last executing test programs: 4m50.152936025s ago: executing program 3 (id=190): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getpid() r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x10400}, 0xa5, 0x10, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0x7, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf, 0xe75}}]}}]}, 0x48}}, 0x400c804) r8 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r8, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r8, 0x20000005) r9 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$inet6(r10, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8ae9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_io_uring_setup(0x23a, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x1, 0x1e8}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) r13 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) readv(r13, &(0x7f0000000480)=[{&(0x7f0000000180)=""/19, 0x13}], 0x1) 4m49.242021224s ago: executing program 3 (id=193): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x81, 0x0, 0xfffffffd, 0x242e, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1f"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4m49.119722823s ago: executing program 3 (id=197): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket(0x1d, 0xa, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x800, 0x34324152, 0x2, 0xb, [{}, {}, {0xfffffffd}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{}], 0x20) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "040500000600000000000000000000000000ae"}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, 0x0, 0x0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000010010c8033000c800c00058008000000000000000800030300000080050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a28"], 0x270}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x7, 0x880}, 0x8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="180000002c00010000000000000900000400"], 0x18}], 0x1, 0x0, 0x0, 0x200040d5}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 4m48.992489888s ago: executing program 3 (id=198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000ffff18120000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="000000004b900000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1010, r2, 0x87148000) syz_socket_connect_nvme_tcp() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100003052cbd70000022000000000000", @ANYRES32=0x0, @ANYBLOB="05030200000000001c0012800b0001006d616373656300000c00028005000b0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[r4], 0x1}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mlock2(&(0x7f00002fb000/0x1000)=nil, 0x1000, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0", 0x6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x201) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000854000/0x1000)=nil, 0x1000, 0x3000007, 0x10, r6, 0x2000) r7 = socket(0x10, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000080), 0x2000011a) 4m48.443471124s ago: executing program 3 (id=199): syz_open_dev$sndmidi(&(0x7f0000000040), 0x10000, 0x6ec03) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40001, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc02007800"], 0xb8}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0xcc, 0x8, 0xacd, 0x3}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xf8f}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x0, 0x0, {0x5}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) chdir(0x0) io_uring_setup(0x6e74, &(0x7f0000000180)={0x0, 0xe944, 0x20, 0x1, 0x111}) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)) read$FUSE(r4, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) 4m47.740109282s ago: executing program 3 (id=203): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x70bd2b, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x200}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x4c010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3088], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) memfd_create(&(0x7f00000000c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xb4\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\x18\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb4\xb4\x91\xb8\x04\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xbe,\x00\x0e\xbcfvin\xfc.|\xd4h\xec\x82o\x8er\x15\xb5\xbc@Om0R\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdcnV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\xea\x12\xdaX\xb5\xa5\xba\xc8\x03\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x8d\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0p \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec', 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c8000280"], 0x140}}, 0x0) r7 = dup(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, r4, 0x25, 0x4, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @dev}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 4m47.404344717s ago: executing program 32 (id=203): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x70bd2b, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x200}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x4c010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3088], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) memfd_create(&(0x7f00000000c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xb4\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\x18\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb4\xb4\x91\xb8\x04\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xbe,\x00\x0e\xbcfvin\xfc.|\xd4h\xec\x82o\x8er\x15\xb5\xbc@Om0R\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdcnV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\xea\x12\xdaX\xb5\xa5\xba\xc8\x03\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x8d\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0p \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec', 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c8000280"], 0x140}}, 0x0) r7 = dup(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, r4, 0x25, 0x4, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @dev}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1m20.929147696s ago: executing program 0 (id=1490): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = io_uring_setup(0x4668, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RXATTRCREATE(r6, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 1m20.040647821s ago: executing program 0 (id=1496): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r1}, 0x10) map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x26) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000040)="cb", 0xfffffdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 1m19.211699396s ago: executing program 0 (id=1498): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10042) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x20040000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r2, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc2c45513, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x2, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00'}) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) pwritev(r0, &(0x7f0000000800)=[{0x0}], 0x1, 0x20000002, 0x1) 1m18.94069108s ago: executing program 0 (id=1501): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x2000000000000032) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001800dd8d0000000000000100020000000000000500000000060035000200000014001680100008800c000373050001"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x11) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffffff, 0x0, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) openat(r3, &(0x7f0000000000)='./file0\x00', 0x400000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a31000000000800410072786500140033006970766c616e30000000000000000000c87b366c5ba36ec2e6d5f94d7140626ecc095a9fc8c710e82f0e002658102abd778fcf60925cac2231a46d65e30eb5e1ae91dddd34e1daa4b1d7a494beed631202b8e751fc18fcb4ca8035dcddae038a9c8c9e0ffa3171fc"], 0x38}, 0x1, 0x0, 0x0, 0x24000844}, 0x0) 1m18.059983521s ago: executing program 0 (id=1505): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mlockall(0x7) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = io_uring_setup(0x4668, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RXATTRCREATE(r7, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 1m17.111576631s ago: executing program 0 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000100003052cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0802020000010000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102368, 0xfffffffffffffc85) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r4, &(0x7f000000a900), 0x1, 0x0, 0x0) 1m2.08857353s ago: executing program 33 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000100003052cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0802020000010000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102368, 0xfffffffffffffc85) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r4, &(0x7f000000a900), 0x1, 0x0, 0x0) 6.359696649s ago: executing program 4 (id=1920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x4, 0x4000010, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000008200000300012800b00010065727370616e0000200002800600180400000000040012000500160002000000050017"], 0x50}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="e4000000260001000000000000000000d40000800c000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b50464dad7f2a778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086c"], 0xe4}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) 5.966794681s ago: executing program 4 (id=1923): r0 = socket(0x6, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r1) r2 = syz_io_uring_setup(0x5c23, &(0x7f00000000c0)={0x0, 0x0, 0x13290, 0x2}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x62}) io_uring_enter(r2, 0x1, 0x45d0, 0x1, 0x0, 0x1000000) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) socket$nl_generic(0x11, 0x3, 0x10) bind$packet(r0, 0x0, 0x0) r6 = syz_io_uring_setup(0x10a, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x80, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='./file0\x00'}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r9, 0x0) accept4(r9, 0x0, 0x0, 0x0) 5.230054983s ago: executing program 1 (id=1927): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getpid() r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x10400}, 0xa5, 0x10, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0x7, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf, 0xe75}}]}}]}, 0x48}}, 0x400c804) r8 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r8, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r8, 0x20000005) r9 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r9, 0x0, 0x0) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$inet6(r10, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8ae9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r11 = syz_io_uring_setup(0x23a, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x1, 0x1e8}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r11, 0x2def, 0x4000, 0x0, 0x0, 0x0) r14 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) readv(r14, &(0x7f0000000480)=[{&(0x7f0000000180)=""/19, 0x13}], 0x1) 5.060166311s ago: executing program 4 (id=1929): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="680000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886d001a00001400028008000100010000000800020011800000", @ANYRES32=r4, @ANYBLOB="08001b00000000000a000100aaaaaaaaaabb0000"], 0x68}}, 0x40) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@private1, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x4, 0x6, 0x7, 0x500, 0x7f8, 0xd10100, r4}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x80000, 0x2f0c07f996e5f8c, 0xc, 0x0, 0x0, 0x1000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x8000000, 0x0, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa000, 0x0, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000140)=""/176, 0xb0) open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x41, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) 4.666506871s ago: executing program 1 (id=1930): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x100, 0x100, 0x89, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r4}, 0x38) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) write$uinput_user_dev(r0, &(0x7f0000001780)={'syz1\x00', {0x2, 0x2, 0xf, 0x9}, 0x23, [0x23cc0000, 0x8, 0xd, 0x8, 0x51, 0xffff, 0x7, 0x40, 0x9, 0xe3, 0xffffffff, 0x7, 0x800, 0x81, 0x10000, 0x1, 0x8, 0xb, 0xf, 0x8, 0x8, 0x3, 0x7, 0xfffffff8, 0x5, 0x10, 0x2, 0x2, 0x9, 0xfffeffff, 0x3b4e, 0xc6, 0x6, 0x800, 0x8, 0x2, 0x2, 0x0, 0x0, 0x6, 0x8, 0x3, 0x10000, 0x0, 0x1, 0xfffffff8, 0x1, 0xa53, 0x0, 0x3, 0x7, 0x10000, 0x80000000, 0x4, 0x8, 0x3, 0xfffffffe, 0x8001, 0x9, 0x30, 0xa, 0x81], [0x6, 0xe27, 0x5, 0x9, 0x80000001, 0x6, 0x4, 0x9, 0xfffffffe, 0x4c0e, 0xb, 0x10000, 0x2, 0x4, 0x7, 0x1, 0x7, 0x1, 0x7b, 0x5, 0x80000001, 0x2, 0xf61, 0x6, 0x5, 0x9, 0x9, 0xffffffff, 0x35e6, 0x3, 0x3, 0x0, 0x0, 0x5, 0x5, 0x2, 0x6, 0x4, 0x5, 0x80000001, 0x5, 0x8, 0x8, 0x7, 0x9, 0x9, 0x4, 0x8, 0x5, 0x716d8768, 0x7fff, 0x4, 0x8, 0x1, 0x3, 0x25, 0x4, 0x5, 0x401, 0xee1, 0x3, 0xfff, 0x8, 0x5], [0x6, 0x1, 0x8, 0x61, 0xf, 0x18f7, 0x3, 0x2, 0x8, 0x9, 0x5, 0x1, 0x1, 0x0, 0x8, 0xfffffffb, 0x80, 0x7ec0, 0x1, 0x9, 0xca8, 0x0, 0xb0e, 0xb, 0x6, 0x5, 0xe000000, 0x0, 0x4, 0x5, 0xc, 0x8, 0x7, 0x9f, 0x6, 0x4, 0x5, 0xffffff01, 0x2, 0xfffffffa, 0x7473, 0x6, 0x80000001, 0x7, 0x5, 0x3, 0x2, 0xa49, 0x101, 0x0, 0x9, 0x0, 0x80, 0x1, 0x8, 0x4, 0x4, 0x6, 0x4, 0x3, 0x3, 0x8f, 0x6, 0x8], [0x6, 0x10000, 0x77, 0x5, 0xd, 0x1, 0x4, 0x0, 0x100, 0x6, 0x6, 0x8, 0x1000, 0x9, 0x5, 0x9, 0x9, 0x8a, 0x739, 0x903, 0xffffffff, 0x9, 0xd, 0x47, 0x5012, 0x8, 0x7ff, 0x9, 0x3c, 0x9, 0x1, 0x7, 0x800, 0x80000000, 0x6, 0xe, 0x7, 0x3, 0x8001, 0x3, 0x7, 0xab, 0xdce, 0x400, 0x1, 0x3, 0x0, 0x7, 0x0, 0xa, 0x2, 0xffffffff, 0xfff, 0x694, 0x3, 0x8, 0xea, 0x8, 0xfffffffb, 0x0, 0xff, 0xd7, 0x3, 0x5]}, 0x45c) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r5, 0x0, r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r7, 0x5453, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) r8 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) 4.170263186s ago: executing program 4 (id=1931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) getpeername$packet(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x33c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x31e, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @device_a, @random="7503b1f066cf", {0x9, 0xffb}}, 0x0, 0x1, 0x4f, @val={0x10, 0x1, 0x99}, [{0xdd, 0x1c, "a2c555c330ebb4984d06d40dbde2197369e72cba48060fe1007738c0"}, {0xdd, 0xca, "602453d887c6469d3c66147a02720ffa7d6f49253c08a5fba83ddc1ffe49cea764e59876b0a79e58656b9d9fe51587209fb2ce38f4ed60b1a3cb0d45780940d9caf7ed6df630a9f537e9a587271767311525e398d9bfc5e730cb103071a97852f06bd871ffd726a08f2b66e440117adc6dffd8909eddd82e9ea84fec3830180c66c050fe1b74a42098b291f6c9e3af0abde6f422c097f419f5e2fcf947ced7e87d5a320e15df13682632caec3ae3219bdf3462b9857a87b89075276dab339030c4b84d97bf5df186f2fe"}, {0xdd, 0xa9, "a6443177d22fd726d5b3357cd4fe10de8e0fdf392fc4de4521d04ae72abfac551acfaa9af116af9dadc7506cc3dbb38a3c1ce7c32388b5400943840a89e1d1ac36b89584d561b15bf114f134361726e9f2bb5cb97c68b84b82bcfa70090df0692b72783040c25d7b9221e7657bc5e472dbbbdf43abf8a0e56f62c59cd493891d967cf27a97938e46a1b5c7b8a77a5958337cddb4dde113bcdefd1afde69b7ad678168b742b412d2773"}, {0xdd, 0xa6, "a5492ef92611e08d51bb9d0aa7de29045a149a4aa387996973ee1cbb38d955060ae3c6b41cbba1ac5a7fc859842d739b996f73e3ca3d6a5016eab1d41a6bd22ca1581b1ff2eaa18a4b655ea4f13a5c3bff53d728e7a8ee0675b87593df481d9c0f0b4f7f72cf20211c1057edbf9b3c25fd2c52323078ebc0baa728d1db07cd1fe26dec0fe9a07cee10f66b85b0cec6f5e9c96a4f850df6ed75f0232bdf633fec9a5626bd7126"}, {0xdd, 0x97, "5c8f8145b5ed83afe647e3414eb8e801143ac5f18f4216e23a3c3d41b5be2267c29282c6d6983f1a76ffc1d0d92c1c5f9f016e3d6b1112ede47ae43069a5f6006506343e99bfd5fd2ded7f7b8114afa22b12f0a42afe01decfdb80b84a132b2cc67539cc47586bfe9df886f18764bf27a5c357c6c7fe5f6e1dbd0fd2551469d268f78cf755a97d33082aa36ae9ce54383fc5651accd0c2"}, {0xdd, 0x21, "de8665d8e85d1ec02eab9efa57b37cf70da9d1b037171b0b756376685511e526e1"}]}}]}, 0x33c}}, 0x20040000) 4.169867211s ago: executing program 5 (id=1932): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xffffff7f}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x400}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xea}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x22}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x91) r0 = openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x2a40, 0x0) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x82080, 0x98) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x80, 0x4, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x2, &(0x7f0000000200)=0x1) mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x80010, r1, 0x52000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x2, &(0x7f0000000240)=0x1) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, &(0x7f00000002c0)) r2 = fsopen(&(0x7f0000000300)='fuse\x00', 0x1) connect$pppl2tp(r1, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x0, 0x1, {0xa, 0x4e24, 0x23de, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x3a) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4000, 0x6, &(0x7f0000ffb000/0x4000)=nil) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000400)=@add_del={0x2, &(0x7f00000003c0)='bond_slave_1\x00'}) sendfile(r4, r2, 0x0, 0x10001) syz_emit_ethernet(0x1d, &(0x7f0000000440)={@empty, @local, @void, {@x25={0x805, {0x3, 0x40, 0xf1, "0d24ce6d73b1d2ce406924fa"}}}}, &(0x7f0000000480)={0x1, 0x4, [0xd22, 0x703, 0x6d, 0x652]}) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000004c0)={@remote, @empty}, &(0x7f0000000500)=0x8) fcntl$getownex(r3, 0x10, &(0x7f0000000540)={0x0, 0x0}) timer_create(0x7, &(0x7f0000000580)={0x0, 0x14, 0x2, @tid=r5}, &(0x7f00000005c0)) syz_emit_ethernet(0xd1, &(0x7f0000000600)={@empty, @random="ce505860f3ae", @void, {@mpls_mc={0x8848, {[{0x7fff, 0x0, 