last executing test programs: 3m4.554621838s ago: executing program 1 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0x0, 0x0) mkdirat(r1, 0x0, 0x143) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r2, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x21, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xff, 0x0, 0x0, 0x0, 0xf, 0x0, 0x8], 0x4, [0x8], [0x0, 0x4000]}}]}}]}, 0x8c}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000002a00)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)}}, {{&(0x7f0000000340)={0xa, 0x4e21, 0x3, @empty}, 0x1c, &(0x7f00000028c0)=[{&(0x7f0000000380)="592130aac7508f1606d6b53e99b19a767168d607b32ef1215325dc98ea233856b581d0141baaeaa99d4715dc26151a0b6fea0e92ea743bd96b629895b52e49cd4bc8884f67e7d5f0ea4605c9f434cb0c59a727acfb4e3ef933ff9a1c3f943aee63aef938ced61f75d7a516d3f7c1b4e7533ba461dfe19de42f8d1cdd4c4909f8239d5663aa", 0x85}, {&(0x7f0000000500)="0db1bcac04c1596c791b3ecc7e38480926c8d2b793d23798261cbd7ef5c23cfb61655c1457cf65b8ba434727e2dde32c44fa29f0008e1bab3f14abd9d385fb53377322b8cc92935f4b87690ce3006e5a5f7ed4a8b137889b1d59f61176101c06c7209a15028aa5fa9fc99a9dba49b2e1c2f14fd4e07d6f4c475a84d9", 0x7c}, {&(0x7f00000005c0)="1ae7fe6a215e302c74e314883822c3c3a8003c0fed178b7b2cef00cf461e8e50630345e3f1569c2333026e136f9ce57b32171ce8fa2418839c36a9e739498f8f6fc2c5930719f1a1629b5fd422f60503e251536bd1396c8ea16abc9e23a570a3a95cfa0553856ec575e8e3c0d80ea8508664073d6918bc576d41909407bb885ed9186fb39e3fe184c65d21766c89e0ca", 0x90}, {&(0x7f0000000440)}, {&(0x7f0000000700)="8bdb5c6061bffe014c10abe3c73d1fc8abda43ad0d7761aab3ed235a51674c21", 0x20}, {&(0x7f0000000740)="968f6e20a44ede9de25a526d8af88f5215c3cdc914dd897741aef4960491f566361633350e563ac5c9f16df997dc01c586423af4a9b151b55724572279e3fd9efe6ab1875790e52c20ea7f546aca274455173e3582d536c9f7cbcd1c9ff79af33953208b040923d2248608e11e5d837c140f2f8f4f2ef677e8425fe93ebab654e32b5cbed01066199909e04475c2dc3cdf36e8988dc76997b26a8f3d56d487d08fc9463c81fb57eeee450b9aa53ac7d574f8b2e42a9070aca06c5db936ecc6126b", 0xc1}, {&(0x7f0000000840)="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", 0xffe}, {&(0x7f0000001840)="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", 0xff0}, {&(0x7f0000002840)="509551d19cd029bc2512de5dc0a7a3e09528eef004690d37b58e503a585f4d0d82b63db8f90cfa3ac2a9aea5f95dddc8a75b194ddaf1c6fa9415fb541a1a5616cfa716931f312dc9f5e2b64d36a065c216d28efc355fdd3ec1afdc882e5b30b6c2143a11ba", 0x65}], 0x9, &(0x7f0000002940)=[@hoplimit={{0x10, 0x29, 0x34, 0x10000}}, @hopopts={{0x4c, 0x29, 0x36, {0x89, 0x6, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0xd3, 0x0, [0x4, 0x1]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @enc_lim={0x4, 0x1, 0x2}, @jumbo]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x1}}, @tclass={{0x10, 0x29, 0x43, 0xffffffff}}, @pktinfo={{0x20, 0x29, 0x32, {@private2, r6}}}], 0x9c}}], 0x3, 0x8040) sendfile(r3, r2, 0x0, 0x84000e3a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x38, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) syncfs(r2) 3m4.237839625s ago: executing program 1 (id=175): syz_emit_ethernet(0x2e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaa090000000000000800460000200000000100029078ac1414bb640101000000000000803b7800000000"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000080)=0xb) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000000), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x19) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000019340), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x401, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r7 = open(&(0x7f0000000180)='./file0\x00', 0x482c40, 0x5e) fcntl$setsig(r7, 0xa, 0x21) fcntl$setlease(r7, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = openat$ttyprintk(0xffffff9c, &(0x7f0000000200), 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r3, r2, r3, r5, r4, r6, r8, r4, r6], 0x9) 3m1.798193862s ago: executing program 1 (id=185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) (async) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000540), 0xc) 3m1.675581602s ago: executing program 1 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000003d000900000000000000000001000000040000001c000180180010800c000f00090000000000000900000000e0000001080002"], 0x3c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x5, 0x2, 0xff, 0x0, 0x9, 0x9}, 0x20) 3m1.674890314s ago: executing program 1 (id=187): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200100, 0x200e8eaf63d25aa) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x0) 3m1.672772229s ago: executing program 1 (id=188): prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000340)=""/2, 0x2) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$inet(0x2, 0x3, 0x6) syz_open_dev$vim2m(0x0, 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x7f, 0x34324152, 0x3, 0x0, [{0x0, 0x5}, {0xfffffffc, 0x200}, {}, {0xffffffff, 0xfffffffd}, {0x4}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0xfffffffffffffff5) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)='?', 0x1}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2) io_setup(0x6, &(0x7f0000000280)=0x0) io_submit(r6, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 2m46.520878465s ago: executing program 32 (id=188): prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000340)=""/2, 0x2) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$inet(0x2, 0x3, 0x6) syz_open_dev$vim2m(0x0, 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x7f, 0x34324152, 0x3, 0x0, [{0x0, 0x5}, {0xfffffffc, 0x200}, {}, {0xffffffff, 0xfffffffd}, {0x4}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0xfffffffffffffff5) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)='?', 0x1}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2) io_setup(0x6, &(0x7f0000000280)=0x0) io_submit(r6, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 5.234103841s ago: executing program 4 (id=846): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'tunl0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x80, 0x20, 0xa4, 0x40, {{0xd, 0x4, 0x0, 0x6, 0x34, 0x68, 0x0, 0x7, 0x4, 0x0, @empty, @local, {[@end, @lsrr={0x83, 0x17, 0x4, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @private=0xa010101, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf25040000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000300012051591071ea9ae35f000008000100", @ANYRES32=r3, @ANYBLOB="400001801400020070696d3672656730000000000000000014000200766c616e31000000000000000000000014000200000000000000000000000000000000007400018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000140002007767320000000000000000000000000008000300050000000800030003000000140002006d6163766c616e300000000000000000140002007663616e3000000000000000000000000800030000000000"], 0x104}, 0x1, 0x0, 0x0, 0xc002}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioprio_set$pid(0x3, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008a61e6ffdd0d4c95a0367563253400"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd09000000df250900020073797a3100000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2dc, 0x1b4, 0x0, 0x148, 0x1b4, 0x148, 0x248, 0x240, 0x240, 0x248, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x11e, 0x10, 0x2, 0x0, 'syz1\x00'}}, @common=@addrtype={{0x2c}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x338) sendto$inet6(r6, 0x0, 0x0, 0x20000002, 0x0, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000000606000300000000000000000100000305000100070000000500010007000000050000050001000700000005000100070000000900020073797a31000000000500010007b5d1000000010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x4090}, 0x4004084) 4.324573915s ago: executing program 4 (id=855): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) syz_usb_disconnect(0xffffffffffffffff) (async) ioctl$HIDIOCGFEATURE(r1, 0x40305829, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="09000000000000000400000000000000000000000200000004008000dc5c9b5c610e0000000800f400000000000000000200000000000000000600"/68]) 3.314598007s ago: executing program 3 (id=861): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7", @ANYBLOB="0000000000000000b70800000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$fscrypt_provisioning(&(0x7f0000000700), 0x0, &(0x7f0000000780)={0x2, 0x4, @c}, 0x29, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000240)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) 3.164503396s ago: executing program 0 (id=864): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) mkdir(0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10ffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f00000005c0)={0x9, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b073172090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897f3411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300020d000000000000000000000003000600000000000200000000000000fd0000000000000002000100000000f2ffff080000000000030005000000000002000000ac1414aa0000000000000000"], 0x68}, 0x1, 0x7}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.054215288s ago: executing program 4 (id=865): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x420800) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x3, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x410}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x1}}}}}}}]}}, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x4004550e, &(0x7f0000000500)) 2.544648066s ago: executing program 2 (id=866): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x202) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f0000000000)='./file5\x00', 0x8000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x62, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x62}, 0x1, 0x0, 0x0, 0x4}, 0x84) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0x3ff) writev(r0, &(0x7f0000000140), 0x0) 2.483797687s ago: executing program 2 (id=867): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x1], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d9800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3501}) ioctl$TUNSETNOCSUM(r0, 0x8923, 0x20000000) 2.404524153s ago: executing program 3 (id=868): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001280), 0x8) r2 = dup(r0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7f36, 0x10100, 0x0, 0x1}, &(0x7f0000000180)=0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000007c0)=[@request_death], 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x7) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000180)={0x1f, 0x0, @none, 0x1}, 0x4c) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0xf, 0x0, 0x0) ioctl$TCSETA(r6, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000e63000/0x1000)=nil) 2.254490694s ago: executing program 0 (id=869): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b708000000020000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async, rerun: 32) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 32) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) r7 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10006}) (async) futex(&(0x7f0000000300), 0x2, 0x2, &(0x7f0000000340), &(0x7f0000000380), 0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x1, 0x0, 0x0) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$mixer_OSS_GETVERSION(r9, 0x40086602, &(0x7f0000000000)) (rerun: 64) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000000)=0xb, 0x4) 1.964644801s ago: executing program 0 (id=870): memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unlinkat(0xffffffffffffffff, 0x0, 0x200) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x100) execveat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x800) 1.964409493s ago: executing program 3 (id=871): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) fremovexattr(r0, &(0x7f00000002c0)=ANY=[]) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x3}, 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = getuid() quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@nullb, r3, 0x0) unshare(0x62040200) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0xa, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000080)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) 1.90281663s ago: executing program 0 (id=872): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) mkdir(0x0, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x1b) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10ffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a41", 0x12) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300020d000000000000000000000003000600000000000200000000000000fd0000000000000002000100000000f2ffff080000000000030005000000000002000000ac1414aa00000000000000000300080080"], 0x68}, 0x1, 0x7}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.56362755s ago: executing program 4 (id=873): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000840)=ANY=[@ANYRESOCT=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xcc, 0xde, &(0x7f00000001c0)="a7bb2e18d357d52c55f84ca20d892c3bcd0ffde5586c7ab9738f9535c865c78e1ee8f383c9a61530fec301f870153a2b9e63e99785c35f183b42cd0b81104aab1c23798294456f3d900c545fb13778af1fbbeb21d9025ef24830de240142acfc537cd46d51e15cf552cfd70bda9c3d300252bb2eeec3614c5134bcb5de0b6db3953540fab356d3c261e90132c5de123f822602b02f8c39f37cbff0c61f23273b969e9c91dd81019d8e18ce6d0d59108acb4a0883c48e5d2fa4144df58b62d8d33ad28b76216574b98ba0ad9b", &(0x7f0000000880)=""/222, 0x3, 0x0, 0x17, 0xa0, &(0x7f0000000040)="c8fb232e3f282f8117b4b7ed133085b723e7f59be5ef1f", &(0x7f00000002c0)="1da7b3eb61a2e49a282256b7cb77c7ef11695f50edc8e5600bebc32bf52b5f5b441c934ca91af7c570a94450d19d31d355a7ca995aac4c1dc604c89e60ae412e6e113513c45c7351314f1e6571ed1adbb7c2ec4e73b3619e52554f802fd1dbfd0424cae752d835998b5b273c07cf27bf4fb965b958d57582ac7e3252e96abb3dbf7021c59b600115158cca4b6a74ded7bfcf20ebfde2b02600fa654d0bc0664d", 0x3, 0x0, 0x6}, 0x4c) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x2, 0x0) capset(0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000700)={0x6, 'veth1_to_batadv\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000003c0)={0x0, 'sit0\x00', {0x801}, 0x80}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) r4 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) sendmsg$can_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@can={{0x2, 0x0, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "24e9ee1415fdb30e"}, 0x10}, 0x1, 0x0, 0x0, 0x44001}, 0x6048001) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x17, &(0x7f0000000000)=0x21, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb}}, [0x4, 0x3, 0x8, 0x0, 0x7fff, 0x2, 0x6, 0x9, 0x8, 0x5, 0x3, 0x8, 0xc, 0xf, 0xadf453a]}, &(0x7f0000000040)=0xfc) (async) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000200)=""/128, 0x80) close_range(r3, 0xffffffffffffffff, 0x0) (async) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) (async, rerun: 64) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 64) r8 = openat$ptp1(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PTP_SYS_OFFSET(r8, 0x43403d05, &(0x7f0000000480)={0x9}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) 1.114488144s ago: executing program 2 (id=874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8}]}, 0x40}}, 0x0) 1.114283164s ago: executing program 2 (id=875): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xd, 0xffff}, {0x4, 0xb}}}, 0x24}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'batadv_slave_1\x00', 0xc201}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x1, 0x3]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0x8) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x0, &(0x7f00000003c0)) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500e1fd08005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.06301414s ago: executing program 3 (id=876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x173840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x101001, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'vlan0\x00'}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'veth1_to_hsr\x00', @random="776832d63786"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1000}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x120000, &(0x7f0000000600)=ANY=[]) chdir(&(0x7f0000000280)='./file0\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x2e0000, 0x2) io_setup(0x1fe, &(0x7f0000000440)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x4, 0x200) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r6, 0x0) 983.562641ms ago: executing program 0 (id=877): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) mkdir(0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10ffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f00000005c0)={0x9, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b073172090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897f3411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300020d000000000000000000000003000600000000000200000000000000fd0000000000000002000100000000f2ffff080000000000030005000000000002000000ac1414aa0000000000000000030008"], 0x68}, 0x1, 0x7}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 883.231476ms ago: executing program 2 (id=878): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) sendfile(r4, r3, 0x0, 0x10000) 681.241445ms ago: executing program 4 (id=879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) close(r0) 680.829683ms ago: executing program 4 (id=880): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff6, 0x10100, 0x0, 0x310, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000010010c8013000c800c00058008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8756c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a8004"], 0x270}}, 0x0) io_uring_enter(r1, 0x2ded, 0x4000, 0x53, 0x0, 0x0) eventfd(0x5) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) getdents(r8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x8000003d) lsetxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00', 0x0, 0x0, 0x2) getdents(r8, &(0x7f0000000080)=""/174, 0xae) r10 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000500)={0x1, 0x0, {0x9, 0x1, 0x3017, 0x5, 0xc, 0x1, 0x8083bcd160c16998}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000080000000000000000095bc585212000000"], &(0x7f0000000580)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) 407.400747ms ago: executing program 3 (id=881): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r1, &(0x7f0000001540)="d25a24c3ab8a875a90e232f391306046b56d56f6cf8d3cfac1f5635e1d1e3cbe99d74a39db193284e3fcde797622e4ca261b80fa6d8b9b416a20ce3c017f49f6b6158342c0b3c79e46d1aba5f8334c1b3ccf7eb13a5c331cbf2168e51f2d946dfdd072a7f2ef3ea51224cee4f66b198710e2f69cbc19c86e67212293c198f1ffc9307b2f303a5e4adbe5910c12a2deba67", 0x91, 0x4010, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r3, 0x29, 0xce, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmmsg(r2, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="513d51a1133beb3076acffc47add62b21a575cecee387ef7b9f86a4fa2e9ffbdd242b2eb16e50661feb8a9c03e05577a491871f098e2fce9407714d86e513ce27807d22accf2e82d60cd7ec48c581b86b0a7", 0x52}, {&(0x7f00000003c0)="8836bef8e7c7732b22a34ce76e09d1b8df983772ba1f972cd0a98233290c16fd6ad5b1705102772a03850e1b991368f10bd2f657e1af7e9cd5fadc73072a30fb316111c2cfafd35f9370c6f57838240bf9e3a6c94397030446", 0x59}, {&(0x7f0000000440)="a159c65743f16ce947db34b286bcc21a3603dee35079f8a2546ed5527e8dc7a5ddac1c01b16cfbd95681432cc1fff7677fa3b72f9dbd213c566cfc0fff0bc365caaf95aec7ad8daac210b7c9c5b758549ac841ef5c070e0443b5a4436bc390d6bbafa62b993c2c19996180", 0x6b}, {&(0x7f00000004c0)="527691df6c002b1fe4d4f85af15d9d745d8104462396d73e3d4f1f6ed3619f6eab1b4df8aeda254488fd2417fe69362e87675f57762ac659ed11556632b988646cc2ce0934f51dbbaceb66e6fdfdbf9de8d49ce02787a99c8da2ea1bd7729b4a17aec5e95f425f100240f6548fe19f19b0a920b3a4fe72f7f8a2ad49a1babfd924bc988b1f1bcdf0a6477d7502c0a0c1fd9d0541d0a6cefc2f60bb4aa8d5af6647604c409e137f0613f39284171bc5502647b9d9208a8842ddbbd55836010398d308efc83d7d84bd60fb22c5fd9fde2e7c3f422887d07b3e", 0xd8}, {&(0x7f0000000200)='Q\b', 0x2}, {&(0x7f00000005c0)="9576152b37f82567e96d4564d9e803ade7ef662cb259001145bd754dc1b1ee7f131091d733fe2756e19be268", 0x2c}, {&(0x7f00000006c0)="ca4049968c59b7c1c9cba12ad108d99ef65e0c460db8c5d872e7ae44da555f68b679a27f3e502949606705f579204aba897fc4b8006ab215f7cf99111ae1101b3a7ec31fbbf76c741575a556b588e7fd7c6f2b8787f60d8e0b9b454caa59ddca15942f1fb681413f48507955cec3e01e8192b87c4b8097e7a057c52171d5fad6468acc473de5a7518ce88d0ef0a12564eda86ca6d7faaf3e056fea7f5276797e3299716d633d09e9317765f50aae1aa1d36bbf5a21cb2b5c7e9abe6b53f50bfbe00bda3320c46fde96802fabf5249010a424f5", 0xd3}, {&(0x7f0000000600)="80b42208390c05554fac8e9837d0dc837be992513149791760a4c6c81df2440f03d2f8b39a2c4a9f403fb624f0bdadd9e46b222f", 0x34}], 0x8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000840)="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", 0xcde}], 0x1}}], 0x2, 0x8850) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x18) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) fstatfs(r5, &(0x7f0000000000)=""/184) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x0, 0x0) 334.907935ms ago: executing program 3 (id=882): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x1], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d9800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3501}) ioctl$TUNSETNOCSUM(r0, 0x8923, 0x20000000) 104.501299ms ago: executing program 0 (id=883): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'pimreg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180600000000000000000000000000001801000020207025ffff0000002020207b1af8ff000000c94d5a9201cee82c91984438010300bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x61) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 2 (id=884): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x22048050}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x22048050}, 0x0) fcntl$addseals(r0, 0x409, 0x2) r4 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x202) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x81) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000040)={r0, 0x1, 0x0, 0x100000}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:32643' (ED25519) to the list of known hosts. [ 41.740213][ T5931] cgroup: Unknown subsys name 'net' [ 41.881490][ T5931] cgroup: Unknown subsys name 'cpuset' [ 41.886542][ T5931] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.650548][ T5931] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.949518][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.954689][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.958195][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.963479][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.966233][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.969257][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.969508][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.973057][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.975105][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.977671][ T5951] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.980878][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.980995][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.981553][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.981733][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.983608][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.984056][ T5297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.985268][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.985507][ T5297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.985971][ T5297] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.986160][ T5297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.007016][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.010700][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.014432][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.017252][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.136364][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 45.185689][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 45.268554][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.270736][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.272980][ T5949] bridge_slave_0: entered allmulticast mode [ 45.275339][ T5949] bridge_slave_0: entered promiscuous mode [ 45.322610][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.326029][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.329283][ T5949] bridge_slave_1: entered allmulticast mode [ 45.331988][ T5949] bridge_slave_1: entered promiscuous mode [ 45.371027][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.373215][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.375496][ T5942] bridge_slave_0: entered allmulticast mode [ 45.377772][ T5942] bridge_slave_0: entered promiscuous mode [ 45.397306][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.402059][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 45.405558][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.407750][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.410104][ T5942] bridge_slave_1: entered allmulticast mode [ 45.412362][ T5942] bridge_slave_1: entered promiscuous mode [ 45.423821][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.429935][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 45.444259][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.481894][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.486737][ T5949] team0: Port device team_slave_0 added [ 45.515043][ T5949] team0: Port device team_slave_1 added [ 45.519573][ T5942] team0: Port device team_slave_0 added [ 45.568735][ T5942] team0: Port device team_slave_1 added [ 45.617358][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.619618][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.627317][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.662768][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.665108][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.667288][ T5953] bridge_slave_0: entered allmulticast mode [ 45.669665][ T5953] bridge_slave_0: entered promiscuous mode [ 45.672132][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.674296][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.676465][ T5945] bridge_slave_0: entered allmulticast mode [ 45.679073][ T5945] bridge_slave_0: entered promiscuous mode [ 45.682133][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.684229][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.692237][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.695850][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.697967][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.705684][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.709759][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.711906][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.714442][ T5953] bridge_slave_1: entered allmulticast mode [ 45.716664][ T5953] bridge_slave_1: entered promiscuous mode [ 45.720178][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.722807][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.725625][ T5945] bridge_slave_1: entered allmulticast mode [ 45.728215][ T5945] bridge_slave_1: entered promiscuous mode [ 45.748363][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.750794][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.760952][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.782927][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.787277][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.807057][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.811537][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.835924][ T5945] team0: Port device team_slave_0 added [ 45.863032][ T5945] team0: Port device team_slave_1 added [ 45.875843][ T5942] hsr_slave_0: entered promiscuous mode [ 45.878261][ T5942] hsr_slave_1: entered promiscuous mode [ 45.883095][ T5949] hsr_slave_0: entered promiscuous mode [ 45.885251][ T5949] hsr_slave_1: entered promiscuous mode [ 45.887296][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.889854][ T5949] Cannot create hsr debugfs directory [ 45.902635][ T5953] team0: Port device team_slave_0 added [ 45.905324][ T5953] team0: Port device team_slave_1 added [ 45.924207][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.926328][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.934595][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.938657][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.940809][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.948571][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.977038][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.979436][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.987085][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.993274][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.995377][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.003100][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.072784][ T5953] hsr_slave_0: entered promiscuous mode [ 46.074931][ T5953] hsr_slave_1: entered promiscuous mode [ 46.076978][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.079542][ T5953] Cannot create hsr debugfs directory [ 46.084215][ T5945] hsr_slave_0: entered promiscuous mode [ 46.086339][ T5945] hsr_slave_1: entered promiscuous mode [ 46.088873][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.091248][ T5945] Cannot create hsr debugfs directory [ 46.230745][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.248653][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.255584][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.265531][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.282504][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.287252][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.291458][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.302904][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.319934][ T5945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.325842][ T5945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.330957][ T5945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.336639][ T5945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.364716][ T5953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.370788][ T5953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.375791][ T5953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.385280][ T5953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.438773][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.452159][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.471589][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.477598][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.485263][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.491883][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.494314][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.502148][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.504599][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.510617][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.513588][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.528833][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.531891][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.534854][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.562348][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.565080][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.572808][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.575230][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.616122][ T5949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.622053][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.634043][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.648477][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.654328][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.656506][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.665112][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.668191][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.685429][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.705235][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.732463][ T5942] veth0_vlan: entered promiscuous mode [ 46.737571][ T5942] veth1_vlan: entered promiscuous mode [ 46.756038][ T5945] veth0_vlan: entered promiscuous mode [ 46.762120][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.765838][ T5945] veth1_vlan: entered promiscuous mode [ 46.785678][ T5942] veth0_macvtap: entered promiscuous mode [ 46.792883][ T5942] veth1_macvtap: entered promiscuous mode [ 46.795580][ T5945] veth0_macvtap: entered promiscuous mode [ 46.804241][ T5945] veth1_macvtap: entered promiscuous mode [ 46.812877][ T5949] veth0_vlan: entered promiscuous mode [ 46.823307][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.829736][ T5949] veth1_vlan: entered promiscuous mode [ 46.836052][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.840626][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.845076][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.850164][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.854978][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.861527][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.864933][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.868588][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.871998][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.879250][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.882470][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.885997][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.889782][ T5945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.892433][ T5945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.895127][ T5945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.897711][ T5945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.923397][ T5949] veth0_macvtap: entered promiscuous mode [ 46.958476][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.960075][ T5953] veth0_vlan: entered promiscuous mode [ 46.960950][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.964293][ T5949] veth1_macvtap: entered promiscuous mode [ 46.983114][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.986275][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.989570][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.992695][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.996277][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.999197][ T5953] veth1_vlan: entered promiscuous mode [ 47.002061][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.004541][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.012636][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.015853][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.019614][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.023072][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.026722][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.032089][ T5949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.032187][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.034759][ T5949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.037108][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.039104][ T5948] Bluetooth: hci3: command tx timeout [ 47.039866][ T5949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.039915][ T5948] Bluetooth: hci1: command tx timeout [ 47.040119][ T5948] Bluetooth: hci0: command tx timeout [ 47.040265][ T5948] Bluetooth: hci2: command tx timeout [ 47.051312][ T5949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.061512][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.066366][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.074240][ T5953] veth0_macvtap: entered promiscuous mode [ 47.087559][ T5953] veth1_macvtap: entered promiscuous mode [ 47.111233][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.112180][ T5942] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.114636][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.122238][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.125329][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.128419][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.131543][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.134982][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.148975][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.151353][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.156539][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.160130][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.163163][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.167724][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.171875][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.176190][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.184223][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.190765][ T6006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 47.200722][ T5953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.203477][ T5953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.206082][ T5953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.209918][ T5953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.217020][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.219832][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.251267][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.265827][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.272511][ T6011] loop7: detected capacity change from 0 to 16384 [ 47.283835][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.286290][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.288274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.380916][ T6013] fuse: Unknown parameter '0xffffffffffffffff0x000000000000000800000000000000000000' [ 47.608399][ T6022] loop7: detected capacity change from 16384 to 16383 [ 47.669298][ T6025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5'. [ 47.698280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.700860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.703333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.706148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.759303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 47.872794][ T6021] Buffer I/O error on dev loop7, logical block 2047, async page read [ 47.876141][ T6021] Buffer I/O error on dev loop7, logical block 2047, async page read [ 47.910003][ T5956] Buffer I/O error on dev loop7, logical block 2047, async page read [ 47.970581][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 48.110345][ T5956] Buffer I/O error on dev loop7, logical block 2047, async page read [ 48.148549][ T9] libceph: connect (1)[c::]:6789 error -101 [ 48.151192][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 48.155975][ T9] libceph: connect (1)[c::]:6789 error -101 [ 48.158159][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 48.306247][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.311960][ T6038] ceph: No mds server is up or the cluster is laggy [ 48.458655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 48.461967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.485659][ T6052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11'. [ 48.707196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.994579][ T6062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'. [ 49.168235][ T5952] Bluetooth: hci2: command tx timeout [ 49.168264][ T5952] Bluetooth: hci0: command tx timeout [ 49.168285][ T5948] Bluetooth: hci1: command tx timeout [ 49.168291][ T5952] Bluetooth: hci3: command tx timeout [ 49.403617][ T6069] binder: 6068:6069 ioctl c0306201 20000000 returned -22 [ 49.587679][ T6075] binder: Bad value for 'max' [ 49.665023][ T6075] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.918380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.041962][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 50.148217][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.301176][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 50.307725][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 50.318413][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 50.325310][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.337320][ T6085] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.348607][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 50.504967][ T6100] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 50.947085][ T25] usb 7-1: USB disconnect, device number 2 [ 50.982496][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 50.991257][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 51.010491][ T6111] netlink: 52 bytes leftover after parsing attributes in process `syz.1.26'. [ 51.107818][ T6115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.198485][ T5944] Bluetooth: hci1: command tx timeout [ 51.198525][ T5952] Bluetooth: hci0: command tx timeout [ 51.198549][ T5952] Bluetooth: hci3: command tx timeout [ 51.198563][ T5952] Bluetooth: hci2: command tx timeout [ 51.780705][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 52.188387][ T6144] netlink: 'syz.3.33': attribute type 5 has an invalid length. [ 52.195156][ T6144] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.195218][ T6144] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.195247][ T6144] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.195276][ T6144] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.195686][ T6144] vxlan0: entered promiscuous mode [ 52.563937][ T6152] autofs: Bad value for 'uid' [ 52.568280][ T6152] autofs: Bad value for 'uid' [ 53.114948][ T6196] syz.1.38 uses obsolete (PF_INET,SOCK_PACKET) [ 53.121896][ T6197] __nla_validate_parse: 2 callbacks suppressed [ 53.121905][ T6197] netlink: 52 bytes leftover after parsing attributes in process `syz.1.38'. [ 53.137018][ T6198] netlink: 52 bytes leftover after parsing attributes in process `syz.1.38'. [ 53.140830][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 53.145324][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 53.288261][ T5944] Bluetooth: hci1: command tx timeout [ 53.288531][ T5948] Bluetooth: hci2: command tx timeout [ 53.289913][ T5944] Bluetooth: hci3: command tx timeout [ 53.292083][ T5948] Bluetooth: hci0: command tx timeout [ 53.366732][ T6220] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 53.415360][ T6212] Cannot find set identified by id 1 to match [ 53.458213][ T834] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.620702][ T834] usb 6-1: config 0 has no interfaces? [ 53.622449][ T834] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 53.625794][ T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.637783][ T834] usb 6-1: config 0 descriptor?? [ 53.844402][ T9] usb 6-1: USB disconnect, device number 2 [ 53.871430][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.46'. [ 53.963946][ T6240] netlink: 112 bytes leftover after parsing attributes in process `syz.0.47'. [ 54.270909][ T6261] input: syz0 as /devices/virtual/input/input5 [ 54.329935][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.53'. [ 54.661192][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 54.665354][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 54.668790][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 55.310166][ T6288] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.318913][ T6288] netlink: 'syz.3.61': attribute type 10 has an invalid length. [ 55.329446][ T6288] syz_tun: entered promiscuous mode [ 55.334377][ T6288] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 55.404994][ T6294] fuse: Invalid uid '00000000000037777777777' [ 57.208485][ T5952] Bluetooth: hci3: command 0x0405 tx timeout [ 57.290585][ T6323] overlayfs: missing 'lowerdir' [ 57.638214][ T5987] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 57.792875][ T5987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 57.796258][ T5987] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 57.799308][ T5987] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 60.134381][ T6377] process 'syz.2.87' launched '/dev/fd/8' with NULL argv: empty string added [ 60.282671][ T6382] __nla_validate_parse: 4 callbacks suppressed [ 60.282682][ T6382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.88'. [ 60.386770][ T5987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.386788][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.386798][ T5987] usb 5-1: Product: ꑻ訵嘿䈮ጘ䜀鋩❚唟ⲋƤ䝒瑔⨼ᣎ줭㝀嚸鸢栣▭谈牏੯췧ꑲ龉胋嵷㷁ꊽⷆ䶀⚮䃟䜟甌㹱뵠⧤ꍎ䰍籊酖韥桘擏뚥춴᫷庬鹁騖□該利傤薥 [ 60.386810][ T5987] usb 5-1: Manufacturer: ꎾ⠉ꞗ禨呣ᶸ詖Ἰ㢺쮹훍꫻䘉靎૫㎨ઉ੐ᶫ㈲퐛ዸ燢፭篡㚏鳿齲驅뫆銽遁꤃軞鹦㏱ [ 60.389677][ T5987] usb 5-1: can't set config #1, error -71 [ 60.393475][ T5987] usb 5-1: USB disconnect, device number 2 [ 60.542131][ T6389] netlink: 'syz.0.89': attribute type 1 has an invalid length. [ 62.158815][ T5952] Bluetooth: hci3: command 0x0405 tx timeout [ 62.307935][ T6424] fuse: Unknown parameter 'root|ade' [ 62.308817][ T6425] fuse: Unknown parameter 'root|ade' [ 62.377793][ T831] IPVS: starting estimator thread 0... [ 62.418299][ T834] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.478368][ T6432] IPVS: using max 38 ests per chain, 91200 per kthread [ 62.547569][ T6438] netlink: 64 bytes leftover after parsing attributes in process `syz.3.103'. [ 62.549362][ T6439] Zero length message leads to an empty skb [ 62.588280][ T834] usb 7-1: Using ep0 maxpacket: 16 [ 62.592842][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 62.604581][ T6444] overlayfs: failed to resolve './bus': -2 [ 62.612155][ T834] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 62.615791][ T834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.626549][ T834] usb 7-1: Product: syz [ 62.628415][ T834] usb 7-1: Manufacturer: syz [ 62.630539][ T834] usb 7-1: SerialNumber: syz [ 62.633874][ T834] usb 7-1: config 0 descriptor?? [ 62.637419][ T834] hub 7-1:0.0: bad descriptor, ignoring hub [ 62.640212][ T834] hub 7-1:0.0: probe with driver hub failed with error -5 [ 62.646425][ T834] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6 [ 62.674533][ T6449] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 62.686882][ T6449] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 63.621172][ T831] usb 7-1: USB disconnect, device number 3 [ 63.698730][ T6483] 9pnet_fd: Insufficient options for proto=fd [ 64.502043][ T6497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.117'. [ 64.754002][ T6508] syz.1.120: attempt to access beyond end of device [ 64.754002][ T6508] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 64.758471][ T6508] syz.1.120: attempt to access beyond end of device [ 64.758471][ T6508] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 64.762459][ T6508] Mount JFS Failure: -5 [ 64.763872][ T6508] jfs_mount failed w/return code = -5 [ 65.021670][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 65.883402][ T6096] Buffer I/O error on dev loop7, logical block 4095, async page read [ 67.797516][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.140'. [ 68.065942][ T6603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.143'. [ 68.575239][ T6624] autofs: Bad value for 'fd' [ 69.332603][ T6638] netlink: 'syz.0.152': attribute type 4 has an invalid length. [ 69.394685][ T5944] Bluetooth: Unexpected continuation frame (len 16) [ 69.681225][ T6654] autofs: Bad value for 'fd' [ 