last executing test programs: 9.046235326s ago: executing program 3 (id=422): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.998775259s ago: executing program 3 (id=423): creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0606000000"]) 8.99825318s ago: executing program 3 (id=424): landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0xf5, r1, 0x1, 0x7, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x10, 0x6, @link_local}, 0x14) syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/162, 0xa2}], 0x1, 0x39, 0xffffbffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141321) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x2003247, &(0x7f0000000300)={0x0, 0x9944, 0x8000, 0x0, 0x315}, &(0x7f0000000540)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r7, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000400)="b97e75f200ff645859c1", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000000)={0xf0f045}) 8.068235824s ago: executing program 3 (id=427): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x6, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r2, 0x0, 0x8000002b) getsockopt$inet6_int(r0, 0x11, 0x66, 0x0, &(0x7f00000001c0)=0xffffffffffffff03) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xdc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa8, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) socket(0x10, 0x2, 0x0) lstat(&(0x7f0000000640)='./bus/file0\x00', 0x0) r5 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x2080, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004300)="f6c5cdd50b89338e6f0228b937225c21a87072407fe83d5fecd7bcca9b3fb6c714baa7d905bd76d4f38eba0ffafc067da9e5b2a863dbea1f11e32b455862ad205d1de267dbf9edb296fda48092e372fd3166c91d636b627f4ce223d2fff7db30abd245c174812a8ebfce720483d74f6658daaba3ea9e453d789d9d1d8b63c91f02b1282f122d5847241f305a5d791a7188c946ed5d5e5343c04968e62b064aeadeafd55ddb6a1b724a9adf29b15c4c55c9afd709d19cf29df117c69d1f855b647f2d6dc3ad9cc2e413cda65ca8d3fd777fdf88827428723d37b89a7330dddd234f39187db8e54905b8eb0dc851f51ff37b5deb69b64bbd27b72881267f94a88974a56b1d3178d49c209d6f4e974c00f25a87255c3804b1150f98d46437f5333b200651dfd1ae939125483cec1690ecb4d449ae4f2bdf88d50382440dbe1699017f21c0f1e0c85cd339a9f87046af063b54b923d4eaa04fc8dabb3bb3e3bc83f0657b5a3c4cdfce3c325abe45a39b794d13057e3a036ec20c4eb1c18a7501a8bf3899626fe01b2b9c18ab08eaa972ab9f8a786888162c7f77db751c1ab88db854ad8a99c7307a52571fd4d0a8ca5a6f4f5e46396bab29e4a5bb6f7c40404be7357b47028a1cd2b780abbba9e37d182866a9171ddea543a5684ff6445d4c3ba61b4300a1556e85518301862b398e43f61d461054469f693c42f995a000dc9b950b277bbc5a9bec872462a0938ef0e0ba4f4d2bff4d81804996a9f97893c02b2deff1abf1a6cb7987f446132f55a10aaf537d93422ed22fa659ceda5939cf18398f8632a257abbf68d4854e452ceb5acc02c7b65d67b582e159fb5039ecfe636dfd00218f2e5d1e2ebeca027472d63fdd2b61d7bbd9258a3fbb14ee2559845a638e07bbde84f87a42b59a09c1bc877b7e51a4ea42c64bcb3b3c8043f1604c569308bd6ddf438204df167580f5aefe2a8beabb77a8fd3392f99e3a43a7cfa0a68b1b21a307aeecd5b7a3742d74ff1790b13f1026ebec296210301d48d9354646382a18d247300bfd8aca878051a2d667ad2ee489edfeb3c1c912cc6a6c573fd92dd4cd1b6d2fb1bbdc86ddd8bf515c28f15ebafe858df78e8a783b293db3144c44397cbaeeadea44655c6350562166bda3accf7a2e65cf3eb7beace08760337e2dff8c9611fb131b345f44dba2aa2eee0bb4ec719c59a269e71ffc0775c5c193e341a833d38edf8a1f01f66b9fd039ff55c884257ec7330f333e579e66ac67097bfe31b2b78d88b81b640351da3bea710e38d8b50b0a63814f4638df1680d2217dfe7364dc228ea79f74e678b338105391e8c1e041cae3d2ccb9d1b034d96b811bf06515b3f4dd02cf2cf9f9884a6a1af39f219fde0b1caee2065536b8e900bf4fe9d87396cb0854ff28db253382a8f1e6c2a2805b5d5c8b756640a49a092f8fbc5ab87e511d790519e9e79c1336b2af288b1b07871858966197f65919009c435e6ca5bc89a15fae0e3534e50cbacb3cb2ee519a9894f08facb453a7ada35c0cd8e6ac71cf9ceb21c1b944d81a16a3299c730fe1ddb164505e2df5e4dc7f46c3fa3230a9cc3845298d4abf909565a67be3316ca881540f2920c8fb6ffe5ffc66ef477476cc4941ba03795287f408b6175df89274e189bc2e12e93f5d8aaa532400946a7a0cb6cacb55d4947d0c02da9e2345b4d0cc92a570019ac51f64b29b7e509109500f9fe8129196bc46230a1848ad7dc721efd97f1cbee41a1e520da4cda9fa5a0024d7865e637d0f17f240647f11f4d41a39e29643917f6ccd8680d83cfaa33081c3dd613ba2ebe736539834ba7977d2617b85b073a4532c8e6cb3dc3ecb492f23b573ee103ad6c56a5930904e836e9390a8b20470de2c7e0d1b52000366cbc198caa4917b593334a449840a093bbd709a6f835eb4338e23b12f59efd0fe6a8f7d108e6c40d63b06b43639a73822b431b636c3c6cfa2c973fd43aab1ebb560eb5b556b98758583195190651d9f12bec2a2db9c87f879af59d9e72786e416ea8fa36ff4a4f08d56c5e208b9995fd9ed0607d3af20b1eb51dc0943cd96bee0cc78875fac1dc471f80664ef9eb1f146d5b6871842ae1c51e83523f28a149346df307eae77929a81c235f5593d7eb30581b0650a8759d5a59b5c2697c461e17d8458b13dc88935b878f71f0597d46924bc84714ca7af2df5749b1b0fbe1950aade8d85555887809f9d4cb5d8d6cdd0ddede90e2fd122d1168f0c7e535aefe0385ce12a5cb1060498ba51b28fc344e6c6094b1cf6263007e299d7ceae7814c664f43bc2b8e989779e1a2a36e7e209175c197117966925ced8cd941fb4d37d05a5c771ba579671d505d6af7fb70fe764d906fa84f046fb4429d82bc7f4ed72f686bf2f923ec7bd48b1be8773ef8a51235825cb6c54d444021e823ba2614e7d93920a96d23f19d9adfcabe1716fea4979ef4d74fadc6fd53e8d6c6704c4eb04a039ba4c83d15afdb195a36f292ba9a2728cd85311076aa6a484c01fbf9fad617f4870fcbd1cd453aeaa391968287263852732552443e3388bd07d975cd2a11624fa2d0d931034b940c4b2babe262706c6cd72007c5fd5744564babc9fc37da476cb38ed0de6b530864e26a6febeb8d901d40c771a0cf2f498830487d83368ff3f8af68a0ffa5762d3f2c9cf2a66e2338d3e3655b647685c2dcacba997eac420d5618c3d268b85795fa49e37ee504521017439581a6c5c064f0184e4cad2b8134e2f9b9ec42981c155775d7d744bfff7adb3f7599f159c7cf1d7d56fb7cddf5b4f8ee8a3dcfbc1151b3d253771db09879f48c3c0cc9506e97c776fa8251c21d5fed9dba8ca6674e45ac2a6bef86ae18b175ffb5d281f58527661ef7d5651b28db85c1b7cc305ab5b34fb49a32778390d3b6d4e78d06d3d863eff86435d36be3043529fb9b4d061a7a983d6e287fa83925dfab1b526d6bf510a29f9d6ad493bbb4da5fdf0aef4f16ff50799b016dc4230aaf87b9ef8953f8ad522ab4c3ec3209a57852cbdb5e39628ad107b248d6f07d123fb0e68d7b7aa8558478de5dee88032de6ccbbcab0ecfe8fccb1681816db894fdc24a9b6cf8ad5690efb01c8b4840255a5d5563b4cb73609f0a5337738e179fd9577bb795eb5a89a4ee4e2b2bed5fc65ba1efb911889e131a0b010c5699d7f6b869ffff3945208feee8d245eb45590f2c67b97d186307dbee5327ef60340386ae04d45f981061b80d33ed6db2e5dcd711d68f8d9befdca10334e9636de1a2d6e6de2888d0984aae79b636eb0576f6cc9f450320b7e946eb82e9e1f8b3477f382090c79a9524a69f3416eadba673ff24cb1846358680d370e6ae98230256ebad4826f90ef8189b95f3b6275950c33ec2781bf438bbcce8ee350f3c1475b026a6c189db5101981b21f82ba8d8f62e852ccc5109a2780c70eb4a0b014c0c06ef46ff506c481b8082154db687b644ff122e5f35af5882212834a5b696afda432241f966d5706fa7c00be4a4912b6adb8e5629d0e18bb2ed4e2d7b6dbe79920d21ed0491f7a5017ae5ccdee5b498f61bb9ad5845a6268abebf80338c20c09530675a8366bfd4ea746957dd7337f1c1184751b649a399891ad2b6306bb062b9b2dc8a8b09302ea3386ccd78d9a3a0314c3df264ce81048391ae66ec9eeda8c70efe95146205d0b6bed2c362f2920615d41c7d12fc3991000a080061dad4e34587ff1684c6756f55dfd249d2d62bef74b5e4a40a63a2bc14a473cf913d5a4fd289d1792fc693c4a5f85326eebc52994a34e16af861438f22633fc5a4ce0d30d37ac0e2277e072f78375d7b1443e1af9647c23decfc411a3d0def781ce6679d92872fbc27dbd4a7edc2acfe565103d472fbde7ac626248a5305cf6e1c5fc81e9b71adb2523839b9425c72a67409539d611240ff5ad04ea2b3d063e197f5663606aeb0b76fa2e1121e3815506fe4a9ac09d555c1b8d8c9749f5dd5096130aaab80d9b721a831013885e3a376a57f97db4f1878372c7ac241b7424b86d97ae5fa3a0943f55c64cdbb4aa3209c4fbee3d9ed201e2bfccee01d33bd99c01689e1f23b185acb82e75cd2a161c316334f4887c8225f11ec1354105e3180d67ebb3a98d1178cca8332eb73555f53ed86c7285fc6c85570be32e74baeece3d610cfb505e1ca6c02fabffbd9b4c80274db8faab4a4d29f8bfa6db38daf4ca8442aad66e40581f40a63e50b3a33d9a3e32f4440b761d149a8d71c138f74d5b0e10d9266788499a19f03a17726226e27c899c538bf4c219d7a035bdab2c5b347bcb176555fa451594050c6196a2236e5b0981eabab3519dd10ed1ffb6334476cbb06059384f02c164f278d49391c6069b9adf25c14870e2fe1f28abdb325d3101fe464f829e971067dc9231fc3bc9d0e2a6c8e13db15f4b69b3b028a587a092453296f7f790a547ba191bca2ca929d1477344d7ba30b826a10152580e5ed7418f481e4b10139a4acea1a1c42f748cafff8b0215c6be50e0af09905366f0403c53f8c746ff06ec45d69d3c4039d0980af45c8a2d6cadafe477ffe3451fce3bdc9644faf73ef3ca3e823526fdc086d82967b1a569cdb99ea26fe6d06a21fdfa7a8342089931240324b786f6be1b987c8fc9e9e602cb0ad66039a0147319a896134cc97a7f50b3a0c04c4f80b8a53ea222f5c009325eca6668e453d92e1577712af0297ffbc3e3365d504ebc1c7e825e045c30c0ad9067fcea6dd754c179c3febce85187611f78634c081192b430010987a852837015a3c2a70604e18c5d394207fa61fd3c51a8ac5ab263d1c15a9918f599338d21b894e6016337a5a31422867a775a7def8fb7cc3a41342175e05c891ebbd7318bf011ab2dcd865dc5efa3a9451d973951c96752803665567c08013259f14fd704d5d108cef5a38b4e2375aa241c5cfa99511e334cac9665a06f25da7d3fdb497363b119bb4d536a6803b3aed59143655ef6df225b5a9305979f77e32942ffb48e859da96a309ab57b68fa56a9e0d6e53650e7b1968fe5afc21e5638cd50f5c415c9addd998fe32ac983a9f9266590967782b6d9b70f22a48cc14301af5de46d7b71d0f7c0ead21ff503cbed5c2535672835ea0216eaa7fed72390b66b4684b51365d1923aec4dcf4dd08b357552cfb7e96a5ab956ac1276882e80a79d018c5ca7ffb3367d59846387f4af1fd4b6098cb560bb565af3ec0c3934da29120546804f3800aaba4969e00cb83d9d9b0cf216c42a8722030a6fc85a01b9748bebe688671318a2cc33f69e0bf3a8a3779c8847de958b28b2e8017da7f74d56f1a75134a4da0944e45dfefe63ff367759b55e1659870e0be86cef2789ec9063ae6093693c1d47cfc164eae67c97efa447120a36b39561d380077ceaff4bf0f55b066af441e400cc3996633abf905a32cf025becf31983dc6fceb6e0fb506bd350d81afa6421115939adef8cd68abbbd94f1567d9e9f7505af57e1802b8d704bb7460b3822330c4a4bb6ff2b187fb9a3f324b0f415c706a1de8a7cf6747c72be3b356c0206a3c0c39daa85309bff9faba7b68178108b261086cc15a0e21a52a37c1576a72d2d5da5c43248ad760d239711739cb79fc79b4ca2dbec2e100db1c535ed90623c67ed2e3817ebec259343b17efdd912ea0fbf73653015b7f8a51cae3cab19ba00638b8c8bfa8db481ca7dc7ce5c2540c46c963386188f74dec088552330e6ea067b222bd97ecab5073d95d5814599f522a36fc80636bb66ee8dca399586f90f1c849e30d92382bb0e64f62511a7f1044560175d68dffc03a9e56ac7629a4bcf50a4334f29b3391ef4bf0f3174a44d69e143437cb3dcb3871c4e7de50084b5e5033c48df364a1d5cf925d42a3c8e2b419909e4a2ca2156c1397eb87704e8f8d6cdb3a4a031c1b5468a1e75a923cbdbd384cd8d87c2c05f11f1df014ef98c13fcf9f182f6fb68dc0aa4adf7bec8a17caedd172f64806c311fc106b39edd9628a01d7159d638e09b39feab432718059589dc971143da4a8e640aa63ae0c2fb4a71129d362cdcf993adbc97b4f1543637cf1acbc9e67067f6c6f95be39fdd14dc6478c507507ceff88c2d1c5e13522547ab149dad2526393714c6c0a221c167ddf1084b563c0bfcc4c75a972131c62ddec7a497bd5118eaa12ab25bbbf7cc62eca5de5ea50bab67ce6ff2e05cc47cc0b0a5465eb01bbc08dac30b8522bd92180d8987390314e19eb3201f0be2b4f71abb697a751fd8d6a3251ca8ea1b2f20a7827d2599d62e392d6c065183a1778950d5ebe04180047ee8a2a096e5f1d6813ec63ff4a626c725b24d259cbd9ca6305009b29c6ef7225eecf9078824f9aef4d3e9aee1e9616b2b7f87499f8abab6c38e9a3e7714132850b5e71fa671697e6c8407ac3dad5abeee5f7b2a63aa51d29744736b0c38adccf8e29a85b81f3b3106daed64fc78618e18c9056cc41ce2f50379cc6c2c1411ba2c690e1899dee193f0f2877412f1cbd54d12255ca81a72211f9a8ab7f0b7bebb6c11b4bd6c77455decdfd7df2b2014395ba69f22e520138a43e1b3a11264822b143adcad307b35800563bab720687a898a76cde1f0a15aa3f32c0d302ce6f1094bacf5a1add935884be029c7fe18a5e90c696e3371af0f3cd721abd7dd4ce74efe353105ebcc4b1411d52026901380a9c7a807a76fa617667adea8b7734822da93d93969641a92ad2af6350ceee54e3d7c7c39e22d6c5f363d201572b8d68c2b9c7230b0b85801cfafbc5557f21bc444ea05fc612e2c2a8d4a38578c69bb252d8f4d617d0974f95b6ebb416d5c8f3fa925d4ed4f23bfce03e28389ca8c1bece1fa49e8d66387bbb09b3c29d9ed75ea5a9ac7930cb3ed05f999867c640b3435962fdb763002e2fb451c5a1b9d4536e49ba50fcf61451168a994249ef29af51694a1426d987ed8cfe09f10462c7629c4ff1b1cc709b99e9e87a54d1ecf54cd9da0c2c19b84b2a2c32c0bd12d158b73230cf610645048cf1afbb62aa7ce6fab79bec3ad84108f3d96cb9fb3d78a26724892a6bca533e64880c7d4c28a6685502f4cb2a27b132c8253b97e88583fe0766d04795709486556df99b7e65fbf71febe24e0a188e2dc489b8fddbf9d4b1c9ef4b558f888824469df9b2085a845998220332d9cb693472ff2abcc10784c2280825adfcc630e3a961b39ab786deddc53b18e862edc75742d6eb2d7cc227ba3ed770851718388612e4e7f4f257a90fdf09e3b0081d7498e2d5b628d9132aa0165f323f59af5e9ea54c582999fb527d5f2f3dd7e4f85877080526f8481899b6afc732f5da6af31b561ddc36a6b8c723087d3f168292550d89b228f7a3cc131c110a2dab2f81e339f24d3d2b696892dcd4a3e8f2eaaddc0d78e2d07cb9df9d2fe73e4c55562c0794092c7dabd4364f9fea89d6cdd8369d5bf1bc8863b8f89aacf0fd9b9b380947bb4872656e58bc87526e18fa8b17ef8a7219adf1b79d1be5dd827e7ba8e4ed50a81eb7562b179876a8803dde2ea99fe744e8f7df17040ac38592a3be7eb353416496e867d8a74c7eb94556b16241935d718dd43462fe0855cc31a812e0ac01109d1d3539bd2fd4eeb422009138a92324bd072edee2ba47d6cacc24588410ce30565a8aaa5aad52d9c55368372715717ff5ed3a0243ddafd11a7059c29a26b9ea9374e8434f31e4c15a747ee6d69368d12b96122690f843569e82ad27eb8fb25e94dde94cc15e690dc65f6a6c2a6393821168a79e03cd223ce54a1d5e38eee1c12e23027b12c6a8094c805088617c2fb4f52008366faf37fdb13b3a7a879949d13644da36dd35a4ede785ca0ac7b4f15472e77a33228129143f849ee75c915df31764c96954621a01e0941d6bb58125f544818b7152698f3addcd0a684af8fcdd4bcdf5752b3faa731988866ee8a664850989d280505d2a4b861f159d47d2d61ab3de866fb2c8f90075b713f61cf83a2ed426d53214b70385b7a46e5620c032486a5a00e0e73d3ea16eeccf5731507903a25685466b61311502ce781634ee46542957a0d5bacabb8d965689422588ee102d6a6016bf11589fff32e503feefccefe4107d0619e7a15336a8655e2f09034b4069941126d48909232592aac6d9c231285dc1d038ff1fa09c1588f543304659ca334afbc42b5f5fb813b34663cc6f4b0a12fc3edc28765b062e7a50fd19ef575be96cd1d9aa48c1fef1b2763949982a47bf25a69c8b1306e8e36c91d2096e6a6cf934452233ff49e91ee173c1e288b9ff70ff364689b82e2467a3d741809657ce0856582d24da5663162422a6f1ed1fce7cef40d90ce57cb99e19a0b4365d483361d03d0cceadd682f333bcdb0a49e24d8c7d004aad2dac06f4839cffc0a77730623917e5f101c33411ab4e0a8491de9a8bbd5dedb8dfeb5a5880da57c74bb8e1fd8b02d3c22087be3f686aee26988b2d62a41d4593ff0dc100c31dad221489f612ef60c160bd6c1f5a00ea6efd3a5aa5ca14efbf78ae4e5d8c5db9c03758b81e636005ade8d03a11f5d8231cfc1bdacdb276992ca8ecbad337fa89dacc9e9be11d398d37207e15ddb45566e0af78833545352d3043b70e20695ddddaccccaa93ee5e2874bfc7f9510541a57fb3cb9c8d6e75460cca3c4cca39a642eff1967dda07a66fe67d87696a5fe22a718a52cd9ba83e348ed211c1dc2e21ebd797455f0648af12c10321240058857632112a75adfdca249f26cf8d6ba05ee83d00ff8d64d8fed069dae70b79105ccd95fc9df34426d765578f651a4cba8094f46e0a9b676c0c0ebb1803660a70f5c7ad2de1ff96676c3ecacdc2953fd235856228556db20395b8d54819b7b12f56e4dddf6a7fe4f7f3d69dff022c59efb2313ae801dcb02b117f50f18eb11dd5a291a7068c820fbe381bd0697566909a38fdab0a0c48442dc935ab8447ebecb93af879a6bb82ab5f245274d873b5be4312856fe4fab8edc9575c02ba4cdb34b31323b69cfef40755bf96279460640ed9fb84d5c60d95cfd76a39726c29f5607d80090e5e3da18fd74682975dd98d98e4afdf4460e1aeb7087a18ded69310b28fa45b356fc28d1f2bef4c9dd50909076de9587fa07b966ee143ec589f70b8ac4d1320cac5bafefe640e445922090c721ce79e4e2c546cfb9b7f058932e6c83170dd2785e28ed81757ade61aa094bd042411aafe0b75156067a5790c78a44589728f1190ac0ba2f93004e06602f51fab34cc56a485569be11e0fd8c89ec3363e053dbdb6cbc69b686e89ff3730dce9099daff958f3be6e7f9ac00bddf0f133a6f904262443963aabe84b0ec9ab9209ebb0d6e81b8d30b2959bbfe5b332459310be2d8183a93ea08301b816d5b009a967916dd45b0f541c57685a6c7ef8cf715ae7fd1780f0a0da48467196e25e26fd2d5a075ad5acfa1ebec9647da21672b642ee4a908fbce416f4ed36ab5b96e5b47a0f6c7f280119567b7d54640c65ce5a0f4912690c4a3d0805e4284fb695eb3af2528f031261439506a4d3f4c2e18b736c55475828a0faf0153acf0dd89bf3c2f6525cb4bfcb419421c7696ee93bc595158a9a43bb288022122a8c45a0db060fe5e85bcc128f396f7af7006eba4e0d6e2f0802625342799bc1b98366682db90ff1be99322bc0672e07757c44173b96e659ff645d263af255d6ecd88bd9a0863006db7f674e79b0493d41a12057e36243394294b4c7850d14a988715de4b55e9f83c2f0676a8486efcc948109076361267f092315dae79164da8f832ad6f35f600b92e4a8228d39e507117c1c1b2a4a12b667538000912ea67de21bd85616cb30f95573ba748a75d2e04b493865a8711a688e33221b26f621ab3a137cf86cc9dd340bcee72f19e00de06f1e9abbe08b4cb8725c9e624f02d36c4c276a529b6e23581c348bb90a4fb1f89053aee36caca5529bad9124825860c011140744f245cd02ffe219e436bfef045517e4e41094b25cf9082692cd8e37d3893c5a90c35b808a17a6508fa7ae743740be0d984ef5ea80cee51e14b9997f86b45b97e5acf89a0a6aa962689c4f53bc7b65e5037de60fa395ed1013591caa79412108224c020d77069939391e20ee32b86139fca7eb9ca5c07fa733311fef5d5594b83ae34c6bc32f037b09995511ff9b9b611bc727055a10b808ebb8c8e5ce532046c7ad3336c38d506e0e3043c4413dc8ce0a9caadbef27d6f663b22bf8d399621ee86e52d9abd5628e3270424d8a06a79174c7de23c431224fd8d0f42853510600f9e2deb8a7bfcd324a5c6ec19cd0c9ca81c552b111a2acc4479e20439e2e3caf44c92026b5be1ad6933ed8d4de1575216c134d55171568ee64213fc4d32ca5cd7ad04b8705ecfd1b88d56294dca67efe3b1b37c7d5d170cef18997c4af074e97a98c11ec3cdc83a4ea564ebb47f02344d3ab410e25a4ad658be9bf627d49c106c1098dccf7ff62ff9f4dc997a279afdc5630ba32167a68ed7bb3bae2a8b61fca67b5b7dc5b3ef3ab679b602764da9aabf3d0caa56b278c2ab6fbee2cfdd7277402a1f82de1d97807829c0105277073772929f16d79584118f31b45ec4db29aad83693b2d9de08f417beaa2f78d55a36a824a94d1e3cfeb3d75c3d41ddd0e317e85d327e9b5a9da44dc12b6fc3acf6d222a44f59520fa3fcdc37903eca4b7a91fe14cf54b06855d204ebd71018fe767a158b5e389b5e8e136fc8960840ef1916d8e36f08260e5fc9808442e2034f2c761ae051d03fa618a5f6b8ba8cee00411d09aaa3f8fe30a5d29d9403a905403b5310355326387ea6ea72643b70fcc5bf767371878440d07be919c4ad8c4b8952ea61655bbeac50025f4cc2e859c20dfd440a0b1b14549bccaf7952a27f12266c3b7185d9f37ab405d0765011ae6dbc0717f58ec6bd4101589f5c6054faba863bd2af1e8b19cc2cee98c619e477a47497896c42c37697313917b37140a77a5afec97556f06e0ee1d87c3739bd9ff4c210ddd4eceb65701e64bf4d6cbd5d4b9786f4d45acd881fa6eb1c6fda5f8844f5a1635d05e7bb82270694efe063d44296d86b4bb8b28e573dd7cc0d379b5449af1064f10ab8e8f5f177713a63fd7ea8bb68305356c59b5b48334d568fc6d81713bf2c1438dbec4c2c793d5bcd94c459eaace9295ec5b51328fcea5c8f984d8bf90b2f9fb247ce722a1c001e6ff179524417d647b856d905976f623b2db0facf05d62a87662ddc0d6c31cadca2ec262439fdd0f5cd7788617b98bbb802ceed7f971fe6d432a49dc132fe5475db3bc61d6ff04442a9afa9078be7a15de8668cdf469697e337eb4a99b24cd89da2a36eaf4f725cfc77f5e4de3dc010c2ef1f6b22dc479544c0c4c611fe1c8ef5ed3c23ddae7cd01ae1874217f8d1001f0c5f8d2ace0ec72ef3ed9b95b72753462feaa1ff5c2d23f5ec1ccf41064895d6944f38bf7c41a091df7b8c5c5021ff7ab7571439a3d5c889aa57c715e4a55ecd77b5cb4f8bc3408d95d560f5e8ec711e81ef8a751df5d1d053822debf0295574ebfc5f1fc47caafdf8b3862d68fb01d6239fa13c026320aafdead31d003d8bd8b46842687b6", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x20, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {r7, r9}}, './bus/file0\x00'}) 