0x1}], @generic="9fa62728221b51b45e5b3f43ffca408db1374d436a19c3f351cfd9872dd8a212733f1be547b1b8a007222fae79a0b60b1451fb8ecfb2a34edfecfcfa0292be53a0ff3c9b2ab4a57d1f91e95ad0e6f228dc00ec0f8426a3cfa40e6da4e277e32583b69fa0522882a1726867f1878d9a4a1f6a740c934cc148ece4c7e1bd35b87ddb16f233fce1736d7b494adbe0f60ac2fd0cadb2cc52c212461122e162d1662d17c051f9d07e427a149ed30df1ceadaff8acdd297db1ab6f1cbcb4e2a48b34"}}}}, &(0x7f0000000700)={0x0, 0x3, [0x96f, 0xf85, 0x220, 0x218]}) readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000740)=""/100, 0x64}, {&(0x7f00000007c0)=""/19, 0x13}, {&(0x7f0000000800)=""/43, 0x2b}, {&(0x7f0000000840)=""/224, 0xe0}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/116, 0x74}, {&(0x7f0000000a00)=""/152, 0x98}, {&(0x7f0000000ac0)=""/165, 0xa5}], 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x3, &(0x7f0000000bc0)=0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0xff94b000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000000c00)=0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wg0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c80)={r1, r6, 0x25, 0xa, @val=@tcx={@void, @value=r1}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000cc0)={0xa, 0x4e22, 0x8, @private0, 0x7}, 0x1c) 4.110263077s ago: executing program 4 (id=1933): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) io_setup(0x4000010, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0x4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0xc, &(0x7f0000000300)=ANY=[], 0x0}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x1, 0xd, 0x3, 0x80000000, 0x7fff}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r6, 0x8}, 0x8) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) 3.969614416s ago: executing program 2 (id=1934): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x465f}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x3ead, &(0x7f0000000080)={0x0, 0x6d33, 0x1, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x18fd, &(0x7f0000000300)={0x0, 0x8ddc, 0x23c03, 0x1, 0x10c}, &(0x7f0000000180), 0x0) r7 = timerfd_create(0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1c) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000fe8000000000000000000000000000aae00000010000000000000000000000004e240000000000000a0080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118) 3.799968667s ago: executing program 1 (id=1935): syz_open_dev$dri(&(0x7f00000008c0), 0xd2c, 0x40000) syz_emit_ethernet(0x6a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086016000cd0400343a00fe8000000000000000000000fcffffa9ff0200000000dc96bced5e0b850000000000000000000104009078000000006006050000002b010000000000000000000000000000000100000000000000000000ffff00000000c76bd8be"], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/4\x00') write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000340)={0xa, {0x2, 0x7, 0x3}}, 0x4000) getresuid(&(0x7f0000006880), &(0x7f00000068c0), &(0x7f0000006900)) getgid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000008480), 0xe08c0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) statx(r0, &(0x7f0000000480)='./file0\x00', 0x1000, 0x8, &(0x7f0000008500)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r5, r6, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) eventfd2(0x7, 0x1) getgroups(0x1, &(0x7f0000008600)=[0xffffffffffffffff]) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x8000) r7 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r7, 0x40305829, &(0x7f0000000240)={0xd, "7954bbc8e800000000000000d1"}) 3.513299626s ago: executing program 5 (id=1936): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getpid() r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x10400}, 0xa5, 0x10, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0x7, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf, 0xe75}}]}}]}, 0x48}}, 0x400c804) r8 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r8, 0x0, 0x0) listen(r8, 0x20000005) r9 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$inet6(r10, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8ae9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r11 = syz_io_uring_setup(0x23a, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x1, 0x1e8}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r11, 0x2def, 0x4000, 0x0, 0x0, 0x0) r14 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) readv(r14, &(0x7f0000000480)=[{&(0x7f0000000180)=""/19, 0x13}], 0x1) 3.512905886s ago: executing program 2 (id=1937): io_setup(0x10000, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0x0, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19f, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc2764ebb7ffe14ff}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000004000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000ad302d81d2186d917226aea447384c0dae9a89d27691e409056b1720b1dd7dd7209b58e821b979fa3a438dd0fad51695cbbab77cb148849716df61c9ba8116bbbf839da6a6c94e72cc33eb254ea1bc21b15bf107ff1c0c4dcb2c41c50d9a62ca"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$video4linux(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000140)={0x1, 0x5, 0x10}) io_setup(0x853e, &(0x7f0000000080)) 2.470105044s ago: executing program 2 (id=1938): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x80880, 0x0) r1 = openat$audio(0xffffff9c, &(0x7f0000000000), 0x620801, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r4}, 0x10) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='\b', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$CDROMVOLREAD(r0, 0x5392, &(0x7f0000000080)) 2.400483383s ago: executing program 1 (id=1939): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x61, 0x5, 0x0, 0x7a, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x3000000) 2.395843567s ago: executing program 5 (id=1940): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x100, 0x100, 0x89, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r5 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) write$uinput_user_dev(r0, &(0x7f0000001780)={'syz1\x00', {0x2, 0x2, 0xf, 0x9}, 0x23, [0x23cc0000, 0x8, 0xd, 0x8, 0x51, 0xffff, 0x7, 0x40, 0x9, 0xe3, 0xffffffff, 0x7, 0x800, 0x81, 0x10000, 0x1, 0x8, 0xb, 0xf, 0x8, 0x8, 0x3, 0x7, 0xfffffff8, 0x5, 0x10, 0x2, 0x2, 0x9, 0xfffeffff, 0x3b4e, 0xc6, 0x6, 0x800, 0x8, 0x2, 0x2, 0x0, 0x0, 0x6, 0x8, 0x3, 0x10000, 0x0, 0x1, 0xfffffff8, 0x1, 0xa53, 0x0, 0x3, 0x7, 0x10000, 0x80000000, 0x4, 0x8, 0x3, 0xfffffffe, 0x8001, 0x9, 0x30, 0xa, 0x81], [0x6, 0xe27, 0x5, 0x9, 0x80000001, 0x6, 0x4, 0x9, 0xfffffffe, 0x4c0e, 0xb, 0x10000, 0x2, 0x4, 0x7, 0x1, 0x7, 0x1, 0x7b, 0x5, 0x80000001, 0x2, 0xf61, 0x6, 0x5, 0x9, 0x9, 0xffffffff, 0x35e6, 0x3, 0x3, 0x0, 0x0, 0x5, 0x5, 0x2, 0x6, 0x4, 0x5, 0x80000001, 0x5, 0x8, 0x8, 0x7, 0x9, 0x9, 0x4, 0x8, 0x5, 0x716d8768, 0x7fff, 0x4, 0x8, 0x1, 0x3, 0x25, 0x4, 0x5, 0x401, 0xee1, 0x3, 0xfff, 0x8, 0x5], [0x6, 0x1, 0x8, 0x61, 0xf, 0x18f7, 0x3, 0x2, 0x8, 0x9, 0x5, 0x1, 0x1, 0x0, 0x8, 0xfffffffb, 0x80, 0x7ec0, 0x1, 0x9, 0xca8, 0x0, 0xb0e, 0xb, 0x6, 0x5, 0xe000000, 0x0, 0x4, 0x5, 0xc, 0x8, 0x7, 0x9f, 0x6, 0x4, 0x5, 0xffffff01, 0x2, 0xfffffffa, 0x7473, 0x6, 0x80000001, 0x7, 0x5, 0x3, 0x2, 0xa49, 0x101, 0x0, 0x9, 0x0, 0x80, 0x1, 0x8, 0x4, 0x4, 0x6, 0x4, 0x3, 0x3, 0x8f, 0x6, 0x8], [0x6, 0x10000, 0x77, 0x5, 0xd, 0x1, 0x4, 0x0, 0x100, 0x6, 0x6, 0x8, 0x1000, 0x9, 0x5, 0x9, 0x9, 0x8a, 0x739, 0x903, 0xffffffff, 0x9, 0xd, 0x47, 0x5012, 0x8, 0x7ff, 0x9, 0x3c, 0x9, 0x1, 0x7, 0x800, 0x80000000, 0x6, 0xe, 0x7, 0x3, 0x8001, 0x3, 0x7, 0xab, 0xdce, 0x400, 0x1, 0x3, 0x0, 0x7, 0x0, 0xa, 0x2, 0xffffffff, 0xfff, 0x694, 0x3, 0x8, 0xea, 0x8, 0xfffffffb, 0x0, 0xff, 0xd7, 0x3, 0x5]}, 0x45c) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r5, 0x0, r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r7, 0x5453, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) r8 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) 2.340218723s ago: executing program 2 (id=1941): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0xf, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESOCT=r1, @ANYBLOB="0000dc28000b000000000a000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES64=r2], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000038b50000950000000000000012c0a643919783403949119ac4a288dd9de8b75118cee72ceef4785691fad031a8e18704f3936548cd8dc4b904ab57740b7b8271cd8c0123723eccf80d590a15c135788cce407eb315ca58f5d93c762ef973779cc407230b15aa8729464fe6a34131443b93fe2546bedd90ac39f734f7d9f62c61abc02fe6e13c75fb4fda894b15d4307d5d376cd54edb87962ee235353183340e8d51cc09fbd2c38132dec101f52848718d6ea583ef07d216bff62236f0cfab29149f1decab5b045d5e8cc2ace4ceb83e0c260fccb0"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000340)='bridge0\x00') sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x80000034) fcntl$setsig(r7, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x56982, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x80) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r8, 0x80e05411, &(0x7f0000000000)=""/30) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010102}, 0x10) 1.789575052s ago: executing program 2 (id=1942): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup(0xffffffffffffffff) write$char_usb(r2, &(0x7f0000000100)='V', 0x1) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1.492580889s ago: executing program 5 (id=1943): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc0) getdents(r1, &(0x7f00000002c0)=""/31, 0x1f) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/201, 0xc9) 1.481445758s ago: executing program 1 (id=1951): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x100, 0x100, 0x89, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r5 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) write$uinput_user_dev(r0, &(0x7f0000001780)={'syz1\x00', {0x2, 0x2, 0xf, 0x9}, 0x23, [0x23cc0000, 0x8, 0xd, 0x8, 0x51, 0xffff, 0x7, 0x40, 0x9, 0xe3, 0xffffffff, 0x7, 0x800, 0x81, 0x10000, 0x1, 0x8, 0xb, 0xf, 0x8, 0x8, 0x3, 0x7, 0xfffffff8, 0x5, 0x10, 0x2, 0x2, 0x9, 0xfffeffff, 0x3b4e, 0xc6, 0x6, 0x800, 0x8, 0x2, 0x2, 0x0, 0x0, 0x6, 0x8, 0x3, 0x10000, 0x0, 0x1, 0xfffffff8, 0x1, 0xa53, 0x0, 0x3, 0x7, 0x10000, 0x80000000, 0x4, 0x8, 0x3, 0xfffffffe, 0x8001, 0x9, 0x30, 0xa, 0x81], [0x6, 0xe27, 0x5, 0x9, 0x80000001, 0x6, 0x4, 0x9, 0xfffffffe, 0x4c0e, 0xb, 0x10000, 0x2, 0x4, 0x7, 0x1, 0x7, 0x1, 0x7b, 0x5, 0x80000001, 0x2, 0xf61, 0x6, 0x5, 0x9, 0x9, 0xffffffff, 0x35e6, 0x3, 0x3, 0x0, 0x0, 0x5, 0x5, 0x2, 0x6, 0x4, 0x5, 0x80000001, 0x5, 0x8, 0x8, 0x7, 0x9, 0x9, 0x4, 0x8, 0x5, 0x716d8768, 0x7fff, 0x4, 0x8, 0x1, 0x3, 0x25, 0x4, 0x5, 0x401, 0xee1, 0x3, 0xfff, 0x8, 0x5], [0x6, 0x1, 0x8, 0x61, 0xf, 0x18f7, 0x3, 0x2, 0x8, 0x9, 0x5, 0x1, 0x1, 0x0, 0x8, 0xfffffffb, 0x80, 0x7ec0, 0x1, 0x9, 0xca8, 0x0, 0xb0e, 0xb, 0x6, 0x5, 0xe000000, 0x0, 0x4, 0x5, 0xc, 0x8, 0x7, 0x9f, 0x6, 0x4, 0x5, 0xffffff01, 0x2, 0xfffffffa, 0x7473, 0x6, 0x80000001, 0x7, 0x5, 0x3, 0x2, 0xa49, 0x101, 0x0, 0x9, 0x0, 0x80, 0x1, 0x8, 0x4, 0x4, 0x6, 0x4, 0x3, 0x3, 0x8f, 0x6, 0x8], [0x6, 0x10000, 0x77, 0x5, 0xd, 0x1, 0x4, 0x0, 0x100, 0x6, 0x6, 0x8, 0x1000, 0x9, 0x5, 0x9, 0x9, 0x8a, 0x739, 0x903, 0xffffffff, 0x9, 0xd, 0x47, 0x5012, 0x8, 0x7ff, 0x9, 0x3c, 0x9, 0x1, 0x7, 0x800, 0x80000000, 0x6, 0xe, 0x7, 0x3, 0x8001, 0x3, 0x7, 0xab, 0xdce, 0x400, 0x1, 0x3, 0x0, 0x7, 0x0, 0xa, 0x2, 0xffffffff, 0xfff, 0x694, 0x3, 0x8, 0xea, 0x8, 0xfffffffb, 0x0, 0xff, 0xd7, 0x3, 0x5]}, 0x45c) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r5, 0x0, r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r7, 0x5453, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) r8 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) 899.527202ms ago: executing program 5 (id=1944): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2040, 0x20) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x8], 0x0, 0x0, 0x2}}, 0x3c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', r0}, 0x14) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000093fd992e18fb18003261824935eebc781b4add7eff63b74a3800ea5c8e7a0e67b01010000b7a499b695984a", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0xc, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 899.103224ms ago: executing program 4 (id=1945): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (fail_nth: 9) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040), 0x8) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x10, 0x4, 0x3e0, 0x1f0, 0x0, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@private=0xa010100, @broadcast, 0xffffff00, 0x0, 0x0, 0x4, {}, {@mac=@random="bd22fdd68c29", {[0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'veth0_macvtap\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @loopback, @empty, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)={0x20, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x20}], 0x1}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1, '$'}], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000"], 0x18, 0x500}}], 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x2c}}, 0x20044080) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, &(0x7f0000000040)) 329.882326ms ago: executing program 1 (id=1946): io_setup(0x10000, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0x0, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19f, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc2764ebb7ffe14ff}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000004000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000ad302d81d2186d917226aea447384c0dae9a89d27691e409056b1720b1dd7dd7209b58e821b979fa3a438dd0fad51695cbbab77cb148849716df61c9ba8116bbbf839da6a6c94e72cc33eb254ea1bc21b15bf107ff1c0c4dcb2c41c50d9a62ca"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$video4linux(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000140)={0x1, 0x5, 0x10}) io_setup(0x853e, &(0x7f0000000080)) 4.999016ms ago: executing program 2 (id=1947): syz_open_dev$dri(&(0x7f00000008c0), 0xd2c, 0x40000) syz_emit_ethernet(0x6a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086016000cd0400343a00fe8000000000000000000000fcffffa9ff0200000000dc96bced5e0b850000000000000000000104009078000000006006050000002b010000000000000000000000000000000100000000000000000000ffff00000000c76bd8be"], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/4\x00') write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000340)={0xa, {0x2, 0x7, 0x3}}, 0x4000) getresuid(&(0x7f0000006880), &(0x7f00000068c0), &(0x7f0000006900)) getgid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) statx(r0, &(0x7f0000000480)='./file0\x00', 0x1000, 0x8, &(0x7f0000008500)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r6, r7, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) eventfd2(0x7, 0x1) getgroups(0x1, &(0x7f0000008600)=[0xffffffffffffffff]) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x8000) r8 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r8, 0x40305829, &(0x7f0000000240)={0xd, "7954bbc8e800000000000000d1"}) 0s ago: executing program 5 (id=1948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) (fail_nth: 9) kernel console output (not intermixed with test programs): speed USB device number 7 using dummy_hcd [ 237.349945][ T70] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 237.365141][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.368583][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.372822][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.376792][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.380278][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.384446][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.389351][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.392940][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.397186][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.402865][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.406488][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.410589][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.414725][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.418518][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.423070][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.427639][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.432180][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.437008][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.441929][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.444753][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.448007][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.450995][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.454118][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.457514][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.462511][ T70] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 237.465710][ T70] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 237.468464][ T70] usb 7-1: Product: syz [ 237.469941][ T70] usb 7-1: Manufacturer: syz [ 237.471463][ T70] usb 7-1: SerialNumber: syz [ 237.479921][ T70] usb 7-1: config 0 descriptor?? [ 237.486803][ T70] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 237.803139][ C3] usb 7-1: yurex_control_callback - control failed: -71 [ 237.803395][ T25] usb 7-1: USB disconnect, device number 7 [ 237.814500][ T25] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 238.122617][T10087] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1138'. [ 238.125534][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1138'. [ 238.129037][T10087] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1138'. [ 238.137870][T10087] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1138'. [ 238.217561][T10091] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1140'. [ 239.472730][T10120] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1149'. [ 241.616726][T10157] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1160'. [ 241.956002][T10171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.959219][T10171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.969489][T10171] net_ratelimit: 2 callbacks suppressed [ 241.969541][T10171] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 241.980804][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 241.983638][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 241.987780][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 241.990742][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 241.993339][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 241.996060][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 