter on device team0 [ 2060.832265][T30460] bridge0: port 1(bridge_slave_0) entered blocking state [ 2060.834816][T30460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2060.840400][T30460] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.842644][T30460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2060.864967][ T7462] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 2060.868429][T12888] IPVS: stop unused estimator thread 0... [ 2060.962473][T10571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2061.016565][ T7462] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2061.021343][ T7462] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2061.034675][ T7462] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2061.037698][ T7462] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.043000][T10653] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2061.048760][ T7462] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 2061.167598][T10571] veth0_vlan: entered promiscuous mode [ 2061.172967][T10571] veth1_vlan: entered promiscuous mode [ 2061.189844][T10571] veth0_macvtap: entered promiscuous mode [ 2061.194323][T10571] veth1_macvtap: entered promiscuous mode [ 2061.205279][T10571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2061.211876][T10571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2061.220832][ T5313] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2061.223790][ T5313] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2061.229174][ T5313] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2061.232638][ T5313] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2061.287420][T12888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2061.290542][T12888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2061.297206][T30460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2061.300545][T30460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2061.487361][ T6003] usb 13-1: USB disconnect, device number 24 [ 2061.904722][ T5982] Bluetooth: hci0: command tx timeout [ 2061.982211][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10229'. [ 2063.257871][T10720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2063.505313][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 2063.505325][ T40] audit: type=1326 audit(2063.386:22250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.8.10234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2063.527086][ T40] audit: type=1326 audit(2063.386:22251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.8.10234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2063.535421][ T40] audit: type=1326 audit(2063.406:22252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.8.10234" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2063.545883][ T40] audit: type=1326 audit(2063.406:22253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.8.10234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2063.554960][ T40] audit: type=1326 audit(2063.406:22254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.8.10234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2063.565319][ T40] audit: type=1326 audit(2063.416:22255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.8.10234" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2063.578433][ T40] audit: type=1326 audit(2063.416:22256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.8.10234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2063.628126][ T40] audit: type=1326 audit(2063.486:22257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.8.10234" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2063.638442][ T40] audit: type=1326 audit(2063.506:22258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.8.10234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2063.857255][ T40] audit: type=1326 audit(2063.736:22259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.8.10234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2063.984715][ T3832] Bluetooth: hci0: command tx timeout [ 2064.144644][ T7462] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 2064.221362][T10739] FAULT_INJECTION: forcing a failure. [ 2064.221362][T10739] name failslab, interval 1, probability 0, space 0, times 0 [ 2064.225564][T10739] CPU: 2 UID: 0 PID: 10739 Comm: syz.9.10241 Not tainted syzkaller #0 PREEMPT(full) [ 2064.225580][T10739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2064.225586][T10739] Call Trace: [ 2064.225590][T10739] [ 2064.225595][T10739] dump_stack_lvl+0x16c/0x1f0 [ 2064.225612][T10739] should_fail_ex+0x512/0x640 [ 2064.225627][T10739] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2064.225641][T10739] should_failslab+0xc2/0x120 [ 2064.225655][T10739] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2064.225665][T10739] ? cgroup_show_path+0xb2/0x740 [ 2064.225678][T10739] ? __pfx_cgroup_show_path+0x10/0x10 [ 2064.225688][T10739] cgroup_show_path+0xb2/0x740 [ 2064.225700][T10739] ? __pfx_cgroup_show_path+0x10/0x10 [ 2064.225710][T10739] kernfs_sop_show_path+0xe9/0x160 [ 2064.225728][T10739] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 2064.225739][T10739] show_path+0x9b/0x100 [ 2064.225754][T10739] show_mountinfo+0x1d8/0x820 [ 2064.225763][T10739] ? trace_kmalloc+0x2b/0xd0 [ 2064.225778][T10739] ? __pfx_show_mountinfo+0x10/0x10 [ 2064.225787][T10739] ? __print_lock_name+0x40/0xe0 [ 2064.225802][T10739] seq_read_iter+0xb1b/0x12c0 [ 2064.225818][T10739] vfs_read+0x8bf/0xcf0 [ 2064.225833][T10739] ? __pfx_vfs_read+0x10/0x10 [ 2064.225843][T10739] ? find_held_lock+0x2b/0x80 [ 2064.225863][T10739] ksys_read+0x12a/0x250 [ 2064.225874][T10739] ? __pfx_ksys_read+0x10/0x10 [ 2064.225887][T10739] ? rcu_is_watching+0x12/0xc0 [ 2064.225900][T10739] __do_fast_syscall_32+0x7c/0x3a0 [ 2064.225916][T10739] do_fast_syscall_32+0x32/0x80 [ 2064.225930][T10739] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2064.225944][T10739] RIP: 0023:0xf702e579 [ 2064.225952][T10739] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2064.225962][T10739] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 2064.225973][T10739] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 2064.225979][T10739] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 2064.225985][T10739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2064.225991][T10739] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2064.225998][T10739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2064.226011][T10739] [ 2064.394626][ T7462] usb 12-1: Using ep0 maxpacket: 32 [ 2064.411553][ T7462] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 2064.416968][ T7462] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2064.425115][ T7462] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2064.432731][ T7462] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2064.442528][ T7462] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2064.448882][ T7462] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2064.455644][ T7462] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2064.460070][ T7462] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.493377][ T7462] usb 12-1: config 0 descriptor?? [ 2064.743193][ T7462] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2064.765994][ T7462] usb 12-1: USB disconnect, device number 21 [ 2064.780089][ T7462] usblp0: removed [ 2065.244791][ T7462] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 2065.342077][T10755] FAULT_INJECTION: forcing a failure. [ 2065.342077][T10755] name failslab, interval 1, probability 0, space 0, times 0 [ 2065.346453][T10755] CPU: 0 UID: 0 PID: 10755 Comm: syz.8.10246 Not tainted syzkaller #0 PREEMPT(full) [ 2065.346478][T10755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2065.346495][T10755] Call Trace: [ 2065.346500][T10755] [ 2065.346505][T10755] dump_stack_lvl+0x16c/0x1f0 [ 2065.346522][T10755] should_fail_ex+0x512/0x640 [ 2065.346537][T10755] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 2065.346552][T10755] should_failslab+0xc2/0x120 [ 2065.346566][T10755] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 2065.346579][T10755] ? __d_alloc+0x32/0xae0 [ 2065.346594][T10755] __d_alloc+0x32/0xae0 [ 2065.346605][T10755] ? trace_kmem_cache_alloc+0x28/0xc0 [ 2065.346620][T10755] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 2065.346633][T10755] d_alloc_pseudo+0x1c/0xc0 [ 2065.346648][T10755] alloc_file_pseudo+0xcf/0x230 [ 2065.346664][T10755] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2065.346683][T10755] sock_alloc_file+0x50/0x210 [ 2065.346704][T10755] do_accept+0x240/0x530 [ 2065.346716][T10755] ? preempt_schedule_common+0x44/0xc0 [ 2065.346729][T10755] ? __pfx_do_accept+0x10/0x10 [ 2065.346749][T10755] __sys_accept4+0x100/0x1c0 [ 2065.346761][T10755] ? __pfx___sys_accept4+0x10/0x10 [ 2065.346772][T10755] ? __might_fault+0x13b/0x190 [ 2065.346788][T10755] __ia32_sys_accept4+0x94/0x100 [ 2065.346800][T10755] __do_fast_syscall_32+0x7c/0x3a0 [ 2065.346817][T10755] do_fast_syscall_32+0x32/0x80 [ 2065.346831][T10755] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2065.346844][T10755] RIP: 0023:0xf70de579 [ 2065.346852][T10755] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2065.346863][T10755] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 000000000000016c [ 2065.346873][T10755] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 2065.346880][T10755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2065.346886][T10755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2065.346892][T10755] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2065.346898][T10755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2065.346911][T10755] [ 2065.404590][ T7462] usb 12-1: Using ep0 maxpacket: 32 [ 2065.437686][ T7462] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 2065.440355][ T7462] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2065.443347][ T7462] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2065.448184][ T7462] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2065.451387][ T7462] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2065.455965][ T7462] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2065.457468][T10757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2065.460120][ T7462] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2065.460134][ T7462] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2065.461435][ T7462] usb 12-1: config 0 descriptor?? [ 2065.675178][ T7462] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2065.685350][ T6003] usb 12-1: USB disconnect, device number 22 [ 2065.689040][ T6003] usblp0: removed [ 2065.911490][T10762] FAULT_INJECTION: forcing a failure. [ 2065.911490][T10762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2065.917016][T10762] CPU: 2 UID: 0 PID: 10762 Comm: syz.3.10249 Not tainted syzkaller #0 PREEMPT(full) [ 2065.917039][T10762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2065.917049][T10762] Call Trace: [ 2065.917055][T10762] [ 2065.917062][T10762] dump_stack_lvl+0x16c/0x1f0 [ 2065.917089][T10762] should_fail_ex+0x512/0x640 [ 2065.917116][T10762] _copy_from_user+0x2e/0xd0 [ 2065.917143][T10762] video_usercopy+0x723/0x1440 [ 2065.917169][T10762] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 2065.917191][T10762] ? __pfx_video_usercopy+0x10/0x10 [ 2065.917221][T10762] ? hook_file_ioctl_common+0x145/0x410 [ 2065.917249][T10762] v4l2_ioctl+0x1ba/0x250 [ 2065.917272][T10762] v4l2_compat_ioctl32+0x214/0x2c0 [ 