5.968611422s ago: executing program 3 (id=437): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x80000) 5.939447914s ago: executing program 1 (id=438): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x2760c000) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x20048811) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd31}, 0x10001) syz_emit_vhci(0x0, 0x7) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16, @ANYRESDEC=0x0], 0x38}}, 0x20000000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x15) chdir(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x29, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x80000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x38, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "ccbd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x957d6e28f24f8add, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x4000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x17) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x500, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x44) syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x20800) 5.578911503s ago: executing program 3 (id=439): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) socket$inet(0x2, 0x1, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$radio(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = syz_io_uring_setup(0x913, &(0x7f0000000300)={0x0, 0x400600, 0x40, 0x1000001, 0xf7fffffc, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x30}}, 0x40) fsopen(&(0x7f0000000700)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)='7', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1e, 0x13, [{0x0, 0x1}, {0xc, 0x1}, {0x36}, {0x24, 0x1}, {0x9}, {0x3, 0x1}, {0x0, 0x1}, {0x24, 0x1}, {0x16}, {0x4, 0x1}, {0x12}, {0x6c}, {0x12, 0x1}, {0x18, 0x1}, {0xb, 0x1}, {0x2}, {0x36}, {0x16}, {0x35, 0x1}, {0x48, 0x1}, {0x18, 0x1}, {0xc}, {0x16}, {0x9}, {0xa}, {0x1b}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, [{0x6, 0x1}, {0x60}, {0x1}, {0x2, 0x1}, {0x1}, {0x6}, {0x9}, {0x16}, {0x2, 0x1}, {0x24}, {0x12}, {0x48}, {0x36, 0x1}, {0xc}, {0x5, 0x1}, {0xb}, {0x9, 0x1}, {0x12, 0x1}, {0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="05000000010000", 0x7) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x20, 0x0) 5.457893628s ago: executing program 32 (id=439): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) socket$inet(0x2, 0x1, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$radio(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = syz_io_uring_setup(0x913, &(0x7f0000000300)={0x0, 0x400600, 0x40, 0x1000001, 0xf7fffffc, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x30}}, 0x40) fsopen(&(0x7f0000000700)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)='7', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1e, 0x13, [{0x0, 0x1}, {0xc, 0x1}, {0x36}, {0x24, 0x1}, {0x9}, {0x3, 0x1}, {0x0, 0x1}, {0x24, 0x1}, {0x16}, {0x4, 0x1}, {0x12}, {0x6c}, {0x12, 0x1}, {0x18, 0x1}, {0xb, 0x1}, {0x2}, {0x36}, {0x16}, {0x35, 0x1}, {0x48, 0x1}, {0x18, 0x1}, {0xc}, {0x16}, {0x9}, {0xa}, {0x1b}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, [{0x6, 0x1}, {0x60}, {0x1}, {0x2, 0x1}, {0x1}, {0x6}, {0x9}, {0x16}, {0x2, 0x1}, {0x24}, {0x12}, {0x48}, {0x36, 0x1}, {0xc}, {0x5, 0x1}, {0xb}, {0x9, 0x1}, {0x12, 0x1}, {0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="05000000010000", 0x7) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x20, 0x0) 5.040122637s ago: executing program 1 (id=445): sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x50, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '/+*\'*}'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x101}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x45}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004040}, 0x40000) setrlimit(0x5, &(0x7f0000000140)={0xfffffffb, 0x97}) getrlimit(0x2, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x804, 0x0) chdir(&(0x7f0000000400)='./file0/../file0\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setresgid(0x0, 0xee00, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1cb9632d6e7465d1aa1936"]) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 4.333858539s ago: executing program 1 (id=447): syz_open_dev$evdev(&(0x7f0000000000), 0x3f5, 0x268801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x7cca870b0b802017, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_shrink_slab_end\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x23b) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = dup(r5) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x8, 0x40200) ioctl$EVIOCSREP(r7, 0x40084503, 0x0) 3.130103389s ago: executing program 1 (id=449): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x3) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109"], 0x0) timerfd_gettime(r1, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet(0x2, 0x6, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x40c0080) 2.662606723s ago: executing program 2 (id=452): r0 = fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000d91486779c010fc03d7c173753"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x400) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x5, 0x0, 0x1, '\x00', 0xfffffffffffffffc}) syz_io_uring_setup(0x8e5, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xda, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x6, 0x1, 0x4, 0x2}) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) listen(r7, 0x3) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) close_range(r0, 0xffffffffffffffff, 0x0) 2.653337673s ago: executing program 4 (id=440): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x6, 0x0, 0x0, 0x18, 0x0, 0x79, 0x10, 0xb8, 0x700}, [@ldst={0x5}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.65205569s ago: executing program 4 (id=455): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x15) r2 = socket(0x8, 0x2, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x20000080) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000000080), 0x72a, 0x500, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) 2.477050114s ago: executing program 0 (id=456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x400) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r11, 0x3, {0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x81, 0x0, 0x9, 0x1e, 0x5, "98de6f0d435a1ffc10b5492a35d271af90b4d79f70ba8a5786afe2b35f0fefdd08d3964d860b375d6a3e275546921eefe97e6292f60de4bd63cc8519925746a6", "e5a7727092e011252ed7c4433c1205888bb8e331580e113565486a5a2da3471d157b05117c0ad37b62ce0091b93b133edd678115e0a5892aac81635416d2f990", "cc5722db57132f222ecc2bed7462f1f9d91e5709121a5078495bbd11f8e2f3a1", [0x5100000000000000, 0x2f]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r10}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x8100, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.319017938s ago: executing program 0 (id=457): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200021"], 0x69) close(r0) execve(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x16d}) setpriority(0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x1, &(0x7f0000000080)) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.227021851s ago: executing program 2 (id=458): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async, rerun: 64) r1 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0x104) ioctl$BTRFS_IOC_DEFRAG(r1, 0x4c00, 0x3) (async, rerun: 32) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) setsockopt$inet_int(r2, 0x0, 0x14, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000063019d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYBLOB="3a6d6178d1a0446c107f279d13704b51419d53a7eb6593587b99ef05db4446dc9d3befc198c6b9213b7ef8b499b988893eb5f33bc45fcd3fc940d9f40dbf8e74e77b596b703f09a44d5bfbbbfcddd2018297bf8f2c1f4f65bcd5ed6a0d85332273a8340b3a29c8a9a0c7d94dfc9b557268247b79f10055a3b15b04c0d9902eb9e627c533b6b810c9c176ac74fd9637d78f6201e8f2cde2abaf9ce0beb5ab65e5a5c2a0ffd69c10650452ca0ffdcdb82377b76e09f8d6ca0d3963f1220b44597d31b5977977c1dbabd6c7089e73d6817628f825b07341eb76b9bee3504c65"]) (async, rerun: 32) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="0000040000800400118000"/24], 0x18}], 0x1}, 0x300) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000000)={0x10, 0x4, {0xda75, @struct={0xfffffff7, 0x4}, 0x0, 0xfffffffffffffffb, 0x8000, 0xc, 0x8, 0xfff, 0x4, @usage=0x1, 0x9, 0x0, [0x13b, 0x7ff, 0xffffffffffffff81, 0x0, 0x5, 0xc]}, {0xef0, @usage=0x5, r5, 0x9b, 0x6, 0x1, 0x5436, 0x5, 0x400, @struct={0x44, 0x10000}, 0x2, 0x3, [0x5, 0x7, 0x5c, 0x9, 0xfffffffffffffff8, 0x9]}, {0x2, @struct={0xd2a, 0x7}, r7, 0x8000000000000001, 0x1000, 0x3, 0xe00000, 0x3, 0xa8, @usage, 0xfffff99c, 0xfff, [0x100000000, 0x4, 0x0, 0x1, 0x7, 0x4]}, {0x0, 0x101, 0xf6c}}) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x14, 0x0, 0x0) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000063019d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) (rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RESIZE(r9, 0x50009403, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB, @ANYRESDEC=r11, @ANYBLOB="3a6d6178d1a0446c107f279d13704b51419d53a7eb6593587b99ef05db4446dc9d3befc198c6b9213b7ef8b499b988893eb5f33bc45fcd3fc940d9f40dbf8e74e77b596b703f09a44d5bfbbbfcddd2018297bf8f2c1f4f65bcd5ed6a0d85332273a8340b3a29c8a9a0c7d94dfc9b557268247b79f10055a3b15b04c0d9902eb9e627c533b6b810c9c176ac74fd9637d78f6201e8f2cde2abaf9ce0beb5ab65e5a5c2a0ffd69c10650452ca0ffdcdb82377b76e09f8d6ca0d3963f1220b44597d31b5977977c1dbabd6c7089e73d6817628f825b07341eb76b9bee3504c65"]) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="0000040000800400118000"/24], 0x18}], 0x1}, 0x300) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r12, 0x84009422, &(0x7f0000001300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000000000)={0x10, 0x4, {0xda75, @struct={0xfffffff7, 0x4}, 0x0, 0xfffffffffffffffb, 0x8000, 0xc, 0x8, 0xfff, 0x4, @usage=0x1, 0x9, 0x0, [0x13b, 0x7ff, 0xffffffffffffff81, 0x0, 0x5, 0xc]}, {0xef0, @usage=0x5, r11, 0x9b, 0x6, 0x1, 0x5436, 0x5, 0x400, @struct={0x44, 0x10000}, 0x2, 0x3, [0x5, 0x7, 0x5c, 0x9, 0xfffffffffffffff8, 0x9]}, {0x2, @struct={0xd2a, 0x7}, r13, 0x8000000000000001, 0x1000, 0x3, 0xe00000, 0x3, 0xa8, @usage, 0xfffff99c, 0xfff, [0x100000000, 0x4, 0x0, 0x1, 0x7, 0x4]}, {0x0, 0x101, 0xf6c}}) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000001c0)={0x0, 0x0, 0x4}) (rerun: 64) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000005c0)={0x2, 0x1, {0x1, @usage=0xffffffff, r5, 0x652, 0x6, 0x306, 0xf, 0x1, 0xe0, @struct={0x7, 0x4}, 0x4, 0x3, [0x5, 0x338, 0x800, 0x1, 0x7de, 0x3]}, {0x5, @struct={0x5, 0x8}, r13, 0x7fffffff, 0x10001, 0x3, 0x1, 0xffffffffffffff00, 0x400, @usage=0x5, 0x0, 0x7fffffff, [0x100000000, 0x80000000, 0x2, 0x2, 0x7, 0x3f]}, {0x306d, @struct={0x1, 0x48c150cb}, r14, 0x1, 0x6, 0x100000001, 0xc0, 0x2, 0x0, @struct={0xffffffff, 0x101}, 0xa54, 0x6, [0xcf, 0x3, 0x8000000000000000, 0x82ce, 0x80000001, 0x1]}, {0xcd, 0x7, 0x2}}) 2.166407299s ago: executing program 2 (id=459): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8131, 0xffffffffffffffff, 0xeae0a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYRES8=0x0]) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r5, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r1], 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000f78e86f9e76491f62bff00000000000000020000000000c1d1c7f4b4e644dfe89202ef5f731d3e894efc464022fc3940ecf556c30e9d513e9d933ba99f38a06470a7133c1b"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x40000000000002e7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000080)=[r9, r8], 0x2, 0x100800}) connect$unix(r0, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES16=r4, @ANYBLOB="05000090741d3e78c90000000000d5cf41922312bb091ea490d4c2b15eaf3c1e4084a5818bd435e5b02b5542c51a68c6881868b5b738f1", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x48) 2.156332568s ago: executing program 0 (id=460): socket$inet6_udp(0xa, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 1.953169636s ago: executing program 2 (id=461): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216", 0xb}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482", 0x18}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40012060) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800000a01"]) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.947770507s ago: executing program 4 (id=462): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0900000009000000020000000900000002000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c6853d9d933be1dfd714164469626a146d27481484cbb5a43bede7e2a44e8e873380d076ba8d4079bb8f01e12e2bb2aa832f4523991ab5fe15336794847a1495afdd42307e427f194a003d3aa70181ca1e64bbc85a76728b17d9", @ANYRES32=0x0, @ANYRES32], 0x48) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x24018100}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(&(0x7f0000000000)='./file0\x00') bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) modify_ldt$read(0x0, &(0x7f0000000400)=""/229, 0xe5) r5 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) syz_io_uring_setup(0x779b, &(0x7f0000000380)={0x0, 0xf5a5, 0x0, 0xffffffff, 0x2028a}, &(0x7f0000000280), &(0x7f0000000200)) 1.726898777s ago: executing program 2 (id=463): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x200000000000011, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x1, 0x4) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="270027bd7000078e8d6b020000000800090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f5a000/0x2000)=nil, 0x2, 0x0, 0x0, 0xdff, 0x3e, 0xa, 0x2, 0x4}) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x11}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x26, 0x0, &(0x7f0000000400)="2100000000000080000b000000009a2a865c5f6f767173526c6af7c9d1db9097eb0f916a7fea", 0x0, 0x1200000, 0x0, 0x0, 0xfffffffffffffc28, 0x0, 0x0, 0xc}, 0x4c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.260212588s ago: executing program 0 (id=464): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb90, 0x4000) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000240)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) lseek(r1, 0xa, 0x4) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x3, 0x7, 0x3, 0x7f, 0x20000006, 0x4d, 