241.998934][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 242.003814][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 242.006621][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 242.099396][T10174] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 242.521464][T10184] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 244.233143][T10216] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 244.728508][T10226] rdma_rxe: rxe_newlink: failed to add ipvlan0 usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 245.664383][ T6418] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 245.891013][ T6418] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 245.895078][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.897657][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.900957][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.905336][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.908441][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.912677][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.926130][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.930065][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.934130][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.937457][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.940155][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.943310][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.950183][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.962977][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.968167][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.974595][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.977230][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.991601][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.997364][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.000179][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.004680][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 246.013049][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.015922][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.023484][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 246.030509][ T6418] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 246.037796][ T6418] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 246.044523][ T6418] usb 7-1: Product: syz [ 246.046144][ T6418] usb 7-1: Manufacturer: syz [ 246.047913][ T6418] usb 7-1: SerialNumber: syz [ 246.061867][ T6418] usb 7-1: config 0 descriptor?? [ 246.068031][ T6418] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 246.400391][ C1] usb 7-1: yurex_control_callback - control failed: -71 [ 246.408915][ T25] usb 7-1: USB disconnect, device number 8 [ 246.414132][ T25] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 246.849560][T10265] __nla_validate_parse: 50 callbacks suppressed [ 246.849572][T10265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1192'. [ 246.854309][T10265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1192'. [ 246.857089][T10265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1192'. [ 246.861517][T10265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1192'. [ 246.889205][ T70] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 246.950921][T10268] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 247.039954][ T70] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 247.043917][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.047679][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.052586][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.056535][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.059742][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.063208][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.066946][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.070851][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.074728][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.078109][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.081913][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.086259][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.091881][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.094608][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.097774][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.100656][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.109274][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.113761][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.118032][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.122110][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.126747][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.131527][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.134978][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.138556][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.143441][ T70] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 247.146834][ T70] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 247.150016][ T70] usb 5-1: Product: syz [ 247.151293][ T70] usb 5-1: Manufacturer: syz [ 247.153015][ T70] usb 5-1: SerialNumber: syz [ 247.156160][ T70] usb 5-1: config 0 descriptor?? [ 247.162226][ T70] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 247.475660][ C3] usb 5-1: yurex_control_callback - control failed: -71 [ 247.475967][ T5825] usb 5-1: USB disconnect, device number 6 [ 247.482805][ T5825] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 248.434752][T10294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1201'. [ 248.438623][T10294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1201'. [ 248.443568][T10294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1201'. [ 248.448336][T10294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1201'. [ 248.497053][T10299] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 248.809937][ T6418] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 248.850565][T10307] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 248.970825][ T6418] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 248.974161][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.979328][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.984123][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 248.987509][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.990595][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.993934][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 248.996869][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.000887][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.005198][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 249.008729][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.012842][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.016604][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 249.021333][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.024606][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.028170][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 249.032649][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.036108][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.039490][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 249.043480][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.047074][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.051621][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 249.054904][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.058253][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.061689][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 249.066402][ T6418] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 249.070314][ T6418] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 249.074042][ T6418] usb 7-1: Product: syz [ 249.076048][ T6418] usb 7-1: Manufacturer: syz [ 249.078200][ T6418] usb 7-1: SerialNumber: syz [ 249.082740][ T6418] usb 7-1: config 0 descriptor?? [ 249.086961][ T6418] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 249.336506][T10310] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1207'. [ 249.397195][ C1] usb 7-1: yurex_control_callback - control failed: -71 [ 249.397600][ T835] usb 7-1: USB disconnect, device number 9 [ 249.405373][ T835] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 250.442801][T10337] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 250.875863][T10343] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1218'. [ 251.469272][ T5825] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 251.587558][T10361] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 251.749782][ T5825] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 251.753067][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.757155][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.760981][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.763860][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.768081][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.771625][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.774602][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.777596][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.780903][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.783875][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.786628][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.790063][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.794491][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.798820][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.803395][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.806246][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.809569][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.815238][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.818294][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.822741][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.826029][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.828877][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.831868][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.835043][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.838554][ T5825] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 251.841430][ T5825] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 251.843914][ T5825] usb 5-1: Product: syz [ 251.845241][ T5825] usb 5-1: Manufacturer: syz [ 251.846699][ T5825] usb 5-1: SerialNumber: syz [ 251.855683][ T5825] usb 5-1: config 0 descriptor?? [ 251.874023][ T5825] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 252.017397][T10371] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1228'. [ 252.178537][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 252.178747][ T70] usb 5-1: USB disconnect, device number 7 [ 252.187559][ T70] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 252.457395][T10384] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 253.911999][T10410] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 254.089211][ T70] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 254.239940][ T70] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 254.243999][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.247690][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.252011][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.255535][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.259347][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.263777][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.267470][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.271044][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.275813][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.280258][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.284047][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.288486][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.294650][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.297947][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.303037][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.305749][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.308359][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.311591][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.314248][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.316986][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.320992][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.324114][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.326695][ T70] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.330095][ T70] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.333682][ T70] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 254.336925][ T70] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 254.339781][ T70] usb 5-1: Product: syz [ 254.341117][ T70] usb 5-1: Manufacturer: syz [ 254.342693][ T70] usb 5-1: SerialNumber: syz [ 254.344979][ T70] usb 5-1: config 0 descriptor?? [ 254.348871][ T70] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 254.654634][ C3] usb 5-1: yurex_control_callback - control failed: -71 [ 254.657785][ T70] usb 5-1: USB disconnect, device number 8 [ 254.662437][ T70] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 254.679034][T10427] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1247'. [ 254.840451][T10437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1251'. [ 254.843231][T10437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1251'. [ 254.845822][T10437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1251'. [ 254.848491][T10437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1251'. [ 255.161080][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.163664][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.458667][T10452] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 255.611014][T10456] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1258'. [ 255.774732][T10463] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 257.260822][T10487] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1268'. [ 257.621137][T10495] syz1: rxe_newlink: already configured on ipvlan0 [ 258.476638][T10505] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 258.720805][T10511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1277'. [ 258.723737][T10511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1277'. [ 258.726450][T10511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1277'. [ 258.729352][T10511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1277'. [ 258.768441][T10515] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 259.861658][T10531] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 260.396184][T10536] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 260.785956][T10543] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1287'. [ 260.929326][ T5825] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 260.997677][T10551] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 261.090444][ T5825] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 261.094611][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.098352][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.102407][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 261.106087][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.109799][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.114110][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 261.117945][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.121590][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.125916][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 261.130404][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.137133][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.141723][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 261.145318][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.148882][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.154058][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 261.157586][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.161123][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.165322][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 261.168301][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.171407][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.176827][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 261.181648][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.185224][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.189828][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 261.200731][ T5825] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 261.204291][ T5825] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 261.207471][ T5825] usb 9-1: Product: syz [ 261.214936][ T5825] usb 9-1: Manufacturer: syz [ 261.216985][ T5825] usb 9-1: SerialNumber: syz [ 261.222987][ T5825] usb 9-1: config 0 descriptor?? [ 261.233003][ T5825] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 261.483325][ C0] usb 9-1: yurex_control_callback - control failed: -71 [ 261.483485][ T5997] usb 9-1: USB disconnect, device number 3 [ 261.491500][ T5997] yurex 9-1:0.0: USB YUREX #0 now disconnected usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 262.185374][T10569] syz1: rxe_newlink: already configured on ipvlan0 [ 262.216785][T10573] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1296'. [ 263.003830][T10583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1301'. [ 263.007041][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1301'. [ 263.010392][T10583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1301'. [ 263.013559][T10583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1301'. [ 263.058590][T10585] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 264.103703][T10601] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1307'. [ 264.107747][T10601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1307'. [ 264.111945][T10601] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1307'. [ 264.116488][T10601] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1307'. [ 264.634191][T10611] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1310'. [ 264.637224][T10611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1310'. [ 264.883024][T10614] syz1: rxe_newlink: already configured on ipvlan0 usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 266.318191][T10633] netlink: 'syz.2.1316': attribute type 21 has an invalid length. [ 266.738722][T10656] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 267.401344][T10660] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 267.729232][ T5825] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 267.889736][ T5825] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 267.893842][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.897440][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.901750][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 267.906202][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.909843][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.914158][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 267.917668][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.921164][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.925262][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 267.928703][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.932310][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.936530][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 267.939982][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.943409][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.947655][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 267.951417][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.954874][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.959387][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 267.963005][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.966504][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.970923][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 267.974441][ T5825] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.978010][ T5825] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.982428][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 267.986921][ T5825] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 267.990769][ T5825] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 267.994094][ T5825] usb 9-1: Product: syz [ 267.995711][ T5825] usb 9-1: Manufacturer: syz [ 267.997539][ T5825] usb 9-1: SerialNumber: syz [ 268.001952][ T5825] usb 9-1: config 0 descriptor?? [ 268.006751][ T5825] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 268.214168][ T70] usb 9-1: USB disconnect, device number 4 [ 268.216892][ T70] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 268.340173][T10676] __nla_validate_parse: 8 callbacks suppressed [ 268.340190][T10676] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1333'. [ 268.466110][T10681] syz1: rxe_newlink: already configured on ipvlan0 [ 268.607429][T10684] netfs: Couldn't get user pages (rc=-14) [ 270.398941][T10723] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 270.492995][T10727] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1349'. [ 270.525757][T10729] 9pnet_virtio: no channels available for device ./file1 [ 270.553160][T10729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1350'. [ 271.319935][ T5825] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 271.469338][ T5825] usb 9-1: Using ep0 maxpacket: 8 [ 271.493043][ T5825] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 271.495514][ T5825] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.498374][ T5825] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.503489][ T5825] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.506252][ T5825] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.515552][ T5825] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.518249][ T5825] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.727913][T10765] No such timeout policy "syz0" [ 271.731008][T10745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1354'. [ 271.734586][ T5825] usb 9-1: usb_control_msg returned -32 [ 271.736285][ T5825] usbtmc 9-1:16.0: can't read capabilities [ 272.126383][T10787] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 272.151987][ T70] usb 9-1: USB disconnect, device number 5 [ 273.152003][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 279.904266][T10873] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1374'. [ 280.079248][ T5825] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 280.239850][ T5825] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 280.243285][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.246124][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.251265][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.255263][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.258060][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.262881][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.267943][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.271044][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.274628][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.277609][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.281872][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.285556][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.288857][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.292139][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.296307][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.300364][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.303886][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.307079][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.310035][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.312807][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.316047][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.318764][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.322253][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.325738][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.330033][ T5825] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 280.332751][ T5825] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 280.335317][ T5825] usb 5-1: Product: syz [ 280.336641][ T5825] usb 5-1: Manufacturer: syz [ 280.338046][ T5825] usb 5-1: SerialNumber: syz [ 280.342104][ T5825] usb 5-1: config 0 descriptor?? [ 280.347936][ T5825] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 280.564663][ T5825] usb 5-1: USB disconnect, device number 9 [ 280.567133][ T5825] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 281.038399][T10891] FAULT_INJECTION: forcing a failure. [ 281.038399][T10891] name failslab, interval 1, probability 0, space 0, times 0 [ 281.042063][T10891] CPU: 1 UID: 0 PID: 10891 Comm: syz.2.1379 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 281.042075][T10891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.042081][T10891] Call Trace: [ 281.042084][T10891] [ 281.042088][T10891] dump_stack_lvl+0x16c/0x1f0 [ 281.042118][T10891] should_fail_ex+0x50a/0x650 [ 281.042135][T10891] ? fs_reclaim_acquire+0xae/0x150 [ 281.042155][T10891] should_failslab+0xc2/0x120 [ 281.042167][T10891] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 281.042179][T10891] ? __pmd_alloc+0xc3/0x870 [ 281.042190][T10891] __pmd_alloc+0xc3/0x870 [ 281.042200][T10891] __handle_mm_fault+0x9fb/0x2c60 [ 281.042214][T10891] ? __pfx___handle_mm_fault+0x10/0x10 [ 281.042224][T10891] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 281.042244][T10891] ? find_vma+0xc0/0x140 [ 281.042258][T10891] ? __pfx_find_vma+0x10/0x10 [ 281.042273][T10891] handle_mm_fault+0x3fa/0xaa0 [ 281.042286][T10891] do_user_addr_fault+0x7a3/0x13f0 [ 281.042302][T10891] exc_page_fault+0x5c/0xc0 [ 281.042316][T10891] asm_exc_page_fault+0x26/0x30 [ 281.042329][T10891] RIP: 0010:_copy_from_user+0x93/0xd0 [ 281.042343][T10891] Code: 28 fc fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 f9 10 5f fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 75 23 [ 281.042352][T10891] RSP: 0018:ffffc90003df7b38 EFLAGS: 00050297 [ 281.042360][T10891] RAX: 0000000000000001 RBX: 0000000080000040 RCX: 0000000000000004 [ 281.042366][T10891] RDX: fffff520007bef73 RSI: 0000000080000040 RDI: ffffc90003df7b98 [ 281.042375][T10891] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff520007bef73 [ 281.042380][T10891] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 281.042385][T10891] R13: ffffc90003df7b98 R14: ffff88801b0b1000 R15: 0000000000000001 [ 281.042397][T10891] ? _copy_from_user+0x87/0xd0 [ 281.042410][T10891] vt_do_kdsk_ioctl+0x93/0xa90 [ 281.042421][T10891] ? __pfx_vt_do_kdsk_ioctl+0x10/0x10 [ 281.042431][T10891] ? bpf_lsm_capable+0x9/0x10 [ 281.042444][T10891] ? security_capable+0x7e/0x260 [ 281.042459][T10891] vt_ioctl+0xbf3/0x2fd0 [ 281.042471][T10891] ? __pfx_vt_ioctl+0x10/0x10 [ 281.042483][T10891] ? aa_get_newest_label+0x376/0x680 [ 281.042498][T10891] ? __pfx_aa_get_newest_label+0x10/0x10 [ 281.042512][T10891] ? rcu_is_watching+0x12/0xc0 [ 281.042526][T10891] ? trace_cap_capable+0x1a2/0x210 [ 281.042542][T10891] ? apparmor_capable+0x114/0x1d0 [ 281.042556][T10891] ? bpf_lsm_capable+0x9/0x10 [ 281.042568][T10891] ? security_capable+0x7e/0x260 [ 281.042583][T10891] vt_compat_ioctl+0x1c3/0x4e0 [ 281.042595][T10891] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 281.042609][T10891] ? __fget_files+0x206/0x3a0 [ 281.042619][T10891] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 281.042631][T10891] tty_compat_ioctl+0x2ee/0x4d0 [ 281.042645][T10891] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 281.042659][T10891] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 281.042674][T10891] __do_fast_syscall_32+0x73/0x120 [ 281.042684][T10891] do_fast_syscall_32+0x32/0x80 [ 281.042693][T10891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.042707][T10891] RIP: 0023:0xf7f95579 [ 281.042715][T10891] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 281.042723][T10891] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 281.042731][T10891] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b46 [ 281.042736][T10891] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.042741][T10891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.042746][T10891] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 281.042751][T10891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.042762][T10891] [ 281.564520][T10905] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1384'. [ 281.593117][T10906] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 282.118632][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 282.134023][T10913] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 282.465082][T10918] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 283.223357][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1395'. [ 283.614375][T10948] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1398'. usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 284.179210][ T6418] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 284.329825][ T6418] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 284.333709][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.337079][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.341427][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 284.344851][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.348276][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.351449][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 284.354221][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.357139][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.360480][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 284.363331][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.366142][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.369534][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 284.372235][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.375236][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.378898][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 284.384423][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.387100][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.390450][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 284.393293][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.396044][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.399591][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 284.402682][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.405381][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.408582][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 284.412430][ T6418] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 284.415196][ T6418] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 284.417890][ T6418] usb 7-1: Product: syz [ 284.419347][ T6418] usb 7-1: Manufacturer: syz [ 284.420850][ T6418] usb 7-1: SerialNumber: syz [ 284.423787][ T6418] usb 7-1: config 0 descriptor?? [ 284.429506][ T6418] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 284.516027][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 284.683151][ C1] usb 7-1: yurex_control_callback - control failed: -71 [ 284.683993][ T25] usb 7-1: USB disconnect, device number 10 [ 284.692181][ T25] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 284.860959][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'. [ 285.822509][T10993] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1409'. [ 285.922707][T10995] FAULT_INJECTION: forcing a failure. [ 285.922707][T10995] name failslab, interval 1, probability 0, space 0, times 0 [ 285.927057][T10995] CPU: 2 UID: 0 PID: 10995 Comm: syz.4.1410 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 285.927071][T10995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.927078][T10995] Call Trace: [ 285.927081][T10995] [ 285.927085][T10995] dump_stack_lvl+0x16c/0x1f0 [ 285.927105][T10995] should_fail_ex+0x50a/0x650 [ 285.927117][T10995] ? fs_reclaim_acquire+0xae/0x150 [ 285.927133][T10995] should_failslab+0xc2/0x120 [ 285.927146][T10995] __kmalloc_noprof+0xce/0x4f0 [ 285.927157][T10995] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 285.927169][T10995] ? tomoyo_realpath_from_path+0xbf/0x710 [ 285.927183][T10995] tomoyo_realpath_from_path+0xbf/0x710 [ 285.927196][T10995] ? tomoyo_path_number_perm+0x235/0x5b0 [ 285.927206][T10995] tomoyo_path_number_perm+0x248/0x5b0 [ 285.927215][T10995] ? tomoyo_path_number_perm+0x235/0x5b0 [ 285.927226][T10995] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.927246][T10995] ? __pfx_lock_release+0x10/0x10 [ 285.927257][T10995] ? trace_lock_acquire+0x14e/0x1f0 [ 285.927267][T10995] ? lock_acquire+0x2f/0xb0 [ 285.927277][T10995] ? __fget_files+0x40/0x3a0 [ 285.927288][T10995] ? __fget_files+0x206/0x3a0 [ 285.927299][T10995] security_file_ioctl_compat+0x9b/0x240 [ 285.927311][T10995] __do_compat_sys_ioctl+0x4e/0x2c0 [ 285.927328][T10995] __do_fast_syscall_32+0x73/0x120 [ 285.927339][T10995] do_fast_syscall_32+0x32/0x80 [ 285.927348][T10995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.927362][T10995] RIP: 0023:0xf7ff7579 [ 285.927370][T10995] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 285.927380][T10995] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 285.927389][T10995] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c040aed5 [ 285.927394][T10995] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.927399][T10995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.927404][T10995] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 285.927409][T10995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.927420][T10995] [ 285.927425][T10995] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.155063][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1414'. usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 286.435853][T11011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1416'. [ 286.439697][T11011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1416'. [ 286.443701][T11011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1416'. [ 286.447681][T11011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1416'. [ 286.803564][T11030] FAULT_INJECTION: forcing a failure. [ 286.803564][T11030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.807476][T11030] CPU: 2 UID: 0 PID: 11030 Comm: syz.1.1418 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 286.807490][T11030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.807496][T11030] Call Trace: [ 286.807500][T11030] [ 286.807504][T11030] dump_stack_lvl+0x16c/0x1f0 [ 286.807523][T11030] should_fail_ex+0x50a/0x650 [ 286.807537][T11030] _copy_from_user+0x2e/0xd0 [ 286.807550][T11030] get_compat_msghdr+0xa8/0x170 [ 286.807563][T11030] ? __pfx_get_compat_msghdr+0x10/0x10 [ 286.807579][T11030] ___sys_recvmsg+0x193/0x1a0 [ 286.807590][T11030] ? __pfx____sys_recvmsg+0x10/0x10 [ 286.807599][T11030] ? __fget_files+0x1fc/0x3a0 [ 286.807610][T11030] ? trace_lock_acquire+0x14e/0x1f0 [ 286.807623][T11030] ? __fget_files+0x206/0x3a0 [ 286.807632][T11030] ? __pfx___might_resched+0x10/0x10 [ 286.807647][T11030] do_recvmmsg+0x55d/0x740 [ 286.807658][T11030] ? __pfx_do_recvmmsg+0x10/0x10 [ 286.807668][T11030] ? vfs_write+0x306/0x1150 [ 286.807684][T11030] ? __fget_files+0x206/0x3a0 [ 286.807695][T11030] __sys_recvmmsg+0x21e/0x280 [ 286.807705][T11030] ? __pfx___sys_recvmmsg+0x10/0x10 [ 286.807716][T11030] ? __pfx_ksys_write+0x10/0x10 [ 286.807727][T11030] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 286.807740][T11030] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.807754][T11030] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 286.807768][T11030] __do_fast_syscall_32+0x73/0x120 [ 286.807778][T11030] do_fast_syscall_32+0x32/0x80 [ 286.807787][T11030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.807802][T11030] RIP: 0023:0xf7f36579 [ 286.807810][T11030] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 286.807819][T11030] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 286.807828][T11030] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003700 [ 286.807834][T11030] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.807839][T11030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.807844][T11030] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 286.807849][T11030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.807863][T11030] [ 286.896593][ C2] vkms_vblank_simulate: vblank timer overrun [ 288.103161][T11051] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 288.105954][T11051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1425'. [ 288.108687][T11051] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 288.111552][T11051] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 289.576729][T11080] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 291.107720][T11105] __nla_validate_parse: 1 callbacks suppressed [ 291.107910][T11105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1443'. [ 291.119441][T11105] openvswitch: netlink: Flow key attr not present in new flow. [ 291.123172][T11105] capability: warning: `syz.1.1443' uses deprecated v2 capabilities in a way that may be insecure [ 291.563784][T11125] rdma_rxe: rxe_newlink: failed to add ipvlan0 usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 292.086881][T11135] IPv6: NLM_F_REPLACE set, but no existing node found! [ 292.351789][T11145] Invalid ELF header magic: != ELF [ 292.454906][T11155] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1458'. [ 292.486595][T11159] sg_read: process 1171 (syz.0.1459) changed security contexts after opening file descriptor, this is not allowed. [ 293.432161][T11179] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 294.409326][T11200] dvmrp8: entered allmulticast mode [ 294.427242][T11200] dvmrp8: left allmulticast mode usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 294.789762][T11219] syz1: rxe_newlink: already configured on ipvlan0 [ 295.602371][T11223] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1479'. [ 295.938968][ T6418] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 295.954948][T11238] loop9: detected capacity change from 0 to 8 [ 295.960672][T11238] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 295.962485][T11238] loop9: partition table partially beyond EOD, truncated [ 295.964648][T11238] loop9: p1 size 81768186 extends beyond EOD, truncated [ 295.995417][T10965] udevd[10965]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 296.139759][ T6418] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 296.143722][ T6418] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.147883][ T6418] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.153730][ T6418] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.160162][ T6418] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.162985][ T6418] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.166219][ T6418] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.173322][ T6418] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.178785][ T6418] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.182699][ T6418] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.185957][ T6418] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.188736][ T6418] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.192567][ T6418] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.195878][ T6418] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.198710][ T6418] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.202520][ T6418] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.207485][ T6418] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.211658][ T6418] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.215235][ T6418] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.218689][ T6418] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.221460][ T6418] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.224804][ T6418] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.228485][ T6418] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.232471][ T6418] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.235771][ T6418] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.254417][ T6418] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 296.257303][ T6418] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 296.259882][ T6418] usb 5-1: Product: syz [ 296.261211][ T6418] usb 5-1: Manufacturer: syz [ 296.263163][ T6418] usb 5-1: SerialNumber: syz [ 296.276505][ T6418] usb 5-1: config 0 descriptor?? [ 296.385741][T11244] 9pnet_fd: Insufficient options for proto=fd [ 296.517194][ T6418] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 296.529376][ T6418] usb 5-1: USB disconnect, device number 10 [ 296.537957][ T6418] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 296.822963][T11252] syz1: rxe_newlink: already configured on ipvlan0 [ 297.494390][T11257] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1491'. usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 299.113121][T11284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1499'. [ 299.115912][T11284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1499'. [ 299.118463][T11284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1499'. [ 299.121556][T11284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1499'. [ 299.394944][T11291] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 300.650384][T11315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1508'. [ 300.653064][T11315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1508'. [ 300.655762][T11315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1508'. [ 300.658377][T11315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1508'. [ 301.642072][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1513'. [ 303.015535][T11361] mkiss: ax0: crc mode is auto. usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 305.091657][T11401] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 305.094278][T11401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.484183][T11416] __nla_validate_parse: 3 callbacks suppressed [ 305.484195][T11416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1542'. [ 305.609539][T11420] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 306.124159][T11423] syz1: rxe_newlink: already configured on ipvlan0 [ 306.249022][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1545'. [ 306.251970][T11425] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1545'. [ 306.254950][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1545'. [ 306.257666][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1545'. [ 308.100576][T11460] syz1: rxe_newlink: already configured on ipvlan0 [ 308.619107][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 310.220228][ T5825] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 310.373412][ T5825] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 310.376851][ T5825] usb 7-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.382470][ T5825] usb 7-1: config 1 interface 0 has no altsetting 0 [ 310.393924][ T5825] usb 7-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.40 [ 310.411088][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.412815][T11503] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 310.413567][ T5825] usb 7-1: Product: syz [ 310.417509][ T5825] usb 7-1: Manufacturer: syz [ 310.418892][ T5825] usb 7-1: SerialNumber: syz [ 310.833014][ T5825] usbhid 7-1:1.0: can't add hid device: -71 [ 310.834820][ T5825] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 310.838074][ T5825] usb 7-1: USB disconnect, device number 11 [ 310.876761][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1571'. [ 312.148405][T11528] can: request_module (can-proto-0) failed. [ 312.160513][T11531] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1578'. [ 312.369193][T11539] syz1: rxe_newlink: already configured on ipvlan0 [ 312.808317][T11542] FAULT_INJECTION: forcing a failure. [ 312.808317][T11542] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 312.814473][T11542] CPU: 3 UID: 0 PID: 11542 Comm: syz.4.1582 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 312.814495][T11542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 312.814505][T11542] Call Trace: [ 312.814510][T11542] [ 312.814517][T11542] dump_stack_lvl+0x16c/0x1f0 [ 312.814558][T11542] should_fail_ex+0x50a/0x650 [ 312.814583][T11542] ? __pfx___might_resched+0x10/0x10 [ 312.814614][T11542] should_fail_alloc_page+0xe7/0x130 [ 312.814638][T11542] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 312.814689][T11542] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 312.814713][T11542] ? hlock_class+0x4e/0x130 [ 312.814737][T11542] ? mark_lock+0xb5/0xc60 [ 312.814756][T11542] ? hlock_class+0x4e/0x130 [ 312.814783][T11542] ? __pfx_mark_lock+0x10/0x10 [ 312.814811][T11542] ? find_held_lock+0x2d/0x110 [ 312.814836][T11542] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 312.814856][T11542] ? hlock_class+0x4e/0x130 [ 312.814881][T11542] ? hlock_class+0x4e/0x130 [ 312.814905][T11542] ? mark_lock+0xb5/0xc60 [ 312.814924][T11542] ? hlock_class+0x4e/0x130 [ 312.814954][T11542] ? hlock_class+0x4e/0x130 [ 312.814978][T11542] ? __lock_acquire+0xcc5/0x3c40 [ 312.814998][T11542] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.815023][T11542] ? policy_nodemask+0xea/0x4e0 [ 312.815047][T11542] alloc_pages_mpol+0x1fc/0x540 [ 312.815069][T11542] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 312.815090][T11542] ? __lock_acquire+0x15a9/0x3c40 [ 312.815115][T11542] folio_alloc_mpol_noprof+0x36/0x2f0 [ 312.815140][T11542] vma_alloc_folio_noprof+0xee/0x1b0 [ 312.815163][T11542] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 312.815187][T11542] ? find_held_lock+0x2d/0x110 [ 312.815216][T11542] do_pte_missing+0x202f/0x3e10 [ 312.815245][T11542] __handle_mm_fault+0x1166/0x2c60 [ 312.815271][T11542] ? __pfx___handle_mm_fault+0x10/0x10 [ 312.815288][T11542] ? follow_page_pte+0x3ac/0x1490 [ 312.815310][T11542] ? __pfx_lock_release+0x10/0x10 [ 312.815353][T11542] handle_mm_fault+0x3fa/0xaa0 [ 312.815378][T11542] __get_user_pages+0x773/0x36f0 [ 312.815406][T11542] ? __pfx___get_user_pages+0x10/0x10 [ 312.815422][T11542] ? down_read_killable+0xcc/0x380 [ 312.815440][T11542] ? __pfx_down_read_killable+0x10/0x10 [ 312.815466][T11542] get_user_pages_unlocked+0x1c2/0x780 [ 312.815488][T11542] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 312.815506][T11542] ? get_user_pages_fast_only+0xaf/0x100 [ 312.815526][T11542] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 312.815545][T11542] ? __pfx___might_resched+0x10/0x10 [ 312.815572][T11542] hva_to_pfn+0x8be/0xc20 [ 312.815601][T11542] ? __pfx_hva_to_pfn+0x10/0x10 [ 312.815622][T11542] ? lock_acquire.part.0+0x11b/0x380 [ 312.815642][T11542] ? find_held_lock+0x2d/0x110 [ 312.815672][T11542] ? find_held_lock+0x2d/0x110 [ 312.815701][T11542] ? xa_load+0x14a/0x2c0 [ 312.815717][T11542] ? __pfx_lock_release+0x10/0x10 [ 312.815740][T11542] kvm_follow_pfn+0x29f/0x3f0 [ 312.815767][T11542] __kvm_faultin_pfn+0x11c/0x1a0 [ 312.815796][T11542] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 312.815820][T11542] ? __pfx_xa_load+0x10/0x10 [ 312.815848][T11542] kvm_mmu_faultin_pfn+0x583/0x2190 [ 312.815878][T11542] ? __pfx_fast_page_fault+0x10/0x10 [ 312.815901][T11542] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 312.815924][T11542] ? __pfx_lock_release+0x10/0x10 [ 312.815943][T11542] ? __kvm_mmu_topup_memory_cache+0x330/0x600 [ 312.815977][T11542] kvm_tdp_page_fault+0x182/0x3d0 [ 312.815997][T11542] kvm_mmu_do_page_fault+0x587/0x6c0 [ 312.816018][T11542] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 312.816034][T11542] ? __pfx_lock_release+0x10/0x10 [ 312.816063][T11542] ? hlock_class+0x4e/0x130 [ 312.816091][T11542] kvm_mmu_page_fault+0x20f/0x1bd0 [ 312.816115][T11542] ? __pfx___lock_acquire+0x10/0x10 [ 312.816135][T11542] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 312.816152][T11542] ? __pfx_mark_lock+0x10/0x10 [ 312.816170][T11542] ? clear_bhb_loop+0x35/0x90 [ 312.816203][T11542] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 312.816226][T11542] handle_ept_violation+0x25a/0x640 [ 312.816242][T11542] ? __pfx_handle_ept_violation+0x10/0x10 [ 312.816259][T11542] vmx_handle_exit+0x6a4/0x1a30 [ 312.816288][T11542] vcpu_run+0x2aaf/0x4c00 [ 312.816317][T11542] ? __pfx_vcpu_run+0x10/0x10 [ 312.816332][T11542] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 312.816439][T11542] ? rcu_is_watching+0x12/0xc0 [ 312.816465][T11542] ? trace_lock_acquire+0x14e/0x1f0 [ 312.816480][T11542] ? __local_bh_enable_ip+0xa4/0x120 [ 312.816505][T11542] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.816528][T11542] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 312.816546][T11542] ? lock_acquire+0x2f/0xb0 [ 312.816566][T11542] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 312.816584][T11542] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 312.816613][T11542] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 312.816638][T11542] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 312.816658][T11542] ? tomoyo_path_number_perm+0x190/0x5b0 [ 312.816681][T11542] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 312.816699][T11542] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.816725][T11542] ? do_vfs_ioctl+0x513/0x1950 [ 312.816752][T11542] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 312.816792][T11542] ? __pfx_lock_release+0x10/0x10 [ 312.816811][T11542] ? trace_lock_acquire+0x14e/0x1f0 [ 312.816830][T11542] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 312.816851][T11542] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 312.816872][T11542] ? __fget_files+0x206/0x3a0 [ 312.816896][T11542] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 312.816916][T11542] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 312.816963][T11542] __do_fast_syscall_32+0x73/0x120 [ 312.816983][T11542] do_fast_syscall_32+0x32/0x80 [ 312.816998][T11542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.817027][T11542] RIP: 0023:0xf7ff7579 [ 312.817073][T11542] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 312.817089][T11542] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 312.817107][T11542] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 312.817118][T11542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.817127][T11542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.817137][T11542] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 312.817146][T11542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.817168][T11542] [ 314.044220][T11561] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1588'. [ 315.148189][T11576] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 315.676014][T11587] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1598'. [ 316.075529][T11599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1601'. [ 316.325253][ T5958] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.330900][ T5958] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.340866][ T5958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.346535][ T5958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.351900][ T5958] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 316.355587][ T5958] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.510585][T11604] chnl_net:caif_netlink_parms(): no params data found [ 316.609578][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.611582][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.626771][T11604] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.629716][T11604] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.632232][T11604] bridge_slave_0: entered allmulticast mode [ 316.636655][T11604] bridge_slave_0: entered promiscuous mode [ 316.641538][T11604] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.643905][T11604] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.646747][T11604] bridge_slave_1: entered allmulticast mode [ 316.651475][T11604] bridge_slave_1: entered promiscuous mode [ 316.773211][T11604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.792335][T11604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.847708][T11604] team0: Port device team_slave_0 added [ 316.864312][T11604] team0: Port device team_slave_1 added [ 316.907126][T11604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.909696][T11604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.919371][T11604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.924224][T11604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.926884][T11604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.938268][T11604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.993000][T11604] hsr_slave_0: entered promiscuous mode [ 316.995054][T11604] hsr_slave_1: entered promiscuous mode [ 316.997035][T11604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.001099][T11604] Cannot create hsr debugfs directory [ 317.161586][T11604] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 317.167515][T11604] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 317.175393][T11604] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 317.179834][T11604] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 317.250547][T11604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.269273][T11604] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.279354][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.283338][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.298754][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.300915][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.472627][T11604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.575531][T11636] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 317.699009][T11604] veth0_vlan: entered promiscuous mode [ 317.716176][T11604] veth1_vlan: entered promiscuous mode [ 317.760149][T11604] veth0_macvtap: entered promiscuous mode [ 317.765417][T11604] veth1_macvtap: entered promiscuous mode [ 317.778859][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.783207][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.786980][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.790856][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.795419][T11604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.816016][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.822041][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.825063][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.828074][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.831140][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.834512][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.838787][T11604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.843954][T11604] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.846885][T11604] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.849193][ T5997] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 317.850026][T11604] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.854776][T11604] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.896073][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.898733][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.915765][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.918268][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.020678][ T5997] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 318.024755][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.027694][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.030965][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 318.033582][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.036406][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.041007][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 318.045092][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.054263][T11649] mkiss: ax0: crc mode is auto. [ 318.076723][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.080846][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 318.083732][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.086297][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.089899][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 318.093400][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.097011][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.102300][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 318.105307][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.107946][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.111474][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 318.114200][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.116732][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.120663][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 318.123662][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.126493][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.130038][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 318.133775][ T5997] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 318.136872][ T5997] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 318.140847][ T5997] usb 7-1: Product: syz [ 318.142745][ T5997] usb 7-1: Manufacturer: syz [ 318.144308][ T5997] usb 7-1: SerialNumber: syz [ 318.151911][ T5997] usb 7-1: config 0 descriptor?? [ 318.160314][ T5997] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 318.420109][ C1] usb 7-1: yurex_control_callback - control failed: -71 [ 318.422358][ T5997] usb 7-1: USB disconnect, device number 12 [ 318.426183][ T5997] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 318.439281][ T5955] Bluetooth: hci4: command tx timeout [ 320.409285][ T35] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 320.484029][T11707] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 320.529280][ T5955] Bluetooth: hci4: command tx timeout [ 320.569985][ T35] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 320.573278][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.576211][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.579528][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 320.582643][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.585384][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.589389][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 320.592398][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.595323][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.598717][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 320.601986][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.604960][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.608226][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 320.610990][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.613861][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.617135][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 320.620350][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.623299][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.626622][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 320.629473][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.632092][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.635694][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 320.664883][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.667621][ T35] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.671262][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 320.676270][ T35] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 320.678978][ T35] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 320.681949][ T35] usb 10-1: Product: syz [ 320.683307][ T35] usb 10-1: Manufacturer: syz [ 320.684834][ T35] usb 10-1: SerialNumber: syz [ 320.687743][ T35] usb 10-1: config 0 descriptor?? [ 320.701585][ T35] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 321.081694][ C3] usb 10-1: yurex_control_callback - control failed: -71 [ 321.082164][ T6418] usb 10-1: USB disconnect, device number 2 [ 321.095628][ T6418] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 321.361810][T11722] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1629'. [ 321.593513][T11725] Unsupported ieee802154 address type: 0 [ 321.815657][T11728] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1631'. [ 321.818337][T11728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1631'. [ 321.822320][T11728] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1631'. [ 321.825463][T11728] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1631'. [ 322.369809][T11749] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 322.511888][T11751] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 322.599337][ T5955] Bluetooth: hci4: command tx timeout [ 323.835326][T11769] Unsupported ieee802154 address type: 0 [ 324.191992][T11774] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1645'. [ 324.328383][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1646'. [ 324.679268][ T5955] Bluetooth: hci4: command tx timeout [ 325.167209][ T39] audit: type=1800 audit(1738957054.540:58): pid=11803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1650" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 326.174211][T11822] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1657'. [ 327.709327][T11841] syz.2.1663: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 327.714411][T11841] CPU: 0 UID: 0 PID: 11841 Comm: syz.2.1663 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 327.714438][T11841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.714455][T11841] Call Trace: [ 327.714459][T11841] [ 327.714465][T11841] dump_stack_lvl+0x16c/0x1f0 [ 327.714487][T11841] warn_alloc+0x24d/0x3a0 [ 327.714502][T11841] ? __pfx_warn_alloc+0x10/0x10 [ 327.714514][T11841] ? __pfx_stack_trace_save+0x10/0x10 [ 327.714530][T11841] ? kasan_save_stack+0x42/0x60 [ 327.714563][T11841] ? kasan_save_stack+0x33/0x60 [ 327.714580][T11841] ? kasan_save_track+0x14/0x30 [ 327.714596][T11841] ? __kasan_kmalloc+0xaa/0xb0 [ 327.714610][T11841] ? xskq_create+0x52/0x1d0 [ 327.714627][T11841] ? do_sock_setsockopt+0x222/0x480 [ 327.714640][T11841] ? __sys_setsockopt+0x1a0/0x230 [ 327.714648][T11841] ? __ia32_sys_setsockopt+0xbc/0x160 [ 327.714660][T11841] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 327.714682][T11841] ? xskq_create+0xfb/0x1d0 [ 327.714698][T11841] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 327.714715][T11841] ? xskq_create+0xfb/0x1d0 [ 327.714727][T11841] vmalloc_user_noprof+0x6b/0x90 [ 327.714738][T11841] ? xskq_create+0xfb/0x1d0 [ 327.714751][T11841] xskq_create+0xfb/0x1d0 [ 327.714764][T11841] xsk_setsockopt+0x869/0xac0 [ 327.714777][T11841] ? __pfx_xsk_setsockopt+0x10/0x10 [ 327.714792][T11841] ? find_held_lock+0x2d/0x110 [ 327.714813][T11841] ? __pfx_xsk_setsockopt+0x10/0x10 [ 327.714824][T11841] do_sock_setsockopt+0x222/0x480 [ 327.714836][T11841] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 327.714849][T11841] ? lock_acquire+0x2f/0xb0 [ 327.714867][T11841] __sys_setsockopt+0x1a0/0x230 [ 327.714885][T11841] __ia32_sys_setsockopt+0xbc/0x160 [ 327.714899][T11841] ? lockdep_hardirqs_on+0x7c/0x110 [ 327.714921][T11841] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 327.714943][T11841] __do_fast_syscall_32+0x73/0x120 [ 327.714959][T11841] do_fast_syscall_32+0x32/0x80 [ 327.714973][T11841] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.714998][T11841] RIP: 0023:0xf7f95579 [ 327.715012][T11841] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 327.715027][T11841] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 327.715043][T11841] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 327.715055][T11841] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 327.715066][T11841] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.715074][T11841] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 327.715083][T11841] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.715098][T11841] [ 327.715170][T11841] Mem-Info: [ 327.799232][T11841] active_anon:8402 inactive_anon:380 isolated_anon:0 [ 327.799232][T11841] active_file:2007 inactive_file:41981 isolated_file:0 [ 327.799232][T11841] unevictable:1771 dirty:172 writeback:0 [ 327.799232][T11841] slab_reclaimable:7869 slab_unreclaimable:63730 [ 327.799232][T11841] mapped:30168 shmem:4512 pagetables:928 [ 327.799232][T11841] sec_pagetables:298 bounce:0 [ 327.799232][T11841] kernel_misc_reclaimable:0 [ 327.799232][T11841] free:31039 free_pcp:3992 free_cma:0 [ 327.814431][T11841] Node 0 active_anon:3568kB inactive_anon:1328kB active_file:180kB inactive_file:14916kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:7764kB dirty:0kB writeback:0kB shmem:4556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9744kB pagetables:1096kB sec_pagetables:1116kB all_unreclaimable? yes [ 327.824060][T11841] Node 1 active_anon:30140kB inactive_anon:192kB active_file:7848kB inactive_file:153008kB unevictable:3548kB isolated(anon):0kB isolated(file):0kB mapped:112908kB dirty:688kB writeback:0kB shmem:13492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:2764kB pagetables:2620kB sec_pagetables:76kB all_unreclaimable? no [ 327.835013][T11841] Node 0 DMA free:2796kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:132kB inactive_anon:136kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:308kB local_pcp:28kB free_cma:0kB [ 327.843371][T11841] lowmem_reserve[]: 0 297 0 0 0 [ 327.845182][T11841] Node 0 DMA32 free:19288kB boost:2048kB min:15720kB low:19136kB high:22552kB reserved_highatomic:4096KB active_anon:3436kB inactive_anon:1192kB active_file:180kB inactive_file:14916kB unevictable:3536kB writepending:0kB present:1032196kB managed:305044kB mlocked:0kB bounce:0kB free_pcp:1512kB local_pcp:1008kB free_cma:0kB [ 327.854951][T11841] lowmem_reserve[]: 0 0 0 0 0 [ 327.856601][T11841] Node 1 DMA32 free:101508kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:30240kB inactive_anon:192kB active_file:7848kB inactive_file:153008kB unevictable:3548kB writepending:688kB present:1048432kB managed:948252kB mlocked:12kB bounce:0kB free_pcp:13816kB local_pcp:680kB free_cma:0kB [ 327.889326][T11841] lowmem_reserve[]: 0 0 0 0 0 [ 327.893109][T11841] Node 0 DMA: 127*4kB (UM) 60*8kB (UM) 27*16kB (UM) 31*32kB (UM) 6*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2796kB [ 327.909734][T11841] Node 0 DMA32: 66*4kB (UMH) 56*8kB (UMEH) 25*16kB (UMEH) 108*32kB (UMEH) 60*64kB (UME) 23*128kB (UM) 13*256kB (U) 5*512kB (U) 2*1024kB (M) 0*2048kB 0*4096kB = 19288kB [ 327.932916][T11845] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 327.935149][T11841] Node 1 DMA32: 242*4kB (ME) 681*8kB (UME) 341*16kB (UME) 314*32kB (UME) 243*64kB (UME) 15*128kB (UME) 11*256kB (UME) 14*512kB (ME) 11*1024kB (ME) 13*2048kB (UM) 3*4096kB (M) = 99552kB [ 327.946924][T11841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.955502][T11841] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 327.965822][T11841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.976688][T11841] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 327.991217][T11841] 48503 total pagecache pages [ 327.993548][T11841] 0 pages in swap cache [ 327.997284][T11841] Free swap = 124396kB [ 328.003297][T11841] Total swap = 124996kB [ 328.005040][T11841] 524155 pages RAM [ 328.006376][T11841] 0 pages HighMem/MovableOnly [ 328.008076][T11841] 206991 pages reserved [ 328.011328][T11841] 0 pages cma reserved [ 328.064115][T11854] FAULT_INJECTION: forcing a failure. [ 328.064115][T11854] name failslab, interval 1, probability 0, space 0, times 0 [ 328.068817][T11854] CPU: 0 UID: 0 PID: 11854 Comm: syz.4.1665 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 328.068831][T11854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 328.068848][T11854] Call Trace: [ 328.068852][T11854] [ 328.068857][T11854] dump_stack_lvl+0x16c/0x1f0 [ 328.068875][T11854] should_fail_ex+0x50a/0x650 [ 328.068887][T11854] ? fs_reclaim_acquire+0xae/0x150 [ 328.068904][T11854] should_failslab+0xc2/0x120 [ 328.068916][T11854] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 328.068929][T11854] ? mark_held_locks+0x9f/0xe0 [ 328.068941][T11854] ? xs_format_common_peer_addresses+0x150/0x380 [ 328.068954][T11854] ? read_word_at_a_time+0xe/0x20 [ 328.068966][T11854] kstrdup+0x42/0xb0 [ 328.068980][T11854] xs_format_common_peer_addresses+0x150/0x380 [ 328.068993][T11854] ? __pfx_xs_format_common_peer_addresses+0x10/0x10 [ 328.069004][T11854] ? __pfx___debug_object_init+0x10/0x10 [ 328.069024][T11854] ? rcu_is_watching+0x12/0xc0 [ 328.069040][T11854] ? do_init_timer+0xc9/0x110 [ 328.069050][T11854] xs_setup_local+0x611/0x880 [ 328.069073][T11854] xprt_create_transport+0x169/0x720 [ 328.069087][T11854] rpc_create+0x379/0x7e0 [ 328.069101][T11854] ? __pfx_rpc_create+0x10/0x10 [ 328.069116][T11854] ? __lock_acquire+0x15a9/0x3c40 [ 328.069127][T11854] ? __pfx___lock_acquire+0x10/0x10 [ 328.069148][T11854] ? rpcb_create_local+0x100/0x270 [ 328.069158][T11854] ? __pfx___lock_acquire+0x10/0x10 [ 328.069168][T11854] ? rcu_is_watching+0x12/0xc0 [ 328.069183][T11854] rpcb_create_af_local+0x10d/0x300 [ 328.069198][T11854] ? __pfx_rpcb_create_af_local+0x10/0x10 [ 328.069219][T11854] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 328.069232][T11854] ? lock_acquire+0x2f/0xb0 [ 328.069242][T11854] ? rpcb_create_local+0x148/0x270 [ 328.069253][T11854] rpcb_create_local+0x1ee/0x270 [ 328.069262][T11854] svc_bind+0x1e8/0x260 [ 328.069274][T11854] nfsd_create_serv+0x2d4/0x480 [ 328.069287][T11854] ? __pfx_nfsd_create_serv+0x10/0x10 [ 328.069299][T11854] ? __nla_validate_parse+0x605/0x2b10 [ 328.069315][T11854] nfsd_nl_listener_set_doit+0xeb/0x1b40 [ 328.069331][T11854] ? __pfx___nla_validate_parse+0x10/0x10 [ 328.069359][T11854] ? rcu_is_watching+0x12/0xc0 [ 328.069373][T11854] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 328.069388][T11854] ? __nla_parse+0x40/0x60 [ 328.069402][T11854] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 328.069418][T11854] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 328.069436][T11854] genl_family_rcv_msg_doit+0x202/0x2f0 [ 328.069453][T11854] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 328.069467][T11854] ? trace_cap_capable+0x1a2/0x210 [ 328.069486][T11854] ? bpf_lsm_capable+0x9/0x10 [ 328.069499][T11854] ? security_capable+0x7e/0x260 [ 328.069515][T11854] genl_rcv_msg+0x565/0x800 [ 328.069526][T11854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.069534][T11854] ? lockdep_hardirqs_on+0x7c/0x110 [ 328.069548][T11854] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 328.069567][T11854] netlink_rcv_skb+0x165/0x410 [ 328.069581][T11854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.069590][T11854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.069609][T11854] ? down_read+0xc9/0x330 [ 328.069618][T11854] ? __pfx_down_read+0x10/0x10 [ 328.069627][T11854] ? netlink_deliver_tap+0x1ae/0xca0 [ 328.069641][T11854] genl_rcv+0x28/0x40 [ 328.069655][T11854] netlink_unicast+0x53c/0x7f0 [ 328.069674][T11854] ? __pfx_netlink_unicast+0x10/0x10 [ 328.069688][T11854] ? __phys_addr_symbol+0x30/0x80 [ 328.069703][T11854] ? __check_object_size+0x488/0x710 [ 328.069716][T11854] netlink_sendmsg+0x8b8/0xd70 [ 328.069732][T11854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.069750][T11854] ____sys_sendmsg+0x9ae/0xb40 [ 328.069765][T11854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.069777][T11854] ? get_compat_msghdr+0x11b/0x170 [ 328.069795][T11854] ___sys_sendmsg+0x135/0x1e0 [ 328.069806][T11854] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.069821][T11854] ? __pfx_lock_release+0x10/0x10 [ 328.069831][T11854] ? trace_lock_acquire+0x14e/0x1f0 [ 328.069844][T11854] ? __fget_files+0x206/0x3a0 [ 328.069858][T11854] __sys_sendmsg+0x16e/0x220 [ 328.069868][T11854] ? __pfx___sys_sendmsg+0x10/0x10 [ 328.069886][T11854] __do_fast_syscall_32+0x73/0x120 [ 328.069897][T11854] do_fast_syscall_32+0x32/0x80 [ 328.069906][T11854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.069921][T11854] RIP: 0023:0xf7ff7579 [ 328.069929][T11854] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 328.069938][T11854] RSP: 002b:00000000f50f555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 328.069947][T11854] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 328.069953][T11854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.069958][T11854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.069963][T11854] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 328.069968][T11854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.069980][T11854] [ 328.842820][T11867] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1669'. [ 329.480713][T11874] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1671'. [ 329.484871][T11874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1671'. [ 329.488229][T11874] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1671'. [ 329.491425][T11874] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1671'. [ 329.809316][T11882] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 