last executing test programs: 7m49.812155294s ago: executing program 0 (id=8155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000c000000ffff000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000200)=""/17}, 0x20) 7m49.752396934s ago: executing program 0 (id=8156): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000dfff"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20008f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1000000}}}, &(0x7f0000000680)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x20}, 0x94) 7m49.752264186s ago: executing program 0 (id=8157): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2600, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xfffffffffffffde6}) 7m49.672531597s ago: executing program 0 (id=8158): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x28, 0x0, 0xffffffffffff6260, {{0x0, 0x6c2, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1}) 7m49.672390278s ago: executing program 0 (id=8159): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa41, 0x10c) 7m48.753040634s ago: executing program 0 (id=8169): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071"], 0xfdef) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m33.470785484s ago: executing program 32 (id=8169): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071"], 0xfdef) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m45.049911842s ago: executing program 1 (id=9879): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200d50, 0x8, &(0x7f0000000240)) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) r2 = epoll_create1(0x0) r3 = fsopen(&(0x7f00000000c0)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x20002005}) r4 = syz_io_uring_setup(0x2ab9, &(0x7f0000000340)={0x0, 0xa6cc, 0x10100, 0x0, 0x200000}, &(0x7f0000000300), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x4c6f, &(0x7f0000000580)={0x0, 0x6a93, 0x0, 0x0, 0x2b5}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r6, r5, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001740)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00'}) io_uring_enter(r4, 0x1849, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x1009}], 0x1, 0x8000007) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) r8 = socket$inet(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001dd08efa1ceb243dd08187c0b86e747bc347886e29cadfb671e4e75dc0", @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c009900f40000002f000000080026007f17000008009f0006000000"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r12 = syz_open_dev$dri(0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r12, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r12, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 3m44.18079248s ago: executing program 1 (id=9882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd74) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000194c0)={0x18, 0x11, &(0x7f0000019600)=@raw=[@jmp={0x5, 0x0, 0x4, 0xbbe0d99d5a46c01d, 0x6, 0xc, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffbb}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff7}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x7c}, 0x94) r8 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000019380)={r7, 0xe0, &(0x7f0000019280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000019100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000019140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000019180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000191c0), &(0x7f0000019200), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000019240)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000193c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r4, 0x6, '\x00', r9, r4, 0x5, 0x0, 0x2}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) r12 = syz_open_procfs(0x0, &(0x7f00000190c0)='stack\x00') pread64(r12, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) sendmsg$nl_generic(r2, 0x0, 0x84) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) setsockopt$sock_int(r1, 0x1, 0x25, &(0x7f0000000000)=0x100ce, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) 3m43.91776712s ago: executing program 1 (id=9885): r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r0, &(0x7f0000007200)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x9, @private0, 0x1}, 0x1b, 0x0, 0x0, &(0x7f0000000700)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0xa20}}], 0x10}}], 0x1, 0x20060091) 3m43.859844571s ago: executing program 1 (id=9886): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x80}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x6c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100677470000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0) timer_gettime(r5, &(0x7f0000000140)) timer_settime(r5, 0x1, &(0x7f00000000c0), 0x0) 3m43.630284958s ago: executing program 1 (id=9887): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x880, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x7}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x2}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0xaa}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, 0x0, 0x48000) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000180)={@msf={0x4}, 0x1, 0x37, &(0x7f0000000040)=""/55}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) 3m39.625616908s ago: executing program 1 (id=9908): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x200001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2200, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, &(0x7f0000000200), 0x800) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0100270000"], 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x40000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7b) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x143a81) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397b5b22d0000b420a1a93cffffffffffffefff7d3d458dc4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x10, 