last executing test programs: 16m34.638909621s ago: executing program 2 (id=1989): creat(&(0x7f0000000900)='./file0\x00', 0x41) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) fcntl$setpipe(r1, 0x407, 0x10000e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 16m34.310015033s ago: executing program 2 (id=1991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1e1000, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x2}) 16m34.159858757s ago: executing program 2 (id=1992): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x100004, 0xdf18, 0xe2a4, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r2 = io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xd, 0x0, &(0x7f0000000280)="63ec33c9e9b986000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ccd95f6d5931cb1fe6c9aa5c6081755808"]) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f00000002800200", 0x2c}], 0x1}, 0x24008080) ioctl$FS_IOC_FSGETXATTR(r5, 0x400455c8, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/kernel/vmcoreinfo', 0x741200, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$inet(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000980)="c578eacf6d41d08bf7bc223cbec5d998667668ad1dac6e4997948c93289b66ed7a953bcbdc485ec4694d5b44946cbeb2b39b31e4668af13d2a27d587db24bec851d81d7dfcd0d8cd21c883a0b1ed6483fed2442b3ab7bf7dada145eba4c3732ecb5255630dd12a28eca785b5248498cea509d6586ba62e5556de1cf481f05b3f1f343184dd562c4a16ae312c1b0d5e222b6d78f8a3fd11af228eefa769eff4e056c40bdcc55b79b7eade537b098ab572df02fa80ea1c37", 0xb7}, {&(0x7f0000000a40)="a9ee9bb0ca7ecae8dc3cd7da990ae8c81ec4042846b5a629854ce5c053e086e07a5a1756f3f3827eee7be65daa50fc05f6bdd48c5f8709fcc76ef749df012866edc44c70a2453ddbd96ba8e9f2f132d6f65e570b06493c0721a747be40d2689910a2f7a13502338e6bb228ea306c00fe6b0f69109b90dcccf89098855440bed44f312a4f362051b36ceead7b4a2bbfac91bdf4abed31be044d0cae34225629db5b42acfbd886f5c4af217d4980a6339925c517a4ba4cec17b967aabccb719c4cc13eb313b8847c4335766091b77913fd670b76f20881c716c955c5", 0xdb}, {&(0x7f0000000c00)="30934583cd7e10e704a8ecccc1b28fff573f71e6b2dfef3e6e109374e210a70c06ce9c8a7cb9d456cba433473c5cbdfd39439893da7ecdd365cff04ad306b24b41d75d4623758c33bbbfe9d6d75969d3cbb4633d53f53e375d193ef169643cd3cef635eb321e7ac4a12f5db765a3334c7c50af3dadea48950ccf04b48f3b7ae26af33b30f7b01c62696077bbf9cbf94afe62854a6935955ec299d54bce494a0f92ccd8cb7dc34267b0c396a3edf806c998d0c3285c7616f318c0ea22b7f150189e84604a83a862b3aaa8d3ba4d7ebf19124b171a0785933efc5d71cdceeb92173bc02d4e607d9234e228e296b0", 0xed}, {&(0x7f0000000d00)="bff89155ab71c56b1fae279b0151cfe1a1e884432f34ba5a5ae593c5259e75c7b5b433f77132020fba49d32783812f3da09c2b16aa", 0x35}, {&(0x7f0000000d40)="90c474a0450c3993b48b83c00f1488795fa2fc9eed6bb213dc5637198336bdec079654cea0ff51c9fa730478538197b8a133b78cd3e8098b61ba5ccc2c48d595fc68f5034de21b26b121723e75e89159c69bb047d49ce6ef28253f4bed7769137ee90cdc8f294562aa89b83f583e66c38cefac5c7b4dac7f2a78bc9da15d2917dcb114bba9789a4615898aad57dc4a4b6377328eecccfa2f2f86941098ffbb53cff22b920ba9e283ee94e3b75589f29ebacb4f1a798e5027b323", 0xba}, {&(0x7f0000000e00)="3d88c6cc671099b8fe579316a6d0975ffc0e6f00dab97b1b04493f090e29bba4e192171e8c9cd5164b7d8e8e32a679ee1d66785ea7f241f947f49ea211f7dff249b8f7d36a6b5070042862d7c66142bb6472fad14a2b1f5d117dd6df75ca36d3c79904bd95185d30a5e5c5114362ae0c8cb88503d0eb197546ed825c40f7d1f764699c608e00793e62e861cbd3a10eac1b8644a68fddd814f4ef21f44eaceef84a3e5cfdfae2eda4929a1f33c0b919cabb4bcee36f33dfe3427487", 0xbb}, {&(0x7f0000000ec0)="dbb5e471218275c584b6e42177348db50f92e09486301aa27d1fe54c683d4a74bdcbd1a1eb7bc02f97322019767fdfc342fbe195c823d4a7bbce868c4c7729c4db6772ec5bff318649e673d84e89386e5845519b4a60a2b3dee3020ee960ef724d5ba163be33977da67322cde20fcd368532bad5aad708ae54c667631b13ee7c292151d0102131623fc0b96107eaba2bff658687b4554537393b031c64230414c2c04e995423b4e0db28de463dce70cb76a89933b9b2e4301aafff8686ad958791e3c7e6126b969611b7eb0da23790", 0xcf}, {&(0x7f0000000fc0)="fa7324e5", 0x4}], 0x8, &(0x7f0000001040)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x5}}, @ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffffffc0}}, @ip_ttl={{0x10, 0x0, 0x2, 0xff}}], 0x50}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="865eb64fbb2490bc2704131157ee80d83dc199bc835bd1763ea982f3e96300837f8de3ab7499b0cb17b3086ad3d9dd60994e5c0823844fc173ec4f2f496f7d4cebda8058ba3640427bcd1c0bf927225dc6cb635db6ffb5be1c899f2ef1950ce909291d48e5478211b996cb1eebd0a6915b271572", 0x74}, {&(0x7f00000003c0)="49cbf5f877480794d86a771784d755650bf396cf36e30c79bf0e3943304edd46e8fb04f41cf9539e53a43ec7812b06cd4f7b55f7e740cf1c3bcdadd6a7a41b3aed83bc7d80743717156e06e7e47ab3c1c37fae83463aebe81619dc17e053353b5638b2958568ac9803d1079d241a9bc420fb4961aebb63f66e1bb39dcec1cc68b8cb08", 0x83}, {&(0x7f0000000480)="6725dda01436d2654d971f5a687d93395972e3b518266cc406705c012b4b7fd5e9941b3efcfa3c86e5ffb1c78172e0e3ac853a790d0478e62bfb036e80a146", 0x3f}, {&(0x7f0000000640)="390cb5d681da954028f19ce0598a2c4097d16d2ec65260e1e1f1f515a9aeff747656d8a4039feeae5c96cc66287425015c4bd74e602c1c2cb58e542e159f7d8f2f9d26d1f0", 0x45}, {&(0x7f0000000700)="cca80be1fa6a01d5e5bbc9619e00d1bdc915bf3a81826ae86ccfc973f6b274ee3137527d5bba93be0b49ea2171c5dddd510ec9e6b6ec847f2bfff6d8bd4b671147aefa47746019b8fdef33ecae9e2b9f0826104abd", 0x55}], 0x5, &(0x7f0000000880)="71182688f7942340ca4fc1e67c9751a0630389e27c7f54c90e92eea71de3f70a7600498ebace69054b4b934ee3be3700af4aa158c5314cbc72a0c6f687bdeaebe21d09e604076d972fd8b237ef95275e7064ec0518bf508b74a980ea2e82c3f9dde8446996bf02ee7dde287df92ff4754aee65192660f0f6abea6d7b27494fe89dd8", 0x82, 0x800}, 0x4000010) file_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x800) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r2, 0xffffffffffffffff, 0x0) 16m31.449219088s ago: executing program 2 (id=2003): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 16m31.379405008s ago: executing program 2 (id=2004): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005c00000000002f9078bd300600000000e0000001248081000000000000000cf910000800000086dd86dd88be00000000100000020100000000000004080022eb00000001200000080200000000000000fffd0000080065580000000012c3278771af6bc451c9a7793083aaab03edfd0b037838231c11beca4e2cb4f56381052d9bf27651c74f61d7cbbabe9269e0456f4f0c32fe"], 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x40}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40186f40, &(0x7f0000000440)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000084b044010000000000ff000000181c0000d5d7bf98ad6759e2b429cacbfcce20a7309b106b040d0c5d636b358ce30c1875e3bf3532c5891560ad747db7fa4c044f21017689049e1f8feb113a76d18ad13d3bfa668256cb785fa495e0b04badfe", @ANYRES32, @ANYBLOB="000000000000000085100000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xffffff93, 0x83, &(0x7f0000000200)=""/131, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r10, 0x3, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0xb, 0x3}, {0x3, 0x4, 0x6, 0x7}, {0x3, 0x1, 0x8}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x14, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x231}, {}, {}, [@exit, @ldst={0x2, 0x3, 0x0, 0x6, 0x9, 0xfffffffffffffffc, 0x10}, @jmp={0x5, 0x0, 0x4, 0x9, 0x2, 0x30, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x74cb8b487e706ff5}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setrlimit(0x0, &(0x7f0000000980)={0x0, 0x62}) pipe(&(0x7f0000000180)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 16m31.23711369s ago: executing program 2 (id=2006): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}], 0x1, 0x2090) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) 16m31.116732646s ago: executing program 32 (id=2006): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}], 0x1, 0x2090) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) 16m11.271037969s ago: executing program 4 (id=2094): r0 = socket$pppoe(0x18, 0x1, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0xa000000c, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) pwrite64(r4, 0x0, 0x0, 0xf2) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)="bf02d7708a172c8d01dc48ee6846bfdc7506e9707adcde01446ba8b5e7944ecc9898479b8fe8e114702eaf73228e9f", 0x2f}, {&(0x7f0000001740)="31c7995648677226f2edb0f4", 0xc}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20004803) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40044) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x0, 0x3a5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) unshare(0x6a040000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000400)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x10}) pwrite64(r1, &(0x7f00000003c0)="8e1c5e10f6f6e9a2", 0x8, 0xc3) socket$kcm(0x2, 0xa, 0x2) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 16m9.571065599s ago: executing program 4 (id=2095): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008005}, 0x8000002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffd9f, 0x0, 0x1, 0x0, 0x0, 0x24080001}, 0x24044040) 16m9.53868748s ago: executing program 4 (id=2097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x10000, 0x1be, 0x85, 0xfffffbc5, 0x0, [{0x6c, 0x4, 0x5, '\x00', 0x12}, {0x7, 0x8, 0x6f, '\x00', 0x3}, {0x0, 0x41, 0x5, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x4, '\x00', 0x49}, {0xf3, 0xf, 0x2, '\x00', 0x7}, {0x6, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x47, 0xf, '\x00', 0x45}, {0x7, 0xd, 0xfe, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x38, 0x11, 0xff}, {0x56, 0x4, 0x1}, {0x3, 0xcf, 0x10, '\x00', 0x5}, {0x5, 0x4f, 0x2, '\x00', 0x2}, {0x4, 0x4, 0x1, '\x00', 0x9}, {0x0, 0x2, 0xf2, '\x00', 0x7f}, {0x8, 0x7, 0xd5, '\x00', 0x99}, {0xd, 0x3, 0x2, '\x00', 0xff}, {0xa, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x3f, 0xd}, {0x7, 0x21, 0x23, '\x00', 0x1}, {0x5, 0x0, 0xff, '\x00', 0xf}, {0x93, 0x1, 0x4, '\x00', 0xe6}, {0x3, 0x4, 0xa, '\x00', 0x54}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000003c0)) 16m9.385666779s ago: executing program 4 (id=2100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000340)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) lseek(r0, 0xab07, 0x1) 16m9.272701994s ago: executing program 4 (id=2102): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x100004, 0xdf18, 0xe2a4, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r2 = io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xd, 0x0, &(0x7f0000000280)="63ec33c9e9b986000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ccd95f6d5931cb1fe6c9aa5c6081755808"]) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f00000002800200", 0x2c}], 0x1}, 0x24008080) ioctl$FS_IOC_FSGETXATTR(r5, 0x400455c8, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/kernel/vmcoreinfo', 0x741200, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$inet(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000980)="c578eacf6d41d08bf7bc223cbec5d998667668ad1dac6e4997948c93289b66ed7a953bcbdc485ec4694d5b44946cbeb2b39b31e4668af13d2a27d587db24bec851d81d7dfcd0d8cd21c883a0b1ed6483fed2442b3ab7bf7dada145eba4c3732ecb5255630dd12a28eca785b5248498cea509d6586ba62e5556de1cf481f05b3f1f343184dd562c4a16ae312c1b0d5e222b6d78f8a3fd11af228eefa769eff4e056c40bdcc55b79b7eade537b098ab572df02fa80ea1c37", 0xb7}, {&(0x7f0000000a40)="a9ee9bb0ca7ecae8dc3cd7da990ae8c81ec4042846b5a629854ce5c053e086e07a5a1756f3f3827eee7be65daa50fc05f6bdd48c5f8709fcc76ef749df012866edc44c70a2453ddbd96ba8e9f2f132d6f65e570b06493c0721a747be40d2689910a2f7a13502338e6bb228ea306c00fe6b0f69109b90dcccf89098855440bed44f312a4f362051b36ceead7b4a2bbfac91bdf4abed31be044d0cae34225629db5b42acfbd886f5c4af217d4980a6339925c517a4ba4cec17b967aabccb719c4cc13eb313b8847c4335766091b77913fd670b76f20881c716c955c5", 0xdb}, {&(0x7f0000000c00)="30934583cd7e10e704a8ecccc1b28fff573f71e6b2dfef3e6e109374e210a70c06ce9c8a7cb9d456cba433473c5cbdfd39439893da7ecdd365cff04ad306b24b41d75d4623758c33bbbfe9d6d75969d3cbb4633d53f53e375d193ef169643cd3cef635eb321e7ac4a12f5db765a3334c7c50af3dadea48950ccf04b48f3b7ae26af33b30f7b01c62696077bbf9cbf94afe62854a6935955ec299d54bce494a0f92ccd8cb7dc34267b0c396a3edf806c998d0c3285c7616f318c0ea22b7f150189e84604a83a862b3aaa8d3ba4d7ebf19124b171a0785933efc5d71cdceeb92173bc02d4e607d9234e228e296b0", 0xed}, {&(0x7f0000000d00)="bff89155ab71c56b1fae279b0151cfe1a1e884432f34ba5a5ae593c5259e75c7b5b433f77132020fba49d32783812f3da09c2b16aa", 0x35}, {&(0x7f0000000d40)="90c474a0450c3993b48b83c00f1488795fa2fc9eed6bb213dc5637198336bdec079654cea0ff51c9fa730478538197b8a133b78cd3e8098b61ba5ccc2c48d595fc68f5034de21b26b121723e75e89159c69bb047d49ce6ef28253f4bed7769137ee90cdc8f294562aa89b83f583e66c38cefac5c7b4dac7f2a78bc9da15d2917dcb114bba9789a4615898aad57dc4a4b6377328eecccfa2f2f86941098ffbb53cff22b920ba9e283ee94e3b75589f29ebacb4f1a798e5027b323", 0xba}, {&(0x7f0000000e00)="3d88c6cc671099b8fe579316a6d0975ffc0e6f00dab97b1b04493f090e29bba4e192171e8c9cd5164b7d8e8e32a679ee1d66785ea7f241f947f49ea211f7dff249b8f7d36a6b5070042862d7c66142bb6472fad14a2b1f5d117dd6df75ca36d3c79904bd95185d30a5e5c5114362ae0c8cb88503d0eb197546ed825c40f7d1f764699c608e00793e62e861cbd3a10eac1b8644a68fddd814f4ef21f44eaceef84a3e5cfdfae2eda4929a1f33c0b919cabb4bcee36f33dfe3427487", 0xbb}, {&(0x7f0000000ec0)="dbb5e471218275c584b6e42177348db50f92e09486301aa27d1fe54c683d4a74bdcbd1a1eb7bc02f97322019767fdfc342fbe195c823d4a7bbce868c4c7729c4db6772ec5bff318649e673d84e89386e5845519b4a60a2b3dee3020ee960ef724d5ba163be33977da67322cde20fcd368532bad5aad708ae54c667631b13ee7c292151d0102131623fc0b96107eaba2bff658687b4554537393b031c64230414c2c04e995423b4e0db28de463dce70cb76a89933b9b2e4301aafff8686ad958791e3c7e6126b969611b7eb0da23790", 0xcf}, {&(0x7f0000000fc0)="fa7324e5", 0x4}], 0x8, &(0x7f0000001040)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x5}}, @ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffffffc0}}, @ip_ttl={{0x10, 0x0, 0x2, 0xff}}], 0x50}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="865eb64fbb2490bc2704131157ee80d83dc199bc835bd1763ea982f3e96300837f8de3ab7499b0cb17b3086ad3d9dd60994e5c0823844fc173ec4f2f496f7d4cebda8058ba3640427bcd1c0bf927225dc6cb635db6ffb5be1c899f2ef1950ce909291d48e5478211b996cb1eebd0a6915b271572", 0x74}, {&(0x7f00000003c0)="49cbf5f877480794d86a771784d755650bf396cf36e30c79bf0e3943304edd46e8fb04f41cf9539e53a43ec7812b06cd4f7b55f7e740cf1c3bcdadd6a7a41b3aed83bc7d80743717156e06e7e47ab3c1c37fae83463aebe81619dc17e053353b5638b2958568ac9803d1079d241a9bc420fb4961aebb63f66e1bb39dcec1cc68b8cb08", 0x83}, {&(0x7f0000000480)="6725dda01436d2654d971f5a687d93395972e3b518266cc406705c012b4b7fd5e9941b3efcfa3c86e5ffb1c78172e0e3ac853a790d0478e62bfb036e80a146", 0x3f}, {&(0x7f0000000640)="390cb5d681da954028f19ce0598a2c4097d16d2ec65260e1e1f1f515a9aeff747656d8a4039feeae5c96cc66287425015c4bd74e602c1c2cb58e542e159f7d8f2f9d26d1f0fa2cf12dd730a7872d9e82a0a7f195b25d9677fa761de1fc713329ad5d078399a35240968441a8bc7751ff02dca2547fbbe26f299a28f44a7acd83feb667d682d6e800", 0x88}, {&(0x7f0000000700)="cca80be1fa6a01d5e5bbc9619e00d1bdc915bf3a81826ae86ccfc973f6b274ee3137527d5bba93be0b49ea2171c5dddd510ec9e6b6ec847f2bfff6d8bd4b671147aefa47746019b8fdef33ecae9e2b9f0826104abd", 0x55}], 0x5, &(0x7f0000000880)="71182688f7942340ca4fc1e67c9751a0630389e27c7f54c90e92eea71de3f70a7600498ebace69054b4b934ee3be3700af4aa158c5314cbc72a0c6f687bdeaebe21d09e604076d972fd8b237ef95275e7064ec0518bf508b74a980ea2e82c3f9dde8446996bf02ee7dde287df92ff4754aee65192660f0f6abea6d7b27494fe89dd8", 0x82, 0x800}, 0x4000010) file_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x800) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r2, 0xffffffffffffffff, 0x0) 16m8.92952665s ago: executing program 4 (id=2104): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006f00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002580)="5536182daefa2fc6ee10a1b2d4e27cff3c3e628d4656f7b27979e371b15b420c01ae674ddb8fff7b2bc41e7c5927065cd32f2ff7908ef7dd74cdc82f3799ab12edbbfd0b8f6d2194d7f72aec3a136e25c7bf733436bf6cbfc94431ad053a2ec4ccac5aaada8a41ac38c0e1849e599dce84e431ac501db105b4484146b338c0ae9124877ccb8273c7fbb32603251e2d66c71398a7a715bcbe5c9d87e41af55f837e2931c4c1b6b7bbc30dfedfe6e61a39e28f66bbe56496745fbe03f6035183257edac4b0fe3087e7f3e79c2152a07341f3ae9ec68e78875b6e12b5a2a1abbcca4d7963be818a7a31290cad5a025ccd05b609c7ac49ea85d49f354c1e76091a917966665e77471005a46a195b290c01bb7ddf4709e94543471d87a0a5047d3631b00862e1e9a00c60b83371cc16ba087463122a892a1b21786fe3d450c7ba97799d88126f09a698a421242e9c67c981ebc576f57ba3df22e0071db74fa22e97b0fbe589894931a4c4e0eda8bb9533c4ce503fba218d0ae43ab4b4d0c705e04442d093ca5299ae8499c6db904bda6c68105bc2a1cd8e16067215476e573745d1e99daa73400567a9978dd7bffb21429479ace30c95afdfaebd7faf74343cd58e14ce6d2fada5a1c665049eeaa717ee681666c8b63c6d54e66df86144f85d80dcaa3ae7a13b58d5f2b607029efbbf8593afc75e0ce0a875a5fbedecb425a22624a0bb8e2fd06212a1fdafb92430d309f8f68504484fb1246f3d7b0893d3dc9d0b6c8d7476b6aea871eb4f32c283e22435fccb221484409cc28a6609dd869b99547fc81b2e517809a5b77783f9fc11b5fe584b9f64c0fec35d3db21ae30d0b8b88d722dea4a376d2a610f0a9d08b311e2ed3ef5d72d0e040e41d3dc45e5a17d740c67db88d95b18c8610fed3302aef0c3c1871ff8a5ae1908bf9668f0bc8e5867f56cc59cd303bafabde6a4034a96ba66b98a910dfaaff712673dcbf84c5354f066126068de620f08be67e6034138dd9a312f9ff197fca56a77bad46e59edfd79dfa3aee4582bfe01ce2201f6569178be7a4bdd28e495114944e538ee7b8f11e0812d9f822cd9760316809eccb9b0bbc5f0630224a1534f88600bbb2af2882562e76d149b44780380b62241829e5734fdfff1a2b3a052f3504dffe04d4632e9fef82762fe1950fbaceeb961464dfe2699f0a898fc8783cfdde45ecc3a16f052c4777beb1fddb080fc802a8cc760d1a0d4606b669e78ee9ba1ac398914ed5096850dedc513e5c71eca19d51af9075151f4ca3d8a841b7b1d205f5f3d223f7e48685daa0836f93017935ad1d942c7392667145ccc1d4700f5d8fb2fc218fd6d70357667d339a28dba3360761857b19f9f91e56a0e0281af1042a409a4e2839f3d21b73a5c352b22e4ff06e563e92c00b48e7f8bcdbbbd398c65331298f779dafe875854e301394b0faac2126138908fa8598b4f5e58ed1ac451eb0187e20077099d12d745fcff0b7fb5e8b9fa65ac617ea6c953e8786229b67a604c46810876650f919e6bc6792db22ec0be29cff94e9c24eb6e1830f890bb4b6bcd74b39060506095b99b95f2a8addfb8dfe11f47479fd23cc7c0701ae00774c430b3b9f52ab2579d47a2c2095365aa569f55a1431f93e651c01f0d67ff9337708a72e352c0e699f14bf07f9b9c056897c78edcf34ade3dfd17a04446d565fb6e7c701a237fe1a3d932371654a43b56e7f5ccdadc0f506d746c3f0047b69c0c174cbbfe092f139c09c0e2e76d9a777142813cb78174630ea8d73301e3343b94856fe610777468a9fb4518a0cf68243a4bd715e38e3431a811f962edb1306d76d89e0aad9be5800e7bebb82ccaec2382c9c114c91aee013acca2d8ddf99465e760bd185453a9eb4e5a78383094603b749c6242ad227124ef4b7ec7506b8a76f714099c954f0b2f2d427af0451a7ea3d1dbfa8a3e644c3640d397de3ce942311deb73fad3a76cba773f416314e81e70bda715b342113a18a249300b43250cb3b3aa46ecabe42d0e8c1dc4be286e539c71f0d1c0b0e1795ae7428a3887f36b79e9c76401a5dd460f45b9d8277e04c7c1e615fb33d0fbc444421f3fd0bff4e045d790610aaa2b62945e4b398024c75680b5e12235c35f5b23ddd99454fe527acad6d08fb37c35d9ecc0a8b10e2c31fac786666eb2ad499ddb7d06c7526fb1c5412f6a0df003410e69b81fe523057b6b73cdecf0e5bc4d3b87757889fe49dbdb3ec79c7eb3a868480fc87528e80400de837cccd4a6345508386ada1833f57a20c56e973569bc7821088d343e80009b7b35390975323d24e764aa6c90d3dd5fdec08ed363dc9ab57de949282994cd3858f829c7e5e9a745261383db27c9c53e9e98e109fda6cbb88649ba40b5067470d73b7471d406e5ea8041f9fa25f5b6c919aef84f7595511141e9f090ee103b20a13b22c9a88348ed6d284c0d7a58326e0c4c9626d9a5390bae2be199b201ea136a9aac76e6125db9bf58f61e6a46f8145a9df1305415989435f51529da03f09a67e3629e6f6cb6b70407d9d848f554f1a7e63602e678e62d3b41b4bf4ddda713ed2c291536d8cc12a16bde144ef56acc17778b1aa8eeeeeb60c781365b615be4435c7158d926351cdb46b89fa82acb384c7318dcb2e51db8bdb223aff2c8f36d9e6b1135ad18f7e0b9d91a76972c3140f8e21dc71422de12a4f5d08624bdaeb983619a5ff82cf788c6b8a5fbf0f78e61ae4058d6e03a3d5130646dfc13686e356a1325434caac94ced659529181561fee7ce4f7e1e7945f119ad8474ea6b00257ceb7af2d9b3f9ad5782cd986f1b097d61bf26a6c48c3ab597e4678d609f3050eec9f3bbea1bc67314407521950526e6d71e34e35392067ac84b66badc82a54bb0dc8ed2f1050711ef2d47af5252075c0441aad6900539fcc649c1b1ffc70a1cc39e0c2136c764ba718d50f4800dc29769c4bc9a2fd0f43eb6ffb717a473ccb14ccd58bd506c4e4a0f4ea1158b59b3d6bf1a2d010c456c1f099bff69add46cc60fd2d9779f603ebb943ab8eb02627ac8aebdd52f25b069f64a61e90fa9ac979cb4c6cf0ebcd070099a1a6e6a747e8989e84afe090390953f988f2dcee405086ce51b1d2d8d249f45899b4e862008d28efad8aa5abd0912fa456aa9d3a918a0dd3420d7c4b04b9e3d65c41a1548b7caeef5fbcededf64697786a0bae73d2c5352658b871c806bd150c91bbf8f4735dddee9cfd3e152b5d44cbcce912a2809760e225b9018fa498c86ccb2359cb0834bcefab92c0468522648fbefbe25cf8d82b897371b5369e8f2972502574c0a3235066969c4d5d67fc312d6631702f66a113d22063ba2ac7d9ab387ad1e115e9c98275f3e0dacd2e8f0843f24687b297bf42bca11b89c6db2fc7026d364486ef2d614bc45d5cff0758d69fd48ea06b8a97667e4d7d30bf7f1c30b62287637f50468bf144fd177fdabcbd0d12b50c9cbd052dcd66993c72f48bd6086412ed5f9af3d44dffdf7c012aadd5cf7bd3b314f236660fa1c0e4773a4e9ccc36fd130ffda59a9bf41f7fbf79e5e3333365a3ed2e7714e50805bc70bc6fd20203cacbbeecb8e01a2ce626756cdbd01c53717c2e7b56b47e21f13209c2bf2b1b251e7a93f8a085dcc61d9ae82303a962441372ff7c0b8b8ba75bbf5b861ff7ddbc9781d40c90ae467bdeddfdf949e9a8b8c9fb7db3a9323d05d15bef19ce2e7634b84ac082d50e84b66f99f34b2f852fefe67faa403e848f3de110eb1d9faefa176c3cacd20c7f87d74e858a1a7bfc2c9e895541f691f99a2b8771c8755300ee74e3d6a048b30d02ca16202ecfc207a0b29302aabc1c5b57c7d0d31d43be5cb1f7230dc238fb701e7037aa00c9b57c6fc85baccaa56754d27b975872051566187b0983d93b9ec052edf3b33f7ddab343eac6f7aed97771e708e40a4cc6797f85d91a0debd5c6169895e895f67a10685af5e0b80b0e728731cbffbff8be603469d03bd47dbca4456108c79c029af16482c5c2590c1e0673c7e943699ea107d906a3e667fe7b2afaeb489548b6a11d9862e86a0b549a42b607ffeda6e3ba0f567b63b0be6edb9098cf3a44e6864c5e99fa5f475acb57e2b7343eb7fe3e8c139b515348b188defd2d3021fd27950d822f6df5f9c93584fd95f3f88c85231943ed4d511249f96447f7903779e4d8c4a680661fe5133d415b862e668441e8077bfb827293a9eb733e914f37a19e01ad4b014ef87ed5a5817ab8123af9fd863090b8e9a50ce29cf706b2182fd79660cbdbb53ba71b750e71a21d0ed01db3335cad91d5cb4d4648f46468b6e51f63e4088386913ae6b6cbf103947c32d25a8a825118cd6ce23f53ffe3c087114700e9a5932faf3d844fc6b323b3e722ed3ed75037bd9a7fd9d256b2b9a168e66802e284853a0d6b47d39675900f02f005050425731f9c2cb329f70d7a5ce2ee256212bf8b2ba9ece0df39c58f0fbac06c4da946787abf19dadb536bddbf7e51d89f22413575e064c6482d936a89d48be159aeb5055feb0577ced6c5334411d1d58a7e6d02eca6164d90fda39685fd619269fea7f21db51f6aa6961250e03c9e00788c178dabeb68f13dea29f8cdcf30478dbca15c4519bb342ba8b201019061bf8317022dbc5673fb4ed92ef1a1dea0a1a00cb3cbca291f7ebcbec27ea5e824f04b82f5644d4368cdf8026550bc2f86b83da6a265357eb548a9eec6622204b3dcd22440fec0e12819ade4ba53b53b1e6ab906fe0cacabb9c15e8b657475a0dad62dbcb1037aa8617787abce24a0aa4cf1b5c85c030a14277832a95d8b29a4ea86fb80148ece147ce4bf386995ac28e1ad1e2072f3f4fce5c05d9bdd0af118815d6ee89aabfa3f8173e6fa59dfa4a8c1ba7641291b3c18c6ccc4c3588d56d169d397facb4e67485610cc68197b3a43fe78b9458dc47e5057d5bc6b8e3b65bf414818b65d41ed7cfd7a35fe79c9851ef39c3e059fb3dffe331a