0xed8, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x2000, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0xda32, 0x5, 0xffffffff, 0xe661, 0xb3, 0x7, 0x9, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0xffffe02e, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x3, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xff, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0xa, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x4f40b68d, 0x2, 0x5, 0x8, 0x10000, 0x3, 0x7, 0x3e7, 0xb, 0x5, 0x6, 0x2, 0x3, 0x20000008, 0x0, 0x6d01, 0x6, 0x1, 0x800003, 0x193d, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x9, 0x7ff, 0x12b, 0x4, 0xb, 0x0, 0x0, 0x5, 0x8, 0x120000, 0x3, 0x2006, 0x8, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0xd2, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd9, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x101800, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) recvfrom(r3, 0x0, 0x0, 0x2042, 0x0, 0x0) r4 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x41, 0x0, {0x3}}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000280)={r2}, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3}, 0x20) fanotify_init(0xf00, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 1.03266325s ago: executing program 1 (id=465): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x4000094) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x7ff, 0x0, "03880a17f2cd8bad"}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x1, 0x110000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x80000000, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004cc, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x1ff, 0x5]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc0fc4110, &(0x7f00000001c0)={0x5, [0xffffffdf, 0x7f, 0x2], [{0x3, 0xaa7, 0x1, 0x1, 0x1}, {0xa, 0x1}, {0x296df439, 0xda1}, {0x2, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x9}, {0x3, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x7ff, 0x1, 0x1}, {0x2, 0x3800, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x5, 0x1}, {0x8, 0x8001, 0x1}, {0x1, 0x8, 0x1, 0x1, 0x1, 0x1}], 0x9}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0xa, 0x8000, 0x40, 0x0, 0x0, 0x2004c9, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000, 0x800}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_NMI(r7, 0xae9a) 1.020859643s ago: executing program 0 (id=466): mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x16d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 888.615549ms ago: executing program 4 (id=467): r0 = fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000d91486779c010fc03d7c173753"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x400) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x5, 0x0, 0x1, '\x00', 0xfffffffffffffffc}) syz_io_uring_setup(0x8e5, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xda, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x6, 0x1, 0x4, 0x2}) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) close_range(r0, 0xffffffffffffffff, 0x0) 769.092146ms ago: executing program 0 (id=468): syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0002907800000000e00000018aff0f9f00000000000000103310ee00"/47], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xfffffffffffffd1e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) 681.150482ms ago: executing program 1 (id=469): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) 0s ago: executing program 2 (id=470): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c040007031a000900", 0x33a) (async) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000180)=""/91) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:28632' (ED25519) to the list of known hosts. [ 41.357285][ T5852] cgroup: Unknown subsys name 'net' [ 41.506563][ T5852] cgroup: Unknown subsys name 'cpuset' [ 41.516729][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.373393][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.005411][ T5300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.009772][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.013159][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.015679][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.018222][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.020934][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.021144][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.023402][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.026375][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.028357][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.029164][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.029660][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.030210][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.032098][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.033551][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.035420][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.038981][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.043895][ T5300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.045785][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.048568][ T5300] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.306406][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 46.383925][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 46.434377][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 46.518098][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 46.525265][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.527984][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.530395][ T5937] bridge_slave_0: entered allmulticast mode [ 46.533165][ T5937] bridge_slave_0: entered promiscuous mode [ 46.540796][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.543303][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.545565][ T5937] bridge_slave_1: entered allmulticast mode [ 46.548166][ T5937] bridge_slave_1: entered promiscuous mode [ 46.639475][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.744105][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.748064][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.751118][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.754414][ T5949] bridge_slave_0: entered allmulticast mode [ 46.758297][ T5949] bridge_slave_0: entered promiscuous mode [ 46.789323][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.792407][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.795836][ T5945] bridge_slave_0: entered allmulticast mode [ 46.799152][ T5945] bridge_slave_0: entered promiscuous mode [ 46.851716][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.854057][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.856371][ T5949] bridge_slave_1: entered allmulticast mode [ 46.859424][ T5949] bridge_slave_1: entered promiscuous mode [ 46.868065][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.871108][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.875852][ T5945] bridge_slave_1: entered allmulticast mode [ 46.879782][ T5945] bridge_slave_1: entered promiscuous mode [ 46.912742][ T5937] team0: Port device team_slave_0 added [ 46.916814][ T5937] team0: Port device team_slave_1 added [ 47.055150][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.057998][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.060274][ T5936] bridge_slave_0: entered allmulticast mode [ 47.062866][ T5936] bridge_slave_0: entered promiscuous mode [ 47.069693][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.072805][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.074826][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.082084][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.088466][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.091406][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.094216][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.096510][ T5936] bridge_slave_1: entered allmulticast mode [ 47.099141][ T5936] bridge_slave_1: entered promiscuous mode [ 47.103656][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.107524][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.109565][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.117105][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.121705][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.217448][ T5945] team0: Port device team_slave_0 added [ 47.239496][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.244598][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.249454][ T5945] team0: Port device team_slave_1 added [ 47.253111][ T5949] team0: Port device team_slave_0 added [ 47.337749][ T5949] team0: Port device team_slave_1 added [ 47.365998][ T5936] team0: Port device team_slave_0 added [ 47.439258][ T5937] hsr_slave_0: entered promiscuous mode [ 47.441524][ T5937] hsr_slave_1: entered promiscuous mode [ 47.446463][ T5936] team0: Port device team_slave_1 added [ 47.449856][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.452022][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.460095][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.464451][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.466883][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.474591][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.478478][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.481300][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.491922][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.497726][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.500599][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.511129][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.578147][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.581003][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.591535][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.598362][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.601154][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.611367][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.712232][ T5945] hsr_slave_0: entered promiscuous mode [ 47.719784][ T5945] hsr_slave_1: entered promiscuous mode [ 47.722584][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.726068][ T5945] Cannot create hsr debugfs directory [ 47.765147][ T5936] hsr_slave_0: entered promiscuous mode [ 47.767399][ T5936] hsr_slave_1: entered promiscuous mode [ 47.769569][ T5936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.771869][ T5936] Cannot create hsr debugfs directory [ 47.795527][ T5949] hsr_slave_0: entered promiscuous mode [ 47.797914][ T5949] hsr_slave_1: entered promiscuous mode [ 47.799883][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.802029][ T5949] Cannot create hsr debugfs directory [ 48.045073][ T5944] Bluetooth: hci1: command tx timeout [ 48.053151][ T5944] Bluetooth: hci3: command tx timeout [ 48.123850][ T5944] Bluetooth: hci2: command tx timeout [ 48.123863][ T5300] Bluetooth: hci0: command tx timeout [ 48.197572][ T5937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.204090][ T5937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.208807][ T5937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.218047][ T5937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.246686][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.250768][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.256470][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.262195][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.307831][ T5936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.312123][ T5936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.316810][ T5936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.321285][ T5936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.381526][ T5945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.386368][ T5945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.394004][ T5945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.398644][ T5945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.426912][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.461082][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.466527][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.478519][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.481644][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.500156][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.510287][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.512451][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.525374][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.527839][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.531830][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.534361][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.564156][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.588996][ T5949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.592071][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.609845][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.617386][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.627351][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.629593][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.647150][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.649320][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.673717][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.696057][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.698492][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.716742][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.718976][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.742846][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.795469][ T5949] veth0_vlan: entered promiscuous mode [ 48.804143][ T5949] veth1_vlan: entered promiscuous mode [ 48.810148][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.848981][ T5949] veth0_macvtap: entered promiscuous mode [ 48.856156][ T5937] veth0_vlan: entered promiscuous mode [ 48.866889][ T5949] veth1_macvtap: entered promiscuous mode [ 48.880284][ T5937] veth1_vlan: entered promiscuous mode [ 48.892649][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.899630][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.910162][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.912861][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.915822][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.918822][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.937781][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.941924][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.959522][ T5937] veth0_macvtap: entered promiscuous mode [ 48.970102][ T5937] veth1_macvtap: entered promiscuous mode [ 48.991068][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.006059][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.008542][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.027562][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.030805][ T5936] veth0_vlan: entered promiscuous mode [ 49.040432][ T5937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.043232][ T5937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.046009][ T5937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.048575][ T5937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.058762][ T5945] veth0_vlan: entered promiscuous mode [ 49.066527][ T5936] veth1_vlan: entered promiscuous mode [ 49.070315][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.072960][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.081889][ T5945] veth1_vlan: entered promiscuous mode [ 49.119892][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.120908][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.125310][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.134890][ T5945] veth0_macvtap: entered promiscuous mode [ 49.146794][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.149246][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.153274][ T5945] veth1_macvtap: entered promiscuous mode [ 49.156442][ T5936] veth0_macvtap: entered promiscuous mode [ 49.171676][ T5936] veth1_macvtap: entered promiscuous mode [ 