2065.917291][T10762] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 2065.917310][T10762] __ia32_compat_sys_ioctl+0x23f/0x370 [ 2065.917340][T10762] __do_fast_syscall_32+0x7c/0x3a0 [ 2065.917365][T10762] do_fast_syscall_32+0x32/0x80 [ 2065.917388][T10762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2065.917410][T10762] RIP: 0023:0xf7fe8579 [ 2065.917422][T10762] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2065.917438][T10762] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2065.917453][T10762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0485619 [ 2065.917464][T10762] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 2065.917474][T10762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2065.917483][T10762] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2065.917493][T10762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2065.917514][T10762] [ 2066.171531][T18669] libceph: connect (1)[c::]:6789 error -101 [ 2066.173496][T18669] libceph: mon0 (1)[c::]:6789 connect error [ 2066.220627][T10767] ceph: No mds server is up or the cluster is laggy [ 2066.709474][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10256'. [ 2066.744963][T18669] usb 14-1: new high-speed USB device number 37 using dummy_hcd [ 2066.954533][T18669] usb 14-1: Using ep0 maxpacket: 16 [ 2066.975037][T10791] FAULT_INJECTION: forcing a failure. [ 2066.975037][T10791] name failslab, interval 1, probability 0, space 0, times 0 [ 2066.976308][T18669] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2066.978951][T10791] CPU: 2 UID: 0 PID: 10791 Comm: syz.3.10258 Not tainted syzkaller #0 PREEMPT(full) [ 2066.978966][T10791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2066.978973][T10791] Call Trace: [ 2066.978977][T10791] [ 2066.978982][T10791] dump_stack_lvl+0x16c/0x1f0 [ 2066.979000][T10791] should_fail_ex+0x512/0x640 [ 2066.979014][T10791] ? __kmalloc_noprof+0xbf/0x510 [ 2066.979033][T10791] ? sock_kmalloc+0x111/0x170 [ 2066.979055][T10791] should_failslab+0xc2/0x120 [ 2066.979078][T10791] __kmalloc_noprof+0xd2/0x510 [ 2066.979104][T10791] sock_kmalloc+0x111/0x170 [ 2066.979126][T10791] skcipher_recvmsg+0x4a6/0x1030 [ 2066.979147][T10791] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2066.979162][T10791] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2066.979177][T10791] sock_recvmsg+0x1f9/0x250 [ 2066.979187][T10791] ____sys_recvmsg+0x218/0x6b0 [ 2066.979200][T10791] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2066.979209][T10791] ? import_iovec+0x86/0xb0 [ 2066.979224][T10791] ? __lock_acquire+0x62e/0x1ce0 [ 2066.979264][T10791] ___sys_recvmsg+0x114/0x1a0 [ 2066.979283][T10791] ? __pfx____sys_recvmsg+0x10/0x10 [ 2066.979298][T10791] ? find_held_lock+0x2b/0x80 [ 2066.979320][T10791] __sys_recvmsg+0x16a/0x220 [ 2066.979341][T10791] ? __pfx___sys_recvmsg+0x10/0x10 [ 2066.979367][T10791] ? rcu_is_watching+0x12/0xc0 [ 2066.979380][T10791] __do_fast_syscall_32+0x7c/0x3a0 [ 2066.979396][T10791] do_fast_syscall_32+0x32/0x80 [ 2066.979410][T10791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2066.979424][T10791] RIP: 0023:0xf7fe8579 [ 2066.979434][T10791] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2066.979444][T10791] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000174 [ 2066.979454][T10791] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001700 [ 2066.979461][T10791] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000000 [ 2066.979467][T10791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2066.979473][T10791] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2066.979479][T10791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2066.979492][T10791] [ 2067.100691][T18669] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25454, setting to 1024 [ 2067.146265][T10799] FAULT_INJECTION: forcing a failure. [ 2067.146265][T10799] name failslab, interval 1, probability 0, space 0, times 0 [ 2067.150126][T10799] CPU: 3 UID: 0 PID: 10799 Comm: syz.3.10261 Not tainted syzkaller #0 PREEMPT(full) [ 2067.150142][T10799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2067.150148][T10799] Call Trace: [ 2067.150153][T10799] [ 2067.150158][T10799] dump_stack_lvl+0x16c/0x1f0 [ 2067.150175][T10799] should_fail_ex+0x512/0x640 [ 2067.150189][T10799] ? fs_reclaim_acquire+0xae/0x150 [ 2067.150206][T10799] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2067.150221][T10799] should_failslab+0xc2/0x120 [ 2067.150235][T10799] __kmalloc_noprof+0xd2/0x510 [ 2067.150252][T10799] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2067.150268][T10799] ? tomoyo_profile+0x47/0x60 [ 2067.150279][T10799] tomoyo_path_number_perm+0x245/0x580 [ 2067.150291][T10799] ? tomoyo_path_number_perm+0x237/0x580 [ 2067.150305][T10799] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2067.150319][T10799] ? __handle_mm_fault+0x5a8/0x2a50 [ 2067.150342][T10799] ? find_held_lock+0x2b/0x80 [ 2067.150353][T10799] ? hook_file_ioctl_common+0x145/0x410 [ 2067.150370][T10799] ? __fget_files+0x20e/0x3c0 [ 2067.150384][T10799] security_file_ioctl_compat+0x9b/0x240 [ 2067.150400][T10799] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2067.150418][T10799] __do_fast_syscall_32+0x7c/0x3a0 [ 2067.150435][T10799] do_fast_syscall_32+0x32/0x80 [ 2067.150449][T10799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2067.150463][T10799] RIP: 0023:0xf7fe8579 [ 2067.150471][T10799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2067.150482][T10799] RSP: 002b:00000000f54d555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2067.150492][T10799] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005411 [ 2067.150499][T10799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2067.150505][T10799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2067.150513][T10799] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2067.150519][T10799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2067.150532][T10799] [ 2067.150537][T10799] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2067.203602][T18669] usb 14-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2067.234758][T18669] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.259467][T18669] usb 14-1: Product: syz [ 2067.286552][T18669] usb 14-1: Manufacturer: syz [ 2067.288437][T18669] usb 14-1: SerialNumber: syz [ 2067.296904][T18669] usb 14-1: config 0 descriptor?? [ 2067.303667][T18669] hub 14-1:0.0: bad descriptor, ignoring hub [ 2067.306050][T18669] hub 14-1:0.0: probe with driver hub failed with error -5 [ 2067.371225][T18669] input: syz syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input93 [ 2067.502513][T10782] FAULT_INJECTION: forcing a failure. [ 2067.502513][T10782] name failslab, interval 1, probability 0, space 0, times 0 [ 2067.508486][T10782] CPU: 0 UID: 0 PID: 10782 Comm: syz.9.10257 Not tainted syzkaller #0 PREEMPT(full) [ 2067.508504][T10782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2067.508510][T10782] Call Trace: [ 2067.508514][T10782] [ 2067.508519][T10782] dump_stack_lvl+0x16c/0x1f0 [ 2067.508550][T10782] should_fail_ex+0x512/0x640 [ 2067.508565][T10782] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2067.508580][T10782] should_failslab+0xc2/0x120 [ 2067.508593][T10782] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2067.508606][T10782] ? alloc_empty_file+0x55/0x1e0 [ 2067.508624][T10782] alloc_empty_file+0x55/0x1e0 [ 2067.508639][T10782] path_openat+0xda/0x2cb0 [ 2067.508651][T10782] ? do_fast_syscall_32+0x32/0x80 [ 2067.508665][T10782] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2067.508687][T10782] ? __pfx_path_openat+0x10/0x10 [ 2067.508700][T10782] ? __lock_acquire+0xb97/0x1ce0 [ 2067.508716][T10782] do_filp_open+0x20b/0x470 [ 2067.508729][T10782] ? __pfx_do_filp_open+0x10/0x10 [ 2067.508750][T10782] ? _raw_spin_unlock+0x28/0x50 [ 2067.508763][T10782] ? alloc_fd+0x471/0x7d0 [ 2067.508779][T10782] do_sys_openat2+0x11b/0x1d0 [ 2067.508794][T10782] ? __pfx_do_sys_openat2+0x10/0x10 [ 2067.508811][T10782] ? __fget_files+0x20e/0x3c0 [ 2067.508825][T10782] __ia32_compat_sys_openat+0x16d/0x210 [ 2067.508835][T10782] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2067.508845][T10782] ? ksys_write+0x1ac/0x250 [ 2067.508858][T10782] ? rcu_is_watching+0x12/0xc0 [ 2067.508871][T10782] __do_fast_syscall_32+0x7c/0x3a0 [ 2067.508887][T10782] do_fast_syscall_32+0x32/0x80 [ 2067.508901][T10782] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2067.508913][T10782] RIP: 0023:0xf702e579 [ 2067.508922][T10782] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2067.508933][T10782] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 2067.508943][T10782] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 2067.508949][T10782] RDX: 0000000000101000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2067.508956][T10782] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2067.508962][T10782] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2067.508968][T10782] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2067.508981][T10782] [ 2067.614818][T18669] usb 14-1: USB disconnect, device number 37 [ 2067.798880][T18669] libceph: connect (1)[c::]:6789 error -101 [ 2067.801486][T18669] libceph: mon0 (1)[c::]:6789 connect error [ 2067.835524][T10819] ceph: No mds server is up or the cluster is laggy [ 2068.257338][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10271'. [ 2068.344576][ T7462] usb 14-1: new high-speed USB device number 38 using dummy_hcd [ 2068.494798][ T7462] usb 14-1: Using ep0 maxpacket: 16 [ 2068.502309][ T7462] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2068.511001][ T7462] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25454, setting to 1024 [ 2068.518115][ T7462] usb 14-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2068.521786][ T7462] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.525112][ T7462] usb 14-1: Product: syz [ 2068.527017][ T7462] usb 14-1: Manufacturer: syz [ 2068.528996][ T7462] usb 14-1: SerialNumber: syz [ 2068.532580][ T7462] usb 14-1: config 0 descriptor?? [ 2068.548387][ T7462] hub 14-1:0.0: bad descriptor, ignoring hub [ 2068.550223][ T7462] hub 14-1:0.0: probe with driver hub failed with error -5 [ 2068.553791][ T7462] input: syz syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input94 [ 2068.905022][ T1021] usb 14-1: USB disconnect, device number 38 [ 2069.130729][T10861] sctp: [Deprecated]: syz.3.10279 (pid 10861) Use of int in max_burst socket option. [ 2069.130729][T10861] Use struct sctp_assoc_value instead [ 2069.412659][T10863] Can't find a SQUASHFS superblock on nullb0 [ 2069.457900][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10280'. [ 2069.567323][T10868] sctp: [Deprecated]: syz.8.10281 (pid 10868) Use of int in max_burst socket option. [ 2069.567323][T10868] Use struct sctp_assoc_value instead [ 2071.288900][T10894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2071.483933][T10897] FAULT_INJECTION: forcing a failure. [ 2071.483933][T10897] name failslab, interval 1, probability 0, space 0, times 0 [ 2071.489464][T10897] CPU: 0 UID: 0 PID: 10897 Comm: syz.7.10290 Not tainted syzkaller #0 PREEMPT(full) [ 2071.489479][T10897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2071.489485][T10897] Call Trace: [ 2071.489489][T10897] [ 2071.489493][T10897] dump_stack_lvl+0x16c/0x1f0 [ 2071.489511][T10897] should_fail_ex+0x512/0x640 [ 2071.489526][T10897] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2071.489541][T10897] should_failslab+0xc2/0x120 [ 