791ce75728efcd58dd9b3ed1c93b128469afa648f4f91de6e39d5bef7a0e69bdf5b2202682d857847a64b33432ea0f33bbfd1948ad0b6c66d853fef1e6c0d712b86c40f79ff4d125baebf2a4b32dfc8bed2a697f745cfeb16303b4f8e866ee0bb6a5eb6c6ce513b5cb84e2b44854c72ed0cf2e838245be8d098a6943d845f5a8c07c1036da86cab0d5be4ce29545fade4323acf2085b7645107dd12d5b3af7bb37be1b291cbd6fe297c4b4a2a23280358711be91f21305c035bf1f57467a1853c999b3fb478b11c49cfac66429a76099633a54689047d66fd8bd6eebea94fc8007d9e2765e2969608a78d0b96d6b30360e81fb9df5262c8ff15f2fd7000756d8cda1db3847d6f793bf803b159344c57b480c87702cb3d1260692a19ebdceb2e05a2fe2eb5ac5cfa76551a04795915bfaba9849a623e46ac1832157d0ea5255b5cacd4efa844b0ce5f2f0e1a9dc4fb115fce2640ec6d03c5fe15b4837bd6e6127349f2b6b0fd61c82c96531714f5b623ce4e4978c4a0c86b3c17f50acdd67d283ec934ed36ba7360a10ffeeb7864113eeaa25cccc66613e0757782381614b8da3cd0a85cef7bc384969517c920e8454a5a0f112d1653b2828e895d0614e5bf4dec0ec863432cce9337ce7c29affa7f29fff97bd54a6947cc68df8fed17850209242c1c67d0d7aced2efec4b3c006678bcb8716e8e9e40d78781fd6cc5b5522b8ed2ec8cecb677849b778c0a2a17817a3dd2278080e109906dd4e99b772d5911893fa09ade4296876921d1e009e714df7e4973ab1d2e593d88ecf2151e97ec66176549d3af66652c8377e162454ce7cc8ab34397d31978e84aea92a3c0a8106a2a31e33a8dfe942819fa1f2c1272d0f3cbd7dae820642cbc00202455ab7fb81857ef050a1965a291001874b38397ed9a8e8106dcfcdfd80d0f5d0ef0d5775e53cc5aeb1d6bc13886f8f3491cd6af5dd77ace3689fa2bf56e9b4d1e4964f8fd8f0a4a8b5d7fb678f0f3adcb4a19b5168ac5aeee6f087af15af3bde52a9be0f550b21b10ce98da70445284d9db9416732e63b6efb3ced984c0df50c11aa677f822af7ad39b8b4c0d236e4b36a00ff73587b39f917d7effbb37b95a96e350a430d544d68623c80bf2cd2d689b4dc41e8ef374c393092a2619055f268fbdcb9de494e6582be90a4798bac801bcac8389c823759860e7c9d692f41ee2a6b9624da3c09a2c8e7cdeaa100ba8ca25a737046d8bb237b9546641cfbb2eac9bbee9e125b14dfabac642e634d32151c06ceb3ddbb3d3f038ab2efdd063152270449ed5eca2655cd0016147ebbd00003eb8cd25297350afbffae43cfd9867543b81da4510850b1afaa199d0477837017e9098bf5b3973efe218a88b3d2bb172fe77278088997758fdc1dbb0b1fb6af2ab9db1ddf3e3fbd8e8dd35f918779ccba75b3cdfa317fc6e3cbeaa8b11ce2a30cc53292bcb9dc2a18ca400c674360c041c97ee6aec1448a025c6b04ae9efb3a01d31e3f897cfd5dc94dac95c88b95a26676cc6153e203535891116a5f4ebf54c71cbbe3215a04c57c7ba874a1e203bc66d8161d5b556f661244d9d405a2e6baaedd0d0e4c7e093c2ac0e5ee83b7ddf91669dd59016f7cb53d19896fcc838dc008da4a5fdc0a4fac1a6d7f49b24bcc01467df04d8a3f3181cc4e811942a53daf784b59186a17756a8f3a41ad93035a893a4ff60dd8f54a533e94cf87864169287804df3aa38dc5ce6021a06c58d48985c562a0f51d8b32879f9fb7d4a1d3d442626810f151b161b7e35f9a0b3bec05979e381140f31c03ee6f5549e6e7f116be5e87e0a9ab71ee632f837e9a0f9ad1b4979304c26bad6e84eff0b5b79b667e3d74e354d04f5b2c237102e41a1a4dcac99cbb911d9484aebe6ab2cb539a1db3e3302fb833a44a2d725e858ea9a65d43bb7661842b655c51a1ff25207956e8c6c71667c79975d69f688dfa34c59771488028e3d7500ba0cb71ae5751a51b568e67bdf2abb63838aba5e5cfbbeaf02285f6cbe58428a92a6fc25abb01f8d55ecbd7cc0ea69cdfb188b79048dbea488493681b0e70234463ca3e425d24e2ae4d800ce3adb04ce69428b5f884f8dc83392c22e456a2e195b86d717ac45003a99ae9a59c94167eb04aba3612528f94dad3360b46bc456fbb78072eb7f96418c71bec09831b0a63e83816ffde0d9909c06e765a666c2c41b20c339e0d39107311830ae9ad912f0a85f2ec5ca66a79798a568dae14f76b6d59e6c0bc0f9ebdff29c0fce58367c9705bd4323d3c3e125cdb13da6e58f3fdb2751401014e393e3fc688f04080a90430e531767a7c4f3187ccb7b90880955e766aba6091c4e8fed36482bb5a63372350dd08fe84bf5afd1a30a0f8f4de7a640fa84b9c0447073a0b39bf875d0377c8a572adefec3e033fb3dad91b22bfe22c01f23f27ab0c6a1ce19d2f4f4235281cbca15dafe50f383ba89a8c46a666b106c1ac534955df71f4c560010934fd3eb68eebd55487defa1e024f75ac30139cd190bde1dc8684936bc23a1882ae469fc4af8730d29658f996f71c219526497918e359228b55849d952f4b2996fe5f45a6cfdf87da93bfada579479b18d05c4e964c85b88a7bfc6e4f2b5d6e98e00635e8bd2ebb9eb40b99a9e9db2f688b2d94b8cc8c5fb2a1928624fa5df1c228e6499d992453772084bcd33dda984d97e3857b6fee43c6666b3206ccfe3af52debe5659dc186edd194b90309213f5c4805f454c7e57bc759377aae9727e484391486be0849c5cdfa99c5a0d0687d6afdce97a32e01d45fef015e7c869ca190219a778b91d881a7b595313fb462e5bf78260c78285d6ccf5e4c50ed56ff28e3f49912773f0a58093f259b5cf4e7f607c51a81576fa95b97bf32d0e2e3511b5d784eba29a15246a97ccf608db456cd70adacc6c31913416f24f38dec3544ac2e88c409b5ff7771d873ea8d7a1868775c8b5502273c784cf945680fb14f143140b56462cd46874ffeacde7bf329fe8369df9c4b95a42535ea56ad6fa260f5c738eb9627f890f4a34f80bf3b8fe568d44c3895029b5f9557f17469a53fe4c0d581eb29029ff162ca906cd0e4bb81138be91a254752bf849232ed7042a82cda1e14dfbfdf74a09c17a9039749c789ab0242ed2d0249231c4ad70c23c805676968bdeb96c2d8886f784ecc3e42e6493e45aa20b6e8ede65c49136c9e9414a4371e3012bf596d55315be17ea9396b1df7f82db27f0d121f8aa66c40365fa686a46f430b4cd336da0d9937d5c26284bdcc6c4e0d5a6acc1be089e1a5d6ec422ad3961fb5c5c9836466c3366e6d3f2686b19b529549cacb6252b0d7a7f5df42ea2961ac59ba0b911311ccc4d83f8611f0c4b071544236037b2863d673303a4e3d428131b07f60eb2cd507dc43503456ce829aed8254bf0b51b38008d42e445acb0effc2ab7e4bc26ad76ffba1220f2e878fe9b5de39bf4f25a9ed468cdb100008ffac6bef401df4817b23463e771a3c834c32993274689c01004eb94b89bc44257b7d2b3936caab6d86937b5bb8f705d00fb6f091711222b6dc25eeaa0e350fe484337396162c86bf7d3a1ab82591ad35d393664617041142c0f8b528e947c092f28c3142493d056bd548910615e7300f041f5d01a2f00138ae5d7849244ef9215f5c9dd874e60ca4ad883f86e71690a510831e35c24de1e0d1261172bf4a8625af958febb7b109c5ca5bfffd4342c43ad02136c6eb117b4a6ea98c07a91279731c1228b01e6be755c1c1d095d3cdfe950ac32eee77327a0e7e342ccfc13c69ab6ab113b18c1abe72d39c03e351986cb3326b8b17ada5884aa7d0a553b0d35e32b8c09f1a4106f5d675a88a1508de4a0e9c598c082ae5b229b75579e39e297b225a852e3f6a7d0990a45fdf68771991acf9b7a5c04bc21a40c57817d500e8ebc6b5919219a4110395817c92bf9eb9c623606d4d98ed68dc0b51a0278b0addce8753f86316158bb4bd6a7a0c4c72b0d17b9545695e54826021a6ac44b4de1b4ea977b20af3c47b8860b0ed29a68c1a883777097d54b162cc58edc0f4de1afbbad7c340a5cd9f2f93133cb2a4babc2a688e2ddd580ef8d9d0846c269c265ce9d978aa233c73aa11eb78d3a67f4e7a3dd035ef5a1f832ada87c7dfa377b77215f8c23b1a78e4a7faa6d0c1a4a28a0ef7b32b36bd566d8c478d0133ab43f9c2a4829624eec535234eb89a177ca8d4e9d2d422f33a24d15044822e4a4c1bca5f470b8c8fde09fb69160297218398da27f4e80dbd480782ee75cecd20ad23fdbcc1d4a0acbc63241c1e2cf1a0b12949e42f707ba06b6fdbd8f336bd72d7f96ddf9ec2b5cfcc4c8da6e1ea573e97eeaea537511ac9fd2ae78eb18cb50c13b595f8b6d65ce8c08e9028fffff6b512080dbbd3fb5e5068538c05f73254969f9727db9bff0c6aeaaf83713812499308792a7fc8318e6b2996bcd1b072641be1eb8e028cbd6b0a5f1fa13bfe35b5cd0d2ca21d9cf8ed97f724ef73ab5a99d65befa38d636f2f827d229479377f25501f3a6ece12cb095549503b2299db7806d32751d4851d62b0c6a91e2e961d475d33a8874c96df52c75bb5a0569e892743937451f75345e0351bfa334d37aa43f01ad1ff984dec164faebc713de31470db5e536a0681a042ced0f9839d9ce89259349075961985171c27c410c99458d4c25614ea1d4252293c4f85b0d2ded9ac560cfd024c199d5f0f4bd47763690ba1bca88b8cc81059bb9fe82c955488523114db8c2caf8a63c0049e90ca524330b57edcf718f6a7aab0efe282079d198cc3c1294f35d1a1bf5f69a8838cfc5d4363f9ca9383f83e4f9576de3fac48866ddcde282e5e4ee3f852a063bd6423ac1fdc6201b1facd6c36609fa2faf96afc1c0b76fff27bce059ad6390fd1e3f735806ce654ed555a78ea8e59fb16ff5ac5ad183aab9de37c3d033b3018d591e7ff1a896de969f561260f797603df5fc232076ccdc2e1fe9fc789253a54af151dd50f89e777c2541591101720c893647bd4b3e6257de85251c9bcd700154e85db2a9e2c4d9d2e531a18bfaa05d16ce75f823e60416b3afebce16555536120d5f554fd13e861d74c4947a62d2d09473d8d75f03d354572b371b02e16f3976b1b0b235582ee38d938fe843b107c77c2acd88f34e1669816eb3867134b1c5fce5afad3c70f9bca972ed494577f2ba6362a6ee6b4720bd86938bb49490982a1b5ce6dd54b79f093ce27051530e1233f03d6641392d4fe7a1f7dcec8ba86d8f32f00f0ad50a29b1e17de07bd0205c0d893532c198f23656f7f5d1d9c0745b7e0b7e8afdd29c8fa1639a06039980d9a5fba11801db4e7868a9b77925a03a770aae3430b1ccbddb8bd766f51fef71ba25cf9184c9cfa6f9921d69066d09a656080f3c5fe475ccab94cdfccd76f3c7dada9236d1be861eb5fe6247ae9f97b7705bb71c375e8b98203c5bd224202c1aa714da47e0daf98fd3eca617f9a255df5dbe98a7520a1e6db9b88af893521f2ecf7fd2b08a7f3c5aeb77ebe6f52739b473840889c41315407477b82242d9a805f9aa200a129c4701d1c88ccd34871f356caf02da9937a88612a9755315914f4e8e1bf471a46c00650457cc06db168e5457fb3f9662994d901a1f58306156979aa795afacc1a7d6111cbea53e97fb71c7bbe44558fb06f8d78ee08e3678b5d218e13f79cf06f1da9f7e128647884589c487147b3edbdaffa16f9388568d3c8caa34a6b944e4f171842cdbb293474fcd5201b7440e05ddcf9e0b476773119516ef45077705e8bab5f877657205bf9eaaa7c86734b1b6c3661dfd4b9eb8590f962e17ad51b44058d558744e5b44cf9db280bff1062b2431d298064f11e7700ba4c8ece6f4df659d4880c4983db0152f1f903023672f6234620134bd5d1d888022da128a527d82e8fa1a562827a4f1592efe3b0bb78060626e8688ef3d5162afe9f1060123dbb1f93b7bdb6ad4ad6e1772bf8705cca424d9c42e4992eb5bef1ec7961bd4260d1e55e863fa9c8e0cb6d28b495fa37b5f59fd18cfcec6319288dd7363821e47ec46664e1994157319eb0d466b42fd9b5fac5ba979a9baf4f699dc539bf77852e18014074f88108b654219e4f9396696c94eb9fb9b360e59920f187029608bed76d09dd006f4033d384cd109726d51850202ba564599dbff7808591f834cc4084db29111de86a70217defa490e39c6e281650d15b1e44bb55164be0f6da58e838bf5f4d7cc2a23b818557ab1fad0fb2253c4da6af41591940b2608f6fa6bc25939ede95317ff96050bbc1f389235caa78adc0d801a56b2fb4cc41e73d5131552985b5af241722e0637f3b88e46b09ea875e5cf66f534666368ff8e46413e5ab557236134afa63478e18328d33b1a235deb2034955cdbb2bfd0e55fd885f380ae8efca1feea985a946519a712df1384f9e024efec61c30a6989aa3b5bd486366f3fccadc0add175c1cf0d2730ab97370eb47bcda4226ee140edbcd9b38b8ee913587125cb185adb4df18e80df2b0ea6e3e87dc8755fe6823ab5ee1feaebb1e6208cf3dd5ad5581f2388be92", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004e40)="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", 0x2000, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0x0, 0xffffffffffffffff, {0x6, 0x0, 0x0, {0x0, 0x7fffffff, 0x7fffffffffffffff, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x4, r2, r3, 0x0, 0x1002}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m8.805247794s ago: executing program 33 (id=2104): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006f00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004e40)="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", 0x2000, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0x0, 0xffffffffffffffff, {0x6, 0x0, 0x0, {0x0, 0x7fffffff, 0x7fffffffffffffff, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x4, r2, r3, 0x0, 0x1002}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.801826353s ago: executing program 1 (id=4910): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, 0x0, 0x0) splice(r7, 0x0, r3, 0x0, 0x317e, 0x4) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) 7.898921508s ago: executing program 1 (id=4917): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_crypto(0x10, 0x3, 0x15) sched_setattr(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, 0x0, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = dup(0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r9, r8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000240)={r11}) syz_ublk_setup_queues(r6, r5, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x7, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) 6.870296426s ago: executing program 1 (id=4919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r9, 0x0, 0x0, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0xfffeffff, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x4, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 6.285511085s ago: executing program 0 (id=4921): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x335c3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) r2 = open_tree(r1, &(0x7f0000000180)='./file0\x00', 0x80001) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x1, 0x6, 0x40, 0x9}, {0x1, 0x4, 0x2, 0x2}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x4, 0x0, &(0x7f00000004c0)="f929fcf1"}) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004600000024000000020000000000000000000003000000008204000002000000030000000000000000000005000000000000a3be1cee794c6ffccb0e301aea26a70c2b67770ef148ec2788624f2a265d2db198e45957a5c712954038011757cd6f9dd532135d8aa495f0db9f823abc3032728c3d03c2eda165ab7e5a0ebc74bf3261a7d164479d8c9a176652c250801d6f9434c89dcd640c441490b1d4c0080ce1104b07f9455b5716645b35fc9e2458ea96158e9a79dbcc657d4d4a3e0ac0aca75cd80a8dd402d31ce296ede43aceec91199da72d592c59aefa339bd0f5a85fe5d841a5ec449b3ff6b9b2d0ce6ff9"], 0x0, 0x3e}, 0x28) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r8, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x200000000622c, 0x0) 5.540842003s ago: executing program 5 (id=4923): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="308002", 0x3, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$reject(0x13, r6, 0xd59, 0x1, r6) keyctl$revoke(0x3, r6) 5.220162177s ago: executing program 0 (id=4924): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x94) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x2002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c0007800800064000000040050005000200000005"], 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x240008c4) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$sock(r4, 0x0, 0x0, 0x20000044) r9 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000440)={{{@in=@empty, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)=0x4000802) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.576039345s ago: executing program 5 (id=4925): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x1e, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x5, 0xb, 0x0, 0x9d69}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000538200000000000000000000000000000000000000000000000b8ffad5a66eee62e22336d20642912a21d1ffb98f1f43aa6ff25bb63069c82ca28c1d6ea2cbc1282599300c8c1149c36a8c871e3da8ec610248d87a39288cb8"], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0xa64a, 0x0, 0x8000, 0x4, 0x58}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) timer_settime(0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtclass={0x8c, 0x28, 0x500, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0x5}, {0xffe0, 0xfff2}, {0x1b, 0xa}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x54, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x7, 0xa}}, @TCA_HFSC_USC={0x10, 0x3, {0x10001, 0x7067, 0x101}}, @TCA_HFSC_USC={0x10, 0x3, {0x100, 0x0, 0x1}}, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0xde82be90, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x221d, 0x7976, 0x3e, 0x0, 0x42) 4.263854924s ago: executing program 3 (id=4928): syz_emit_ethernet(0xca, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="a3753ae03c8d123400ff5fa04b2cfe297faf0a1855"], 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000), 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003300020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000000001000000091d010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a30000000004800e70f0000010400000000000000000100000008000b40000000000900000073797a3000000000200004801c0001800b00010065787468647200000c0002800800064000000002140000001100010000000000000000000000000a"], 0xbc}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x26020480) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000200)={0xfffff801, 0xfefffffe, 0x401}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xff6f}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000010800024000000002080005400000000d080003"], 0x9c}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffffffff6054, 0x2, 0x77b9, 0x5, 0x7, 0x7]}, &(0x7f00000001c0)=0x78) close(r0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f0000000100)=0x10, 0xfd7f) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1, 0x0, 0xfffd}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) 4.168177691s ago: executing program 0 (id=4929): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r5, 0x80086f53, &(0x7f0000000080)={0x3, &(0x7f00000001c0)=[{0x2c, '\x00', @data, 0x1}, {0x5, '\x00', @data=0x8, 0x5}, {0x35, '\x00', @buffer={"bb9222ea3f353c17c384b1bcbc5990ad587b2bc75add26535318c26eddad3a1a", 0x20}, 0x1}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r8, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xa9cb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x140480d1}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x489de462c8a56bbc}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r8, 0x109719031decb01b, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x66}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040002}, 0x40010) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) getsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, &(0x7f0000000280)) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="040000802fdc64a3cb68beebebe2487043912017df0e60a3d84ed15f81aa1d567cc762bf17c9edcc2418bceb0ee625d67558a560cc5cb15e4f38d09a7a86d95b0a0585ecbd4d6386e0c081a33b05c4e9637e7a6cfae3f02923b74b46eeb09f54d7a254d9115d647375b5765203ed00ae0004f0d526c38cacd8be99b1e59e8c6b349c6f3bca8a3d4464eade8399e188a92c1dd7608f9b6e0c5226e8594f410b0b5b14cb8bda48492a00a52ca0c3f770db9ff9f28b754923", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x318}], 0x1}, 0x40000) 4.167370351s ago: executing program 3 (id=4930): r0 = socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd70000000000002000000", @ANYRES32=r5, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000) ioctl$I2C_PEC(r7, 0x708, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', r5, 0x7, 0x80, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80200000}, 0x0, 0x0, 0xfffffffffffffff8, 0xff, 0x9, 0xffffffffffffffff, 0x40, 0x4}}], 0x58, 0x4044004}, 0x40) 3.57431874s ago: executing program 5 (id=4931): syz_emit_ethernet(0xca, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xad) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000), 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003300020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000000001000000091d010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a30000000004800e70f0000010400000000000000000100000008000b40000000000900000073797a3000000000200004801c0001800b00010065787468647200000c0002800800064000000002140000001100010000000000000000000000000a"], 0xbc}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x26020480) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000200)={0xfffff801, 0xfefffffe, 0x401}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xff6f}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000010800024000000002080005400000000d080003"], 0x9c}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffffffff6054, 0x2, 0x77b9, 0x5, 0x7, 0x7]}, &(0x7f00000001c0)=0x78) close(r0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f0000000100)=0x10, 0xfd7f) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1, 0x0, 0xfffd}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) 3.425830052s ago: executing program 1 (id=4932): pipe(&(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_io_uring_setup(0xf00, &(0x7f00000003c0)={0x0, 0xeadf, 0x8, 0x0, 0x161, 0x0, 0x0}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) io_uring_enter(r4, 0xeed, 0xeed, 0x1, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/oops_count', 0x222240, 0x0) sendfile(r3, r5, 0x0, 0x6) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffff, 0x2, &(0x7f0000006680)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000004", @ANYRES16=r10, @ANYBLOB="11020000000000000000010000002800018014000400000000000000000000000000000000010800060001000000060001000a000000"], 0x3c}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) 3.419890073s ago: executing program 5 (id=4940): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_crypto(0x10, 0x3, 0x15) sched_setattr(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r6, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000240)={r8}) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x7, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) 3.15553192s ago: executing program 0 (id=4933): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0xb9a, 0x20041) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f00000009c0)={0x1}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000f7fd00003df514fbd104fed29b705409662fdd19d481d2c10f303f222cd2ff4411195577a1244346d67a9e6c295ff0a758b548918a49534165fcc8ee955478c8e1b91cd0bffcb90c11e02d8e7332fa8c090d8e0c2aea7ed91853c9cf7d77b4eb06331cd6c630daea0f26af2bd45b6b4d428856367919a014fea9af074ff515dd0ac537bfbef4f137235d2f68cb779dec9c892b19c28fb227a716e2fb71113c0cca50bdbd39f38628ff3dfda998759dcd1e69ec9899d07ce786f7e3962d107b552718d925"], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000002600)={0x3f000000, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r9, 0x5522) r10 = open(0x0, 0x0, 0x0) fcntl$lock(r10, 0xf6cf9ee70db9ddff, &(0x7f0000000140)={0x1, 0x1, 0x1, 0xffff}) mknodat(r2, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x8000, 0x7) openat(r1, &(0x7f0000000100)='./file0\x00', 0x202000, 0xa) 2.189081659s ago: executing program 1 (id=4934): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r7, 0x0, r3, 0x0, 0x317e, 0x4) write$tun(r4, 0x0, 0x11b0) 2.188526817s ago: executing program 5 (id=4935): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) lstat(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) socket(0x2c, 0x3, 0x6) syz_io_uring_submit(0x0, r6, r7, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x12, 0x5, r0, &(0x7f0000000180)=0x80, &(0x7f0000000680)=@ieee802154={0x24, @short}, 0x0, 0x80000, 0x0, {0x0, 0x0, 0x3}}) io_uring_enter(r5, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r9 = dup(r8) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x100000d, 0x28011, r9, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) socket$xdp(0x2c, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r11 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) tkill(r11, 0xb) 1.175836244s ago: executing program 0 (id=4936): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_crypto(0x10, 0x3, 0x15) sched_setattr(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, 0x0, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = dup(0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r9, r8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000240)={r11}) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r2}, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) 859.894126ms ago: executing program 3 (id=4937): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000300)=""/135, 0x87}], 0x3}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$nl_crypto(0x10, 0x3, 0x15) sched_setattr(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, 0x0, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r11, r10], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, 0x0) 788.525555ms ago: executing program 3 (id=4938): syz_emit_ethernet(0xca, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="a3753ae03c8d123400ff5fa04b2cfe297faf0a1855"], 