last executing test programs: 11m36.596703152s ago: executing program 1 (id=1223): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x10000001}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1004, 0xfffffffb}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1001}}}, 0x10) (fail_nth: 6) 11m36.455095136s ago: executing program 1 (id=1224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwritev(r0, &(0x7f0000001a00)=[{&(0x7f0000000540)="defc7a72a42b15a2921291e912d3c13e907b867355c8a2fa7774793eb62d55", 0x1f}, {&(0x7f0000000580)="e4bb8e9399c8c4", 0x7}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="279a97091b641455cd9e914fa96847eba2702d3c1590ae9ee423e45640b377c6c06f2f4bfcb9111c794d202288beb76d4c84c153dfde40487d9571de098e977bd2de1cccd85eeba8134354e3609a88", 0x4f}, {0x0}, {&(0x7f0000001740)="fadd7efeb0531ea348704bbc373428fa81af542b873a494b519b0d3fb96ec7d206c1c5cf80481132da536b2b2b5a4e37c1eb00957d1eca616032b6dac4401005acd88664aa21f2b7524107674aa44889f4bd7f3cb6c07a2006a854a7f68357a0b2f523118f6cf36b1799c7002cc3195e524ed13a4f40ab1fe2bd1d626a0f33858020d090b13ddfda3a4fd86a067fb5831b0d90857431de8940735398b2eda16439fc4fb31a0d545577a431db49e7a071f837e75f265b5cda60a40d986444175e8b0d49f8b8e6f589", 0xc8}, {0x0}, {&(0x7f00000018c0)="5544568025924a523d1d4ed9501fae9b66a75657a5c51a2d4c6d56e594c6c7870b7a4a62ed6c1276326f899592a60f3b391e304910c76df27c5dde23c8c116c44421eeaae6148db36a0efa9ceada51243b85627ab359ccbb78be27ddfe90d414eaa020a986dd83c708f33e20e406ed8d3cc1a89d8b63b31f287695114d5d0bb3615f69822a", 0x85}, {&(0x7f0000001980)="f707b5f4340501e2212d618369763cfe1a83cbd1c9738b7c2d0cf56bfaceae968bece2abcbd006f14daf8964a2da06a66bc63c84d5cd1186a944d427731b5887e201eca2a814bdd3e287f3dfe1e50378af54e2b35e867ef1dd45ab4248a9", 0x5e}], 0x9, 0x7, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) rseq(0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x2, 0x3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xffffffff, 0x400, 0x0, 0x2000}, &(0x7f0000000080), &(0x7f0000000280)) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185648, &(0x7f0000000080)={0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f905, 0x8002, '\x00', @p_u16=0x0}}) 11m36.076623287s ago: executing program 1 (id=1228): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x5c, 0x0, 0x8, 0xffffffff, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x8ca}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x100}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x4}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setitimer(0x0, &(0x7f0000000040)={{}, {0x0, 0x7cea2d5a}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$btrfs_control(0xffffff9c, &(0x7f0000000100), 0x20000, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = memfd_create(&(0x7f00000002c0)='system.skckpr\x02\x13otonam', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x4000051, r4, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440), 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r5, 0x6, 0x2}, 0xc) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x1}) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x3, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x4, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}], 0x40) ioctl$TCXONC(r1, 0x540b, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) r10 = getpid() sched_setaffinity(r10, 0x8, &(0x7f00000000c0)=0x9) lstat(&(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000940)) capset(&(0x7f0000000000)={0x355c078a}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x400}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000000)=0x60) getgid() ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000c80)={0x0, 0x3ff, {}, {0xee00}, 0x9, 0x80800}) 11m36.01687144s ago: executing program 1 (id=1230): r0 = openat$audio1(0xffffff9c, 0x0, 0x2041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x5, 0x1, 0x20000013, 0x2}, {0x5, 0x5, 0x8, 0x9}], 0x10, 0x37, @void, @value}, 0xffffffffffffff26) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async, rerun: 32) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) (rerun: 64) syz_fuse_handle_req(r2, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, &(0x7f0000000400)={0x18, 0x0, 0x0, {0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ppoll(&(0x7f0000000280)=[{r4}], 0x1, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) setresuid(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) (async) connect$pptp(r8, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) 11m32.867311589s ago: executing program 1 (id=1260): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) unshare(0x62040200) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x2b, 0x0, @fd_index=0x3}) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r9, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r8, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000000001010400000000f7177ca3244833000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c0001801400000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000"/155], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x475}}, './file0\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11m32.587781924s ago: executing program 1 (id=1265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwritev(r0, &(0x7f0000001a00)=[{&(0x7f0000000540)="defc7a72a42b15a2921291e912d3c13e907b867355c8a2fa7774793eb62d55", 0x1f}, {&(0x7f0000000580)="e4bb8e9399c8c4", 0x7}, {&(0x7f00000006c0)="47d44192893f79fb3e97bd2f90d4ec563888ae5265f6994ad64a1eda0788103cadc73300f7c45c40ad3ee3c9b506c1ec1a6d899d661b5b643927d4c32e4a9c2f560b9e3abc0bbed06956b841555d90bc2af082ac5b0b2f317e0e24573c0c92063747cc20d54cd31d019cd6059fb7572e44b1eff611cbf2894336e68eebd7618bb85df1645f9b2320da3c4775ee9d1e47889bffb5e53e96fca184564898e1c768459741ffe5de602bcf3e669252ab42cf65b3205439aeadf863484a2bc3fe4307d1c98acf1e7b382d7f21a95403dfd9e40c778f50cc1a481f4cfd1f869146f668940f9268a0e5daf324b92f7379da9e0b1dcc887c61bfa36aa12a4bedcc21877cc6fe3ab6761d28b247382cf48dece33440dd5a0beb4d647c137d55a4341629d02a5a2e8ee88ee357a4c4b0982799f81d655d27037083e96cfa9058df252a62ef009b14ba14420321cfb8d6f7c444d278cffc8545abccf9e0ffbd4e296677f68ddf2a91cfc279eddefa2325604f070998270fa09d96dc7fb0ffcc327170ecbf424163be3c98b439dfc5464bdfc02fd7eb9d68d5f1b242437c59145d9f3f7196aec2bbd84a17314362680514e38ffb9199e9c36bcabe614513c7068886ce2df95012888399fe58b2bc21545744b5947ad4d23423c98d096c06d312f1a765033f2abd7754bec8b685bd350f71e067ffe8b060cc6b168ceeb10fd5b092a23634ad15ff75610bdfa77c3860e2b047bff0064c90932a0b0140c5c2c1cc9cb022b2d2206ad8994e499a15da266dd6dbc21fe34579337a0c8a63008882ba6643aab8820bf0269bb87ef7f73e359c8acf549e69191d5516a1c2f9fd92b469819a8deec4194d118e0e8524c83878bdecdffe52ce2f168d7df6c65bc4c42918fe2ce96043b6605a109862f21d2cefe396e87831d8d9afca002558f41872069a09792a5c5f2df63ca392fd7113acd21156b2fdcf2dc09e456734564762c1718d5c51ef2201c9e0b5e34016917f46b09d0c283e265c3d01017e9565f0e2f5f307e2431b171f3332c4998364b02a47431b88e045844bc7c6bd2d3afd5fb227418c580ac22e672e48a1cb50f4ed19814e3b42e54d780413c920c99ab98d9fdf81aa0d744503f8d7161a6349863a6e44e46a21a08ffb97de98f929656891ba62d846f36821b98777540b9b1bf265572541b12ddf1e49c4a0d779a2fd7722619869808a56f1dc1b2f17570c8cbfeaac45cae15e0f87702305f7a81c7a5beaa1dbb5cd6221f52723f88a441b6684a9b26888dab025c5e17da813885d801b4c5f17bc47c3bc13db20d875c48415685b15e82bdc91cdbefdd52f297c824e5ef7511269213bbc2af45d0ceb2f142aad44255de496eeac58f9ba29d880537a1d95427e13e20f7d14fd689da1c03e17499ecfa73c3ee7a273f203bd9c07b54bc6a82d835ca1bbc751db320d839f08456b40c21b2c556fe70554c850f1b36b8ab23a01e188d6c2111246c8169b4cbac8f36c49c133d8efc308c0d7ca0c3ae4f152f3414157d51286a4cf265556edb8f11bee4ef07249265b670a6ae744c022280aa4742cd5d3536313cc5ec415388582a4f45bc27b19c74a47f828abc342620dcd84ad6d12679180c15a918dde90f6651571c4c7498ba92540d96d9c2b0551a6ca85323522ef1d5bde48ec6dcfaf40dc77138a94b44717175b7cf43e2e8c66460f66edca51ac761ebc82172340b88a0773262fcad05600390ef824739a6925da8671084f76e3c3d70c9cb01b84e818b56c3ac23161aacb87aeecd71868a1e6960b6211d54245b812ffd21ff9fa3f9ab3bcd9540094b254b8977e9bd052ead35f8cce0233a888a65f09071da806d5f4811c3181b17e95ff00376f84ca1819e21fb8d5623dc8161b0adb28f3098fa5bd49a27c3b845ddfb5570aef96ec128427b551ce15907cca54e98acf38b289101117162325c36818b9a1dc18df27e4dfd33f0f44d3dc6d898d0d4d3fcf3ec6268be9483bc991d83308207c5939298707f65ff7cfd39c0e3cf4cbdec850c1a8c721430b21aa73e64fce3ca5a2e8c4e771adb8fed8abf4153f9e09f376ac0b953a182531bbabb8abafbcfe8fdf880ecb5d32e6f11402e5983277f56132f1aeb8b5d0aa8439da9029260888b88944c4a4e2693402cc527f782466de62cfc44dddedb74ef1214b3cb1d3137610d40249757c8df9aa0eecbe21d06e7eadf48b8700671581a3b22be7ca9735ff58c430f5295a4f11175eaf94948e1213fea00c258b56302cbe887d9e7cb0b88ffcdee68f1144f083f1cf00972618a707333dfd198b1bc993f613ea42e6ecb1593d52202a66f49ac3511704ae9a2a29cbe8a52e7b749ea7c7ab590507b55c4c96cd250adb79aa17dedc897d2167eabaacefa2ae8f163ff8124e46c045e635985bd549b09482caf02be8804e80473ab3e2080366fefd6cf351ac599a270ddc89e5011c216f4ef848e5aadf28be1f3c307e58216c669fc1c34757b6dc4b714157b7cfcece1db4095c9a2fb66efc7f4682e6d0a5f71373e4bee0478c6007c6903cc15a570ef2d94334c6b5dfec9ce928f2d0f927f7430200840020dad8bc1421097d77d16825f025429bf3ab01a1ca8d6e429b09e0b5de4210bc4cd98f113e5f15c100d6b975c771ec3c8ecf5ebfe434c3b8611cd7e1cfacf8ad5d46cf95497ad13e86cf0d50045f7a5662f84793cb8d4bbb605afa26ff5a76b6f4d2c98343992b613b6c6f469457be609d0d96ce1dd16627bec12f9a8136f3b95a180eda011c42c59c868fc0143ef54ae063d73c0f3a1e222a0efc39a594e2074e0e44b79800db8ffae82b4bddd0ac0296803607b09ae9d725d15be895dae29021747000f1285dacd7914af36d9521bb172b53ea88650c367f1f9077e5d54d68bcda2a544c4e832889b869df85209cbdb9f3807546649930370763a42df16865826197974ca52782af8136c3a034e7761522bf70ef8b176baf687f20dbc1d0c7d4cd3c2ac8d31627cce0cd8497477612899f590836a53d7891c42396627fc0de5eda0c0f93f7abd38d64664d5d5da5a2bb4a04f065b8f87e3311560db719e01d098edf122a008ca480915024814f6c8e14a4675d1155ac2a024792fa9cc5837de81aab137fd6606206a55041de71bae5895baf34f3a8247502999f1bdcded2eb5dcaa5bd28c1945b744a38622e3f57331e53bcdee2c2ccc4352963a0e98597585c9b87eb63fd31b6fd30acd492adb8bf199f96d7ebacd44d4f8521613366a76f01d7713a1f20c0e28030b41242d50035e90b5a718fff318c2befb7664c79724917541a8e52d04a9a4c5976b19c75d71345aa1fb7d47c237fa31be8d585637c3f2df16e30b24743e6397e853429385b007d43cabc714bb9e7cdc3f440695527bd9fe9a61f98736698cf9fb7fcd9964675bd4a76f53885c8a4fb84a7684ee25ec57d940718126f36704f9b374733f9b5d3c90a30a9a0984227ad61462e66910cb968a4b6a6bd2617ad00bcbc5a6c8902114d46d99048428ec27fde8620edd61f172b58f0f9aec4e7aa4410e9a47a563434e4a55e704a747df5b66f7138bda4f54c05e8d6ff770d240730a46ff8f7a8e63465f369a5bcca25ef782cca2d0b866713d7277997f42d7270d3df46369f29b188d3d81381743d43ebf07c6959a724dc4f432dc2f3726b8f2c75573b9537f87c08c94d5cca293ca7706ba7410c8b7e05f888b5ab11df3129fb11ed0f566aa61f936a80dbf795bf7dc206c9f56a0976a118daa898160bf473439f36a379610613e1b0205fec8431a39ea03243e4ee42fcc8d655e1c29b5f0777263148479c355973e83c04f6a429dae6d8cfbc130804c08aa00635f87cb6c00e077ae5dd75dca39558c1aded4bfb9fa87123531fda2c6760ec59566c88f3161b26e52be47d9379da622f4956b2a7421abb9b1da1be5a743ec2c3b78871d618fe860693f2882a320af16c45e7552438274fc39f0cbd7a25cf4f1106e97c1c2c2b95c96da99fc56bf06e865c6d4018a3740a73fa221471150e5278953c430999b73629de9799ff57fba2000ba4b63e2fc455d8f7241acf50d8a45138c0c75af3a4a0187cd4ba433e1f971e8d96bdb47f7880334e43bd1215206adcbafb1856a1fdf3badc374009ac8a23351a27163c819f33579deff2d44f2a35cbaeb2bccfcceff817e4e05ac6564172f60cb53fbfdfaa930e06cdab18748664566db73de70f14645e03e54b64043ece6ac2a644369d8dd2fbbb4f339d9a427ffee14560b1946e4829202db620a225aa624f8ff2509811a0cd4d7ac6db58f76e69485bc5e81792b6f3e2519b742e3e48f26d5721b4fec55fcd35fa8394e39aafa812020e6cd138e30c1e0c95bf8c721629a14f2b0bdeab091be95b80bfdd96485e800a3127c2e784f418757949a6f9b4b1e9e0b0c0fe4f27a7619c3c8f4b5de378ff83b2db466069c5d1eecc0104b6cb0df7f58aec4a6bd06b46875b2156154711b582c32f255257c769ee6c6e9ae8f97e5d2f395b41927a5c14835b1d59f0b8e6298c93a668f6f76eecd5e76fdc18789195d7ef643f38973a246f5f5fbfdef71d07ece768baf098a3657173caacdf07404e0276bbaa15dd5ac90c5cec7ddee76681cd9bb8793dc476751d55467e4b62dfea6577035034a18b0e0e6fb2e8797a8c25eaeff9c7be43e915eaaf1f4e4033735fec84a0cef0617206eb555cfece447eebea0ee1c3053f45abaad6272a3b5c5c955efead15435b372bf839fd2078cb6d9529424227049135ff66eefa9a3fc692b433b274427e82a296d6cfed8769bc6b395bb6c9bf8556bb9ae9c66f9a3dca295f55a7ea02952409d18f69f2d053c7d2f67311b718df343e14e64cc711c59ca37ff69b66a42fc652e97d5f817ded618ebba139d21378bc58f4ae82b319fbf0c38adfcbc26bbecfee9207a43847816ab0515d32e208e050130edeb39d7e57fd84b4c5a166e13a24e6e6228489eb17bcc13b665918b99dd0ba9209160977a013018e980a1d58ad94626568f1a471b4161192a73544f2484c856b68d5c6f45b6f874265a9cea45acd49b6c00324a6b397a02a9dd494b4334e6558524f599bcd3907253021ab6f9501fa95df48716aaa393da2f50f921c5d6c7c64e119db22cbdb1bfc8879db54c7d2deafc64147f108a80eed7a1bca06f97165f4314bfe2bd05b2ac35a0fb48e1f538bb51e7ea90a49e5dd2c6ec17822e6a14215674ff564e77c6921227ff06321fa1d9a95a5295d5a241caeb01d5e4e2924dec763c6057a319e4b6f6c6237223b1f1ef4313dce10fc74f0463dbb1122d583a0dd5f08a9ee138e61a5dc4a7c4ed94b979b6a000ab2c669b30777f5c6b939018dd553911e72e4961af175c19bab33fae43eed2770f92f873d8d213e73134f1b80374dd7cebde945abe9810b747c8a8270f5cac894a5eb79777429cd64bf3cfe33bb2a8baf04adf3e5a3a1587ea9928d1871b53fcc388233bbd5c1e89be9330b7618ea26c6bccc8a24a319f860c7bde87b8bd39401559d570006ec82419a97b1e7c85fe69088247c08fb721aeaba686c78504a8e4acc704e4714d13cd2bace65fe368c45a9e466a67b3b2a1bd7bc7e1dcd3b4f646f6e305412936465a6f4f457fa84888f3f6924ecd84f602560dcd1ccbab597514e6e379dd8a7253521bd79f6ba08bba0d70cda26d345ee27bda646de552f4651d9fdb6e585d5b793625c8218607de73112cf4e69e8a9a2de9af57f8beb0b34d40e0cd47351bb2a48d413678bef93c1a1406be9f3111d59e3a931e33dae87dc", 0x1000}, {&(0x7f00000016c0)="279a97091b641455cd9e914fa96847eba2702d3c1590ae9ee423e45640b377c6c06f2f4bfcb9111c794d202288beb76d4c84c153dfde40487d9571de098e977bd2de1cccd85eeba8134354e3609a88", 0x4f}, {0x0}, {&(0x7f0000001740)="fadd7efeb0531ea348704bbc373428fa81af542b873a494b519b0d3fb96ec7d206c1c5cf80481132da536b2b2b5a4e37c1eb00957d1eca616032b6dac4401005acd88664aa21f2b7524107674aa44889f4bd7f3cb6c07a2006a854a7f68357a0b2f523118f6cf36b1799c7002cc3195e524ed13a4f40ab1fe2bd1d626a0f33858020d090b13ddfda3a4fd86a067fb5831b0d90857431de8940735398b2eda16439fc4fb31a0d545577a431db49e7a071f837e75f265b5cda60a40d986444175e8b0d49f8b8e6f589", 0xc8}, {0x0}, {&(0x7f00000018c0)="5544568025924a523d1d4ed9501fae9b66a75657a5c51a2d4c6d56e594c6c7870b7a4a62ed6c1276326f899592a60f3b391e304910c76df27c5dde23c8c116c44421eeaae6148db36a0efa9ceada51243b85627ab359ccbb78be27ddfe90d414eaa020a986dd83c708f33e20e406ed8d3cc1a89d8b63b31f287695114d5d0bb3615f69822a", 0x85}, {&(0x7f0000001980)="f707b5f4340501e2212d618369763cfe1a83cbd1c9738b7c2d0cf56bfaceae968bece2abcbd006f14daf8964a2da06a66bc63c84d5cd1186a944d427731b5887e201eca2a814bdd3e287f3dfe1e50378af54e2b35e867ef1dd45ab4248a9", 0x5e}], 0x9, 0x7, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x2, 0x3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xffffffff, 0x400, 0x0, 0x2000}, &(0x7f0000000080), &(0x7f0000000280)) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185648, &(0x7f0000000080)={0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f905, 0x8002, '\x00', @p_u16=0x0}}) 11m32.536515434s ago: executing program 32 (id=1265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwritev(r0, &(0x7f0000001a00)=[{&(0x7f0000000540)="defc7a72a42b15a2921291e912d3c13e907b867355c8a2fa7774793eb62d55", 0x1f}, {&(0x7f0000000580)="e4bb8e9399c8c4", 0x7}, {&(0x7f00000006c0)="47d44192893f79fb3e97bd2f90d4ec563888ae5265f6994ad64a1eda0788103cadc73300f7c45c40ad3ee3c9b506c1ec1a6d899d661b5b643927d4c32e4a9c2f560b9e3abc0bbed06956b841555d90bc2af082ac5b0b2f317e0e24573c0c92063747cc20d54cd31d019cd6059fb7572e44b1eff611cbf2894336e68eebd7618bb85df1645f9b2320da3c4775ee9d1e47889bffb5e53e96fca184564898e1c768459741ffe5de602bcf3e669252ab42cf65b3205439aeadf863484a2bc3fe4307d1c98acf1e7b382d7f21a95403dfd9e40c778f50cc1a481f4cfd1f869146f668940f9268a0e5daf324b92f7379da9e0b1dcc887c61bfa36aa12a4bedcc21877cc6fe3ab6761d28b247382cf48dece33440dd5a0beb4d647c137d55a4341629d02a5a2e8ee88ee357a4c4b0982799f81d655d27037083e96cfa9058df252a62ef009b14ba14420321cfb8d6f7c444d278cffc8545abccf9e0ffbd4e296677f68ddf2a91cfc279eddefa2325604f070998270fa09d96dc7fb0ffcc327170ecbf424163be3c98b439dfc5464bdfc02fd7eb9d68d5f1b242437c59145d9f3f7196aec2bbd84a17314362680514e38ffb9199e9c36bcabe614513c7068886ce2df95012888399fe58b2bc21545744b5947ad4d23423c98d096c06d312f1a765033f2abd7754bec8b685bd350f71e067ffe8b060cc6b168ceeb10fd5b092a23634ad15ff75610bdfa77c3860e2b047bff0064c90932a0b0140c5c2c1cc9cb022b2d2206ad8994e499a15da266dd6dbc21fe34579337a0c8a63008882ba6643aab8820bf0269bb87ef7f73e359c8acf549e69191d5516a1c2f9fd92b469819a8deec4194d118e0e8524c83878bdecdffe52ce2f168d7df6c65bc4c42918fe2ce96043b6605a109862f21d2cefe396e87831d8d9afca002558f41872069a09792a5c5f2df63ca392fd7113acd21156b2fdcf2dc09e456734564762c1718d5c51ef2201c9e0b5e34016917f46b09d0c283e265c3d01017e9565f0e2f5f307e2431b171f3332c4998364b02a47431b88e045844bc7c6bd2d3afd5fb227418c580ac22e672e48a1cb50f4ed19814e3b42e54d780413c920c99ab98d9fdf81aa0d744503f8d7161a6349863a6e44e46a21a08ffb97de98f929656891ba62d846f36821b98777540b9b1bf265572541b12ddf1e49c4a0d779a2fd7722619869808a56f1dc1b2f17570c8cbfeaac45cae15e0f87702305f7a81c7a5beaa1dbb5cd6221f52723f88a441b6684a9b26888dab025c5e17da813885d801b4c5f17bc47c3bc13db20d875c48415685b15e82bdc91cdbefdd52f297c824e5ef7511269213bbc2af45d0ceb2f142aad44255de496eeac58f9ba29d880537a1d95427e13e20f7d14fd689da1c03e17499ecfa73c3ee7a273f203bd9c07b54bc6a82d835ca1bbc751db320d839f08456b40c21b2c556fe70554c850f1b36b8ab23a01e188d6c2111246c8169b4cbac8f36c49c133d8efc308c0d7ca0c3ae4f152f3414157d51286a4cf265556edb8f11bee4ef07249265b670a6ae744c022280aa4742cd5d3536313cc5ec415388582a4f45bc27b19c74a47f828abc342620dcd84ad6d12679180c15a918dde90f6651571c4c7498ba92540d96d9c2b0551a6ca85323522ef1d5bde48ec6dcfaf40dc77138a94b44717175b7cf43e2e8c66460f66edca51ac761ebc82172340b88a0773262fcad05600390ef824739a6925da8671084f76e3c3d70c9cb01b84e818b56c3ac23161aacb87aeecd71868a1e6960b6211d54245b812ffd21ff9fa3f9ab3bcd9540094b254b8977e9bd052ead35f8cce0233a888a65f09071da806d5f4811c3181b17e95ff00376f84ca1819e21fb8d5623dc8161b0adb28f3098fa5bd49a27c3b845ddfb5570aef96ec128427b551ce15907cca54e98acf38b289101117162325c36818b9a1dc18df27e4dfd33f0f44d3dc6d898d0d4d3fcf3ec6268be9483bc991d83308207c5939298707f65ff7cfd39c0e3cf4cbdec850c1a8c721430b21aa73e64fce3ca5a2e8c4e771adb8fed8abf4153f9e09f376ac0b953a182531bbabb8abafbcfe8fdf880ecb5d32e6f11402e5983277f56132f1aeb8b5d0aa8439da9029260888b88944c4a4e2693402cc527f782466de62cfc44dddedb74ef1214b3cb1d3137610d40249757c8df9aa0eecbe21d06e7eadf48b8700671581a3b22be7ca9735ff58c430f5295a4f11175eaf94948e1213fea00c258b56302cbe887d9e7cb0b88ffcdee68f1144f083f1cf00972618a707333dfd198b1bc993f613ea42e6ecb1593d52202a66f49ac3511704ae9a2a29cbe8a52e7b749ea7c7ab590507b55c4c96cd250adb79aa17dedc897d2167eabaacefa2ae8f163ff8124e46c045e635985bd549b09482caf02be8804e80473ab3e2080366fefd6cf351ac599a270ddc89e5011c216f4ef848e5aadf28be1f3c307e58216c669fc1c34757b6dc4b714157b7cfcece1db4095c9a2fb66efc7f4682e6d0a5f71373e4bee0478c6007c6903cc15a570ef2d94334c6b5dfec9ce928f2d0f927f7430200840020dad8bc1421097d77d16825f025429bf3ab01a1ca8d6e429b09e0b5de4210bc4cd98f113e5f15c100d6b975c771ec3c8ecf5ebfe434c3b8611cd7e1cfacf8ad5d46cf95497ad13e86cf0d50045f7a5662f84793cb8d4bbb605afa26ff5a76b6f4d2c98343992b613b6c6f469457be609d0d96ce1dd16627bec12f9a8136f3b95a180eda011c42c59c868fc0143ef54ae063d73c0f3a1e222a0efc39a594e2074e0e44b79800db8ffae82b4bddd0ac0296803607b09ae9d725d15be895dae29021747000f1285dacd7914af36d9521bb172b53ea88650c367f1f9077e5d54d68bcda2a544c4e832889b869df85209cbdb9f3807546649930370763a42df16865826197974ca52782af8136c3a034e7761522bf70ef8b176baf687f20dbc1d0c7d4cd3c2ac8d31627cce0cd8497477612899f590836a53d7891c42396627fc0de5eda0c0f93f7abd38d64664d5d5da5a2bb4a04f065b8f87e3311560db719e01d098edf122a008ca480915024814f6c8e14a4675d1155ac2a024792fa9cc5837de81aab137fd6606206a55041de71bae5895baf34f3a8247502999f1bdcded2eb5dcaa5bd28c1945b744a38622e3f57331e53bcdee2c2ccc4352963a0e98597585c9b87eb63fd31b6fd30acd492adb8bf199f96d7ebacd44d4f8521613366a76f01d7713a1f20c0e28030b41242d50035e90b5a718fff318c2befb7664c79724917541a8e52d04a9a4c5976b19c75d71345aa1fb7d47c237fa31be8d585637c3f2df16e30b24743e6397e853429385b007d43cabc714bb9e7cdc3f440695527bd9fe9a61f98736698cf9fb7fcd9964675bd4a76f53885c8a4fb84a7684ee25ec57d940718126f36704f9b374733f9b5d3c90a30a9a0984227ad61462e66910cb968a4b6a6bd2617ad00bcbc5a6c8902114d46d99048428ec27fde8620edd61f172b58f0f9aec4e7aa4410e9a47a563434e4a55e704a747df5b66f7138bda4f54c05e8d6ff770d240730a46ff8f7a8e63465f369a5bcca25ef782cca2d0b866713d7277997f42d7270d3df46369f29b188d3d81381743d43ebf07c6959a724dc4f432dc2f3726b8f2c75573b9537f87c08c94d5cca293ca7706ba7410c8b7e05f888b5ab11df3129fb11ed0f566aa61f936a80dbf795bf7dc206c9f56a0976a118daa898160bf473439f36a379610613e1b0205fec8431a39ea03243e4ee42fcc8d655e1c29b5f0777263148479c355973e83c04f6a429dae6d8cfbc130804c08aa00635f87cb6c00e077ae5dd75dca39558c1aded4bfb9fa87123531fda2c6760ec59566c88f3161b26e52be47d9379da622f4956b2a7421abb9b1da1be5a743ec2c3b78871d618fe860693f2882a320af16c45e7552438274fc39f0cbd7a25cf4f1106e97c1c2c2b95c96da99fc56bf06e865c6d4018a3740a73fa221471150e5278953c430999b73629de9799ff57fba2000ba4b63e2fc455d8f7241acf50d8a45138c0c75af3a4a0187cd4ba433e1f971e8d96bdb47f7880334e43bd1215206adcbafb1856a1fdf3badc374009ac8a23351a27163c819f33579deff2d44f2a35cbaeb2bccfcceff817e4e05ac6564172f60cb53fbfdfaa930e06cdab18748664566db73de70f14645e03e54b64043ece6ac2a644369d8dd2fbbb4f339d9a427ffee14560b1946e4829202db620a225aa624f8ff2509811a0cd4d7ac6db58f76e69485bc5e81792b6f3e2519b742e3e48f26d5721b4fec55fcd35fa8394e39aafa812020e6cd138e30c1e0c95bf8c721629a14f2b0bdeab091be95b80bfdd96485e800a3127c2e784f418757949a6f9b4b1e9e0b0c0fe4f27a7619c3c8f4b5de378ff83b2db466069c5d1eecc0104b6cb0df7f58aec4a6bd06b46875b2156154711b582c32f255257c769ee6c6e9ae8f97e5d2f395b41927a5c14835b1d59f0b8e6298c93a668f6f76eecd5e76fdc18789195d7ef643f38973a246f5f5fbfdef71d07ece768baf098a3657173caacdf07404e0276bbaa15dd5ac90c5cec7ddee76681cd9bb8793dc476751d55467e4b62dfea6577035034a18b0e0e6fb2e8797a8c25eaeff9c7be43e915eaaf1f4e4033735fec84a0cef0617206eb555cfece447eebea0ee1c3053f45abaad6272a3b5c5c955efead15435b372bf839fd2078cb6d9529424227049135ff66eefa9a3fc692b433b274427e82a296d6cfed8769bc6b395bb6c9bf8556bb9ae9c66f9a3dca295f55a7ea02952409d18f69f2d053c7d2f67311b718df343e14e64cc711c59ca37ff69b66a42fc652e97d5f817ded618ebba139d21378bc58f4ae82b319fbf0c38adfcbc26bbecfee9207a43847816ab0515d32e208e050130edeb39d7e57fd84b4c5a166e13a24e6e6228489eb17bcc13b665918b99dd0ba9209160977a013018e980a1d58ad94626568f1a471b4161192a73544f2484c856b68d5c6f45b6f874265a9cea45acd49b6c00324a6b397a02a9dd494b4334e6558524f599bcd3907253021ab6f9501fa95df48716aaa393da2f50f921c5d6c7c64e119db22cbdb1bfc8879db54c7d2deafc64147f108a80eed7a1bca06f97165f4314bfe2bd05b2ac35a0fb48e1f538bb51e7ea90a49e5dd2c6ec17822e6a14215674ff564e77c6921227ff06321fa1d9a95a5295d5a241caeb01d5e4e2924dec763c6057a319e4b6f6c6237223b1f1ef4313dce10fc74f0463dbb1122d583a0dd5f08a9ee138e61a5dc4a7c4ed94b979b6a000ab2c669b30777f5c6b939018dd553911e72e4961af175c19bab33fae43eed2770f92f873d8d213e73134f1b80374dd7cebde945abe9810b747c8a8270f5cac894a5eb79777429cd64bf3cfe33bb2a8baf04adf3e5a3a1587ea9928d1871b53fcc388233bbd5c1e89be9330b7618ea26c6bccc8a24a319f860c7bde87b8bd39401559d570006ec82419a97b1e7c85fe69088247c08fb721aeaba686c78504a8e4acc704e4714d13cd2bace65fe368c45a9e466a67b3b2a1bd7bc7e1dcd3b4f646f6e305412936465a6f4f457fa84888f3f6924ecd84f602560dcd1ccbab597514e6e379dd8a7253521bd79f6ba08bba0d70cda26d345ee27bda646de552f4651d9fdb6e585d5b793625c8218607de73112cf4e69e8a9a2de9af57f8beb0b34d40e0cd47351bb2a48d413678bef93c1a1406be9f3111d59e3a931e33dae87dc", 0x1000}, {&(0x7f00000016c0)="279a97091b641455cd9e914fa96847eba2702d3c1590ae9ee423e45640b377c6c06f2f4bfcb9111c794d202288beb76d4c84c153dfde40487d9571de098e977bd2de1cccd85eeba8134354e3609a88", 0x4f}, {0x0}, {&(0x7f0000001740)="fadd7efeb0531ea348704bbc373428fa81af542b873a494b519b0d3fb96ec7d206c1c5cf80481132da536b2b2b5a4e37c1eb00957d1eca616032b6dac4401005acd88664aa21f2b7524107674aa44889f4bd7f3cb6c07a2006a854a7f68357a0b2f523118f6cf36b1799c7002cc3195e524ed13a4f40ab1fe2bd1d626a0f33858020d090b13ddfda3a4fd86a067fb5831b0d90857431de8940735398b2eda16439fc4fb31a0d545577a431db49e7a071f837e75f265b5cda60a40d986444175e8b0d49f8b8e6f589", 