49.185706][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.197252][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.205756][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.211380][ T5945] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.215303][ T5945] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.218755][ T5945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.222197][ T5945] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.229357][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.242859][ T5936] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.248458][ T5936] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.251958][ T5936] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.256213][ T5936] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.317327][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.319791][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.353466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.364815][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.371791][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.373166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.397985][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.400392][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.460637][ T6009] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.464462][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.472322][ T6009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.473815][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.475274][ T6009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.480368][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.549110][ T6011] block device autoloading is deprecated and will be removed. [ 49.565618][ T6009] binder: 6007:6009 ioctl c0306201 80000240 returned -11 [ 49.764038][ T6016] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.784012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 49.934210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.937937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.940624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.074109][ T6020] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 50.123576][ T5300] Bluetooth: hci1: command tx timeout [ 50.133389][ T5300] Bluetooth: hci3: command tx timeout [ 50.147975][ T6020] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 50.203363][ T5300] Bluetooth: hci0: command tx timeout [ 50.290573][ T6029] ======================================================= [ 50.290573][ T6029] WARNING: The mand mount option has been deprecated and [ 50.290573][ T6029] and is ignored by this kernel. Remove the mand [ 50.290573][ T6029] option from the mount to silence this warning. [ 50.290573][ T6029] ======================================================= [ 50.644457][ T6037] process 'syz.3.9' launched './file2' with NULL argv: empty string added [ 50.814563][ T6031] Zero length message leads to an empty skb [ 51.120754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.586037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.590880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.594126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.654113][ T5300] Bluetooth: hci2: command tx timeout [ 52.203997][ T5300] Bluetooth: hci3: command tx timeout [ 52.206340][ T5944] Bluetooth: hci1: command tx timeout [ 52.293177][ T5944] Bluetooth: hci0: command tx timeout [ 52.551625][ T6066] input: syz1 as /devices/virtual/input/input5 [ 52.571498][ T6066] netlink: 830 bytes leftover after parsing attributes in process `syz.2.15'. [ 53.186602][ T6083] input: syz0 as /devices/virtual/input/input6 [ 53.733106][ T5944] Bluetooth: hci2: command tx timeout [ 54.283502][ T5944] Bluetooth: hci1: command tx timeout [ 54.284135][ T5300] Bluetooth: hci3: command tx timeout [ 54.373192][ T5300] Bluetooth: hci0: command tx timeout [ 54.733062][ T6103] input: syz1 as /devices/virtual/input/input7 [ 54.760167][ T6103] netlink: 830 bytes leftover after parsing attributes in process `syz.2.24'. [ 54.852546][ T6095] syz.3.21 (6095): drop_caches: 2 [ 55.629483][ T6122] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 55.698118][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.742410][ T6122] bridge_slave_0 (unregistering): left allmulticast mode [ 55.744596][ T6122] bridge_slave_0 (unregistering): left promiscuous mode [ 55.746816][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.001265][ T6142] netlink: 56 bytes leftover after parsing attributes in process `syz.2.34'. [ 57.004672][ T6142] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 57.008182][ T6142] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 57.338310][ T6148] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.996772][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'. [ 58.008175][ T40] audit: type=1326 audit(1748524169.545:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.2.38" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ae579 code=0x0 [ 58.471854][ T6169] input: syz1 as /devices/virtual/input/input8 [ 59.141530][ T40] audit: type=1326 audit(1748524170.675:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.3.43" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 59.564807][ T5300] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 59.568788][ T5300] Bluetooth: hci2: Injecting HCI hardware error event [ 59.573758][ T5300] Bluetooth: hci2: hardware error 0x00 [ 59.744507][ T40] audit: type=1326 audit(1748524171.265:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.3.43" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf710e579 code=0x7fc00000 [ 59.861272][ T6200] input: syz1 as /devices/virtual/input/input9 [ 59.868167][ T6200] netlink: 'syz.2.49': attribute type 39 has an invalid length. [ 60.053165][ T61] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.223705][ T61] usb 8-1: Using ep0 maxpacket: 16 [ 60.231376][ T61] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.236372][ T61] usb 8-1: config 0 has no interfaces? [ 60.238701][ T61] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 60.242466][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.249843][ T61] usb 8-1: config 0 descriptor?? [ 60.749026][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 61.102813][ T6220] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 61.110124][ T6220] netdevsim netdevsim2: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 61.115143][ T6220] netdevsim netdevsim2: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 61.430277][ T1141] Bluetooth: hci4: Frame reassembly failed (-84) [ 61.643341][ T5300] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 61.927264][ T6247] syz.0.56 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 62.584153][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 62.826137][ T24] usb 8-1: USB disconnect, device number 2 [ 62.871670][ T6259] tipc: Enabling of bearer rejected, failed to enable media [ 63.164410][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 63.164986][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 63.208288][ T40] audit: type=1326 audit(1748524174.745:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.3.60" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 63.755829][ T40] audit: type=1326 audit(1748524175.295:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.3.60" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf710e579 code=0x7fc00000 [ 64.533694][ T5300] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 64.533685][ T5944] Bluetooth: hci5: command 0x1003 tx timeout [ 65.731261][ T6315] netlink: 'syz.2.72': attribute type 4 has an invalid length. [ 66.114030][ T6327] wireguard0: entered promiscuous mode [ 66.116041][ T6327] wireguard0: entered allmulticast mode [ 66.848132][ T6345] capability: warning: `syz.2.79' uses 32-bit capabilities (legacy support in use) [ 67.294583][ T6349] netlink: 'syz.0.80': attribute type 4 has an invalid length. [ 67.804181][ T5300] Bluetooth: hci3: command tx timeout [ 67.933148][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 68.143757][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 68.146140][ T24] usb 7-1: can't read configurations, error -61 [ 68.293460][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.443291][ T5300] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 68.447647][ T6364] ALSA: mixer_oss: invalid OSS volume 'MONIT' [ 68.450318][ T5300] Bluetooth: hci3: Injecting HCI hardware error event [ 68.455617][ T5944] Bluetooth: hci3: hardware error 0x00 [ 68.457093][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 68.466271][ T24] usb 7-1: can't read configurations, error -61 [ 68.469919][ T24] usb usb7-port1: attempt power cycle [ 68.753526][ T6386] "syz.0.88" (6386) uses obsolete ecb(arc4) skcipher [ 68.803412][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 68.827531][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 68.841361][ T24] usb 7-1: can't read configurations, error -61 [ 68.915411][ T6395] 9pnet_fd: Insufficient options for proto=fd [ 68.973377][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 69.006119][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 69.009657][ T24] usb 7-1: can't read configurations, error -61 [ 69.012629][ T24] usb usb7-port1: unable to enumerate USB device [ 69.441672][ T6403] netlink: 830 bytes leftover after parsing attributes in process `syz.1.93'. [ 69.817168][ T6407] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 69.820066][ T6407] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.825212][ T6407] vhci_hcd vhci_hcd.0: Device attached [ 69.829453][ T6407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 69.834174][ T6407] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 69.836355][ T6407] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.838826][ T6407] vhci_hcd vhci_hcd.0: Device attached [ 69.842008][ T6407] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 69.844128][ T6407] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 69.848022][ T6407] vhci_hcd vhci_hcd.0: Device attached [ 69.852459][ T6407] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 69.854566][ T6407] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 69.857015][ T6407] vhci_hcd vhci_hcd.0: Device attached [ 69.859506][ T6407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 69.863435][ T6407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 70.023341][ T5999] vhci_hcd: vhci_device speed not set [ 70.053138][ T6412] vhci_hcd: connection closed [ 70.053713][ T6414] vhci_hcd: connection closed [ 70.054450][ T6410] vhci_hcd: connection closed [ 70.056353][ T12] vhci_hcd: stop threads [ 70.056473][ T6408] vhci_hcd: connection closed [ 70.062254][ T12] vhci_hcd: release socket [ 70.066601][ T12] vhci_hcd: disconnect device [ 70.068255][ T12] vhci_hcd: stop threads [ 70.069679][ T12] vhci_hcd: release socket [ 70.071360][ T12] vhci_hcd: disconnect device [ 70.073103][ T12] vhci_hcd: stop threads [ 70.073529][ T6419] netlink: 'syz.3.95': attribute type 2 has an invalid length. [ 70.077147][ T12] vhci_hcd: release socket [ 70.078818][ T12] vhci_hcd: disconnect device [ 70.080642][ T12] vhci_hcd: stop threads [ 70.084690][ T5999] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 70.085150][ T12] vhci_hcd: release socket [ 70.088449][ T12] vhci_hcd: disconnect device [ 70.103315][ T5999] usb 37-1: enqueue for inactive port 0 [ 70.194647][ T5999] vhci_hcd: vhci_device speed not set [ 70.523250][ T5944] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 70.684501][ T40] audit: type=1326 audit(1748524182.225:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7fc00000 [ 70.846180][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.853162][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.183532][ T40] audit: type=1326 audit(1748524182.725:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70ee579 code=0x7fc00000 [ 72.064808][ T6440] overlayfs: failed to resolve './file1': -2 [ 72.538306][ T6446] netlink: 68 bytes leftover after parsing attributes in process `syz.0.102'. [ 72.541634][ T6446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.102'. [ 72.544487][ T6446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.102'. [ 72.547215][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 72.580809][ T6446] binder: 6445:6446 ioctl c0306201 80000240 returned -11 [ 72.629672][ T6451] netlink: 830 bytes leftover after parsing attributes in process `syz.1.104'. [ 72.768494][ T6456] netlink: 'syz.0.105': attribute type 4 has an invalid length. [ 72.772486][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 72.805515][ T40] audit: type=1326 audit(1748524184.345:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 72.812084][ T40] audit: type=1326 audit(1748524184.345:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 72.815385][ T6460] overlayfs: failed to resolve './file1': -2 [ 72.819038][ T40] audit: type=1326 audit(1748524184.345:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.107" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 72.827878][ T40] audit: type=1326 audit(1748524184.345:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 72.834973][ T40] audit: type=1326 audit(1748524184.345:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 72.841512][ T40] audit: type=1326 audit(1748524184.345:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.107" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 72.848116][ T40] audit: type=1326 audit(1748524184.345:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 72.854708][ T40] audit: type=1326 audit(1748524184.345:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 72.950148][ T6466] FAULT_INJECTION: forcing a failure. [ 72.950148][ T6466] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.956466][ T6466] CPU: 1 UID: 0 PID: 6466 Comm: syz.2.109 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 72.956487][ T6466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.956495][ T6466] Call Trace: [ 72.956499][ T6466] [ 72.956504][ T6466] dump_stack_lvl+0x16c/0x1f0 [ 72.956529][ T6466] should_fail_ex+0x512/0x640 [ 72.956557][ T6466] _copy_from_user+0x2e/0xd0 [ 72.956573][ T6466] get_compat_msghdr+0xa7/0x170 [ 72.956594][ T6466] ? __pfx_get_compat_msghdr+0x10/0x10 [ 72.956622][ T6466] ___sys_sendmsg+0x1ae/0x1d0 [ 72.956645][ T6466] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.956676][ T6466] ? find_held_lock+0x2b/0x80 [ 72.956700][ T6466] __sys_sendmsg+0x16d/0x220 [ 72.956714][ T6466] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.956741][ T6466] ? rcu_is_watching+0x12/0xc0 [ 72.956762][ T6466] __do_fast_syscall_32+0x7c/0x3a0 [ 72.956777][ T6466] do_fast_syscall_32+0x32/0x80 [ 72.956792][ T6466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.956804][ T6466] RIP: 0023:0xf70ae579 [ 72.956813][ T6466] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 72.956823][ T6466] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 72.956834][ T6466] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 72.956840][ T6466] RDX: 0000000000004010 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.956845][ T6466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.956851][ T6466] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 72.956856][ T6466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.956869][ T6466] [ 74.818218][ T6506] overlayfs: missing 'lowerdir' [ 74.906140][ T6509] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.929602][ T6509] netlink: 'syz.2.121': attribute type 23 has an invalid length. [ 75.055252][ T840] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 75.233787][ T840] usb 6-1: config 0 has no interfaces? [ 75.243665][ T840] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 75.247368][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.249697][ T840] usb 6-1: Product: syz [ 75.251803][ T840] usb 6-1: Manufacturer: syz [ 75.251818][ T840] usb 6-1: SerialNumber: syz [ 75.255530][ T840] usb 6-1: config 0 descriptor?? [ 76.633474][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.014409][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 