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000), 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003300020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000000001000000091d010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a30000000004800e70f0000010400000000000000000100000008000b40000000000900000073797a3000000000200004801c0001800b00010065787468647200000c0002800800064000000002140000001100010000000000000000000000000a"], 0xbc}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x26020480) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000200)={0xfffff801, 0xfefffffe, 0x401}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xff6f}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000010800024000000002080005400000000d080003"], 0x9c}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffffffff6054, 0x2, 0x77b9, 0x5, 0x7, 0x7]}, &(0x7f00000001c0)=0x78) close(r0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f0000000100)=0x10, 0xfd7f) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1, 0x0, 0xfffd}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) 645.765923ms ago: executing program 3 (id=4939): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="308002", 0x3, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$reject(0x13, r6, 0xd59, 0x1, r6) keyctl$revoke(0x3, r6) 231.609931ms ago: executing program 3 (id=4941): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="308002", 0x3, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$reject(0x13, r6, 0xd59, 0x1, r6) keyctl$revoke(0x3, r6) 172.368656ms ago: executing program 1 (id=4942): socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1c0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000040)={0x7, 0xffffffff, {0xffffffffffffffff}, {}, 0x1, 0x1600}) prlimit64(r0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) timerfd_create(0x9, 0x800) close(0x3) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@getqdisc={0x44, 0x26, 0x300, 0x70bd29, 0x3, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0xfff2, 0x10}, {0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x4800) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='ext4\x00', 0x456, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)=ANY=[@ANYBLOB="6e723f696e6f646533b30e2c00"]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) preadv(r6, &(0x7f0000001200)=[{&(0x7f0000000140)=""/164, 0xa4}], 0x1, 0x7, 0xdd) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x50}}, 0x0) 87.645925ms ago: executing program 0 (id=4943): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="1fe1bc", 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="01002dbd7000fcccf9c195000000180001801400020073797a5f74756e000000000000000000050003"], 0x34}}, 0x4000080) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109021200010e061003090439d8001adaa808d822728ed2e6e71f86fae8b17f7fbf5c0d217daec61468aaa9b289b25f3750f5803bf4a0f2feaa47c3b05e148acb60e470a9c9def6e5a0d968565ca7833a7c25840e32840e81bbd5597138cf192f13b5af3ab31cf83fc8009b9c718243d1cffaf192688f0390803b982bd10a3ef6e0c64be29c5c4e9c99ddb641842960b157f55a3dae"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0x463b, 0x8200, 0xc639, 0x1, r6}, &(0x7f00000004c0)=0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$kcm(0x10, 0x7, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000007ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4100002000800a6d0bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_int(r7, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) 0s ago: executing program 5 (id=4944): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getrlimit(0x9, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000002060104000000000a0010677e8813060500512cc338e51f859561c8b604100192d0060c1ca680af00000005470005a7a0000000050004000000000005001500ff00000013c3ea00686173683a6e65742c"], 0x50}}, 0x0) getpgid(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4404d80c}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) unshare(0x26020400) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64=0x1f}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES32=r6, @ANYBLOB="05040000000000000000060000f808000300", @ANYRES32=r6, @ANYBLOB="0800050009"], 0x24}}, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x880, '\x00', r7, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) kernel console output (not intermixed with test programs): use: Bad value for 'user_id' [ 1413.017691][T22329] fuse: Bad value for 'user_id' [ 1413.606103][T22314] orangefs_mount: mount request failed with -4 [ 1413.711820][T22336] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1413.733225][T15294] Bluetooth: hci4: Frame reassembly failed (-84) [ 1414.011684][T22344] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3922'. [ 1414.085914][T22344] wg2 speed is unknown, defaulting to 1000 [ 1415.437521][T22351] wg2 speed is unknown, defaulting to 1000 [ 1415.778441][ T5747] Bluetooth: hci4: command 0x1003 tx timeout [ 1415.891801][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1416.016439][T22360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3918'. [ 1416.027831][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3918'. [ 1416.166139][T22364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3919'. [ 1416.179506][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3919'. [ 1418.008445][ T5863] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1418.180461][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 1418.194791][ T5863] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 1418.231265][T22394] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1418.234126][T22394] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1418.237886][T22394] vhci_hcd vhci_hcd.0: Device attached [ 1418.251950][ T5863] usb 6-1: config 0 has no interface number 0 [ 1418.257694][T22394] netlink: 'syz.0.3931': attribute type 12 has an invalid length. [ 1418.260839][ T5863] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1418.271381][ T5863] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1418.282163][ T5863] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 6657, setting to 1024 [ 1418.287707][ T5863] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1418.298051][ T5863] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1418.317986][ T5863] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1418.322725][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.326305][ T5863] usb 6-1: Product: syz [ 1418.331258][ T5863] usb 6-1: Manufacturer: syz [ 1418.333899][ T5863] usb 6-1: SerialNumber: syz [ 1418.377385][ T5863] usb 6-1: config 0 descriptor?? [ 1418.395762][T22384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1418.532404][ T5863] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input50 [ 1418.532425][ T5825] usb 38-1: SetAddress Request (87) to port 0 [ 1418.537986][ T5825] usb 38-1: new SuperSpeed USB device number 87 using vhci_hcd [ 1418.558366][ T5137] usb 6-1: BOGUS urb xfer, pipe 1 != type 3 [ 1418.564744][ C3] bcm5974 6-1:0.119: trackpad urb failed: -1 [ 1418.624823][ C3] bcm5974 6-1:0.119: trackpad urb failed: -1 [ 1419.180091][T22395] vhci_hcd: connection reset by peer [ 1419.197030][T20078] vhci_hcd vhci_hcd.0: stop threads [ 1419.200089][T20078] vhci_hcd vhci_hcd.0: release socket [ 1419.202671][T20078] vhci_hcd vhci_hcd.0: disconnect device [ 1419.615679][T22407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3932'. [ 1419.713128][T22407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3932'. [ 1420.881817][T22421] atomic_op ffff888077a65198 conn xmit_atomic 0000000000000000 [ 1421.591448][ T5863] usb 6-1: USB disconnect, device number 45 [ 1422.288555][T22437] wg2 speed is unknown, defaulting to 1000 [ 1423.328350][T22449] block nbd5: NBD_DISCONNECT [ 1423.608288][ T9295] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1423.658057][ T5825] usb 38-1: device descriptor read/8, error -110 [ 1423.774410][ T9295] usb 10-1: device descriptor read/64, error -71 [ 1423.775505][T22455] atomic_op ffff888025c39998 conn xmit_atomic 0000000000000000 [ 1424.038468][ T9295] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1424.069602][ T5825] usb usb38-port1: attempt power cycle [ 1424.218553][ T9295] usb 10-1: device descriptor read/64, error -71 [ 1424.340316][ T9295] usb usb10-port1: attempt power cycle [ 1424.352301][T22458] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1424.391170][ T5747] Bluetooth: hci4: sending frame failed (-49) [ 1424.400846][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1424.639378][ T5825] usb usb38-port1: unable to enumerate USB device [ 1424.695738][T22464] atomic_op ffff8880255ec998 conn xmit_atomic 0000000000000000 [ 1424.731157][ T9295] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1424.758690][ T9295] usb 10-1: device descriptor read/8, error -71 [ 1424.998278][ T9295] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1425.028998][ T9295] usb 10-1: device descriptor read/8, error -71 [ 1425.138558][ T9295] usb usb10-port1: unable to enumerate USB device [ 1425.567380][T22474] atomic_op ffff888027123198 conn xmit_atomic 0000000000000000 [ 1426.389145][T22479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3955'. [ 1426.395445][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3955'. [ 1427.791189][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.793673][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.309015][T22510] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1428.448314][T22518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3965'. [ 1428.477107][T15298] Bluetooth: hci4: Frame reassembly failed (-84) [ 1428.567106][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3965'. [ 1429.693315][T22535] atomic_op ffff888012e6e198 conn xmit_atomic 0000000000000000 [ 1430.498609][ T5747] Bluetooth: hci4: command 0x1003 tx timeout [ 1430.505502][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1430.753905][T22541] atomic_op ffff888027124998 conn xmit_atomic 0000000000000000 [ 1431.067938][T22544] netlink: 'syz.5.3970': attribute type 1 has an invalid length. [ 1431.071354][T22544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3970'. [ 1431.960972][T22552] atomic_op ffff88802b1df198 conn xmit_atomic 0000000000000000 [ 1433.067263][T22563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3977'. [ 1433.075548][T22563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3977'. [ 1433.429799][T22568] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1433.432226][T22568] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1433.435769][T22568] vhci_hcd vhci_hcd.0: Device attached [ 1433.662078][T22574] atomic_op ffff8880143c8198 conn xmit_atomic 0000000000000000 [ 1433.698467][T21521] usb 40-1: SetAddress Request (126) to port 0 [ 1433.702775][T21521] usb 40-1: new SuperSpeed USB device number 126 using vhci_hcd [ 1434.178415][T22569] vhci_hcd: connection reset by peer [ 1434.208463][T20078] vhci_hcd vhci_hcd.1: stop threads [ 1434.210396][T20078] vhci_hcd vhci_hcd.1: release socket [ 1434.212592][T20078] vhci_hcd vhci_hcd.1: disconnect device [ 1434.319939][T22589] fuse: fd is not a fuse device [ 1434.697106][T22597] atomic_op ffff8880267bd998 conn xmit_atomic 0000000000000000 [ 1436.009959][T22606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3992'. [ 1437.051074][T22620] fuse: fd is not a fuse device [ 1437.659806][T22633] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1437.696869][T15298] Bluetooth: hci4: Frame reassembly failed (-84) [ 1438.391821][T22637] atomic_op ffff888025c9f198 conn xmit_atomic 0000000000000000 [ 1438.751472][T22646] overlayfs: failed to clone lowerpath [ 1438.806744][T22648] overlayfs: failed to clone lowerpath [ 1438.838911][T21521] usb 40-1: device descriptor read/8, error -110 [ 1438.860381][T22647] atomic_op ffff888070a94998 conn xmit_atomic 0000000000000000 [ 1439.670985][T21521] usb usb40-port1: attempt power cycle [ 1439.701527][ T5747] Bluetooth: hci4: command 0x1003 tx timeout [ 1439.701585][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1439.831773][T22655] atomic_op ffff88802b1c5198 conn xmit_atomic 0000000000000000 [ 1440.272455][T21521] usb usb40-port1: unable to enumerate USB device [ 1440.369683][T22660] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1440.375655][T22660] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1440.382679][T22660] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1440.485438][T22660] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1440.561409][T22663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4009'. [ 1440.811835][T22662] atomic_op ffff8880255b3198 conn xmit_atomic 0000000000000000 [ 1441.575193][T22669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4013'. [ 1441.583708][T22669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4013'. [ 1442.806472][T22693] wg2 speed is unknown, defaulting to 1000 [ 1444.107575][T22705] atomic_op ffff88806c7a7198 conn xmit_atomic 0000000000000000 [ 1444.249363][T22707] atomic_op ffff88804bfbd998 conn xmit_atomic 0000000000000000 [ 1444.436688][T22712] overlayfs: failed to clone lowerpath [ 1444.690653][T22713] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4021'. [ 1445.422611][T22715] overlay: Unknown parameter 'lowerd' [ 1445.441544][T22713] wg2 speed is unknown, defaulting to 1000 [ 1449.256599][T22753] atomic_op ffff8880255b2198 conn xmit_atomic 0000000000000000 [ 1449.626800][T22760] wg2 speed is unknown, defaulting to 1000 [ 1450.876730][T22767] overlayfs: failed to clone lowerpath [ 1450.943447][T22770] overlayfs: failed to clone lowerpath [ 1454.056491][T22819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4046'. [ 1454.149802][T22821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4047'. [ 1454.300753][T22825] netlink: 'syz.5.4048': attribute type 1 has an invalid length. [ 1454.304703][T22825] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4048'. [ 1454.480461][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 1454.480480][ T42] audit: type=1800 audit(1783344141.066:1283): pid=22825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4048" name="file0" dev="overlay" ino=2305 res=0 errno=0 [ 1455.277033][T22841] atomic_op ffff888014435198 conn xmit_atomic 0000000000000000 [ 1456.236283][T22848] atomic_op ffff888025c9e198 conn xmit_atomic 0000000000000000 [ 1456.304985][T22852] macsec1: entered allmulticast mode [ 1456.307491][T22852] veth1_macvtap: entered allmulticast mode [ 1456.313228][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4055'. [ 1456.355171][T22852] veth1_macvtap (unregistering): left allmulticast mode [ 1456.696330][T22867] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1456.724816][T22869] overlayfs: failed to clone lowerpath [ 1456.800570][T22871] overlayfs: failed to clone lowerpath [ 1456.844913][T22870] e: renamed from bond_slave_0 [ 1456.979821][T22875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4061'. [ 1457.055453][T22877] atomic_op ffff888014436998 conn xmit_atomic 0000000000000000 [ 1457.261201][T22881] atomic_op ffff88802575b198 conn xmit_atomic 0000000000000000 [ 1457.639283][T22893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4069'. [ 1458.738480][ T5747] Bluetooth: hci4: command 0x1003 tx timeout [ 1458.774565][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1458.931879][T22902] atomic_op ffff888013df8198 conn xmit_atomic 0000000000000000 [ 1459.652729][T22910] atomic_op ffff8880531b5998 conn xmit_atomic 0000000000000000 [ 1460.751774][T22921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4078'. [ 1460.880358][T22924] atomic_op ffff888050aa2998 conn xmit_atomic 0000000000000000 [ 1460.899130][T22925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4078'. [ 1461.755864][T22926] wg2 speed is unknown, defaulting to 1000 [ 1462.484322][ T42] audit: type=1326 audit(1783344149.066:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22918 comm="syz.0.4077" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 1463.725079][T22938] 9pnet_virtio: no channels available for device syz [ 1463.956266][T22945] atomic_op ffff888012e6e198 conn xmit_atomic 0000000000000000 [ 1464.023474][T22946] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1464.063693][ T5747] Bluetooth: hci4: sending frame failed (-49) [ 1464.067131][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1465.167042][T22951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4087'. [ 1465.344130][T22955] atomic_op ffff888014436998 conn xmit_atomic 0000000000000000 [ 1465.428636][ T5863] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1465.705171][T22958] atomic_op ffff88805fd33198 conn xmit_atomic 0000000000000000 [ 1466.121458][ T5863] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1466.269047][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1466.314068][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1466.390464][ T5863] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1466.455667][ T5863] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1466.460030][ T5863] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1466.463593][ T5863] usb 6-1: Manufacturer: syz [ 1466.540887][ T5863] usb 6-1: config 0 descriptor?? [ 1466.971973][ T5863] hid_parser_main: 22 callbacks suppressed [ 1466.971990][ T5863] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 1466.985163][ T5863] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1467.012292][T22968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4094'. [ 1467.168518][T22978] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1467.171232][T22978] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1467.186550][T22978] vhci_hcd vhci_hcd.0: Device attached [ 1467.344486][T22978] geneve2: entered allmulticast mode [ 1467.468279][T21521] usb 48-1: SetAddress Request (74) to port 0 [ 1467.471182][T21521] usb 48-1: new SuperSpeed USB device number 74 using vhci_hcd [ 1467.539406][T22985] block nbd1: shutting down sockets [ 1467.736749][T22979] vhci_hcd: connection reset by peer [ 1467.738752][ T5823] vhci_hcd vhci_hcd.5: stop threads [ 1467.742686][ T5823] vhci_hcd vhci_hcd.5: release socket [ 1467.744718][ T5823] vhci_hcd vhci_hcd.5: disconnect device [ 1467.900459][T22989] atomic_op ffff888077a61198 conn xmit_atomic 0000000000000000 [ 1468.635690][T22991] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1468.655315][T15294] Bluetooth: hci4: Frame reassembly failed (-84) [ 1469.300074][T16909] usb 6-1: USB disconnect, device number 46 [ 1469.457403][T22997] atomic_op ffff88806bf29198 conn xmit_atomic 0000000000000000 [ 1470.677786][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1470.682091][ T5747] Bluetooth: hci4: command 0x1003 tx timeout [ 1471.534791][T23010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4103'. [ 1471.550388][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4103'. [ 1471.952140][T23023] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4107'. [ 1472.060945][T23020] atomic_op ffff88802afe1198 conn xmit_atomic 0000000000000000 [ 1472.616790][T23031] atomic_op ffff8880267bd198 conn xmit_atomic 0000000000000000 [ 1472.660896][T23032] atomic_op ffff888025c9e198 conn xmit_atomic 0000000000000000 [ 1472.695190][T21521] usb 48-1: device descriptor read/8, error -110 [ 1472.876270][T23035] netlink: 'syz.0.4110': attribute type 1 has an invalid length. [ 1472.878954][T23035] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4110'. [ 1472.900289][ T42] audit: type=1800 audit(1783344159.486:1285): pid=23035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4110" name="file0" dev="overlay" ino=5634 res=0 errno=0 [ 1473.150262][T21521] usb usb48-port1: attempt power cycle [ 1473.761452][T21521] usb usb48-port1: unable to enumerate USB device [ 1474.800670][T23058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4116'. [ 1474.824140][T23058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4116'. [ 1475.267880][T23064] atomic_op ffff8880251f6998 conn xmit_atomic 0000000000000000 [ 1475.417224][T23070] atomic_op ffff888027124998 conn xmit_atomic 0000000000000000 [ 1475.656103][T23073] atomic_op ffff88806bdd7998 conn xmit_atomic 0000000000000000 [ 1475.930913][T23076] atomic_op ffff88806b6ad198 conn xmit_atomic 0000000000000000 [ 1476.854236][T23083] atomic_op ffff88802575d998 conn xmit_atomic 0000000000000000 [ 1476.880689][T23086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4126'. [ 1476.887467][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4126'. [ 1478.849413][T23107] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1478.851521][T23107] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1478.872076][T23107] vhci_hcd vhci_hcd.0: Device attached [ 1478.904979][T23107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4132'. [ 1479.180822][T23117] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1479.228019][ T5747] Bluetooth: hci4: sending frame failed (-49) [ 1479.244912][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1479.368759][T21521] usb 40-1: SetAddress Request (4) to port 0 [ 1479.371858][T21521] usb 40-1: new SuperSpeed USB device number 4 using vhci_hcd [ 1479.487104][T23108] vhci_hcd: connection reset by peer [ 1479.493616][ T5823] vhci_hcd vhci_hcd.1: stop threads [ 1479.496420][ T5823] vhci_hcd vhci_hcd.1: release socket [ 1479.518619][ T5823] vhci_hcd vhci_hcd.1: disconnect device [ 1479.870405][T23123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4135'. [ 1479.944275][T23123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4135'. [ 1480.000720][T23126] atomic_op ffff88806bbc2998 conn xmit_atomic 0000000000000000 [ 1482.711313][T23144] overlayfs: failed to clone lowerpath [ 1482.782827][T23147] overlayfs: failed to clone lowerpath [ 1483.262978][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4145'. [ 1483.288655][ T42] audit: type=1326 audit(1783344169.866:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23153 comm="syz.0.4146" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 1484.418312][T21521] usb 40-1: device descriptor read/8, error -110 [ 1484.642961][T23170] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1484.747038][T15294] Bluetooth: hci4: Frame reassembly failed (-84) [ 1484.818936][T21521] usb usb40-port1: attempt power cycle [ 1485.174533][T23178] atomic_op ffff88806b8f8198 conn xmit_atomic 0000000000000000 [ 1485.758760][T21521] usb usb40-port1: unable to enumerate USB device [ 1485.879197][T23185] IPVS: Error connecting to the multicast addr [ 1486.204014][T23194] overlayfs: failed to