0xc8}, {0x0}, {&(0x7f00000018c0)="5544568025924a523d1d4ed9501fae9b66a75657a5c51a2d4c6d56e594c6c7870b7a4a62ed6c1276326f899592a60f3b391e304910c76df27c5dde23c8c116c44421eeaae6148db36a0efa9ceada51243b85627ab359ccbb78be27ddfe90d414eaa020a986dd83c708f33e20e406ed8d3cc1a89d8b63b31f287695114d5d0bb3615f69822a", 0x85}, {&(0x7f0000001980)="f707b5f4340501e2212d618369763cfe1a83cbd1c9738b7c2d0cf56bfaceae968bece2abcbd006f14daf8964a2da06a66bc63c84d5cd1186a944d427731b5887e201eca2a814bdd3e287f3dfe1e50378af54e2b35e867ef1dd45ab4248a9", 0x5e}], 0x9, 0x7, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x2, 0x3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xffffffff, 0x400, 0x0, 0x2000}, &(0x7f0000000080), &(0x7f0000000280)) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185648, &(0x7f0000000080)={0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f905, 0x8002, '\x00', @p_u16=0x0}}) 2m44.25207311s ago: executing program 4 (id=5098): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0004040000001c0001800600060088a80000100004"], 0x34}}, 0x0) 2m44.251784296s ago: executing program 4 (id=5099): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = io_uring_setup(0x74cb, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000000001, &(0x7f00000002c0), 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000600), 0x2) ioctl$BTRFS_IOC_START_SYNC(r3, 0x541b, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000000)='builtin_trusted\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) 2m43.34290788s ago: executing program 4 (id=5104): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000020000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="000500004ec6"}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) r9 = epoll_create1(0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r10, 0x4028700f, &(0x7f0000000140)={0x3, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60, 0x10000000, 0x0, 0x1}}) r11 = dup3(r10, r9, 0x0) read$FUSE(r11, &(0x7f0000001e40)={0x2020}, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001c00)=[{0x0}], 0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 2m42.592637966s ago: executing program 4 (id=5108): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x900, 0x1}}}, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x804) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x3eb1, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x0, 0x27b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 2m41.732619444s ago: executing program 4 (id=5113): unshare(0x42040200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2010092, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') lsetxattr(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000000)={0xc4}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x42, 0x4, 0x3bc, 0xffffffff, 0xb0, 0x234, 0x234, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x3127, 0x70, 0xb0, 0x1ba, {0x46010000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed00000000000000009b0000040500"}}}, {{@uncond, 0x287, 0x160, 0x184, 0x0, {0x0, 0x4}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@loopback, [], @ipv6=@empty, [], @ipv4=@remote, [], @ipv6=@private1}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x94, 0xf4, 0x0, {}, [@common=@inet=@set1={{0x24}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x418) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="4a00ffff0000", 0x6}]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2910a000, 0x0, 0x37, 0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "db6e1dd70cc9d0698f2e6f338f280bb18e3bc613"}, 0x15, 0x3) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000080)={0x3, r6, 0x7d9, 0x9, 0xb, 0x1, 0x5a9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 2m40.772219967s ago: executing program 4 (id=5117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0, 0xffffffff}, 0x10) 2m25.711941503s ago: executing program 33 (id=5117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0, 0xffffffff}, 0x10) 4.931862102s ago: executing program 3 (id=6174): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x20680a, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = getpid() syz_pidfd_open(r0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000480)=ANY=[@ANYBLOB="04000000000000000d0000000000000002000000100000006e020000f7ff0000ff0100000000000000000000000000000a000000a71c0000060000000700000006000000941c000000000000000000000000000000000b00000002000000060000000600000001000000040000009f5c4912d3c73e7759"]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) 3.284532514s ago: executing program 0 (id=6187): signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x10001, 0x20000]}, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfeff200d, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x2, 0x47f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x20, 0x3d, 0x93, 0x8, 0x1eda, 0x2210, 0x6355, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46d, 0x4, 0x7, 0x6, 0x80, 0x81, [{{0x9, 0x4, 0x20, 0x3, 0xb, 0x87, 0xb9, 0x2e, 0x0, [], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x1a, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x6, 0x3, 0xe8}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x6, 0x8, 0xa5, [@generic={0x86, 0x2, "7f595164c1c246446d29b89ac9d0e1dc280f0bab682add5fff1111c04540747094c0f78ac5492f609eb2238e2b18184d94a5079d967cdda69ecf2269c1adab6529cb65978872b27852e0825de5e0c8e7759e19aea210e644bc2bef235e7b4470c0bdfe88e40a20505a27f171f58836bfa1489038f55c7f4fef4846cd7d4da76f103447d7"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xfbf}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0xad, 0x5a, 0x3b, [@generic={0x50, 0x6, "38ccc7daf4a0acc7b8471b8303c8677740e2185f5b4753fdb2e6b170288eb9ad6e62afd916d4659fbce93029a374f36a78c143fab47b93e586555a02225bad7f265137939240e724fdbe8756dbc8"}]}}, {{0x9, 0x5, 0x9, 0xa, 0x3ff, 0x40, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x4, 0x7}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x7, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0xd36}]}}, {{0x9, 0x5, 0x5, 0x0, 0x38f, 0x3, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x200}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x1, 0x40, 0x2}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x53, 0xa, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x5}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0xf4, 0x5, 0xd8}}]}}, {{0x9, 0x4, 0x5b, 0xbc, 0x4, 0x9e, 0x75, 0xce, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0xc6}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0x3, 0x4, [0xa, 0x7, 0x8, 0x3], 0x72}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x5, "c9096b"}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x1}]}], [{{0x9, 0x5, 0xa, 0x8, 0x10, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x5}, @generic={0xd7, 0x21, "60f296b4a4fcc7bb346b25fafc21b3bfd5cdda32c863cd693909f0b220bebd24a10781a6d91a5abb24021c956bc77b58542f597665550b4ddfde097eeecbac9f7108f34fee2b52e803b2a9ab21e321f4476e6f42f350ef692ab3edae465b176a74546765baa9822bc10ee18ebe7e1b5f1e3c0cac033ab317c37641f6adf38ae29a80dcf629e8463e223c0ab0a1783878bf034450fde56dee8bea0864295e5c2ee4c4c5210978ed9ba2781090b9401911d23ae3ce5b1a9d2fa423cda88fd09912440f274fe81ade96d46f2e58ab308df994397440d6"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0xff, 0x67, 0x5, [@generic={0x35, 0x9, "3899f7b0eb99cd8b82d7841d9a5a04a3b1ffca502cd4064ef395a4c66f438a60fa8a3d690deb94261007ce7a05c5bf78d41994"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x1, 0x1, 0x9, [@generic={0xe, 0x23, "c427f6439490bb630dbf5a17"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2c, 0x3}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xfb, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x2, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x4e, 0xe5f3}]}}]}}, {{0x9, 0x4, 0x76, 0x4, 0x3, 0x52, 0x26, 0x5f, 0x8, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "9160ecfbe1"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7f, 0xffff, 0xfa}, [@acm={0x4, 0x24, 0x2, 0x7}, @mdlm_detail={0x83, 0x24, 0x13, 0x6, "bbb308d40e027cda9a067fdd9e9cb23aed9852bcdcc916187f30c22f27e95af27f684bfd4b782a436144f0f2b9772bea6cd9e5750dc41817da6b3fe8a19c866e50afbc74ece19a8ca48a72333d6f2fd37499b0ed35205d096fd340d94b25198df8398c821e412a7f12f97ce912d60f3b49505dc6f15e628fa4c341851aaabc"}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x30}, @network_terminal={0x7, 0x24, 0xa, 0x40, 0x3, 0x0, 0x3}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '+'}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xff, 0x6, 0x25}, {0x6, 0x24, 0x1a, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0x40, 0x10, 0x40, 0x1}]}], [{{0x9, 0x5, 0x1, 0x4, 0x8, 0x6, 0x5, 0x6, [@generic={0x2, 0x7}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x1, 0x10, 0x4, [@generic={0x30, 0xd, "88f4e07d891f47bc34dca62fb7148ac315d28d00557970c398a8182c58cf6240309c18fa8123fa76edc8aff0fe98"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x0, 0x4, 0x5, 0x80}}]}}, {{0x9, 0x4, 0x84, 0x8, 0x2, 0x7b, 0xff, 0xa5, 0x0, [], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0xb, 0x7f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x975e}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x18, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xf9c}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc8, 0x10}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x7, 0x62, 0x5, 0x8, 0x5}, 0x5, &(0x7f0000000880)={0x5, 0xf, 0x5}, 0x1, [{0x6f, &(0x7f0000000180)=@string={0x6f, 0x3, "561caa925dca52013ab254fe6ff30c6cd3ac1964dbbded900455915e9c4be44bd10aae506ff0105a044d721e40c60b7ed43c49a7af482fc2c7b25e7afc92d2e04b2e2073599a44854971124b1896d89cb3e785689901000000000000000000ff868679d1bbb7f22a2fb72d3689"}}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0xc048aeca, &(0x7f0000000080)=ANY=[@ANYRES16=r3]) 2.946571755s ago: executing program 5 (id=6191): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x1, &(0x7f0000000800)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.946311712s ago: executing program 5 (id=6192): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = io_uring_setup(0x74cb, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000000001, &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x1], &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x0, 0x2, 0x9, 0x5}, {0x1, 0x2, 0xf, 0x7}], 0x10, 0xfffffffb, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000600), 0x2) ioctl$BTRFS_IOC_START_SYNC(r3, 0x541b, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000000)='builtin_trusted\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) 2.230507564s ago: executing program 2 (id=6196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) fsopen(&(0x7f0000000040)='bdev\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x209d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4000) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x1) close(r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setpriority(0x2, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x3000000) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="140000002700133300000000000000"], 0x14}], 0x1}, 0x0) 1.955471095s ago: executing program 5 (id=6197): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x2, @local, 'wg2\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (fail_nth: 80) 1.949539911s ago: executing program 0 (id=6198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) listen(r1, 0xc) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="86903cc38ee3397bdfdcfbb720200cb1548574fc58de0c7a699342b7b9eff943290a4e0ae45c3c1d07f69f39bf4145be0a23888576a40432eaf3e8d1d60227ef1c7583b2a027f9b978c4799238d5d2c205e6281d85b9911530e8ebcbc45f6633045bb57caa7b779c7b3412e0f79e1f75e6a1593a49a67dfb1d4ae41525a3e1ab3e7f86613a8e83", 0x87}, {&(0x7f0000000340)="4b182bfe7bd137da080b34d9317dde19f60bca36ed2a1189369e1d42af7f378868438ad169e42a46e5eed6904515e2c02f756ab8463530efef538164d8b5f8bb207220c422ef36dc6c5b53b8e456559083cff18162848dbc9a711d852dbef64aefbe2aa40e5b7563ee30a93b640181274fe5b91043185032615fa7f3a809841d08f7910084", 0x85}, {&(0x7f0000000040)="b704f5282c4c605c6ef4a9b9ddc071afbd3fe0b0beb1f44f5e6a9c08796a6e03d3283532ed4cf13c", 0x28}, {&(0x7f0000000400)="69e87e4371009ffc88e0d73b9ef9ffe934e7f6c2ab0dadd0ccc8382030675118dc65c1b8fe85d4742c6f516542f7b05132e68d29279dfab87dcc7d854d59881bc32432972f61821a111c7b22ab1bf8796aae293fe80d607bf76810833468c20d73e5ae051504a9", 0x67}], 0x4) (async) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000130005030000000000000000270034080000000000000000000000000000000000000000000000000000000000000000000000004a1815d8e13e099ba2b81584637e"], 0x6c}}, 0x0) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd090030000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120088a8"], 0xfdef) 1.868050486s ago: executing program 3 (id=6199): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = io_uring_setup(0x74cb, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000000001, &(0x7f00000002c0), 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x1], &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x0, 0x2, 0x9, 0x5}, {0x1, 0x2, 0xf, 0x7}], 0x10, 0xfffffffb, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000600), 0x2) ioctl$BTRFS_IOC_START_SYNC(r4, 0x541b, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) keyctl$setperm(0x5, r5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000000)='builtin_trusted\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) 1.867838705s ago: executing program 5 (id=6200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@dccp={{0x10, 0x4, 0x3, 0x33, 0x50, 0x68, 0x300, 0xf8, 0x21, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x17, [@dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010100, @remote]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x0, [@local, @empty]}]}}, {{0x4e24, 0x4e21, 0x4, 0x1, 0x8, 0x0, 0x0, 0x7, 0x5, "57ca06", 0xf, "80cd37"}}}}, 0x5e) 1.7529467s ago: executing program 0 (id=6201): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x2, 0x0, 0x12) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000040)='fd/4\x00') fcntl$setstatus(r8, 0x4, 0xfa3bc5f6db25437e) syz_fuse_handle_req(r8, &(0x7f00000005c0)="b16fc5a22a1bad83bb41ef022e0d96dd5b5e26b4403e3310bfc50c58074bd7d8928df19ff1f9209b3a1cc183011e5eace11bae1ce277a35ec47a1b137340720b72a20c43daa7ef20a98a62c247b8078f71fc7cc4577e374343d5c23efe37e1efc6d3e09dd992591e4e07f32cee73079d90e18dfd7dc3cec82b92df2e6b42032d094f8377248ca54815385f763a2ca5e3310edd37d6129e6eb47187b7d839ad1c11499633ab0e730aab71077b81fe3242b3209925034910b916463f3137bd97042a3813b2201b9eac316c56e3457e0867d9e6601bcd8f0cc12e6a3aed8b2f6bbddf2701ec6ff9dfe91bf7e7564d937f59af4a0a0214cbfe85133adb0cb239efd43fa1cd70e66f89d6088458911743c8bc4114316ce623fc0f25d23828cd29f6ff8586d5067f11d85b8f42d7a4b157e72936b03001875e6a52f2f74af474c975b14f67492ec6ec05c7cc1239781fa36eace172391aa20e292e20c899a2b9c39526c5a74cf3723d6ee0f294e8b417470190c901375359eeb32eb74f73cca084988d286642c9f28367c962493d46cef29f6d3560169036c5e5ac2402378e9d2ec23feda256fb08e98db83e3f170e74bb3ba5ca50c1b23dab222437df3d044c1588728f390f9456f1eb3255aed6507a53b5cb38d0c1a181b3cbce23c8faf7dff4ae57da3d1d4cc413db53c216ce0bc4c512eef400abdb84f8e0e9f6a24495d00cbc0278861050e64b502ffaa20ba5864854ee43d0c322a28de604c9a8920932b5b0e31718c067c1d1d4a01bf50caeb4fed5a27c2f3f55670cd83577d10e13d6e3d28ae293367e917e02cab5b436e44a10469caa0ce7240e885d7e99b50a85504aea1f1ca61564364f92e56f0fcac8b050a0f084eb5c8d31a64d2ea5ffedf0ffef20941dbba1294d7a8aee4a78d375eaff307aa9d773254096e22b437e5cb18641fd111041a3f13826e58f3786c57e47a5bd343b6966ad7a3f2dd08e017e164555ab0279abed9b4497c9702b2a0b2b7854b219541c368d5724ba16c535dc42937e80be1abc48e62d26fbe106833e342484d8df65b775f45f628290c54acda64572e223378a3457eaf7028b5bfe1dc594034e6f2211ac1499f70466753ad443621d4d7e275682e33e413918711f8cd8883b1c8aca78348ef7cd93030b55e298de20bbb4ca7e1caf4f46f6f32c5f275ba7563c82d4ed954a499003150491c1e81d3ae4863e777ccd94985f6503f14721c919062b344e13fb88335fb7b7a83798f1a65025765af1db9f0a02dd707da39f47e71857444dbc2888b7cc7de6956c473f60b080e2f3053911465daf3e7cf67c54f4eede844a5c450062540657d1297f42dccb82db885cd9ebe81f1f6576b6965d46e67404b1ff4789f8c680c09ff7acaf11e2db8097e62911beee1d60037bab3432ecb51f314d7eab13d320e43e12db63e6c4c581bcb37dddec1bc1d0dc5841628017ac73f83d72020c1c3a6b98036adb1d75dda832a50206842a5a154c8b4f9618e9864fe9f70397090f5de06b176bcc3693f6c8e8c5f9a2d3215619d961a75df00fafb5765aa1a72f30ed9671f4f8686358b409e53e7c9699c0feb81036473071282856019a1f5b7a9c280e96fb7ad679fc1e44f5b5d4cd5dd47aadc457ec97c649cc55b6af59e8774079ae7e917a821a71fbea7bcc4ea68a8182311c7ab75885fd5a8cc91714c26ec5f664480146c63f140a8599af93959247c4152299d9cfe3cc506e38168e7f3916c51e5266b5857eda042fa5db4cc114e711f89314e2abe08b8bb2f3bc27c0f3e9319bbcb402ed3144fcf7c22386a591a20ba7a9bd5981211b002ee76a2dbc0abcaac34ef29e970d83915761938109cb7c476576c37bbe8e36cafadfbffc27c19bef8ff18e1ece17d7034397cf252a93ea16e11ea03bf0a515f8ae3ddc245b2463e6a0e780a71a3f13463ae9cd4499aabb8bebb43689fbb6d37ac5b5fad7739a0035388d5399647ef04f7ed9e5d86095930e489a6e83b5f304c7977983aca26060dfd0905d350d537b134b7265ff9fde6a6dd8d6da38d0bf9d46e97fc616dfaaa08613f20598f13d0b3bd20997abac22d4c8e8ac69cb60cd6b4958989537c6f44aff6d4dbb8b801f0842aa6013b59881168742c2f2ae9c9ed51f51eccd63038e91cea665db53425b616e7eb82dcd6d1da227ae923909f6db10c946540824e8fa97fadcd028ff364ca3f7888bc15516dc2a212079e550e57e82874357a81d7acf4c3de65c22738da069b661e008d0bb15defbf30b9dc250baccf63590167a39feb3ce55f3fa0322b46a97b562baba1077e633c3f929e32831ec873f775bcf50b5e42623ee1e12a671947cad6bb7005b9df51581c3dde9b24d043f3876dd7de170f274795f063bb948eaccaf5c72257fc3b67ab93238bb251c033189a5130d2fd0cb00decdcf429c2874a62b27fc5cb09fa858964a3a360a1a65623d6c28f226494be25ee32640445cecaf3e0e6d63959a6ff8c4c43a5251c9ec5ef95ab9fb2cd9fbc505d33c75c90e9abf9b1e3b74ed8510c3eb211c33d840b5ee3896ccf03b3214076fb0d900480ae69662f6e79db730bfac1c76aaf8e2039d122f9f19408f2da14874872f6bcec082b12c1ea3693161e145d0fa3ecd54192c1caa1d07c8c4a5467ab8a80d8af495b7c4b95916bc0bdb095a77124d7b253db5997f1f8f77c4cd21a982b597c1f1abc344e8d3f9659bcdfc499de76adda0dd3b8f5b6d67dec1f78d850710e1ab00895147d7089c0710cc87d3931a9af7e0cf4198098c81ce4ae3a9576139d952fa39633d1a56eaacb7ea5bb7b51557caf86fa33a5b25fe6ff6b0d5e1e6e9e39fb4fa6ae43b23448987ba57937dcd67db3348238329c2bb0fc4f57a408921f948a5cddd38d15e5958d99746d49be00c0d346654833f61341a1e8e0b24b6f0b90e70e47b88f7cf4279120ffafdb3d97b39cdb3543e2ff82dad92022f2cfad7012b17eb4648724254b2c1a5b4e30b6736cc09a4e0d49dfa81a6f8c33087aaac4e8128b587abd4d7ea74e666cdf50cf2b10465055efe18c17effb6a2d6e62ba01283c8c8343e244074a653eeef422268067d3f7332069b90f07435e80be2a6bf5af77e0a949c70643e23f3a0f38090a5d23266cd8087d8ed82d506c49adcc78d1ebdab4a67f6fbc346924630176c508a1d0184e7c0a2b576263b619c117fa5d327fd3c8deb50a513265a0decc656a4c3d395edb839a35b18a125f97a2ed0f2840820241d15d3df9be73ad27b6f3372c1dc1f64a8fe66dee56c8829a59824a26a22a835a80c80ab3cbde4bac6e7a26ef026c329d646b9f420c269c25df259e1d919c096b963924d9c5bc34802faf4f0342a53f5044a3fa22b3e808bbd6abab748dcffdaa3637bf2d86e6f2c08861ba9c7df26c1dea3bf41a1c826a7fb6d3ca5e6f2f90e4b9bc1f4ff5f352f754ff25dd698f48766db63dd3e8003d3f53764ca51d3d53ec1255f243efa22d5162ddbdde58daf10aa273eb9772d02c83a1aab299e2fc7c71d9239e1eea98eb1101f12ee140943fa61e4e6158b3b0b5f68d99a22e84b0ead472ca875afdcc2095ee6ae660fb1c8db771c46be0df2e8529b71ce66866ed41f3f0010abf720b1f2814ec1eb8d7be8f065b61e5f606a311e7bd2d16d4c14d758c8e619bdc8912373845c4d3af9351b17d9e268a6aaacb4958fa7cd8c528fdabd93ba81dd38aa4a2319f1702648b54d09ba3d8c5408ab20b9c2428316ea7cd020d23c1b9efc841817d191069ac45511652f27a3dc27f38dfd372d3c0b62d6500b3d679b8f831adb36a1f92116201fc0ac638acab922adf2375fa14aca5e02b0e0cdae4da631f142a987d843cb011ddc791e95c35aa6e5f2e6069ed7882b66b5649855fc16a4ec1469952f269ddaa295cc261baafb5fee603187f74ab20098d20c2f9f08278a318ef94fabfb0228668b82e04ec739662312aa14408c6ec1072fd26f138cabfc30e688451c027339b9d5a29fc6d8fe2ecd26768c5d154f094a2733575cb1e2a5f3b06135e8235c8a4e98bf196a9c90e404f3c08503012061f771a80329887bcc04b9a05ce64c915fe77c93f736159a7e5ea4c452eae3f42f69d96b1e8d1d283c427e9b28f5b545f20ae1791e391a000a85adbdb0f63370bc6c8aba72afd3df9a0cad53e5da9c2d3225ff2651f75bbc51ecdc3929fbdafa30e1b57a10f5d76715e5f5f43153927ff4b2f8b52a0c5179e4b17d001442908ba800f780dd9a889bc81612fb6c21479e675228940858979ddecb940fd7d2d50d90d3b1e168e710aa5b941dd5807a54214bf51f38e7937c47a78e048331b3754cd5fea44da74073063489f928d8f01e72fb7018dafaadcd04d8fef820a2f045a1a30181f234d9a8c7a8bc7f37959f4b29594c4588173e723c1db052183acf0a0ba899fbe0ebc1e04c6ca70d51a7336a11d22ad2e8c54ae7956db45654122a4cd3ff3407bb9308e20dba3050251213d5716f185a3f213cec7d936e61fa6dfa620259ca63a95f38f7e3922ef9321afd302da6d784639dda567d8b4ea23cfbb266eebc0de392e1d3d494669b10f62a992223b07dea6fb79d4adf12359eb737b5697dfcc4d2cbf146aa4dfefdc94e911adc54e0b96627a88177b08f56144a29a92da975b85d65fba4e71bb8b9023508f8e8f62c5080146c33a132574ecc7d77cb44b324fbd5ece73539ad38ea378c5c757f776ab278c3e26a9a19ec276fffc7af7849d8b0d5b030f6c472f1ec688e50c98e1f4438cea70edfd507b508ed062ee0524cc22b5874272065fc6eacaaa2c336d13371331bdc2fb3fb466f7e52229234a12b1901fd42fc52f5e4c5533d9c70149e868dd5d6a6826c0710dbe1a6dd822862debc964bb19cd31e927043cf96e29156ed50f2897c14fcc8dce786ee7e351c1e92241780878d2556238245eefe224843c6d639a1dac9f66d53f30a6062e00e8d518c89e808fdd4c6872291d1c7adedfa5c87de3df1040c47b4d3abba7a45c58b99c16b74d8d67b6111bc3da9f924c5d660cf74deae5c5760390895f32b31e3f319d7e2ca900a439ab7174d43fed10a4a39651cb000f938ae1e5fb5eb4cceed0027786232555d6b06632ffe22db210e4ee09b0045dd08c793a23e85fc3f6025d61ef2f51a368f1e89309cd3de6e8082019d41e1644007a3670d8a7230dc553983a7321680c31ca2b92fcf68a72a12b1a69c9b31dcf7efca56cee3bd74df8db5b641870ec70b802b33afcc5a183b7cce52bc2b011f63f00e103c43c35c0a66ed9cff864cd3743ef5483484f5d895b19f2df0bcf70046d175bac3d8d89901296f1c43faddf535e2ac042783442f7376b57ffd69e6c90a45ea5259f5848b3fc110ef5427ea879d29fcf0d9e2ccded57776f3317145cf11b32df8ec5f5e7aa5ac8ab4936db207bf8131ebc6d5188b1dc55306a396c152822e5523adedb6047ab33b8746fe37e7a247a486ad1b29047c66ab42e1e1de89dad7d41b96b943484c854eb8c398f8664181efe24c5c41bb0538491c036f730a86693050e17e68505639c535259917ce4c754151a0f8c2ff8c51d4b1ed59aad9632eb7bca6563f686eda8bfa7e4d70e10cedb43d48bb4b4cc5a81bd4fa7a56b6d6ea5532e8b8ba60461bcf1b14e883764684550a7ee8ed65204138200e33a2290227393bb8b3d6176bc953cb46f2b939fd98c75a7f1715750a15c7f6a919d18478a1eabcdf092a21b29bd9943b93b59865dd637cc39dc41a6dd018fd4046b0679c9af1d9d760d14a14f196081749f1cd5d3609507a324e5d9ceef0518acc0f8dd1b6ee84dfd0357b6b2b53a5922d7fca4f57f4dc463ebe7db267ae970f243c28ecaf8e595959d6a34a42f244034d55b7605638e5d8d3633d6d115baf883776a7c298e229eae14f6cece82b62f3e53a0315ca04e7682ec166216084ff9b424a18c8842460b156e30ece7a52fc294f8bff37cf341aeca5791b897d296b967f934eead481577bceb78aacea7f3ac7ef948c45f47485cfbb9728e1c91d6d5df64dc37eeaec6394f118cabb5ac4df5225b36645a5e1690b215b012a1c6ff06778ceb029c8ef963d3d8cf402c0cb097eb8e0dc05a3d499893921669e80ed95bf3db3198873eea0bf87facf815a6d18848c1925a591e3265dcd3867fcb41f87c50f4a389fd3f1cd2853cb4f860c0a344b68c244707dba16082300a9f121ab500f79f6890f39a94dd2cac9fd3fc25702bffaacda51e89f683c2637ab1bc03524b5491c666a8d4e2445364d08e9f7c5ef1d3b3f3629f384a8fe036c6d3240eecef8b437bc326bedb1d41e333c1a5de8cafed229ed5f6d0bd17cda5a607579bc34dd08d866d70ceacad330eec5a0d836ec038fe5d4d0d9b7cdb3bc89bdc2f50682aa3afa1bf675455604380ced61a7ff430674c59939bf3c8c5b57f1a51c900cb238fcff1794fc6188bf4b8acadcb516ee3dd759db9edd0538518889519d1d94c584d46eb7c75ad6bd52439a68826e9c017d42b3f99ede7e6c88adec1a10b97b7b4b27b51c4ddecd9cd934e5a3314f7f66797e4847d0672d71e53ec8d6654e03b44d1ded3ae55a3a991f3245b244cab5e7e4c4115c6773b66dea97e537cd57bf97486f61497543c277c80e704b9cb2c84d6da7177a9d74ddc9569394eaf7d94950bb2cc810ec18786379347ed89885e581fb787f8713264834f0939be6a4c8f5f7ef3afb159ceec6642a527ea4a367bdc08132bf39bd0ff1c39e366d5bd6fc87bf247a37a86db203a2ae032976a5ee58fa67e43e10e5fb5dad85c69f2e4de5a79a85518d8d1e5d20ede23f65bf1f6f8c3502c4fc36e6c9174d2d396613470521ad6ed12643b01f3481060913363c1