331.124842][T11906] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1680'. [ 331.142147][T11906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1680'. [ 331.169385][T11906] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1680'. [ 331.177146][T11906] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1680'. [ 331.199748][T11909] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1682'. [ 331.569245][ T35] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 331.729173][ T35] usb 9-1: Using ep0 maxpacket: 32 [ 331.732000][ T35] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 331.737024][ T35] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 331.742643][ T35] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 331.745497][ T35] usb 9-1: Product: syz [ 331.747225][ T35] usb 9-1: Manufacturer: syz [ 331.748796][ T35] usb 9-1: SerialNumber: syz [ 331.751661][ T35] usb 9-1: config 0 descriptor?? [ 331.754644][T11915] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 331.969833][ T5987] usb 9-1: USB disconnect, device number 6 [ 332.322069][T11932] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 333.859771][T11969] loop4: detected capacity change from 0 to 7 [ 333.866077][T11969] Dev loop4: unable to read RDB block 7 [ 333.867822][T11969] loop4: unable to read partition table [ 333.870105][T11969] loop4: partition table beyond EOD, truncated [ 333.871966][T11969] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 333.923381][T11976] FAULT_INJECTION: forcing a failure. [ 333.923381][T11976] name failslab, interval 1, probability 0, space 0, times 0 [ 333.928269][T11976] CPU: 1 UID: 0 PID: 11976 Comm: syz.2.1706 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 333.928292][T11976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.928301][T11976] Call Trace: [ 333.928319][T11976] [ 333.928326][T11976] dump_stack_lvl+0x16c/0x1f0 [ 333.928355][T11976] should_fail_ex+0x50a/0x650 [ 333.928375][T11976] ? fs_reclaim_acquire+0xae/0x150 [ 333.928403][T11976] should_failslab+0xc2/0x120 [ 333.928423][T11976] __kmalloc_node_noprof+0xd1/0x520 [ 333.928439][T11976] ? translate_compat_table+0x125e/0x18c0 [ 333.928459][T11976] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 333.928477][T11976] __kvmalloc_node_noprof+0xad/0x1a0 [ 333.928494][T11976] xt_alloc_entry_offsets+0x3a/0x60 [ 333.928514][T11976] translate_table+0x231/0x1730 [ 333.928535][T11976] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 333.928564][T11976] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.928590][T11976] ? __pfx_translate_table+0x10/0x10 [ 333.928622][T11976] translate_compat_table+0x13d9/0x18c0 [ 333.928652][T11976] ? __pfx_translate_compat_table+0x10/0x10 [ 333.928674][T11976] ? __might_fault+0x13b/0x190 [ 333.928695][T11976] ? trace_lock_acquire+0x14e/0x1f0 [ 333.928721][T11976] compat_do_replace+0x35d/0x500 [ 333.928742][T11976] ? __pfx_compat_do_replace+0x10/0x10 [ 333.928762][T11976] ? aa_get_newest_label+0x376/0x680 [ 333.928788][T11976] ? __pfx_aa_get_newest_label+0x10/0x10 [ 333.928821][T11976] ? bpf_lsm_capable+0x9/0x10 [ 333.928844][T11976] ? security_capable+0x7e/0x260 [ 333.928871][T11976] do_ipt_set_ctl+0x686/0xc10 [ 333.928893][T11976] ? __mutex_lock+0x1cc/0xb10 [ 333.928920][T11976] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 333.928941][T11976] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 333.928967][T11976] ? sockopt_release_sock+0x52/0x60 [ 333.928986][T11976] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.929014][T11976] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 333.929046][T11976] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 333.929088][T11976] nf_setsockopt+0x8a/0xf0 [ 333.929112][T11976] ip_setsockopt+0xcb/0xf0 [ 333.929135][T11976] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 333.929157][T11976] do_sock_setsockopt+0x222/0x480 [ 333.929177][T11976] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 333.929199][T11976] ? lock_acquire+0x2f/0xb0 [ 333.929230][T11976] __sys_setsockopt+0x1a0/0x230 [ 333.929250][T11976] __ia32_sys_setsockopt+0xbc/0x160 [ 333.929264][T11976] ? lockdep_hardirqs_on+0x7c/0x110 [ 333.929288][T11976] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 333.929314][T11976] __do_fast_syscall_32+0x73/0x120 [ 333.929332][T11976] do_fast_syscall_32+0x32/0x80 [ 333.929347][T11976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.929372][T11976] RIP: 0023:0xf7f95579 [ 333.929386][T11976] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 333.929401][T11976] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 333.929418][T11976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 333.929428][T11976] RDX: 0000000000000040 RSI: 00000000800002c0 RDI: 00000000000002c4 [ 333.929438][T11976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.929447][T11976] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 333.929457][T11976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.929477][T11976] [ 333.929846][T11977] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 335.425229][T12011] hsr0: entered promiscuous mode [ 335.428665][T12011] __nla_validate_parse: 12 callbacks suppressed [ 335.428678][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1716'. [ 335.435301][T12011] hsr_slave_0: left promiscuous mode [ 335.438360][T12011] hsr_slave_1: left promiscuous mode [ 335.455729][T12011] hsr0 (unregistering): left promiscuous mode [ 335.498450][T12012] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 335.708036][ T5987] IPVS: starting estimator thread 0... [ 335.799379][T12018] IPVS: using max 39 ests per chain, 93600 per kthread [ 335.933625][T12016] 9pnet_virtio: no channels available for device syz [ 336.930560][T12045] netlink: 'syz.2.1724': attribute type 4 has an invalid length. [ 338.606472][T12080] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 338.938638][T12087] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1739'. [ 339.004419][T12091] fuse: Unknown parameter 'rootmode 9ב' [ 339.007353][T12091] Invalid source name [ 339.008673][T12091] UBIFS error (pid: 12091): cannot open "./file0", error -22 [ 339.607429][T12104] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 340.221107][T12114] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1749'. [ 340.565848][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1752'. [ 340.565871][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1752'. [ 340.574147][T12124] erspan0: entered promiscuous mode [ 340.576190][T12124] macvtap1: entered promiscuous mode [ 340.578833][T12124] macvtap1: entered allmulticast mode [ 340.581540][T12124] erspan0: entered allmulticast mode [ 340.586072][T12125] erspan0: left allmulticast mode [ 340.588822][T12125] erspan0: left promiscuous mode [ 340.909700][T12131] FAULT_INJECTION: forcing a failure. [ 340.909700][T12131] name failslab, interval 1, probability 0, space 0, times 0 [ 340.915207][T12131] CPU: 0 UID: 0 PID: 12131 Comm: syz.4.1755 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 340.915258][T12131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 340.915267][T12131] Call Trace: [ 340.915273][T12131] [ 340.915280][T12131] dump_stack_lvl+0x16c/0x1f0 [ 340.915314][T12131] should_fail_ex+0x50a/0x650 [ 340.915335][T12131] ? fs_reclaim_acquire+0xae/0x150 [ 340.915366][T12131] should_failslab+0xc2/0x120 [ 340.915393][T12131] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 340.915414][T12131] ? inode_set_ctime_current+0x2a7/0x900 [ 340.915438][T12131] ? __d_alloc+0x35/0x8c0 [ 340.915464][T12131] __d_alloc+0x35/0x8c0 [ 340.915488][T12131] d_alloc_pseudo+0x1c/0xc0 [ 340.915514][T12131] alloc_file_pseudo+0xc6/0x1e0 [ 340.915540][T12131] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 340.915566][T12131] ? hugetlbfs_get_inode+0x323/0x740 [ 340.915592][T12131] hugetlb_file_setup+0x4cd/0x620 [ 340.915624][T12131] ksys_mmap_pgoff+0x189/0x5c0 [ 340.915640][T12131] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 340.915659][T12131] __do_fast_syscall_32+0x73/0x120 [ 340.915677][T12131] do_fast_syscall_32+0x32/0x80 [ 340.915692][T12131] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 340.915719][T12131] RIP: 0023:0xf7ff7579 [ 340.915732][T12131] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 340.915748][T12131] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 340.915765][T12131] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000 [ 340.915776][T12131] RDX: 000000000000000a RSI: 000000000004c831 RDI: 00000000ffffffff [ 340.915786][T12131] RBP: 0000000008000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.915796][T12131] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 340.915806][T12131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.915827][T12131] [ 341.375626][T12137] netlink: 'syz.4.1756': attribute type 10 has an invalid length. [ 341.388250][T12137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.392219][T12137] team0: Port device batadv0 added [ 341.396883][T12139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1757'. [ 341.401259][T12139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1757'. [ 341.405009][T12139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1757'. [ 341.407819][T12139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1757'. usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 342.404599][T12154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1761'. [ 342.408165][T12154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1761'. [ 342.410846][T12154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1761'. [ 342.414743][T12154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1761'. [ 344.352378][T12180] netlink: 'syz.4.1769': attribute type 2 has an invalid length. [ 346.389450][T12211] __nla_validate_parse: 4 callbacks suppressed [ 346.389462][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 346.606195][T12217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1779'. [ 346.609702][T12217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1779'. [ 346.612732][T12217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1779'. [ 346.618018][T12217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1779'. [ 347.851516][T12241] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 347.909363][T12243] netlink: 'syz.2.1783': attribute type 10 has an invalid length. [ 347.920847][T12243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.932155][T12243] team0: Port device batadv0 added [ 348.205559][T12251] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1788'. [ 348.211078][T12251] input: syz0 as /devices/virtual/input/input147 [ 348.767246][T12268] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 350.115449][T12286] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 350.502321][T12291] syz1: rxe_newlink: already configured on ipvlan0 [ 350.692778][T12299] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 352.337028][T12330] syz1: rxe_newlink: already configured on ipvlan0 [ 354.308753][T12364] hsr0: entered promiscuous mode [ 354.314089][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'. [ 354.317575][T12364] hsr_slave_0: left promiscuous mode [ 354.321895][T12364] hsr_slave_1: left promiscuous mode [ 354.339527][T12364] hsr0 (unregistering): left promiscuous mode [ 354.777077][T12376] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 355.188346][T12382] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 355.643979][T12388] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1829'. [ 355.646857][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1829'. [ 355.650119][T12388] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1829'. [ 355.652898][T12388] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1829'. [ 355.877112][T12395] ALSA: seq fatal error: cannot create timer (-16) [ 357.265602][T12423] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1839'. [ 357.268161][T12423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1839'. [ 357.272728][T12423] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1839'. [ 357.275898][T12423] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1839'. [ 357.551379][ T39] audit: type=1326 audit(1738957086.930:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.2.1849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 357.559789][ T39] audit: type=1326 audit(1738957086.930:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.2.1849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 357.566861][ T39] audit: type=1326 audit(1738957086.930:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.2.1849" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 357.575943][ T39] audit: type=1326 audit(1738957086.930:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.2.1849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 357.589738][ T39] audit: type=1326 audit(1738957086.930:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.2.1849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 357.596656][ T39] audit: type=1326 audit(1738957086.930:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.2.1849" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 357.604796][ T39] audit: type=1326 audit(1738957086.930:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.2.1849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 357.611953][ T39] audit: type=1326 audit(1738957086.930:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.2.1849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 357.618185][ T39] audit: type=1326 audit(1738957086.930:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.2.1849" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 357.624654][ T39] audit: type=1326 audit(1738957086.930:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.2.1849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 357.708519][T12434] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 358.634320][T12443] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1843'. [ 359.270197][T12463] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 359.845952][T12474] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1855'. usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 360.416382][T12490] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 361.367172][T12498] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 361.434954][T12503] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1864'. [ 362.453878][T12504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.188750][T12532] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1874'. [ 363.195806][T12530] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1873'. [ 364.208652][T12550] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 365.303331][T12568] lo: entered promiscuous mode [ 365.313664][T12568] tunl0: entered promiscuous mode [ 365.315524][T12568] gre0: entered promiscuous mode [ 365.317351][T12568] gretap0: entered promiscuous mode [ 365.319910][T12568] erspan0: entered promiscuous mode [ 365.323399][T12568] ip_vti0: entered promiscuous mode [ 365.326198][T12568] ip6_vti0: entered promiscuous mode [ 365.329596][T12568] sit0: entered promiscuous mode [ 365.333104][T12568] ip6tnl0: entered promiscuous mode [ 365.335906][T12568] ip6gre0: entered promiscuous mode [ 365.338534][T12568] syz_tun: entered promiscuous mode [ 365.340748][T12568] ip6gretap0: entered promiscuous mode [ 365.342756][T12568] bridge0: entered promiscuous mode [ 365.346167][T12568] vcan0: entered promiscuous mode [ 365.348457][T12568] bond0: entered promiscuous mode [ 365.351459][T12568] bond_slave_0: entered promiscuous mode [ 365.353834][T12568] bond_slave_1: entered promiscuous mode [ 365.356790][T12568] team0: entered promiscuous mode [ 365.358482][T12568] team_slave_0: entered promiscuous mode [ 365.360498][T12568] team_slave_1: entered promiscuous mode [ 365.362639][T12568] batadv0: entered promiscuous mode [ 365.363734][T12572] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 365.365338][T12568] dummy0: entered promiscuous mode [ 365.366742][T12572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 365.368095][T12572] vhci_hcd vhci_hcd.0: Device attached [ 365.368610][T12568] nlmon0: entered promiscuous mode [ 365.377023][T12568] caif0: entered promiscuous mode [ 365.378636][T12568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.516841][T12575] vhci_hcd: connection closed [ 365.519002][ T1141] vhci_hcd: stop threads [ 365.522522][ T1141] vhci_hcd: release socket [ 365.524235][ T1141] vhci_hcd: disconnect device [ 365.549943][ T35] vhci_hcd: vhci_device speed not set [ 366.142772][T12600] gretap0: left promiscuous mode [ 366.702014][T12615] syz.4.1891 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 367.311894][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1900'. [ 367.323336][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'. [ 367.936598][T12639] syz1: rxe_newlink: already configured on ipvlan0 usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 370.094096][T12673] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 370.526816][T12681] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 370.938302][T12684] block device autoloading is deprecated and will be removed. [ 370.942975][T12684] syz.2.1915: attempt to access beyond end of device [ 370.942975][T12684] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 371.036238][T12684] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 372.362315][T12717] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 372.378342][T12717] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.381888][T12717] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.465663][T12719] input: syz0 as /devices/virtual/input/input172 [ 372.532626][T12721] vxcan1: tx address claim with different name [ 372.861125][ T70] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 373.009761][ T70] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 373.012298][T12726] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 373.018220][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.021021][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.024442][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 373.027862][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.031719][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.035078][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 