2071.489555][T10897] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2071.489567][T10897] ? posix_lock_inode+0x1b7/0x2280 [ 2071.489586][T10897] posix_lock_inode+0x1b7/0x2280 [ 2071.489607][T10897] ? __pfx_posix_lock_inode+0x10/0x10 [ 2071.489627][T10897] vfs_lock_file+0xfb/0x150 [ 2071.489643][T10897] fcntl_setlk+0x3ff/0xe20 [ 2071.489654][T10897] ? __pfx_fcntl_setlk+0x10/0x10 [ 2071.489666][T10897] ? __might_fault+0xe3/0x190 [ 2071.489678][T10897] ? __might_fault+0xe3/0x190 [ 2071.489689][T10897] ? __might_fault+0x13b/0x190 [ 2071.489705][T10897] do_compat_fcntl64+0x209/0x710 [ 2071.489721][T10897] ? __pfx_do_compat_fcntl64+0x10/0x10 [ 2071.489738][T10897] ? ksys_write+0x1ac/0x250 [ 2071.489752][T10897] ? rcu_is_watching+0x12/0xc0 [ 2071.489766][T10897] __do_fast_syscall_32+0x7c/0x3a0 [ 2071.489782][T10897] do_fast_syscall_32+0x32/0x80 [ 2071.489796][T10897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2071.489809][T10897] RIP: 0023:0xf706e579 [ 2071.489818][T10897] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2071.489828][T10897] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000037 [ 2071.489839][T10897] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000026 [ 2071.489845][T10897] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2071.489851][T10897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2071.489857][T10897] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2071.489863][T10897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2071.489880][T10897] [ 2071.545707][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 2071.545718][ T40] audit: type=1326 audit(2071.376:22300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.8.10289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2071.579551][ T40] audit: type=1326 audit(2071.376:22301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.8.10289" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2071.587646][ T40] audit: type=1326 audit(2071.376:22302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.8.10289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2071.594637][ T40] audit: type=1326 audit(2071.376:22303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.8.10289" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2071.601437][ T40] audit: type=1326 audit(2071.376:22304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.8.10289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2071.608528][ T40] audit: type=1326 audit(2071.376:22305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.8.10289" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2071.615113][ T40] audit: type=1326 audit(2071.376:22306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.8.10289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2071.621590][ T40] audit: type=1326 audit(2071.376:22307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.8.10289" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2071.628423][ T40] audit: type=1326 audit(2071.376:22308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.8.10289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2071.635303][ T40] audit: type=1326 audit(2071.376:22309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.8.10289" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2071.962867][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10292'. [ 2072.324277][T10921] FAULT_INJECTION: forcing a failure. [ 2072.324277][T10921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2072.330120][T10921] CPU: 3 UID: 0 PID: 10921 Comm: syz.9.10296 Not tainted syzkaller #0 PREEMPT(full) [ 2072.330140][T10921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2072.330150][T10921] Call Trace: [ 2072.330155][T10921] [ 2072.330161][T10921] dump_stack_lvl+0x16c/0x1f0 [ 2072.330188][T10921] should_fail_ex+0x512/0x640 [ 2072.330215][T10921] _copy_from_user+0x2e/0xd0 [ 2072.330243][T10921] video_usercopy+0x723/0x1440 [ 2072.330267][T10921] ? __pfx___video_do_ioctl+0x10/0x10 [ 2072.330290][T10921] ? __pfx_video_usercopy+0x10/0x10 [ 2072.330320][T10921] ? hook_file_ioctl_common+0x145/0x410 [ 2072.330348][T10921] v4l2_ioctl+0x1ba/0x250 [ 2072.330372][T10921] v4l2_compat_ioctl32+0x214/0x2c0 [ 2072.330392][T10921] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 2072.330412][T10921] __ia32_compat_sys_ioctl+0x23f/0x370 [ 2072.330440][T10921] __do_fast_syscall_32+0x7c/0x3a0 [ 2072.330467][T10921] do_fast_syscall_32+0x32/0x80 [ 2072.330491][T10921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2072.330513][T10921] RIP: 0023:0xf702e579 [ 2072.330527][T10921] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2072.330543][T10921] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2072.330571][T10921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565f [ 2072.330582][T10921] RDX: 0000000080000940 RSI: 0000000000000000 RDI: 0000000000000000 [ 2072.330599][T10921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2072.330608][T10921] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2072.330619][T10921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2072.330641][T10921] [ 2073.494405][T10939] binder: 10938:10939 ioctl c0306201 800003c0 returned -14 [ 2073.828549][T12230] libceph: connect (1)[c::]:6789 error -101 [ 2073.830740][T12230] libceph: mon0 (1)[c::]:6789 connect error [ 2073.865582][T10950] ceph: No mds server is up or the cluster is laggy [ 2073.979327][T23612] libceph: connect (1)[c::]:6789 error -101 [ 2073.981363][T23612] libceph: mon0 (1)[c::]:6789 connect error [ 2074.029238][T10958] ceph: No mds server is up or the cluster is laggy [ 2074.869630][T10976] netlink: 'syz.8.10312': attribute type 1 has an invalid length. [ 2074.885988][T10976] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2074.890162][T10976] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 2074.940989][T10980] macvlan2: entered promiscuous mode [ 2074.942615][T10980] macvlan2: entered allmulticast mode [ 2074.948383][T10980] bond1: entered promiscuous mode [ 2074.950661][T10980] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2074.955625][T10980] bond1: left promiscuous mode [ 2075.076028][ T3832] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 2075.376629][T10973] input: syz1 as /devices/virtual/input/input95 [ 2075.486626][T10988] FAULT_INJECTION: forcing a failure. [ 2075.486626][T10988] name failslab, interval 1, probability 0, space 0, times 0 [ 2075.492068][T10988] CPU: 0 UID: 0 PID: 10988 Comm: syz.9.10316 Not tainted syzkaller #0 PREEMPT(full) [ 2075.492091][T10988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2075.492103][T10988] Call Trace: [ 2075.492109][T10988] [ 2075.492118][T10988] dump_stack_lvl+0x16c/0x1f0 [ 2075.492146][T10988] should_fail_ex+0x512/0x640 [ 2075.492172][T10988] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 2075.492210][T10988] should_failslab+0xc2/0x120 [ 2075.492234][T10988] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2075.492255][T10988] ? __pfx___might_resched+0x10/0x10 [ 2075.492273][T10988] ? alloc_vmap_area+0x645/0x29c0 [ 2075.492302][T10988] alloc_vmap_area+0x645/0x29c0 [ 2075.492338][T10988] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2075.492370][T10988] __get_vm_area_node+0x1ca/0x330 [ 2075.492402][T10988] __vmalloc_node_range_noprof+0x271/0x14b0 [ 2075.492422][T10988] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2075.492447][T10988] ? find_held_lock+0x2b/0x80 [ 2075.492470][T10988] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2075.492498][T10988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2075.492521][T10988] ? __lock_acquire+0x62e/0x1ce0 [ 2075.492547][T10988] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2075.492568][T10988] __vmalloc_node_noprof+0xad/0xf0 [ 2075.492585][T10988] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2075.492609][T10988] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2075.492630][T10988] ? security_capable+0x7e/0x260 [ 2075.492652][T10988] bpf_prog_alloc+0x3b/0x230 [ 2075.492671][T10988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2075.492699][T10988] bpf_prog_load+0x1a04/0x2490 [ 2075.492732][T10988] ? __pfx_bpf_prog_load+0x10/0x10 [ 2075.492779][T10988] __sys_bpf+0x4a3f/0x4de0 [ 2075.492808][T10988] ? __pfx___sys_bpf+0x10/0x10 [ 2075.492836][T10988] ? ksys_write+0x190/0x250 [ 2075.492861][T10988] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 2075.492901][T10988] ? fput+0x9b/0xd0 [ 2075.492925][T10988] ? ksys_write+0x1ac/0x250 [ 2075.492946][T10988] ? __pfx_ksys_write+0x10/0x10 [ 2075.492972][T10988] __ia32_sys_bpf+0x76/0xe0 [ 2075.493000][T10988] __do_fast_syscall_32+0x7c/0x3a0 [ 2075.493028][T10988] do_fast_syscall_32+0x32/0x80 [ 2075.493050][T10988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2075.493074][T10988] RIP: 0023:0xf702e579 [ 2075.493089][T10988] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2075.493106][T10988] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2075.493125][T10988] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 2075.493137][T10988] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 2075.493148][T10988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2075.493157][T10988] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2075.493167][T10988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2075.493190][T10988] [ 2075.493284][T10988] syz.9.10316: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz9,mems_allowed=0-1 [ 2075.610668][T10988] CPU: 0 UID: 0 PID: 10988 Comm: syz.9.10316 Not tainted syzkaller #0 PREEMPT(full) [ 2075.610684][T10988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2075.610690][T10988] Call Trace: [ 2075.610695][T10988] [ 2075.610699][T10988] dump_stack_lvl+0x16c/0x1f0 [ 2075.610717][T10988] warn_alloc+0x248/0x3a0 [ 2075.610731][T10988] ? __pfx_warn_alloc+0x10/0x10 [ 2075.610744][T10988] ? kfree+0x2b4/0x4d0 [ 2075.610757][T10988] ? __get_vm_area_node+0x208/0x330 [ 2075.610780][T10988] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 2075.610792][T10988] ? find_held_lock+0x2b/0x80 [ 2075.610805][T10988] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2075.610821][T10988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2075.610834][T10988] ? __lock_acquire+0x62e/0x1ce0 [ 2075.610849][T10988] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2075.610861][T10988] __vmalloc_node_noprof+0xad/0xf0 [ 2075.610871][T10988] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2075.610885][T10988] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 2075.610896][T10988] ? security_capable+0x7e/0x260 [ 2075.610908][T10988] bpf_prog_alloc+0x3b/0x230 [ 2075.610919][T10988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2075.610935][T10988] bpf_prog_load+0x1a04/0x2490 [ 2075.610954][T10988] ? __pfx_bpf_prog_load+0x10/0x10 [ 2075.610980][T10988] __sys_bpf+0x4a3f/0x4de0 [ 2075.610997][T10988] ? __pfx___sys_bpf+0x10/0x10 [ 2075.611012][T10988] ? ksys_write+0x190/0x250 [ 2075.611027][T10988] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 2075.611049][T10988] ? fput+0x9b/0xd0 [ 2075.611062][T10988] ? ksys_write+0x1ac/0x250 [ 2075.611074][T10988] ? __pfx_ksys_write+0x10/0x10 [ 2075.611088][T10988] __ia32_sys_bpf+0x76/0xe0 [ 2075.611104][T10988] __do_fast_syscall_32+0x7c/0x3a0 [ 2075.611121][T10988] do_fast_syscall_32+0x32/0x80 [ 2075.611135][T10988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2075.611149][T10988] RIP: 0023:0xf702e579 [ 