c585cb51861b3ac3ce0a578ea6c7b32a0dbf9f8ca0631e48a41135ea078a875d599cea1fe8dfbc12f48d9bd34360fbfa13fe6de482f710fc0fd6aae7132ca963058816d2efaf2ddbaf4c4d34198e433315f742497de9ad0551376f4e46666923b704424629507da58691f4401756cffbc398d5cb7dfb64d8e41061c22e31af6020d94b87e70388ea72e80877add6ff944d5f4faf2018ec1bd731afeb990daa8fbcab4f29c154dfe3c56028a61fe9965d88b720a9e992ac60b3437f9eb3f56539ceba5fa63b0609cf15b01a51a705cb693bc51af9fa1707bd3ac32ccb902b98b35b0a56daf3eecfa292e9cc83d9fdb38dca3693ddb2bd342d193ea7d1bfe06ec7ef1243c53a5f71d67ece83e8fc6d62c439e0296b0345829f193e4de85d7ce2332e3e16dbd643ff121179d6a4f4694388187d1caa01621f823b7072447ff12c5d68f7dbe3824cd4f15f84ef338c2d0e82bf6dc56dbe5c24cb37746086daa1b52cf33ddb7d7917c784ec29b24e1ff771f0eb7bb6bd97fe3e6a8f443542aa4a6bc7e22b30ca5ffb01d7bff2744e5f94869fab75bb1a5b85692c8404eb3cc2d2139af2bbab90b4f6801772a5eb1e4f15e326893132454e58a91c0b31f11fbac9b4b2d26f9192119379fa4d48bcb8ed537309ceca7d1c2749d781455d53524f209e19b14b8c92e26b596c3089cc5689fa782802da0e069c4dbdbc18e59ee46e24242f69d259cfd14e8e334953221eb76d502743d169f73fc13aa200a9aeb68056bc4843d06e7d5c01a53879f18aa7db325b4cacd6933fb4a829d110ef9dcd00e6603c4b78a96c7d6fdea0f71e4408a5b4717e683fe4ee47bd4ed8496fe57066fffed4187acf5b78f91fe2c59f03074e8ddbb2dc92ca7be097606ba61203c9c89754db9dc58b9f8d541122e81b2788b3a6447fc6400fb3c170f701ae5ae9877b08f79c17b2489ab979610868c14904cb1615399234f5197a51fbd14ee1e43174a8499a2acb776b95bc0e3fae0f8208668ab5785bb83b1f9d866c5e1aaf1adaea8cc393e30a42541fb0244a794dc4f1294ec4db7900eabcabce8720add0656564247a24c34203df5b7c21731c419baece0471bce69a7c33628daf4176b8e1d6141c971ee19387a50d498040522b0b55cc4bcff81d6eca588453cedffb96cd1ad373e5b646f3a1872e745abccadd7377cab4742a62ef465c29b19cf7ef9efff3f9148c5090bc052f4db993cd96cd48e1edd9b428b431e5d290fb9839211387508420c0f9f0f37e90bfefa971d58cb708230c1f6d58aa7f8d01acd64ca35a5fa779dff3bd77a2338200966246869d9e75b4898ba709dd2ff6f6de44a88cd95813b6703308776db27e2141e6d80b012ff438f6a92515d1790f59d4268d83d3422c52d252a7938c828b0a9f6e1c508efd6a6f612c6f099e24ade988ecb85f647a97d34cd9b7871491afa33be5f9d698eeb47b575b03660587522804882ca51d51467882c7542c882c9dc6dc77ec9a2361cf39872665d95eafbefed4cac5adb57d4a865a658133a9f1acc3ddcfff59c7fd47054b9be880550a4dd4dc30639259c1d1abfee3de0cccbf279ab7e4d64b01bda761493bd0320aa344e0785ba4674583d9389a2207f922bf31d43624023aabcb5282df6d6dc084232348e9b0ca517349c7fe93386ad5f216ecfcd04dcd6ae763056beb5e6bed6c907b4f5f6ebba67c1df565a35da411c92898f016c11a478fe096a182231f9b31e9a31581bd8cea0ecae89b8dc236ea917106636b070ea8bb6c05c2a75218f7934043fbf1911c773a16786366fd44214228ee274a915589987935ade8767bfc8c3e1bf19f1d24ebcaca635cb4f185cedd612d0e3634262c3725b7c13dfb131c5797ca24333a829ba50e5c5bfd1b09702bb2cf6f132f441362a6a6894b35de822e66ad6b4b0e7ddfcf2d617b8f706f3a942465b9f65f4ca52df89fe62dabda6888f021a539f95b9f3cd7c1c408582d63c9afa08e60c8bdcf629b501508923f66b38b339593162fa907c69ed67885b461721b51a793a67b97c4fb147c62cdab5a2c4e40ae89d83d6c5aeb5c19f84bff17f28bee34e31d0578ff5dfbdf29dc11e6079bc994885fe22dcee064b7627c140309d2a982bf039309a106fdf4bafb1ae15a2e82a339b7aa690852d5d5c654c9cb2b2540ea6e3827aa05bfdaf1ff0e072141492fcc6be31e2ed1bc2fb5d0e0edd9befa6f6de87718360bcf035a05ea076747eccaf134c3b8097e53788a23d58e9f9ed29259825f8b11991f7dbd886c249794d99c584bdb8eb88dfa79e362f2bcf323de09e95144e506be73a8c8d682d674c1e65c6a42230469f6747112ad81c8529516c6fe1d26938f010c1148ea6e317c13789e85493666634cbd21ba7a89d5e968504f1165927fe7a64edbda726116096bbfe03dd80738c559a697036040ca681943d8f89360133f19f25ca555c88df9bb377c669087844b0cc89695f121c5349539700fc89a8a9de921733424d03ca8363d1b83437965065368f5912d15c10d08471b52f0f71291cc0dcec1342242365ba674905919ee93b80b158e4f932fc049ea49369d862aae0f685da1d8e08c2fc3520ff11b65612700f45a812c3cc4a8e84e403608336c636584161fdc3cdd21dfe2de93fa9ed6c5280182d4bacc9d66c08300d6e991552721c3a86259deff39213fdfa8f67620afd121d06dba6c51a3e5eef4829e685f3b8fbe45af0db09e2fea6f3b0a28afc2388d5d680e63e3de6d3ee2e7b1b49d49d919e3366ce0590bf44015cb9a2fd3624f1517ba6b5ad19baa3dc179e68d24bc66cde98cb4af3ab943683af912f1feff5016dbb6550d732c47a96bb5dd3f5e56e6e65ced9f28309878bfc8df1315e843826477f7ebc9d931beb397d4bf29cf112a0167e5685ed87ffd4b48e5a53b2e537d8d2817b70d233a34b249eb57bd5e92ede1b3da3f5a5179376c138ec1868fa3e99e742fc02dfcf395f26ce4cef4ae6f022dfee9057c372e1ec76af179eda29c74c64b59ec64a607f85720cd4cdc1248dc74f2f371e2b1edeebfe04f7cca07c036d34179795347b8ae33809db8100ebc3c6ed48bd647c1c39980a0e029565671dd9ef84869849c503cf28cb8bd59b3b15b580b0ae07a888b7346cb3b238d3345d7d393c6996fad4c2fd259ff1cdf04ea20c2bdd080ee21565d808a3bbc09918eb2eb3efc2a36778d5e6a3f290649857e005c2824a0b33eff4fb047f10f13a5c1a3a418075818fe1a00d8feea34a585dfe9d140526a4cdfe2ad7ea3c5acb662946ad0a86b45b919408931244179054e5d6d6fd9cd7d7f8b2cf57c2ea07bdf31a99fb68849db611f860e70ec13476c112d8d0b01a854906a9539d31df0284859b4c27b2390162b4d442665e2cde27100446872850c9e0eb6dc53aecbb11656caa5f0e79a813315128237d8f926ecf2e4a5dfaf30f35269df778bf04371b91d7135bd30b965a8130c6abbe7d0d6f85cc2b9e751b51824a651be201fd120a35c2078d96cdaefc5bd17ff5bf647a214c4e26a67ab7bf620786ee66d6fa1f2f5930fa4bb42932b9aed4fd53c4c851cca2458cd0e6120ee09ead49777bd953951b60bce0b5db436989491ac2e2297f9a59c5d7edb86da84f7b124f25a16a4990a1817c4e5018babbd4bd87a107ef89a42c172d962545d6d1a80626ca8b42a373378049e7449263edae0abc2c651220bdfda36289ffc9417620c099845d7400f293fafa3820502ed722dd21958c1a7cd19f75983b62a609beefe9b3a9f7f5b87f900c47dc1909a4c09b138eb9e9d8a136e74f9a897b4c1d9db948e49fe5b57caad6c96de3443cef1114f6d7569e8e51266678c8353bc19cee1ef312b2226d94ac49af9378022bb918ccaae5a0550dd1dfcb5950cfddc505cc277aaf6af4c45b46c1c95193db924f54978210d29ee0d5a13045f4c039fde79636cb0d965dd3cae6320a6366c06b98a62963b0199f4765293056767160668a4a1211004f2f96dcb86e8d235527f5d73f494fd54c4a415c1680ef23887a2d21c99ee92360a9aaaa493e45025b4915087a3920dc0c6e7ed3070b8e604fa9c7dd6f219effb830e42211f759bd9cca803fc3050160a7144b184a4bf1f9974c2676d3a42108f880c8754838c8bc4546e95b644f83f247bb3b0c49d475e31edab6e07cb94ee2e57bd4e05f2902e995f1ffe9d4afb2a9cbada6e9f26be8a23e945fc23817be4974887e91d5ab01c4f0e874c3ffa2f23678104f4bbcbc4df61aa153f499033a701f8d101f374b76b95f4885d9361e509e2cfa86322a750c264b86eac776f28efad0d6d5fb667943a0c7cccf5769c7fc77cc136b4250b25ea8d88112ede30c4446b116b1519bec38e40c3e0e62e61c9107c0b3aab8290694349d0de758dec538b5ab466a70b6477b3ad8b2ace7d09d9b3ce829fb774d8fcb15e96e58f5a627839857e6c114ef68c86e162aed3066b83b60e2e1b07f7cd7cf47760972cfbad6552702115ddcb9ccc83f4aaf07e24b902cc20fe8096da15f655ee18b1cbb036b764e7e8a5eaf43ca1e5d28b13da38f87767a48f89c91dd038c8be85e33750a9448360640ad997ded6521c38ec236e5163953d68f044f304b433d2796f232b2e9569b2d6dc9cfdbc9042a0f24451490ac92f45af82e470786e50034ac6623937e02ef83e1763109f4e3f06b8876fcdc6ccae5995e27fc61df4179db8969", 0x2000, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x18, 0xfffffffffffffff5, 0x400000000000047, {0x7}}, 0x0, 0x0, 0x0, &(0x7f0000002c40)={0x90, 0x0, 0x3ff, {0x0, 0x3, 0x100, 0xb, 0xff, 0xfffffffa, {0x100000000000006, 0x4, 0x2000002, 0x2, 0xf4d9, 0xffffffff80000000, 0xc, 0x1051eaee, 0xec, 0x8000, 0x1, 0x0, 0x0, 0x9, 0x3}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x2000200, 0xfff7, 0x9, 0x2, 0x1}}, 0x50) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) openat$ndctl0(0xffffff9c, &(0x7f0000000100), 0x800, 0x0) flock(r1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r8, @ANYRESOCT=r6, @ANYBLOB='\x00'/12], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_GET_KEEPCAPS(0x7) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x2710}, 0x2, 0x4, 0x100}, {{r11, r12/1000+10000}, 0x12, 0xff, 0xfffffffa}], 0x20) r13 = socket(0x1e, 0x5, 0x0) connect$tipc(r13, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 1.544473478s ago: executing program 5 (id=6202): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fb0019b40320d812010079de01ec020109021b0001000003000904000001785e4c00090585020004"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x81, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) write$char_usb(r3, &(0x7f00000001c0), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000280)=0x80000001, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00), 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000002c0)={0x0, 0x0, [0x3, 0x0, 0x8, 0x1, 0xfffffffffffffe00, 0x8, 0xfffffffffffffff7, 0x6]}) r4 = openat$audio1(0xffffffffffffff9c, 0x0, 0x121201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', r6, 0x4, 0xf, 0x4, 0x3ff, 0x24, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x6, 0x6}}) symlinkat(&(0x7f00000000c0)='./file1\x00', r5, &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000cd00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000941baca3b133ec0000000000010000000900010073030a01020000000000000000010000000900030073797a32000000000900010073797a47e07bbcc07cf424d0300000000028000000060a010400000000080000000100000008000b40000000000900010073797a3000000000140000000e0a01030000000000000000010000061400000011000100000000"], 0xb0}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x20300, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)}) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000640)=r0) 1.363670722s ago: executing program 2 (id=6203): socket$inet(0x2, 0x2, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000000)) 1.255774925s ago: executing program 2 (id=6204): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "c78bb191d75abfc4b94210c92131d4bac7ddbf6e798633c78cf4c9bf01f23589d97263a304809a7b994304be6eb1a0cb52bac12fbea9af1a7095770d38aa9dca", 0x1a}, 0x48, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000004c0)={'veth0\x00', &(0x7f00000002c0)=@ethtool_test={0x1a, 0x1, 0x2, 0x5, [0x7, 0x7ffc, 0xe33d, 0x81, 0x5]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="98ddca9462b16b0bb2632d64f340d0b2b2a4f09a51", @ANYRESDEC=r4, @ANYRES16=r1, @ANYRES8=r1, @ANYBLOB="22f15c83903c095a2e12d68479f5887b8eaa0bc2614ffcefdaa79c3e30f6fa2d04aaefc5e8bd", @ANYRES8=0x0, @ANYBLOB="3476c4db104c82dac87126e12db43c844f447ff138c598296579229894c5761dae19a7e0324df3bbb4072b6b6e39b597248102dfed326e92ab31070bbdf83a271ad1c113aff0f2740cda7899f213671087c544575288f389a5f08d28fe04ac78d9f2d253a077d40658733bebb07f77e66dbcc02bec6bbee153b7b6fe40d749"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000200)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={&(0x7f0000000280)=[r11], 0x1, r12, r9, 0x3, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x4, 0x5, 0x4cab, 0xe154, 0x1000, 0x0, 0x10, 0xf9, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) r13 = dup(r0) write$UHID_INPUT(r13, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) 997.535041ms ago: executing program 3 (id=6205): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xfc0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc081) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r1], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {0xffc3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 927.282148ms ago: executing program 3 (id=6206): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000001f00)={0x0, 0x1765, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0xe5c) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f4070d0903001f0000000000002000000000", 0x1c) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) r6 = io_uring_setup(0x6249, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x3}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$SG_IO(r7, 0x2285, &(0x7f00000006c0)={0x0, 0xffffffffffffffff, 0x51, 0x3, @buffer={0x0, 0xc2, &(0x7f0000000500)=""/194}, &(0x7f0000000240)="e61c1ceeef16646ce645d2acab753d198ee9daf8c4a8f64a5e3f87f5908c363a0a3ca18639e5566dc5af6565ece964e51779b53892a688aa2818361aa6ea6a90ec7d9120da121e965f6a5bb76604b5e904", &(0x7f0000000600)=""/80, 0x6, 0x4, 0x3, &(0x7f0000000680)}) socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0), 0x2c, &(0x7f0000000400)=""/232, 0xe8}, 0x40012040) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xffffffffffffffbc) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875797bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a00000000000000000000000eec09f93f500"}}) ioctl$RTC_PLL_GET(r9, 0x801c7011, &(0x7f00000001c0)) connect$netlink(r5, &(0x7f00000007c0)=@unspec, 0xc) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x3e, &(0x7f0000000400)=0x800, 0x4) bind$llc(r11, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000180)) setxattr$trusted_overlay_opaque(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), &(0x7f0000000780), 0x2, 0x3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r10) 884.876636ms ago: executing program 0 (id=6207): socket(0x1, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x14) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) socket$inet6(0xa, 0x2, 0x3a) timer_settime(r4, 0x0, &(0x7f0000000300)={{0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001240)=""/4096}, &(0x7f0000000180)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x2000000, 0x0) io_setup(0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c411616acc1ebd8082d01818cbaf00000000000000008000000000000a00ffe7d6116c3c1ebf48bf31cea38685801b1a20991ae959a0c65e195e7dbb783c19670251cf7c045257ccd9ca0fb4571199c84bf83b7c7c7ba5b56e5e323f080010a542866eb39b0bb70a66bf5c00aefeae432da01c091c2373b78f635c35a3ea0f5c6e705b706147945aa4001351bdcb85cdbce1fd4e9277aca07a495171b5f076439a53df2c8cb1ebbeec1a63fa95cb02b4c8c8778f205482becb760e50fb48910e0251bd03e9e462356139eb"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f0000000600)='fd/4\x00') readv(r10, &(0x7f0000000240)=[{&(0x7f0000000340)=""/228, 0xe4}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYRESOCT=r5, @ANYRES16=r3, @ANYRESHEX=r6, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r10}, 0xfffffffffffffd88) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 758.214783ms ago: executing program 3 (id=6208): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl(r0, 0x80004507, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x40c100, 0x0) write$sndseq(r2, &(0x7f0000000100)=[{0xf, 0x4, 0x8, 0x1, @time={0x5, 0x401}, {0x2f, 0xf8}, {0x7, 0x81}, @connect={{0xc6, 0xc}, {0x81, 0x45}}}, {0x2, 0x6, 0x5, 0x6, @time={0x3, 0xd}, {0x5, 0x1}, {0x2, 0x4}, @addr={0x2, 0x9}}], 0x38) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='1', 0x1) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r4}, 0x0, 0x0) pipe(0x0) r5 = socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x20, 0x3}) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, 0x0, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x1a, &(0x7f0000000300)={0x0}, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000001600), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000001640)={0x8, 0x2, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000016c0)={0x2, @pix_mp}) setsockopt$packet_add_memb(r5, 0x107, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r8, 0x80086303, &(0x7f0000000000)) 677.515523ms ago: executing program 3 (id=6209): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) close(0xffffffffffffffff) r1 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x4, 0x6d9a2862, 0x6, 0x600, 0xa, 0xffffffffffffffff, 0xffffffff, '\x00', r2, r0, 0x3, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)="b5", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000b9a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000064c0)=0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="6c2ca8c9245043139ce18d1126e98305d3d3de1e74baad21f162de86d86e8c9338bd2ef4e7f8126a44aa2de3687583c93154b667c72f14c1fdab56222c030a3c4084ecb3b7e74b4936487971fc76ceaef71269de2eb62911590ace18f18610605ef041611426a584e1eec0177f482ac58015133e92bfa5ee98d1913f4a933aec635fb83569b2818d0052ddab649ae83a91aace03d1e9d47d9a33950db67287c1f766b8"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 677.226528ms ago: executing program 0 (id=6210): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180), &(0x7f0000000380)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 676.693748ms ago: executing program 0 (id=6211): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x3, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10, 0x4}, {0x0, 0x6}], 0x2, 0xfe}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x0, &(0x7f0000000100)}) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$qat_adf_ctl(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x20044) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"cb02c6d8cb00fc18137f1cad3e48018b251f7320a0e8000000000000000700", r3, 0xffffffffffffffff}) close_range(r2, r4, 0x2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x300, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) sendto$inet6(r1, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) 318.550117ms ago: executing program 2 (id=6212): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000380)={0x2, {0x2, 0x9, 0x0, 0x9964}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x6, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) r4 = syz_open_procfs(r3, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) getpid() (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, 0x0, 0x0) (async) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(r3, 0x8, &(0x7f00000003c0)=0x80000001) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r9, 0x6805, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r8, {r2}}, './file0\x00'}) io_setup(0x4, &(0x7f0000000340)) (async) signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) 318.251237ms ago: executing program 2 (id=6213): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x23d, &(0x7f0000000380)={0x0, 0xadca, 0x10100, 0x0, 0x1000000, 0x0, r2}, 0x0, 0x0) pipe(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b007f000001e000000200000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket(0x200000100000011, 0x3, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r4 = openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="14"}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e", 0x23}], 0x1}, 0x0) 251.290854ms ago: executing program 5 (id=6214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x654642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000075c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xac}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'batadv_slave_1\x00', {0x4}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xff) 0s ago: executing program 2 (id=6215): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000019078c31e0001ac1414aa00000000001400"], 0x0) mount$overlay(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000840)={[{@metacopy_off}, {@verity_on}, {@metacopy_on}, {@nfs_export_on}]}) (async) mount$overlay(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000840)={[{@metacopy_off}, {@verity_on}, {@metacopy_on}, {@nfs_export_on}]}) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) (async) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000008c0)={&(0x7f0000000240), 0xc, &(0x7f0000000880)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c040000cebe978d93a5df3586a4481c10645a05b2214c53d2825048e6660177b121494c981f6cee6d1ee9da7127554cae5045702032f3a325dbf7484ec525a638ab14d0aa9352481e8ea06f5c83e249f86d447e694e3cd1507afde9815f9800b79d68efc81e59f37b2b23f4f83ed81509ab4c6166002e057c95ea30e05d081f68a33751cdae15630442f6280e3a262b7e8a633ac298cef15bc6ce880ad70c880770b3d9d0e7e8a484b74ed56b8e", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf2514000000080011000f000000080015000600000008000e00ffff001008000a000f000000080007008e020000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000900)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000900)={'vxcan0\x00'}) clock_gettime(0x0, &(0x7f0000000980)) sendmsg$can_bcm(r2, 0x0, 0x4000040) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="181200000000000000000000001600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="181200000000000000000000001600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x1) syz_open_dev$vim2m(&(0x7f00000000c0), 0x80000f, 0x2) r6 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f00000000c0)={0x1}) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000ec0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="030300100000000000000c00000004000300", @ANYRES32=r8, @ANYBLOB="1a98e63ae1c7b9740573d68db7f77c"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): 37.319784][T26183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5817'. [ 837.351075][ T6042] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 837.383148][ T6042] usb 10-1: device descriptor read/8, error -71 [ 837.489385][T26189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5818'. [ 837.629561][T26192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5820'. [ 837.897335][ T6042] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 837.917557][ T6042] usb 10-1: device descriptor read/8, error -71 [ 838.026686][ T6042] usb usb10-port1: unable to enumerate USB device [ 838.094892][T26198] netlink: 'syz.3.5822': attribute type 10 has an invalid length. [ 838.100899][T26198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.103464][T26198] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 838.492772][T26206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5824'. [ 839.293602][T26231] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5829'. [ 839.412930][T26238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5831'. [ 839.516639][ T5311] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 839.521011][T26241] netlink: 392 bytes leftover after parsing attributes in process `syz.2.5835'. [ 840.013850][T26257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5842'. [ 840.018675][T26259] fuse: Bad value for 'user_id' [ 840.019986][T26259] fuse: Bad value for 'user_id' [ 840.024104][T26259] FAULT_INJECTION: forcing a failure. [ 840.024104][T26259] name failslab, interval 1, probability 0, space 0, times 0 [ 840.027449][T26259] CPU: 3 UID: 0 PID: 26259 Comm: syz.5.5843 Not tainted 6.12.0-rc7-syzkaller #0 [ 840.029801][T26259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 840.032576][T26259] Call Trace: [ 840.033478][T26259] [ 840.034271][T26259] dump_stack_lvl+0x16c/0x1f0 [ 840.035524][T26259] should_fail_ex+0x497/0x5b0 [ 840.036773][T26259] ? fs_reclaim_acquire+0xae/0x150 [ 840.038132][T26259] should_failslab+0xc2/0x120 [ 840.039381][T26259] __kmalloc_noprof+0xcb/0x410 [ 840.040644][T26259] ? lockdep_hardirqs_on+0x7c/0x110 [ 840.042037][T26259] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 840.043882][T26259] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 840.045339][T26259] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 840.046979][T26259] ? bpf_lsm_capable+0x9/0x10 [ 840.048380][T26259] ? security_capable+0x7e/0x260 [ 840.049706][T26259] genl_rcv_msg+0x565/0x800 [ 840.050916][T26259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 840.052253][T26259] ? __pfx_seg6_genl_sethmac+0x10/0x10 [ 840.053695][T26259] netlink_rcv_skb+0x165/0x410 [ 840.054961][T26259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 840.056339][T26259] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 840.057758][T26259] ? down_read+0xc9/0x330 [ 840.058903][T26259] ? __pfx_down_read+0x10/0x10 [ 840.060172][T26259] ? netlink_deliver_tap+0x1ae/0xcf0 [ 840.061757][T26259] genl_rcv+0x28/0x40 [ 840.062840][T26259] netlink_unicast+0x53c/0x7f0 [ 840.064107][T26259] ? __pfx_netlink_unicast+0x10/0x10 [ 840.065499][T26259] ? __phys_addr_symbol+0x30/0x80 [ 840.066822][T26259] ? __check_object_size+0x488/0x710 [ 840.068208][T26259] netlink_sendmsg+0x8b8/0xd70 [ 840.069473][T26259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.070856][T26259] ____sys_sendmsg+0x9ae/0xb40 [ 840.072734][T26259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.072755][T26259] ? get_compat_msghdr+0x11b/0x170 [ 840.072772][T26259] ? __pfx___lock_acquire+0x10/0x10 [ 840.077267][T26259] ___sys_sendmsg+0x135/0x1e0 [ 840.078772][T26259] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.080111][T26259] ? lock_acquire+0x2f/0xb0 [ 840.081636][T26259] ? __fget_files+0x40/0x3f0 [ 840.083099][T26259] ? fdget+0x176/0x210 [ 840.084322][T26259] __sys_sendmsg+0x117/0x1f0 [ 