clone lowerpath [ 1486.262402][T23195] overlayfs: failed to clone lowerpath [ 1486.725291][T23197] atomic_op ffff888042424998 conn xmit_atomic 0000000000000000 [ 1486.748540][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1486.998295][ T5825] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1487.158422][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 1487.161711][ T5825] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.165114][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1487.168991][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1487.173019][ T5825] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1487.175903][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.180165][ T5825] usb 6-1: config 0 descriptor?? [ 1487.257580][T23204] overlayfs: failed to clone lowerpath [ 1487.367062][T23207] overlayfs: failed to clone lowerpath [ 1487.434990][T23199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4154'. [ 1487.495314][T23211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4156'. [ 1487.519767][ T5825] usb 6-1: USB disconnect, device number 47 [ 1487.780986][T23217] syz.5.4157: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1487.786348][T23217] CPU: 1 UID: 0 PID: 23217 Comm: syz.5.4157 Tainted: G L syzkaller #0 PREEMPT(full) [ 1487.786381][T23217] Tainted: [L]=SOFTLOCKUP [ 1487.786386][T23217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1487.786420][T23217] Call Trace: [ 1487.786450][T23217] [ 1487.786460][T23217] dump_stack_lvl+0x100/0x190 [ 1487.786515][T23217] warn_alloc.cold+0x94/0xa8 [ 1487.786558][T23217] ? __pfx_warn_alloc+0x10/0x10 [ 1487.786602][T23217] ? kasan_save_stack+0x3f/0x50 [ 1487.786626][T23217] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1487.786679][T23217] ? vb2_vmalloc_alloc+0xf9/0x410 [ 1487.786781][T23217] ? __vb2_queue_alloc+0x8d5/0x1160 [ 1487.786798][T23217] ? vb2_core_create_bufs+0x5fa/0xa30 [ 1487.786816][T23217] ? vb2_create_bufs+0x40c/0x830 [ 1487.786830][T23217] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 1487.786846][T23217] ? vidioc_create_bufs+0x7d/0xf0 [ 1487.786918][T23217] ? v4l_create_bufs+0x17d/0x270 [ 1487.786956][T23217] ? video_usercopy+0x3d3/0x14c0 [ 1487.786970][T23217] ? v4l2_ioctl+0x1bd/0x250 [ 1487.786984][T23217] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 1487.786999][T23217] ? vb2_vmalloc_alloc+0x135/0x410 [ 1487.787019][T23217] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1487.787043][T23217] ? vb2_vmalloc_alloc+0x135/0x410 [ 1487.787066][T23217] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1487.787086][T23217] ? kasan_save_track+0x14/0x30 [ 1487.787098][T23217] ? __kasan_kmalloc+0xaa/0xb0 [ 1487.787111][T23217] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1487.787128][T23217] ? vb2_vmalloc_alloc+0x135/0x410 [ 1487.787144][T23217] vmalloc_user_noprof+0x9e/0xe0 [ 1487.787159][T23217] ? vb2_vmalloc_alloc+0x135/0x410 [ 1487.787176][T23217] vb2_vmalloc_alloc+0x135/0x410 [ 1487.787192][T23217] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1487.787210][T23217] __vb2_queue_alloc+0x8d5/0x1160 [ 1487.787233][T23217] vb2_core_create_bufs+0x5fa/0xa30 [ 1487.787251][T23217] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 1487.787271][T23217] ? preempt_schedule_thunk+0x16/0x40 [ 1487.787290][T23217] vb2_create_bufs+0x40c/0x830 [ 1487.787307][T23217] ? __pfx_vb2_create_bufs+0x10/0x10 [ 1487.787322][T23217] ? v4l_sanitize_colorspace+0x220/0x410 [ 1487.787340][T23217] vb2_ioctl_create_bufs+0x244/0x3e0 [ 1487.787355][T23217] ? v4l2_compat_get_user+0x883/0x11f0 [ 1487.787365][T23217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1487.787384][T23217] vidioc_create_bufs+0x7d/0xf0 [ 1487.787404][T23217] v4l_create_bufs+0x17d/0x270 [ 1487.787417][T23217] __video_do_ioctl+0xb2a/0xdf0 [ 1487.787433][T23217] ? trace_kmalloc+0xeb/0x110 [ 1487.787448][T23217] ? __pfx___video_do_ioctl+0x10/0x10 [ 1487.787467][T23217] ? video_usercopy+0x145/0x14c0 [ 1487.787484][T23217] video_usercopy+0x3d3/0x14c0 [ 1487.787497][T23217] ? __pfx___video_do_ioctl+0x10/0x10 [ 1487.787512][T23217] ? __pfx_video_usercopy+0x10/0x10 [ 1487.787530][T23217] ? __fget_files+0x215/0x3d0 [ 1487.787545][T23217] ? hook_file_ioctl_common+0x140/0x440 [ 1487.787604][T23217] v4l2_ioctl+0x1bd/0x250 [ 1487.787621][T23217] v4l2_compat_ioctl32+0x20f/0x2d0 [ 1487.787635][T23217] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1487.787648][T23217] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1487.787666][T23217] __do_fast_syscall_32+0xe7/0x970 [ 1487.787816][T23217] ? lockdep_hardirqs_on+0x78/0x100 [ 1487.787837][T23217] do_fast_syscall_32+0x32/0x70 [ 1487.787849][T23217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1487.787866][T23217] RIP: 0023:0xf7f12fec [ 1487.787883][T23217] Code: Unable to access opcode bytes at 0xf7f12fc2. [ 1487.787909][T23217] RSP: 002b:00000000f539450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1487.787921][T23217] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0f8565c [ 1487.787930][T23217] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1487.787939][T23217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1487.787950][T23217] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1487.787957][T23217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1487.787972][T23217] [ 1487.788052][T23217] Mem-Info: [ 1487.930489][T23217] active_anon:6021 inactive_anon:4551 isolated_anon:0 [ 1487.930489][T23217] active_file:2690 inactive_file:14183 isolated_file:0 [ 1487.930489][T23217] unevictable:3816 dirty:307 writeback:0 [ 1487.930489][T23217] slab_reclaimable:7198 slab_unreclaimable:67009 [ 1487.930489][T23217] mapped:28420 shmem:6029 pagetables:1815 [ 1487.930489][T23217] sec_pagetables:319 bounce:0 [ 1487.930489][T23217] kernel_misc_reclaimable:0 [ 1487.930489][T23217] free:20350 free_pcp:10094 free_cma:0 [ 1487.945259][T23217] Node 0 active_anon:120kB inactive_anon:64kB active_file:16kB inactive_file:1332kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8288kB pagetables:1228kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1487.955976][T23217] Node 1 active_anon:23964kB inactive_anon:18140kB active_file:10744kB inactive_file:55400kB unevictable:11728kB isolated(anon):0kB isolated(file):0kB mapped:113652kB dirty:1228kB writeback:0kB shmem:20580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:7832kB pagetables:6032kB sec_pagetables:156kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1487.969657][T23217] Node 0 DMA free:2668kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:4kB free_cma:0kB [ 1487.981902][T23217] lowmem_reserve[]: 0 280 280 280 280 [ 1487.984403][T23217] Node 0 DMA32 free:13656kB boost:0kB min:12776kB low:15968kB high:19160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:120kB inactive_anon:64kB active_file:4kB inactive_file:1332kB unevictable:3536kB writepending:0kB zspages:4kB present:1032196kB managed:287156kB mlocked:0kB bounce:0kB free_pcp:9472kB local_pcp:2056kB free_cma:0kB [ 1487.997368][T23217] lowmem_reserve[]: 0 0 0 0 0 [ 1488.068226][T23217] Node 1 DMA32 free:64948kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23964kB inactive_anon:18140kB active_file:10744kB inactive_file:55400kB unevictable:11728kB writepending:1228kB zspages:2168kB present:1048432kB managed:948212kB mlocked:8256kB bounce:0kB free_pcp:31136kB local_pcp:3180kB free_cma:0kB [ 1488.078568][T23217] lowmem_reserve[]: 0 0 0 0 0 [ 1488.080170][T23217] Node 0 DMA: 135*4kB (UM) 30*8kB (UM) 10*16kB (UM) 14*32kB (UM) 6*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2668kB [ 1488.085168][T23217] Node 0 DMA32: 10*4kB (UE) 44*8kB (UE) 15*16kB (ME) 43*32kB (UME) 40*64kB (UME) 19*128kB (UME) 6*256kB (UME) 6*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 13656kB [ 1488.090686][T23217] Node 1 DMA32: 61*4kB (UME) 617*8kB (UME) 238*16kB (UME) 6*32kB (UME) 64*64kB (UME) 67*128kB (UME) 24*256kB (UE) 16*512kB (UME) 8*1024kB (UM) 2*2048kB (UM) 4*4096kB (U) = 64860kB [ 1488.096618][T23217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1488.099638][T23217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1488.102480][T23217] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1488.105408][T23217] Node 1 hugepages_total=5 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 1488.108253][T23217] 23137 total pagecache pages [ 1488.109754][T23217] 237 pages in swap cache [ 1488.111134][T23217] Free swap = 121060kB [ 1488.112446][T23217] Total swap = 124996kB [ 1488.113773][T23217] 524155 pages RAM [ 1488.115000][T23217] 0 pages HighMem/MovableOnly [ 1488.116487][T23217] 211473 pages reserved [ 1488.117809][T23217] 0 pages cma reserved [ 1489.410193][T23226] atomic_op ffff88802b11b198 conn xmit_atomic 0000000000000000 [ 1489.470694][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.476682][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.152017][T23239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4162'. [ 1490.980459][T23247] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1491.822935][T23261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1491.830607][T23261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1493.458369][T20842] Bluetooth: hci4: command 0x1003 tx timeout [ 1493.461828][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1494.468108][ T42] audit: type=1326 audit(1783344181.046:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23278 comm="syz.5.4178" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12fec code=0x0 [ 1496.322989][T23299] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1496.325154][T23299] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1496.341487][T23299] vhci_hcd vhci_hcd.0: Device attached [ 1496.491376][T23299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4180'. [ 1496.648310][T21521] usb 40-1: SetAddress Request (8) to port 0 [ 1496.658838][T21521] usb 40-1: new SuperSpeed USB device number 8 using vhci_hcd [ 1496.737682][T23308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4184'. [ 1496.772638][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4184'. [ 1496.803248][T23301] vhci_hcd: connection reset by peer [ 1496.816671][T20078] vhci_hcd vhci_hcd.1: stop threads [ 1496.825968][T20078] vhci_hcd vhci_hcd.1: release socket [ 1496.835471][T20078] vhci_hcd vhci_hcd.1: disconnect device [ 1496.975672][T23310] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1496.997004][T15297] Bluetooth: hci4: Frame reassembly failed (-84) [ 1497.111634][T23312] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1497.155654][ T5762] Bluetooth: hci5: sending frame failed (-49) [ 1497.160685][T20842] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1499.058335][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1499.058749][T20842] Bluetooth: hci4: command 0x1003 tx timeout [ 1499.868099][T23335] warn_alloc: 1 callbacks suppressed [ 1499.868210][T23335] syz.0.4189: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1499.868473][T23335] CPU: 1 UID: 0 PID: 23335 Comm: syz.0.4189 Tainted: G L syzkaller #0 PREEMPT(full) [ 1499.868502][T23335] Tainted: [L]=SOFTLOCKUP [ 1499.868508][T23335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1499.868516][T23335] Call Trace: [ 1499.868521][T23335] [ 1499.868526][T23335] dump_stack_lvl+0x100/0x190 [ 1499.868544][T23335] warn_alloc.cold+0x94/0xa8 [ 1499.868556][T23335] ? __pfx_warn_alloc+0x10/0x10 [ 1499.868568][T23335] ? __pfx_stack_trace_save+0x10/0x10 [ 1499.868585][T23335] ? kasan_save_stack+0x3f/0x50 [ 1499.868600][T23335] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1499.868617][T23335] ? vb2_vmalloc_alloc+0xf9/0x410 [ 1499.868639][T23335] ? __vb2_queue_alloc+0x8d5/0x1160 [ 1499.868655][T23335] ? vb2_core_create_bufs+0x5fa/0xa30 [ 1499.868671][T23335] ? vb2_create_bufs+0x40c/0x830 [ 1499.868685][T23335] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 1499.868699][T23335] ? vidioc_create_bufs+0x7d/0xf0 [ 1499.868717][T23335] ? v4l_create_bufs+0x17d/0x270 [ 1499.868729][T23335] ? video_usercopy+0x3d3/0x14c0 [ 1499.868741][T23335] ? v4l2_ioctl+0x1bd/0x250 [ 1499.868756][T23335] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 1499.868769][T23335] ? vb2_vmalloc_alloc+0x135/0x410 [ 1499.868786][T23335] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1499.868808][T23335] ? vb2_vmalloc_alloc+0x135/0x410 [ 1499.868828][T23335] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1499.868846][T23335] ? kasan_save_track+0x14/0x30 [ 1499.868858][T23335] ? __kasan_kmalloc+0xaa/0xb0 [ 1499.868871][T23335] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1499.868887][T23335] ? vb2_vmalloc_alloc+0x135/0x410 [ 1499.868904][T23335] vmalloc_user_noprof+0x9e/0xe0 [ 1499.868919][T23335] ? vb2_vmalloc_alloc+0x135/0x410 [ 1499.868935][T23335] vb2_vmalloc_alloc+0x135/0x410 [ 1499.868951][T23335] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1499.868969][T23335] __vb2_queue_alloc+0x8d5/0x1160 [ 1499.868991][T23335] vb2_core_create_bufs+0x5fa/0xa30 [ 1499.869009][T23335] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 1499.869029][T23335] ? preempt_schedule_thunk+0x16/0x40 [ 1499.869048][T23335] vb2_create_bufs+0x40c/0x830 [ 1499.869065][T23335] ? __pfx_vb2_create_bufs+0x10/0x10 [ 1499.869079][T23335] ? v4l_sanitize_colorspace+0x220/0x410 [ 1499.869098][T23335] vb2_ioctl_create_bufs+0x244/0x3e0 [ 1499.869112][T23335] ? v4l2_compat_get_user+0x883/0x11f0 [ 1499.869122][T23335] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1499.869139][T23335] vidioc_create_bufs+0x7d/0xf0 [ 1499.869158][T23335] v4l_create_bufs+0x17d/0x270 [ 1499.869170][T23335] __video_do_ioctl+0xb2a/0xdf0 [ 1499.869185][T23335] ? trace_kmalloc+0xeb/0x110 [ 1499.869198][T23335] ? __pfx___video_do_ioctl+0x10/0x10 [ 1499.869213][T23335] ? video_usercopy+0x145/0x14c0 [ 1499.869229][T23335] video_usercopy+0x3d3/0x14c0 [ 1499.869242][T23335] ? __pfx___video_do_ioctl+0x10/0x10 [ 1499.869256][T23335] ? __pfx_video_usercopy+0x10/0x10 [ 1499.869274][T23335] ? __fget_files+0x215/0x3d0 [ 1499.869289][T23335] ? hook_file_ioctl_common+0x140/0x440 [ 1499.869306][T23335] v4l2_ioctl+0x1bd/0x250 [ 1499.869321][T23335] v4l2_compat_ioctl32+0x20f/0x2d0 [ 1499.869331][T23335] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1499.869343][T23335] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1499.869360][T23335] __do_fast_syscall_32+0xe7/0x970 [ 1499.869372][T23335] ? lockdep_hardirqs_on+0x78/0x100 [ 1499.869390][T23335] do_fast_syscall_32+0x32/0x70 [ 1499.869400][T23335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1499.869415][T23335] RIP: 0023:0xf704efec [ 1499.869430][T23335] Code: Unable to access opcode bytes at 0xf704efc2. [ 1499.869435][T23335] RSP: 002b:00000000f53fb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1499.869447][T23335] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0f8565c [ 1499.869454][T23335] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1499.869460][T23335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1499.869467][T23335] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1499.869473][T23335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1499.869487][T23335] [ 1499.869528][T23335] Mem-Info: [ 1499.869538][T23335] active_anon:4677 inactive_anon:5820 isolated_anon:0 [ 1499.869538][T23335] active_file:3285 inactive_file:8057 isolated_file:0 [ 1499.869538][T23335] unevictable:1768 dirty:416 writeback:0 [ 1499.869538][T23335] slab_reclaimable:7353 slab_unreclaimable:67159 [ 1499.869538][T23335] mapped:26020 shmem:6029 pagetables:1799 [ 1499.869538][T23335] sec_pagetables:319 bounce:0 [ 1499.869538][T23335] kernel_misc_reclaimable:0 [ 1499.869538][T23335] free:34273 free_pcp:3970 free_cma:0 [ 1499.869603][T23335] Node 0 active_anon:120kB inactive_anon:64kB active_file:16kB inactive_file:1332kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:1228kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1499.869671][T23335] Node 1 active_anon:18588kB inactive_anon:23216kB active_file:13124kB inactive_file:30896kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:104052kB dirty:1660kB writeback:0kB shmem:20580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7628kB pagetables:5968kB sec_pagetables:156kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1499.869735][T23335] Node 0 DMA free:2712kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1499.869801][T23335] lowmem_reserve[]: 0 280 280 280 280 [ 1499.869892][T23335] Node 0 DMA32 free:15912kB boost:0kB min:12776kB low:15968kB high:19160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:120kB inactive_anon:64kB active_file:4kB inactive_file:1332kB unevictable:3536kB writepending:4kB zspages:4kB present:1032196kB managed:287156kB mlocked:0kB bounce:0kB free_pcp:4552kB local_pcp:1380kB free_cma:0kB [ 1499.869987][T23335] lowmem_reserve[]: 0 0 0 0 0 [ 1499.870087][T23335] Node 1 DMA32 free:118468kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18588kB inactive_anon:23216kB active_file:13124kB inactive_file:30896kB unevictable:3536kB writepending:1660kB zspages:2168kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:11320kB local_pcp:3072kB free_cma:0kB [ 1499.870153][T23335] lowmem_reserve[]: 0 0 0 0 0 [ 1499.870242][T23335] Node 0 DMA: 142*4kB (UM) 30*8kB (U) 9*16kB (UM) 15*32kB (UM) 6*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2712kB [ 1499.870617][T23335] Node 0 DMA32: 10*4kB (ME) 44*8kB (UE) 16*16kB (UME) 101*32kB (UME) 56*64kB (UME) 20*128kB (UME) 5*256kB (UME) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 15912kB [ 1499.871021][T23335] Node 1 DMA32: 39*4kB (E) 446*8kB (UME) 603*16kB (UME) 284*32kB (UME) 146*64kB (UME) 78*128kB (UME) 49*256kB (UME) 29*512kB (UME) 6*1024kB (M) 13*2048kB (UM) 4*4096kB (U) = 118332kB [ 1499.871465][T23335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1499.871507][T23335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1499.871548][T23335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1499.871589][T23335] Node 1 hugepages_total=5 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 1499.871633][T23335] 17656 total pagecache pages [ 1499.871640][T23335] 237 pages in swap cache [ 1499.871677][T23335] Free swap = 121052kB [ 1499.871683][T23335] Total swap = 124996kB [ 1499.871710][T23335] 524155 pages RAM [ 1499.871716][T23335] 0 pages HighMem/MovableOnly [ 1499.871751][T23335] 211473 pages reserved [ 1499.871757][T23335] 0 pages cma reserved [ 1499.917133][T23337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4193'. [ 1500.029375][T23342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4193'. [ 1500.121346][T23345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4194'. [ 1500.543436][T23347] ubi: mtd0 is already attached to ubi16 [ 1501.698577][T21521] usb 40-1: device descriptor read/8, error -110 [ 1501.986694][T23373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4195'. [ 1502.114416][T21521] usb usb40-port1: attempt power cycle [ 1502.623598][T23382] atomic_op ffff88802b1dc998 conn xmit_atomic 0000000000000000 [ 1502.630836][T23380] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1502.655392][T15300] Bluetooth: hci4: Frame reassembly failed (-84) [ 1502.710024][T21521] usb usb40-port1: unable to enumerate USB device [ 1503.396241][T23395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4199'. [ 1503.404241][T23395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4199'. [ 1503.482974][T23397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4200'. [ 1503.570319][T23402] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4202'. [ 1503.883267][T23405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4202'. [ 1504.123106][T23411] pim6reg: entered allmulticast mode [ 1504.140711][T23408] pim6reg: left allmulticast mode [ 1504.685810][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4208'. [ 1504.749005][T20842] Bluetooth: hci4: command 0x1003 tx timeout [ 1504.755852][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1505.001559][T23427] atomic_op ffff88804bfbd998 conn xmit_atomic 0000000000000000 [ 1505.705599][T23431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4211'. [ 1505.874286][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4211'. [ 1506.056662][T23437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4212'. [ 1506.548422][T23438] ubi: mtd0 is already attached to ubi16 [ 1507.351943][T23464] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1507.371751][T15300] Bluetooth: hci4: Frame reassembly failed (-84) [ 1507.374896][T15294] Bluetooth: hci4: Frame reassembly failed (-84) [ 1507.488275][T16909] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1507.504218][T23468] atomic_op ffff88806b68d198 conn xmit_atomic 0000000000000000 [ 1507.623038][T23471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4222'. [ 1507.689344][T16909] usb 10-1: Using ep0 maxpacket: 32 [ 1507.690148][T23471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4222'. [ 1507.693016][T16909] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1507.750337][T16909] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1507.754587][T16909] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1507.757982][T16909] usb 10-1: config 14 has no interface number 0 [ 1507.760718][T16909] usb 10-1: config 14 has no interface number 1 [ 1507.762993][T16909] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1507.766583][T16909] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1507.770557][T16909] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1507.774221][T16909] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1507.777802][T16909] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1507.781386][T16909] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1507.785661][T16909] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1507.787855][T16909] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1507.791906][T16909] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1507.795237][T16909] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.797945][T16909] usb 10-1: Product: syz [ 1507.799512][T16909] usb 10-1: Manufacturer: syz [ 1507.801070][T16909] usb 10-1: SerialNumber: syz [ 1508.024736][T23481] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1508.026852][T23481] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1508.042819][T23481] vhci_hcd vhci_hcd.0: Device attached [ 1508.133683][T23481] geneve2: entered allmulticast mode [ 1508.318327][T21521] usb 40-1: SetAddress Request (12) to port 0 [ 1508.320751][T21521] usb 40-1: new SuperSpeed USB device number 12 using vhci_hcd [ 1508.353396][T16909] legousbtower 10-1:14.57: interrupt