70.802036][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.804249][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.256514][ T6691] autofs: Bad value for 'fd' [ 71.663690][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 72.343581][ T39] audit: type=1800 audit(1735809586.457:2): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.173" name="bus" dev="9p" ino=37099020 res=0 errno=0 [ 72.347994][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'. [ 72.493207][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 72.505639][ T6711] veth3: entered promiscuous mode [ 73.098732][ T6708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.268980][ T6729] No control pipe specified [ 73.526112][ T6740] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 74.269728][ T6744] netlink: 'syz.2.182': attribute type 1 has an invalid length. [ 75.001718][ T6754] pim6reg: entered allmulticast mode [ 75.004439][ T6755] pim6reg: left allmulticast mode [ 75.073231][ T6757] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 75.098684][ T6759] No control pipe specified [ 75.302029][ T6765] vivid-003: disconnect [ 76.009147][ T6760] vivid-003: reconnect [ 78.905468][ T6812] binder: Unknown parameter 'smackfsroot' [ 79.157938][ T6815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.199'. [ 79.234048][ T6818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.200'. [ 79.571399][ T6822] netlink: 44 bytes leftover after parsing attributes in process `syz.0.201'. [ 79.782456][ T6831] fuse: Unknown parameter 'RTgدr.' [ 80.384290][ T6838] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 81.057179][ T56] cfg80211: failed to load regulatory.db [ 83.414268][ T6852] netlink: 'syz.3.210': attribute type 4 has an invalid length. [ 83.728179][ T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 83.881548][ T35] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 83.884756][ T35] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 83.887679][ T35] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 83.890782][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.894315][ T6856] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 83.900969][ T35] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 84.099459][ T35] usb 8-1: USB disconnect, device number 2 [ 84.320385][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 84.323153][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 86.584370][ T6874] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 87.027634][ T6882] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 90.172252][ T6914] netlink: 'syz.0.223': attribute type 1 has an invalid length. [ 90.414906][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.419694][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.424178][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.429263][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.432152][ T5952] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.435883][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.561637][ T6916] chnl_net:caif_netlink_parms(): no params data found [ 91.126527][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.129516][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.132763][ T6916] bridge_slave_0: entered allmulticast mode [ 91.137258][ T6916] bridge_slave_0: entered promiscuous mode [ 91.141561][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.144530][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.147580][ T6916] bridge_slave_1: entered allmulticast mode [ 91.150678][ T6916] bridge_slave_1: entered promiscuous mode [ 91.174592][ T6916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.191982][ T6916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.234523][ T6916] team0: Port device team_slave_0 added [ 91.237390][ T6916] team0: Port device team_slave_1 added [ 91.255132][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.257296][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.266612][ T6916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.272816][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.274972][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.284870][ T6916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.369194][ T6916] hsr_slave_0: entered promiscuous mode [ 91.371483][ T6916] hsr_slave_1: entered promiscuous mode [ 91.373539][ T6916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.375807][ T6916] Cannot create hsr debugfs directory [ 91.464330][ T6916] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.469334][ T6916] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.476991][ T6916] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.482538][ T6936] fuse: Unknown parameter 'fdZ' [ 91.483271][ T6916] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.497494][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.499732][ T6916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.502119][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.504820][ T6916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.531977][ T6916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.541067][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.561908][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.575989][ T6916] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.581019][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.583516][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.588229][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.590403][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.674808][ T6947] netlink: 'syz.0.230': attribute type 4 has an invalid length. [ 91.679605][ T6916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.691440][ T6947] netlink: 'syz.0.230': attribute type 4 has an invalid length. [ 91.790486][ T6916] veth0_vlan: entered promiscuous mode [ 91.796715][ T6916] veth1_vlan: entered promiscuous mode [ 91.808857][ T6916] veth0_macvtap: entered promiscuous mode [ 91.812643][ T6916] veth1_macvtap: entered promiscuous mode [ 91.820815][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.823963][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.826979][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.831021][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.834256][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.837505][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.840878][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.844149][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.849189][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.854338][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.857491][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.860658][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.863788][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.866706][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.870143][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.873157][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.876282][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.879918][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.884173][ T6916] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.886942][ T6916] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.889762][ T6916] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.892433][ T6916] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.923167][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.927418][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.943773][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.947120][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.478256][ T5944] Bluetooth: hci4: command tx timeout [ 92.927616][ T6969] netlink: 84 bytes leftover after parsing attributes in process `syz.0.233'. [ 93.200152][ T5944] Bluetooth: hci2: command tx timeout [ 93.306626][ T6963] Set syz1 is full, maxelem 65536 reached [ 94.558359][ T5952] Bluetooth: hci4: command tx timeout [ 95.124256][ T6983] delete_channel: no stack [ 95.412827][ T5952] Bluetooth: hci1: unexpected event 0x3d length: 15 > 14 [ 96.638248][ T5952] Bluetooth: hci4: command tx timeout [ 97.440913][ T5952] Bluetooth: hci1: command 0x0406 tx timeout [ 98.719330][ T5952] Bluetooth: hci4: command tx timeout [ 99.155879][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 99.296847][ T7022] 9pnet_fd: Insufficient options for proto=fd [ 99.353598][ T7028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.364019][ T7028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.601771][ T1137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.657080][ T1137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.732415][ T1137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.783656][ T1137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.869310][ T1137] bridge_slave_1: left allmulticast mode [ 99.871141][ T1137] bridge_slave_1: left promiscuous mode [ 99.873722][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.877841][ T1137] bridge_slave_0: left allmulticast mode [ 99.880522][ T1137] bridge_slave_0: left promiscuous mode [ 99.882321][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.113634][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.122636][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.126337][ T1137] bond0 (unregistering): Released all slaves [ 100.810456][ T1137] hsr_slave_0: left promiscuous mode [ 100.814582][ T1137] hsr_slave_1: left promiscuous mode [ 100.816815][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.820171][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.823956][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.826360][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.846824][ T1137] veth1_macvtap: left promiscuous mode [ 100.848852][ T1137] veth0_macvtap: left promiscuous mode [ 100.850579][ T1137] veth1_vlan: left promiscuous mode [ 100.852234][ T1137] veth0_vlan: left promiscuous mode [ 101.139729][ T834] libceph: connect (1)[c::]:6789 error -101 [ 101.165449][ T834] libceph: mon0 (1)[c::]:6789 connect error [ 101.342960][ T7098] ceph: No mds server is up or the cluster is laggy [ 101.521700][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 101.581233][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 102.219614][ T7121] FAULT_INJECTION: forcing a failure. [ 102.219614][ T7121] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.223680][ T7121] CPU: 3 UID: 0 PID: 7121 Comm: syz.4.266 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 102.226862][ T7121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.231045][ T7121] Call Trace: [ 102.232359][ T7121] [ 102.233527][ T7121] dump_stack_lvl+0x16c/0x1f0 [ 102.235394][ T7121] should_fail_ex+0x497/0x5b0 [ 102.237260][ T7121] _copy_from_user+0x2e/0xd0 [ 102.239072][ T7121] get_compat_msghdr+0xa8/0x170 [ 102.240765][ T7121] ? __pfx_get_compat_msghdr+0x10/0x10 [ 102.242472][ T7121] ? __pfx_lock_release+0x10/0x10 [ 102.243986][ T7121] ? find_held_lock+0x2d/0x110 [ 102.245440][ T7121] ___sys_sendmsg+0x1b0/0x1e0 [ 102.246884][ T7121] ? __up_read+0x1fb/0x760 [ 102.248235][ T7121] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.249831][ T7121] ? handle_mm_fault+0x497/0xaa0 [ 102.251346][ T7121] ? __pfx___might_resched+0x10/0x10 [ 102.252978][ T7121] ? __sys_sendmmsg+0x30e/0x420 [ 102.254461][ T7121] __sys_sendmmsg+0x2fa/0x420 [ 102.255915][ T7121] ? __pfx___sys_sendmmsg+0x10/0x10 [ 102.257517][ T7121] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.259331][ T7121] ? fput+0x67/0x440 [ 102.260526][ T7121] ? ksys_write+0x1ba/0x250 [ 102.261925][ T7121] ? __pfx_ksys_write+0x10/0x10 [ 102.263406][ T7121] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 102.265105][ T7121] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 102.267089][ T7121] __do_fast_syscall_32+0x73/0x120 [ 102.268646][ T7121] do_fast_syscall_32+0x32/0x80 [ 102.270140][ T7121] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.272064][ T7121] RIP: 0023:0xf706e579 [ 102.273331][ T7121] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 102.279143][ T7121] RSP: 002b:00000000f503f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 102.281665][ T7121] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200092c0 [ 102.284033][ T7121] RDX: 00000000000004ff RSI: 0000000000000011 RDI: 0000000000000000 [ 102.286448][ T7121] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.288821][ T7121] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 102.291194][ T7121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.293585][ T7121] [ 104.458271][ T833] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.608272][ T833] usb 5-1: Using ep0 maxpacket: 8 [ 104.611906][ T833] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 104.615346][ T833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 104.618556][ T833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.621532][ T833] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.625439][ T833] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.628243][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.678427][ T7213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.284'. [ 104.681706][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.683964][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.858783][ T833] usb 5-1: GET_CAPABILITIES returned 0 [ 104.860506][ T833] usbtmc 5-1:16.0: can't read capabilities [ 105.329691][ T7230] ALSA: mixer_oss: invalid OSS volume '}8z00000' [ 105.618535][ T7241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.626455][ T7241] option changes via remount are deprecated (pid=7240 comm=syz.2.291) [ 105.698566][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 105.701259][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 106.382808][ T7253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.294'. [ 106.491307][ T7257] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 106.494412][ T7257] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 106.548848][ T7254] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 106.551860][ T7254] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 106.562399][ T7254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.295'. [ 106.839970][ T7259] syz.4.296 (7259) used greatest stack depth: 20144 bytes left [ 107.005310][ T7264] FAULT_INJECTION: forcing a failure. [ 107.005310][ T7264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.009556][ T7264] CPU: 3 UID: 0 PID: 7264 Comm: syz.4.297 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 107.013101][ T7264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.016403][ T7264] Call Trace: [ 107.017439][ T7264] [ 107.018347][ T7264] dump_stack_lvl+0x16c/0x1f0 [ 107.019811][ T7264] should_fail_ex+0x497/0x5b0 [ 107.021313][ T7264] _copy_from_user+0x2e/0xd0 [ 107.022708][ T7264] get_compat_msghdr+0xa8/0x170 [ 107.024213][ T7264] ? __pfx_get_compat_msghdr+0x10/0x10 [ 107.025862][ T7264] ? __pfx_lock_release+0x10/0x10 [ 107.027365][ T7264] ? find_held_lock+0x2d/0x110 [ 107.028853][ T7264] ___sys_sendmsg+0x1b0/0x1e0 [ 107.030340][ T7264] ? __up_read+0x1fb/0x760 [ 107.031771][ T7264] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.033619][ T7264] ? handle_mm_fault+0x497/0xaa0 [ 107.035136][ T7264] ? __pfx___might_resched+0x10/0x10 [ 107.036751][ T7264] ? __sys_sendmmsg+0x30e/0x420 [ 107.038230][ T7264] __sys_sendmmsg+0x2fa/0x420 [ 107.039635][ T7264] ? __pfx___sys_sendmmsg+0x10/0x10 [ 107.041281][ T7264] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.043690][ T7264] ? fput+0x67/0x440 [ 107.045337][ T7264] ? ksys_write+0x1ba/0x250 [ 107.047144][ T7264] ? __pfx_ksys_write+0x10/0x10 [ 107.049120][ T7264] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 107.051364][ T7264] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 107.053954][ T7264] __do_fast_syscall_32+0x73/0x120 [ 107.056053][ T7264] do_fast_syscall_32+0x32/0x80 [ 107.058033][ T7264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.060637][ T7264] RIP: 0023:0xf706e579 [ 107.062333][ T7264] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 107.070233][ T7264] RSP: 002b:00000000f503f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 107.073582][ T7264] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200092c0 [ 107.075995][ T7264] RDX: 00000000000004ff RSI: 0000000000000011 RDI: 0000000000000000 [ 107.079040][ T7264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.082148][ T7264] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 107.085165][ T7264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.087547][ T7264] [ 107.088848][ C3] vkms_vblank_simulate: vblank timer overrun [ 107.256441][ T30] usb 5-1: USB disconnect, device number 3 [ 109.081278][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 110.308254][ T5981] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 110.472264][ T5981] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.475710][ T5981] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 109, changing to 10 [ 110.479736][ T5981] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42584, setting to 1024 [ 110.483083][ T5981] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.485806][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.491768][ T7334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.495477][ T5981] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.613221][ T7342] FAULT_INJECTION: forcing a failure. [ 110.613221][ T7342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.617374][ T7342] CPU: 2 UID: 0 PID: 7342 Comm: syz.4.315 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 110.620833][ T7342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.624015][ T7342] Call Trace: [ 110.625354][ T7342] [ 110.626570][ T7342] dump_stack_lvl+0x16c/0x1f0 [ 110.628494][ T7342] should_fail_ex+0x497/0x5b0 [ 110.630426][ T7342] _copy_from_user+0x2e/0xd0 [ 110.632361][ T7342] get_compat_msghdr+0xa8/0x170 [ 110.634355][ T7342] ? __pfx_get_compat_msghdr+0x10/0x10 [ 110.636586][ T7342] ? __pfx_lock_release+0x10/0x10 [ 110.638620][ T7342] ? find_held_lock+0x2d/0x110 [ 110.640586][ T7342] ___sys_sendmsg+0x1b0/0x1e0 [ 110.642518][ T7342] ? __up_read+0x1fb/0x760 [ 110.644340][ T7342] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.646459][ T7342] ? handle_mm_fault+0x497/0xaa0 [ 110.648501][ T7342] ? __pfx___might_resched+0x10/0x10 [ 110.650645][ T7342] ? __sys_sendmmsg+0x30e/0x420 [ 110.652623][ T7342] __sys_sendmmsg+0x2fa/0x420 [ 110.654535][ T7342] ? __pfx___sys_sendmmsg+0x10/0x10 [ 110.656672][ T7342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.659115][ T7342] ? fput+0x67/0x440 [ 110.660552][ T7342] ? ksys_write+0x1ba/0x250 [ 110.661968][ T7342] ? __pfx_ksys_write+0x10/0x10 [ 110.663440][ T7342] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 110.665134][ T7342] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 110.667177][ T7342] __do_fast_syscall_32+0x73/0x120 [ 110.668716][ T7342] do_fast_syscall_32+0x32/0x80 [ 110.670214][ T7342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.672103][ T7342] RIP: 0023:0xf706e579 [ 110.673348][ T7342] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 110.679179][ T7342] RSP: 002b:00000000f503f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 110.681660][ T7342] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200092c0 [ 110.684004][ T7342] RDX: 00000000000004ff RSI: 0000000000000011 RDI: 0000000000000000 [ 110.686542][ T7342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.689041][ T7342] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 110.691413][ T7342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.693774][ T7342] [ 110.715130][ T8] usb 7-1: USB disconnect, device number 4 [ 111.783746][ T7387] netlink: zone id is out of range [ 111.785418][ T7387] netlink: zone id is out of range [ 111.787295][ T7387] netlink: zone id is out of range [ 111.789261][ T7387] netlink: zone id is out of range [ 111.790833][ T7387] netlink: zone id is out of range [ 111.792370][ T7387] netlink: zone id is out of range [ 111.793930][ T7387] netlink: zone id is out of range [ 111.795512][ T7387] netlink: zone id is out of range [ 111.797142][ T7387] netlink: zone id is out of range [ 111.799582][ T7387] netlink: zone id is out of range [ 112.428719][ T7401] FAULT_INJECTION: forcing a failure. [ 112.428719][ T7401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.434138][ T7401] CPU: 3 UID: 0 PID: 7401 Comm: syz.0.329 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 112.438272][ T7401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.442461][ T7401] Call Trace: [ 112.443607][ T7401] [ 112.444782][ T7401] dump_stack_lvl+0x16c/0x1f0 [ 112.446649][ T7401] should_fail_ex+0x497/0x5b0 [ 112.448493][ T7401] _copy_from_user+0x2e/0xd0 [ 112.450318][ T7401] get_compat_msghdr+0xa8/0x170 [ 112.452274][ T7401] ? __pfx_get_compat_msghdr+0x10/0x10 [ 112.454414][ T7401] ? __pfx_lock_release+0x10/0x10 [ 112.456384][ T7401] ? find_held_lock+0x2d/0x110 [ 112.458304][ T7401] ___sys_sendmsg+0x1b0/0x1e0 [ 112.460088][ T7401] ? __up_read+0x1fb/0x760 [ 112.461745][ T7401] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.463596][ T7401] ? handle_mm_fault+0x497/0xaa0 [ 112.465417][ T7401] ? __pfx___might_resched+0x10/0x10 [ 112.467017][ T7401] ? __sys_sendmmsg+0x30e/0x420 [ 112.468493][ T7401] __sys_sendmmsg+0x2fa/0x420 [ 112.469941][ T7401] ? __pfx___sys_sendmmsg+0x10/0x10 [ 112.471506][ T7401] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.473338][ T7401] ? fput+0x67/0x440 [ 112.474532][ T7401] ? ksys_write+0x1ba/0x250 [ 112.475948][ T7401] ? __pfx_ksys_write+0x10/0x10 [ 112.477425][ T7401] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 112.479113][ T7401] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 112.481093][ T7401] __do_fast_syscall_32+0x73/0x120 [ 112.482638][ T7401] do_fast_syscall_32+0x32/0x80 [ 112.484109][ T7401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.486010][ T7401] RIP: 0023:0xf7f94579 [ 112.487242][ T7401] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 112.492961][ T7401] RSP: 002b:00000000f50c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 112.495485][ T7401] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200092c0 [ 112.497866][ T7401] RDX: 00000000000004ff RSI: 0000000000000011 RDI: 0000000000000000 [ 112.500225][ T7401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.502580][ T7401] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 112.504940][ T7401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.507336][ T7401] [ 112.666686][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'. [ 112.757669][ T7431] binder: BINDER_SET_CONTEXT_MGR already set [ 112.760472][ T7431] binder: 7418:7431 ioctl 4018620d 20000100 returned -16 [ 112.811044][ C3] Unknown status report in ack skb [ 113.381116][ T7454] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 113.389336][ T7454] CIFS mount error: No usable UNC path provided in device string! [ 113.389336][ T7454] [ 113.392538][ T7454] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 113.449113][ T7461] Bluetooth: MGMT ver 1.23 [ 114.886388][ T5952] Bluetooth: hci3: sending frame failed (-49) [ 114.889950][ T5944] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 115.361888][ T7525] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 115.369246][ T7525] macvlan0: entered promiscuous mode [ 115.370935][ T7525] macvlan0: entered allmulticast mode [ 115.374661][ T7525] veth1_vlan: entered allmulticast mode [ 115.377734][ T7525] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 115.455402][ T7533] IPv6: syztnl0: Disabled Multicast RS [ 116.678239][ T39] audit: type=1326 audit(1735809630.787:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.3.359" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x0 [ 116.705769][ T7579] tmpfs: Bad value for 'size' [ 116.708385][ T7579] netlink: 'syz.2.363': attribute type 10 has an invalid length. [ 116.727723][ T7579] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.750806][ T7579] netlink: 164 bytes leftover after parsing attributes in process `syz.2.363'. [ 117.753033][ T7599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.369'. [ 117.801062][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 117.805375][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 117.988603][ T30] kernel write not supported for file /361/net/ip_vs_stats_percpu (pid: 30 comm: kworker/1:0) [ 118.667928][ T7621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.375'. [ 119.197874][ T7643] netlink: 'syz.4.382': attribute type 1 has an invalid length. [ 119.280377][ T7648] netlink: 'syz.3.384': attribute type 10 has an invalid length. [ 119.589469][ T7656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.386'. [ 119.592122][ T7656] netlink: 172 bytes leftover after parsing attributes in process `syz.3.386'. [ 121.030360][ T5987] IPVS: starting estimator thread 0... [ 121.063251][ T7697] netlink: 21 bytes leftover after parsing attributes in process `syz.2.393'. [ 121.118236][ T7696] IPVS: using max 38 ests per chain, 91200 per kthread [ 122.184642][ T834] IPVS: starting estimator thread 0... [ 122.278419][ T7726] IPVS: using max 37 ests per chain, 88800 per kthread [ 122.799048][ T7740] netlink: 'syz.2.411': attribute type 18 has an invalid length. [ 122.806039][ T7740] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.810014][ T7740] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.812602][ T7740] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.815256][ T7740] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.746233][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.422'. [ 123.886085][ T7779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.891076][ T7779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.896483][ T7779] bond0 (unregistering): Released all slaves [ 123.951431][ T7781] veth1_macvtap: left promiscuous mode [ 123.953180][ T7781] macsec0: entered promiscuous mode [ 123.954780][ T7781] macsec0: entered allmulticast mode [ 124.047033][ T7783] binder: 7782:7783 ioctl 89f3 20000080 returned -22 [ 124.545751][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'. [ 124.642995][ T7820] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 125.904780][ T7857] syz.0.443: attempt to access beyond end of device [ 125.904780][ T7857] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 125.909461][ T7857] syz.0.443: attempt to access beyond end of device [ 125.909461][ T7857] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 125.914458][ T7857] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 125.918016][ T7857] syz.0.443: attempt to access beyond end of device [ 125.918016][ T7857] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 125.923712][ T7857] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 125.926735][ T7857] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 125.929207][ T7857] UDF-fs: Scanning with blocksize 512 failed [ 125.932012][ T7857] syz.0.443: attempt to access beyond end of device [ 125.932012][ T7857] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 125.935906][ T7857] syz.0.443: attempt to access beyond end of device [ 125.935906][ T7857] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 125.939833][ T7857] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 125.942678][ T7857] syz.0.443: attempt to access beyond end of device [ 125.942678][ T7857] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 125.946366][ T7857] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 125.949321][ T7857] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 125.951720][ T7857] UDF-fs: Scanning with blocksize 1024 failed [ 125.954220][ T7857] syz.0.443: attempt to access beyond end of device [ 125.954220][ T7857] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 125.958046][ T7857] syz.0.443: attempt to access beyond end of device [ 125.958046][ T7857] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 125.962242][ T7857] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 125.965343][ T7857] syz.0.443: attempt to access beyond end of device [ 125.965343][ T7857] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 125.970301][ T7857] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 125.973078][ T7857] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 125.975329][ T7857] UDF-fs: Scanning with blocksize 2048 failed [ 125.977396][ T7857] syz.0.443: attempt to access beyond end of device [ 125.977396][ T7857] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 125.981921][ T7857] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 125.985517][ T7857] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 125.988342][ T7857] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 125.990636][ T7857] UDF-fs: Scanning with blocksize 4096 failed [ 125.992463][ T7857] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 126.232826][ T7863] netlink: 'syz.2.450': attribute type 1 has an invalid length. [ 126.691428][ T7838] [U] v3 [ 127.036831][ T7871] net_ratelimit: 240 callbacks suppressed [ 127.036841][ T7871] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 127.250316][ T7885] warning: `syz.0.456' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.276656][ T7912] capability: warning: `syz.0.464' uses deprecated v2 capabilities in a way that may be insecure [ 128.434218][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 129.538220][ T832] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.758321][ T832] usb 5-1: Using ep0 maxpacket: 32 [ 129.761589][ T832] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.764933][ T832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 129.768254][ T832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.772037][ T832] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.778328][ T832] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 129.781832][ T832] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 129.784942][ T832] usb 5-1: Product: syz [ 129.786476][ T832] usb 5-1: Manufacturer: syz [ 129.787896][ T832] usb 5-1: SerialNumber: syz [ 129.794263][ T7951] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.798972][ T832] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input7 [ 129.806862][ C3] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 130.054960][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.058365][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.068509][ T56] usb 5-1: USB disconnect, device number 4 [ 130.077336][ T56] appletouch 5-1:1.0: input: appletouch disconnected [ 130.351226][ T7984] geneve2: entered promiscuous mode [ 130.352828][ T7984] geneve2: entered allmulticast mode [ 130.738323][ T833] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 130.740104][ T8006] No source specified [ 130.889212][ T833] usb 8-1: Using ep0 maxpacket: 16 [ 130.900666][ T833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.914168][ T8014] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 130.916237][ T8014] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.919675][ T8014] vhci_hcd vhci_hcd.0: Device attached [ 130.924800][ T833] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 130.930605][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.946304][ T833] usb 8-1: config 0 descriptor?? [ 130.972298][ T8018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.491'. [ 130.976434][ T8018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.491'. [ 130.980759][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 130.983649][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 131.318510][ T6095] vhci_hcd: vhci_device speed not set [ 131.607052][ T833] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 