840.085735][T26259] ? __pfx___sys_sendmsg+0x10/0x10 [ 840.087151][T26259] ? __fget_files+0x244/0x3f0 [ 840.088617][T26259] __do_fast_syscall_32+0x73/0x120 [ 840.090294][T26259] do_fast_syscall_32+0x32/0x80 [ 840.091728][T26259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 840.093508][T26259] RIP: 0023:0xf73be579 [ 840.094836][T26259] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 840.100485][T26259] RSP: 002b:00000000f56a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 840.102816][T26259] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000200004c0 [ 840.105052][T26259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 840.107092][T26259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 840.109081][T26259] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 840.111075][T26259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 840.113072][T26259] [ 841.240949][T26284] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.5850'. [ 841.515820][T26291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5852'. [ 841.977692][T26295] FAULT_INJECTION: forcing a failure. [ 841.977692][T26295] name failslab, interval 1, probability 0, space 0, times 0 [ 841.981300][T26295] CPU: 3 UID: 0 PID: 26295 Comm: syz.5.5853 Not tainted 6.12.0-rc7-syzkaller #0 [ 841.984347][T26295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 841.988121][T26295] Call Trace: [ 841.989300][T26295] [ 841.990355][T26295] dump_stack_lvl+0x16c/0x1f0 [ 841.991983][T26295] should_fail_ex+0x497/0x5b0 [ 841.993575][T26295] ? fs_reclaim_acquire+0xae/0x150 [ 841.995301][T26295] should_failslab+0xc2/0x120 [ 841.996929][T26295] __kmalloc_cache_noprof+0x6b/0x310 [ 841.998886][T26295] ? shrinker_alloc+0xf8/0xb00 [ 842.000606][T26295] ? __pfx_lock_release+0x10/0x10 [ 842.002335][T26295] shrinker_alloc+0xf8/0xb00 [ 842.003531][T26295] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 842.005032][T26295] ? rcu_is_watching+0x12/0xc0 [ 842.006288][T26295] ? pcpu_alloc_noprof+0x1f5/0x1660 [ 842.007642][T26295] ? __pfx_shrinker_alloc+0x10/0x10 [ 842.009024][T26295] ? lockdep_init_map_type+0x16d/0x7d0 [ 842.010479][T26295] ? lockdep_init_map_type+0x16d/0x7d0 [ 842.011959][T26295] ? __raw_spin_lock_init+0x3a/0x110 [ 842.013345][T26295] ? __init_rwsem+0x12d/0x1b0 [ 842.014586][T26295] alloc_super+0x7cc/0xbd0 [ 842.015761][T26295] sget+0x11b/0x6c0 [ 842.016774][T26295] ? __pfx_v9fs_set_super+0x10/0x10 [ 842.018150][T26295] v9fs_mount+0x106/0xa30 [ 842.019284][T26295] ? __pfx_v9fs_mount+0x10/0x10 [ 842.020610][T26295] ? __pfx_v9fs_mount+0x10/0x10 [ 842.022360][T26295] legacy_get_tree+0x109/0x220 [ 842.023708][T26295] vfs_get_tree+0x8f/0x380 [ 842.024882][T26295] path_mount+0x6e1/0x1f10 [ 842.026056][T26295] ? kmem_cache_free+0x152/0x4b0 [ 842.027349][T26295] ? __pfx_path_mount+0x10/0x10 [ 842.028627][T26295] ? putname+0x12e/0x170 [ 842.029750][T26295] __ia32_sys_mount+0x292/0x310 [ 842.031047][T26295] ? __pfx___ia32_sys_mount+0x10/0x10 [ 842.032447][T26295] __do_fast_syscall_32+0x73/0x120 [ 842.033785][T26295] do_fast_syscall_32+0x32/0x80 [ 842.035052][T26295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 842.036683][T26295] RIP: 0023:0xf73be579 [ 842.037754][T26295] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 842.042976][T26295] RSP: 002b:00000000f56a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 842.045142][T26295] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200002c0 [ 842.047200][T26295] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000400 [ 842.049247][T26295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 842.051413][T26295] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 842.053481][T26295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 842.055527][T26295] [ 842.336541][T26309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5858'. [ 842.339193][T26309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5858'. [ 842.673167][T26313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5859'. [ 843.491293][ T5311] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 843.497766][ T5311] Bluetooth: hci1: Injecting HCI hardware error event [ 843.502911][ T5311] Bluetooth: hci1: hardware error 0x00 [ 843.699623][T26337] mkiss: ax0: crc mode is auto. [ 843.712185][T26336] ptrace attach of ""[26338] was attempted by ""[26336] [ 843.719848][T26336] input: syz0 as /devices/virtual/input/input51 [ 844.360692][T26356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5873'. [ 844.382755][T26358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5874'. [ 845.111805][T26367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5877'. [ 845.467310][T26379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5879'. [ 845.568505][ T5311] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 846.077713][T26384] fuse: Bad value for 'rootmode' [ 846.168389][T26390] qnx6: unable to read the first superblock [ 846.853722][T26401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5884'. [ 846.867420][T26401] bond2: entered promiscuous mode [ 846.881973][T26401] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 847.067372][T26413] kvm: Disabled LAPIC found during irq injection [ 847.227588][T26418] FAULT_INJECTION: forcing a failure. [ 847.227588][T26418] name failslab, interval 1, probability 0, space 0, times 0 [ 847.231796][T26418] CPU: 0 UID: 0 PID: 26418 Comm: syz.5.5889 Not tainted 6.12.0-rc7-syzkaller #0 [ 847.234334][T26418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 847.237088][T26418] Call Trace: [ 847.237993][T26418] [ 847.238892][T26418] dump_stack_lvl+0x16c/0x1f0 [ 847.240120][T26418] should_fail_ex+0x497/0x5b0 [ 847.241737][T26418] ? fs_reclaim_acquire+0xae/0x150 [ 847.243375][T26418] should_failslab+0xc2/0x120 [ 847.244966][T26418] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 847.246944][T26418] ? __d_alloc+0x35/0x8c0 [ 847.248460][T26418] __d_alloc+0x35/0x8c0 [ 847.249937][T26418] d_alloc_pseudo+0x1c/0xc0 [ 847.251530][T26418] alloc_file_pseudo+0xd2/0x200 [ 847.253199][T26418] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 847.255051][T26418] __anon_inode_getfile+0x136/0x3c0 [ 847.256678][T26418] ? __pfx___anon_inode_getfile+0x10/0x10 [ 847.258113][T26418] sync_file_alloc+0x65/0x160 [ 847.259276][T26418] sync_file_merge.constprop.0+0x83/0x200 [ 847.260669][T26418] ? __pfx_sync_file_merge.constprop.0+0x10/0x10 [ 847.262207][T26418] ? lock_acquire+0x2f/0xb0 [ 847.263367][T26418] ? __fget_files+0x40/0x3f0 [ 847.264512][T26418] ? __fget_files+0x244/0x3f0 [ 847.265731][T26418] sync_file_ioctl+0x8ae/0xbe0 [ 847.266954][T26418] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 847.268234][T26418] ? __pfx_sync_file_ioctl+0x10/0x10 [ 847.269585][T26418] ? __fget_files+0x244/0x3f0 [ 847.270772][T26418] ? __pfx_sync_file_ioctl+0x10/0x10 [ 847.272156][T26418] compat_ptr_ioctl+0x6b/0xa0 [ 847.273657][T26418] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 847.275613][T26418] __do_compat_sys_ioctl+0x259/0x2b0 [ 847.277027][T26418] __do_fast_syscall_32+0x73/0x120 [ 847.278317][T26418] do_fast_syscall_32+0x32/0x80 [ 847.279581][T26418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 847.281521][T26418] RIP: 0023:0xf73be579 [ 847.282591][T26418] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 847.287555][T26418] RSP: 002b:00000000f568555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 847.290399][T26418] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c0303e03 [ 847.293189][T26418] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 847.295533][T26418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 847.297665][T26418] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 847.299772][T26418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 847.302484][T26418] [ 847.328214][ T6042] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 847.479376][ T6042] usb 7-1: not running at top speed; connect to a high speed hub [ 847.487748][ T6042] usb 7-1: config 7 has an invalid interface number: 32 but max is 3 [ 847.489942][ T6042] usb 7-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 847.492277][ T6042] usb 7-1: config 7 has an invalid interface number: 91 but max is 3 [ 847.499424][ T6042] usb 7-1: config 7 has an invalid interface number: 118 but max is 3 [ 847.501612][ T6042] usb 7-1: config 7 has an invalid interface number: 132 but max is 3 [ 847.504161][ T6042] usb 7-1: config 7 has no interface number 0 [ 847.506219][ T6042] usb 7-1: config 7 has no interface number 1 [ 847.507892][ T6042] usb 7-1: config 7 has no interface number 2 [ 847.509502][ T6042] usb 7-1: config 7 has no interface number 3 [ 847.511103][ T6042] usb 7-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 847.514060][ T6042] usb 7-1: config 7 interface 32 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 847.517826][ T6042] usb 7-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 847.521506][ T6042] usb 7-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 847.523493][T26424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5890'. [ 847.525124][ T6042] usb 7-1: config 7 interface 32 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 847.530330][ T6042] usb 7-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 847.533911][ T6042] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x9, skipping [ 847.537963][ T6042] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0xF, skipping [ 847.541873][ T6042] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x5, skipping [ 847.545737][ T6042] usb 7-1: config 7 interface 91 altsetting 188 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 847.550579][ T6042] usb 7-1: config 7 interface 118 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 847.554087][ T6042] usb 7-1: config 7 interface 118 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 847.556687][ T6042] usb 7-1: config 7 interface 132 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 847.560241][ T6042] usb 7-1: config 7 interface 32 has no altsetting 0 [ 847.562631][ T6042] usb 7-1: config 7 interface 91 has no altsetting 0 [ 847.565034][ T6042] usb 7-1: config 7 interface 118 has no altsetting 0 [ 847.567053][ T6042] usb 7-1: config 7 interface 132 has no altsetting 0 [ 847.571809][ T6042] usb 7-1: New USB device found, idVendor=1eda, idProduct=2210, bcdDevice=63.55 [ 847.574300][ T6042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.580348][ T6042] usb 7-1: Product: syz [ 847.581561][ T6042] usb 7-1: Manufacturer: syz [ 847.582862][ T6042] usb 7-1: SerialNumber: syz [ 847.587792][T26415] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 847.933681][ T6042] usb 7-1: USB disconnect, device number 62 [ 847.980082][T26428] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.5891'. [ 848.036098][T26432] openvswitch: netlink: Invalid VLAN frame [ 848.150530][T26438] FAULT_INJECTION: forcing a failure. [ 848.150530][T26438] name failslab, interval 1, probability 0, space 0, times 0 [ 848.154469][T26438] CPU: 0 UID: 0 PID: 26438 Comm: syz.5.5895 Not tainted 6.12.0-rc7-syzkaller #0 [ 848.156831][T26438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 848.159546][T26438] Call Trace: [ 848.160431][T26438] [ 848.161320][T26438] dump_stack_lvl+0x16c/0x1f0 [ 848.162551][T26438] should_fail_ex+0x497/0x5b0 [ 848.163779][T26438] should_failslab+0xc2/0x120 [ 848.165002][T26438] __kmalloc_cache_noprof+0x6b/0x310 [ 848.166370][T26438] ? __io_queue_proc+0x2bf/0x900 [ 848.167652][T26438] __io_queue_proc+0x2bf/0x900 [ 848.168899][T26438] ? __pfx_io_async_queue_proc+0x10/0x10 [ 848.170349][T26438] v4l2_m2m_poll+0xfd/0x640 [ 848.171894][T26438] v4l2_m2m_fop_poll+0xa2/0x110 [ 848.173580][T26438] ? __pfx_v4l2_m2m_fop_poll+0x10/0x10 [ 848.175501][T26438] v4l2_poll+0x160/0x320 [ 848.177005][T26438] __io_arm_poll_handler+0x47e/0x1050 [ 848.178839][T26438] ? __pfx_v4l2_poll+0x10/0x10 [ 848.180539][T26438] io_arm_poll_handler+0x592/0xc50 [ 848.182053][T26438] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 848.183505][T26438] ? io_write+0x656/0x13d0 [ 848.184665][T26438] ? __pfx_io_async_queue_proc+0x10/0x10 [ 848.186161][T26438] io_queue_async+0xaa/0x4b0 [ 848.187347][T26438] io_req_task_submit+0x1e0/0x210 [ 848.188584][T26438] ? __pfx_io_req_task_submit+0x10/0x10 [ 848.189929][T26438] io_handle_tw_list+0x4c3/0x540 [ 848.191198][T26438] ? __pfx_io_handle_tw_list+0x10/0x10 [ 848.192624][T26438] ? lock_acquire.part.0+0x11b/0x380 [ 848.193916][T26438] ? find_held_lock+0x2d/0x110 [ 848.195195][T26438] tctx_task_work_run+0xa9/0x370 [ 848.196394][T26438] tctx_task_work+0x7b/0xd0 [ 848.197536][T26438] ? __pfx_tctx_task_work+0x10/0x10 [ 848.198879][T26438] ? _raw_spin_unlock_irq+0x23/0x50 [ 848.200176][T26438] ? lockdep_hardirqs_on+0x7c/0x110 [ 848.201463][T26438] task_work_run+0x14e/0x250 [ 848.202595][T26438] ? __pfx_task_work_run+0x10/0x10 [ 848.203902][T26438] get_signal+0x1d3/0x26d0 [ 848.204998][T26438] ? __pfx_get_signal+0x10/0x10 [ 848.206278][T26438] ? fput+0x30/0x390 [ 848.207301][T26438] ? __do_sys_io_uring_enter+0x4a7/0x1170 [ 848.208778][T26438] arch_do_signal_or_restart+0x90/0x7e0 [ 848.210262][T26438] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 848.211836][T26438] syscall_exit_to_user_mode+0x150/0x2a0 [ 848.213283][T26438] __do_fast_syscall_32+0x80/0x120 [ 848.214610][T26438] do_fast_syscall_32+0x32/0x80 [ 848.215876][T26438] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 848.217510][T26438] RIP: 0023:0xf73be579 [ 848.218575][T26438] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 848.223572][T26438] RSP: 002b:00000000f566c55c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 848.225635][T26438] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 00000000000021ac [ 848.227593][T26438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 848.229542][T26438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 848.231573][T26438] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 848.233608][T26438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 848.235655][T26438] [ 848.427381][T26450] 9pnet_fd: p9_fd_create_tcp (26450): problem connecting socket to 127.0.0.1 [ 848.642143][T26465] netlink: 'syz.3.5899': attribute type 39 has an invalid length. [ 848.644366][T26465] netlink: 'syz.3.5899': attribute type 4 has an invalid length. [ 848.646507][T26465] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5899'. [ 848.663051][T26465] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 848.681258][T26464] macvlan0: mtu less than device minimum [ 848.984626][T26475] mac80211_hwsim hwsim27 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 849.040862][T26477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5903'. [ 849.282695][T26484] bond0: (slave batadv0): Releasing backup interface [ 849.349285][T26484] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.5906'. [ 850.549067][T26509] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan1, syncid = 0, id = 0 [ 850.993392][T26514] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 851.086922][T26520] FAULT_INJECTION: forcing a failure. [ 851.086922][T26520] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 851.090480][T26520] CPU: 3 UID: 0 PID: 26520 Comm: syz.0.5916 Not tainted 6.12.0-rc7-syzkaller #0 [ 851.092849][T26520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 851.095670][T26520] Call Trace: [ 851.096574][T26520] [ 851.097370][T26520] dump_stack_lvl+0x16c/0x1f0 [ 851.098641][T26520] should_fail_ex+0x497/0x5b0 [ 851.099894][T26520] ? fs_reclaim_acquire+0xae/0x150 [ 851.101256][T26520] should_fail_alloc_page+0xe7/0x130 [ 851.102654][T26520] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 851.104544][T26520] ? __pfx_mark_lock+0x10/0x10 [ 851.106102][T26520] ? hlock_class+0x4e/0x130 [ 851.107308][T26520] __alloc_pages_noprof+0x190/0x25a0 [ 851.108696][T26520] ? hlock_class+0x4e/0x130 [ 851.109892][T26520] ? __lock_acquire+0xbdd/0x3ce0 [ 851.111199][T26520] ? hlock_class+0x4e/0x130 [ 851.112444][T26520] ? mark_lock+0xb5/0xc60 [ 851.113559][T26520] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 851.115062][T26520] ? __pfx_mark_lock+0x10/0x10 [ 851.116369][T26520] ? __pfx___lock_acquire+0x10/0x10 [ 851.117732][T26520] ? hlock_class+0x4e/0x130 [ 851.118930][T26520] ? mark_lock+0xb5/0xc60 [ 851.120057][T26520] ? hlock_class+0x4e/0x130 [ 851.121256][T26520] ? mark_lock+0xb5/0xc60 [ 851.122407][T26520] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 851.123922][T26520] ? policy_nodemask+0xea/0x4e0 [ 851.125220][T26520] alloc_pages_mpol_noprof+0x2c9/0x610 [ 851.126658][T26520] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 851.128221][T26520] ? find_held_lock+0x2d/0x110 [ 851.129501][T26520] folio_alloc_mpol_noprof+0x36/0xd0 [ 851.130878][T26520] vma_alloc_folio_noprof+0xee/0x1b0 [ 851.132265][T26520] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 851.133815][T26520] ? __pfx___lock_acquire+0x10/0x10 [ 851.135195][T26520] do_wp_page+0x10d1/0x4930 [ 851.136408][T26520] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 851.137831][T26520] ? __pfx_do_wp_page+0x10/0x10 [ 851.139038][T26520] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 851.140451][T26520] ? lock_acquire+0x2f/0xb0 [ 851.141654][T26520] ? __handle_mm_fault+0xdcd/0x2a10 [ 851.143097][T26520] __handle_mm_fault+0x1a93/0x2a10 [ 851.144318][T26520] ? __pfx_mt_find+0x10/0x10 [ 851.145518][T26520] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 851.146964][T26520] ? __pfx___handle_mm_fault+0x10/0x10 [ 851.148392][T26520] ? find_vma+0xc0/0x140 [ 851.149517][T26520] ? __pfx_find_vma+0x10/0x10 [ 851.150761][T26520] handle_mm_fault+0x3fa/0xaa0 [ 851.152025][T26520] do_user_addr_fault+0x7a3/0x13f0 [ 851.153354][T26520] exc_page_fault+0x5c/0xc0 [ 851.154554][T26520] asm_exc_page_fault+0x26/0x30 [ 851.155833][T26520] RIP: 0010:_copy_to_iter+0x37f/0x1400 [ 851.157261][T26520] Code: 4d 85 f6 0f 85 4e ff ff ff e8 ad c7 04 fd 4c 8b 74 24 18 44 89 fe 4c 89 f7 e8 2d 33 66 fd 0f 01 cb 4c 89 f9 48 89 df 4c 89 f6 a4 0f 1f 00 48 89 cb 0f 01 ca 4d 89 fc 49 29 cc e9 1d ff ff ff [ 851.162016][T26520] RSP: 0018:ffffc9000785f958 EFLAGS: 00050246 [ 851.163535][T26520] RAX: 0000000000000001 RBX: 0000000020003500 RCX: 0000000000000500 [ 851.165553][T26520] RDX: 0000000000000000 RSI: ffff88805d371b00 RDI: 0000000020004000 [ 851.167573][T26520] RBP: ffffc9000785fc78 R08: 0000000000000000 R09: ffffed100ba6e3ff [ 851.169592][T26520] R10: ffff88805d371fff R11: 0000000000000000 R12: 0000000020004500 [ 851.171600][T26520] R13: 00007fffffffefff R14: ffff88805d371000 R15: 0000000000001000 [ 851.173637][T26520] ? _copy_to_iter+0x373/0x1400 [ 851.174919][T26520] ? _raw_spin_unlock+0x28/0x50 [ 851.176197][T26520] ? free_unref_page+0x621/0xdc0 [ 851.177484][T26520] ? __pfx__copy_to_iter+0x10/0x10 [ 851.178826][T26520] ? __pfx___mutex_trylock_common+0x10/0x10 [ 851.180320][T26520] ? pipe_lock+0x64/0x80 [ 851.181415][T26520] ? __folio_put+0x312/0x3d0 [ 851.182607][T26520] ? __pfx___folio_put+0x10/0x10 [ 851.183882][T26520] copy_page_to_iter+0xf1/0x180 [ 851.185199][T26520] pipe_to_user+0xb0/0x170 [ 851.186339][T26520] ? anon_pipe_buf_release+0x11a/0x240 [ 851.187732][T26520] __splice_from_pipe+0x3a0/0x810 [ 851.189015][T26520] ? __pfx_pipe_to_user+0x10/0x10 [ 851.190326][T26520] __do_sys_vmsplice+0xa0f/0xef0 [ 851.191618][T26520] ? get_pid_task+0xfc/0x250 [ 851.192836][T26520] ? __pfx_lock_release+0x10/0x10 [ 851.194190][T26520] ? trace_lock_acquire+0x14a/0x1d0 [ 851.195545][T26520] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 851.196944][T26520] ? ksys_write+0x12f/0x260 [ 851.198141][T26520] ? ksys_write+0x21e/0x260 [ 851.199349][T26520] ? __pfx_lock_release+0x10/0x10 [ 851.200631][T26520] ? __fget_files+0x244/0x3f0 [ 851.201842][T26520] ? fput+0x30/0x390 [ 851.202863][T26520] ? ksys_write+0x1ad/0x260 [ 851.204027][T26520] ? __pfx_ksys_write+0x10/0x10 [ 851.205278][T26520] ? __do_fast_syscall_32+0x73/0x120 [ 851.206641][T26520] __do_fast_syscall_32+0x73/0x120 [ 851.207958][T26520] do_fast_syscall_32+0x32/0x80 [ 851.209253][T26520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 851.210910][T26520] RIP: 0023:0xf7fe6579 [ 851.212007][T26520] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 851.217423][T26520] RSP: 002b:00000000f574555c EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 851.219604][T26520] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 851.221685][T26520] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 851.223807][T26520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 851.225905][T26520] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 851.227963][T26520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 851.230055][T26520] [ 851.339305][T26524] netlink: 'syz.0.5918': attribute type 4 has an invalid length. [ 851.348888][T26524] netlink: 'syz.0.5918': attribute type 4 has an invalid length. [ 851.570743][T26533] vivid-007: disconnect [ 851.979676][T26539] netlink: 'syz.2.5925': attribute type 10 has an invalid length. [ 851.985397][T26539] bond0: (slave nlmon0): The slave device specified does not support setting the MAC address [ 851.989379][T26539] bond0: (slave nlmon0): Error -95 calling set_mac_address [ 852.074114][T26532] vivid-007: reconnect [ 852.082793][T26545] FAULT_INJECTION: forcing a failure. [ 852.082793][T26545] name failslab, interval 1, probability 0, space 0, times 0 [ 852.086590][T26545] CPU: 2 UID: 0 PID: 26545 Comm: syz.2.5927 Not tainted 6.12.0-rc7-syzkaller #0 [ 852.089002][T26545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 852.091755][T26545] Call Trace: [ 852.092607][T26545] [ 852.093386][T26545] dump_stack_lvl+0x16c/0x1f0 [ 852.094581][T26545] should_fail_ex+0x497/0x5b0 [ 852.095789][T26545] ? fs_reclaim_acquire+0xae/0x150 [ 852.097099][T26545] should_failslab+0xc2/0x120 [ 852.098312][T26545] __kmalloc_cache_noprof+0x6b/0x310 [ 852.099636][T26545] ? alloc_super+0x52/0xbd0 [ 852.100773][T26545] alloc_super+0x52/0xbd0 [ 852.101905][T26545] ? lock_acquire+0x2f/0xb0 [ 852.103077][T26545] ? sget+0xe2/0x6c0 [ 852.104113][T26545] sget+0x11b/0x6c0 [ 852.105136][T26545] ? __pfx_v9fs_set_super+0x10/0x10 [ 852.106510][T26545] v9fs_mount+0x106/0xa30 [ 852.107607][T26545] ? __pfx_v9fs_mount+0x10/0x10 [ 852.108874][T26545] ? __pfx_v9fs_mount+0x10/0x10 [ 852.110133][T26545] legacy_get_tree+0x109/0x220 [ 852.111374][T26545] vfs_get_tree+0x8f/0x380 [ 852.112510][T26545] path_mount+0x6e1/0x1f10 [ 852.113643][T26545] ? kmem_cache_free+0x152/0x4b0 [ 852.114910][T26545] ? __pfx_path_mount+0x10/0x10 [ 852.116158][T26545] ? putname+0x12e/0x170 [ 852.117287][T26545] __ia32_sys_mount+0x292/0x310 [ 852.118475][T26545] ? __pfx___ia32_sys_mount+0x10/0x10 [ 852.119886][T26545] __do_fast_syscall_32+0x73/0x120 [ 852.121237][T26545] do_fast_syscall_32+0x32/0x80 [ 852.122517][T26545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 852.124187][T26545] RIP: 0023:0xf73fe579 [ 852.125266][T26545] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 852.130213][T26545] RSP: 002b:00000000f56e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 852.132385][T26545] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000080 [ 852.134427][T26545] RDX: 00000000200000c0 RSI: 0000000000000110 RDI: 0000000020000280 [ 852.136482][T26545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 852.138487][T26545] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 852.140402][T26545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 852.142525][T26545] [ 852.174303][T26547] fuse: Bad value for 'fd' [ 852.363622][T26559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5931'. [ 852.397788][T26568] bridge0: port 3(vxlan0) entered blocking state [ 852.399723][T26568] bridge0: port 3(vxlan0) entered disabled state [ 852.401476][T26568] vxlan0: entered allmulticast mode [ 852.403613][T26568] vxlan0: entered promiscuous mode [ 852.559468][T26575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5936'. [ 853.303985][ T5311] Bluetooth: hci2: unknown advertising packet type: 0x72 [ 853.304046][ T5311] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 853.306789][ T5311] Bluetooth: hci2: unknown advertising