373.038263][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.041798][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.045160][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 373.048197][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.052439][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.057215][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 373.066452][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.069041][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.075738][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 373.089817][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.092405][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.104965][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 373.107786][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.110542][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.113878][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 373.117059][ T70] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.120704][ T70] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.124141][ T70] usb 7-1: config 0 interface 0 has no altsetting 0 [ 373.128314][ T70] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 373.130450][T12732] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1929'. [ 373.132449][ T70] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 373.136127][ T70] usb 7-1: Product: syz [ 373.137510][ T70] usb 7-1: Manufacturer: syz [ 373.138913][ T70] usb 7-1: SerialNumber: syz [ 373.141539][ T70] usb 7-1: config 0 descriptor?? [ 373.147701][ T70] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 373.490984][ T835] usb 7-1: USB disconnect, device number 13 [ 373.498048][ T835] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 374.349155][ T70] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 374.512325][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1934'. [ 374.519286][ T70] usb 9-1: Using ep0 maxpacket: 8 [ 374.526593][ T70] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 374.529002][ T70] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 374.535708][ T70] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 374.538891][ T70] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 374.544480][ T70] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.548275][ T70] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 374.553195][ T70] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 374.762963][ T70] usb 9-1: usb_control_msg returned -32 [ 374.764667][ T70] usbtmc 9-1:16.0: can't read capabilities [ 374.987403][T12762] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 375.704046][T12764] usbtmc 9-1:16.0: usb_clear_halt returned -32 [ 376.859359][ T6418] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 377.011100][ T6418] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 377.014683][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.017444][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.020785][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 377.025279][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.028069][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.031396][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 377.035541][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.038332][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.041679][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 377.045389][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.052863][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.056316][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 377.061142][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.063945][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.067303][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 377.072472][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.075742][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.079142][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 377.082402][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.089787][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.119174][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 377.133832][ T6418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.156996][ T6418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.166812][ T6418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 377.176622][ T6418] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 377.183688][ T6418] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 377.190325][ T6418] usb 7-1: Product: syz [ 377.193758][ T6418] usb 7-1: Manufacturer: syz [ 377.202174][ T6418] usb 7-1: SerialNumber: syz [ 377.205239][ T5997] usb 9-1: USB disconnect, device number 7 [ 377.213883][ T6418] usb 7-1: config 0 descriptor?? [ 377.225989][ T6418] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 377.480264][ C1] usb 7-1: yurex_control_callback - control failed: -71 [ 377.483592][ T6418] usb 7-1: USB disconnect, device number 14 [ 377.486270][ T6418] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 377.969210][ T5997] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 378.041879][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.044644][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.129146][ T5997] usb 9-1: Using ep0 maxpacket: 16 [ 378.163686][ T5997] usb 9-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 378.166347][ T5997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.168670][ T5997] usb 9-1: Product: syz [ 378.169998][ T5997] usb 9-1: Manufacturer: syz [ 378.171401][ T5997] usb 9-1: SerialNumber: syz [ 378.173803][ T5997] usb 9-1: config 0 descriptor?? [ 378.178696][ T5997] as10x_usb: device has been detected [ 378.180610][ T5997] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 378.195091][ T5997] usb 9-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 378.214624][ T5997] as10x_usb: error during firmware upload part1 [ 378.217830][ T5997] Registered device Sky IT Digital Key (green led) [ 378.376833][T12795] random: crng reseeded on system resumption [ 378.383540][T12795] FAULT_INJECTION: forcing a failure. [ 378.383540][T12795] name failslab, interval 1, probability 0, space 0, times 0 [ 378.387547][T12795] CPU: 2 UID: 0 PID: 12795 Comm: syz.4.1945 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 378.387561][T12795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 378.387568][T12795] Call Trace: [ 378.387572][T12795] [ 378.387577][T12795] dump_stack_lvl+0x16c/0x1f0 [ 378.387608][T12795] should_fail_ex+0x50a/0x650 [ 378.387627][T12795] ? async_schedule_node_domain+0x54/0x120 [ 378.387644][T12795] should_failslab+0xc2/0x120 [ 378.387658][T12795] __kmalloc_cache_noprof+0x68/0x420 [ 378.387667][T12795] ? do_raw_spin_lock+0x12d/0x2c0 [ 378.387683][T12795] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 378.387698][T12795] async_schedule_node_domain+0x54/0x120 [ 378.387713][T12795] dev_cache_fw_image+0x38f/0x490 [ 378.387728][T12795] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 378.387745][T12795] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 378.387759][T12795] dpm_for_each_dev+0x5a/0xb0 [ 378.387772][T12795] fw_pm_notify+0x81/0x150 [ 378.387785][T12795] notifier_call_chain+0xb7/0x410 [ 378.387800][T12795] ? __pfx_fw_pm_notify+0x10/0x10 [ 378.387815][T12795] blocking_notifier_call_chain_robust+0xc9/0x170 [ 378.387831][T12795] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 378.387851][T12795] pm_notifier_call_chain_robust+0x27/0x60 [ 378.387863][T12795] snapshot_open+0x218/0x2b0 [ 378.387873][T12795] ? __pfx_snapshot_open+0x10/0x10 [ 378.387883][T12795] misc_open+0x35a/0x420 [ 378.387896][T12795] ? __pfx_misc_open+0x10/0x10 [ 378.387906][T12795] chrdev_open+0x237/0x6a0 [ 378.387918][T12795] ? __pfx_apparmor_file_open+0x10/0x10 [ 378.387929][T12795] ? __pfx_chrdev_open+0x10/0x10 [ 378.387940][T12795] ? file_set_fsnotify_mode+0x163/0x5d0 [ 378.387957][T12795] do_dentry_open+0x735/0x1c40 [ 378.387967][T12795] ? __pfx_chrdev_open+0x10/0x10 [ 378.387979][T12795] ? inode_permission+0xdd/0x5f0 [ 378.387993][T12795] vfs_open+0x82/0x3f0 [ 378.388004][T12795] ? may_open+0x1f2/0x400 [ 378.388018][T12795] path_openat+0x1e88/0x2d80 [ 378.388035][T12795] ? __pfx_path_openat+0x10/0x10 [ 378.388045][T12795] ? __pfx___lock_acquire+0x10/0x10 [ 378.388055][T12795] ? lock_acquire.part.0+0x11b/0x380 [ 378.388066][T12795] ? find_held_lock+0x2d/0x110 [ 378.388082][T12795] do_filp_open+0x20c/0x470 [ 378.388093][T12795] ? __pfx_do_filp_open+0x10/0x10 [ 378.388102][T12795] ? find_held_lock+0x2d/0x110 [ 378.388126][T12795] ? alloc_fd+0x41f/0x760 [ 378.388140][T12795] do_sys_openat2+0x17a/0x1e0 [ 378.388152][T12795] ? __pfx_do_sys_openat2+0x10/0x10 [ 378.388167][T12795] ? __fget_files+0x206/0x3a0 [ 378.388179][T12795] __ia32_compat_sys_openat+0x16e/0x210 [ 378.388193][T12795] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 378.388205][T12795] ? ksys_write+0x1ba/0x250 [ 378.388219][T12795] __do_fast_syscall_32+0x73/0x120 [ 378.388230][T12795] do_fast_syscall_32+0x32/0x80 [ 378.388239][T12795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 378.388254][T12795] RIP: 0023:0xf7ff7579 [ 378.388263][T12795] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 378.388272][T12795] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 378.388282][T12795] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 378.388287][T12795] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.388293][T12795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 378.388298][T12795] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 378.388303][T12795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.388315][T12795] [ 378.493625][ C2] vkms_vblank_simulate: vblank timer overrun [ 378.50059usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) 5][T12795] [ 378.501721][T12795] ============================================ [ 378.503577][T12795] WARNING: possible recursive locking detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 378.505441][T12795] 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 Not tainted [ 378.508493][T12795] -------------------------------------------- [ 378.511294][T12795] syz.4.1945/12795 is trying to acquire lock: [ 378.513621][T12795] ffffffff8f0c1cc8 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x4e/0x600 [ 378.516948][T12795] [ 378.516948][T12795] but task is already holding lock: [ 378.519288][T12795] ffffffff8f0c1cc8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 378.521740][T12795] [ 378.521740][T12795] other info that might help us debug this: [ 378.524287][T12795] Possible unsafe locking scenario: [ 378.524287][T12795] [ 378.526421][T12795] CPU0 [ 378.527574][T12795] ---- [ 378.528646][T12795] lock(fw_lock); [ 378.529822][T12795] lock(fw_lock); [ 378.530949][T12795] [ 378.530949][T12795] *** DEADLOCK *** [ 378.530949][T12795] [ 378.534008][T12795] May be due to missing lock nesting notation [ 378.534008][T12795] [ 378.537356][T12795] 5 locks held by syz.4.1945/12795: [ 378.539419][T12795] #0: ffffffff8eeb9928 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 378.542651][T12795] #1: ffffffff8e081f48 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 378.545959][T12795] #2: ffffffff8e0c00d0 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa9/0x170 [ 378.549485][T12795] #3: ffffffff8f0c1cc8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 378.552559][T12795] #4: ffffffff8f0bc8e8 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 378.555415][T12795] [ 378.555415][T12795] stack backtrace: [ 378.557159][T12795] CPU: 3 UID: 0 PID: 12795 Comm: syz.4.1945 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 378.557171][T12795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 378.557177][T12795] Call Trace: [ 378.557181][T12795] [ 378.557185][T12795] dump_stack_lvl+0x116/0x1f0 [ 378.557203][T12795] print_deadlock_bug+0x2e3/0x410 [ 378.557215][T12795] __lock_acquire+0x2117/0x3c40 [ 378.557227][T12795] ? __pfx___lock_acquire+0x10/0x10 [ 378.557238][T12795] ? stack_depot_save_flags+0x36d/0x9e0 [ 378.557251][T12795] lock_acquire.part.0+0x11b/0x380 [ 378.557261][T12795] ? assign_fw+0x4e/0x600 [ 378.557275][T12795] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 378.557286][T12795] ? rcu_is_watching+0x12/0xc0 [ 378.557305][T12795] ? trace_lock_acquire+0x14e/0x1f0 [ 378.557313][T12795] ? vfs_open+0x82/0x3f0 [ 378.557324][T12795] ? path_openat+0x1e88/0x2d80 [ 378.557334][T12795] ? assign_fw+0x4e/0x600 [ 378.557346][T12795] ? lock_acquire+0x2f/0xb0 [ 378.557356][T12795] ? assign_fw+0x4e/0x600 [ 378.557369][T12795] __mutex_lock+0x19b/0xb10 [ 378.557383][T12795] ? assign_fw+0x4e/0x600 [ 378.557396][T12795] ? assign_fw+0x4e/0x600 [ 378.557409][T12795] ? __pfx___mutex_lock+0x10/0x10 [ 378.557423][T12795] ? kasan_quarantine_put+0x10a/0x240 [ 378.557433][T12795] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.557448][T12795] ? assign_fw+0x4e/0x600 [ 378.557459][T12795] ? _request_firmware+0x962/0x1470 [ 378.557472][T12795] assign_fw+0x4e/0x600 [ 378.557486][T12795] _request_firmware+0x993/0x1470 [ 378.557501][T12795] ? __pfx__request_firmware+0x10/0x10 [ 378.557514][T12795] ? lock_acquire.part.0+0x11b/0x380 [ 378.557524][T12795] ? find_held_lock+0x2d/0x110 [ 378.557540][T12795] __async_dev_cache_fw_image+0xb2/0x340 [ 378.557557][T12795] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 378.557571][T12795] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 378.557584][T12795] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 378.557598][T12795] async_schedule_node_domain+0xd1/0x120 [ 378.557612][T12795] dev_cache_fw_image+0x38f/0x490 [ 378.557626][T12795] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 378.557639][T12795] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 378.557652][T12795] dpm_for_each_dev+0x5a/0xb0 [ 378.557665][T12795] fw_pm_notify+0x81/0x150 [ 378.557677][T12795] notifier_call_chain+0xb7/0x410 [ 378.557691][T12795] ? __pfx_fw_pm_notify+0x10/0x10 [ 378.557704][T12795] blocking_notifier_call_chain_robust+0xc9/0x170 [ 378.557719][T12795] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 378.557735][T12795] pm_notifier_call_chain_robust+0x27/0x60 [ 378.557747][T12795] snapshot_open+0x218/0x2b0 [ 378.557758][T12795] ? __pfx_snapshot_open+0x10/0x10 [ 378.557767][T12795] misc_open+0x35a/0x420 [ 378.557778][T12795] ? __pfx_misc_open+0x10/0x10 [ 378.557788][T12795] chrdev_open+0x237/0x6a0 [ 378.557799][T12795] ? __pfx_apparmor_file_open+0x10/0x10 [ 378.557809][T12795] ? __pfx_chrdev_open+0x10/0x10 [ 378.557819][T12795] ? file_set_fsnotify_mode+0x163/0x5d0 [ 378.557834][T12795] do_dentry_open+0x735/0x1c40 [ 378.557844][T12795] ? __pfx_chrdev_open+0x10/0x10 [ 378.557854][T12795] ? inode_permission+0xdd/0x5f0 [ 378.557867][T12795] vfs_open+0x82/0x3f0 [ 378.557877][T12795] ? may_open+0x1f2/0x400 [ 378.557890][T12795] path_openat+0x1e88/0x2d80 [ 378.557902][T12795] ? __pfx_path_openat+0x10/0x10 [ 378.557911][T12795] ? __pfx___lock_acquire+0x10/0x10 [ 378.557922][T12795] ? lock_acquire.part.0+0x11b/0x380 [ 378.557932][T12795] ? find_held_lock+0x2d/0x110 [ 378.557946][T12795] do_filp_open+0x20c/0x470 [ 378.557955][T12795] ? __pfx_do_filp_open+0x10/0x10 [ 378.557964][T12795] ? find_held_lock+0x2d/0x110 [ 378.557981][T12795] ? alloc_fd+0x41f/0x760 [ 378.557993][T12795] do_sys_openat2+0x17a/0x1e0 [ 378.558012][T12795] ? __pfx_do_sys_openat2+0x10/0x10 [ 378.558033][T12795] ? __fget_files+0x206/0x3a0 [ 378.558050][T12795] __ia32_compat_sys_openat+0x16e/0x210 [ 378.558072][T12795] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 378.558113][T12795] ? ksys_write+0x1ba/0x250 [ 378.558132][T12795] __do_fast_syscall_32+0x73/0x120 [ 378.558149][T12795] do_fast_syscall_32+0x32/0x80 [ 378.558163][T12795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 378.558180][T12795] RIP: 0023:0xf7ff7579 [ 378.558188][T12795] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 378.558197][T12795] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 378.558206][T12795] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 378.558212][T12795] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.558217][T12795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 378.558222][T12795] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 378.558227][T12795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.558234][T12795] VM DIAGNOSIS: 19:38:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000000eb29cc RBX=0000000000000000 RCX=ffffffff8b469e39 RDX=ffffed1005686f86 RSI=ffffffff8bd2d1a0 RDI=ffffffff818ffd39 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff905fd910 R15=0000000000000000 RIP=ffffffff8b46b21f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056181a38b000 CR3=00000000623ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040800000000 0000000800000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b746760 RCX=ffffffff81acfa4a RDX=ffff888024a52440 RSI=ffffffff81acfa24 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003a77610 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000007b5d R12=ffffed10056e8ced R13=0000000000000001 R14=ffff88802b53ffc0 R15=ffff88802b746768 RIP=ffffffff81acfa26 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f56e40 CR3=0000000022b16000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73ecff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000007bd01c RBX=0000000000000002 RCX=ffffffff8b469e39 RDX=ffffed10056c6f86 RSI=ffffffff8bd2d1a0 RDI=ffffffff818ffd39 RBP=ffffed1003771000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6f85 R10=ffff88802b637c2b R11=0000000000000001 R12=0000000000000002 R13=ffff88801bb88000 R14=ffffffff905fd910 R15=0000000000000000 RIP=ffffffff8b46b21f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000069348000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85386e25 RDI=ffffffff9aad2e20 RBP=ffffffff9aad2de0 RSP=ffffc900046e6c10 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000039 R14=ffffffff9aad2de0 R15=0000000000000000 RIP=ffffffff85386e4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f747d230 CR3=000000006e83a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040800000000 0000000800000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000