endpoints not found [ 1508.367351][T16909] legousbtower 10-1:14.228: get version request failed: -71 [ 1508.372953][T16909] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 1508.390016][T16909] usb 10-1: USB disconnect, device number 24 [ 1508.617901][T23482] vhci_hcd: connection reset by peer [ 1508.620862][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1508.623205][ T12] vhci_hcd vhci_hcd.1: release socket [ 1508.626827][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1509.378509][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1509.384430][ T5747] Bluetooth: hci4: command 0x1003 tx timeout [ 1510.893593][T23515] atomic_op ffff88806bd73198 conn xmit_atomic 0000000000000000 [ 1511.695666][T23521] wg2 speed is unknown, defaulting to 1000 [ 1511.915553][T23524] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1511.961417][T15298] Bluetooth: hci4: Frame reassembly failed (-84) [ 1512.380367][T23532] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1512.383027][T23532] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1512.387089][T23532] vhci_hcd vhci_hcd.0: Device attached [ 1512.416204][T23532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1512.990914][T23533] vhci_hcd: connection closed [ 1512.991230][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1512.995337][ T12] vhci_hcd vhci_hcd.1: release socket [ 1512.997499][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1513.243178][T23549] siw: device registration error -23 [ 1513.369515][T23551] atomic_op ffff888029994198 conn xmit_atomic 0000000000000000 [ 1513.389383][T21521] usb 40-1: device descriptor read/8, error -110 [ 1513.412310][T23553] fuse: fd is not a fuse device [ 1513.834041][T21521] usb usb40-port1: attempt power cycle [ 1513.846070][T23563] atomic_op ffff88802b11f198 conn xmit_atomic 0000000000000000 [ 1514.018441][ T5747] Bluetooth: hci4: command 0x1003 tx timeout [ 1514.104228][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1514.392699][T21521] usb usb40-port1: unable to enumerate USB device [ 1514.404562][T23568] atomic_op ffff88806b29e998 conn xmit_atomic 0000000000000000 [ 1515.416482][T23574] atomic_op ffff888050ee8198 conn xmit_atomic 0000000000000000 [ 1515.829789][T23586] siw: device registration error -23 [ 1516.016544][T23586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.416129][ T6140] wg2 speed is unknown, defaulting to 1000 [ 1516.423987][ T6140] syz2: Port: 1 Link ACTIVE [ 1516.540561][ T6140] wg2 speed is unknown, defaulting to 1000 [ 1516.593816][T23594] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4258'. [ 1516.603328][T23594] ptrace attach of "/syz-executor exec"[14583] was attempted by "/syz-executor exec"[23594] [ 1516.766851][T23597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4259'. [ 1516.807826][T23597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4259'. [ 1516.813371][T23600] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1517.125967][T23602] netlink: 'syz.0.4261': attribute type 7 has an invalid length. [ 1517.129136][T23602] netlink: 'syz.0.4261': attribute type 8 has an invalid length. [ 1517.863003][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4257'. [ 1518.372914][T23612] atomic_op ffff888052d6f998 conn xmit_atomic 0000000000000000 [ 1518.898390][ T5747] Bluetooth: hci4: command 0x1003 tx timeout [ 1518.898416][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1519.293553][T23629] fuse: fd is not a fuse device [ 1519.531832][T23633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4269'. [ 1519.539284][T23633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4269'. [ 1519.771969][T23639] fuse: fd is not a fuse device [ 1520.462618][T23644] atomic_op ffff888026448998 conn xmit_atomic 0000000000000000 [ 1520.692115][T23639] orangefs_mount: mount request failed with -4 [ 1521.080649][T23652] atomic_op ffff88806ae9c198 conn xmit_atomic 0000000000000000 [ 1521.166600][T23653] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1521.169297][T23653] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1521.188312][T23653] vhci_hcd vhci_hcd.0: Device attached [ 1521.661461][T23662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4275'. [ 1521.671046][T21521] usb 48-1: SetAddress Request (78) to port 0 [ 1521.679248][T21521] usb 48-1: new SuperSpeed USB device number 78 using vhci_hcd [ 1522.102811][T23666] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1522.163772][T15298] Bluetooth: hci4: Frame reassembly failed (-84) [ 1522.439926][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4278'. [ 1522.565730][T23670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4278'. [ 1524.226733][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1524.919527][T23696] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1524.921621][T23696] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1524.935573][T23696] vhci_hcd vhci_hcd.0: Device attached [ 1524.943835][T23654] vhci_hcd: connection reset by peer [ 1524.951505][ T12] vhci_hcd vhci_hcd.5: stop threads [ 1524.956876][ T12] vhci_hcd vhci_hcd.5: release socket [ 1524.971727][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 1525.208552][ T9295] usb 38-1: SetAddress Request (91) to port 0 [ 1525.210830][ T9295] usb 38-1: new SuperSpeed USB device number 91 using vhci_hcd [ 1525.904280][T15294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.907911][T15294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.732454][T23711] atomic_op ffff88806b006198 conn xmit_atomic 0000000000000000 [ 1526.738402][T21521] usb 48-1: device descriptor read/8, error -110 [ 1527.128711][T21521] usb usb48-port1: attempt power cycle [ 1527.151213][T23702] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1527.217085][ T7881] wg2 speed is unknown, defaulting to 1000 [ 1527.221009][ T7881] syz2: Port: 1 Link DOWN [ 1527.222562][ T7881] wg2 speed is unknown, defaulting to 1000 [ 1527.444874][T23697] vhci_hcd: connection reset by peer [ 1527.447516][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1527.450297][ T12] vhci_hcd vhci_hcd.0: release socket [ 1527.452731][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1527.688876][T21521] usb usb48-port1: unable to enumerate USB device [ 1528.153082][T23721] siw: device registration error -23 [ 1528.185585][T23721] gretap0: left promiscuous mode [ 1530.268313][ T9295] usb 38-1: device descriptor read/8, error -110 [ 1531.001754][ T9295] usb usb38-port1: attempt power cycle [ 1531.167628][T23755] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1531.172551][T23755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4295'. [ 1531.619391][ T9295] usb usb38-port1: unable to enumerate USB device [ 1531.968271][ T7881] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1532.172528][ T7881] usb 5-1: Using ep0 maxpacket: 8 [ 1532.176210][T23769] atomic_op ffff888045b6d998 conn xmit_atomic 0000000000000000 [ 1532.178830][ T7881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1532.183561][ T7881] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1532.188997][ T7881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.198923][ T7881] usb 5-1: config 0 descriptor?? [ 1532.429265][ T7881] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1532.534073][T23775] set match dimension is over the limit! [ 1533.083840][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4303'. [ 1533.091535][ T5832] usb 5-1: USB disconnect, device number 46 [ 1533.244355][T23785] atomic_op ffff888045b6f998 conn xmit_atomic 0000000000000000 [ 1533.414601][T23789] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4306'. [ 1533.423477][T23789] ptrace attach of "/syz-executor exec"[5750] was attempted by "/syz-executor exec"[23789] [ 1534.698422][T23803] atomic_op ffff888026448998 conn xmit_atomic 0000000000000000 [ 1535.048837][T23796] rdma_rxe: rxe_newlink: failed to add bond0 [ 1535.795482][T23812] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1535.797551][T23812] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1535.866173][T23812] vhci_hcd vhci_hcd.0: Device attached [ 1535.933823][T23817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4312'. [ 1536.107517][T23824] siw: device registration error -23 [ 1536.138322][ T9295] usb 48-1: SetAddress Request (82) to port 0 [ 1536.149781][ T9295] usb 48-1: new SuperSpeed USB device number 82 using vhci_hcd [ 1536.335651][T23813] vhci_hcd: connection reset by peer [ 1536.343255][T20078] vhci_hcd vhci_hcd.5: stop threads [ 1536.345501][T20078] vhci_hcd vhci_hcd.5: release socket [ 1536.364796][T20078] vhci_hcd vhci_hcd.5: disconnect device [ 1537.816770][T23847] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1537.888916][ T5747] Bluetooth: hci4: sending frame failed (-49) [ 1537.893259][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1538.246815][T23850] atomic_op ffff88802b11d998 conn xmit_atomic 0000000000000000 [ 1538.370682][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4323'. [ 1538.434105][T23856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4324'. [ 1538.444510][T23856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4324'. [ 1538.554436][T23858] atomic_op ffff888014435198 conn xmit_atomic 0000000000000000 [ 1539.725847][T23880] atomic_op ffff8880762cf998 conn xmit_atomic 0000000000000000 [ 1539.750424][T23883] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1539.752513][T23883] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1539.761194][T23883] vhci_hcd vhci_hcd.0: Device attached [ 1539.823852][T23887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4334'. [ 1539.939008][T23892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4335'. [ 1539.984955][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4335'. [ 1540.405391][T21627] Process accounting resumed [ 1540.786030][T23884] vhci_hcd: connection closed [ 1540.786363][ T12] vhci_hcd vhci_hcd.5: stop threads [ 1540.791043][ T12] vhci_hcd vhci_hcd.5: release socket [ 1540.793586][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 1541.014787][ T5825] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1541.218361][ T9295] usb 48-1: device descriptor read/8, error -110 [ 1541.628216][ T9295] usb usb48-port1: attempt power cycle [ 1542.242765][ T5825] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1542.249494][ T9295] usb usb48-port1: unable to enumerate USB device [ 1542.304072][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.311773][ T5825] usb 6-1: config 0 descriptor?? [ 1542.349225][ T5863] libceph: connect (1)[c::]:6789 error -99 [ 1542.353187][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 1542.373375][ T5863] libceph: connect (1)[c::]:6789 error -99 [ 1542.375404][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 1542.423245][T23919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4343'. [ 1542.437525][T23914] ceph: No mds server is up or the cluster is laggy [ 1542.507578][T23922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4344'. [ 1542.686598][ T5863] libceph: connect (1)[c::]:6789 error -99 [ 1542.690437][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 1542.693300][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4344'. [ 1542.941282][T23929] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1542.944077][T23929] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1542.974393][T23929] vhci_hcd vhci_hcd.0: Device attached [ 1543.248254][ T9295] usb 38-1: SetAddress Request (95) to port 0 [ 1543.250382][ T9295] usb 38-1: new SuperSpeed USB device number 95 using vhci_hcd [ 1543.423063][T23931] vhci_hcd: connection reset by peer [ 1543.427961][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1543.433360][ T12] vhci_hcd vhci_hcd.0: release socket [ 1543.435160][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1543.535029][ T5825] usb 6-1: Cannot set autoneg [ 1543.537835][ T5825] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1543.564535][ T5825] usb 6-1: USB disconnect, device number 48 [ 1543.681060][T15297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1543.684318][T15297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1543.947172][T23944] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1545.942055][T23964] atomic_op ffff888013a3d998 conn xmit_atomic 0000000000000000 [ 1546.039885][T20842] Bluetooth: hci4: command 0x1003 tx timeout [ 1546.103929][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1548.177024][T24001] syz.0.4360: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1548.530582][T24001] CPU: 3 UID: 0 PID: 24001 Comm: syz.0.4360 Tainted: G L syzkaller #0 PREEMPT(full) [ 1548.530618][T24001] Tainted: [L]=SOFTLOCKUP [ 1548.530626][T24001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1548.530639][T24001] Call Trace: [ 1548.530647][T24001] [ 1548.530656][T24001] dump_stack_lvl+0x100/0x190 [ 1548.530688][T24001] warn_alloc.cold+0x94/0xa8 [ 1548.530709][T24001] ? __pfx_warn_alloc+0x10/0x10 [ 1548.530732][T24001] ? kasan_save_stack+0x3f/0x50 [ 1548.530754][T24001] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1548.530779][T24001] ? xskq_create+0x52/0x1d0 [ 1548.530845][T24001] ? xsk_setsockopt+0x743/0xab0 [ 1548.530868][T24001] ? do_sock_setsockopt+0xf3/0x1d0 [ 1548.530925][T24001] ? __sys_setsockopt+0x119/0x190 [ 1548.530945][T24001] ? __ia32_sys_setsockopt+0xbc/0x160 [ 1548.530966][T24001] ? __do_fast_syscall_32+0xe7/0x970 [ 1548.530985][T24001] ? do_fast_syscall_32+0x32/0x70 [ 1548.531006][T24001] ? xskq_create+0xfb/0x1d0 [ 1548.531029][T24001] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1548.531063][T24001] ? xskq_create+0xfb/0x1d0 [ 1548.531092][T24001] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1548.531120][T24001] ? kasan_save_track+0x14/0x30 [ 1548.531139][T24001] ? __kasan_kmalloc+0xaa/0xb0 [ 1548.531158][T24001] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1548.531185][T24001] ? xskq_create+0xfb/0x1d0 [ 1548.531207][T24001] vmalloc_user_noprof+0x9e/0xe0 [ 1548.531231][T24001] ? xskq_create+0xfb/0x1d0 [ 1548.531253][T24001] xskq_create+0xfb/0x1d0 [ 1548.531278][T24001] xsk_setsockopt+0x743/0xab0 [ 1548.531299][T24001] ? __pfx_aa_sk_perm+0x10/0x10 [ 1548.531322][T24001] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1548.531343][T24001] ? find_held_lock+0x2b/0x80 [ 1548.531366][T24001] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1548.531392][T24001] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1548.531416][T24001] do_sock_setsockopt+0xf3/0x1d0 [ 1548.531442][T24001] __sys_setsockopt+0x119/0x190 [ 1548.531467][T24001] __ia32_sys_setsockopt+0xbc/0x160 [ 1548.531484][T24001] ? __do_fast_syscall_32+0x98/0x970 [ 1548.531501][T24001] ? lockdep_hardirqs_on+0x78/0x100 [ 1548.531526][T24001] __do_fast_syscall_32+0xe7/0x970 [ 1548.531547][T24001] do_fast_syscall_32+0x32/0x70 [ 1548.531564][T24001] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1548.531587][T24001] RIP: 0023:0xf704efec [ 1548.531608][T24001] Code: Unable to access opcode bytes at 0xf704efc2. [ 1548.531617][T24001] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1548.531635][T24001] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000011b [ 1548.531688][T24001] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000029 [ 1548.531701][T24001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1548.531713][T24001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1548.531724][T24001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1548.531750][T24001] [ 1548.531759][T24001] Mem-Info: [ 1548.672704][T24001] active_anon:8364 inactive_anon:2462 isolated_anon:0 [ 1548.672704][T24001] active_file:7477 inactive_file:9540 isolated_file:0 [ 1548.672704][T24001] unevictable:1792 dirty:268 writeback:0 [ 1548.672704][T24001] slab_reclaimable:7366 slab_unreclaimable:67435 [ 1548.672704][T24001] mapped:26049 shmem:5647 pagetables:1835 [ 1548.672704][T24001] sec_pagetables:327 bounce:0 [ 1548.672704][T24001] kernel_misc_reclaimable:0 [ 1548.672704][T24001] free:22099 free_pcp:10655 free_cma:0 [ 1548.777834][T24001] Node 0 active_anon:284kB inactive_anon:64kB active_file:1040kB inactive_file:4868kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:200kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8224kB pagetables:1300kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1548.832732][T24001] Node 1 active_anon:33572kB inactive_anon:9784kB active_file:28868kB inactive_file:33292kB unevictable:3632kB isolated(anon):0kB isolated(file):0kB mapped:107196kB dirty:1068kB writeback:0kB shmem:19052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7636kB pagetables:6040kB sec_pagetables:180kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1548.889757][T24001] Node 0 DMA free:2700kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:16kB free_cma:0kB [ 1548.946637][T24001] lowmem_reserve[]: 0 280 280 280 280 [ 1548.961554][T24001] Node 0 DMA32 free:16820kB boost:24576kB min:37352kB low:40544kB high:43736kB reserved_highatomic:0KB free_highatomic:0KB active_anon:284kB inactive_anon:64kB active_file:1028kB inactive_file:4868kB unevictable:3536kB writepending:4kB zspages:292kB present:1032196kB managed:287156kB mlocked:0kB bounce:0kB free_pcp:832kB local_pcp:100kB free_cma:0kB [ 1549.005050][T24001] lowmem_reserve[]: 0 0 0 0 0 [ 1549.017934][T24001] Node 1 DMA32 free:66856kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:260KB active_anon:34180kB inactive_anon:9784kB active_file:28868kB inactive_file:33292kB unevictable:3584kB writepending:1068kB zspages:5124kB present:1048432kB managed:948212kB mlocked:48kB bounce:0kB free_pcp:38244kB local_pcp:7812kB free_cma:0kB [ 1549.091977][T24001] lowmem_reserve[]: 0 0 0 0 0 [ 1549.105256][T24001] Node 0 DMA: 145*4kB (UM) 31*8kB (UM) 7*16kB (UM) 15*32kB (UM) 6*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2700kB [ 1549.147869][T24001] Node 0 DMA32: 103*4kB (UE) 47*8kB (UME) 46*16kB (UME) 144*32kB (UME) 47*64kB (UME) 18*128kB (UME) 3*256kB (M) 1*512kB (M) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 16820kB [ 1549.183901][T24001] Node 1 DMA32: 111*4kB (UEH) 512*8kB (UEH) 195*16kB (UMEH) 30*32kB (UMEH) 12*64kB (UME) 21*128kB (E) 26*256kB (UME) 13*512kB (UME) 14*1024kB (M) 9*2048kB (UM) 1*4096kB (M) = 62252kB [ 1549.216762][T24001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1549.228031][T24001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1549.243950][T24001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1549.259942][T24001] Node 1 hugepages_total=5 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 1549.276280][T24001] 22960 total pagecache pages [ 1549.283087][T24001] 501 pages in swap cache [ 1549.289423][T24001] Free swap = 103020kB [ 1549.294723][T24001] Total swap = 124996kB [ 1549.309168][T24001] 524155 pages RAM [ 1549.314004][T24001] 0 pages HighMem/MovableOnly [ 1549.322729][T24001] 211473 pages reserved [ 1549.326982][T24001] 0 pages cma reserved [ 1549.707916][ T9295] usb 38-1: device descriptor read/8, error -110 [ 1550.290552][ T9295] usb usb38-port1: attempt power cycle [ 1550.511394][T24019] atomic_op ffff88806cfc7198 conn xmit_atomic 0000000000000000 [ 1550.660190][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.738560][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.817949][T24021] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1550.820191][T24021] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1550.825931][T24021] vhci_hcd vhci_hcd.0: Device attached [ 1550.842766][T24021] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4369'. [ 1551.998367][ T5863] usb 48-1: SetAddress Request (86) to port 0 [ 1552.000644][ T5863] usb 48-1: new SuperSpeed USB device number 86 using vhci_hcd [ 1552.629032][ T9295] usb usb38-port1: unable to enumerate USB device [ 1552.652170][T24041] fuse: fd is not a fuse device [ 1552.886337][T24032] vhci_hcd: connection reset by peer [ 1552.892750][T20078] vhci_hcd vhci_hcd.5: stop threads [ 1552.895908][T20078] vhci_hcd vhci_hcd.5: release socket [ 1552.902878][T20078] vhci_hcd vhci_hcd.5: disconnect device [ 1553.341992][T24052] atomic_op ffff888026448998 conn xmit_atomic 0000000000000000 [ 1553.689422][T24059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4380'. [ 1553.879326][T24062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4380'. [ 1553.996479][T24065] atomic_op ffff88806fadb198 conn xmit_atomic 0000000000000000 [ 1554.442544][T24073] wg2 speed is unknown, defaulting to 1000 [ 1555.318125][T24075] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4385'. [ 1555.323906][T24075] ptrace attach of "/syz-executor exec"[5753] was attempted by "/syz-executor exec"[24075] [ 1557.058339][ T5863] usb 48-1: device descriptor read/8, error -110 [ 1557.201604][T24093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4389'. [ 1557.294864][T24093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4389'. [ 1557.572928][ T5863] usb usb48-port1: attempt power cycle [ 1557.685961][T24105] atomic_op ffff888025f11998 conn xmit_atomic 0000000000000000 [ 1558.628852][ T5863] usb usb48-port1: unable to enumerate USB device [ 1560.009349][T24126] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1560.012403][T24126] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1560.026766][T24126] vhci_hcd vhci_hcd.0: Device attached [ 1560.100734][T24126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4397'. [ 1560.169761][T24139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4399'. [ 1560.186376][T24137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4399'. [ 1560.288822][ T5863] usb 38-1: SetAddress Request (99) to port 0 [ 1560.290982][ T5863] usb 38-1: new SuperSpeed USB device number 99 using vhci_hcd [ 1560.364207][T24131] vhci_hcd: connection closed [ 1560.365394][T20078] vhci_hcd vhci_hcd.0: stop threads [ 1560.368986][T20078] vhci_hcd vhci_hcd.0: release socket [ 1560.371471][T20078] vhci_hcd vhci_hcd.0: disconnect device [ 1560.930730][ T5863] usb 38-1: enqueue for inactive port 0 [ 1561.548415][T24150] atomic_op ffff888026448998 conn xmit_atomic 0000000000000000 [ 1561.977802][ T5863] usb usb38-port1: attempt power cycle [ 1562.444655][T24178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4409'. [ 1562.470051][T24178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4409'. [ 1562.792442][T24190] overlayfs: failed to clone lowerpath [ 1562.798568][T21521] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1562.853587][T24195] overlayfs: failed to clone lowerpath [ 1562.949668][T21521] usb 10-1: Using ep0 maxpacket: 32 [ 1562.957669][T21521] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.964651][T21521] usb 10-1: config 0 has no interfaces? [ 1562.975637][T21521] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1562.979020][T21521] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1562.992233][T21521] usb 10-1: Product: syz [ 1562.994418][T21521] usb 10-1: Manufacturer: syz [ 1562.996335][T21521] usb 10-1: SerialNumber: syz [ 1563.058809][T21521] usb 10-1: config 0 descriptor?? [ 1563.073975][T24199] ptrace attach of "/syz-executor exec"[5746] was attempted by "/syz-executor exec"[24199] [ 1563.176346][ T5863] usb usb38-port1: unable to enumerate USB device [ 1564.266719][ T5825] usb 10-1: USB disconnect, device number 25 [ 1564.323605][T24217] atomic_op ffff88806b8f8198 conn xmit_atomic 0000000000000000 [ 1565.217822][T24225] geneve2: entered allmulticast mode [ 1565.653183][T24233] create_pit_timer: 4 callbacks suppressed [ 1565.653202][T24233] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1567.223493][T24250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4423'. [ 1567.254277][T24254] atomic_op ffff88804b1ff198 conn xmit_atomic 0000000000000000 [ 1567.540960][T24264] atomic_op ffff888068c36198 conn xmit_atomic 0000000000000000 [ 1567.805644][T24262] wg2 speed is unknown, defaulting to 1000 [ 1569.354306][T24273] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1569.911043][T24288] overlayfs: failed to clone lowerpath [ 1569.965627][T24289] overlayfs: failed to clone lowerpath [ 1570.088272][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4435'. [ 1570.182448][T24295] fuse: fd is not a fuse device [ 1570.451895][T24299] atomic_op ffff888027124998 conn xmit_atomic 0000000000000000 [ 1570.667762][T24303] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1570.669009][T24305] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1570.711301][T24306] Bluetooth: hci6: sending frame failed (-49) [ 1570.720594][ T5762] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1571.008126][T24310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4442'. [ 1571.025264][T24310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4442'. [ 1571.327460][T24320] fuse: fd is not a fuse device [ 1571.402475][T24322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4447'. [ 1571.410166][T24322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4447'. [ 1571.538318][T24306] Bluetooth: hci4: command 0x1003 tx timeout [ 1571.542009][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1571.727685][T24332] netlink: 'syz.3.4450': attribute type 13 has an invalid length. [ 1571.780725][T24329] xt_bpf: check failed: parse error [ 1572.822769][T20842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1573.870778][T24346] libceph: resolve ' [ 1573.870778][T24346] -&fYǝa2i [ 1573.870778][T24346] .?