packet type: 0x05 [ 853.308668][ T5311] Bluetooth: hci2: Dropping invalid advertising data [ 853.313644][ T5311] Bluetooth: hci2: Malformed LE Event: 0x02 [ 853.877470][T26609] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 854.282844][T26628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5952'. [ 854.360730][T14163] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 854.512163][T14163] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 854.514173][T14163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 854.516750][T14163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 854.519250][T14163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 854.530654][T14163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 854.534571][T14163] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 854.536510][T14163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 854.539113][T14163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 854.550642][T14163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 854.553544][T14163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 854.561367][T14163] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 854.563309][T14163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 854.565941][T14163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 854.568467][T14163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 854.574490][T14163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 854.579300][T14163] usb 5-1: string descriptor 0 read error: -22 [ 854.581008][T14163] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 854.583354][T14163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.588588][T14163] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 854.792613][T14163] usb 5-1: USB disconnect, device number 64 [ 855.138289][T26645] 9pnet_fd: Insufficient options for proto=fd [ 855.354662][T26652] FAULT_INJECTION: forcing a failure. [ 855.354662][T26652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 855.359002][T26652] CPU: 1 UID: 0 PID: 26652 Comm: syz.0.5959 Not tainted 6.12.0-rc7-syzkaller #0 [ 855.361436][T26652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 855.364346][T26652] Call Trace: [ 855.365230][T26652] [ 855.366018][T26652] dump_stack_lvl+0x16c/0x1f0 [ 855.367240][T26652] should_fail_ex+0x497/0x5b0 [ 855.368488][T26652] ? fs_reclaim_acquire+0xae/0x150 [ 855.369820][T26652] should_fail_alloc_page+0xe7/0x130 [ 855.371405][T26652] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 855.373130][T26652] __alloc_pages_noprof+0x190/0x25a0 [ 855.374672][T26652] ? alloc_pages_mpol_noprof+0x315/0x610 [ 855.376362][T26652] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 855.377959][T26652] ? lock_acquire.part.0+0x11b/0x380 [ 855.379464][T26652] ? find_held_lock+0x2d/0x110 [ 855.380728][T26652] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 855.382229][T26652] ? __pfx_lock_release+0x10/0x10 [ 855.383797][T26652] ? trace_lock_acquire+0x14a/0x1d0 [ 855.385224][T26652] ? lock_acquire+0x2f/0xb0 [ 855.386412][T26652] ? find_next_iomem_res+0x55/0x470 [ 855.387758][T26652] ? do_raw_read_unlock+0x44/0xe0 [ 855.389116][T26652] ? _raw_read_unlock+0x28/0x50 [ 855.390403][T26652] ? find_next_iomem_res+0x2e5/0x470 [ 855.391782][T26652] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 855.393386][T26652] ? policy_nodemask+0xea/0x4e0 [ 855.394655][T26652] alloc_pages_mpol_noprof+0x2c9/0x610 [ 855.396070][T26652] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 855.397630][T26652] ? kernel_ident_mapping_init+0x30d/0x390 [ 855.399174][T26652] ? arch_kexec_pre_free_pages+0x300/0x300 [ 855.400692][T26652] get_zeroed_page_noprof+0x14/0x50 [ 855.402058][T26652] machine_kexec_prepare+0x9de/0xcc0 [ 855.403542][T26652] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 855.405330][T26652] ? __pfx_alloc_pgt_page+0x10/0x10 [ 855.406696][T26652] do_kexec_load+0x703/0x8c0 [ 855.407915][T26652] ? __might_fault+0xe3/0x190 [ 855.409188][T26652] ? __pfx_do_kexec_load+0x10/0x10 [ 855.410732][T26652] ? __might_fault+0xe3/0x190 [ 855.412063][T26652] __do_compat_sys_kexec_load+0x2cf/0x330 [ 855.413623][T26652] ? __pfx___do_compat_sys_kexec_load+0x10/0x10 [ 855.415306][T26652] __do_fast_syscall_32+0x73/0x120 [ 855.416620][T26652] do_fast_syscall_32+0x32/0x80 [ 855.417989][T26652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 855.419679][T26652] RIP: 0023:0xf7fe6579 [ 855.420782][T26652] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 855.427173][T26652] RSP: 002b:00000000f576655c EFLAGS: 00000296 ORIG_RAX: 000000000000011b [ 855.429339][T26652] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000002 [ 855.431384][T26652] RDX: 0000000020000000 RSI: 0000000000320000 RDI: 0000000000000000 [ 855.433741][T26652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 855.436622][T26652] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 855.439462][T26652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 855.441964][T26652] [ 855.487374][T26631] fuse: Unknown parameter 'groDp_id' [ 855.590435][T26659] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5962'. [ 855.593149][T26659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5962'. [ 855.669459][T26662] netlink: 'syz.0.5963': attribute type 10 has an invalid length. [ 855.679019][T26662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.683761][T26662] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 855.742718][T26669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5964'. [ 855.746231][ T39] kauditd_printk_skb: 64 callbacks suppressed [ 855.746245][ T39] audit: type=1326 audit(1731411771.785:32405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26668 comm="syz.2.5964" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 855.791142][T26673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5967'. [ 856.149888][ T25] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 856.299852][ T25] usb 10-1: Using ep0 maxpacket: 32 [ 856.302927][ T25] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 856.307713][ T25] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 856.310700][ T25] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 856.313303][ T25] usb 10-1: Product: syz [ 856.314628][ T25] usb 10-1: Manufacturer: syz [ 856.316101][ T25] usb 10-1: SerialNumber: syz [ 856.323929][ T25] usb 10-1: config 0 descriptor?? [ 856.336468][T26689] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 856.779777][ T6013] usb 10-1: USB disconnect, device number 13 [ 856.844296][T26701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5976'. [ 857.021598][ T5311] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 857.333967][T26708] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 857.359430][T26708] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 857.574373][T26716] 9pnet_fd: Insufficient options for proto=fd [ 858.722132][T26753] FAULT_INJECTION: forcing a failure. [ 858.722132][T26753] name failslab, interval 1, probability 0, space 0, times 0 [ 858.726369][T26753] CPU: 3 UID: 0 PID: 26753 Comm: syz.5.5990 Not tainted 6.12.0-rc7-syzkaller #0 [ 858.729382][T26753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 858.732508][T26753] Call Trace: [ 858.733383][T26753] [ 858.734214][T26753] dump_stack_lvl+0x16c/0x1f0 [ 858.735777][T26753] should_fail_ex+0x497/0x5b0 [ 858.737302][T26753] ? fs_reclaim_acquire+0xae/0x150 [ 858.738948][T26753] should_failslab+0xc2/0x120 [ 858.740266][T26753] __kmalloc_noprof+0xcb/0x410 [ 858.741455][T26751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5988'. [ 858.741812][T26753] ? __pfx___mutex_trylock_common+0x10/0x10 [ 858.746428][T26753] ? genl_rcv_msg+0x580/0x800 [ 858.748006][T26753] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 858.750368][T26753] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 858.752005][T26753] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 858.753993][T26753] ? bpf_lsm_capable+0x9/0x10 [ 858.755252][T26753] ? security_capable+0x7e/0x260 [ 858.756850][T26753] ? ns_capable+0xd7/0x110 [ 858.757994][T26753] genl_rcv_msg+0x565/0x800 [ 858.759165][T26753] ? __pfx_genl_rcv_msg+0x10/0x10 [ 858.760426][T26753] ? __pfx_batadv_pre_doit+0x10/0x10 [ 858.761741][T26753] ? __pfx_batadv_netlink_set_hardif+0x10/0x10 [ 858.763309][T26753] ? __pfx_batadv_post_doit+0x10/0x10 [ 858.764682][T26753] netlink_rcv_skb+0x165/0x410 [ 858.765912][T26753] ? __pfx_genl_rcv_msg+0x10/0x10 [ 858.767203][T26753] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 858.768585][T26753] ? down_read+0xc9/0x330 [ 858.769735][T26753] ? __pfx_down_read+0x10/0x10 [ 858.770989][T26753] ? netlink_deliver_tap+0x1ae/0xcf0 [ 858.772379][T26753] genl_rcv+0x28/0x40 [ 858.773393][T26753] netlink_unicast+0x53c/0x7f0 [ 858.774713][T26753] ? __pfx_netlink_unicast+0x10/0x10 [ 858.776358][T26753] ? __phys_addr_symbol+0x30/0x80 [ 858.778084][T26753] ? __check_object_size+0x488/0x710 [ 858.779810][T26753] netlink_sendmsg+0x8b8/0xd70 [ 858.781360][T26753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.783062][T26753] ____sys_sendmsg+0x9ae/0xb40 [ 858.784638][T26753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 858.786370][T26753] ? get_compat_msghdr+0x11b/0x170 [ 858.788140][T26753] ? __pfx___lock_acquire+0x10/0x10 [ 858.789930][T26753] ___sys_sendmsg+0x135/0x1e0 [ 858.791559][T26753] ? __pfx____sys_sendmsg+0x10/0x10 [ 858.793180][T26753] ? lock_acquire+0x2f/0xb0 [ 858.794732][T26753] ? __fget_files+0x40/0x3f0 [ 858.796316][T26753] ? fdget+0x176/0x210 [ 858.797718][T26753] __sys_sendmsg+0x117/0x1f0 [ 858.799289][T26753] ? __pfx___sys_sendmsg+0x10/0x10 [ 858.800739][T26753] ? __fget_files+0x244/0x3f0 [ 858.802002][T26753] __do_fast_syscall_32+0x73/0x120 [ 858.803444][T26753] do_fast_syscall_32+0x32/0x80 [ 858.805105][T26753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 858.807037][T26753] RIP: 0023:0xf73be579 [ 858.808106][T26753] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 858.813104][T26753] RSP: 002b:00000000f56a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 858.815447][T26753] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000300 [ 858.818109][T26753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 858.820362][T26753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 858.822433][T26753] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 858.824485][T26753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 858.827012][T26753] [ 858.830400][T26755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5987'. [ 858.851019][T26758] xt_HMARK: spi-set and port-set can't be combined [ 858.980001][T26764] FAULT_INJECTION: forcing a failure. [ 858.980001][T26764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.983199][T26764] CPU: 3 UID: 0 PID: 26764 Comm: syz.5.5995 Not tainted 6.12.0-rc7-syzkaller #0 [ 858.985385][T26764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 858.987951][T26764] Call Trace: [ 858.988763][T26764] [ 858.989506][T26764] dump_stack_lvl+0x16c/0x1f0 [ 858.990641][T26764] should_fail_ex+0x497/0x5b0 [ 858.991797][T26764] _copy_from_user+0x2e/0xd0 [ 858.992916][T26764] generic_map_update_batch+0x391/0x5f0 [ 858.994269][T26764] ? __pfx_generic_map_update_batch+0x10/0x10 [ 858.995739][T26764] ? __pfx_generic_map_update_batch+0x10/0x10 [ 858.997236][T26764] bpf_map_do_batch+0x576/0x640 [ 858.998505][T26764] __sys_bpf+0x1c9f/0x5780 [ 858.999596][T26764] ? ksys_write+0x21e/0x260 [ 859.000696][T26764] ? __pfx___sys_bpf+0x10/0x10 [ 859.001860][T26764] ? vfs_write+0x306/0x1150 [ 859.002991][T26764] ? __mutex_unlock_slowpath+0x164/0x650 [ 859.004350][T26764] ? fput+0x30/0x390 [ 859.005310][T26764] ? ksys_write+0x1ad/0x260 [ 859.006426][T26764] ? __pfx_ksys_write+0x10/0x10 [ 859.007615][T26764] __ia32_sys_bpf+0x76/0xe0 [ 859.008724][T26764] __do_fast_syscall_32+0x73/0x120 [ 859.009965][T26764] do_fast_syscall_32+0x32/0x80 [ 859.011157][T26764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 859.012715][T26764] RIP: 0023:0xf73be579 [ 859.013720][T26764] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 859.018241][T26764] RSP: 002b:00000000f56a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 859.020222][T26764] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000020000180 [ 859.022142][T26764] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 859.024061][T26764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 859.025950][T26764] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 859.027907][T26764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 859.030112][T26764] [ 859.182540][T26778] vlan1: entered promiscuous mode [ 859.183983][T26778] vlan0: entered promiscuous mode [ 859.187201][T26778] vlan0: left promiscuous mode [ 859.288321][ T5311] Bluetooth: hci0: command 0x0c20 tx timeout [ 859.448490][ T5311] Bluetooth: hci2: command 0x0c1a tx timeout [ 859.492588][T26784] FAULT_INJECTION: forcing a failure. [ 859.492588][T26784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.492606][T26784] CPU: 3 UID: 0 PID: 26784 Comm: syz.3.6002 Not tainted 6.12.0-rc7-syzkaller #0 [ 859.492619][T26784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 859.492625][T26784] Call Trace: [ 859.492629][T26784] [ 859.492634][T26784] dump_stack_lvl+0x16c/0x1f0 [ 859.492656][T26784] should_fail_ex+0x497/0x5b0 [ 859.492670][T26784] _copy_from_user+0x2e/0xd0 [ 859.492684][T26784] get_compat_msghdr+0xa8/0x170 [ 859.492698][T26784] ? __pfx_get_compat_msghdr+0x10/0x10 [ 859.492712][T26784] ? find_held_lock+0x2d/0x110 [ 859.492727][T26784] ___sys_recvmsg+0x193/0x1a0 [ 859.492739][T26784] ? __pfx____sys_recvmsg+0x10/0x10 [ 859.492751][T26784] ? lock_acquire+0x2f/0xb0 [ 859.492765][T26784] ? __fget_files+0x40/0x3f0 [ 859.492781][T26784] ? __pfx___might_resched+0x10/0x10 [ 859.492791][T26784] ? fdget+0x176/0x210 [ 859.492803][T26784] do_recvmmsg+0x51a/0x750 [ 859.492815][T26784] ? __pfx_do_recvmmsg+0x10/0x10 [ 859.492827][T26784] ? __pfx_lock_release+0x10/0x10 [ 859.492842][T26784] ? vfs_write+0x306/0x1150 [ 859.492876][T26784] ? __fget_files+0x244/0x3f0 [ 859.492888][T26784] __sys_recvmmsg+0x21e/0x280 [ 859.492901][T26784] ? __pfx___sys_recvmmsg+0x10/0x10 [ 859.492913][T26784] ? __pfx_ksys_write+0x10/0x10 [ 859.492926][T26784] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 859.492940][T26784] ? lockdep_hardirqs_on+0x7c/0x110 [ 859.492956][T26784] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 859.492973][T26784] __do_fast_syscall_32+0x73/0x120 [ 859.492984][T26784] do_fast_syscall_32+0x32/0x80 [ 859.492995][T26784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 859.493007][T26784] RIP: 0023:0xf749e579 [ 859.493016][T26784] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 859.493026][T26784] RSP: 002b:00000000f578655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 859.493039][T26784] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020001d00 [ 859.493046][T26784] RDX: 0000000003ffffbd RSI: 0000000000000000 RDI: 0000000000000000 [ 859.493069][T26784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 859.493075][T26784] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 859.493081][T26784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 859.493094][T26784] [ 859.530310][ T35] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 859.647103][T26792] FAULT_INJECTION: forcing a failure. [ 859.647103][T26792] name failslab, interval 1, probability 0, space 0, times 0 [ 859.650619][T26792] CPU: 2 UID: 0 PID: 26792 Comm: syz.3.6005 Not tainted 6.12.0-rc7-syzkaller #0 [ 859.652896][T26792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 859.655767][T26792] Call Trace: [ 859.656636][T26792] [ 859.657468][T26792] dump_stack_lvl+0x16c/0x1f0 [ 859.658745][T26792] should_fail_ex+0x497/0x5b0 [ 859.660136][T26792] ? fs_reclaim_acquire+0xae/0x150 [ 859.662027][T26792] should_failslab+0xc2/0x120 [ 859.663764][T26792] __kmalloc_noprof+0xcb/0x410 [ 859.665353][T26792] __list_lru_init+0xee/0x650 [ 859.666577][T26792] alloc_super+0x90d/0xbd0 [ 859.667760][T26792] sget+0x11b/0x6c0 [ 859.668792][T26792] ? __pfx_v9fs_set_super+0x10/0x10 [ 859.670318][T26792] v9fs_mount+0x106/0xa30 [ 859.671519][T26792] ? __pfx_v9fs_mount+0x10/0x10 [ 859.672836][T26792] ? __pfx_v9fs_mount+0x10/0x10 [ 859.674170][T26792] legacy_get_tree+0x109/0x220 [ 859.675465][T26792] vfs_get_tree+0x8f/0x380 [ 859.676703][T26792] path_mount+0x6e1/0x1f10 [ 859.677920][T26792] ? kmem_cache_free+0x152/0x4b0 [ 859.679255][T26792] ? __pfx_path_mount+0x10/0x10 [ 859.680633][T26792] ? putname+0x12e/0x170 [ 859.681788][T26792] __ia32_sys_mount+0x292/0x310 [ 859.683099][T26792] ? __pfx___ia32_sys_mount+0x10/0x10 [ 859.684529][T26792] __do_fast_syscall_32+0x73/0x120 [ 859.685967][T26792] do_fast_syscall_32+0x32/0x80 [ 859.687281][T26792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 859.689341][T26792] RIP: 0023:0xf749e579 [ 859.690608][T26792] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 859.695981][T26792] RSP: 002b:00000000f578655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 859.698275][T26792] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200002c0 [ 859.700464][T26792] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000400 [ 859.702626][T26792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 859.704780][T26792] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 859.706981][T26792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 859.709080][T26792] [ 859.739190][ T35] usb 7-1: not running at top speed; connect to a high speed hub [ 859.741945][ T35] usb 7-1: config 7 has an invalid interface number: 32 but max is 3 [ 859.744145][ T35] usb 7-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 859.746295][ T35] usb 7-1: config 7 has an invalid interface number: 91 but max is 3 [ 859.749226][ T35] usb 7-1: config 7 has an invalid interface number: 118 but max is 3 [ 859.751463][ T35] usb 7-1: config 7 has an invalid interface number: 132 but max is 3 [ 859.753630][ T35] usb 7-1: config 7 has no interface number 0 [ 859.755269][ T35] usb 7-1: config 7 has no interface number 1 [ 859.757073][ T35] usb 7-1: config 7 has no interface number 2 [ 859.758729][ T35] usb 7-1: config 7 has no interface number 3 [ 859.761968][ T35] usb 7-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 859.764775][ T35] usb 7-1: config 7 interface 32 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 859.768171][ T35] usb 7-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 859.770892][ T35] usb 7-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 859.773755][ T35] usb 7-1: config 7 interface 32 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 859.776410][ T35] usb 7-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 859.779668][ T35] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x9, skipping [ 859.782509][ T35] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0xF, skipping [ 859.785276][ T35] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x5, skipping [ 859.788145][ T35] usb 7-1: config 7 interface 91 altsetting 188 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 859.791499][ T35] usb 7-1: config 7 interface 118 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 859.794270][ T35] usb 7-1: config 7 interface 118 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 859.796927][ T35] usb 7-1: config 7 interface 132 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 859.800291][ T35] usb 7-1: config 7 interface 32 has no altsetting 0 [ 859.802026][ T35] usb 7-1: config 7 interface 91 has no altsetting 0 [ 859.803744][ T35] usb 7-1: config 7 interface 118 has no altsetting 0 [ 859.805476][ T35] usb 7-1: config 7 interface 132 has no altsetting 0 [ 859.810432][ T35] usb 7-1: New USB device found, idVendor=1eda, idProduct=2210, bcdDevice=63.55 [ 859.812781][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.814835][ T35] usb 7-1: Product: syz [ 859.815920][ T35] usb 7-1: Manufacturer: syz [ 859.817099][ T35] usb 7-1: SerialNumber: syz [ 859.819734][T26781] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 859.957650][T26798] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6008'. [ 859.991176][T26800] binder: 26799:26800 ioctl c0306201 20000080 returned -11 [ 860.226454][T26810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6010'. [ 860.337180][ T35] usb 7-1: USB disconnect, device number 63 [ 860.609677][T26816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6012'. [ 860.764699][ T39] audit: type=1326 audit(1731411776.801:32406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26818 comm="syz.2.6013" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 861.000680][T26827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6016'. [ 861.018389][T26827] bond1: entered promiscuous mode [ 861.020104][T26825] syzkaller1: entered promiscuous mode [ 861.022214][T26825] syzkaller1: entered allmulticast mode [ 861.027656][T26827] team_slave_1: entered promiscuous mode [ 861.029140][T26827] team_slave_1: entered allmulticast mode [ 861.037440][T26827] team0: Port device team_slave_1 removed [ 861.040425][T26827] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 861.220331][T26835] FAULT_INJECTION: forcing a failure. [ 861.220331][T26835] name failslab, interval 1, probability 0, space 0, times 0 [ 861.224017][T26835] CPU: 0 UID: 0 PID: 26835 Comm: syz.3.6019 Not tainted 6.12.0-rc7-syzkaller #0 [ 861.226476][T26835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 861.229231][T26835] Call Trace: [ 861.230101][T26835] [ 861.230872][T26835] dump_stack_lvl+0x16c/0x1f0 [ 861.232114][T26835] should_fail_ex+0x497/0x5b0 [ 861.233289][T26835] ? fs_reclaim_acquire+0xae/0x150 [ 861.234615][T26835] should_failslab+0xc2/0x120 [ 861.235843][T26835] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 861.237643][T26835] ? vm_area_alloc+0xe0/0x1c0 [ 861.239346][T26835] vm_area_alloc+0xe0/0x1c0 [ 861.241074][T26835] alloc_bprm+0x3d5/0xc50 [ 861.242575][T26835] ? strncpy_from_user+0x1e6/0x2c0 [ 861.244378][T26835] do_execveat_common.isra.0+0x1cd/0x630 [ 861.246374][T26835] __ia32_compat_sys_execveat+0xe0/0x120 [ 861.248262][T26835] __do_fast_syscall_32+0x73/0x120 [ 861.249628][T26835] do_fast_syscall_32+0x32/0x80 [ 861.250955][T26835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 861.253169][T26835] RIP: 0023:0xf749e579 [ 861.254529][T26835] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 861.261373][T26835] RSP: 002b:00000000f578655c EFLAGS: 00000296 ORIG_RAX: 0000000000000166 [ 861.264311][T26835] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000140 [ 861.266556][T26835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 861.268564][T26835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 861.270770][T26835] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 861.272932][T26835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 861.275233][T26835] [ 861.329279][T26836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6018'. [ 861.830637][ T6013] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 861.841175][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6023'. [ 861.983256][ T6013] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 861.989907][ T6013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 861.993269][ T6013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 861.997112][ T6013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 862.000054][ T6013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 862.002534][ T6013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 862.006056][ T6013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 862.008874][ T6013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 862.014179][ T6013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 862.016991][ T6013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 862.019743][ T6013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 862.022799][ T6013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 862.026443][ T6013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 862.030013][ T6013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 