77.017494][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.052909][ T10] usb 5-1: config 0 descriptor?? [ 77.057445][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 77.344701][ T10] gspca_spca508: reg_read err -71 [ 77.348725][ T10] gspca_spca508: reg_read err -71 [ 77.351863][ T10] gspca_spca508: reg_read err -71 [ 77.354857][ T10] gspca_spca508: reg_read err -71 [ 77.357292][ T10] gspca_spca508: reg_read err -71 [ 77.359897][ T10] gspca_spca508: reg write: error -71 [ 77.362200][ T10] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 77.369255][ T10] usb 5-1: USB disconnect, device number 2 [ 77.531683][ T53] usb 6-1: USB disconnect, device number 2 [ 77.933145][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 78.094681][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 78.097185][ T10] usb 7-1: can't read configurations, error -61 [ 78.101218][ T6568] trusted_key: encrypted_key: insufficient parameters specified [ 78.106757][ T6568] trusted_key: encrypted_key: insufficient parameters specified [ 78.112270][ T6568] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 78.114973][ T6568] netlink: 40 bytes leftover after parsing attributes in process `syz.3.136'. [ 78.130922][ T6568] team0: Port device geneve0 added [ 78.223298][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 78.275120][ T6570] FAULT_INJECTION: forcing a failure. [ 78.275120][ T6570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.279702][ T6570] CPU: 1 UID: 0 PID: 6570 Comm: syz.3.137 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 78.279716][ T6570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.279723][ T6570] Call Trace: [ 78.279727][ T6570] [ 78.279732][ T6570] dump_stack_lvl+0x16c/0x1f0 [ 78.279750][ T6570] should_fail_ex+0x512/0x640 [ 78.279769][ T6570] _copy_from_user+0x2e/0xd0 [ 78.279780][ T6570] get_compat_msghdr+0xa7/0x170 [ 78.279796][ T6570] ? __pfx_get_compat_msghdr+0x10/0x10 [ 78.279816][ T6570] ___sys_sendmsg+0x1ae/0x1d0 [ 78.279832][ T6570] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.279852][ T6570] ? find_held_lock+0x2b/0x80 [ 78.279876][ T6570] __sys_sendmsg+0x16d/0x220 [ 78.279890][ T6570] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.279915][ T6570] ? rcu_is_watching+0x12/0xc0 [ 78.279933][ T6570] __do_fast_syscall_32+0x7c/0x3a0 [ 78.279949][ T6570] do_fast_syscall_32+0x32/0x80 [ 78.279963][ T6570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.279976][ T6570] RIP: 0023:0xf710e579 [ 78.279985][ T6570] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 78.279995][ T6570] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 78.280005][ T6570] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 78.280011][ T6570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.280016][ T6570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.280022][ T6570] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 78.280027][ T6570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.280040][ T6570] [ 78.377155][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 78.380002][ T10] usb 7-1: can't read configurations, error -61 [ 78.384767][ T10] usb usb7-port1: attempt power cycle [ 78.723219][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 78.745676][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 78.748725][ T10] usb 7-1: can't read configurations, error -61 [ 78.883161][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 78.906245][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 78.908788][ T10] usb 7-1: can't read configurations, error -61 [ 78.911093][ T10] usb usb7-port1: unable to enumerate USB device [ 79.694151][ T61] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 79.853087][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 79.857579][ T61] usb 8-1: config index 0 descriptor too short (expected 238, got 214) [ 79.863137][ T61] usb 8-1: config 1 has an invalid interface number: 5 but max is 2 [ 79.865739][ T61] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 79.880961][ T61] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 79.883879][ T61] usb 8-1: config 1 has no interface number 1 [ 79.886827][ T61] usb 8-1: too many endpoints for config 1 interface 5 altsetting 1: 93, using maximum allowed: 30 [ 79.890498][ T61] usb 8-1: config 1 interface 5 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 93 [ 79.894777][ T61] usb 8-1: config 1 interface 5 has no altsetting 0 [ 79.898407][ T61] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.901234][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.904526][ T61] usb 8-1: Product: syz [ 79.905857][ T61] usb 8-1: Manufacturer: Ч [ 79.907301][ T61] usb 8-1: SerialNumber: syz [ 80.145228][ T61] usb 8-1: 0:2 : does not exist [ 80.168103][ T61] usb 8-1: USB disconnect, device number 3 [ 81.455365][ T838] cfg80211: failed to load regulatory.db [ 81.911319][ T6000] IPVS: starting estimator thread 0... [ 82.066612][ T6604] IPVS: using max 43 ests per chain, 103200 per kthread [ 82.353139][ T6000] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 82.505072][ T6000] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 82.507670][ T6000] usb 7-1: can't read configurations, error -61 [ 82.538077][ T6627] netlink: 830 bytes leftover after parsing attributes in process `syz.0.154'. [ 82.633183][ T6000] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 82.786269][ T6000] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 82.788884][ T6000] usb 7-1: can't read configurations, error -61 [ 82.791097][ T6000] usb usb7-port1: attempt power cycle [ 82.918044][ T6636] netlink: 68 bytes leftover after parsing attributes in process `syz.3.155'. [ 83.143322][ T6000] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 83.166928][ T6000] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 83.169924][ T6000] usb 7-1: can't read configurations, error -61 [ 83.293139][ T6000] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 83.333467][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 83.346934][ T6000] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 83.350141][ T6000] usb 7-1: can't read configurations, error -61 [ 83.353393][ T6000] usb usb7-port1: unable to enumerate USB device [ 83.484490][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 83.488703][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.492833][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.500516][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.505241][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.511963][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.517832][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.727569][ T24] usb 8-1: GET_CAPABILITIES returned 0 [ 83.729460][ T24] usbtmc 8-1:16.0: can't read capabilities [ 84.006887][ T24] usb 8-1: USB disconnect, device number 4 [ 84.595221][ T6669] netlink: 830 bytes leftover after parsing attributes in process `syz.3.166'. [ 84.703474][ T6672] netlink: 'syz.0.165': attribute type 4 has an invalid length. [ 85.030952][ T6660] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 85.650693][ T6692] netlink: 216 bytes leftover after parsing attributes in process `syz.3.169'. [ 85.654774][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.169'. [ 85.659532][ T6692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.169'. [ 86.184777][ T6695] sctp: [Deprecated]: syz.1.172 (pid 6695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.184777][ T6695] Use struct sctp_sack_info instead [ 86.322099][ T6705] netlink: 68 bytes leftover after parsing attributes in process `syz.1.176'. [ 86.325061][ T6705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.176'. [ 86.327911][ T6705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.176'. [ 86.330585][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 86.382873][ T6708] netlink: 830 bytes leftover after parsing attributes in process `syz.3.177'. [ 86.530280][ T6715] syz.1.179 uses obsolete (PF_INET,SOCK_PACKET) [ 87.255440][ T6735] kernel read not supported for file /eth0 (pid: 6735 comm: syz.3.184) [ 87.259721][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 87.259792][ T40] audit: type=1800 audit(1748524198.795:72): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.184" name="eth0" dev="mqueue" ino=12544 res=0 errno=0 [ 87.541833][ T6739] netlink: 68 bytes leftover after parsing attributes in process `syz.2.187'. [ 89.415319][ T6787] capability: warning: `syz.3.199' uses deprecated v2 capabilities in a way that may be insecure [ 89.803147][ T5944] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 89.806836][ T5944] Bluetooth: hci1: Injecting HCI hardware error event [ 89.810806][ T5944] Bluetooth: hci1: hardware error 0x00 [ 90.193139][ T838] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 90.343242][ T838] usb 6-1: Using ep0 maxpacket: 8 [ 90.348308][ T838] usb 6-1: config 0 has no interfaces? [ 90.350480][ T838] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 90.354485][ T838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.360199][ T838] usb 6-1: config 0 descriptor?? [ 90.780118][ T10] usb 6-1: USB disconnect, device number 3 [ 91.308751][ T6821] FAULT_INJECTION: forcing a failure. [ 91.308751][ T6821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.312949][ T6821] CPU: 0 UID: 0 PID: 6821 Comm: syz.3.207 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 91.312964][ T6821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.312971][ T6821] Call Trace: [ 91.312974][ T6821] [ 91.312979][ T6821] dump_stack_lvl+0x16c/0x1f0 [ 91.313017][ T6821] should_fail_ex+0x512/0x640 [ 91.313046][ T6821] _copy_from_user+0x2e/0xd0 [ 91.313064][ T6821] __sys_bpf+0x21d/0x4d80 [ 91.313090][ T6821] ? __pfx___sys_bpf+0x10/0x10 [ 91.313108][ T6821] ? ksys_write+0x190/0x250 [ 91.313127][ T6821] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 91.313156][ T6821] ? fput+0x70/0xf0 [ 91.313175][ T6821] ? ksys_write+0x1ac/0x250 [ 91.313190][ T6821] ? __pfx_ksys_write+0x10/0x10 [ 91.313212][ T6821] __ia32_sys_bpf+0x76/0xe0 [ 91.313238][ T6821] __do_fast_syscall_32+0x7c/0x3a0 [ 91.313263][ T6821] do_fast_syscall_32+0x32/0x80 [ 91.313284][ T6821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.313304][ T6821] RIP: 0023:0xf710e579 [ 91.313317][ T6821] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 91.313332][ T6821] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 91.313349][ T6821] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 0000000080000300 [ 91.313359][ T6821] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.313368][ T6821] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.313376][ T6821] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 91.313385][ T6821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.313409][ T6821] [ 91.388359][ T6822] __nla_validate_parse: 3 callbacks suppressed [ 91.388370][ T6822] netlink: 830 bytes leftover after parsing attributes in process `syz.1.208'. [ 91.883139][ T5944] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 92.375870][ T5981] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 92.535830][ T5981] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.540001][ T5981] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.546319][ T5981] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.550774][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.766113][ T5981] usb 5-1: usb_control_msg returned -32 [ 92.769041][ T5981] usbtmc 5-1:16.0: can't read capabilities [ 93.637809][ T6872] input: syz1 as /devices/virtual/input/input13 [ 93.662569][ T6872] netlink: 830 bytes leftover after parsing attributes in process `syz.2.220'. [ 93.669694][ T6875] netlink: 'syz.3.221': attribute type 1 has an invalid length. [ 93.991189][ T6882] warning: `syz.3.222' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.160934][ T6864] syz.1.218 (6864): drop_caches: 1 [ 94.239499][ T6864] syz.1.218 (6864): drop_caches: 1 [ 94.521531][ T6889] xt_bpf: check failed: parse error [ 95.082849][ T6914] netlink: 68 bytes leftover after parsing attributes in process `syz.2.231'. [ 95.086351][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.231'. [ 95.089274][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.231'. [ 95.092102][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 95.205485][ T5982] usb 5-1: USB disconnect, device number 3 [ 95.249684][ T6921] input: syz1 as /devices/virtual/input/input14 [ 95.261220][ T6921] netlink: 830 bytes leftover after parsing attributes in process `syz.0.233'. [ 95.296819][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 96.122443][ T6925] syz.1.234 (6925) used greatest stack depth: 17768 bytes left [ 96.353219][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.383220][ T5982] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 96.523275][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 96.529055][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.534025][ T34] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.537768][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.544035][ T34] usb 5-1: config 0 descriptor?? [ 96.558288][ T5982] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.563421][ T5982] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.567995][ T5982] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 96.572926][ T5982] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 96.577192][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.613704][ T6974] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 96.639410][ T5982] hub 7-1:1.0: bad descriptor, ignoring hub [ 96.642818][ T5982] hub 7-1:1.0: probe with driver hub failed with error -5 [ 96.651616][ T5982] cdc_wdm 7-1:1.0: skipping garbage [ 96.654381][ T5982] cdc_wdm 7-1:1.0: skipping garbage [ 96.676619][ T5982] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 96.679369][ T5982] cdc_wdm 7-1:1.0: Unknown control protocol [ 96.762582][ T34] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 96.948136][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 96.951155][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 96.955226][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 96.957962][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 96.960753][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 96.963509][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 96.966365][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 96.969066][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 96.971897][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 96.974675][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 96.977635][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 96.980662][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 96.983769][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 96.987390][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 96.990855][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 96.993676][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 96.994912][ T40] audit: type=1400 audit(1748524208.475:73): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A090EA3680EB06A1A5FD3F7614EFCD31267A0590DD509A5EFFE069ABB05AD3352B3AC017439E1DBC66F4DF20C0741B02DB717F35BBBCD4A734DE1F70C73C07EDA77D9616BE3DD1E63E92055FE373A94F022B1F018E4B2A80C8DE7F63E446A7147 pid=6970 comm="syz.2.238" [ 96.997123][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 97.105508][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 97.108370][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 97.111202][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 97.114023][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 97.205645][ T34] usb 7-1: USB disconnect, device number 14 [ 97.206225][ T24] usb 7-1: Failed to suspend device, error -71 [ 97.396399][ T6973] Bluetooth: MGMT ver 1.23 [ 97.593383][ T40] audit: type=1326 audit(1748524209.135:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7fc00000 [ 97.962170][ T40] audit: type=1326 audit(1748524209.495:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.2.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 97.987406][ T40] audit: type=1326 audit(1748524209.495:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.2.