&*&' (ret=-3): failed [ 1574.029092][T24350] overlayfs: failed to resolve './cgroup': -2 [ 1574.159614][T24346] overlayfs: failed to resolve './file0': -2 [ 1574.951316][T24363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4456'. [ 1575.052044][T24363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4456'. [ 1575.221980][T24372] atomic_op ffff88804bbf7198 conn xmit_atomic 0000000000000000 [ 1575.307109][T24370] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1575.872010][T24380] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1575.913458][T11056] Bluetooth: hci5: Frame reassembly failed (-84) [ 1576.062681][T24384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1576.076702][T24384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1576.082469][T24384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1576.290884][T24394] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4465'. [ 1577.066207][T24404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4468'. [ 1577.141644][T24404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4468'. [ 1577.383827][T24408] atomic_op ffff888013e77198 conn xmit_atomic 0000000000000000 [ 1577.428314][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1577.430547][T24306] Bluetooth: hci4: command 0x1003 tx timeout [ 1577.948402][T24306] Bluetooth: hci5: command 0x1003 tx timeout [ 1577.956330][ T5747] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1579.471185][T24413] pim6reg: entered allmulticast mode [ 1579.485188][T24413] team0: entered allmulticast mode [ 1579.487404][T24413] team_slave_0: entered allmulticast mode [ 1579.490008][T24413] team_slave_1: entered allmulticast mode [ 1579.491937][T24413] bond0: entered allmulticast mode [ 1579.493780][T24413] e: entered allmulticast mode [ 1579.495400][T24413] bond_slave_1: entered allmulticast mode [ 1579.497579][T24413] bridge0: entered allmulticast mode [ 1579.503035][T24413] team0: left allmulticast mode [ 1579.504799][T24413] team_slave_0: left allmulticast mode [ 1579.506592][T24413] team_slave_1: left allmulticast mode [ 1579.508655][T24413] bond0: left allmulticast mode [ 1579.510406][T24413] e: left allmulticast mode [ 1579.512033][T24413] bond_slave_1: left allmulticast mode [ 1579.513876][T24413] bridge0: left allmulticast mode [ 1579.515916][T24413] pim6reg: left allmulticast mode [ 1579.548439][T24422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4472'. [ 1579.832638][T24425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1579.845114][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1580.025698][T24432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4477'. [ 1580.034827][T24432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4477'. [ 1580.150621][T24439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4479'. [ 1580.156834][T24439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4479'. [ 1580.354453][T24445] wg2 speed is unknown, defaulting to 1000 [ 1580.686400][T24448] atomic_op ffff8880762c3998 conn xmit_atomic 0000000000000000 [ 1581.981027][T24471] __nla_validate_parse: 1 callbacks suppressed [ 1581.981049][T24471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4488'. [ 1582.000818][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4488'. [ 1582.148541][T24473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4489'. [ 1582.245863][ T5747] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1582.359476][T24478] atomic_op ffff88806b580998 conn xmit_atomic 0000000000000000 [ 1585.188670][T24501] atomic_op ffff888013ef0998 conn xmit_atomic 0000000000000000 [ 1586.591615][T24515] atomic_op ffff88806ba43198 conn xmit_atomic 0000000000000000 [ 1588.064466][T24552] atomic_op ffff88806c759198 conn xmit_atomic 0000000000000000 [ 1588.209045][T21521] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1588.380124][T21521] usb 6-1: Using ep0 maxpacket: 32 [ 1588.385313][T21521] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.392741][T21521] usb 6-1: config 0 has no interfaces? [ 1588.398581][T21521] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1588.401911][T21521] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1588.404968][T21521] usb 6-1: Product: syz [ 1588.406485][T21521] usb 6-1: Manufacturer: syz [ 1588.407989][T21521] usb 6-1: SerialNumber: syz [ 1588.420889][T21521] usb 6-1: config 0 descriptor?? [ 1589.479092][T24571] atomic_op ffff888013dab998 conn xmit_atomic 0000000000000000 [ 1589.532323][T24572] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4513'. [ 1590.172793][T24584] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1590.174992][T24584] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1590.286426][T24584] vhci_hcd vhci_hcd.0: Device attached [ 1590.516829][T24597] fuse: fd is not a fuse device [ 1590.558958][T21521] usb 48-1: SetAddress Request (90) to port 0 [ 1590.567238][T21521] usb 48-1: new SuperSpeed USB device number 90 using vhci_hcd [ 1590.660750][ T5863] usb 6-1: USB disconnect, device number 49 [ 1590.703538][T24585] vhci_hcd: connection reset by peer [ 1590.722888][T20078] vhci_hcd vhci_hcd.5: stop threads [ 1590.726004][T20078] vhci_hcd vhci_hcd.5: release socket [ 1590.728756][T20078] vhci_hcd vhci_hcd.5: disconnect device [ 1591.010615][T24605] overlayfs: failed to clone lowerpath [ 1591.252095][T24608] overlay: Unknown parameter 'lowerd' [ 1591.984578][T24622] atomic_op ffff888025de0998 conn xmit_atomic 0000000000000000 [ 1593.286170][T24641] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1593.310321][T15298] Bluetooth: hci4: Frame reassembly failed (-84) [ 1593.333871][T24644] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1595.383237][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1595.383262][T24306] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1595.516079][T24661] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1595.618395][T21521] usb 48-1: device descriptor read/8, error -110 [ 1596.181571][T24671] wg2 speed is unknown, defaulting to 1000 [ 1597.008355][ T42] audit: type=1326 audit(1783344283.586:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24668 comm="syz.3.4536" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 1597.017563][T21521] usb usb48-port1: attempt power cycle [ 1598.168991][T21521] usb usb48-port1: unable to enumerate USB device [ 1598.797089][T24689] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1598.799953][T24689] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1598.811090][T24689] vhci_hcd vhci_hcd.0: Device attached [ 1598.909216][T24689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4542'. [ 1599.078248][T16909] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1599.088363][ T7881] usb 40-1: SetAddress Request (16) to port 0 [ 1599.090382][ T7881] usb 40-1: new SuperSpeed USB device number 16 using vhci_hcd [ 1599.230258][T16909] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1599.234971][T16909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.239872][T16909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.244460][T16909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1599.251220][T16909] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1599.255221][T16909] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1599.258941][T16909] usb 5-1: Manufacturer: syz [ 1599.263703][T16909] usb 5-1: config 0 descriptor?? [ 1599.659169][T24693] vhci_hcd: connection reset by peer [ 1599.661256][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1599.663475][ T12] vhci_hcd vhci_hcd.1: release socket [ 1599.665755][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1599.682939][T16909] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 1599.687991][T16909] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1599.768423][T24703] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4545'. [ 1599.783708][T24703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4545'. [ 1600.004958][T24708] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1600.027294][T24708] block nbd0: shutting down sockets [ 1600.377011][T24713] fuse: fd is not a fuse device [ 1600.625542][T24718] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1600.628795][T24718] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1600.632941][T24718] vhci_hcd vhci_hcd.0: Device attached [ 1601.388329][T24719] vhci_hcd: connection closed [ 1601.388538][ T5823] vhci_hcd vhci_hcd.1: stop threads [ 1601.425276][ T5823] vhci_hcd vhci_hcd.1: release socket [ 1601.428283][ T5823] vhci_hcd vhci_hcd.1: disconnect device [ 1602.208266][T16909] usb 5-1: reset high-speed USB device number 47 using dummy_hcd [ 1602.962883][T24743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4554'. [ 1602.984726][T24743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4554'. [ 1603.039077][ T6140] usb 5-1: USB disconnect, device number 47 [ 1603.431833][T24747] atomic_op ffff88804ade9998 conn xmit_atomic 0000000000000000 [ 1603.454204][T24748] atomic_op ffff888027124998 conn xmit_atomic 0000000000000000 [ 1603.632486][T24756] overlayfs: overlapping lowerdir path [ 1603.697962][T24758] overlayfs: overlapping lowerdir path [ 1604.021115][T24763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4564'. [ 1604.055139][T24763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4564'. [ 1604.178307][ T7881] usb 40-1: device descriptor read/8, error -110 [ 1604.461071][T24768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4565'. [ 1604.506774][T24768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4565'. [ 1604.869726][T24781] atomic_op ffff888013dab998 conn xmit_atomic 0000000000000000 [ 1604.890124][T24782] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1604.892788][T24782] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1604.907298][T24782] vhci_hcd vhci_hcd.0: Device attached [ 1604.910908][T24777] atomic_op ffff88806abdf998 conn xmit_atomic 0000000000000000 [ 1604.946561][T24782] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4563'. [ 1604.962110][ T7881] usb usb40-port1: attempt power cycle [ 1605.095278][T24788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4570'. [ 1605.128726][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4570'. [ 1605.139875][T24783] vhci_hcd: connection closed [ 1605.140562][ T5823] vhci_hcd vhci_hcd.5: stop threads [ 1605.145867][ T5823] vhci_hcd vhci_hcd.5: release socket [ 1605.150277][ T5823] vhci_hcd vhci_hcd.5: disconnect device [ 1605.188774][T21521] usb 48-1: enqueue for inactive port 0 [ 1605.292021][T24790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4572'. [ 1605.303845][T24790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4572'. [ 1605.526678][T24795] overlayfs: overlapping lowerdir path [ 1605.607149][T24797] overlayfs: overlapping lowerdir path [ 1605.679484][T21521] usb usb48-port1: attempt power cycle [ 1606.055448][T24801] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1606.057344][T24801] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1606.060699][T24801] vhci_hcd vhci_hcd.0: Device attached [ 1606.300068][T21521] usb 48-1: SetAddress Request (97) to port 0 [ 1606.308319][T21521] usb 48-1: new SuperSpeed USB device number 97 using vhci_hcd [ 1606.329593][T24806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4575'. [ 1606.342806][ T7881] usb usb40-port1: unable to enumerate USB device [ 1606.453767][T24814] atomic_op ffff88802b11e998 conn xmit_atomic 0000000000000000 [ 1606.516466][T24817] atomic_op ffff88806b6af998 conn xmit_atomic 0000000000000000 [ 1606.617636][T24802] vhci_hcd: connection reset by peer [ 1606.623181][ T5823] vhci_hcd vhci_hcd.5: stop threads [ 1606.627753][ T5823] vhci_hcd vhci_hcd.5: release socket [ 1606.633979][ T5823] vhci_hcd vhci_hcd.5: disconnect device [ 1606.732681][T24827] atomic_op ffff88804d04a198 conn xmit_atomic 0000000000000000 [ 1607.477428][T24840] rdma_rxe: rxe_newlink: failed to add lo [ 1608.191246][T24847] atomic_op ffff888027122998 conn xmit_atomic 0000000000000000 [ 1609.022417][T24856] overlayfs: failed to clone lowerpath [ 1609.100098][T24861] overlayfs: failed to clone lowerpath [ 1609.259269][T24862] atomic_op ffff88802b11d198 conn xmit_atomic 0000000000000000 [ 1609.377997][T24865] atomic_op ffff88801cb21198 conn xmit_atomic 0000000000000000 [ 1609.581253][T24867] fuse: fd is not a fuse device [ 1609.658274][T24868] pim6reg: entered allmulticast mode [ 1609.794946][T24874] __nla_validate_parse: 9 callbacks suppressed [ 1609.794961][T24874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4598'. [ 1609.806446][T24874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4598'. [ 1610.066284][T24885] pim6reg: left allmulticast mode [ 1610.534045][T24893] overlayfs: overlapping lowerdir path [ 1610.642498][T24894] overlayfs: overlapping lowerdir path [ 1611.378656][T21521] usb 48-1: device descriptor read/8, error -110 [ 1611.453365][T24899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4604'. [ 1611.461971][T24899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4604'. [ 1611.572064][T21521] usb usb48-port1: unable to enumerate USB device [ 1611.832137][T24901] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1611.856362][T24306] Bluetooth: hci4: sending frame failed (-49) [ 1611.863624][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1612.101606][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.103740][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.167641][T24918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4608'. [ 1613.229458][T24918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4608'. [ 1614.353525][T24929] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1614.363790][T24933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4615'. [ 1614.377402][T15300] Bluetooth: hci4: Frame reassembly failed (-84) [ 1614.383824][T24933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4615'. [ 1614.445377][T24935] atomic_op ffff88804dc5b198 conn xmit_atomic 0000000000000000 [ 1614.494667][T24937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4617'. [ 1614.504698][T24937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4617'. [ 1615.499301][T24958] __nla_validate_parse: 4 callbacks suppressed [ 1615.499322][T24958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4624'. [ 1615.517186][T24958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4624'. [ 1616.128341][T24966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4628'. [ 1616.135536][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4628'. [ 1616.418404][T24306] Bluetooth: hci4: command 0x1003 tx timeout [ 1616.418440][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1618.494191][T24977] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 1618.756088][T24986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4633'. [ 1618.930885][T24986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4633'. [ 1619.592042][T25005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4637'. [ 1619.643704][T25005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4637'. [ 1619.654485][T25000] input: syz1 as /devices/virtual/input/input52 [ 1619.729406][T25006] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1619.778484][T15297] Bluetooth: hci4: Frame reassembly failed (-84) [ 1619.868851][T25018] atomic_op ffff8880531b7998 conn xmit_atomic 0000000000000000 [ 1619.875991][T25019] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1619.905956][ T5747] Bluetooth: hci5: sending frame failed (-49) [ 1619.911589][T24306] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1619.980790][T25023] atomic_op ffff88804e486998 conn xmit_atomic 0000000000000000 [ 1620.037110][T25027] atomic_op ffff8880267bd198 conn xmit_atomic 0000000000000000 [ 1620.125289][T25031] atomic_op ffff8880143cb198 conn xmit_atomic 0000000000000000 [ 1620.612108][T25051] overlayfs: failed to clone lowerpath [ 1621.655158][T25070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4649'. [ 1621.663044][T25070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4649'. [ 1621.778437][T24306] Bluetooth: hci4: command 0x1003 tx timeout [ 1621.780027][T25075] atomic_op ffff888050aa2198 conn xmit_atomic 0000000000000000 [ 1621.785855][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1621.823361][T25073] atomic_op ffff888045634998 conn xmit_atomic 0000000000000000 [ 1622.896726][T25090] overlayfs: failed to clone lowerpath [ 1623.220903][T25101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4659'. [ 1623.243873][T25101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4659'. [ 1623.568797][T25107] atomic_op ffff8880267bf198 conn xmit_atomic 0000000000000000 [ 1624.169816][ T42] audit: type=1800 audit(1783344310.746:1289): pid=25112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4662" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1625.190728][T25123] overlayfs: failed to clone lowerpath [ 1625.876094][T25150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4669'. [ 1625.904351][T25150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4669'. [ 1627.870341][T25187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4672'. [ 1627.904505][T25187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4672'. [ 1628.676384][T25199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4678'. [ 1628.684088][T25199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4678'. [ 1629.433293][T25211] pim6reg: entered allmulticast mode [ 1629.575404][T25211] team0: entered allmulticast mode [ 1629.577912][T25211] team_slave_0: entered allmulticast mode [ 1629.580560][T25211] team_slave_1: entered allmulticast mode [ 1629.589222][T25211] team0: left allmulticast mode [ 1629.589889][T25208] capability: warning: `syz.0.4680' uses 32-bit capabilities (legacy support in use) [ 1629.591415][T25211] team_slave_0: left allmulticast mode [ 1629.598497][T25211] team_slave_1: left allmulticast mode [ 1629.601931][T25211] pim6reg: left allmulticast mode [ 1629.662990][T25215] fuse: fd is not a fuse device [ 1630.483715][T25229] atomic_op ffff88801cb21198 conn xmit_atomic 0000000000000000 [ 1630.733245][T25233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1630.742481][T25233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1631.443951][T25240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4689'. [ 1631.452654][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4689'. [ 1631.508482][T25244] netlink: 'syz.3.4697': attribute type 1 has an invalid length. [ 1631.515925][T25244] netlink: 'syz.3.4697': attribute type 2 has an invalid length. [ 1632.323758][T25258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4694'. [ 1632.338689][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4694'. [ 1632.841932][T25268] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1632.844252][T25268] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1632.882255][T25268] vhci_hcd vhci_hcd.0: Device attached [ 1632.949180][T25272] siw: device registration error -23 [ 1632.959912][T25268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4695'. [ 1633.103166][T25272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.110308][T25272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.139906][T25272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1633.148986][T21521] usb 40-1: SetAddress Request (20) to port 0 [ 1633.152062][T21521] usb 40-1: new SuperSpeed USB device number 20 using vhci_hcd [ 1633.376482][T25272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1633.400029][T25272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1633.418984][T25269] vhci_hcd: connection reset by peer [ 1633.431405][ T5823] vhci_hcd vhci_hcd.1: stop threads [ 1633.434325][ T5823] vhci_hcd vhci_hcd.1: release socket [ 1633.451404][ T5823] vhci_hcd vhci_hcd.1: disconnect device [ 1633.498499][T25272] veth1_macvtap: left promiscuous mode [ 1633.505282][T25272] veth0_macvtap: left promiscuous mode [ 1633.529931][T25272] veth0_macvtap: entered promiscuous