2075.611173][T10988] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2075.611185][T10988] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2075.611195][T10988] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 2075.611202][T10988] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 2075.611208][T10988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2075.611214][T10988] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2075.611220][T10988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2075.611233][T10988] [ 2075.611237][T10988] Mem-Info: [ 2075.744701][T10988] active_anon:23197 inactive_anon:314 isolated_anon:0 [ 2075.744701][T10988] active_file:1752 inactive_file:17170 isolated_file:0 [ 2075.744701][T10988] unevictable:1768 dirty:577 writeback:0 [ 2075.744701][T10988] slab_reclaimable:6818 slab_unreclaimable:65081 [ 2075.744701][T10988] mapped:27163 shmem:23484 pagetables:1144 [ 2075.744701][T10988] sec_pagetables:346 bounce:0 [ 2075.744701][T10988] kernel_misc_reclaimable:0 [ 2075.744701][T10988] free:39578 free_pcp:10776 free_cma:0 [ 2075.763318][T10988] Node 0 active_anon:444kB inactive_anon:4kB active_file:16kB inactive_file:4kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3100kB dirty:0kB writeback:0kB shmem:5024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7580kB pagetables:1584kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB [ 2075.775688][T10988] Node 1 active_anon:93644kB inactive_anon:1252kB active_file:6992kB inactive_file:68676kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:106752kB dirty:2308kB writeback:0kB shmem:90112kB shmem_thp:6144kB shmem_pmdmapped:2048kB anon_thp:0kB kernel_stack:5772kB pagetables:2992kB sec_pagetables:212kB all_unreclaimable? no Balloon:0kB [ 2075.789295][T10988] Node 0 DMA free:1996kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:524kB local_pcp:72kB free_cma:0kB [ 2075.809475][T10988] lowmem_reserve[]: 0 288 288 288 288 [ 2075.814585][T10988] Node 0 DMA32 free:16564kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:100KB active_anon:368kB inactive_anon:4kB active_file:16kB inactive_file:4kB unevictable:3536kB writepending:0kB present:1032196kB managed:295132kB mlocked:0kB bounce:0kB free_pcp:11596kB local_pcp:2212kB free_cma:0kB [ 2075.829628][T10988] lowmem_reserve[]: 0 0 0 0 0 [ 2075.831850][T10988] Node 1 DMA32 free:131552kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:93744kB inactive_anon:1252kB active_file:6992kB inactive_file:68676kB unevictable:3536kB writepending:2308kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:37792kB local_pcp:1196kB free_cma:0kB [ 2075.844894][T10988] lowmem_reserve[]: 0 0 0 0 0 [ 2075.846984][T10988] Node 0 DMA: 1*4kB (M) 17*8kB (U) 6*16kB (UM) 7*32kB (UM) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1996kB [ 2075.852606][T10988] Node 0 DMA32: 367*4kB (UMEH) 285*8kB (UMEH) 69*16kB (UMEH) 74*32kB (UMEH) 74*64kB (UME) 22*128kB (UME) 7*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16564kB [ 2075.857614][T10988] Node 1 DMA32: 682*4kB (UME) 821*8kB (UME) 1153*16kB (UE) 429*32kB (UME) 322*64kB (UME) 98*128kB (UME) 26*256kB (UME) 10*512kB (UME) 38*1024kB (UME) 3*2048kB (UM) 0*4096kB = 131456kB [ 2075.863031][T10988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2075.865794][T10988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2075.868419][T10988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2075.871585][T10988] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2075.874911][T10988] 43363 total pagecache pages [ 2075.877155][T10988] 661 pages in swap cache [ 2075.879432][T10988] Free swap = 109276kB [ 2075.880791][T10988] Total swap = 124996kB [ 2075.882762][T10988] 524155 pages RAM [ 2075.883875][T10988] 0 pages HighMem/MovableOnly [ 2075.886097][T10988] 209477 pages reserved [ 2075.888378][T10988] 0 pages cma reserved [ 2075.902255][T10999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2075.914696][T10999] netlink: 'syz.7.10319': attribute type 10 has an invalid length. [ 2076.848985][T11019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2076.930753][T11020] loop6: detected capacity change from 0 to 524287999 [ 2077.234596][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 2077.234613][ T40] audit: type=1326 audit(2077.106:22318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.3.10325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2077.245993][ T40] audit: type=1326 audit(2077.106:22319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.3.10325" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2077.254349][ T40] audit: type=1326 audit(2077.106:22320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.3.10325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2077.263926][ T40] audit: type=1326 audit(2077.106:22321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.3.10325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2077.272021][ T40] audit: type=1326 audit(2077.106:22322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.3.10325" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2077.284066][ T40] audit: type=1326 audit(2077.116:22323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.3.10325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2077.292996][ T40] audit: type=1326 audit(2077.116:22324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.3.10325" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2077.301957][ T40] audit: type=1326 audit(2077.116:22325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.3.10325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2077.310953][ T40] audit: type=1326 audit(2077.116:22326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.3.10325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2077.319969][ T40] audit: type=1326 audit(2077.116:22327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.3.10325" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2077.664258][T11034] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2077.668429][T11034] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2077.677422][T11034] FAULT_INJECTION: forcing a failure. [ 2077.677422][T11034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2077.682406][T11034] CPU: 0 UID: 0 PID: 11034 Comm: syz.9.10328 Not tainted syzkaller #0 PREEMPT(full) [ 2077.682421][T11034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2077.682428][T11034] Call Trace: [ 2077.682434][T11034] [ 2077.682439][T11034] dump_stack_lvl+0x16c/0x1f0 [ 2077.682457][T11034] should_fail_ex+0x512/0x640 [ 2077.682475][T11034] _copy_to_user+0x32/0xd0 [ 2077.682486][T11034] simple_read_from_buffer+0xcb/0x170 [ 2077.682499][T11034] proc_fail_nth_read+0x197/0x240 [ 2077.682512][T11034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2077.682524][T11034] ? rw_verify_area+0xcf/0x6c0 [ 2077.682534][T11034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2077.682546][T11034] vfs_read+0x1e4/0xcf0 [ 2077.682560][T11034] ? __pfx_vfs_read+0x10/0x10 [ 2077.682575][T11034] ? find_held_lock+0x2b/0x80 [ 2077.682589][T11034] ? __fget_files+0x20e/0x3c0 [ 2077.682600][T11034] ? fput+0x60/0xd0 [ 2077.682617][T11034] ksys_read+0x12a/0x250 [ 2077.682629][T11034] ? __pfx_ksys_read+0x10/0x10 [ 2077.682641][T11034] ? rcu_is_watching+0x12/0xc0 [ 2077.682655][T11034] __do_fast_syscall_32+0x7c/0x3a0 [ 2077.682671][T11034] do_fast_syscall_32+0x32/0x80 [ 2077.682686][T11034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2077.682699][T11034] RIP: 0023:0xf702e579 [ 2077.682708][T11034] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2077.682719][T11034] RSP: 002b:00000000f541e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2077.682729][T11034] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541e620 [ 2077.682735][T11034] RDX: 000000000000000f RSI: 00000000f73a4ff4 RDI: 0000000000000000 [ 2077.682742][T11034] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2077.682747][T11034] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2077.682754][T11034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2077.682780][T11034] [ 2077.883475][T11043] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2077.888799][T11043] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2078.910031][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10334'. [ 2078.913092][T11062] bridge_slave_1: left allmulticast mode [ 2078.915145][T11062] bridge_slave_1: left promiscuous mode [ 2078.919180][T11062] bridge0: port 2(bridge_slave_1) entered disabled state [ 2078.942138][T11062] bridge_slave_0: left allmulticast mode [ 2078.943946][T11062] bridge_slave_0: left promiscuous mode [ 2078.946188][T11062] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.326425][T11069] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2079.330782][T11069] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2080.174801][T11072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2081.121813][T11087] FAULT_INJECTION: forcing a failure. [ 2081.121813][T11087] name failslab, interval 1, probability 0, space 0, times 0 [ 2081.126446][T11087] CPU: 3 UID: 0 PID: 11087 Comm: syz.7.10344 Not tainted syzkaller #0 PREEMPT(full) [ 2081.126461][T11087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2081.126468][T11087] Call Trace: [ 2081.126471][T11087] [ 2081.126476][T11087] dump_stack_lvl+0x16c/0x1f0 [ 2081.126493][T11087] should_fail_ex+0x512/0x640 [ 2081.126513][T11087] ? fs_reclaim_acquire+0xae/0x150 [ 2081.126529][T11087] ? tomoyo_encode2+0x100/0x3e0 [ 2081.126545][T11087] should_failslab+0xc2/0x120 [ 2081.126559][T11087] __kmalloc_noprof+0xd2/0x510 [ 2081.126571][T11087] ? d_absolute_path+0x136/0x1a0 [ 2081.126588][T11087] tomoyo_encode2+0x100/0x3e0 [ 2081.126604][T11087] tomoyo_encode+0x29/0x50 [ 2081.126617][T11087] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2081.126636][T11087] tomoyo_path_number_perm+0x245/0x580 [ 2081.126648][T11087] ? tomoyo_path_number_perm+0x237/0x580 [ 2081.126661][T11087] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2081.126688][T11087] ? find_held_lock+0x2b/0x80 [ 2081.126699][T11087] ? hook_file_ioctl_common+0x145/0x410 [ 2081.126716][T11087] ? __fget_files+0x20e/0x3c0 [ 2081.126730][T11087] security_file_ioctl_compat+0x9b/0x240 [ 2081.126744][T11087] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2081.126764][T11087] __do_fast_syscall_32+0x7c/0x3a0 [ 2081.126780][T11087] do_fast_syscall_32+0x32/0x80 [ 2081.126794][T11087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2081.126822][T11087] RIP: 0023:0xf706e579 [ 2081.126831][T11087] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2081.126842][T11087] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2081.126853][T11087] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c0a [ 2081.126860][T11087] RDX: 0000000080001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 2081.126866][T11087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2081.126872][T11087] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2081.126878][T11087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2081.126892][T11087] [ 2081.126930][T11087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2081.287047][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10349'. [ 2081.435087][T11102] siw: device registration error -23 [ 2081.466337][T11103] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2083.224768][T12230] usb 14-1: new high-speed USB device number 39 using dummy_hcd [ 2083.400357][T12230] usb 14-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2083.403641][T12230] usb 14-1: config 0 interface 0 has no altsetting 0 [ 2083.407975][T12230] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2083.410865][T12230] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2083.413406][T12230] usb 14-1: Product: syz [ 2083.419108][T12230] usb 14-1: Manufacturer: syz [ 2083.421642][T12230] usb 14-1: SerialNumber: syz [ 2083.427821][T12230] usb 14-1: config 0 descriptor?? [ 2083.431706][T12230] usb 14-1: selecting invalid altsetting 0 [ 2083.521506][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10358'. [ 2083.723273][ T7461] usb 14-1: USB disconnect, device number 39 [ 2084.685563][T11144] netlink: 187476 bytes leftover after parsing attributes in process `syz.8.10364'. [ 2085.440370][T11171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2085.846526][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 2085.846538][ T40] audit: type=1326 audit(2085.726:22365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.3.10370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2085.855165][ T40] audit: type=1326 audit(2085.726:22366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.3.10370" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2085.861923][ T40] audit: type=1326 audit(2085.726:22367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.3.10370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2085.872026][ T40] audit: type=1326 audit(2085.726:22368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.3.10370" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2085.904708][ T40] audit: type=1326 audit(2085.726:22369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.3.10370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2085.932053][ T40] audit: type=1326 audit(2085.726:22370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.3.10370" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2085.940588][ T40] audit: type=1326 audit(2085.726:22371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.3.10370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2085.947656][ T40] audit: type=1326 audit(2085.726:22372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.3.10370" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2085.954378][ T40] audit: type=1326 audit(2085.726:22373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.3.10370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2085.961196][ T40] audit: type=1326 audit(2085.726:22374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.3.10370" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2087.300978][T18669] libceph: connect (1)[c::]:6789 error -101 [ 2087.303648][T18669] libceph: mon0 (1)[c::]:6789 connect error [ 2087.348631][T11205] ceph: No mds server is up or the cluster is laggy [ 2087.935853][T11219] pim6reg: entered allmulticast mode [ 2088.407588][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10383'. [ 2089.187174][T11250] netlink: 'syz.7.10384': attribute type 2 has an invalid length. [ 2089.189741][T11250] netlink: 119 bytes leftover after parsing attributes in process `syz.7.10384'. [ 2089.324600][T12230] usb 14-1: new high-speed USB device number 40 using dummy_hcd [ 2089.494599][T12230] usb 14-1: Using ep0 maxpacket: 8 [ 2089.500047][T12230] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2089.511667][T12230] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2089.519163][T12230] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.537964][T12230] usb 14-1: config 0 descriptor?? [ 2089.762651][T12230] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2090.195129][ T1021] libceph: connect (1)[c::]:6789 error -101 [ 2090.197108][ T1021] libceph: mon0 (1)[c::]:6789 connect error [ 2090.238114][T11262] ceph: No mds server is up or the cluster is laggy [ 2090.949527][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10394'. [ 2090.954904][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10394'. [ 2091.977673][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10401'. [ 2091.980538][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10401'. [ 2092.118316][T23612] usb 14-1: USB disconnect, device number 40 [ 2092.144973][T11305] pim6reg: entered allmulticast mode [ 2092.426055][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10402'. [ 2092.488754][ T1021] libceph: connect (1)[c::]:6789 error -101 [ 2092.490884][ T1021] libceph: mon0 (1)[c::]:6789 connect error [ 2092.536050][T11313] ceph: No mds server is up or the cluster is laggy [ 2092.893839][T11319] block nbd8: Attempted send on invalid socket [ 2092.896667][T11319] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2092.899826][T11319] vxfs: unable to read disk superblock at 1 [ 2092.902053][T11319] block nbd8: Attempted send on invalid socket [ 2092.904088][T11319] I/O error, dev nbd8, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2092.907042][T11319] vxfs: unable to read disk superblock at 8 [ 2092.908883][T11319] vxfs: can't find superblock. [ 2092.917732][T11319] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2093.131731][T11325] FAULT_INJECTION: forcing a failure. [ 2093.131731][T11325] name failslab, interval 1, probability 0, space 0, times 0 [ 2093.135945][T11325] CPU: 2 UID: 0 PID: 11325 Comm: syz.9.10406 Not tainted syzkaller #0 PREEMPT(full) [ 2093.135973][T11325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2093.135980][T11325] Call Trace: [ 2093.135984][T11325] [ 2093.135989][T11325] dump_stack_lvl+0x16c/0x1f0 [ 2093.136006][T11325] should_fail_ex+0x512/0x640 [ 2093.136022][T11325] ? fs_reclaim_acquire+0xae/0x150 [ 2093.136039][T11325] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2093.136054][T11325] should_failslab+0xc2/0x120 [ 2093.136068][T11325] __kmalloc_noprof+0xd2/0x510 [ 2093.136084][T11325] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2093.136100][T11325] ? tomoyo_profile+0x47/0x60 [ 2093.136111][T11325] tomoyo_path_number_perm+0x245/0x580 [ 2093.136122][T11325] ? tomoyo_path_number_perm+0x237/0x580 [ 2093.136136][T11325] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2093.136164][T11325] ? find_held_lock+0x2b/0x80 [ 2093.136174][T11325] ? hook_file_ioctl_common+0x145/0x410 [ 2093.136202][T11325] ? __fget_files+0x20e/0x3c0 [ 2093.136218][T11325] security_file_ioctl_compat+0x9b/0x240 [ 2093.136234][T11325] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2093.136252][T11325] __do_fast_syscall_32+0x7c/0x3a0 [ 2093.136267][T11325] do_fast_syscall_32+0x32/0x80 [ 2093.136282][T11325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2093.136295][T11325] RIP: 0023:0xf702e579 [ 2093.136303][T11325] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2093.136313][T11325] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2093.136325][T11325] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000c01c64a3 [ 2093.136331][T11325] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 2093.136338][T11325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2093.136343][T11325] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2093.136349][T11325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2093.136363][T11325] [ 2093.136484][T11325] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2094.232411][T11338] openvswitch: netlink: Flow key attr not present in new flow. [ 2095.596497][T11366] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10412'. [ 2095.967033][T11354] sg_read: process 1325 (syz.3.10412) changed security contexts after opening file descriptor, this is not allowed. [ 2096.480206][T12230] libceph: connect (1)[c::]:6789 error -101 [ 2096.483521][T12230] libceph: mon0 (1)[c::]:6789 connect error [ 2096.505522][T11372] ceph: No mds server is up or the cluster is laggy [ 2097.242180][T11375] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2097.245223][T11375] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2097.247928][T11375] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2097.250635][T11375] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2097.253233][T11375] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2097.257213][T11375] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2097.504587][T18669] usb 14-1: new full-speed USB device number 41 using dummy_hcd [ 2097.661339][T18669] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2097.857734][T18669] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2098.032277][T12230] usb 13-1: new low-speed USB device number 25 using dummy_hcd [ 2098.215687][T18669] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2098.218531][T18669] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2098.511423][T11406] lo speed is unknown, defaulting to 1000 [ 2098.557480][ T3832] Bluetooth: hci3: command 0x0c1a tx timeout [ 2098.586200][T12230] usb 13-1: config index 0 descriptor too short (expected 1307, got 27) [ 2098.588819][T12230] usb 13-1: config 0 has an invalid interface number: 0 but max is -1 [ 2098.591370][T12230] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2098.594432][T12230] usb 13-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2098.597769][T12230] usb 13-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2098.601200][T12230] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2098.606643][T11413] kAFS: No cell specified [ 2098.611372][T12230] usb 13-1: string descriptor 0 read error: -22 [ 2098.614125][T12230] usb 13-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2098.636191][T12230] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.641398][T12230] usb 13-1: config 0 descriptor?? [ 2098.645218][T12230] hub 13-1:0.0: bad descriptor, ignoring hub [ 2098.647744][T12230] hub 13-1:0.0: probe with driver hub failed with error -5 [ 2098.722994][T18669] usb 14-1: usb_control_msg returned -32 [ 2098.725541][T18669] usbtmc 14-1:16.0: can't read capabilities [ 2099.224816][T12230] usb 13-1: USB disconnect, device number 25 [ 2099.264634][ T3832] Bluetooth: hci0: command 0x0c1a tx timeout [ 2099.264708][ T5982] Bluetooth: hci1: command 0x0405 tx timeout [ 2099.264754][T14050] Bluetooth: hci5: command 0x0405 tx timeout [ 2099.563263][T11426] ISOFS: Unable to identify CD-ROM format. [ 2100.564590][T11439] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2100.933963][T25268] usb 14-1: USB disconnect, device number 41 [ 2101.344624][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 2101.376517][T11447] netlink: 'syz.9.10435': attribute type 2 has an invalid length. [ 2101.379747][T11447] netlink: 119 bytes leftover after parsing attributes in process `syz.9.10435'. [ 2101.917373][T11459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10438'. [ 2102.545976][T25268] libceph: connect (1)[c::]:6789 error -101 [ 2102.548886][T25268] libceph: mon0 (1)[c::]:6789 connect error [ 2102.593046][T11470] ceph: No mds server is up or the cluster is laggy [ 2102.913412][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 2102.913458][ T40] audit: type=1800 audit(2102.786:22383): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10443" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 2103.424547][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 2103.861792][T11497] FAULT_INJECTION: forcing a failure. [ 2103.861792][T11497] name failslab, interval 1, probability 0, space 0, times 0 [ 2103.867511][T11497] CPU: 3 UID: 0 PID: 11497 Comm: syz.8.10446 Not tainted syzkaller #0 PREEMPT(full) [ 2103.867528][T11497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2103.867534][T11497] Call Trace: [ 2103.867539][T11497] [ 