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 97.996769][ T40] audit: type=1326 audit(1748524209.505:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.2.245" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 98.006704][ T40] audit: type=1326 audit(1748524209.505:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.2.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 98.015950][ T40] audit: type=1326 audit(1748524209.505:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.2.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 98.025349][ T40] audit: type=1326 audit(1748524209.505:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.2.245" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 98.038776][ T40] audit: type=1326 audit(1748524209.505:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.2.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 98.046817][ T40] audit: type=1326 audit(1748524209.505:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.2.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 98.243161][ T5981] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 98.393107][ T5981] usb 8-1: Using ep0 maxpacket: 16 [ 98.396419][ T5981] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 98.400246][ T5981] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 98.405844][ T5981] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 98.408847][ T5981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.411555][ T5981] usb 8-1: Product: syz [ 98.412976][ T5981] usb 8-1: Manufacturer: syz [ 98.414806][ T5981] usb 8-1: SerialNumber: syz [ 98.417845][ T5981] usb 8-1: config 0 descriptor?? [ 98.486817][ T7009] input: syz1 as /devices/virtual/input/input15 [ 98.494279][ T7009] netlink: 830 bytes leftover after parsing attributes in process `syz.1.248'. [ 98.626992][ T5981] appledisplay 8-1:0.0: Error while getting initial brightness: -71 [ 98.634221][ T5981] appledisplay 8-1:0.0: probe with driver appledisplay failed with error -71 [ 98.640308][ T5981] usb 8-1: USB disconnect, device number 5 [ 98.856078][ T7016] FAULT_INJECTION: forcing a failure. [ 98.856078][ T7016] name failslab, interval 1, probability 0, space 0, times 1 [ 98.860061][ T7016] CPU: 2 UID: 0 PID: 7016 Comm: syz.2.250 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 98.860075][ T7016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.860081][ T7016] Call Trace: [ 98.860086][ T7016] [ 98.860090][ T7016] dump_stack_lvl+0x16c/0x1f0 [ 98.860108][ T7016] should_fail_ex+0x512/0x640 [ 98.860125][ T7016] ? fs_reclaim_acquire+0xae/0x150 [ 98.860137][ T7016] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 98.860152][ T7016] should_failslab+0xc2/0x120 [ 98.860168][ T7016] __kmalloc_noprof+0xd2/0x510 [ 98.860184][ T7016] tomoyo_realpath_from_path+0xc2/0x6e0 [ 98.860201][ T7016] ? tomoyo_profile+0x47/0x60 [ 98.860212][ T7016] tomoyo_path_number_perm+0x245/0x580 [ 98.860224][ T7016] ? tomoyo_path_number_perm+0x237/0x580 [ 98.860238][ T7016] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 98.860265][ T7016] ? find_held_lock+0x2b/0x80 [ 98.860281][ T7016] ? hook_file_ioctl_common+0x145/0x410 [ 98.860296][ T7016] ? __fget_files+0x20e/0x3c0 [ 98.860307][ T7016] ? fput+0x60/0xf0 [ 98.860323][ T7016] security_file_ioctl_compat+0x9b/0x240 [ 98.860339][ T7016] __ia32_compat_sys_ioctl+0xc3/0x370 [ 98.860351][ T7016] __do_fast_syscall_32+0x7c/0x3a0 [ 98.860367][ T7016] do_fast_syscall_32+0x32/0x80 [ 98.860382][ T7016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.860395][ T7016] RIP: 0023:0xf70ae579 [ 98.860404][ T7016] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 98.860414][ T7016] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 98.860423][ T7016] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089fb [ 98.860430][ T7016] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.860435][ T7016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.860441][ T7016] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 98.860446][ T7016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.860464][ T7016] [ 98.860468][ T7016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.962923][ T7018] input: syz1 as /devices/virtual/input/input16 [ 99.131130][ T5982] usb 5-1: USB disconnect, device number 4 [ 99.200619][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.252'. [ 99.413273][ T5944] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 99.513339][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 100.276186][ T7039] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 100.343291][ T7047] fuse: Unknown parameter 'Od' [ 100.885086][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 101.033684][ T7058] netlink: 68 bytes leftover after parsing attributes in process `syz.2.263'. [ 101.036904][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.263'. [ 101.040598][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.263'. [ 101.044945][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 101.047283][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 101.052331][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.057149][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.062316][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.066915][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.072039][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.075336][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.188054][ T7062] input: syz1 as /devices/virtual/input/input17 [ 101.214046][ T7062] netlink: 830 bytes leftover after parsing attributes in process `syz.2.264'. [ 101.293406][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 101.295192][ T24] usbtmc 6-1:16.0: can't read capabilities [ 101.586415][ T34] usb 6-1: USB disconnect, device number 4 [ 101.751744][ T7069] netlink: 208280 bytes leftover after parsing attributes in process `syz.0.265'. [ 101.855935][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 102.067761][ T7077] xt_cluster: node mask cannot exceed total number of nodes [ 102.135567][ T5999] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 102.231323][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 102.231334][ T40] audit: type=1326 audit(1748524213.765:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.1.272" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 102.296200][ T5999] usb 8-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 102.300482][ T5999] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.310734][ T5999] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 102.314684][ T5999] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.324419][ T5999] usb 8-1: config 0 descriptor?? [ 102.423162][ T24] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 102.583176][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 102.586338][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 102.591719][ T24] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 102.605188][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.608228][ T24] usb 7-1: Product: syz [ 102.609387][ T24] usb 7-1: Manufacturer: syz [ 102.610856][ T24] usb 7-1: SerialNumber: syz [ 102.613608][ T24] usb 7-1: config 0 descriptor?? [ 102.616823][ T7085] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 102.619869][ T24] hub 7-1:0.0: bad descriptor, ignoring hub [ 102.622478][ T24] hub 7-1:0.0: probe with driver hub failed with error -5 [ 102.628420][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input18 [ 103.096580][ T34] usb 7-1: USB disconnect, device number 15 [ 103.096719][ C2] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 103.283271][ T7106] input: syz1 as /devices/virtual/input/input19 [ 103.366446][ T40] audit: type=1326 audit(1748524214.905:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.1.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7fc00000 [ 103.914919][ T40] audit: type=1326 audit(1748524215.455:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.1.275" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70ee579 code=0x7fc00000 [ 104.263186][ T840] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 104.409417][ T7122] __nla_validate_parse: 1 callbacks suppressed [ 104.409436][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.281'. [ 104.414034][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 104.419545][ T840] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.426958][ T840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.432231][ T840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.437620][ T840] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.442130][ T840] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.448597][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.657642][ T840] usb 6-1: GET_CAPABILITIES returned 0 [ 104.659928][ T840] usbtmc 6-1:16.0: can't read capabilities [ 104.719060][ T7126] netlink: 'syz.2.282': attribute type 10 has an invalid length. [ 104.722476][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.731497][ T7126] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.733904][ T7126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.739182][ T7126] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 104.897966][ T5981] usb 8-1: USB disconnect, device number 6 [ 104.946985][ T5999] usb 6-1: USB disconnect, device number 5 [ 105.345023][ T7142] mmap: syz.3.286 (7142) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.607844][ T7169] "syz.0.291" (7169) uses obsolete ecb(arc4) skcipher [ 107.381529][ T7182] input: syz1 as /devices/virtual/input/input20 [ 107.416749][ T7182] netlink: 830 bytes leftover after parsing attributes in process `syz.0.294'. [ 108.481836][ T7186] netlink: 68 bytes leftover after parsing attributes in process `syz.2.297'. [ 108.484890][ T7186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.297'. [ 108.487827][ T7186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.297'. [ 108.490679][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 108.553683][ T7189] trusted_key: syz.3.298 sent an empty control message without MSG_MORE. [ 108.597527][ T7192] binder: BINDER_SET_CONTEXT_MGR already set [ 108.599796][ T7192] binder: 7185:7192 ioctl 4018620d 80000040 returned -16 [ 108.602529][ T7192] binder: 7185:7192 ioctl c0306201 80000240 returned -11 [ 108.970799][ T40] audit: type=1326 audit(1748524220.505:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.2.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 109.523186][ T7213] input: syz1 as /devices/virtual/input/input21 [ 109.539112][ T7213] netlink: 830 bytes leftover after parsing attributes in process `syz.1.303'. [ 109.560627][ T40] audit: type=1326 audit(1748524221.095:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.2.300" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 110.516589][ T7241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.311'. [ 110.797095][ T7254] cgroup: Unknown subsys name 'fowner<00000000000000000000' [ 110.901060][ T40] audit: type=1326 audit(1748524222.435:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 111.432601][ T40] audit: type=1326 audit(1748524222.965:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.313" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf710e579 code=0x7fc00000 [ 111.589650][ T7280] netlink: 52 bytes leftover after parsing attributes in process `syz.0.321'. [ 111.595562][ T7280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.321'. [ 111.623252][ T7282] netlink: 68 bytes leftover after parsing attributes in process `syz.1.322'. [ 111.627729][ T7282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.322'. [ 111.631526][ T7282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.322'. [ 111.638699][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 111.665271][ T7275] raw_sendmsg: syz.2.319 forgot to set AF_INET. Fix it! [ 111.709877][ T7292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'. [ 111.808062][ T7297] loop6: detected capacity change from 0 to 63 [ 111.825539][ T7297] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.828172][ T7297] Buffer I/O error on dev loop6, logical block 1, async page read [ 111.838348][ T7297] Buffer I/O error on dev loop6, logical block 2, async page read [ 111.840971][ T7297] Buffer I/O error on dev loop6, logical block 3, async page read [ 111.844675][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.847363][ T5941] Buffer I/O error on dev loop6, logical block 1, async page read [ 111.849927][ T5941] Buffer I/O error on dev loop6, logical block 2, async page read [ 111.852745][ T5941] Buffer I/O error on dev loop6, logical block 3, async page read [ 111.857870][ T7297] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.860626][ T7297] Buffer I/O error on dev loop6, logical block 1, async page read [ 112.870347][ T40] audit: type=1326 audit(1748524224.405:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.2.327" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 113.281113][ T40] audit: type=1326 audit(1748524224.815:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.2.327" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 113.615949][ T7331] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 113.853169][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.003135][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 114.006459][ T24] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 114.009107][ T24] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 114.011791][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 114.014983][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.018074][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.021031][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.025903][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 114.028709][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.032436][ T24] usb 5-1: config 0 descriptor?? [ 114.093102][ T5982] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 114.246383][ T24] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 114.250674][ T5982] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 114.251059][ T24] usb 5-1: USB disconnect, device number 5 [ 114.263504][ T5982] usb 6-1: can't read configurations, error -61 [ 114.269281][ T24] usblp0: removed [ 114.403152][ T5982] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 114.668150][ T40] audit: type=1326 audit(1748524226.205:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 114.684806][ T5982] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 114.687209][ T5982] usb 6-1: can't read configurations, error -61 [ 114.689966][ T5982] usb usb6-port1: attempt power cycle [ 115.023095][ T5982] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 115.047007][ T5982] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 115.049970][ T5982] usb 6-1: can't read configurations, error -61 [ 115.173978][ T5982] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 115.196309][ T5982] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 115.198748][ T5982] usb 6-1: can't read configurations, error -61 [ 115.200983][ T5982] usb usb6-port1: unable to enumerate USB device [ 115.201491][ T40] audit: type=1326 audit(1748524226.735:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.339" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf710e579 code=0x7fc00000 [ 115.986204][ T40] audit: type=1326 audit(1748524227.525:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.2.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 115.993570][ T40] audit: type=1326 audit(1748524227.525:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.2.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 116.000170][ T40] audit: type=1326 audit(1748524227.535:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.2.347" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 116.007372][ T40] audit: type=1326 audit(1748524227.535:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.2.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 116.015271][ T40] audit: type=1326 audit(1748524227.535:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.2.