mode [ 1633.534876][T25272] veth1_macvtap: entered promiscuous mode [ 1633.560452][T25272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1633.604653][T25272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1633.627325][T25272] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1633.919342][T11056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.921665][T11056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.985204][T11056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.987490][T11056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1634.201902][T25275] pim6reg: entered allmulticast mode [ 1634.209742][T25278] team0: entered allmulticast mode [ 1634.211501][T25278] team_slave_0: entered allmulticast mode [ 1634.213408][T25278] team_slave_1: entered allmulticast mode [ 1634.221291][T25280] team0: left allmulticast mode [ 1634.222950][T25280] team_slave_0: left allmulticast mode [ 1634.226403][T25280] team_slave_1: left allmulticast mode [ 1634.230112][T25280] pim6reg: left allmulticast mode [ 1634.242752][ T5823] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.249889][T25290] atomic_op ffff8880747f2998 conn xmit_atomic 0000000000000000 [ 1634.254136][ T5823] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.259919][ T5823] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.269380][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1634.273549][ T5823] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.046574][T25305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4705'. [ 1635.050338][T25305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4705'. [ 1635.794724][T25307] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1635.796886][T25307] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1635.861383][T25307] vhci_hcd vhci_hcd.0: Device attached [ 1635.916303][T25307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4703'. [ 1636.011262][T25320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4708'. [ 1636.040024][T25320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4708'. [ 1636.128305][T21627] usb 48-1: SetAddress Request (98) to port 0 [ 1636.133957][T21627] usb 48-1: new SuperSpeed USB device number 98 using vhci_hcd [ 1636.200065][T25311] vhci_hcd: connection reset by peer [ 1636.208125][T10601] vhci_hcd vhci_hcd.5: stop threads [ 1636.219943][T10601] vhci_hcd vhci_hcd.5: release socket [ 1636.227128][T10601] vhci_hcd vhci_hcd.5: disconnect device [ 1636.993769][T25334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4710'. [ 1637.209800][T25338] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1637.469344][T25345] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1637.471898][T25345] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1637.482453][T25345] vhci_hcd vhci_hcd.0: Device attached [ 1637.525952][T25345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4713'. [ 1637.608109][T25349] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1637.781350][ T9295] usb 38-1: SetAddress Request (103) to port 0 [ 1637.788322][ T9295] usb 38-1: new SuperSpeed USB device number 103 using vhci_hcd [ 1638.028374][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1638.094354][T25346] vhci_hcd: connection reset by peer [ 1638.106207][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1638.109494][ T12] vhci_hcd vhci_hcd.0: release socket [ 1638.119186][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1638.165316][T25355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4717'. [ 1638.173211][T25355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4717'. [ 1638.188566][T21521] usb 40-1: device descriptor read/8, error -110 [ 1638.579145][T21521] usb usb40-port1: attempt power cycle [ 1638.985792][T25364] atomic_op ffff88804ade8198 conn xmit_atomic 0000000000000000 [ 1639.127594][T25360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.130739][T25360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.159353][T21521] usb usb40-port1: unable to enumerate USB device [ 1639.298564][ T7881] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1639.420745][T25360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1639.451833][T25360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1639.470636][ T7881] usb 10-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1639.475910][ T7881] usb 10-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1639.479885][ T7881] usb 10-1: Product: syz [ 1639.487629][ T7881] usb 10-1: config 0 descriptor?? [ 1639.502182][ T7881] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1639.568861][ T7881] usb 10-1: Detected FT232H [ 1639.622905][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1639.804600][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.808417][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.812134][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.815812][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.250018][T25382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4726'. [ 1640.260080][T25382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4726'. [ 1640.389258][T25384] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1640.413220][T15297] Bluetooth: hci4: Frame reassembly failed (-84) [ 1640.416198][T15297] Bluetooth: hci4: Frame reassembly failed (-84) [ 1640.419663][T15297] Bluetooth: hci4: Frame reassembly failed (-84) [ 1640.525150][T25386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4725'. [ 1641.218329][T21627] usb 48-1: device descriptor read/8, error -110 [ 1641.621676][T21627] usb usb48-port1: attempt power cycle [ 1641.739805][T25394] overlayfs: missing 'lowerdir' [ 1642.199201][T21627] usb usb48-port1: unable to enumerate USB device [ 1642.424395][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1642.520265][ T7881] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1642.577542][T25408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4735'. [ 1642.585310][T25408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4735'. [ 1642.597181][ T7881] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1642.607589][ T7881] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1642.614489][ T7881] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1642.624843][ T7881] usb 10-1: USB disconnect, device number 26 [ 1642.636238][ T7881] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1642.641230][ T7881] ftdi_sio 10-1:0.0: device disconnected [ 1642.828348][ T9295] usb 38-1: device descriptor read/8, error -110 [ 1643.235155][T25428] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1643.237823][T25428] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1643.245265][T25428] vhci_hcd vhci_hcd.0: Device attached [ 1643.278102][T25428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4737'. [ 1643.378296][ T9295] usb 38-1: SetAddress Request (104) to port 0 [ 1643.398275][ T9295] usb 38-1: new SuperSpeed USB device number 104 using vhci_hcd [ 1643.538475][T25442] overlayfs: missing 'lowerdir' [ 1643.594041][T25444] overlayfs: failed to clone lowerpath [ 1643.766494][T25446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4746'. [ 1643.782638][T25446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4746'. [ 1644.197217][ T42] audit: type=1326 audit(1783344330.776:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.4741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1644.212806][T25429] vhci_hcd: connection reset by peer [ 1644.215327][ T5823] vhci_hcd vhci_hcd.0: stop threads [ 1644.217534][ T5823] vhci_hcd vhci_hcd.0: release socket [ 1644.220032][ T5823] vhci_hcd vhci_hcd.0: disconnect device [ 1644.229846][ T42] audit: type=1326 audit(1783344330.776:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.4741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1644.245495][ T42] audit: type=1326 audit(1783344330.776:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.4741" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1644.248926][T25451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4748'. [ 1644.254346][ T42] audit: type=1326 audit(1783344330.776:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.4741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1644.265691][ T42] audit: type=1326 audit(1783344330.776:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.4741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1644.273785][ T42] audit: type=1326 audit(1783344330.776:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.4741" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1644.275886][T25451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4748'. [ 1644.281670][ T42] audit: type=1326 audit(1783344330.776:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.4741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1644.281700][ T42] audit: type=1326 audit(1783344330.776:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.4741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1644.281721][ T42] audit: type=1326 audit(1783344330.776:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.4741" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1644.281746][ T42] audit: type=1326 audit(1783344330.776:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.4741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1644.443536][T25453] input: syz1 as /devices/virtual/input/input54 [ 1644.694562][T25462] netlink: 'syz.3.4752': attribute type 13 has an invalid length. [ 1645.594147][T25478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4756'. [ 1645.604592][T25478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4756'. [ 1645.759512][T25480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4757'. [ 1645.766894][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4757'. [ 1647.366647][T25496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4762'. [ 1648.508718][ T9295] usb 38-1: device descriptor read/8, error -110 [ 1648.619482][ T9295] usb usb38-port1: attempt power cycle [ 1648.779585][T25512] overlay: Unknown parameter '/' [ 1649.208249][ T9295] usb usb38-port1: unable to enumerate USB device [ 1649.440678][T25520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4767'. [ 1649.447036][T25520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4767'. [ 1649.569589][T25525] atomic_op ffff888052d6c998 conn xmit_atomic 0000000000000000 [ 1650.889872][T25533] tmpfs: Unknown parameter '_mY1ɪ\`uX' [ 1650.905735][T24306] Bluetooth: hci4: sending frame failed (-49) [ 1650.912360][T20842] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1651.917975][T25543] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1651.920045][T25543] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1651.923986][T25543] vhci_hcd vhci_hcd.0: Device attached [ 1651.925191][T25548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4778'. [ 1651.934288][T25548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4778'. [ 1652.114812][T25556] overlay: Unknown parameter '/' [ 1652.506594][ T9295] usb 38-1: SetAddress Request (107) to port 0 [ 1652.512816][ T9295] usb 38-1: new SuperSpeed USB device number 107 using vhci_hcd [ 1652.758492][T25544] vhci_hcd: connection reset by peer [ 1652.923776][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1652.954809][ T12] vhci_hcd vhci_hcd.0: release socket [ 1652.958604][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1653.194963][T25556] overlayfs: failed to clone lowerpath [ 1653.253973][T25562] atomic_op ffff88802b11f998 conn xmit_atomic 0000000000000000 [ 1655.019399][T25581] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1655.154094][T25585] atomic_op ffff8880267bf998 conn xmit_atomic 0000000000000000 [ 1655.229794][T25588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4789'. [ 1656.034802][T25594] overlay: Unknown parameter '/' [ 1656.425867][T25599] atomic_op ffff88802b1da998 conn xmit_atomic 0000000000000000 [ 1657.037257][T25603] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4793'. [ 1657.316584][T25609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4792'. [ 1657.647512][ T9295] usb 38-1: device descriptor read/8, error -110 [ 1658.048856][ T9295] usb usb38-port1: attempt power cycle [ 1658.638780][ T9295] usb usb38-port1: unable to enumerate USB device [ 1659.633955][ T6140] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1660.329648][ T6140] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 1660.332463][ T6140] usb 6-1: config 0 has no interface number 1 [ 1660.334819][ T6140] usb 6-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1660.338360][ T6140] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1660.341958][ T6140] usb 6-1: config 0 interface 199 has no altsetting 0 [ 1660.346750][ T6140] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1660.349776][ T6140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1660.352540][ T6140] usb 6-1: SerialNumber: syz [ 1660.357318][ T6140] usb 6-1: config 0 descriptor?? [ 1660.357436][T25635] atomic_op ffff888013b72198 conn xmit_atomic 0000000000000000 [ 1660.453304][T25637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4800'. [ 1660.685165][ T6140] uvcvideo 6-1:0.199: Found UVC 0.00 device (0002:0000) [ 1660.696620][ T6140] uvcvideo 6-1:0.199: No valid video chain found. [ 1660.945590][ T6140] usb 6-1: USB disconnect, device number 50 [ 1661.386602][T25639] atomic_op ffff8880575d5998 conn xmit_atomic 0000000000000000 [ 1661.574820][T25649] netlink: 'syz.0.4806': attribute type 1 has an invalid length. [ 1661.577461][T25649] netlink: 'syz.0.4806': attribute type 2 has an invalid length. [ 1661.669157][T25651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4805'. [ 1662.916406][T25662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4809'. [ 1663.222414][T25664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4809'. [ 1664.366966][T25686] atomic_op ffff888025c9e198 conn xmit_atomic 0000000000000000 [ 1664.650309][T25689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4817'. [ 1664.665713][T25689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4817'. [ 1664.921577][T25697] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1664.923761][T25697] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1664.927116][T25697] vhci_hcd vhci_hcd.0: Device attached [ 1665.218309][ T9295] usb 48-1: SetAddress Request (102) to port 0 [ 1665.220347][ T9295] usb 48-1: new SuperSpeed USB device number 102 using vhci_hcd [ 1665.236337][T25698] vhci_hcd: connection closed [ 1665.236706][ T12] vhci_hcd vhci_hcd.5: stop threads [ 1665.241354][ T12] vhci_hcd vhci_hcd.5: release socket [ 1665.243693][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 1665.248235][ T9295] usb 48-1: enqueue for inactive port 0 [ 1665.659674][ T9295] usb usb48-port1: attempt power cycle [ 1666.251106][ T9295] usb usb48-port1: unable to enumerate USB device [ 1666.258328][T25707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4820'. [ 1666.766495][T25707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4820'. [ 1667.058472][T24306] Bluetooth: hci3: command 0x0406 tx timeout [ 1668.384274][T25731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4827'. [ 1668.402834][T25734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4826'. [ 1668.409628][T25731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4827'. [ 1668.515907][T25737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4828'. [ 1668.539701][T25737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4828'. [ 1668.550792][T25739] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1668.553499][T25739] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1668.582339][T25739] vhci_hcd vhci_hcd.0: Device attached [ 1668.754033][T25745] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1668.978343][ T9295] usb 48-1: SetAddress Request (106) to port 0 [ 1668.987431][ T9295] usb 48-1: new SuperSpeed USB device number 106 using vhci_hcd [ 1669.353444][T25751] atomic_op ffff888068c34198 conn xmit_atomic 0000000000000000 [ 1669.364441][T25741] vhci_hcd: connection reset by peer [ 1669.667177][ T5823] vhci_hcd vhci_hcd.5: stop threads [ 1669.669243][ T5823] vhci_hcd vhci_hcd.5: release socket [ 1669.673138][ T5823] vhci_hcd vhci_hcd.5: disconnect device [ 1670.390708][T25753] kAFS: unable to lookup cell '/,cL' [ 1671.161121][T25770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4837'. [ 1671.170836][T25770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4837'. [ 1671.216347][T25772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4838'. [ 1672.995119][T25781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4839'. [ 1673.002504][T25781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4839'. [ 1673.545745][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.548581][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.535661][T25796] atomic_op ffff888014435198 conn xmit_atomic 0000000000000000 [ 1674.568422][ T9295] usb 48-1: device descriptor read/8, error -110 [ 1674.980181][ T9295] usb usb48-port1: attempt power cycle [ 1675.827187][T25799] siw: device registration error -23 [ 1675.874551][ T9295] usb usb48-port1: unable to enumerate USB device [ 1677.341121][T25823] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4850'. [ 1677.954243][T25822] netlink: 'syz.5.4849': attribute type 2 has an invalid length. [ 1677.971435][T25822] No source specified [ 1678.119955][T25832] atomic_op ffff8880255b2198 conn xmit_atomic 0000000000000000 [ 1679.304690][T25844] atomic_op ffff88804ade9998 conn xmit_atomic 0000000000000000 [ 1679.396101][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 1679.396137][ T42] audit: type=1326 audit(1783344365.876:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25841 comm="syz.1.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1679.458743][ T42] audit: type=1326 audit(1783344365.876:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25841 comm="syz.1.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1679.488290][T25847] tmpfs: Bad value for 'mpol' [ 1679.490142][ T42] audit: type=1326 audit(1783344365.895:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25841 comm="syz.1.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1679.502242][ T42] audit: type=1326 audit(1783344365.895:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25841 comm="syz.1.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1679.512114][ T42] audit: type=1326 audit(1783344365.895:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25841 comm="syz.1.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1679.519007][ T42] audit: type=1326 audit(1783344365.895:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25841 comm="syz.1.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1679.526289][ T42] audit: type=1326 audit(1783344365.895:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25841 comm="syz.1.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1679.533277][ T42] audit: type=1326 audit(1783344365.895:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25841 comm="syz.1.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1679.540243][ T42] audit: type=1326 audit(1783344365.895:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25841 comm="syz.1.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1679.547181][ T42] audit: type=1326 audit(1783344365.904:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25841 comm="syz.1.