2103.867544][T11497] dump_stack_lvl+0x16c/0x1f0 [ 2103.867579][T11497] should_fail_ex+0x512/0x640 [ 2103.867597][T11497] ? __kmalloc_noprof+0xbf/0x510 [ 2103.867610][T11497] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 2103.867628][T11497] should_failslab+0xc2/0x120 [ 2103.867641][T11497] __kmalloc_noprof+0xd2/0x510 [ 2103.867653][T11497] ? __pfx___might_resched+0x10/0x10 [ 2103.867668][T11497] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 2103.867686][T11497] ? __mutex_lock+0x1c5/0x1060 [ 2103.867702][T11497] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 2103.867719][T11497] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2103.867734][T11497] ? __pfx___mutex_lock+0x10/0x10 [ 2103.867747][T11497] ? genl_get_cmd+0x194/0x580 [ 2103.867767][T11497] ? __radix_tree_lookup+0x21f/0x2c0 [ 2103.867782][T11497] genl_rcv_msg+0x55c/0x800 [ 2103.867793][T11497] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2103.867810][T11497] ? __pfx_ctrl_getfamily+0x10/0x10 [ 2103.867825][T11497] netlink_rcv_skb+0x158/0x420 [ 2103.867839][T11497] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2103.867855][T11497] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2103.867876][T11497] ? netlink_deliver_tap+0x1ae/0xd30 [ 2103.867892][T11497] genl_rcv+0x28/0x40 [ 2103.867906][T11497] netlink_unicast+0x5a7/0x870 [ 2103.867922][T11497] ? __pfx_netlink_unicast+0x10/0x10 [ 2103.867936][T11497] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2103.867955][T11497] netlink_sendmsg+0x8d1/0xdd0 [ 2103.867971][T11497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2103.867988][T11497] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2103.868002][T11497] __sys_sendto+0x4a0/0x520 [ 2103.868015][T11497] ? __pfx___sys_sendto+0x10/0x10 [ 2103.868027][T11497] ? __lock_acquire+0xb97/0x1ce0 [ 2103.868056][T11497] __ia32_compat_sys_socketcall+0x625/0x770 [ 2103.868072][T11497] ? __fget_files+0x20e/0x3c0 [ 2103.868083][T11497] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 2103.868099][T11497] ? fput+0x9b/0xd0 [ 2103.868117][T11497] ? rcu_is_watching+0x12/0xc0 [ 2103.868130][T11497] __do_fast_syscall_32+0x7c/0x3a0 [ 2103.868145][T11497] do_fast_syscall_32+0x32/0x80 [ 2103.868160][T11497] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2103.868173][T11497] RIP: 0023:0xf70de579 [ 2103.868181][T11497] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2103.868192][T11497] RSP: 002b:00000000f54cd410 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 2103.868202][T11497] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54cd424 [ 2103.868209][T11497] RDX: 0000000000000000 RSI: 00000000f54cd550 RDI: 00000000f7454ff4 [ 2103.868215][T11497] RBP: 00000000f54cd550 R08: 0000000000000000 R09: 0000000000000000 [ 2103.868221][T11497] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2103.868227][T11497] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2103.868240][T11497] [ 2104.540791][T11504] netlink: 'syz.8.10448': attribute type 2 has an invalid length. [ 2104.544295][T11504] netlink: 119 bytes leftover after parsing attributes in process `syz.8.10448'. [ 2107.223702][T11542] syzkaller0: entered promiscuous mode [ 2107.225564][T11542] syzkaller0: entered allmulticast mode [ 2107.229148][T11542] tipc: Started in network mode [ 2107.230718][T11542] tipc: Node identity 0edfb15b6341, cluster identity 4711 [ 2107.233033][T11542] tipc: Enabled bearer , priority 0 [ 2107.236589][T11542] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2107.249712][T11542] tipc: Resetting bearer [ 2107.253657][T11541] tipc: Resetting bearer [ 2107.281611][T11541] tipc: Disabling bearer [ 2107.296133][T11546] fuse: Unknown parameter 'gVÛÚŠJzâY´7åWupd½00000000000000000000' [ 2107.659293][T11557] netlink: 'syz.8.10463': attribute type 2 has an invalid length. [ 2107.662413][T11557] netlink: 119 bytes leftover after parsing attributes in process `syz.8.10463'. [ 2107.764995][T12496] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 2107.956232][T12496] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2107.961014][T12496] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2107.972856][T12496] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2107.984540][T12496] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2108.004102][T12496] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2108.008542][T12496] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.015474][T12496] usb 12-1: config 0 descriptor?? [ 2108.072760][T11564] syzkaller0: create flow: hash 2266505356 index 1 [ 2108.125295][T11563] syzkaller0: delete flow: hash 2266505356 index 1 [ 2108.465879][T12496] plantronics 0003:047F:FFFF.003C: ignoring exceeding usage max [ 2108.546907][T12496] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2110.478409][T25268] usb 12-1: USB disconnect, device number 23 [ 2111.024652][T12230] usb 14-1: new high-speed USB device number 42 using dummy_hcd [ 2111.203672][T11596] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2112.054655][T12230] usb 14-1: Using ep0 maxpacket: 8 [ 2112.058891][T12230] usb 14-1: config 0 interface 0 has no altsetting 0 [ 2112.060994][T12230] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2112.063969][T12230] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.064539][T27893] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 2112.068583][T12230] usb 14-1: config 0 descriptor?? [ 2112.286456][T27893] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2112.289759][T27893] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2112.292426][T27893] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.304742][T27893] usb 13-1: config 0 descriptor?? [ 2112.488534][T12230] usbhid 14-1:0.0: can't add hid device: -71 [ 2112.490457][T12230] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 2112.504800][T12230] usb 14-1: USB disconnect, device number 42 [ 2112.509586][T27893] usbhid 13-1:0.0: can't add hid device: -71 [ 2112.512348][T27893] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 2112.517370][T27893] usb 13-1: USB disconnect, device number 26 [ 2112.814654][T27893] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 2112.984630][T27893] usb 13-1: Using ep0 maxpacket: 32 [ 2112.988866][T27893] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2112.992963][T27893] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2112.996244][T27893] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.999936][T27893] usb 13-1: config 0 descriptor?? [ 2113.004896][T27893] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2113.010588][T27893] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2113.209486][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2113.214753][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2113.214833][T11637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2113.220041][T11637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2113.230767][ T6003] usb 13-1: USB disconnect, device number 27 [ 2113.234009][ T6003] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 2113.429690][T11641] netlink: 4400 bytes leftover after parsing attributes in process `syz.8.10490'. [ 2114.210668][T12230] libceph: connect (1)[c::]:6789 error -101 [ 2114.213332][T12230] libceph: mon0 (1)[c::]:6789 connect error [ 2114.302647][T11653] ceph: No mds server is up or the cluster is laggy [ 2114.356541][T27893] libceph: connect (1)[c::]:6789 error -101 [ 2114.358746][T27893] libceph: mon0 (1)[c::]:6789 connect error [ 2114.380190][T11664] 9pnet_fd: Insufficient options for proto=fd [ 2114.406002][T11654] ceph: No mds server is up or the cluster is laggy [ 2115.124437][T11681] netlink: 56 bytes leftover after parsing attributes in process `syz.8.10498'. [ 2115.127569][T11681] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10498'. [ 2115.132690][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10498'. [ 2115.434575][ T3832] Bluetooth: hci0: command 0x0c1a tx timeout [ 2115.939648][T11697] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10502'. [ 2116.495954][T12230] libceph: connect (1)[c::]:6789 error -101 [ 2116.497919][T12230] libceph: mon0 (1)[c::]:6789 connect error [ 2116.510180][T11708] ceph: No mds server is up or the cluster is laggy [ 2117.504631][ T3832] Bluetooth: hci0: command 0x0c1a tx timeout [ 2117.505230][T11728] /dev/sr0: Can't open blockdev [ 2117.542572][T11731] netlink: 3 bytes leftover after parsing attributes in process `syz.8.10507'. [ 2117.557786][T11731] batadv1: entered allmulticast mode [ 2117.602926][T11732] input: syz1 as /devices/virtual/input/input96 [ 2118.576310][T11746] input: syz1 as /devices/virtual/input/input97 [ 2119.104573][T27893] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 2119.304710][T27893] usb 12-1: Using ep0 maxpacket: 16 [ 2119.308910][T27893] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2119.313391][T27893] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2119.318740][T27893] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2119.323589][T27893] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2119.334652][T27893] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.343019][T27893] usb 12-1: config 0 descriptor?? [ 2119.778003][T27893] shield 0003:0955:7214.003D: unknown main item tag 0x0 [ 2119.780369][T27893] shield 0003:0955:7214.003D: unknown main item tag 0x0 [ 2119.783743][T27893] shield 0003:0955:7214.003D: unknown main item tag 0x1 [ 2119.786898][T27893] shield 0003:0955:7214.003D: unknown main item tag 0x0 [ 2119.789149][T27893] shield 0003:0955:7214.003D: unknown main item tag 0x0 [ 2119.795612][T27893] input: HID 0955:7214 Haptics as /devices/virtual/input/input98 [ 2119.809552][T27893] shield 0003:0955:7214.003D: Registered Thunderstrike controller [ 2119.812425][T27893] shield 0003:0955:7214.003D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 2119.973855][T11752] random: crng reseeded on system resumption [ 2120.136240][ T1021] shield 0003:0955:7214.003D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2120.139919][ T1021] shield 0003:0955:7214.003D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2120.143714][ T1021] shield 0003:0955:7214.003D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2120.148300][ T1021] shield 0003:0955:7214.003D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2120.155270][T27893] usb 12-1: USB disconnect, device number 24 [ 2120.552941][ T40] audit: type=1326 audit(2120.426:22384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.7.10522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 2120.563058][ T40] audit: type=1326 audit(2120.426:22385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.7.10522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 2120.570410][ T40] audit: type=1326 audit(2120.436:22386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.7.10522" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 2120.588684][ T40] audit: type=1326 audit(2120.436:22387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.7.10522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 2120.604680][ T40] audit: type=1326 audit(2120.436:22388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.7.10522" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 2120.611895][ T40] audit: type=1326 audit(2120.436:22389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.7.10522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 2120.618623][ T40] audit: type=1326 