862.033921][ T6013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 862.038720][ T6013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 862.044356][ T6013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 862.047414][ T6013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 862.050406][ T6013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 862.053376][ T6013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 862.056259][ T6013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 862.059390][ T6013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 862.061850][ T6013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 862.064973][ T6013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 862.068670][ T6013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 862.072836][ T6013] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 862.076262][ T6013] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 862.079753][ T6013] usb 7-1: Product: syz [ 862.081314][ T6013] usb 7-1: Manufacturer: syz [ 862.082448][ T6013] usb 7-1: SerialNumber: syz [ 862.084530][ T6013] usb 7-1: config 0 descriptor?? [ 862.090607][ T6013] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 862.292660][ T6013] usb 7-1: USB disconnect, device number 64 [ 862.295270][ T6013] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 862.407391][T26853] bridge_slave_0: left allmulticast mode [ 862.409407][T26853] bridge_slave_0: left promiscuous mode [ 862.411333][T26853] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.415333][T26853] bridge_slave_1: left allmulticast mode [ 862.417908][T26853] bridge_slave_1: left promiscuous mode [ 862.420028][T26853] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.424062][T26853] bond0: (slave bond_slave_0): Releasing backup interface [ 862.434136][T26853] bond0: (slave bond_slave_1): Releasing backup interface [ 862.463447][T26853] team0: Port device team_slave_0 removed [ 862.466010][T26853] bond1: (slave team_slave_1): Releasing backup interface [ 862.469607][T26853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.471547][T26853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.474151][T26853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.477958][T26853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.484522][T26853] vxlan0: left allmulticast mode [ 862.486099][T26853] vxlan0: left promiscuous mode [ 862.487490][T26853] bridge0: port 3(vxlan0) entered disabled state [ 862.516421][T26854] geneve2: entered promiscuous mode [ 862.517839][T26854] geneve2: entered allmulticast mode [ 862.520239][T26854] batman_adv: batadv0: Adding interface: geneve2 [ 862.522080][T26854] batman_adv: batadv0: Interface activated: geneve2 [ 862.832744][ T39] audit: type=1326 audit(1731411778.896:32407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26866 comm="syz.2.6029" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 862.838286][ T39] audit: type=1326 audit(1731411778.896:32408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26866 comm="syz.2.6029" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 862.848922][ T39] audit: type=1326 audit(1731411778.896:32409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26866 comm="syz.2.6029" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 862.854699][ T39] audit: type=1326 audit(1731411778.896:32410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26866 comm="syz.2.6029" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 862.860345][ T39] audit: type=1326 audit(1731411778.896:32411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26866 comm="syz.2.6029" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 862.867432][ T39] audit: type=1326 audit(1731411778.896:32412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26866 comm="syz.2.6029" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 862.873493][ T39] audit: type=1326 audit(1731411778.896:32413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26866 comm="syz.2.6029" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 862.879186][ T39] audit: type=1326 audit(1731411778.896:32414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26866 comm="syz.2.6029" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 862.885047][ T39] audit: type=1326 audit(1731411778.896:32415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26866 comm="syz.2.6029" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 863.041680][T26871] FAULT_INJECTION: forcing a failure. [ 863.041680][T26871] name failslab, interval 1, probability 0, space 0, times 0 [ 863.044729][T26871] CPU: 3 UID: 0 PID: 26871 Comm: syz.2.6030 Not tainted 6.12.0-rc7-syzkaller #0 [ 863.046921][T26871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 863.049596][T26871] Call Trace: [ 863.050732][T26871] [ 863.051782][T26871] dump_stack_lvl+0x16c/0x1f0 [ 863.053392][T26871] should_fail_ex+0x497/0x5b0 [ 863.055032][T26871] ? fs_reclaim_acquire+0xae/0x150 [ 863.056805][T26871] should_failslab+0xc2/0x120 [ 863.058482][T26871] __kmalloc_node_track_caller_noprof+0xcf/0x440 [ 863.060623][T26871] ? kstrdup_const+0x63/0x80 [ 863.062188][T26871] kstrdup+0x3c/0x80 [ 863.063458][T26871] kstrdup_const+0x63/0x80 [ 863.064955][T26871] __kernfs_new_node+0x9c/0x890 [ 863.066590][T26871] ? hlock_class+0x4e/0x130 [ 863.068047][T26871] ? __pfx___kernfs_new_node+0x10/0x10 [ 863.069883][T26871] ? map_id_range_down+0x2bb/0x3a0 [ 863.071563][T26871] ? __pfx_map_id_range_down+0x10/0x10 [ 863.073346][T26871] ? __pfx___lock_acquire+0x10/0x10 [ 863.075120][T26871] kernfs_new_node+0x186/0x240 [ 863.076788][T26871] ? net_ns_get_ownership+0xf8/0x1b0 [ 863.078614][T26871] kernfs_create_dir_ns+0x4c/0x150 [ 863.080338][T26871] sysfs_create_dir_ns+0x13b/0x2b0 [ 863.081635][T26871] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 863.083032][T26871] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 863.084364][T26871] ? kobject_add_internal+0x12d/0x990 [ 863.085719][T26871] ? net_namespace+0x12/0x50 [ 863.086982][T26871] ? device_namespace+0x76/0xa0 [ 863.088210][T26871] kobject_add_internal+0x2c8/0x990 [ 863.089529][T26871] kobject_add+0x16f/0x240 [ 863.090647][T26871] ? __pfx_kobject_add+0x10/0x10 [ 863.091895][T26871] ? lock_acquire+0x2f/0xb0 [ 863.093042][T26871] ? get_device_parent+0x11f/0x4e0 [ 863.094335][T26871] ? kobject_put+0xab/0x5a0 [ 863.095433][T26871] ? device_add+0xc02/0x1a70 [ 863.096748][T26871] device_add+0x289/0x1a70 [ 863.098195][T26871] ? __pfx_dev_set_name+0x10/0x10 [ 863.099415][T26871] ? __pfx_device_add+0x10/0x10 [ 863.100588][T26871] ? __init_waitqueue_head+0xca/0x150 [ 863.101888][T26871] netdev_register_kobject+0x187/0x3f0 [ 863.103174][T26871] register_netdevice+0x1473/0x1e20 [ 863.104474][T26871] ? alloc_netdev_mqs+0xf2a/0x12a0 [ 863.105738][T26871] ? __pfx_register_netdevice+0x10/0x10 [ 863.107118][T26871] ? validate_linkmsg+0x6d2/0x9a0 [ 863.108375][T26871] ? rtnl_create_link+0xa2e/0xf10 [ 863.109690][T26871] ? __pfx_batadv_softif_newlink+0x10/0x10 [ 863.111198][T26871] batadv_softif_newlink+0x70/0x90 [ 863.112533][T26871] __rtnl_newlink+0x119c/0x1920 [ 863.113809][T26871] ? __pfx___rtnl_newlink+0x10/0x10 [ 863.115171][T26871] rtnl_newlink+0x67/0xa0 [ 863.116557][T26871] ? __pfx_rtnl_newlink+0x10/0x10 [ 863.118304][T26871] rtnetlink_rcv_msg+0x3c7/0xea0 [ 863.120102][T26871] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.121956][T26871] ? __pfx___lock_acquire+0x10/0x10 [ 863.123319][T26871] netlink_rcv_skb+0x165/0x410 [ 863.124579][T26871] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.126024][T26871] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 863.127451][T26871] ? netlink_deliver_tap+0x1ae/0xcf0 [ 863.128830][T26871] netlink_unicast+0x53c/0x7f0 [ 863.130106][T26871] ? __pfx_netlink_unicast+0x10/0x10 [ 863.131499][T26871] ? __phys_addr_symbol+0x30/0x80 [ 863.132813][T26871] ? __check_object_size+0x488/0x710 [ 863.134200][T26871] netlink_sendmsg+0x8b8/0xd70 [ 863.135455][T26871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.136895][T26871] ____sys_sendmsg+0x9ae/0xb40 [ 863.138150][T26871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 863.139523][T26871] ? get_compat_msghdr+0x11b/0x170 [ 863.140858][T26871] ? __pfx___lock_acquire+0x10/0x10 [ 863.142228][T26871] ___sys_sendmsg+0x135/0x1e0 [ 863.143456][T26871] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.144822][T26871] ? lock_acquire+0x2f/0xb0 [ 863.146034][T26871] ? __fget_files+0x40/0x3f0 [ 863.147264][T26871] ? fdget+0x176/0x210 [ 863.148340][T26871] __sys_sendmsg+0x117/0x1f0 [ 863.149559][T26871] ? __pfx___sys_sendmsg+0x10/0x10 [ 863.150893][T26871] ? __fget_files+0x244/0x3f0 [ 863.152378][T26871] __do_fast_syscall_32+0x73/0x120 [ 863.153725][T26871] do_fast_syscall_32+0x32/0x80 [ 863.154990][T26871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 863.156751][T26871] RIP: 0023:0xf73fe579 [ 863.157822][T26871] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 863.162761][T26871] RSP: 002b:00000000f569c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 863.164908][T26871] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000300 [ 863.167154][T26871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 863.169208][T26871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 863.171241][T26871] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 863.173333][T26871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 863.175370][T26871] [ 863.177498][T26871] kobject: kobject_add_internal failed for batadv0 (error: -12 parent: net) [ 863.374506][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6031'. [ 863.378041][T26873] FAULT_INJECTION: forcing a failure. [ 863.378041][T26873] name failslab, interval 1, probability 0, space 0, times 0 [ 863.388165][T26873] CPU: 2 UID: 0 PID: 26873 Comm: syz.0.6031 Not tainted 6.12.0-rc7-syzkaller #0 [ 863.391210][T26873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 863.395090][T26873] Call Trace: [ 863.396328][T26873] [ 863.397449][T26873] dump_stack_lvl+0x16c/0x1f0 [ 863.399209][T26873] should_fail_ex+0x497/0x5b0 [ 863.400944][T26873] ? fs_reclaim_acquire+0xae/0x150 [ 863.402830][T26873] should_failslab+0xc2/0x120 [ 863.404592][T26873] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 863.406555][T26873] ? __kernfs_new_node+0xd3/0x890 [ 863.408412][T26873] __kernfs_new_node+0xd3/0x890 [ 863.410244][T26873] ? __pfx___kernfs_new_node+0x10/0x10 [ 863.412265][T26873] ? __pfx_lock_release+0x10/0x10 [ 863.414158][T26873] ? kernfs_add_one+0x39d/0x520 [ 863.415981][T26873] ? up_write+0x1b2/0x520 [ 863.417603][T26873] kernfs_new_node+0x186/0x240 [ 863.419372][T26873] __kernfs_create_file+0x53/0x350 [ 863.421319][T26873] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 863.422845][T26873] internal_create_group+0x565/0xe50 [ 863.424308][T26873] ? __pfx_internal_create_group+0x10/0x10 [ 863.425878][T26873] ? kernfs_create_link+0x1bd/0x240 [ 863.427263][T26873] internal_create_groups+0x9d/0x150 [ 863.428651][T26873] device_add+0x6d3/0x1a70 [ 863.429847][T26873] ? __pfx_device_add+0x10/0x10 [ 863.431514][T26873] ? __init_waitqueue_head+0xca/0x150 [ 863.433501][T26873] netdev_register_kobject+0x187/0x3f0 [ 863.435469][T26873] register_netdevice+0x1473/0x1e20 [ 863.437370][T26873] ? __pfx_register_netdevice+0x10/0x10 [ 863.439584][T26873] ? dev_addr_mod+0x2c9/0x390 [ 863.441337][T26873] ? __pfx_team_newlink+0x10/0x10 [ 863.443274][T26873] team_newlink+0x92/0x160 [ 863.444928][T26873] ? __pfx_team_newlink+0x10/0x10 [ 863.446759][T26873] ? rtnl_create_link+0xa2e/0xf10 [ 863.448602][T26873] __rtnl_newlink+0x119c/0x1920 [ 863.450394][T26873] ? __pfx___rtnl_newlink+0x10/0x10 [ 863.452398][T26873] rtnl_newlink+0x67/0xa0 [ 863.453978][T26873] ? __pfx_rtnl_newlink+0x10/0x10 [ 863.455390][T26873] rtnetlink_rcv_msg+0x3c7/0xea0 [ 863.456681][T26873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.458117][T26873] ? __pfx___dev_queue_xmit+0x10/0x10 [ 863.459545][T26873] netlink_rcv_skb+0x165/0x410 [ 863.461174][T26873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.463150][T26873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 863.465105][T26873] ? netlink_deliver_tap+0x1ae/0xcf0 [ 863.467070][T26873] netlink_unicast+0x53c/0x7f0 [ 863.468798][T26873] ? __pfx_netlink_unicast+0x10/0x10 [ 863.470651][T26873] ? __phys_addr_symbol+0x30/0x80 [ 863.472481][T26873] ? __check_object_size+0x488/0x710 [ 863.473897][T26873] netlink_sendmsg+0x8b8/0xd70 [ 863.475157][T26873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.476537][T26873] ____sys_sendmsg+0x9ae/0xb40 [ 863.477808][T26873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 863.479179][T26873] ? get_compat_msghdr+0x11b/0x170 [ 863.480820][T26873] ? __pfx___lock_acquire+0x10/0x10 [ 863.482702][T26873] ___sys_sendmsg+0x135/0x1e0 [ 863.484446][T26873] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.486064][T26873] ? lock_acquire+0x2f/0xb0 [ 863.487252][T26873] ? __fget_files+0x40/0x3f0 [ 863.488459][T26873] ? fdget+0x176/0x210 [ 863.489551][T26873] __sys_sendmsg+0x117/0x1f0 [ 863.490937][T26873] ? __pfx___sys_sendmsg+0x10/0x10 [ 863.492285][T26873] ? __fget_files+0x244/0x3f0 [ 863.493544][T26873] __do_fast_syscall_32+0x73/0x120 [ 863.494887][T26873] do_fast_syscall_32+0x32/0x80 [ 863.496155][T26873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 863.497803][T26873] RIP: 0023:0xf7fe6579 [ 863.498870][T26873] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 863.505290][T26873] RSP: 002b:00000000f576655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 863.508083][T26873] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000040 [ 863.510737][T26873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 863.513407][T26873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 863.516064][T26873] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 863.518723][T26873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 863.521391][T26873] [ 863.565464][T26879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6033'. [ 863.642702][T26886] vlan0: entered promiscuous mode [ 863.649921][T26886] team0: Port device vlan0 added [ 863.758847][T26893] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 863.772960][T26894] qnx6: unable to read the first superblock [ 863.802565][T26895] FAULT_INJECTION: forcing a failure. [ 863.802565][T26895] name failslab, interval 1, probability 0, space 0, times 0 [ 863.806164][T26895] CPU: 1 UID: 0 PID: 26895 Comm: syz.5.6032 Not tainted 6.12.0-rc7-syzkaller #0 [ 863.808723][T26895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 863.811643][T26895] Call Trace: [ 863.812544][T26895] [ 863.813354][T26895] dump_stack_lvl+0x16c/0x1f0 [ 863.814618][T26895] should_fail_ex+0x497/0x5b0 [ 863.815869][T26895] ? fs_reclaim_acquire+0xae/0x150 [ 863.817270][T26895] should_failslab+0xc2/0x120 [ 863.818569][T26895] __kmalloc_noprof+0xcb/0x410 [ 863.819885][T26895] io_alloc_async_data+0x9d/0x150 [ 863.821273][T26895] io_prep_rw+0x30d/0xb70 [ 863.822453][T26895] io_submit_sqes+0x8aa/0x2530 [ 863.823759][T26895] __do_sys_io_uring_enter+0xc0f/0x1170 [ 863.825254][T26895] ? __pfx___schedule+0x10/0x10 [ 863.826549][T26895] ? __fget_files+0x244/0x3f0 [ 863.827861][T26895] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 863.829464][T26895] ? fput+0x30/0x390 [ 863.830610][T26895] ? ksys_write+0x1ad/0x260 [ 863.831839][T26895] __do_fast_syscall_32+0x73/0x120 [ 863.833228][T26895] do_fast_syscall_32+0x32/0x80 [ 863.834517][T26895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 863.836170][T26895] RIP: 0023:0xf73be579 [ 863.837326][T26895] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 863.842684][T26895] RSP: 002b:00000000f566455c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 863.844883][T26895] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000000047f6 [ 863.847013][T26895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 863.849341][T26895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 863.851478][T26895] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 863.853578][T26895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 863.855736][T26895] [ 863.893262][T26897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6040'. [ 863.916827][T26900] FAULT_INJECTION: forcing a failure. [ 863.916827][T26900] name failslab, interval 1, probability 0, space 0, times 0 [ 863.920789][T26900] CPU: 3 UID: 0 PID: 26900 Comm: syz.0.6041 Not tainted 6.12.0-rc7-syzkaller #0 [ 863.923144][T26900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 863.925896][T26900] Call Trace: [ 863.926774][T26900] [ 863.927545][T26900] dump_stack_lvl+0x16c/0x1f0 [ 863.929037][T26900] should_fail_ex+0x497/0x5b0 [ 863.930589][T26900] ? fs_reclaim_acquire+0xae/0x150 [ 863.932491][T26900] should_failslab+0xc2/0x120 [ 863.934021][T26900] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 863.935511][T26900] ? sctp_chunkify+0x51/0x2d0 [ 863.936874][T26900] sctp_chunkify+0x51/0x2d0 [ 863.938128][T26900] _sctp_make_chunk+0x148/0x270 [ 863.939640][T26900] sctp_make_datafrag_empty+0x15c/0x220 [ 863.941398][T26900] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 863.942974][T26900] sctp_datamsg_from_user+0x590/0x1320 [ 863.944461][T26900] sctp_sendmsg_to_asoc+0xafd/0x1ad0 [ 863.945853][T26900] ? sctp_assoc_add_peer+0x254/0x14b0 [ 863.947251][T26900] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 863.948952][T26900] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 863.950923][T26900] ? mark_held_locks+0x9f/0xe0 [ 863.952690][T26900] ? sctp_sendmsg+0x112f/0x1f10 [ 863.954337][T26900] sctp_sendmsg+0x129c/0x1f10 [ 863.955562][T26900] ? __pfx___lock_acquire+0x10/0x10 [ 863.956960][T26900] ? __pfx_sctp_sendmsg+0x10/0x10 [ 863.958676][T26900] ? __pfx_aa_sk_perm+0x10/0x10 [ 863.960335][T26900] ? __pfx_sctp_sendmsg+0x10/0x10 [ 863.961965][T26900] inet_sendmsg+0x119/0x140 [ 863.963211][T26900] __sys_sendto+0x426/0x4d0 [ 863.964439][T26900] ? __pfx___sys_sendto+0x10/0x10 [ 863.965785][T26900] ? ksys_write+0x1ad/0x260 [ 863.966976][T26900] ? __pfx_ksys_write+0x10/0x10 [ 863.968245][T26900] __ia32_sys_sendto+0xdd/0x1b0 [ 863.969529][T26900] ? lockdep_hardirqs_on+0x7c/0x110 [ 863.970962][T26900] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 863.972679][T26900] __do_fast_syscall_32+0x73/0x120 [ 863.974104][T26900] do_fast_syscall_32+0x32/0x80 [ 863.975443][T26900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 863.977090][T26900] RIP: 0023:0xf7fe6579 [ 863.978161][T26900] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 863.983093][T26900] RSP: 002b:00000000f576655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 863.985236][T26900] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 863.987542][T26900] RDX: 0000000000034000 RSI: 0000000000000041 RDI: 0000000020000380 [ 863.989720][T26900] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 863.991805][T26900] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 863.993838][T26900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 863.995862][T26900] [ 864.069823][T26905] netlink: 'syz.0.6043': attribute type 4 has an invalid length. [ 864.071923][T26905] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6043'. [ 864.109560][T26907] bond0: (slave batadv0): Releasing backup interface [ 864.137150][T26907] team0: Port device vlan0 removed [ 864.170650][T26910] FAULT_INJECTION: forcing a failure. [ 864.170650][T26910] name failslab, interval 1, probability 0, space 0, times 0 [ 864.170668][T26910] CPU: 3 UID: 0 PID: 26910 Comm: syz.0.6045 Not tainted 6.12.0-rc7-syzkaller #0 [ 864.170681][T26910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 864.170688][T26910] Call Trace: [ 864.170692][T26910] [ 864.170696][T26910] dump_stack_lvl+0x16c/0x1f0 [ 864.170714][T26910] should_fail_ex+0x497/0x5b0 [ 864.170725][T26910] ? fs_reclaim_acquire+0xae/0x150 [ 864.170739][T26910] should_failslab+0xc2/0x120 [ 864.170755][T26910] __kmalloc_node_track_caller_noprof+0xcf/0x440 [ 864.170770][T26910] ? copy_array+0x85/0xe0 [ 864.170782][T26910] krealloc_noprof+0x5d/0x130 [ 864.170793][T26910] copy_array+0x85/0xe0 [ 864.170803][T26910] copy_verifier_state+0x9b4/0xeb0 [ 864.170816][T26910] ? kasan_save_track+0x14/0x30 [ 864.170836][T26910] push_stack+0x1d9/0x550 [ 864.170849][T26910] check_cond_jmp_op+0xdc7/0x8140 [ 864.170865][T26910] ? __pfx_check_mem_access+0x10/0x10 [ 864.170885][T26910] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 864.170901][T26910] ? is_reg64.constprop.0+0x120/0x380 [ 864.170915][T26910] do_check_common+0x8af1/0xd6e0 [ 864.170937][T26910] ? __pfx_mark_fastcall_pattern_for_call+0x10/0x10 [ 864.170954][T26910] ? __pfx_do_check_common+0x10/0x10 [ 864.170986][T26910] ? kvfree+0x47/0x50 [ 864.171008][T26910] ? check_cfg+0x400/0x840 [ 864.171033][T26910] bpf_check+0x788f/0xc970 [ 864.171072][T26910] ? __pfx_bpf_check+0x10/0x10 [ 864.171098][T26910] ? find_held_lock+0x2d/0x110 [ 864.171121][T26910] ? ktime_get_with_offset+0x13a/0x240 [ 864.171142][T26910] ? trace_lock_acquire+0x14a/0x1d0 [ 864.171154][T26910] ? ktime_get_with_offset+0x13a/0x240 [ 864.171168][T26910] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 864.171181][T26910] ? lockdep_hardirqs_on+0x7c/0x110 [ 864.171200][T26910] ? bpf_obj_name_cpy+0x156/0x1b0 [ 864.171215][T26910] bpf_prog_load+0xe3f/0x2670 [ 864.171231][T26910] ? __pfx_bpf_prog_load+0x10/0x10 [ 864.171244][T26910] ? find_held_lock+0x2d/0x110 [ 864.171257][T26910] ? __might_fault+0x13b/0x190 [ 864.171271][T26910] ? __might_fault+0xe3/0x190 [ 864.171284][T26910] __sys_bpf+0x4c8c/0x5780 [ 864.171297][T26910] ? ksys_write+0x21e/0x260 [ 864.171309][T26910] ? __pfx___sys_bpf+0x10/0x10 [ 864.171323][T26910] ? vfs_write+0x306/0x1150 [ 864.171336][T26910] ? __mutex_unlock_slowpath+0x164/0x650 [ 864.171352][T26910] ? fput+0x30/0x390 [ 864.171366][T26910] ? ksys_write+0x1ad/0x260 [ 864.171377][T26910] ? __pfx_ksys_write+0x10/0x10 [ 864.171390][T26910] __ia32_sys_bpf+0x76/0xe0 [ 864.171415][T26910] __do_fast_syscall_32+0x73/0x120 [ 864.171427][T26910] do_fast_syscall_32+0x32/0x80 [ 864.171437][T26910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 864.171449][T26910] RIP: 0023:0xf7fe6579 [ 864.171458][T26910] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 864.171469][T26910] RSP: 002b:00000000f576655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 864.171480][T26910] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000840 [ 864.171487][T26910] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 864.171493][T26910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 864.171500][T26910] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 864.171506][T26910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 864.171518][T26910] [ 864.280857][T26920] openvswitch: netlink: Invalid VLAN frame [ 864.420948][T26923] FAULT_INJECTION: forcing a failure. [ 864.420948][T26923] name failslab, interval 1, probability 0, space 0, times 0 [ 864.420975][T26923] CPU: 3 UID: 0 PID: 26923 Comm: syz.0.6048 Not tainted 6.12.0-rc7-syzkaller #0 [ 864.420997][T26923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 864.421028][T26923] Call Trace: [ 864.421035][T26923] [ 864.421042][T26923] dump_stack_lvl+0x16c/0x1f0 [ 864.421067][T26923] should_fail_ex+0x497/0x5b0 [ 864.421086][T26923] ? fs_reclaim_acquire+0xae/0x150 [ 864.421110][T26923] should_failslab+0xc2/0x120 [ 864.421136][T26923] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 864.421160][T26923] ? alloc_empty_file+0x73/0x1e0 [ 864.421189][T26923] alloc_empty_file+0x73/0x1e0 [ 864.421214][T26923] alloc_file_pseudo+0x13d/0x200 [ 864.421240][T26923] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 864.421274][T26923] __anon_inode_getfile+0x136/0x3c0 [ 864.421302][T26923] ? __pfx___anon_inode_getfile+0x10/0x10 [ 864.421334][T26923] sync_file_alloc+0x65/0x160 [ 864.421356][T26923] sync_file_merge.constprop.0+0x83/0x200 [ 864.421380][T26923] ? __pfx_sync_file_merge.constprop.0+0x10/0x10 [ 864.421405][T26923] ? lock_acquire+0x2f/0xb0 [ 864.421430][T26923] ? __fget_files+0x40/0x3f0 [ 864.421452][T26923] ? __fget_files+0x244/0x3f0 [ 