131.609834][ T6095] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 131.617303][ T833] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 131.642286][ T833] hid-steam 0003:28DE:1102.0002: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 131.698418][ T833] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' connected [ 131.704049][ T833] input: Steam Controller as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:28DE:1102.0002/input/input8 [ 131.721158][ T833] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 131.723996][ T833] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 131.731260][ T833] hid-steam 0003:28DE:1102.0003: hidraw1: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 131.739584][ T833] usb 8-1: USB disconnect, device number 3 [ 131.766630][ T833] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' disconnected [ 131.780104][ T5944] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 131.929778][ T5982] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 132.141857][ T5982] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.144596][ T5982] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 132.147644][ T5982] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.150509][ T5982] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 132.153838][ T5982] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 132.159400][ T5982] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.162172][ T5982] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.164473][ T5982] usb 9-1: Product: syz [ 132.165715][ T5982] usb 9-1: Manufacturer: syz [ 132.170747][ T5982] cdc_wdm 9-1:1.0: skipping garbage [ 132.172284][ T5982] cdc_wdm 9-1:1.0: skipping garbage [ 132.177905][ T5982] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 132.179931][ T5982] cdc_wdm 9-1:1.0: Unknown control protocol [ 132.249150][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.251084][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.338235][ T8015] vhci_hcd: connection reset by peer [ 132.342266][ T45] vhci_hcd: stop threads [ 132.345330][ T45] vhci_hcd: release socket [ 132.348058][ T45] vhci_hcd: disconnect device [ 132.398786][ T832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 132.431512][ T35] usb 9-1: USB disconnect, device number 2 [ 133.046050][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 133.051662][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'. [ 133.061279][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 133.114730][ T8087] trusted_key: encrypted_key: insufficient parameters specified [ 133.818282][ T832] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 133.970474][ T832] usb 8-1: config 1 has an invalid interface number: 4 but max is 2 [ 133.973033][ T832] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 133.976133][ T832] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.979659][ T832] usb 8-1: config 1 has no interface number 1 [ 133.982492][ T832] usb 8-1: too many endpoints for config 1 interface 4 altsetting 192: 229, using maximum allowed: 30 [ 133.987095][ T832] usb 8-1: config 1 interface 4 altsetting 192 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 133.992971][ T832] usb 8-1: config 1 interface 4 has no altsetting 0 [ 133.997924][ T832] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.000838][ T832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.003815][ T832] usb 8-1: Product: syz [ 134.005647][ T832] usb 8-1: Manufacturer: ᐊ [ 134.007441][ T832] usb 8-1: SerialNumber: syz [ 134.220444][ T832] usb 8-1: 0:2 : does not exist [ 134.229497][ T832] usb 8-1: USB disconnect, device number 4 [ 134.390056][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.708269][ T6095] vhci_hcd: vhci_device speed not set [ 139.588571][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 139.730355][ T39] audit: type=1326 audit(1735809653.847:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.3.516" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 139.738170][ T39] audit: type=1326 audit(1735809653.847:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.3.516" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 139.744702][ T39] audit: type=1326 audit(1735809653.847:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.3.516" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 139.754154][ T39] audit: type=1326 audit(1735809653.847:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.3.516" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 139.761192][ T39] audit: type=1326 audit(1735809653.847:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.3.516" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 139.768088][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 139.772320][ T39] audit: type=1326 audit(1735809653.857:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.3.516" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 139.778857][ T39] audit: type=1326 audit(1735809653.857:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.3.516" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 139.785111][ T39] audit: type=1326 audit(1735809653.857:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.3.516" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 139.791465][ T39] audit: type=1326 audit(1735809653.857:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.3.516" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 139.883426][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 141.149516][ T8166] netlink: 'syz.4.525': attribute type 1 has an invalid length. [ 141.559970][ T5944] Bluetooth: hci4: link tx timeout [ 141.562621][ T5944] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.550005][ T832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 142.598792][ T8177] ceph: No mds server is up or the cluster is laggy [ 142.781890][ T8212] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 143.598342][ T5944] Bluetooth: hci4: command 0x0406 tx timeout [ 150.356615][ T8251] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 150.738594][ T5987] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 150.838206][ T833] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.999173][ T833] usb 5-1: Using ep0 maxpacket: 32 [ 151.005027][ T833] usb 5-1: config 0 has no interfaces? [ 151.006714][ T833] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.010097][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.013364][ T833] usb 5-1: config 0 descriptor?? [ 151.223652][ T8245] : renamed from ipvlan1 [ 151.230154][ T833] usb 5-1: USB disconnect, device number 5 [ 159.618207][ T834] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 159.632538][ T39] audit: type=1326 audit(1735809673.747:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.4.555" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 159.788159][ T834] usb 7-1: Using ep0 maxpacket: 32 [ 159.791446][ T834] usb 7-1: config 0 has no interfaces? [ 159.793069][ T834] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 159.795757][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.802909][ T834] usb 7-1: config 0 descriptor?? [ 160.010272][ T8353] : renamed from ipvlan1 [ 160.018346][ T833] usb 7-1: USB disconnect, device number 5 [ 160.777673][ T8377] netlink: 44 bytes leftover after parsing attributes in process `syz.4.559'. [ 160.988646][ T5987] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 161.388230][ T833] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 161.558197][ T833] usb 8-1: Using ep0 maxpacket: 32 [ 161.561927][ T833] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.565586][ T833] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 161.569025][ T833] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 161.572445][ T833] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.578475][ T833] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 161.581217][ T833] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 161.583677][ T833] usb 8-1: Product: syz [ 161.584950][ T833] usb 8-1: Manufacturer: syz [ 161.586367][ T833] usb 8-1: SerialNumber: syz [ 161.591579][ T8395] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.595125][ T833] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input9 [ 161.601446][ C0] appletouch 8-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 161.852466][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.855694][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.860891][ T833] usb 8-1: USB disconnect, device number 5 [ 161.866495][ T833] appletouch 8-1:1.0: input: appletouch disconnected [ 161.914739][ T8417] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 161.918678][ T8417] trusted_key: encrypted_key: insufficient parameters specified [ 162.109657][ T8417] mmap: syz.0.566 (8417) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 162.559753][ T8426] nbd0: detected capacity change from 0 to 67108884 [ 162.569995][ T8415] block nbd0: Send control failed (result -89) [ 162.572244][ T8415] block nbd0: Request send failed, requeueing [ 162.577139][ T5952] block nbd0: Receive control failed (result -32) [ 162.578502][ T69] block nbd0: Dead connection, failed to find a fallback [ 162.582918][ T69] block nbd0: shutting down sockets [ 162.584695][ T69] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.587465][ T69] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.590103][ T8415] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.592931][ T8415] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.595433][ T8415] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.598217][ T8415] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.600546][ T8415] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.603165][ T8415] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.605445][ T8415] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.608382][ T8415] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.610741][ T8415] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.613790][ T8415] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.616160][ T8415] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.619214][ T8415] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.621601][ T8415] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.624233][ T8415] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.626700][ T8415] ldm_validate_partition_table(): Disk read failed. [ 162.630094][ T8415] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.630630][ T8427] netlink: 'syz.0.568': attribute type 1 has an invalid length. [ 162.632827][ T8415] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.632902][ T8415] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.640342][ T8415] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.642785][ T8415] Dev nbd0: unable to read RDB block 0 [ 162.644631][ T8415] nbd0: unable to read partition table [ 162.659645][ T8426] ldm_validate_partition_table(): Disk read failed. [ 162.663017][ T8426] Dev nbd0: unable to read RDB block 0 [ 162.666579][ T8426] nbd0: unable to read partition table [ 162.688990][ T8415] ldm_validate_partition_table(): Disk read failed. [ 162.691535][ T8415] Dev nbd0: unable to read RDB block 0 [ 162.693826][ T8415] nbd0: unable to read partition table [ 162.751978][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 162.755088][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=33554441, location=33554441 [ 162.760493][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=33554185, location=33554185 [ 162.763675][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=33554440, location=33554440 [ 162.769425][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=33554184, location=33554184 [ 162.774642][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=33554439, location=33554439 [ 162.778804][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=33554183, location=33554183 [ 162.782618][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=33554291, location=33554291 [ 162.786101][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=33554035, location=33554035 [ 162.789676][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=33554289, location=33554289 [ 162.793039][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=33554033, location=33554033 [ 162.797984][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 162.805733][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 162.809015][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777220, location=16777220 [ 162.812754][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776964, location=16776964 [ 162.816303][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777219, location=16777219 [ 162.820696][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776963, location=16776963 [ 162.824265][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777218, location=16777218 [ 162.827782][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776962, location=16776962 [ 162.831664][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777070, location=16777070 [ 162.835424][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776814, location=16776814 [ 162.840019][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777068, location=16777068 [ 162.843663][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776812, location=16776812 [ 162.847270][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 162.854805][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 162.864397][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388609, location=8388609 [ 162.871286][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388353, location=8388353 [ 162.878810][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388608, location=8388608 [ 162.882195][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388352, location=8388352 [ 162.885730][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388607, location=8388607 [ 162.889774][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388351, location=8388351 [ 162.893559][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388459, location=8388459 [ 162.897132][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388203, location=8388203 [ 162.901735][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388457, location=8388457 [ 162.905252][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388201, location=8388201 [ 162.908872][ T8426] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 162.911693][ T8426] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 167.495669][ T8454] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 167.499834][ T8454] overlayfs: maximum fs stacking depth exceeded [ 167.526179][ T8464] tipc: Started in network mode [ 167.527680][ T8464] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 167.531878][ T8464] tipc: Enabled bearer , priority 0 [ 167.535618][ T8454] xt_limit: Overflow, try lower: 0/0 [ 168.147714][ T5987] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 168.608201][ T833] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 168.634082][ T39] audit: type=1400 audit(1735809682.747:14): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8487 comm="syz.4.578" [ 168.669748][ T35] tipc: Node number set to 11578026 [ 168.758346][ T833] usb 8-1: Using ep0 maxpacket: 32 [ 168.759654][ T8492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.580'. [ 168.761482][ T833] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.762927][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 168.766444][ T833] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 168.772251][ T833] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 168.775629][ T833] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.783605][ T833] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 168.786400][ T833] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 168.789777][ T833] usb 8-1: Product: syz [ 168.791397][ T833] usb 8-1: Manufacturer: syz [ 168.792850][ T833] usb 8-1: SerialNumber: syz [ 168.797988][ T8485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.803852][ T833] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input10 [ 168.807570][ C0] appletouch 8-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 169.003297][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.006081][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.012084][ T35] usb 8-1: USB disconnect, device number 6 [ 169.021399][ T35] appletouch 8-1:1.0: input: appletouch disconnected [ 169.183872][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'. [ 169.248664][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'. [ 169.314651][ T8508] af_packet: tpacket_rcv: packet too big, clamped from 140 to 4294967272. macoff=96 [ 169.333459][ T39] audit: type=1326 audit(1735809683.447:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 169.342246][ T39] audit: type=1326 audit(1735809683.447:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 169.348833][ T39] audit: type=1326 audit(1735809683.457:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.586" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 169.355160][ T39] audit: type=1326 audit(1735809683.457:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 169.362293][ T39] audit: type=1326 audit(1735809683.457:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 169.368871][ T39] audit: type=1326 audit(1735809683.457:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.586" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 169.375350][ T39] audit: type=1326 audit(1735809683.457:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.586" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 169.381679][ T39] audit: type=1326 audit(1735809683.457:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.586" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f945a7 code=0x7ffc0000 [ 169.388548][ T39] audit: type=1326 audit(1735809683.457:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.586" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 169.708738][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 170.158330][ T5944] Bluetooth: hci0: command 0x0406 tx timeout [ 170.162038][ T5944] Bluetooth: hci2: command 0x0406 tx timeout [ 176.378034][ T8592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.900914][ T8604] ceph: No mds server is up or the cluster is laggy [ 177.384458][ T8611] Cannot find set identified by id 0 to match [ 177.702366][ T5982] kernel write not supported for file bpf-prog (pid: 5982 comm: kworker/1:3) [ 179.004591][ T832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 179.184030][ T8678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.614'. [ 179.469708][ T8684] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 179.572811][ T8693] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 179.589530][ T8693] kvm: pic: non byte read [ 179.593361][ T8693] kvm: pic: non byte read [ 179.598628][ T8693] kvm: pic: non byte read [ 179.601627][ T8693] kvm: pic: non byte read [ 179.604650][ T8693] kvm: pic: non byte read [ 179.607175][ T8693] kvm: pic: non byte read [ 179.609905][ T8693] kvm: pic: non byte read [ 179.613019][ T8693] kvm: pic: non byte read [ 179.615478][ T8693] kvm: pic: non byte read [ 179.618730][ T8693] kvm: pic: non byte read [ 179.621054][ T8693] kvm: pic: single mode not supported [ 179.621144][ T8693] kvm: pic: level sensitive irq not supported [ 185.063508][ T8727] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 185.067242][ T8727] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 185.070318][ T8727] vhci_hcd vhci_hcd.0: Device attached [ 185.559330][ T9] vhci_hcd: vhci_device speed not set [ 185.561831][ T8723] netlink: 72 bytes leftover after parsing attributes in process `syz.0.620'. [ 185.629864][ T9] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 186.588717][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 186.876175][ T8728] vhci_hcd: connection reset by peer [ 186.888402][ T12] vhci_hcd: stop threads [ 186.890002][ T12] vhci_hcd: release socket [ 186.891424][ T12] vhci_hcd: disconnect device [ 187.314948][ T8767] 9pnet_fd: Insufficient options for proto=fd [ 187.598447][ T6095] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 187.768218][ T6095] usb 5-1: Using ep0 maxpacket: 32 [ 187.771356][ T6095] usb 5-1: config 0 has no interfaces? [ 187.773027][ T6095] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 187.775706][ T6095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.779254][ T6095] usb 5-1: config 0 descriptor?? [ 187.998404][ T5948] Bluetooth: hci1: command 0x0406 tx timeout [ 188.015893][ T5981] usb 5-1: USB disconnect, device number 6 [ 188.218185][ T25] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 188.389785][ T25] usb 8-1: not running at top speed; connect to a high speed hub [ 188.393344][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 188.397845][ T25] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 188.403074][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.406015][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.408633][ T25] usb 8-1: Product: 㒧ꞿ崙荄硵¶踷爥ர踔硪榳ண銕㹔䔺燙׹臌蕂"䄊欿ᙗ䓑궖倁멃簱釛䯙藫䰦눬墀퓏迖溅쨺섵㔁ᰔ⥫쑪굗질탛꘍革䴺뾟燽掔驫 [ 188.414722][ T25] usb 8-1: Manufacturer: ఁ [ 188.416203][ T25] usb 8-1: SerialNumber: ␊ [ 188.419659][ T8783] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 188.630438][ T25] cdc_ncm 8-1:1.0: bind() failure [ 188.642785][ T25] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 188.644820][ T25] cdc_ncm 8-1:1.1: bind() failure [ 188.647669][ T25] usb 8-1: USB disconnect, device number 7 [ 188.999598][ T832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 189.299998][ T8824] netlink: 'syz.3.646': attribute type 1 has an invalid length. [ 190.708286][ T9] vhci_hcd: vhci_device speed not set [ 193.679942][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.682604][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.725354][ T8868] vti0: entered promiscuous mode [ 196.107810][ T8880] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.110415][ T8880] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.112920][ T8880] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.115416][ T8880] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.118202][ T8880] vxlan0: entered promiscuous mode [ 196.119722][ T8880] vxlan0: entered allmulticast mode [ 196.283178][ T5981] IPVS: starting estimator thread 0... [ 196.378438][ T8883] IPVS: using max 37 ests per chain, 88800 per kthread [ 196.529786][ T8880] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.532403][ T8880] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.534942][ T8880] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.537581][ T8880] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.816209][ T8879] dccp_close: ABORT with 10426 bytes unread [ 196.898017][ T8889] bio_check_eod: 2 callbacks suppressed [ 196.898028][ T8889] syz.3.659: attempt to access beyond end of device [ 196.898028][ T8889] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 196.924208][ T8889] syz.3.659: attempt to access beyond end of device [ 196.924208][ T8889] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 196.944854][ T8889] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 196.949006][ T8889] syz.3.659: attempt to access beyond end of device [ 196.949006][ T8889] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 196.953038][ T8889] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 196.956933][ T8889] syz.3.659: attempt to access beyond end of device [ 196.956933][ T8889] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 196.977852][ T8889] syz.3.659: attempt to access beyond end of device [ 196.977852][ T8889] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 197.001039][ T8889] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 197.006723][ T8889] syz.3.659: attempt to access beyond end of device [ 197.006723][ T8889] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 197.010636][ T8889] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 197.013795][ T8889] syz.3.659: attempt to access beyond end of device [ 197.013795][ T8889] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 197.022996][ T8889] syz.3.659: attempt to access beyond end of device [ 197.022996][ T8889] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 197.050194][ T8889] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 197.053071][ T8889] syz.3.659: attempt to access beyond end of device [ 197.053071][ T8889] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 197.056733][ T8889] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 197.059839][ T8889] syz.3.659: attempt to access beyond end of device [ 197.059839][ T8889] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 197.076436][ T8889] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 197.081686][ T8889] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 197.099832][ T8889] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 197.578415][ T832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 198.614211][ T8952] usb 2-1: USB disconnect, device number 2 [ 198.718231][ T5948] Bluetooth: hci2: command 0x0406 tx timeout [ 199.029013][ T8963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.671'. [ 199.859593][ T8962] x86/PAT: syz.0.671:8962 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 204.464177][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 204.738243][ T5981] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 204.775028][ T5987] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 204.921586][ T5981] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 204.923862][ T5981] usb 8-1: can't read configurations, error -71 [ 205.849291][ T9041] netlink: 'syz.3.683': attribute type 4 has an invalid length. [ 205.851767][ T9041] netlink: 17 bytes leftover after parsing attributes in process `syz.3.683'. [ 205.997444][ T9051] netlink: 'syz.3.684': attribute type 10 has an invalid length. [ 206.047671][ T9051] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 206.201864][ T9062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.686'. [ 206.429880][ T9051] syz.3.684 (9051): drop_caches: 2 [ 215.286617][ T832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 216.053879][ T9190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.697'. [ 216.198365][ T62] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 216.328353][ T62] usb 9-1: device descriptor read/64, error -71 [ 216.598181][ T62] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 216.748176][ T62] usb 9-1: device descriptor read/64, error -71 [ 216.859383][ T62] usb usb9-port1: attempt power cycle [ 217.208249][ T62] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 217.229505][ T62] usb 9-1: device descriptor read/8, error -71 [ 217.468311][ T62] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 217.488611][ T62] usb 9-1: device descriptor read/8, error -71 [ 217.600498][ T62] usb usb9-port1: unable to enumerate USB device [ 226.411083][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 226.708651][ T832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 227.239929][ T9294] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.241905][ T9294] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 227.252526][ T9294] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.254306][ T9294] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 227.262844][ T9294] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.265294][ T9294] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 227.274759][ T9294] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 227.276632][ T9294] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 229.288270][ T5948] Bluetooth: hci4: command 0x0406 tx timeout [ 229.289897][ T5952] Bluetooth: hci2: command 0x0406 tx timeout [ 229.289983][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 229.290043][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 231.358263][ T5952] Bluetooth: hci2: command 0x0406 tx timeout [ 231.358335][ T5944] Bluetooth: hci4: command 0x0406 tx timeout [ 231.368246][ T5944] Bluetooth: hci0: command 0x0406 tx timeout [ 231.368282][ T5952] Bluetooth: hci1: command 0x0406 tx timeout [ 234.607224][ T39] kauditd_printk_skb: 59 callbacks suppressed [ 234.607235][ T39] audit: type=1326 audit(1735809748.717:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.0.726" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x0 [ 235.934858][ T9380] netlink: 'syz.3.735': attribute type 4 has an invalid length. [ 235.942066][ T9380] netlink: 'syz.3.735': attribute type 4 has an invalid length. [ 236.798418][ T5944] Bluetooth: hci4: command 0x0406 tx timeout [ 239.270550][ T62] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 239.319172][ T9445] input: syz1 as /devices/virtual/input/input11 [ 239.590088][ T9460] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 239.592081][ T9460] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 239.595264][ T9460] vhci_hcd vhci_hcd.0: Device attached [ 239.989979][ T56] vhci_hcd: vhci_device speed not set [ 240.048351][ T56] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 240.538565][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.759'. [ 240.554544][ T9473] netlink: 'syz.3.759': attribute type 12 has an invalid length. [ 241.001755][ T9461] vhci_hcd: connection reset by peer [ 241.004638][ T75] vhci_hcd: stop threads [ 241.006038][ T75] vhci_hcd: release socket [ 241.007487][ T75] vhci_hcd: disconnect device [ 241.603320][ T9519] netlink: 'syz.4.769': attribute type 1 has an invalid length. [ 241.881167][ T9499] orangefs_mount: mount request failed with -4 [ 242.914700][ T9560] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 244.866472][ T9607] netlink: 72 bytes leftover after parsing attributes in process `syz.0.789'. [ 245.218370][ T56] vhci_hcd: vhci_device speed not set [ 246.508887][ T9630] netlink: 'syz.3.798': attribute type 5 has an invalid length. [ 246.524978][ T39] audit: type=1326 audit(1735809760.637:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.3.798" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x0 [ 246.561375][ T9621] dccp_close: ABORT with 10426 bytes unread [ 246.760912][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 246.765190][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 246.928317][ T6095] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 246.992830][ T9654] netlink: 'syz.2.806': attribute type 10 has an invalid length. [ 247.013893][ T9654] team0: Port device netdevsim0 added [ 247.092769][ T6095] usb 9-1: unable to get BOS descriptor or descriptor too short [ 247.096724][ T6095] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 247.099330][ T6095] usb 9-1: can't read configurations, error -71 [ 247.349911][ T9665] batman_adv: batadv0: Adding interface: ipvlan1 [ 247.352360][ T9665] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.359027][ T9665] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 247.767765][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 248.052069][ T9681] IPVS: Scheduler module ip_vs_sip not found [ 248.523762][ T9698] overlayfs: failed to resolve './file0': -2 [ 248.753964][ T9717] afs: Unknown parameter '#rX֙' [ 248.979856][ T5982] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 249.188261][ T5982] usb 5-1: Using ep0 maxpacket: 8 [ 249.193960][ T5982] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 249.208551][ T5982] usb 5-1: config 179 has no interface number 0 [ 249.210568][ T5982] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 249.230392][ T5982] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 249.250557][ T5982] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 249.272678][ T5982] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 249.287039][ T5982] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 249.317753][ T5982] usb 5-1: config 179 interface 65 has no altsetting 0 [ 249.333168][ T5982] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 249.338156][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.349117][ T9714] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 249.352366][ T9714] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 249.368215][ T5982] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input12 [ 249.410656][ T5343] input input12: unable to receive magic message: -110 [ 249.411276][ T39] audit: type=1326 audit(1735809763.527:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.3.820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7fc00000 [ 249.420623][ T5343] input input12: unable to receive magic message: -32 [ 249.540171][ T5343] input input12: unable to receive magic message: -32 [ 249.543425][ T5343] input input12: unable to receive magic message: -32 [ 249.557793][ T35] usb 5-1: USB disconnect, device number 7 [ 249.557843][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 249.562212][ T35] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 250.124096][ T9748] (syz.0.830,9748,2):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 250.127847][ T9748] (syz.0.830,9748,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 251.613645][ T9802] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 251.869357][ T9811] lo speed is unknown, defaulting to 1000 [ 251.871739][ T9811] lo speed is unknown, defaulting to 1000 [ 251.875063][ T9811] lo speed is unknown, defaulting to 1000 [ 251.879801][ T9811] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 251.884289][ T9811] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 251.897133][ T9811] lo speed is unknown, defaulting to 1000 [ 251.900768][ T9811] lo speed is unknown, defaulting to 1000 [ 251.902871][ T9811] lo speed is unknown, defaulting to 1000 [ 251.904937][ T9811] lo speed is unknown, defaulting to 1000 [ 251.912761][ T9811] 9pnet_virtio: no channels available for device syz [ 251.914900][ T9811] 9pnet_virtio: no channels available for device syz [ 251.917012][ T9811] 9pnet_virtio: no channels available for device syz [ 251.919860][ T9811] 9pnet_virtio: no channels available for device syz [ 251.921967][ T9811] 9pnet_virtio: no channels available for device syz [ 251.924371][ T9811] 9pnet_virtio: no channels available for device syz [ 251.926535][ T9811] 9pnet_virtio: no channels available for device syz [ 251.929004][ T9811] 9pnet_virtio: no channels available for device syz [ 251.931087][ T9811] 9pnet_virtio: no channels available for device syz [ 251.933191][ T9811] 9pnet_virtio: no channels available for device syz [ 251.935270][ T9811] 9pnet_virtio: no channels available for device syz [ 251.937368][ T9811] 9pnet_virtio: no channels available for device syz [ 251.939624][ T9811] 9pnet_virtio: no channels available for device syz [ 251.941726][ T9811] 9pnet_virtio: no channels available for device syz [ 251.943822][ T9811] 9pnet_virtio: no channels available for device syz [ 251.945916][ T9811] 9pnet_virtio: no channels available for device syz [ 251.948444][ T9811] 9pnet_virtio: no channels available for device syz [ 251.951108][ T9811] 9pnet_virtio: no channels available for device syz [ 251.953287][ T9811] 9pnet_virtio: no channels available for device syz [ 251.955394][ T9811] 9pnet_virtio: no channels available for device syz [ 251.957656][ T9811] 9pnet_virtio: no channels available for device syz [ 251.960146][ T9811] 9pnet_virtio: no channels available for device syz [ 251.968182][ T9811] 9pnet_virtio: no channels available for device syz [ 251.972623][ T9811] 9pnet_virtio: no channels available for device syz [ 252.046021][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 252.049615][ T9816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.850'. [ 252.386954][ T9830] tipc: Can't bind to reserved service type 2 [ 254.158452][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 254.243040][ T9872] netlink: 78 bytes leftover after parsing attributes in process `syz.2.866'. [ 254.318358][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 254.321312][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.324675][ T9] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 254.328030][ T9] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 254.331287][ T9] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 254.334164][ T9] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 254.338517][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.341193][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.343636][ T9] usb 9-1: Product: syz [ 254.344909][ T9] usb 9-1: Manufacturer: syz [ 254.347122][ T9] usb 9-1: SerialNumber: syz [ 254.489026][ T9877] sp0: Synchronizing with TNC [ 254.554534][ T9] cdc_ncm 9-1:1.0: bind() failure [ 254.557421][ T9] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 254.559997][ T9] cdc_ncm 9-1:1.1: bind() failure [ 254.570241][ T9] usb 9-1: USB disconnect, device number 9 [ 254.571711][ T35] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 254.707363][ T9875] [U] [ 254.820772][ T39] audit: type=1326 audit(1735809768.937:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.0.870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 254.827148][ T39] audit: type=1326 audit(1735809768.937:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.0.870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 254.838527][ T39] audit: type=1326 audit(1735809768.937:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.0.870" exe="/syz-executor" sig=0 arch=40000003 syscall=301 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 254.844958][ T39] audit: type=1326 audit(1735809768.937:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.0.870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 254.852251][ T39] audit: type=1326 audit(1735809768.937:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.0.870" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 254.856106][ T9887] lo speed is unknown, defaulting to 1000 [ 254.858698][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 254.862317][ T39] audit: type=1326 audit(1735809768.937:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.0.870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 254.868919][ T39] audit: type=1326 audit(1735809768.937:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.0.870" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 254.875661][ T39] audit: type=1326 audit(1735809768.937:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.0.870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 254.882413][ T35] usb 7-1: config 0 has no interfaces? [ 254.884087][ T35] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.886873][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.889780][ T39] audit: type=1326 audit(1735809768.997:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.3.871" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x0 [ 254.896865][ T35] usb 7-1: config 0 descriptor?? [ 255.110515][ T35] usb 7-1: USB disconnect, device number 6 [ 255.122963][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.124955][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.478221][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 255.628213][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 255.630963][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 255.635357][ T9] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 255.638273][ T9] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 255.640720][ T9] usb 9-1: Product: syz [ 255.642922][ T9] usb 9-1: Manufacturer: syz [ 255.644341][ T9] usb 9-1: SerialNumber: syz [ 255.647350][ T9] usb 9-1: config 0 descriptor?? [ 255.648090][ T9900] wireguard0: entered promiscuous mode [ 255.649523][ T9896] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.650578][ T9900] wireguard0: entered allmulticast mode [ 255.859018][ T9913] No control pipe specified [ 255.969879][ T35] usb 9-1: USB disconnect, device number 10 [ 256.407762][ T9929] exFAT-fs (nullb0): invalid boot record signature [ 256.410068][ T9929] exFAT-fs (nullb0): failed to read boot sector [ 256.412111][ T9929] exFAT-fs (nullb0): failed to recognize exfat type [ 256.443702][ T9931] : renamed from ipvlan1 [ 256.718292][ T35] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 256.811508][ T9936] ------------[ cut here ]------------ [ 256.814567][ T9936] kernel BUG at mm/hugetlb.c:2403! [ 256.816717][ T9936] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 256.819903][ T9936] CPU: 0 UID: 0 PID: 9936 Comm: syz.2.884 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 256.823921][ T9936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.827336][ T9936] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0 [ 256.829640][ T9936] Code: a3 d0 00 00 00 e8 54 d9 a2 ff 48 c7 c7 40 56 a1 8d e8 28 50 26 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 35 d9 a2 ff 90 <0f> 0b e8 7d 49 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 256.836917][ T9936] RSP: 0018:ffffc9000db5f8f0 EFLAGS: 00010093 [ 256.839261][ T9936] RAX: 0000000000000000 RBX: ffffffff9a3cf778 RCX: ffffffff81f67652 [ 256.842317][ T9936] RDX: ffff888022152440 RSI: ffffffff81f6768b RDI: 0000000000000007 [ 256.845387][ T9936] RBP: ffffea0001b10000 R08: 0000000000000007 R09: 0000000000000000 [ 256.848425][ T9936] R10: 0000000000000000 R11: 00000000000000c5 R12: 0000000000000000 [ 256.851495][ T9936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.854562][ T9936] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f5086b40 [ 256.858008][ T9936] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 256.860567][ T9936] CR2: 00000000f5064528 CR3: 0000000069a20000 CR4: 0000000000352ef0 [ 256.863670][ T9936] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 256.866752][ T9936] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 256.869812][ T9936] Call Trace: [ 256.871112][ T9936] [ 256.872277][ T9936] ? die+0x31/0x80 [ 256.873765][ T9936] ? do_trap+0x232/0x430 [ 256.875445][ T9936] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 256.877735][ T9936] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 256.878383][ T35] usb 9-1: device descriptor read/64, error -71 [ 256.880000][ T9936] ? do_error_trap+0xf4/0x230 [ 256.883825][ T9936] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 256.886109][ T9936] ? handle_invalid_op+0x34/0x40 [ 256.888031][ T9936] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 256.890350][ T9936] ? exc_invalid_op+0x2e/0x50 [ 256.892347][ T9936] ? asm_exc_invalid_op+0x1a/0x20 [ 256.894486][ T9936] ? alloc_hugetlb_folio_reserve+0x72/0xc0 [ 256.896972][ T9936] ? alloc_hugetlb_folio_reserve+0xab/0xc0 [ 256.899425][ T9936] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 256.901240][ T9936] memfd_alloc_folio+0x16c/0x3b0 [ 256.902738][ T9936] memfd_pin_folios+0xe41/0x1130 [ 256.904258][ T9936] ? __pfx_memfd_pin_folios+0x10/0x10 [ 256.905867][ T9936] ? __pfx___lock_acquire+0x10/0x10 [ 256.907427][ T9936] ? __pfx_down_read+0x10/0x10 [ 256.908873][ T9936] ? __fget_files+0x206/0x3a0 [ 256.910312][ T9936] udmabuf_create+0x641/0x11e0 [ 256.911756][ T9936] ? __pfx_udmabuf_create+0x10/0x10 [ 256.913309][ T9936] ? lock_acquire+0x2f/0xb0 [ 256.914690][ T9936] ? __might_fault+0xe3/0x190 [ 256.916116][ T9936] ? __might_fault+0xe3/0x190 [ 256.917529][ T9936] udmabuf_ioctl+0x193/0x310 [ 256.918923][ T9936] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 256.920492][ T9936] ? __fget_files+0x206/0x3a0 [ 256.921917][ T9936] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 256.923471][ T9936] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 256.925085][ T9936] __do_fast_syscall_32+0x73/0x120 [ 256.926632][ T9936] do_fast_syscall_32+0x32/0x80 [ 256.928134][ T9936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.930054][ T9936] RIP: 0023:0xf7f35579 [ 256.931288][ T9936] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 256.938080][ T9936] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 256.941338][ T9936] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040187542 [ 256.944438][ T9936] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.947589][ T9936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.950670][ T9936] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 256.954117][ T9936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.957322][ T9936] [ 256.958656][ T9936] Modules linked in: [ 256.960299][ T9936] ---[ end trace 0000000000000000 ]--- [ 256.962445][ T9936] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0 [ 256.964923][ T9936] Code: a3 d0 00 00 00 e8 54 d9 a2 ff 48 c7 c7 40 56 a1 8d e8 28 50 26 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 35 d9 a2 ff 90 <0f> 0b e8 7d 49 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 256.972525][ T9936] RSP: 0018:ffffc9000db5f8f0 EFLAGS: 00010093 [ 256.974933][ T9936] RAX: 0000000000000000 RBX: ffffffff9a3cf778 RCX: ffffffff81f67652 [ 256.977994][ T9936] RDX: ffff888022152440 RSI: ffffffff81f6768b RDI: 0000000000000007 [ 256.981208][ T9936] RBP: ffffea0001b10000 R08: 0000000000000007 R09: 0000000000000000 [ 256.984731][ T9936] R10: 0000000000000000 R11: 00000000000000c5 R12: 0000000000000000 [ 256.987909][ T9936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.991074][ T9936] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f5086b40 [ 256.994196][ T9936] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 256.996389][ T9936] CR2: 00000000f5064528 CR3: 0000000069a20000 CR4: 0000000000352ef0 [ 256.998813][ T9936] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.001239][ T9936] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.003646][ T9936] Kernel panic - not syncing: Fatal exception [ 257.006081][ T9936] Kernel Offset: disabled [ 257.007395][ T9936] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:22:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85143475 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc9000db5f258 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000050 R14=ffffffff85143410 R15=0000000000000000 RIP=ffffffff8514349f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5064528 CR3=0000000069a20000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000fa69 RBX=ffff88802b53f740 RCX=ffffc9000c001000 RDX=0000000000080000 RSI=ffffffff81868fbd RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000e2a7400 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10056a7eee R13=dffffc0000000000 R14=dffffc0000000000 R15=ffff88802b53f770 RIP=ffffffff81995016 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5085528 CR3=000000007308c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000305ee4 RBX=0000000000000002 RCX=ffffffff8b1a4819 RDX=ffffed10056c6fee RSI=ffffffff8bb17080 RDI=ffffffff81702ed9 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901ce550 R15=0000000000000000 RIP=ffffffff8b1a5bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561cd0523000 CR3=000000004d7e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7443ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000004c833 RBX=ffff8880696f0000 RCX=ffffc90025671000 RDX=0000000000080000 RSI=ffffffff89c5c04f RDI=ffff8880696f0028 RBP=ffffc90029f6fd60 RSP=ffffc90029f6f988 R8 =0000000000000005 R9 =0000000000000000 R10=00000000000008dc R11=0000000000000001 R12=0000000000000000 R13=0000000080000002 R14=ffffffff8fc8ea00 R15=0000000080000002 RIP=ffffffff81995026 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f411ffc CR3=000000007308c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000037000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000