audit(2120.436:22390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.7.10522" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 2120.658428][T11776] lo speed is unknown, defaulting to 1000 [ 2121.004722][ T40] audit: type=1326 audit(2120.836:22391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.7.10522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 2121.011591][ T40] audit: type=1326 audit(2120.836:22392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.7.10522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 2121.105365][T11782] usb usb7: usbfs: interface 0 claimed by hub while 'syz.8.10523' sets config #16 [ 2121.532892][T11801] : renamed from bond_slave_0 [ 2122.078491][T11808] netlink: 'syz.7.10530': attribute type 2 has an invalid length. [ 2122.081110][T11808] netlink: 119 bytes leftover after parsing attributes in process `syz.7.10530'. [ 2122.177361][T12496] libceph: connect (1)[c::]:6789 error -101 [ 2122.179383][T12496] libceph: mon0 (1)[c::]:6789 connect error [ 2122.210386][T11809] ceph: No mds server is up or the cluster is laggy [ 2122.824568][T12496] usb 14-1: new high-speed USB device number 43 using dummy_hcd [ 2122.984588][T12496] usb 14-1: Using ep0 maxpacket: 32 [ 2122.998169][T12496] usb 14-1: config index 0 descriptor too short (expected 29220, got 36) [ 2123.001812][T12496] usb 14-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2123.005334][T12496] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2123.008125][T12496] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2123.011144][T12496] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2123.014194][T12496] usb 14-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2123.018435][T12496] usb 14-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2123.021916][T12496] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2123.025922][T12496] usb 14-1: config 0 descriptor?? [ 2123.243578][T12496] usblp 14-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2123.248777][T12496] usb 14-1: USB disconnect, device number 43 [ 2123.252587][T12496] usblp0: removed [ 2123.694556][T12496] usb 14-1: new high-speed USB device number 44 using dummy_hcd [ 2123.695888][T11833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2123.864680][T12496] usb 14-1: Using ep0 maxpacket: 32 [ 2123.874565][T12496] usb 14-1: config index 0 descriptor too short (expected 29220, got 36) [ 2123.878826][T12496] usb 14-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2123.882617][T12496] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2123.892868][T12496] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2123.934647][ T40] audit: type=1326 audit(2123.776:22393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.8.10537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2123.945403][T12496] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2123.949777][T12496] usb 14-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2124.030088][T12496] usb 14-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2124.053639][T12496] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2124.082375][T12496] usb 14-1: config 0 descriptor?? [ 2124.304379][T12496] usblp 14-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2124.454657][T23612] usb 12-1: new low-speed USB device number 25 using dummy_hcd [ 2124.502227][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10539'. [ 2124.509401][T12230] usb 14-1: USB disconnect, device number 44 [ 2124.514665][T12230] usblp0: removed [ 2124.608874][T23612] usb 12-1: config index 0 descriptor too short (expected 1307, got 27) [ 2124.612204][T23612] usb 12-1: config 0 has an invalid interface number: 0 but max is -1 [ 2124.614949][T23612] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2124.617753][T23612] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2124.621132][T23612] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2124.624304][T23612] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2124.696093][T11849] lo speed is unknown, defaulting to 1000 [ 2125.554523][ T40] kauditd_printk_skb: 135 callbacks suppressed [ 2125.554535][ T40] audit: type=1326 audit(2125.426:22529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.8.10544" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2125.567655][ T40] audit: type=1326 audit(2125.436:22530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.8.10544" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de5a7 code=0x7ffc0000 [ 2125.574306][ T40] audit: type=1326 audit(2125.446:22531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.8.10544" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2125.582900][ T40] audit: type=1326 audit(2125.446:22532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.8.10544" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de5a7 code=0x7ffc0000 [ 2125.594234][ T40] audit: type=1326 audit(2125.466:22533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.8.10544" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2125.603113][ T40] audit: type=1326 audit(2125.466:22534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.8.10544" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de5a7 code=0x7ffc0000 [ 2125.614628][ T40] audit: type=1326 audit(2125.486:22535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.8.10544" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2125.626151][ T40] audit: type=1326 audit(2125.486:22536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.8.10544" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de5a7 code=0x7ffc0000 [ 2125.635755][ T40] audit: type=1326 audit(2125.506:22537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.8.10544" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2125.642661][ T40] audit: type=1326 audit(2125.506:22538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.8.10544" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de5a7 code=0x7ffc0000 [ 2126.690567][T11873] netlink: 'syz.9.10548': attribute type 2 has an invalid length. [ 2126.694240][T11873] netlink: 119 bytes leftover after parsing attributes in process `syz.9.10548'. [ 2127.006093][T11876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2127.243464][T23612] usb 12-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2127.247097][T23612] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.262034][T23612] usb 12-1: config 0 descriptor?? [ 2127.267164][T23612] usb 12-1: can't set config #0, error -71 [ 2127.277707][T23612] usb 12-1: USB disconnect, device number 25 [ 2127.872767][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10554'. [ 2128.107143][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10555'. [ 2128.901498][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10564'. [ 2129.154144][T11937] netlink: 'syz.8.10565': attribute type 2 has an invalid length. [ 2129.157623][T11937] netlink: 119 bytes leftover after parsing attributes in process `syz.8.10565'. [ 2129.467320][T11942] netlink: 'syz.3.10567': attribute type 2 has an invalid length. [ 2129.469788][T11942] netlink: 119 bytes leftover after parsing attributes in process `syz.3.10567'. [ 2129.519450][T11945] random: crng reseeded on system resumption [ 2131.661025][T11980] netlink: 'syz.9.10575': attribute type 2 has an invalid length. [ 2131.663579][T11980] netlink: 119 bytes leftover after parsing attributes in process `syz.9.10575'. [ 2131.813280][T11995] netlink: 'syz.3.10578': attribute type 2 has an invalid length. [ 2131.818061][T11995] netlink: 119 bytes leftover after parsing attributes in process `syz.3.10578'. [ 2133.536829][T12013] input: syz1 as /devices/virtual/input/input99 [ 2134.079513][T12028] netlink: zone id is out of range [ 2134.081563][T12028] netlink: zone id is out of range [ 2134.084013][T12028] netlink: del zone limit has 8 unknown bytes [ 2134.120102][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10587'. [ 2134.503554][T12046] cgroup: Need name or subsystem set [ 2134.626452][T12056] netlink: zone id is out of range [ 2134.628608][T12056] netlink: del zone limit has 8 unknown bytes [ 2134.728398][T12065] netlink: 'syz.9.10591': attribute type 2 has an invalid length. [ 2134.730966][T12065] netlink: 119 bytes leftover after parsing attributes in process `syz.9.10591'. [ 2137.720412][T12113] netlink: 'syz.3.10608': attribute type 2 has an invalid length. [ 2137.723079][T12113] netlink: 119 bytes leftover after parsing attributes in process `syz.3.10608'. [ 2138.138499][T12119] tipc: Enabling of bearer rejected, failed to enable media [ 2138.649453][T12134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2138.683921][T12136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2139.035807][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 2139.036028][ T40] audit: type=1326 audit(2138.866:22625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.10615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2139.132905][ T40] audit: type=1326 audit(2138.866:22626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.10615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2139.140617][ T40] audit: type=1326 audit(2138.886:22627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.10615" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2139.147938][ T40] audit: type=1326 audit(2138.896:22628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.10615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2139.156167][ T40] audit: type=1326 audit(2138.896:22629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.10615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2139.163359][ T40] audit: type=1326 audit(2138.896:22630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.10615" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2139.171086][ T40] audit: type=1326 audit(2138.896:22631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.10615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2139.178074][ T40] audit: type=1326 audit(2138.896:22632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.10615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2139.185255][ T40] audit: type=1326 audit(2138.896:22633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.10615" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2139.193120][ T40] audit: type=1326 audit(2138.896:22634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.10615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 2139.606889][T12153] overlay: Unknown parameter 'uid' [ 2139.625345][T12149] 9pnet_fd: Insufficient options for proto=fd [ 2139.639365][ T6003] libceph: connect (1)[c::]:6789 error -101 [ 2139.641264][ T6003] libceph: mon0 (1)[c::]:6789 connect error [ 2139.683667][T12150] ceph: No mds server is up or the cluster is laggy [ 2139.874844][T12230] usb 14-1: new high-speed USB device number 45 using dummy_hcd [ 2140.024674][T12230] usb 14-1: Using ep0 maxpacket: 16 [ 2140.032530][T12230] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2140.037231][T12230] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2140.041387][T12230] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2140.046883][T12230] usb 14-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2140.054586][T12230] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.060441][T12230] usb 14-1: config 0 descriptor?? [ 2140.470537][T12230] shield 0003:0955:7214.003E: unknown main item tag 0x0 [ 2140.472760][T12230] shield 0003:0955:7214.003E: unknown main item tag 0x0 [ 2140.475315][T12230] shield 0003:0955:7214.003E: unknown main item tag 0x1 [ 2140.477575][T12230] shield 0003:0955:7214.003E: unknown main item tag 0x0 [ 2140.479744][T12230] shield 0003:0955:7214.003E: unknown main item tag 0x0 [ 2140.484890][T12230] input: HID 0955:7214 Haptics as /devices/virtual/input/input100 [ 2140.504680][T12230] shield 0003:0955:7214.003E: Registered Thunderstrike controller [ 2140.507342][T12230] shield 0003:0955:7214.003E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 2140.675202][T12156] random: crng reseeded on system resumption [ 2140.706746][ T53] shield 0003:0955:7214.003E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2140.717618][ T7461] usb 14-1: USB disconnect, device number 45 [ 2140.728941][ T7461] ------------[ cut here ]------------ [ 2140.728984][ T53] shield 0003:0955:7214.003E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2140.730725][ T7461] workqueue: work disable count underflowed [ 2140.730764][ T7461] WARNING: CPU: 2 PID: 7461 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 2140.738420][ T53] shield 0003:0955:7214.003E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2140.738789][ T7461] Modules linked in: [ 2140.743148][ T53] shield 0003:0955:7214.003E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2140.745433][ T7461] CPU: 2 UID: 0 PID: 7461 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 2140.745451][ T7461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2140.745459][ T7461] Workqueue: usb_hub_wq hub_event [ 2140.745482][ T7461] RIP: 0010:enable_work+0x2f8/0x340 [ 2140.745494][ T7461] Code: 89 ee e8 0b 2c 38 00 45 84 ed 0f 85 29 fe ff ff e8 1d 31 38 00 c6 05 06 ff 10 0f 01 90 48 c7 c7 60 01 ac 8b e8 69 27 f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 97 94 9d 00 e9 aa fe ff ff [ 2140.745504][ T7461] RSP: 0000:ffffc900039873c0 EFLAGS: 00010086 [ 2140.745513][ T7461] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a02c8 [ 2140.745520][ T7461] RDX: ffff88801dacc880 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 2140.745527][ T7461] RBP: ffff88806cd2d738 R08: 0000000000000001 R09: 0000000000000000 [ 2140.773659][ T7461] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000730e79 [ 2140.776154][ T7461] R13: 0000000000000000 R14: ffff88806cd2d698 R15: ffff88806cd2d730 [ 2140.778625][ T7461] FS: 0000000000000000(0000) GS:ffff8880976c0000(0000) knlGS:0000000000000000 [ 2140.781418][ T7461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2140.783491][ T7461] CR2: 00000000f7310c70 CR3: 0000000073e0a000 CR4: 0000000000352ef0 [ 2140.785987][ T7461] Call Trace: [ 2140.787063][ T7461] [ 2140.788006][ T7461] ? __pfx_enable_work+0x10/0x10 [ 2140.789568][ T7461] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 2140.791421][ T7461] __cancel_work_sync+0xe7/0x130 [ 2140.792987][ T7461] thermal_zone_device_unregister+0x28e/0x4d0 [ 2140.794942][ T7461] ? __pfx_shield_remove+0x10/0x10 [ 2140.796550][ T7461] power_supply_unregister+0x10a/0x150 [ 2140.798250][ T7461] shield_remove+0x75/0x130 [ 2140.799706][ T7461] ? __pfx_shield_remove+0x10/0x10 [ 2140.801321][ T7461] hid_device_remove+0xd1/0x260 [ 2140.802822][ T7461] ? __pfx_hid_device_remove+0x10/0x10 [ 2140.804465][ T7461] device_remove+0xc8/0x170 [ 2140.805828][ T7461] device_release_driver_internal+0x44b/0x620 [ 2140.807673][ T7461] bus_remove_device+0x22f/0x420 [ 2140.809260][ T7461] device_del+0x396/0x9f0 [ 2140.810674][ T7461] ? __pfx_device_del+0x10/0x10 [ 2140.812209][ T7461] ? do_raw_spin_lock+0x12c/0x2b0 [ 2140.813783][ T7461] hid_destroy_device+0x19c/0x240 [ 2140.815300][ T7461] usbhid_disconnect+0xa0/0xe0 [ 2140.816833][ T7461] usb_unbind_interface+0x1dd/0x9e0 [ 2140.818463][ T7461] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 2140.820244][ T7461] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2140.822019][ T7461] device_remove+0x125/0x170 [ 2140.823497][ T7461] device_release_driver_internal+0x44b/0x620 [ 2140.825403][ T7461] bus_remove_device+0x22f/0x420 [ 2140.826969][ T7461] device_del+0x396/0x9f0 [ 2140.828302][ T7461] ? __pfx_device_del+0x10/0x10 [ 2140.829816][ T7461] ? kobject_put+0x210/0x5a0 [ 2140.831351][ T7461] usb_disable_device+0x355/0x7d0 [ 2140.831375][ T7461] usb_disconnect+0x2e1/0x9c0 [ 2140.831394][ T7461] hub_event+0x1c81/0x4fe0 [ 2140.831420][ T7461] ? __lock_acquire+0xb97/0x1ce0 [ 2140.831436][ T7461] ? __pfx_hub_event+0x10/0x10 [ 2140.839705][ T7461] ? pool_move_batch+0xf0/0x290 [ 2140.839728][ T7461] ? rcu_is_watching+0x12/0xc0 [ 2140.839742][ T7461] process_one_work+0x9cf/0x1b70 [ 2140.839765][ T7461] ? __pfx_process_one_work+0x10/0x10 [ 2140.839785][ T7461] ? assign_work+0x1a0/0x250 [ 2140.839802][ T7461] worker_thread+0x6c8/0xf10 [ 2140.839818][ T7461] ? __pfx_worker_thread+0x10/0x10 [ 2140.839834][ T7461] kthread+0x3c5/0x780 [ 2140.839850][ T7461] ? __pfx_kthread+0x10/0x10 [ 2140.839866][ T7461] ? rcu_is_watching+0x12/0xc0 [ 2140.839877][ T7461] ? __pfx_kthread+0x10/0x10 [ 2140.839892][ T7461] ret_from_fork+0x5d7/0x6f0 [ 2140.839908][ T7461] ? __pfx_kthread+0x10/0x10 [ 2140.839924][ T7461] ret_from_fork_asm+0x1a/0x30 [ 2140.839944][ T7461] [ 2140.839950][ T7461] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2140.839959][ T7461] CPU: 2 UID: 0 PID: 7461 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 2140.839973][ T7461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2140.839981][ T7461] Workqueue: usb_hub_wq hub_event [ 2140.839998][ T7461] Call Trace: [ 2140.840002][ T7461] [ 2140.840006][ T7461] dump_stack_lvl+0x3d/0x1f0 [ 2140.840022][ T7461] vpanic+0x6e8/0x7a0 [ 2140.840038][ T7461] ? __pfx_vpanic+0x10/0x10 [ 2140.840056][ T7461] ? enable_work+0x2f8/0x340 [ 2140.840066][ T7461] panic+0xca/0xd0 [ 2140.840080][ T7461] ? __pfx_panic+0x10/0x10 [ 2140.840099][ T7461] ? check_panic_on_warn+0x1f/0xb0 [ 2140.840115][ T7461] check_panic_on_warn+0xab/0xb0 [ 2140.840130][ T7461] __warn+0xf6/0x3c0 [ 2140.840144][ T7461] ? __pfx_vprintk_emit+0x10/0x10 [ 2140.840156][ T7461] ? enable_work+0x2f8/0x340 [ 2140.840166][ T7461] report_bug+0x3c3/0x580 [ 2140.840179][ T7461] ? enable_work+0x2f8/0x340 [ 2140.840190][ T7461] handle_bug+0x184/0x210 [ 2140.840206][ T7461] exc_invalid_op+0x17/0x50 [ 2140.840221][ T7461] asm_exc_invalid_op+0x1a/0x20 [ 2140.840232][ T7461] RIP: 0010:enable_work+0x2f8/0x340 [ 2140.840242][ T7461] Code: 89 ee e8 0b 2c 38 00 45 84 ed 0f 85 29 fe ff ff e8 1d 31 38 00 c6 05 06 ff 10 0f 01 90 48 c7 c7 60 01 ac 8b e8 69 27 f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 97 94 9d 00 e9 aa fe ff ff [ 2140.840253][ T7461] RSP: 0000:ffffc900039873c0 EFLAGS: 00010086 [ 2140.840262][ T7461] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a02c8 [ 2140.840269][ T7461] RDX: ffff88801dacc880 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 2140.840276][ T7461] RBP: ffff88806cd2d738 R08: 0000000000000001 R09: 0000000000000000 [ 2140.840287][ T7461] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000730e79 [ 2140.840293][ T7461] R13: 0000000000000000 R14: ffff88806cd2d698 R15: ffff88806cd2d730 [ 2140.840303][ T7461] ? __warn_printk+0x198/0x350 [ 2140.840318][ T7461] ? __warn_printk+0x1a5/0x350 [ 2140.840335][ T7461] ? __pfx_enable_work+0x10/0x10 [ 2140.840347][ T7461] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 2140.840366][ T7461] __cancel_work_sync+0xe7/0x130 [ 2140.840378][ T7461] thermal_zone_device_unregister+0x28e/0x4d0 [ 2140.840395][ T7461] ? __pfx_shield_remove+0x10/0x10 [ 2140.840412][ T7461] power_supply_unregister+0x10a/0x150 [ 2140.840428][ T7461] shield_remove+0x75/0x130 [ 2140.840443][ T7461] ? __pfx_shield_remove+0x10/0x10 [ 2140.840457][ T7461] hid_device_remove+0xd1/0x260 [ 2140.840471][ T7461] ? __pfx_hid_device_remove+0x10/0x10 [ 2140.840485][ T7461] device_remove+0xc8/0x170 [ 2140.840499][ T7461] device_release_driver_internal+0x44b/0x620 [ 2140.840518][ T7461] bus_remove_device+0x22f/0x420 [ 2140.840532][ T7461] device_del+0x396/0x9f0 [ 2140.840548][ T7461] ? __pfx_device_del+0x10/0x10 [ 2140.840562][ T7461] ? do_raw_spin_lock+0x12c/0x2b0 [ 2140.840581][ T7461] hid_destroy_device+0x19c/0x240 [ 2140.840596][ T7461] usbhid_disconnect+0xa0/0xe0 [ 2140.840613][ T7461] usb_unbind_interface+0x1dd/0x9e0 [ 2140.840627][ T7461] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 2140.840643][ T7461] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2140.840655][ T7461] device_remove+0x125/0x170 [ 2140.840668][ T7461] device_release_driver_internal+0x44b/0x620 [ 2140.840687][ T7461] bus_remove_device+0x22f/0x420 [ 2140.840701][ T7461] device_del+0x396/0x9f0 [ 2140.840717][ T7461] ? __pfx_device_del+0x10/0x10 [ 2140.840730][ T7461] ? kobject_put+0x210/0x5a0 [ 2140.840748][ T7461] usb_disable_device+0x355/0x7d0 [ 2140.840768][ T7461] usb_disconnect+0x2e1/0x9c0 [ 2140.840786][ T7461] hub_event+0x1c81/0x4fe0 [ 2140.840812][ T7461] ? __lock_acquire+0xb97/0x1ce0 [ 2140.840828][ T7461] ? __pfx_hub_event+0x10/0x10 [ 2140.840843][ T7461] ? pool_move_batch+0xf0/0x290 [ 2140.840859][ T7461] ? rcu_is_watching+0x12/0xc0 [ 2140.840872][ T7461] process_one_work+0x9cf/0x1b70 [ 2140.840893][ T7461] ? __pfx_process_one_work+0x10/0x10 [ 2140.840913][ T7461] ? assign_work+0x1a0/0x250 [ 2140.840930][ T7461] worker_thread+0x6c8/0xf10 [ 2140.840946][ T7461] ? __pfx_worker_thread+0x10/0x10 [ 2140.840962][ T7461] kthread+0x3c5/0x780 [ 2140.840977][ T7461] ? __pfx_kthread+0x10/0x10 [ 2140.840993][ T7461] ? rcu_is_watching+0x12/0xc0 [ 2140.841003][ T7461] ? __pfx_kthread+0x10/0x10 [ 2140.841019][ T7461] ret_from_fork+0x5d7/0x6f0 [ 2140.841034][ T7461] ? __pfx_kthread+0x10/0x10 [ 2140.841052][ T7461] ret_from_fork_asm+0x1a/0x30 [ 2140.841070][ T7461] [ 2140.842884][ T7461] Kernel Offset: disabled VM DIAGNOSIS: 20:22:34 Registers: info registers vcpu 0 CPU#0 RAX=00000000064045bd RBX=0000000000000000 RCX=ffffffff8b90dbf9 RDX=0000000000000000 RSI=ffffffff8de4d2e1 RDI=ffffffff8c162e00 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab8890 R15=0000000000000000 RIP=ffffffff8b90c75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008014d018 CR3=000000005f406000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000080000 RBX=000000008014f180 RCX=ffffc9002c88b000 RDX=0000000000080000 RSI=ffffffff84e0b469 RDI=ffffffff8c162e00 RBP=000000000000001c RSP=ffffc90003ee7a40 R8 =2cfb7b1ab8be5804 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=ffffc90003ee7d58 R13=ffffc90003ee7a90 R14=ffffc90003ee7b50 R15=000000008014f180 RIP=ffffffff8512afb0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008014f018 CR3=000000005f406000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff978ceb88 RBX=00000000000000ad RCX=0000000000000226 RDX=0000000000000144 RSI=0000000000000226 RDI=ffffffff9763ff28 RBP=0000000000000030 RSP=ffffc90003986a50 R8 =ffffffff95dcea60 R9 =000000000000017a R10=ffffc90003986be8 R11=0000000000000000 R12=ffffffff8196e840 R13=ffffc90003986af0 R14=ffffffff8196f350 R15=ffffffff9763ff28 RIP=ffffffff819708fa RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7310c70 CR3=0000000073e0a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000064 RCX=ffffffff819a68c2 RDX=ffff8880202b8000 RSI=ffffffff819a68b0 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000074f8f8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920000e9f21 R13=0000000000000200 R14=ffff88801dacc880 R15=ffffc9000074f9c0 RIP=ffffffff819a68b9 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffb93980 CR3=0000000022537000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73f4ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000