864.421475][T26923] sync_file_ioctl+0x8ae/0xbe0 [ 864.421497][T26923] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 864.421528][T26923] ? __pfx_sync_file_ioctl+0x10/0x10 [ 864.421570][T26923] ? __fget_files+0x244/0x3f0 [ 864.421591][T26923] ? __pfx_sync_file_ioctl+0x10/0x10 [ 864.421615][T26923] compat_ptr_ioctl+0x6b/0xa0 [ 864.421640][T26923] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 864.421665][T26923] __do_compat_sys_ioctl+0x259/0x2b0 [ 864.421694][T26923] __do_fast_syscall_32+0x73/0x120 [ 864.421715][T26923] do_fast_syscall_32+0x32/0x80 [ 864.421733][T26923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 864.421753][T26923] RIP: 0023:0xf7fe6579 [ 864.421769][T26923] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 864.421786][T26923] RSP: 002b:00000000f574555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 864.421806][T26923] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c0303e03 [ 864.421819][T26923] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 864.421831][T26923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 864.421842][T26923] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 864.421858][T26923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 864.421882][T26923] [ 864.586933][T26928] 9pnet_fd: p9_fd_create_tcp (26928): problem connecting socket to 127.0.0.1 [ 864.610547][ T1409] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.003260][T26945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6054'. [ 865.624198][T26951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6056'. [ 865.636439][T26954] FAULT_INJECTION: forcing a failure. [ 865.636439][T26954] name failslab, interval 1, probability 0, space 0, times 0 [ 865.640464][T26954] CPU: 2 UID: 0 PID: 26954 Comm: syz.2.6057 Not tainted 6.12.0-rc7-syzkaller #0 [ 865.642891][T26954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 865.645641][T26954] Call Trace: [ 865.646636][T26954] [ 865.647397][T26954] dump_stack_lvl+0x16c/0x1f0 [ 865.648668][T26954] should_fail_ex+0x497/0x5b0 [ 865.649988][T26954] ? fs_reclaim_acquire+0xae/0x150 [ 865.651393][T26954] should_failslab+0xc2/0x120 [ 865.652639][T26954] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 865.653981][T26954] ? __kernfs_new_node+0xd3/0x890 [ 865.655238][T26954] __kernfs_new_node+0xd3/0x890 [ 865.656520][T26954] ? __pfx___kernfs_new_node+0x10/0x10 [ 865.658002][T26954] ? __pfx_lock_release+0x10/0x10 [ 865.659354][T26954] ? kernfs_add_one+0x39d/0x520 [ 865.660675][T26954] ? up_write+0x1b2/0x520 [ 865.661848][T26954] kernfs_new_node+0x186/0x240 [ 865.663138][T26954] __kernfs_create_file+0x53/0x350 [ 865.664563][T26954] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 865.666055][T26954] sysfs_merge_group+0x1b1/0x340 [ 865.667876][T26954] ? __pfx_sysfs_merge_group+0x10/0x10 [ 865.669891][T26954] ? __pfx_dev_add_physical_location+0x10/0x10 [ 865.672097][T26954] ? bus_to_subsys+0x12d/0x160 [ 865.673838][T26954] dpm_sysfs_add+0x237/0x280 [ 865.675502][T26954] device_add+0x9a8/0x1a70 [ 865.677120][T26954] ? __pfx_device_add+0x10/0x10 [ 865.678838][T26954] ? kstrdup+0x5c/0x80 [ 865.680315][T26954] device_create_groups_vargs+0x1f8/0x270 [ 865.682352][T26954] device_create+0xe9/0x130 [ 865.683949][T26954] ? __pfx_device_create+0x10/0x10 [ 865.685782][T26954] ? __pfx_vsnprintf+0x10/0x10 [ 865.687436][T26954] bdi_register_va+0x116/0x820 [ 865.689142][T26954] ? __pfx_bdi_register_va+0x10/0x10 [ 865.691072][T26954] ? do_init_timer+0xc9/0x110 [ 865.692545][T26954] super_setup_bdi_name+0x100/0x250 [ 865.693950][T26954] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 865.695471][T26954] ? shrinker_register+0x1a8/0x260 [ 865.696919][T26954] afs_get_tree+0xc1f/0x14c0 [ 865.698170][T26954] ? security_capable+0x7e/0x260 [ 865.699489][T26954] vfs_get_tree+0x8f/0x380 [ 865.700679][T26954] path_mount+0x6e1/0x1f10 [ 865.701881][T26954] ? kmem_cache_free+0x152/0x4b0 [ 865.703202][T26954] ? __pfx_path_mount+0x10/0x10 [ 865.704506][T26954] ? putname+0x12e/0x170 [ 865.705651][T26954] __ia32_sys_mount+0x292/0x310 [ 865.707274][T26954] ? __pfx___ia32_sys_mount+0x10/0x10 [ 865.709257][T26954] __do_fast_syscall_32+0x73/0x120 [ 865.711148][T26954] do_fast_syscall_32+0x32/0x80 [ 865.712974][T26954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 865.715327][T26954] RIP: 0023:0xf73fe579 [ 865.716842][T26954] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 865.723620][T26954] RSP: 002b:00000000f56e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 865.726569][T26954] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000020000080 [ 865.729464][T26954] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000020000400 [ 865.732411][T26954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 865.735306][T26954] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 865.738265][T26954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 865.741179][T26954] [ 865.998127][ T30] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 866.237899][ T30] usb 7-1: not running at top speed; connect to a high speed hub [ 866.243531][ T30] usb 7-1: config 7 has an invalid interface number: 32 but max is 3 [ 866.245652][ T30] usb 7-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 866.248018][ T30] usb 7-1: config 7 has an invalid interface number: 91 but max is 3 [ 866.250070][ T30] usb 7-1: config 7 has an invalid interface number: 118 but max is 3 [ 866.252877][ T30] usb 7-1: config 7 has an invalid interface number: 132 but max is 3 [ 866.255465][ T30] usb 7-1: config 7 has no interface number 0 [ 866.260127][ T30] usb 7-1: config 7 has no interface number 1 [ 866.262078][ T30] usb 7-1: config 7 has no interface number 2 [ 866.264276][ T30] usb 7-1: config 7 has no interface number 3 [ 866.316944][T26971] netlink: 'syz.3.6062': attribute type 10 has an invalid length. [ 866.324400][T26971] team0: Port device netdevsim0 added [ 866.327638][T26971] netlink: 'syz.3.6062': attribute type 10 has an invalid length. [ 866.332955][T26971] team0: Port device netdevsim0 removed [ 866.336228][T26971] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 866.391437][T26974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6063'. [ 866.470768][ T30] usb 7-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 866.471511][ T5311] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 866.473630][ T30] usb 7-1: config 7 interface 32 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 866.479852][ T30] usb 7-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 866.482579][ T30] usb 7-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 866.485473][ T30] usb 7-1: config 7 interface 32 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 866.488320][ T30] usb 7-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 866.491183][ T30] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x9, skipping [ 866.579682][ T30] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0xF, skipping [ 866.582718][ T30] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x5, skipping [ 866.585387][ T30] usb 7-1: config 7 interface 91 altsetting 188 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 866.588576][ T30] usb 7-1: config 7 interface 118 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 866.591302][ T30] usb 7-1: config 7 interface 118 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 866.593676][ T30] usb 7-1: config 7 interface 132 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 866.596207][ T30] usb 7-1: config 7 interface 32 has no altsetting 0 [ 866.597812][ T30] usb 7-1: config 7 interface 91 has no altsetting 0 [ 866.599416][ T30] usb 7-1: config 7 interface 118 has no altsetting 0 [ 866.601031][ T30] usb 7-1: config 7 interface 132 has no altsetting 0 [ 866.604202][ T30] usb 7-1: New USB device found, idVendor=1eda, idProduct=2210, bcdDevice=63.55 [ 866.606550][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.608642][ T30] usb 7-1: Product: syz [ 866.609736][ T30] usb 7-1: Manufacturer: syz [ 866.610939][ T30] usb 7-1: SerialNumber: syz [ 866.613933][T26956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 866.991914][ T30] usb 7-1: USB disconnect, device number 65 [ 868.127013][T27008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6072'. [ 868.209774][T27010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6073'. [ 868.685308][T27015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6075'. [ 868.976148][ T6013] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 869.055217][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 869.055227][ T39] audit: type=1326 audit(1731411785.153:32421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7fc00000 [ 869.068368][ T39] audit: type=1326 audit(1731411785.173:32422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749e579 code=0x7fc00000 [ 869.127953][ T39] audit: type=1326 audit(1731411785.234:32423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749e579 code=0x7fc00000 [ 869.136082][ T6013] usb 7-1: not running at top speed; connect to a high speed hub [ 869.139888][ T6013] usb 7-1: config 7 has an invalid interface number: 32 but max is 3 [ 869.142766][ T6013] usb 7-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 869.145936][ T6013] usb 7-1: config 7 has an invalid interface number: 91 but max is 3 [ 869.148814][ T6013] usb 7-1: config 7 has an invalid interface number: 118 but max is 3 [ 869.151530][ T6013] usb 7-1: config 7 has an invalid interface number: 132 but max is 3 [ 869.154063][ T6013] usb 7-1: config 7 has no interface number 0 [ 869.156244][ T6013] usb 7-1: config 7 has no interface number 1 [ 869.158489][ T6013] usb 7-1: config 7 has no interface number 2 [ 869.160685][ T6013] usb 7-1: config 7 has no interface number 3 [ 869.162713][ T6013] usb 7-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 869.166357][ T6013] usb 7-1: config 7 interface 32 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 869.170246][ T6013] usb 7-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 869.174127][ T6013] usb 7-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 869.177657][ T6013] usb 7-1: config 7 interface 32 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 869.181288][ T6013] usb 7-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 869.185150][ T6013] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x9, skipping [ 869.187458][ T39] audit: type=1326 audit(1731411785.294:32424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749e579 code=0x7fc00000 [ 869.188903][ T6013] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0xF, skipping [ 869.188927][ T6013] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x5, skipping [ 869.204167][ T6013] usb 7-1: config 7 interface 91 altsetting 188 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 869.208942][ T6013] usb 7-1: config 7 interface 118 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 869.212107][ T6013] usb 7-1: config 7 interface 118 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 869.215425][ T6013] usb 7-1: config 7 interface 132 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 869.219277][ T6013] usb 7-1: config 7 interface 32 has no altsetting 0 [ 869.221703][ T6013] usb 7-1: config 7 interface 91 has no altsetting 0 [ 869.224134][ T6013] usb 7-1: config 7 interface 118 has no altsetting 0 [ 869.226684][ T6013] usb 7-1: config 7 interface 132 has no altsetting 0 [ 869.231371][ T6013] usb 7-1: New USB device found, idVendor=1eda, idProduct=2210, bcdDevice=63.55 [ 869.234736][ T6013] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.236938][ T6013] usb 7-1: Product: syz [ 869.238421][ T6013] usb 7-1: Manufacturer: syz [ 869.239964][ T6013] usb 7-1: SerialNumber: syz [ 869.242728][T27017] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.246963][ T39] audit: type=1326 audit(1731411785.355:32425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749e579 code=0x7fc00000 [ 869.306650][ T39] audit: type=1326 audit(1731411785.415:32426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749e579 code=0x7fc00000 [ 869.366078][ T39] audit: type=1326 audit(1731411785.476:32427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749e579 code=0x7fc00000 [ 869.425766][ T39] audit: type=1326 audit(1731411785.536:32428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749e579 code=0x7fc00000 [ 869.485664][ T39] audit: type=1326 audit(1731411785.596:32429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749e579 code=0x7fc00000 [ 869.510411][ T6013] usb 7-1: USB disconnect, device number 66 [ 869.544867][ T39] audit: type=1326 audit(1731411785.657:32430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749e579 code=0x7fc00000 [ 869.979094][T27033] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 870.667648][T27047] FAULT_INJECTION: forcing a failure. [ 870.667648][T27047] name failslab, interval 1, probability 0, space 0, times 0 [ 870.671001][T27047] CPU: 1 UID: 0 PID: 27047 Comm: syz.3.6085 Not tainted 6.12.0-rc7-syzkaller #0 [ 870.673518][T27047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 870.676269][T27047] Call Trace: [ 870.677161][T27047] [ 870.677941][T27047] dump_stack_lvl+0x16c/0x1f0 [ 870.679202][T27047] should_fail_ex+0x497/0x5b0 [ 870.680437][T27047] ? fs_reclaim_acquire+0xae/0x150 [ 870.681836][T27047] should_failslab+0xc2/0x120 [ 870.683068][T27047] __kmalloc_cache_noprof+0x6b/0x310 [ 870.684507][T27047] ? alloc_super+0x52/0xbd0 [ 870.685715][T27047] alloc_super+0x52/0xbd0 [ 870.686849][T27047] ? lock_acquire+0x2f/0xb0 [ 870.688036][T27047] ? sget+0xe2/0x6c0 [ 870.689130][T27047] sget+0x11b/0x6c0 [ 870.690384][T27047] ? __pfx_v9fs_set_super+0x10/0x10 [ 870.692026][T27047] v9fs_mount+0x106/0xa30 [ 870.693236][T27047] ? __pfx_v9fs_mount+0x10/0x10 [ 870.694587][T27047] ? __pfx_v9fs_mount+0x10/0x10 [ 870.696046][T27047] legacy_get_tree+0x109/0x220 [ 870.697360][T27047] vfs_get_tree+0x8f/0x380 [ 870.698565][T27047] path_mount+0x6e1/0x1f10 [ 870.700058][T27047] ? kmem_cache_free+0x152/0x4b0 [ 870.701892][T27047] ? __pfx_path_mount+0x10/0x10 [ 870.703455][T27047] ? putname+0x12e/0x170 [ 870.704742][T27047] __ia32_sys_mount+0x292/0x310 [ 870.706328][T27047] ? __pfx___ia32_sys_mount+0x10/0x10 [ 870.708082][T27047] __do_fast_syscall_32+0x73/0x120 [ 870.709761][T27047] do_fast_syscall_32+0x32/0x80 [ 870.711361][T27047] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 870.713013][T27047] RIP: 0023:0xf749e579 [ 870.714115][T27047] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 870.719145][T27047] RSP: 002b:00000000f578655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 870.721289][T27047] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000080 [ 870.723254][T27047] RDX: 00000000200000c0 RSI: 0000000000000110 RDI: 0000000020000280 [ 870.725306][T27047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 870.727298][T27047] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 870.729400][T27047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 870.731839][T27047] [ 870.924496][T27053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6086'. [ 872.584189][T27096] fuse: Bad value for 'fd' [ 873.057586][T27119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6105'. [ 873.474411][T27126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6110'. [ 873.479610][T27126] openvswitch: : Dropping previously announced user features [ 873.642011][T27132] wireguard0: entered promiscuous mode [ 873.644245][T27132] wireguard0: entered allmulticast mode [ 873.806266][ T5311] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 874.081168][T27150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6116'. [ 874.649225][T27158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6119'. [ 875.091637][T27163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6120'. [ 875.369782][T27170] ufs: Invalid option: ".».X;y¸ñ" or missing value [ 875.373051][T27170] ufs: wrong mount options [ 875.381242][T27170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6122'. [ 875.733024][T27177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6123'. [ 875.794410][T27181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 875.857839][T27184] tmpfs: Bad value for 'mpol' [ 875.967434][T27165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 876.422541][T27234] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6132'. [ 876.431313][T27234] netlink: 'syz.3.6132': attribute type 4 has an invalid length. [ 876.763015][ T35] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 876.931980][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 876.935778][ T35] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 876.950811][ T35] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 876.953958][ T35] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 876.956042][ T35] usb 7-1: Product: syz [ 876.957139][ T35] usb 7-1: Manufacturer: syz [ 876.958344][ T35] usb 7-1: SerialNumber: syz [ 876.963894][ T35] usb 7-1: config 0 descriptor?? [ 876.966043][T27239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 876.982615][T27246] syzkaller1: entered promiscuous mode [ 876.984085][T27246] syzkaller1: entered allmulticast mode [ 878.438635][T27266] netlink: 'syz.5.6143': attribute type 10 has an invalid length. [ 878.477862][T27266] team0: Port device wlan1 added [ 879.270949][ T5311] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 879.863174][ T5989] usb 7-1: USB disconnect, device number 67 [ 879.953746][T27297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6153'. [ 880.231623][ T5989] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 880.382057][ T5989] usb 7-1: not running at top speed; connect to a high speed hub [ 880.385493][ T5989] usb 7-1: config 7 has an invalid interface number: 32 but max is 3 [ 880.387773][ T5989] usb 7-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 880.390152][ T5989] usb 7-1: config 7 has an invalid interface number: 91 but max is 3 [ 880.393094][ T5989] usb 7-1: config 7 has an invalid interface number: 118 but max is 3 [ 880.396511][ T5989] usb 7-1: config 7 has an invalid interface number: 132 but max is 3 [ 880.399227][ T5989] usb 7-1: config 7 has no interface number 0 [ 880.401274][ T5989] usb 7-1: config 7 has no interface number 1 [ 880.403545][ T5989] usb 7-1: config 7 has no interface number 2 [ 880.405851][ T5989] usb 7-1: config 7 has no interface number 3 [ 880.408270][ T5989] usb 7-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 880.411936][ T5989] usb 7-1: config 7 interface 32 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 880.414956][ T5989] usb 7-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 880.417786][ T5989] usb 7-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 880.420975][ T5989] usb 7-1: config 7 interface 32 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 880.424760][ T5989] usb 7-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 880.428114][ T5989] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x9, skipping [ 880.431200][ T5989] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0xF, skipping [ 880.434293][ T5989] usb 7-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x5, skipping [ 880.437140][ T5989] usb 7-1: config 7 interface 91 altsetting 188 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 880.440692][ T5989] usb 7-1: config 7 interface 118 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 880.444993][ T5989] usb 7-1: config 7 interface 118 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 880.449168][ T5989] usb 7-1: config 7 interface 132 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 880.452207][ T5989] usb 7-1: config 7 interface 32 has no altsetting 0 [ 880.454337][ T5989] usb 7-1: config 7 interface 91 has no altsetting 0 [ 880.456452][ T5989] usb 7-1: config 7 interface 118 has no altsetting 0 [ 880.459114][ T5989] usb 7-1: config 7 interface 132 has no altsetting 0 [ 880.469930][ T5989] usb 7-1: New USB device found, idVendor=1eda, idProduct=2210, bcdDevice=63.55 [ 880.472489][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.478614][T27311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6157'. [ 880.483708][ T5989] usb 7-1: Product: syz [ 880.485103][ T5989] usb 7-1: Manufacturer: syz [ 880.486788][ T5989] usb 7-1: SerialNumber: syz [ 880.491620][T27288] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 880.779548][ T5989] usb 7-1: USB disconnect, device number 68 [ 881.336779][T27329] vlan2: entered promiscuous mode [ 881.563285][ T35] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 881.584779][T27334] netlink: 'syz.0.6164': attribute type 1 has an invalid length. [ 881.586827][T27334] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.6164'. [ 881.589440][T27334] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6164'. [ 881.630311][T27336] FAULT_INJECTION: forcing a failure. [ 881.630311][T27336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.634035][T27336] CPU: 1 UID: 0 PID: 27336 Comm: syz.0.6165 Not tainted 6.12.0-rc7-syzkaller #0 [ 881.636323][T27336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 881.639059][T27336] Call Trace: [ 881.639923][T27336] [ 881.640692][T27336] dump_stack_lvl+0x16c/0x1f0 [ 881.641916][T27336] should_fail_ex+0x497/0x5b0 [ 881.643122][T27336] _copy_to_user+0x32/0xd0 [ 881.644285][T27336] vivid_radio_rx_read+0x7c9/0xb90 [ 881.645618][T27336] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 881.647062][T27336] ? __import_iovec+0x1f2/0x6d0 [ 881.648326][T27336] vivid_radio_read+0x86/0xc0 [ 881.649558][T27336] v4l2_read+0x226/0x360 [ 881.650665][T27336] ? __pfx_v4l2_read+0x10/0x10 [ 881.652305][T27336] vfs_readv+0x6bf/0x890 [ 881.653875][T27336] ? __pfx_vfs_readv+0x10/0x10 [ 881.655620][T27336] ? find_held_lock+0x2d/0x110 [ 881.657385][T27336] ? __pfx_lock_release+0x10/0x10 [ 881.658872][T27336] ? trace_lock_acquire+0x14a/0x1d0 [ 881.660216][T27336] ? __fget_files+0x244/0x3f0 [ 881.661448][T27336] ? do_preadv+0x1b4/0x270 [ 881.662608][T27336] do_preadv+0x1b4/0x270 [ 881.663707][T27336] ? __pfx_do_preadv+0x10/0x10 [ 881.665079][T27336] ? ksys_write+0x1ad/0x260 [ 881.666571][T27336] ? __pfx_ksys_write+0x10/0x10 [ 881.668245][T27336] __ia32_compat_sys_preadv2+0x121/0x1b0 [ 881.670179][T27336] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 881.672452][T27336] __do_fast_syscall_32+0x73/0x120 [ 881.674222][T27336] do_fast_syscall_32+0x32/0x80 [ 881.675897][T27336] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 881.678040][T27336] RIP: 0023:0xf7fe6579 [ 881.679446][T27336] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 881.685703][T27336] RSP: 002b:00000000f576655c EFLAGS: 00000296 ORIG_RAX: 000000000000017a [ 881.687841][T27336] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 881.689878][T27336] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 881.691956][T27336] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 881.694115][T27336] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 881.696268][T27336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 881.698310][T27336] [ 881.722310][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 881.725340][ T35] usb 7-1: unable to get BOS descriptor or descriptor too short [ 881.728230][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.730145][T27338] syzkaller1: entered promiscuous mode [ 881.730739][ T35] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 881.732280][T27338] syzkaller1: entered allmulticast mode [ 881.734767][ T35] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 881.738906][ T35] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 881.742529][ T35] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 881.803588][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 881.811859][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.819113][ T35] usb 7-1: Product: syz [ 881.821705][ T35] usb 7-1: Manufacturer: syz [ 881.831714][ T35] usb 7-1: SerialNumber: syz [ 882.044473][T27327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.046729][T27327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.046784][T27351] overlay: Unknown parameter 'euid<00000000000000000000' [ 882.049544][ T35] cdc_ncm 7-1:1.0: bind() failure [ 882.053293][ T35] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 882.055153][ T35] cdc_ncm 7-1:1.1: bind() failure [ 882.057763][ T35] usb 7-1: USB disconnect, device number 69 [ 882.189552][ T1331] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 882.349488][ T1331] usb 10-1: not running at top speed; connect to a high speed hub [ 882.352379][ T1331] usb 10-1: config 7 has an invalid interface number: 32 but max is 3 [ 882.354605][ T1331] usb 10-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 882.357092][ T1331] usb 10-1: config 7 has an invalid interface number: 91 but max is 3 [ 882.359391][ T1331] usb 10-1: config 7 has an invalid interface number: 118 but max is 3 [ 882.361631][ T1331] usb 10-1: config 7 has an invalid interface number: 132 but max is 3 [ 882.364241][ T1331] usb 10-1: config 7 has no interface number 0 [ 882.366476][ T1331] usb 10-1: config 7 has no interface number 1 [ 882.368928][ T1331] usb 10-1: config 7 has no interface number 2 [ 882.370544][ T1331] usb 10-1: config 7 has no interface number 3 [ 882.372163][ T1331] usb 10-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 882.374923][ T1331] usb 10-1: config 7 interface 32 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 882.377726][ T1331] usb 10-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 882.380560][ T1331] usb 10-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 882.383311][ T1331] usb 10-1: config 7 interface 32 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 882.386096][ T1331] usb 10-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 882.389018][ T1331] usb 10-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x9, skipping [ 882.391879][ T1331] usb 10-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0xF, skipping [ 882.394679][ T1331] usb 10-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x5, skipping [ 882.397456][ T1331] usb 10-1: config 7 interface 91 altsetting 188 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 882.400899][ T1331] usb 10-1: config 7 interface 118 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 882.403780][ T1331] usb 10-1: config 7 interface 118 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 882.406335][ T1331] usb 10-1: config 7 interface 132 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 882.409222][ T1331] usb 10-1: config 7 interface 32 has no altsetting 0 [ 882.410965][ T1331] usb 10-1: config 7 interface 91 has no altsetting 0 [ 882.412716][ T1331] usb 10-1: config 7 interface 118 has no altsetting 0 [ 882.414588][ T1331] usb 10-1: config 7 interface 132 has no altsetting 0 [ 882.417832][ T1331] usb 10-1: New USB device found, idVendor=1eda, idProduct=2210, bcdDevice=63.55 [ 882.420256][ T1331] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.422356][ T1331] usb 10-1: Product: syz [ 882.423476][ T1331] usb 10-1: Manufacturer: syz [ 882.425012][ T1331] usb 10-1: SerialNumber: syz [ 882.427748][T27348] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 882.642409][T27368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6175'. [ 882.965114][ T5311] Bluetooth: hci2: command 0x0c1a tx timeout [ 882.997388][T27356] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 882.999644][T27356] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 883.001372][T27356] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 883.126683][ T1331] usb 10-1: USB disconnect, device number 14 [ 883.648234][T27387] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6180'. [ 883.874529][T27391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6181'. [ 884.237631][ T5311] Bluetooth: hci0: command 0x0c20 tx timeout [ 884.383586][T27407] FAULT_INJECTION: forcing a failure. [ 884.383586][T27407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.388507][T27407] CPU: 1 UID: 0 PID: 27407 Comm: syz.2.6188 Not tainted 6.12.0-rc7-syzkaller #0 [ 884.391001][T27407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 884.394582][T27407] Call Trace: [ 884.395774][T27407] [ 884.396851][T27407] dump_stack_lvl+0x16c/0x1f0 [ 884.398536][T27407] should_fail_ex+0x497/0x5b0 [ 884.400217][T27407] _copy_from_user+0x2e/0xd0 [ 884.401821][T27407] copy_from_buffer+0x86/0xb0 [ 884.403079][T27407] copy_uabi_to_xstate+0xb5/0x670 [ 884.404400][T27407] ? find_held_lock+0x2d/0x110 [ 884.405675][T27407] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 884.407130][T27407] ? __pfx_lock_release+0x10/0x10 [ 884.408530][T27407] ? trace_lock_acquire+0x14a/0x1d0 [ 884.409925][T27407] ? __fpu_restore_sig+0xc2c/0x1430 [ 884.411329][T27407] ? __local_bh_enable_ip+0xa4/0x120 [ 884.412710][T27407] __fpu_restore_sig+0x1070/0x1430 [ 884.414043][T27407] ? __pfx___fpu_restore_sig+0x10/0x10 [ 884.415471][T27407] ? lock_acquire+0x2f/0xb0 [ 884.416675][T27407] ? __might_fault+0xe3/0x190 [ 884.417922][T27407] fpu__restore_sig+0x113/0x190 [ 884.419209][T27407] ia32_restore_sigcontext+0x40f/0x5d0 [ 884.420663][T27407] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 884.422352][T27407] ? __pfx_lock_release+0x10/0x10 [ 884.423676][T27407] ? _raw_spin_unlock_irq+0x23/0x50 [ 884.425080][T27407] ? lockdep_hardirqs_on+0x7c/0x110 [ 884.426445][T27407] __do_compat_sys_rt_sigreturn+0x121/0x1f0 [ 884.427986][T27407] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 884.429683][T27407] do_int80_emulation+0x104/0x200 [ 884.431048][T27407] asm_int80_emulation+0x1a/0x20 [ 884.432364][T27407] RIP: 0023:0xf73fe577 [ 884.433442][T27407] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 884.438447][T27407] RSP: 002b:00000000f56e655c EFLAGS: 00000296 [ 884.440041][T27407] RAX: 0000000000000173 RBX: 0000000000000006 RCX: 0000000020000080 [ 884.442140][T27407] RDX: 0000000000059000 RSI: 0000000000000000 RDI: 0000000000000000 [ 884.444187][T27407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 884.446260][T27407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.448306][T27407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 884.450385][T27407] [ 884.451319][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.456396][ T1331] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 884.616852][ T1331] usb 5-1: not running at top speed; connect to a high speed hub [ 884.624628][ T1331] usb 5-1: config 7 has an invalid interface number: 32 but max is 3 [ 884.626843][ T1331] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 884.629089][ T1331] usb 5-1: config 7 has an invalid interface number: 91 but max is 3 [ 884.631091][ T1331] usb 5-1: config 7 has an invalid interface number: 118 but max is 3 [ 884.633142][ T1331] usb 5-1: config 7 has an invalid interface number: 132 but max is 3 [ 884.635242][ T1331] usb 5-1: config 7 has no interface number 0 [ 884.637829][ T1331] usb 5-1: config 7 has no interface number 1 [ 884.639419][ T1331] usb 5-1: config 7 has no interface number 2 [ 884.641029][ T1331] usb 5-1: config 7 has no interface number 3 [ 884.642633][ T1331] usb 5-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 884.645507][ T1331] usb 5-1: config 7 interface 32 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 884.648329][ T1331] usb 5-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 884.651059][ T1331] usb 5-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 884.653629][ T1331] usb 5-1: config 7 interface 32 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 884.656414][ T1331] usb 5-1: config 7 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 884.659150][ T1331] usb 5-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x9, skipping [ 884.661801][ T1331] usb 5-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0xF, skipping [ 884.664446][ T1331] usb 5-1: config 7 interface 91 altsetting 188 has a duplicate endpoint with address 0x5, skipping [ 884.667200][ T1331] usb 5-1: config 7 interface 91 altsetting 188 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 884.671230][ T1331] usb 5-1: config 7 interface 118 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 884.674028][ T1331] usb 5-1: config 7 interface 118 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 884.676585][ T1331] usb 5-1: config 7 interface 132 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 884.679313][ T1331] usb 5-1: config 7 interface 32 has no altsetting 0 [ 884.681062][ T1331] usb 5-1: config 7 interface 91 has no altsetting 0 [ 884.682760][ T1331] usb 5-1: config 7 interface 118 has no altsetting 0 [ 884.684498][ T1331] usb 5-1: config 7 interface 132 has no altsetting 0 [ 884.690804][ T1331] usb 5-1: New USB device found, idVendor=1eda, idProduct=2210, bcdDevice=63.55 [ 884.693218][ T1331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.695344][ T1331] usb 5-1: Product: syz [ 884.696451][ T1331] usb 5-1: Manufacturer: syz [ 884.697682][ T1331] usb 5-1: SerialNumber: syz [ 884.700373][T27405] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 884.770733][T27420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6193'. [ 884.794647][T27421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6192'. [ 885.017262][ T1331] usb 5-1: USB disconnect, device number 65 [ 885.043083][ T5311] Bluetooth: hci2: command 0x0c1a tx timeout [ 885.174847][T27431] kvm: pic: single mode not supported [ 885.181711][T27431] kvm: pic: single mode not supported [ 885.183666][T27431] kvm: pic: level sensitive irq not supported [ 885.185881][T27431] kvm: pic: non byte write [ 885.188895][T27431] kvm: pic: single mode not supported [ 885.189351][T27431] kvm: pic: single mode not supported [ 885.474665][T27437] FAULT_INJECTION: forcing a failure. [ 885.474665][T27437] name failslab, interval 1, probability 0, space 0, times 0 [ 885.481239][T27437] CPU: 2 UID: 0 PID: 27437 Comm: syz.5.6197 Not tainted 6.12.0-rc7-syzkaller #0 [ 885.484432][T27437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 885.488178][T27437] Call Trace: [ 885.489370][T27437] [ 885.490417][T27437] dump_stack_lvl+0x16c/0x1f0 [ 885.492117][T27437] should_fail_ex+0x497/0x5b0 [ 885.493803][T27437] ? fs_reclaim_acquire+0xae/0x150 [ 885.495604][T27437] should_failslab+0xc2/0x120 [ 885.497248][T27437] kmem_cache_alloc_node_noprof+0x71/0x310 [ 885.499273][T27437] ? __alloc_skb+0x2b3/0x380 [ 885.500916][T27437] __alloc_skb+0x2b3/0x380 [ 885.502488][T27437] ? __pfx___alloc_skb+0x10/0x10 [ 885.504207][T27437] ? pppoe_sendmsg+0xac/0x7c0 [ 885.505871][T27437] ? reacquire_held_locks+0x4c0/0x4c0 [ 885.507757][T27437] ? mark_held_locks+0x9f/0xe0 [ 885.509456][T27437] sock_wmalloc+0xd4/0x120 [ 885.511017][T27437] pppoe_sendmsg+0x2b6/0x7c0 [ 885.512655][T27437] ? __pfx_aa_sk_perm+0x10/0x10 [ 885.514344][T27437] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 885.516125][T27437] ____sys_sendmsg+0x9ae/0xb40 [ 885.517807][T27437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 885.519651][T27437] ? get_compat_msghdr+0x11b/0x170 [ 885.521462][T27437] ? __pfx___lock_acquire+0x10/0x10 [ 885.523271][T27437] ___sys_sendmsg+0x135/0x1e0 [ 885.524941][T27437] ? __pfx____sys_sendmsg+0x10/0x10 [ 885.526763][T27437] ? lock_acquire+0x2f/0xb0 [ 885.528362][T27437] ? __fget_files+0x40/0x3f0 [ 885.529756][T27437] ? __pfx___might_resched+0x10/0x10 [ 885.531232][T27437] ? fdget+0x176/0x210 [ 885.532317][T27437] __sys_sendmmsg+0x2a5/0x450 [ 885.533497][T27437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 885.534793][T27437] ? vfs_write+0x306/0x1150 [ 885.535947][T27437] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 885.537435][T27437] ? fput+0x30/0x390 [ 885.538428][T27437] ? ksys_write+0x1ad/0x260 [ 885.539575][T27437] ? __pfx_ksys_write+0x10/0x10 [ 885.540836][T27437] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 885.542299][T27437] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 885.543916][T27437] __do_fast_syscall_32+0x73/0x120 [ 885.545188][T27437] do_fast_syscall_32+0x32/0x80 [ 885.546410][T27437] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 885.548042][T27437] RIP: 0023:0xf73be579 [ 885.549114][T27437] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 885.554101][T27437] RSP: 002b:00000000f56a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 885.556233][T27437] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020002340 [ 885.558210][T27437] RDX: 00000000000003e8 RSI: 0000000000000000 RDI: 0000000000000000 [ 885.560243][T27437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 885.562454][T27437] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 885.564480][T27437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 885.566525][T27437] [ 885.675293][T27447] syzkaller1: entered promiscuous mode [ 885.676720][T27447] syzkaller1: entered allmulticast mode [ 885.800226][T27435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6196'. [ 885.809981][T27453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6199'. [ 886.206541][ T6042] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 886.395451][ T6042] usb 10-1: Using ep0 maxpacket: 32 [ 886.398071][ T6042] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 886.402310][ T6042] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 886.404802][ T6042] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 886.407022][ T6042] usb 10-1: Product: syz [ 886.408230][ T6042] usb 10-1: Manufacturer: syz [ 886.409550][ T6042] usb 10-1: SerialNumber: syz [ 886.411831][ T6042] usb 10-1: config 0 descriptor?? [ 886.413613][T27458] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 886.552825][T27471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6205'. [ 886.626131][T27458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6202'. [ 886.647949][T27481] loop9: detected capacity change from 0 to 8192 [ 886.702016][ T25] usb 10-1: USB disconnect, device number 15 [ 886.724426][T27480] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 886.792533][T27484] vim2m vim2m.0: vidioc_s_fmt queue busy [ 887.101595][ T5311] Bluetooth: hci2: command 0x0c1a tx timeout [ 887.397291][T27499] bond2: (slave team_slave_1): Releasing backup interface [ 887.506855][T27505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.510216][T27505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.512243][T27507] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 887.512249][T27508] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 887.512257][T27508] overlayfs: missing 'lowerdir' [ 887.524767][T27507] overlayfs: missing 'lowerdir' [ 887.556001][T27508] ================================================================== [ 887.556010][T27508] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x20bb/0x21d0 [ 887.556026][T27508] Write of size 4 at addr ffffc900045f9000 by task syz.2.6215/27508 [ 887.556034][T27508] [ 887.556039][T27508] CPU: 0 UID: 0 PID: 27508 Comm: syz.2.6215 Not tainted 6.12.0-rc7-syzkaller #0 [ 887.556050][T27508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 887.556057][T27508] Call Trace: [ 887.556060][T27508] [ 887.556065][T27508] dump_stack_lvl+0x116/0x1f0 [ 887.556077][T27508] print_report+0xc3/0x620 [ 887.556092][T27508] ? __virt_addr_valid+0x5e/0x590 [ 887.556105][T27508] kasan_report+0xd9/0x110 [ 887.556119][T27508] ? sys_imageblit+0x20bb/0x21d0 [ 887.556129][T27508] ? sys_imageblit+0x20bb/0x21d0 [ 887.556140][T27508] sys_imageblit+0x20bb/0x21d0 [ 887.556152][T27508] ? __pfx_sys_imageblit+0x10/0x10 [ 887.556162][T27508] ? queue_work_on+0xc6/0x140 [ 887.556177][T27508] ? fb_pad_unaligned_buffer+0x3c1/0x470 [ 887.556190][T27508] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 887.556205][T27508] bit_putcs+0x90e/0xdf0 [ 887.556221][T27508] ? __pfx_bit_putcs+0x10/0x10 [ 887.556235][T27508] ? fb_get_color_depth+0x120/0x250 [ 887.556247][T27508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 887.556263][T27508] ? __pfx_bit_putcs+0x10/0x10 [ 887.556275][T27508] fbcon_putcs+0x364/0x480 [ 887.556287][T27508] do_update_region+0x2e6/0x3f0 [ 887.556300][T27508] ? __pfx_fbcon_invert_region+0x10/0x10 [ 887.556311][T27508] invert_screen+0x1da/0x570 [ 887.556326][T27508] ? __pfx_invert_screen+0x10/0x10 [ 887.556340][T27508] ? __pfx_complement_pos+0x10/0x10 [ 887.556354][T27508] ? rcu_is_watching+0x12/0xc0 [ 887.556369][T27508] ? vc_do_resize+0x244/0x10f0 [ 887.556384][T27508] clear_selection+0x59/0x70 [ 887.556397][T27508] vc_do_resize+0xdfe/0x10f0 [ 887.556413][T27508] ? __pfx_vc_do_resize+0x10/0x10 [ 887.556429][T27508] fbcon_set_disp+0x7a5/0xe00 [ 887.556441][T27508] set_con2fb_map+0x6fd/0x1060 [ 887.556453][T27508] fbcon_set_con2fb_map_ioctl+0x16d/0x220 [ 887.556466][T27508] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 887.556480][T27508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 887.556494][T27508] do_fb_ioctl+0x32a/0x7d0 [ 887.556508][T27508] ? __pfx_do_fb_ioctl+0x10/0x10 [ 887.556522][T27508] ? tomoyo_path_number_perm+0x292/0x5b0 [ 887.556541][T27508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 887.556559][T27508] fb_compat_ioctl+0x55f/0x670 [ 887.556573][T27508] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 887.556589][T27508] ? __fget_files+0x244/0x3f0 [ 887.556600][T27508] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 887.556615][T27508] __do_compat_sys_ioctl+0x259/0x2b0 [ 887.556631][T27508] __do_fast_syscall_32+0x73/0x120 [ 887.556642][T27508] do_fast_syscall_32+0x32/0x80 [ 887.556652][T27508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 887.556663][T27508] RIP: 0023:0xf73fe579 [ 887.556672][T27508] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 887.556682][T27508] RSP: 002b:00000000f56c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 887.556692][T27508] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000004610 [ 887.556699][T27508] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 887.556706][T27508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 887.556712][T27508] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 887.556718][T27508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 887.556727][T27508] [ 887.556730][T27508] [ 887.556734][T27508] The buggy address belongs to the virtual mapping at [ 887.556734][T27508] [ffffc900042f9000, ffffc900045fa000) created by: [ 887.556734][T27508] drm_gem_shmem_vmap+0x3f2/0x760 [ 887.556749][T27508] [ 887.556752][T27508] Memory state around the buggy address: [ 887.556757][T27508] ffffc900045f8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 887.556764][T27508] ffffc900045f8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 887.556771][T27508] >ffffc900045f9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 887.556776][T27508] ^ [ 887.556781][T27508] ffffc900045f9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 887.556788][T27508] ffffc900045f9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 887.556793][T27508] ================================================================== [ 887.556821][T27508] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 887.556827][T27508] CPU: 0 UID: 0 PID: 27508 Comm: syz.2.6215 Not tainted 6.12.0-rc7-syzkaller #0 [ 887.556847][T27508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 887.556854][T27508] Call Trace: [ 887.556857][T27508] [ 887.556861][T27508] dump_stack_lvl+0x3d/0x1f0 [ 887.556872][T27508] panic+0x71d/0x800 [ 887.556886][T27508] ? __pfx_panic+0x10/0x10 [ 887.556898][T27508] ? rcu_is_watching+0x12/0xc0 [ 887.556909][T27508] ? __pfx_lock_release+0x10/0x10 [ 887.556923][T27508] ? _raw_spin_unlock+0x28/0x50 [ 887.556937][T27508] ? check_panic_on_warn+0x1f/0xb0 [ 887.556951][T27508] check_panic_on_warn+0xab/0xb0 [ 887.556965][T27508] end_report+0x117/0x180 [ 887.556978][T27508] kasan_report+0xe9/0x110 [ 887.556991][T27508] ? sys_imageblit+0x20bb/0x21d0 [ 887.557001][T27508] ? sys_imageblit+0x20bb/0x21d0 [ 887.557011][T27508] sys_imageblit+0x20bb/0x21d0 [ 887.557023][T27508] ? __pfx_sys_imageblit+0x10/0x10 [ 887.557033][T27508] ? queue_work_on+0xc6/0x140 [ 887.557048][T27508] ? fb_pad_unaligned_buffer+0x3c1/0x470 [ 887.557060][T27508] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 887.557074][T27508] bit_putcs+0x90e/0xdf0 [ 887.557089][T27508] ? __pfx_bit_putcs+0x10/0x10 [ 887.557103][T27508] ? fb_get_color_depth+0x120/0x250 [ 887.557114][T27508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 887.557129][T27508] ? __pfx_bit_putcs+0x10/0x10 [ 887.557141][T27508] fbcon_putcs+0x364/0x480 [ 887.557153][T27508] do_update_region+0x2e6/0x3f0 [ 887.557165][T27508] ? __pfx_fbcon_invert_region+0x10/0x10 [ 887.557176][T27508] invert_screen+0x1da/0x570 [ 887.557190][T27508] ? __pfx_invert_screen+0x10/0x10 [ 887.557204][T27508] ? __pfx_complement_pos+0x10/0x10 [ 887.557218][T27508] ? rcu_is_watching+0x12/0xc0 [ 887.557229][T27508] ? vc_do_resize+0x244/0x10f0 [ 887.557244][T27508] clear_selection+0x59/0x70 [ 887.557256][T27508] vc_do_resize+0xdfe/0x10f0 [ 887.557272][T27508] ? __pfx_vc_do_resize+0x10/0x10 [ 887.557288][T27508] fbcon_set_disp+0x7a5/0xe00 [ 887.557299][T27508] set_con2fb_map+0x6fd/0x1060 [ 887.557311][T27508] fbcon_set_con2fb_map_ioctl+0x16d/0x220 [ 887.557324][T27508] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 887.557338][T27508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 887.557352][T27508] do_fb_ioctl+0x32a/0x7d0 [ 887.557373][T27508] ? __pfx_do_fb_ioctl+0x10/0x10 [ 887.557387][T27508] ? tomoyo_path_number_perm+0x292/0x5b0 [ 887.557405][T27508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 887.557423][T27508] fb_compat_ioctl+0x55f/0x670 [ 887.557437][T27508] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 887.557453][T27508] ? __fget_files+0x244/0x3f0 [ 887.557463][T27508] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 887.557478][T27508] __do_compat_sys_ioctl+0x259/0x2b0 [ 887.557493][T27508] __do_fast_syscall_32+0x73/0x120 [ 887.557503][T27508] do_fast_syscall_32+0x32/0x80 [ 887.557513][T27508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 887.557524][T27508] RIP: 0023:0xf73fe579 [ 887.557531][T27508] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 887.557540][T27508] RSP: 002b:00000000f56c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 887.557550][T27508] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000004610 [ 887.557556][T27508] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 887.557562][T27508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 887.557568][T27508] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 887.557574][T27508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 887.557582][T27508] [ 887.558146][T27508] Kernel Offset: disabled VM DIAGNOSIS: 10:52:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85047b95 RDI=ffffffff9a644320 RBP=ffffffff9a6442e0 RSP=ffffc90023f86eb0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657 R12=0000000000000000 R13=0000000000000031 R14=ffffffff85047b30 R15=0000000000000000 RIP=ffffffff85047bbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe777e97000 CR3=000000004024a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8132c790 RDX=ffff88801b76c880 RSI=ffffffff8132c7d8 RDI=ffffffff932e87c0 RBP=0000000000000001 RSP=ffffc90000598fd0 R8 =0000000000000001 R9 =fffffbfff265d0f8 R10=ffffffff932e87c7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132c7d9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020010000 CR3=0000000068ece000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8132c790 RDX=ffff88801bb70000 RSI=ffffffff8132c7d8 RDI=ffffffff932e87c0 RBP=0000000000000002 RSP=ffffc90000540fd0 R8 =0000000000000001 R9 =fffffbfff265d0f8 R10=ffffffff932e87c7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132c7d9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c28bbc9 CR3=00000000671c4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8132c790 RDX=ffff88801bb72440 RSI=ffffffff8132c7d8 RDI=ffffffff932e87c0 RBP=0000000000000003 RSP=ffffc900005f0fd0 R8 =0000000000000001 R9 =fffffbfff265d0f8 R10=ffffffff932e87c7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132c7d9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000571ac4c0 CR3=00000000585fe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000