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 116.021924][ T40] audit: type=1326 audit(1748524227.535:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.2.347" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 116.028811][ T40] audit: type=1326 audit(1748524227.535:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.2.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 116.036390][ T40] audit: type=1326 audit(1748524227.535:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.2.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 116.164586][ T7399] geneve2: entered promiscuous mode [ 116.166744][ T7399] geneve2: entered allmulticast mode [ 116.245255][ T7404] overlayfs: statfs failed on './file0' [ 116.843603][ T7431] syz.3.360: attempt to access beyond end of device [ 116.843603][ T7431] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 116.848798][ T7431] qnx4: unable to read the superblock [ 117.187913][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 117.190914][ T7443] netlink: 'syz.3.361': attribute type 5 has an invalid length. [ 117.196435][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.361'. [ 117.213440][ T7443] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 117.217037][ T7443] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 117.220111][ T7443] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 117.223524][ T7443] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 117.275343][ T7443] geneve2: entered promiscuous mode [ 117.277987][ T7443] geneve2: entered allmulticast mode [ 117.291017][ T7446] pim6reg: entered allmulticast mode [ 117.299420][ T7449] pim6reg: left allmulticast mode [ 118.693158][ T841] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.874797][ T841] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 118.877183][ T841] usb 5-1: can't read configurations, error -61 [ 119.014712][ T841] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 119.165343][ T841] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 119.168193][ T841] usb 5-1: can't read configurations, error -61 [ 119.172769][ T841] usb usb5-port1: attempt power cycle [ 119.523152][ T841] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 119.545782][ T841] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 119.548808][ T841] usb 5-1: can't read configurations, error -61 [ 119.673073][ T841] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.695464][ T841] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 119.698005][ T841] usb 5-1: can't read configurations, error -61 [ 119.700210][ T841] usb usb5-port1: unable to enumerate USB device [ 119.763514][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 119.763525][ T40] audit: type=1326 audit(1748524231.305:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7482 comm="syz.3.374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 119.832642][ T7488] block device autoloading is deprecated and will be removed. [ 119.961927][ T7493] sctp: [Deprecated]: syz.2.376 (pid 7493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.961927][ T7493] Use struct sctp_sack_info instead [ 120.211606][ T40] audit: type=1326 audit(1748524231.745:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7482 comm="syz.3.374" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf710e579 code=0x7fc00000 [ 120.795230][ T7518] sctp: [Deprecated]: syz.3.385 (pid 7518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.795230][ T7518] Use struct sctp_sack_info instead [ 121.002123][ T5982] hid (null): global environment stack underflow [ 121.016063][ T5982] hid-generic 0001:0005:0097.0002: global environment stack underflow [ 121.018593][ T5982] hid-generic 0001:0005:0097.0002: item 0 4 1 11 parsing failed [ 121.021218][ T5982] hid-generic 0001:0005:0097.0002: probe with driver hid-generic failed with error -22 [ 121.259668][ T7533] sctp: [Deprecated]: syz.3.388 (pid 7533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.259668][ T7533] Use struct sctp_sack_info instead [ 121.582311][ T7557] input: syz1 as /devices/virtual/input/input22 [ 121.598262][ T7557] netlink: 830 bytes leftover after parsing attributes in process `syz.1.394'. [ 121.789546][ T7551] syz.3.392: attempt to access beyond end of device [ 121.789546][ T7551] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 121.841673][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 121.919255][ T40] audit: type=1326 audit(1748524233.455:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 121.929100][ T40] audit: type=1326 audit(1748524233.455:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.396" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 121.943207][ T40] audit: type=1326 audit(1748524233.455:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 121.953078][ T40] audit: type=1326 audit(1748524233.455:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.396" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 121.967053][ T40] audit: type=1326 audit(1748524233.455:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 121.979010][ T40] audit: type=1326 audit(1748524233.455:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 121.985994][ T40] audit: type=1326 audit(1748524233.455:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.396" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 121.992495][ T40] audit: type=1326 audit(1748524233.455:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 122.720503][ T7576] sctp: [Deprecated]: syz.1.401 (pid 7576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.720503][ T7576] Use struct sctp_sack_info instead [ 123.126987][ T7590] lo: entered promiscuous mode [ 123.129040][ T7590] tunl0: entered promiscuous mode [ 123.133044][ T7590] gre0: entered promiscuous mode [ 123.135928][ T7590] gretap0: entered promiscuous mode [ 123.138471][ T7590] erspan0: entered promiscuous mode [ 123.141164][ T7590] ip_vti0: entered promiscuous mode [ 123.143949][ T7590] ip6_vti0: entered promiscuous mode [ 123.146641][ T7590] sit0: entered promiscuous mode [ 123.149714][ T7590] ip6tnl0: entered promiscuous mode [ 123.152577][ T7590] ip6gre0: entered promiscuous mode [ 123.155107][ T7590] syz_tun: entered promiscuous mode [ 123.158838][ T7590] ip6gretap0: entered promiscuous mode [ 123.162262][ T7590] bridge0: entered promiscuous mode [ 123.167718][ T7590] vcan0: entered promiscuous mode [ 123.169922][ T7590] bond0: entered promiscuous mode [ 123.171637][ T7590] bond_slave_0: entered promiscuous mode [ 123.186037][ T7590] bond_slave_1: entered promiscuous mode [ 123.196713][ T7590] team0: entered promiscuous mode [ 123.201090][ T7590] team_slave_0: entered promiscuous mode [ 123.208538][ T7590] team_slave_1: entered promiscuous mode [ 123.220474][ T7590] dummy0: entered promiscuous mode [ 123.232084][ T7590] nlmon0: entered promiscuous mode [ 123.240180][ T7590] caif0: entered promiscuous mode [ 123.242000][ T7590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.559434][ T7601] evm: overlay not supported [ 123.674254][ T7605] input: syz1 as /devices/virtual/input/input23 [ 123.689170][ T7605] netlink: 830 bytes leftover after parsing attributes in process `syz.2.409'. [ 123.852716][ T7602] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 123.855402][ T7602] netlink: 244 bytes leftover after parsing attributes in process `syz.3.407'. [ 124.483076][ T5999] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.663109][ T5999] usb 5-1: Using ep0 maxpacket: 32 [ 124.667992][ T5999] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 124.677375][ T5999] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 124.681034][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 124.684754][ T5999] usb 5-1: Product: syz [ 124.686692][ T5999] usb 5-1: Manufacturer: syz [ 124.688710][ T5999] usb 5-1: SerialNumber: syz [ 124.694436][ T5999] usb 5-1: config 0 descriptor?? [ 124.698175][ T7610] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.698202][ T7624] loop6: detected capacity change from 0 to 524287999 [ 124.718097][ T7614] sctp: [Deprecated]: syz.3.412 (pid 7614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.718097][ T7614] Use struct sctp_sack_info instead [ 124.724729][ T7624] FAULT_INJECTION: forcing a failure. [ 124.724729][ T7624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.729464][ T7624] CPU: 2 UID: 0 PID: 7624 Comm: syz.2.415 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 124.729479][ T7624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.729486][ T7624] Call Trace: [ 124.729490][ T7624] [ 124.729494][ T7624] dump_stack_lvl+0x16c/0x1f0 [ 124.729518][ T7624] should_fail_ex+0x512/0x640 [ 124.729538][ T7624] _copy_to_user+0x32/0xd0 [ 124.729549][ T7624] simple_read_from_buffer+0xcb/0x170 [ 124.729562][ T7624] proc_fail_nth_read+0x197/0x270 [ 124.729581][ T7624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.729610][ T7624] ? rw_verify_area+0xcf/0x680 [ 124.729623][ T7624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.729640][ T7624] vfs_read+0x1e1/0xc60 [ 124.729652][ T7624] ? fdget_pos+0x2a2/0x370 [ 124.729667][ T7624] ? __pfx_vfs_read+0x10/0x10 [ 124.729677][ T7624] ? find_held_lock+0x2b/0x80 [ 124.729697][ T7624] ? __fget_files+0x20e/0x3c0 [ 124.729712][ T7624] ksys_read+0x12a/0x250 [ 124.729724][ T7624] ? __pfx_ksys_read+0x10/0x10 [ 124.729737][ T7624] ? rcu_is_watching+0x12/0xc0 [ 124.729755][ T7624] __do_fast_syscall_32+0x7c/0x3a0 [ 124.729771][ T7624] do_fast_syscall_32+0x32/0x80 [ 124.729785][ T7624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.729799][ T7624] RIP: 0023:0xf70ae579 [ 124.729807][ T7624] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 124.729816][ T7624] RSP: 002b:00000000f509e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 124.729826][ T7624] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f509e620 [ 124.729832][ T7624] RDX: 000000000000000f RSI: 00000000f7412ff4 RDI: 0000000000000000 [ 124.729838][ T7624] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 124.729844][ T7624] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 124.729849][ T7624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.729862][ T7624] [ 125.109392][ T7643] cgroup: Name too long [ 125.155468][ T5981] usb 5-1: USB disconnect, device number 10 [ 125.243188][ T5999] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 125.414892][ T5999] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.417618][ T5999] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.420728][ T5999] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.439467][ T5999] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.456007][ T5999] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.459124][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.461584][ T5999] usb 7-1: Product: syz [ 125.462947][ T5999] usb 7-1: Manufacturer: syz [ 125.469347][ T5999] cdc_wdm 7-1:1.0: skipping garbage [ 125.471092][ T5999] cdc_wdm 7-1:1.0: skipping garbage [ 125.474268][ T5999] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 125.476149][ T5999] cdc_wdm 7-1:1.0: Unknown control protocol [ 125.808852][ T7655] nfs: Unknown parameter '' [ 126.265340][ T5999] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 126.267796][ T5999] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 126.270251][ T5999] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 126.272672][ T5999] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 126.293154][ T5999] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 126.295715][ T5999] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 126.298096][ T5999] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 126.300484][ T5999] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 126.302926][ T5999] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 126.316454][ T5999] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 126.329688][ T5999] hid-generic 00A0:0008:0003.0003: hidraw1: HID v0.05 Device [syz1] on syz0 [ 126.410335][ T7667] sp0: Synchronizing with TNC [ 126.683380][ T5982] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 126.844134][ T5982] usb 6-1: Using ep0 maxpacket: 8 [ 126.854240][ T5982] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 126.856832][ T5982] usb 6-1: config 179 has no interface number 0 [ 126.858809][ T5982] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 126.871310][ T5982] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 126.876353][ T5982] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 126.879602][ T5982] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 126.884622][ T5982] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 126.888947][ T5982] usb 6-1: config 179 interface 65 has no altsetting 0 [ 126.893404][ T5982] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 126.898112][ T5982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.919736][ T5982] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input24 [ 127.023920][ T5335] input input24: unable to receive magic message: -110 [ 127.054432][ T5335] input input24: unable to receive magic message: -32 [ 127.062195][ T5335] input input24: unable to receive magic message: -32 [ 127.065961][ T5335] input input24: unable to receive magic message: -32 [ 127.073313][ T5335] input input24: unable to receive magic message: -32 [ 127.107733][ T7667] input input24: unable to receive magic message: -32 [ 127.126968][ T61] usb 6-1: USB disconnect, device number 10 [ 127.127071][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 127.131165][ T61] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 127.309902][ T7669] mkiss: ax0: crc mode is auto. [ 128.082890][ T5938] usb 7-1: USB disconnect, device number 16 [ 128.095802][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.433'. [ 128.138695][ T7677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.953739][ T7708] Illegal XDP return value 4294967294 on prog (id 117) dev N/A, expect packet loss! [ 129.163430][ T7710] lo speed is unknown, defaulting to 1000 [ 129.165554][ T7710] lo speed is unknown, defaulting to 1000 [ 129.171840][ T7710] lo speed is unknown, defaulting to 1000 [ 129.182366][ T7710] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.200599][ T7710] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 129.246643][ T7710] lo speed is unknown, defaulting to 1000 [ 129.252332][ T7710] lo speed is unknown, defaulting to 1000 [ 129.259943][ T7710] lo speed is unknown, defaulting to 1000 [ 129.269006][ T7711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.438'. [ 129.375367][ T7710] lo speed is unknown, defaulting to 1000 [ 129.424319][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.427972][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 129.492900][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.498287][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 129.500485][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 129.547645][ T5300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.552835][ T5300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.556361][ T5300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.560780][ T5300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.565399][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.565566][ T5300] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.568935][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 129.598871][ T7721] lo speed is unknown, defaulting to 1000 [ 129.635495][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.639008][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 129.756535][ T7721] chnl_net:caif_netlink_parms(): no params data found [ 129.888567][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.891733][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.894536][ T7721] bridge_slave_0: entered allmulticast mode [ 129.897390][ T7721] bridge_slave_0: entered promiscuous mode [ 129.901914][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.904359][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.907009][ T7721] bridge_slave_1: entered allmulticast mode [ 129.909947][ T7721] bridge_slave_1: entered promiscuous mode [ 129.956482][ T7735] nfs: Unknown parameter '¹c-nteѪ6diC#D#' [ 129.982063][ T7721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.999764][ T7721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.003744][ T60] bridge_slave_1: left allmulticast mode [ 130.005787][ T60] bridge_slave_1: left promiscuous mode [ 130.009192][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.044962][ T60] bridge_slave_0: left allmulticast mode [ 130.047375][ T60] bridge_slave_0: left promiscuous mode [ 130.050044][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.335845][ T60] team0: Port device geneve0 removed [ 130.523752][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.528321][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.532035][ T60] bond0 (unregistering): Released all slaves [ 130.682473][ T7749] syz.1.447 (7749): drop_caches: 2 [ 130.683600][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 130.685001][ T7749] syz.1.447 (7749): drop_caches: 2 [ 130.732147][ T7751] bridge1: entered allmulticast mode [ 130.748001][ T7721] team0: Port device team_slave_0 added [ 130.758588][ T7721] team0: Port device team_slave_1 added [ 130.807932][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.810297][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.821033][ T7721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.828650][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.831140][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.841369][ T7721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.927991][ T7721] hsr_slave_0: entered promiscuous mode [ 130.930267][ T7721] hsr_slave_1: entered promiscuous mode [ 130.932333][ T7721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.938025][ T7721] Cannot create hsr debugfs directory [ 131.003230][ T5938] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 131.126787][ T7721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 131.131422][ T7721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 131.137378][ T7721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 131.141200][ T7721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 131.169141][ T5938] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 131.185362][ T5938] usb 6-1: can't read configurations, error -61 [ 131.222381][ T7721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.243881][ T7721] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.252015][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.253514][ T5999] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 131.255380][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.266595][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.268989][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.323914][ T5938] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 131.413208][ T5999] usb 7-1: Using ep0 maxpacket: 8 [ 131.421221][ T5999] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.428792][ T5999] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.433916][ T5999] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.437667][ T7721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.437813][ T5999] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.446080][ T5999] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.449593][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.486553][ T5938] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 131.489477][ T5938] usb 6-1: can't read configurations, error -61 [ 131.495173][ T5938] usb usb6-port1: attempt power cycle [ 131.589829][ T7721] veth0_vlan: entered promiscuous mode [ 131.596842][ T7721] veth1_vlan: entered promiscuous mode [ 131.615365][ T7721] veth0_macvtap: entered promiscuous mode [ 131.619718][ T7721] veth1_macvtap: entered promiscuous mode [ 131.629051][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.638807][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.643527][ T5300] Bluetooth: hci0: command tx timeout [ 131.645008][ T7721] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.648864][ T7721] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.651700][ T7721] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.655255][ T7721] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.668840][ T5999] usb 7-1: GET_CAPABILITIES returned 0 [ 131.671683][ T5999] usbtmc 7-1:16.0: can't read capabilities [ 131.749169][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.754174][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.772581][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.775869][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.843300][ T5938] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 131.870805][ T5938] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 131.874930][ T5938] usb 6-1: can't read configurations, error -61 [ 132.013139][ T5938] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 132.024747][ T5980] usb 7-1: USB disconnect, device number 17 [ 132.035710][ T5938] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 132.038194][ T5938] usb 6-1: can't read configurations, error -61 [ 132.042495][ T5938] usb usb6-port1: unable to enumerate USB device [ 132.287810][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.296377][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.351043][ T7831] netlink: 'syz.0.456': attribute type 1 has an invalid length. [ 132.401334][ T7831] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.408964][ T7831] bond1: (slave bond2): making interface the new active one [ 132.412779][ T7831] bond1: (slave bond2): Enslaving as an active interface with an up link [ 132.439106][ T60] hsr_slave_0: left promiscuous mode [ 132.442228][ T60] hsr_slave_1: left promiscuous mode [ 132.445663][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.449504][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.454349][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.457465][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.499850][ T60] veth1_macvtap: left promiscuous mode [ 132.502858][ T60] veth0_macvtap: left promiscuous mode [ 132.506721][ T60] veth1_vlan: left promiscuous mode [ 132.509628][ T60] veth0_vlan: left promiscuous mode [ 132.744259][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 132.744274][ T40] audit: type=1804 audit(1748524244.285:154): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.459" name="/newroot/126/file0/file0" dev="9p" ino=35913877 res=1 errno=0 [ 133.118553][ T7861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.463'. [ 133.122170][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.463'. [ 133.211800][ T7863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.463'. [ 133.215907][ T7863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.463'. [ 133.737410][ T5300] Bluetooth: hci0: command tx timeout [ 133.836804][ T7871] binder: 7870:7871 ioctl 541b 0 returned -22 [ 133.905735][ T60] team0 (unregistering): Port device team_slave_1 removed [ 133.988934][ T60] team0 (unregistering): Port device team_slave_0 removed [ 134.153296][ T5938] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 134.283119][ T53] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 134.323117][ T5938] usb 9-1: Using ep0 maxpacket: 8 [ 134.327258][ T5938] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.331556][ T5938] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.335728][ T5938] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.339682][ T5938] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.344708][ T5938] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.348372][ T5938] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.443074][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 134.447093][ T53] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 134.452298][ T53] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 134.455503][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.457963][ T53] usb 5-1: Product: syz [ 134.459370][ T53] usb 5-1: Manufacturer: syz [ 134.460894][ T53] usb 5-1: SerialNumber: syz [ 134.471079][ T53] usb 5-1: config 0 descriptor?? [ 134.473378][ T7882] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 134.482744][ T53] hub 5-1:0.0: bad descriptor, ignoring hub [ 134.486978][ T53] hub 5-1:0.0: probe with driver hub failed with error -5 [ 134.492356][ T53] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input25 [ 134.573540][ T5938] usb 9-1: GET_CAPABILITIES returned 0 [ 134.576144][ T5938] usbtmc 9-1:16.0: can't read capabilities [ 134.691718][ T840] usb 5-1: USB disconnect, device number 11 [ 134.691924][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 134.861340][ T7895] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 134.866319][ T7895] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 134.870149][ T7895] CPU: 2 UID: 0 PID: 7895 Comm: syz.2.470 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 134.874660][ T7895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.878599][ T7895] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 134.880411][ T7895] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 1a 5f 55 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 134.886897][ T7895] RSP: 0018:ffffc9000366fb98 EFLAGS: 00010293 [ 134.889369][ T7895] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff8865857a [ 134.892441][ T7895] RDX: ffff8880242b4880 RSI: ffffffff886585c6 RDI: 0000000000000005 [ 134.895604][ T7895] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 134.898813][ T7895] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc9000366fd30 [ 134.902045][ T7895] R13: ffffc9000366fd30 R14: 0000000000000001 R15: ffff88802468fc00 [ 134.905301][ T7895] FS: 0000000000000000(0000) GS:ffff888097982000(0063) knlGS:00000000f505cb40 [ 134.908883][ T7895] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 134.911446][ T7895] CR2: 00000000f7f755c0 CR3: 000000004a787000 CR4: 0000000000352ef0 [ 134.914432][ T7895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.917493][ T7895] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.920088][ T7895] Call Trace: [ 134.921072][ T7895] [ 134.922001][ T7895] ? __pfx_bcsp_recv+0x10/0x10 [ 134.923508][ T7895] hci_uart_tty_receive+0x251/0x7e0 [ 134.925103][ T7895] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 134.926918][ T7895] tty_ioctl+0x580/0x1610 [ 134.928413][ T7895] ? __pfx_tty_ioctl+0x10/0x10 [ 134.930042][ T7895] ? find_held_lock+0x2b/0x80 [ 134.931616][ T7895] ? hook_file_ioctl_common+0x145/0x410 [ 134.933490][ T7895] ? __fget_files+0x20e/0x3c0 [ 134.935049][ T7895] tty_compat_ioctl+0x24a/0x4d0 [ 134.936973][ T7895] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 134.938688][ T7895] __ia32_compat_sys_ioctl+0x23f/0x370 [ 134.940404][ T7895] __do_fast_syscall_32+0x7c/0x3a0 [ 134.942062][ T7895] do_fast_syscall_32+0x32/0x80 [ 134.943674][ T7895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.945635][ T7895] RIP: 0023:0xf70ae579 [ 134.946892][ T7895] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 134.952837][ T7895] RSP: 002b:00000000f505c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 134.955731][ T7895] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005412 [ 134.958152][ T7895] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.960360][ T7895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.962833][ T7895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.965586][ T7895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.968868][ T7895] [ 134.970193][ T7895] Modules linked in: [ 134.973083][ T7895] ---[ end trace 0000000000000000 ]--- [ 134.976025][ T7895] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 134.978578][ T7895] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 1a 5f 55 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 134.986825][ T7895] RSP: 0018:ffffc9000366fb98 EFLAGS: 00010293 [ 134.989406][ T7895] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff8865857a [ 134.992579][ T7895] RDX: ffff8880242b4880 RSI: ffffffff886585c6 RDI: 0000000000000005 [ 134.996210][ T7895] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 134.999688][ T7895] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc9000366fd30 [ 135.002827][ T7895] R13: ffffc9000366fd30 R14: 0000000000000001 R15: ffff88802468fc00 [ 135.006684][ T7895] FS: 0000000000000000(0000) GS:ffff888097782000(0063) knlGS:00000000f505cb40 [ 135.010270][ T7895] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 135.012893][ T7895] CR2: 00007f72bd6dead0 CR3: 000000004a787000 CR4: 0000000000352ef0 [ 135.016193][ T7895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.019236][ T7895] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.022531][ T7895] Kernel panic - not syncing: Fatal exception [ 135.025679][ T7895] Kernel Offset: disabled [ 135.027408][ T7895] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:10:46 Registers: info registers vcpu 0 CPU#0 RAX=000000000017703c RBX=0000000000000000 RCX=ffffffff8b7793e9 RDX=ffffed100564663e RSI=ffffffff8bf51780 RDI=ffffffff81911011 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e08 R8 =0000000000000000 R9 =ffffed100564663d R10=ffff88802b2331eb R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90877d50 R15=0000000000000000 RIP=ffffffff8b777f4f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097782000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006407d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000081838198 Opmask01=00000000003fffff Opmask02=0000000033bfffff Opmask03=0000000000000000 Opmask04=00000000fbfffffe Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005562f2489250 00005562f2489250 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005562f2466620 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c869f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c869f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c5a1075131a1a18 0613626963011f19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b75697a4e584b4e 444b5e79445a107f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556200003078 303d4e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555f00000d45 0d004e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005562f2476c30 00005562f24699e0 00005562f247bbc0 00005562f246a8b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005562f24774b0 00005562f2461610 00005562f246d4e0 00005562f246bad0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005562f2466620 00005562f2471170 00005562f24627e0 00005562f247a460 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005562f246f9d0 00005562f2467320 00005562f2477d50 00005562f2474420 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000279844 RBX=0000000000000001 RCX=ffffffff8b7793e9 RDX=ffffed100566663e RSI=ffffffff8bf51780 RDI=ffffffff81911011 RBP=ffffed1003b5a488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed100566663d R10=ffff88802b3331eb R11=0000000000000001 R12=0000000000000001 R13=ffff88801dad2440 R14=ffffffff90877d50 R15=0000000000000000 RIP=ffffffff8b777f4f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097882000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000568974c0 CR3=0000000044b35000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff819a5251 RDX=ffffc9000366f790 RSI=ffffc9000366f7b0 RDI=0000000000000000 RBP=1ffff920006cdeee RSP=ffffc9000366f768 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000000 R14=ffffffff8cf23020 R15=ffffc9000366f8e0 RIP=ffffffff819a4530 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097982000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f755c0 CR3=000000004a787000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8b70e662 RDX=ffff888027be0000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88804de39600 RSP=ffffc90003007a28 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffc90003007b70 R14=ffff88801b47a080 R15=ffffc90003007bad RIP=ffffffff81bae4e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a82000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7954f16000 CR3=000000007531f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 63696d6f74616269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000248 0000000000007db8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000