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 1679.673475][T25856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4860'. [ 1679.683363][T25856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4860'. [ 1679.720985][T25008] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1680.377586][T25008] usb 5-1: Using ep0 maxpacket: 8 [ 1680.860469][T25008] usb 5-1: config 0 has no interfaces? [ 1680.873629][T25008] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1680.876922][T25008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.879527][T25008] usb 5-1: Product: syz [ 1680.880921][T25008] usb 5-1: Manufacturer: syz [ 1680.882417][T25008] usb 5-1: SerialNumber: syz [ 1680.887613][T25008] usb 5-1: config 0 descriptor?? [ 1681.794113][T25882] atomic_op ffff8880747f2198 conn xmit_atomic 0000000000000000 [ 1682.437030][T25891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4870'. [ 1682.443640][T25891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4870'. [ 1682.707204][ T29] usb 5-1: USB disconnect, device number 48 [ 1682.820727][T25897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4872'. [ 1682.840725][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4872'. [ 1684.167728][T25908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4876'. [ 1684.203378][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4876'. [ 1684.794063][T25925] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1684.796164][T25925] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1684.819747][T25925] vhci_hcd vhci_hcd.0: Device attached [ 1684.873721][T25929] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1684.876980][T25929] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1684.891953][T25929] vhci_hcd vhci_hcd.0: Device attached [ 1684.982295][T25934] pim6reg: entered allmulticast mode [ 1685.063486][T25936] pim6reg: left allmulticast mode [ 1685.085192][ T29] usb 38-1: SetAddress Request (111) to port 0 [ 1685.092825][ T29] usb 38-1: new SuperSpeed USB device number 111 using vhci_hcd [ 1685.182227][ T9295] usb 48-1: SetAddress Request (110) to port 0 [ 1685.187933][ T9295] usb 48-1: new SuperSpeed USB device number 110 using vhci_hcd [ 1685.422768][T25927] vhci_hcd: connection reset by peer [ 1685.425759][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1685.427569][ T12] vhci_hcd vhci_hcd.0: release socket [ 1685.429412][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1685.540082][T25930] vhci_hcd: connection reset by peer [ 1685.553155][ T12] vhci_hcd vhci_hcd.5: stop threads [ 1685.557503][ T12] vhci_hcd vhci_hcd.5: release socket [ 1685.562612][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 1686.863523][T25951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4887'. [ 1686.868468][T25953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4886'. [ 1686.872611][T25951] netlink: 90 bytes leftover after parsing attributes in process `syz.1.4887'. [ 1686.881012][T25953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4886'. [ 1686.891358][T25951] netlink: 90 bytes leftover after parsing attributes in process `syz.1.4887'. [ 1687.072946][T25959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4889'. [ 1687.109267][T25959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4889'. [ 1687.628895][T25976] siw: device registration error -23 [ 1687.655586][T25976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1687.680694][T25976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1687.685038][T25976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1687.692088][T25976] veth1_vlan: left promiscuous mode [ 1687.694929][T25976] veth0_vlan: left promiscuous mode [ 1687.697979][T25976] veth0_vlan: entered promiscuous mode [ 1687.701183][T25976] veth1_vlan: entered promiscuous mode [ 1687.707018][T25976] veth1_macvtap: left promiscuous mode [ 1687.710222][T25976] veth0_macvtap: left promiscuous mode [ 1687.713292][T25976] veth0_macvtap: entered promiscuous mode [ 1687.716731][T25976] veth1_macvtap: entered promiscuous mode [ 1687.725626][T25976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1687.731190][T25976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1687.738643][T25976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1687.742894][T25976] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1687.747241][T25976] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1687.752057][T25976] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1687.758337][T25976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1687.763139][T25976] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1687.767764][T25976] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1687.772677][T25976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1687.787298][T25976] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1687.791207][T25976] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1687.795289][T25976] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1687.800412][T25976] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1687.805773][ T5823] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.809320][ T5823] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1687.815838][ T5823] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.825657][ T5823] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1687.838596][T11056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.841585][T11056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1687.853031][T11056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.855571][T11056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1687.949875][T25981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4896'. [ 1687.963022][T25978] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1687.965715][T25978] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1687.973110][T25982] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1687.975865][T25982] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1687.985055][ T5823] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.988587][ T5823] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1687.997825][T25982] vhci_hcd vhci_hcd.0: Device attached [ 1688.017800][ T5823] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.021263][ T5823] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1688.071182][T25978] vhci_hcd vhci_hcd.0: Device attached [ 1688.408989][T21628] usb 40-1: SetAddress Request (24) to port 0 [ 1688.517656][T21628] usb 40-1: new SuperSpeed USB device number 24 using vhci_hcd [ 1689.690363][T25983] vhci_hcd: connection closed [ 1689.696315][T25979] vhci_hcd: connection reset by peer [ 1689.696405][ T12] vhci_hcd vhci_hcd.5: stop threads [ 1689.713948][ T12] vhci_hcd vhci_hcd.5: release socket [ 1689.722816][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 1689.725398][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1689.727381][ T12] vhci_hcd vhci_hcd.1: release socket [ 1689.730690][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1690.576880][ T29] usb 38-1: device descriptor read/8, error -110 [ 1690.588666][ T9295] usb 48-1: device descriptor read/8, error -110 [ 1690.675473][T26002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4899'. [ 1690.681150][T26002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4899'. [ 1690.994958][ T29] usb usb38-port1: attempt power cycle [ 1691.016437][ T9295] usb usb48-port1: attempt power cycle [ 1691.543976][T26014] 9p: Bad value for 'wfdno' [ 1691.638550][ T29] usb usb38-port1: unable to enumerate USB device [ 1691.667019][ T9295] usb usb48-port1: unable to enumerate USB device [ 1693.971539][T26042] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1693.974086][T26042] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1694.035196][T26042] vhci_hcd vhci_hcd.0: Device attached [ 1694.906148][T26051] atomic_op ffff888059db1998 conn xmit_atomic 0000000000000000 [ 1694.917441][T26044] vhci_hcd: connection reset by peer [ 1694.923631][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1694.929456][ T12] vhci_hcd vhci_hcd.1: release socket [ 1694.934326][T21628] usb 40-1: device descriptor read/8, error -110 [ 1694.934400][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1695.180158][T26056] __nla_validate_parse: 2 callbacks suppressed [ 1695.180179][T26056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4914'. [ 1695.190632][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4914'. [ 1695.252835][T26058] fuse: Bad value for 'fd' [ 1695.399281][T21628] usb usb40-port1: attempt power cycle [ 1696.528849][T21628] usb usb40-port1: unable to enumerate USB device [ 1697.285322][T26082] nfs: Unknown parameter '' [ 1697.871257][T16909] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1698.468184][T16909] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1698.485729][T16909] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1698.490647][T16909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1698.494235][T16909] usb 6-1: Product: syz [ 1698.496196][T16909] usb 6-1: Manufacturer: syz [ 1698.498211][T16909] usb 6-1: SerialNumber: syz [ 1698.802427][T16909] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1699.044097][T26104] overlayfs: failed to clone lowerpath [ 1699.176192][T25008] usb 6-1: USB disconnect, device number 51 [ 1699.191937][T25008] usblp0: removed [ 1699.314105][T26112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4928'. [ 1699.320170][T26112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4928'. [ 1699.456787][T26115] netlink: 772 bytes leftover after parsing attributes in process `syz.0.4929'. [ 1699.644555][T26118] atomic_op ffff888068c37198 conn xmit_atomic 0000000000000000 [ 1699.945219][T26120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4931'. [ 1699.958366][T26120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4931'. [ 1700.242354][T26117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.244780][T26117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.488320][T26123] syz.1.4932 (26123): drop_caches: 2 [ 1701.703186][T25008] libceph: connect (1)[c::]:6789 error -99 [ 1701.706084][T25008] libceph: mon0 (1)[c::]:6789 connect error [ 1701.754430][T26138] ceph: No mds server is up or the cluster is laggy [ 1701.993304][T26143] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1701.995905][T26143] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1702.006233][T25008] libceph: connect (1)[c::]:6789 error -99 [ 1702.009284][T25008] libceph: mon0 (1)[c::]:6789 connect error [ 1702.040138][T26143] vhci_hcd vhci_hcd.0: Device attached [ 1702.343936][T18613] usb 40-1: SetAddress Request (28) to port 0 [ 1702.346915][T18613] usb 40-1: new SuperSpeed USB device number 28 using vhci_hcd [ 1702.628462][T26144] vhci_hcd: connection reset by peer [ 1702.631816][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1702.634040][ T12] vhci_hcd vhci_hcd.1: release socket [ 1702.636467][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1702.668211][T20078] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.670865][T20078] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1702.673558][T20078] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.682118][T20078] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1702.691400][T20078] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.702827][T20078] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1702.706575][T20078] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.709882][T20078] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1702.798122][T26155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4938'. [ 1702.807775][T26155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4938'. [ 1703.456628][T26163] overlayfs: overlapping lowerdir path [ 1703.582281][T26169] netlink: 'syz.0.4943': attribute type 2 has an invalid length. [ 1703.585952][T26169] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4943'. [ 1703.604112][T26168] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4944'. [ 1703.662272][T26170] ================================================================== [ 1703.665715][T26170] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x209a/0x4160 [ 1703.669627][T26170] Write of size 4096 at addr ffffc9000669c040 by task vivid-000-vid-c/26170 [ 1703.674892][T26170] [ 1703.676025][T26170] CPU: 3 UID: 0 PID: 26170 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1703.676053][T26170] Tainted: [L]=SOFTLOCKUP [ 1703.676061][T26170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1703.676093][T26170] Call Trace: [ 1703.676128][T26170] [ 1703.676136][T26170] dump_stack_lvl+0x100/0x190 [ 1703.676233][T26170] print_report+0x13d/0x4b0 [ 1703.676284][T26170] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1703.676526][T26170] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 1703.676551][T26170] kasan_report+0xdf/0x1c0 [ 1703.676597][T26170] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 1703.676622][T26170] kasan_check_range+0x10f/0x1e0 [ 1703.676647][T26170] __asan_memcpy+0x3c/0x60 [ 1703.676664][T26170] tpg_fill_plane_buffer+0x209a/0x4160 [ 1703.676696][T26170] ? tpg_calc_text_basep+0x22d/0x2c0 [ 1703.676722][T26170] vivid_fillbuff+0x963/0x3ff0 [ 1703.676815][T26170] ? __lock_acquire+0x49f/0x1a40 [ 1703.676869][T26170] ? __pfx_vivid_fillbuff+0x10/0x10 [ 1703.676898][T26170] ? __lock_acquire+0x49f/0x1a40 [ 1703.676928][T26170] ? v4l2_ctrl_request_setup+0x45a/0xa60 [ 1703.676977][T26170] ? lockdep_hardirqs_on+0x78/0x100 [ 1703.677007][T26170] ? vivid_thread_vid_cap_tick+0x81b/0x1470 [ 1703.677036][T26170] vivid_thread_vid_cap_tick+0x81b/0x1470 [ 1703.677067][T26170] vivid_thread_vid_cap+0x454/0xd70 [ 1703.677098][T26170] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1703.677126][T26170] ? do_raw_spin_lock+0x128/0x260 [ 1703.677141][T26170] ? find_held_lock+0x2b/0x80 [ 1703.677162][T26170] ? __kthread_parkme+0xbb/0x230 [ 1703.677186][T26170] ? rcu_is_watching+0x12/0xc0 [ 1703.677204][T26170] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1703.677230][T26170] ? lockdep_hardirqs_on+0x78/0x100 [ 1703.677255][T26170] ? __kthread_parkme+0x18c/0x230 [ 1703.677275][T26170] ? kthread+0x13a/0x450 [ 1703.677295][T26170] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1703.677322][T26170] kthread+0x370/0x450 [ 1703.677341][T26170] ? __pfx_kthread+0x10/0x10 [ 1703.677363][T26170] ret_from_fork+0x72b/0xd50 [ 1703.677383][T26170] ? __pfx_ret_from_fork+0x10/0x10 [ 1703.677399][T26170] ? native_load_gs_index+0x1e/0xc0 [ 1703.677423][T26170] ? __switch_to+0x800/0x10f0 [ 1703.677445][T26170] ? __pfx_kthread+0x10/0x10 [ 1703.677467][T26170] ret_from_fork_asm+0x1a/0x30 [ 1703.677493][T26170] [ 1703.677499][T26170] [ 1703.769179][T26170] The buggy address belongs to a 12-page vmalloc region starting at 0xffffc90006691000 allocated at vb2_vmalloc_alloc+0x135/0x410 [ 1703.774661][T26170] The buggy address belongs to the physical page: [ 1703.777342][T26170] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888073ba3100 pfn:0x73ba3 [ 1703.781491][T26170] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 1703.784505][T26170] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1703.788041][T26170] raw: ffff888073ba3100 0000000000000000 00000001ffffffff 0000000000000000 [ 1703.791609][T26170] page dumped because: kasan: bad access detected [ 1703.794315][T26170] page_owner tracks the page as allocated [ 1703.796720][T26170] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 26163, tgid 26161 (syz.1.4942), ts 1703580302982, free_ts 1700507357775 [ 1703.804901][T26170] post_alloc_hook+0xfd/0x120 [ 1703.806839][T26170] get_page_from_freelist+0xf48/0x3530 [ 1703.809056][T26170] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1703.811511][T26170] alloc_pages_mpol+0x1fb/0x540 [ 1703.813473][T26170] alloc_pages_noprof+0x1a/0x160 [ 1703.815503][T26170] __vmalloc_node_range_noprof+0xf9a/0x1630 [ 1703.818032][T26170] vmalloc_user_noprof+0x9e/0xe0 [ 1703.820100][T26170] vb2_vmalloc_alloc+0x135/0x410 [ 1703.822040][T26170] __vb2_queue_alloc+0x8d5/0x1160 [ 1703.824177][T26170] vb2_core_reqbufs+0x899/0xf30 [ 1703.826232][T26170] __vb2_init_fileio+0x32d/0x1000 [ 1703.828334][T26170] __vb2_perform_fileio+0x9ba/0x1380 [ 1703.830519][T26170] vb2_fop_read+0x211/0x520 [ 1703.832448][T26170] v4l2_read+0x229/0x2c0 [ 1703.834241][T26170] vfs_readv+0x5d8/0x8d0 [ 1703.836041][T26170] do_preadv+0x1ac/0x270 [ 1703.837850][T26170] page last free pid 5141 tgid 5141 stack trace: [ 1703.840446][T26170] __free_frozen_pages+0x79f/0x1090 [ 1703.842607][T26170] qlist_free_all+0x47/0xf0 [ 1703.844501][T26170] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1703.846781][T26170] __kasan_slab_alloc+0x69/0x90 [ 1703.848806][T26170] __kmalloc_node_track_caller_noprof+0x2cd/0x830 [ 1703.851419][T26170] kmalloc_reserve+0xe8/0x350 [ 1703.853547][T26170] __alloc_skb+0x185/0x710 [ 1703.855429][T26170] alloc_skb_with_frags+0xdd/0x760 [ 1703.857587][T26170] sock_alloc_send_pskb+0x801/0x980 [ 1703.859732][T26170] unix_dgram_sendmsg+0x3c7/0x1810 [ 1703.861991][T26170] __sys_sendto+0x48b/0x4e0 [ 1703.863904][T26170] __x64_sys_sendto+0xe0/0x1c0 [ 1703.865926][T26170] do_syscall_64+0x115/0x840 [ 1703.867886][T26170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.870326][T26170] [ 1703.871344][T26170] Memory state around the buggy address: [ 1703.873680][T26170] ffffc9000669cf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1703.876937][T26170] ffffc9000669cf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1703.880157][T26170] >ffffc9000669d000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1703.883403][T26170] ^ [ 1703.885089][T26170] ffffc9000669d080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1703.888347][T26170] ffffc9000669d100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1703.891623][T26170] ================================================================== [ 1704.118901][T26170] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1704.121970][T26170] CPU: 3 UID: 0 PID: 26170 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1704.126689][T26170] Tainted: [L]=SOFTLOCKUP [ 1704.128513][T26170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1704.132663][T26170] Call Trace: [ 1704.134122][T26170] [ 1704.135400][T26170] dump_stack_lvl+0x100/0x190 [ 1704.137421][T26170] vpanic+0x552/0x970 [ 1704.139125][T26170] ? __pfx_vpanic+0x10/0x10 [ 1704.141022][T26170] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 1704.143365][T26170] panic+0xd1/0xe0 [ 1704.144984][T26170] ? __pfx_panic+0x10/0x10 [ 1704.146889][T26170] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 1704.149253][T26170] ? preempt_schedule_common+0x42/0xc0 [ 1704.151530][T26170] ? check_panic_on_warn+0x1f/0x90 [ 1704.153703][T26170] check_panic_on_warn.cold+0x19/0x34 [ 1704.156053][T26170] end_report.part.0+0x3a/0x90 [ 1704.158040][T26170] kasan_report.cold+0xe/0x18 [ 1704.160023][T26170] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 1704.162393][T26170] kasan_check_range+0x10f/0x1e0 [ 1704.164493][T26170] __asan_memcpy+0x3c/0x60 [ 1704.166366][T26170] tpg_fill_plane_buffer+0x209a/0x4160 [ 1704.168666][T26170] ? tpg_calc_text_basep+0x22d/0x2c0 [ 1704.170866][T26170] vivid_fillbuff+0x963/0x3ff0 [ 1704.172879][T26170] ? __lock_acquire+0x49f/0x1a40 [ 1704.174963][T26170] ? __pfx_vivid_fillbuff+0x10/0x10 [ 1704.178048][T26170] ? __lock_acquire+0x49f/0x1a40 [ 1704.180158][T26170] ? v4l2_ctrl_request_setup+0x45a/0xa60 [ 1704.182509][T26170] ? lockdep_hardirqs_on+0x78/0x100 [ 1704.184713][T26170] ? vivid_thread_vid_cap_tick+0x81b/0x1470 [ 1704.187177][T26170] vivid_thread_vid_cap_tick+0x81b/0x1470 [ 1704.189567][T26170] vivid_thread_vid_cap+0x454/0xd70 [ 1704.191764][T26170] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1704.194126][T26170] ? do_raw_spin_lock+0x128/0x260 [ 1704.196258][T26170] ? find_held_lock+0x2b/0x80 [ 1704.198278][T26170] ? __kthread_parkme+0xbb/0x230 [ 1704.200360][T26170] ? rcu_is_watching+0x12/0xc0 [ 1704.202397][T26170] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1704.204851][T26170] ? lockdep_hardirqs_on+0x78/0x100 [ 1704.207024][T26170] ? __kthread_parkme+0x18c/0x230 [ 1704.209137][T26170] ? kthread+0x13a/0x450 [ 1704.210914][T26170] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1704.213276][T26170] kthread+0x370/0x450 [ 1704.215005][T26170] ? __pfx_kthread+0x10/0x10 [ 1704.216972][T26170] ret_from_fork+0x72b/0xd50 [ 1704.218910][T26170] ? __pfx_ret_from_fork+0x10/0x10 [ 1704.221062][T26170] ? native_load_gs_index+0x1e/0xc0 [ 1704.223253][T26170] ? __switch_to+0x800/0x10f0 [ 1704.225262][T26170] ? __pfx_kthread+0x10/0x10 [ 1704.227210][T26170] ret_from_fork_asm+0x1a/0x30 [ 1704.229223][T26170] [ 1704.231333][T26170] Kernel Offset: disabled [ 1704.233163][T26170] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:26:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000001 RBX=ffff88802b228e00 RCX=ffffffff81f99983 RDX=1ffff110056451c0 RSI=ffffffff8c400000 RDI=0000000000000000 RBP=1ffffffff1d00fad RSP=ffffffff8e807d20 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=0000000000013c10 RIP=ffffffff82092c6b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7258850 CR3=000000004bb6e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000f000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004000 Opmask01=0000000000000004 Opmask02=00000000dfffbfff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556923c333b0 0000556923c323b0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556923c323b0 0000556923c323b0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556923c18150 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556923c18150 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40a5bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ff00ff000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00fdc23777f52615 7373261f06232905 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737152 7341734204127342 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030007465676461 4720776152204253 553d524556495244 5f4344555f425355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0d0049585a595c 471d4a5c521d4253 5500524556495244 5f4344555f425355 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 738eb14404865566 0000556c7553aa91 0000000000000171 0032003077617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766732c322c312c 306c2c346d2c3032 612c432c36722c35 36322c3436322c33 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36322c3236322c31 36322c3036322c36 35322c3535322c34 35322c3135322c30 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 35322c4434322c43 34322c4234322c41 34322c3934322c38 34322c3734322c36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 34322c3534322c34 34322c3334322c32 34322c3134322c30 34322c4142312c37 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802b23b648 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88802b23b64a RBP=dffffc0000000000 RSP=ffffc90020407780 R8 =0000000000000001 R9 =ffffed10056476c9 R10=ffff88802b23b64b R11=0000000000000000 R12=0000000000007fe9 R13=ffffed10056476c9 R14=ffff88802b33c600 R15=0000000000000000 RIP=ffffffff8bb91e74 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080002000 CR3=0000000060189000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000f010e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff9b964610 RCX=1ffff110044a21b5 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff8c400080 RBP=ffffffff8524b464 RSP=ffffc9000661f790 R8 =0000000000000001 R9 =0000000000000206 R10=0000000000000003 R11=0000000000000000 R12=ffff8880297cca80 R13=ffffc9000661fa30 R14=0000000000000006 R15=1ffff92000cc3f02 RIP=ffffffff81e4df97 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096df5000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555e7232cf40 CR3=000000005084f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=948187cff56b80aa ae1bf489ed359069 948187cff56b80aa ae1bf489ed359069 948187cff56b80aa ae1bf489ed359069 948187cff56b80aa ae1bf489ed359069 ZMM18=e5789d0138aeca60 611b43f50a4b6acb e5789d0138aeca60 611b43f50a4b6acb e5789d0138aeca60 611b43f50a4b6acb e5789d0138aeca60 611b43f50a4b6acb ZMM19=6d2c000000000000 0000000000000004 6d2c000000000000 0000000000000003 6d2c000000000000 0000000000000002 6d2c000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8b72b7b6 ffffffff8b72b346 ffffffff8b734cf5 ffffffff8baf1e84 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8b72bdf5 ffffffff81cf67b2 ffffffff81cdad53 ffffffff8b72fbef ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8293060d ffffffff8ae1f482 ffffffff8b9c9353 ffffffff89568286 ZMM24=0a4b6acb0a4b6acb 0a4b6acb0a4b6acb 0a4b6acb0a4b6acb 0a4b6acb0a4b6acb 0a4b6acb0a4b6acb 0a4b6acb0a4b6acb 0a4b6acb0a4b6acb 0a4b6acb0a4b6acb ZMM25=611b43f5611b43f5 611b43f5611b43f5 611b43f5611b43f5 611b43f5611b43f5 611b43f5611b43f5 611b43f5611b43f5 611b43f5611b43f5 611b43f5611b43f5 ZMM26=38aeca6038aeca60 38aeca6038aeca60 38aeca6038aeca60 38aeca6038aeca60 38aeca6038aeca60 38aeca6038aeca60 38aeca6038aeca60 38aeca6038aeca60 ZMM27=e5789d01e5789d01 e5789d01e5789d01 e5789d01e5789d01 e5789d01e5789d01 e5789d01e5789d01 e5789d01e5789d01 e5789d01e5789d01 e5789d01e5789d01 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6b2c00006b2c0000 6b2c00006b2c0000 6b2c00006b2c0000 6b2c00006b2c0000 6b2c00006b2c0000 6b2c00006b2c0000 6b2c00006b2c0000 6b2c00006b2c0000 info registers vcpu 3 CPU#3 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a031c5 RDI=ffffffff9b9e11a0 RBP=ffffffff9b9e1160 RSP=ffffc900066cf188 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=000000000000000a R14=ffffffff9b6e1240 R15=ffffffff85a03160 RIP=ffffffff85a031ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50ffd17 CR3=0000000067157000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000f000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000