0x7, 0x0, 0x6, {{0xe, 0x4, 0x1, 0x17, 0x38, 0x67, 0x0, 0x5, 0x29, 0x0, @local, @loopback, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x8, [0x9, 0xb9, 0x4, 0x80000001, 0x7fffffff, 0x2, 0x0, 0x9]}]}}}}}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000710000022a09a4afe4f1350875a08644", @ANYRES32=r8], 0x18}}, 0x42094) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x2e, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000035f0000cc000069706970000c00028008000300e00000010000000000000000"], 0x3c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 3m39.541938471s ago: executing program 33 (id=9908): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x200001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2200, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, &(0x7f0000000200), 0x800) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0100270000"], 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x40000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7b) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x143a81) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397b5b22d0000b420a1a93cffffffffffffefff7d3d458dc4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x10, 0x7, 0x0, 0x6, {{0xe, 0x4, 0x1, 0x17, 0x38, 0x67, 0x0, 0x5, 0x29, 0x0, @local, @loopback, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x8, [0x9, 0xb9, 0x4, 0x80000001, 0x7fffffff, 0x2, 0x0, 0x9]}]}}}}}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000710000022a09a4afe4f1350875a08644", @ANYRES32=r8], 0x18}}, 0x42094) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x2e, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000035f0000cc000069706970000c00028008000300e00000010000000000000000"], 0x3c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 18.301393204s ago: executing program 2 (id=10888): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/163}, {&(0x7f00000000c0)=""/228}]}, 0xda}, {{&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/52}, {&(0x7f00000002c0)=""/43}, {&(0x7f0000000300)=""/139}, {&(0x7f00000003c0)=""/200}, {&(0x7f00000004c0)=""/98}, {&(0x7f0000000540)=""/106}], 0x0, &(0x7f0000000600)=""/28}, 0x4}], 0x2a, 0x12321, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 18.257885351s ago: executing program 2 (id=10889): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x1eb482, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000080), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0x4e, &(0x7f00000003c0)=""/78, 0x3236054959490c78, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x5, 0xffffff66, 0x6}, 0x10, 0x1616f, 0xffffffffffffffff, 0x4, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2], &(0x7f0000000c40)=[{0x4, 0x2, 0x4}, {0x0, 0x2, 0xa, 0x1}, {0x2, 0x4, 0x5, 0x2}, {0x0, 0x1, 0xf, 0xb}], 0x10, 0x2c}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x3f00, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.669313047s ago: executing program 2 (id=10891): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1, 0x12) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x7f4a, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x5) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0x4e, &(0x7f00000003c0)=""/78, 0x3236054959490c78, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x5, 0xffffff66, 0x6}, 0x10, 0x1616f, 0xffffffffffffffff, 0x3, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r2], &(0x7f0000000c40)=[{0x4, 0x2, 0x4}, {0x2, 0x4, 0x5, 0x2}, {0x0, 0x1, 0xf, 0xb}], 0x10, 0x2c}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000080)=0x6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.64235467s ago: executing program 2 (id=10894): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff202e}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xc, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000480)={0xe, 0x7, 0x2, {{0x1, '\x00'}, 0xae3}}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000000)={0x3d, 0x101, 0x100, 0x1, 0x4, 0x18, 0x36, "e75867a0aa45de1500", "39e8799918f836f17fc65c8b001f00"}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = accept4$nfc_llcp(r0, &(0x7f0000000340), &(0x7f00000003c0)=0x58, 0x80000) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000000400), &(0x7f0000000440)=0x8) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r7, &(0x7f000044d000/0x2000)=nil, 0x6000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 13.669895002s ago: executing program 2 (id=10898): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x7}]}, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4080) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0xf6b0a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SG_GET_PACK_ID(r3, 0x227c, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) sendto$packet(r6, &(0x7f0000000100)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, 0x0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) 13.149403704s ago: executing program 4 (id=10900): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x20c, 0xc4, 0x700001b, 0x148, 0x0, 0x148, 0x1c8, 0x206, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @multicast2, 0xffffff00, 0xffffff00, 'macvlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x2}, 0x1ea, 0x70, 0xa0, 0x0, {0x390, 0x8f00}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x0, 0x6}, {0x2, 0x1, 0x6}, 0x6da, 0x5}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x268) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0x7, 0x7, 0x9}]}, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r5}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r6, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r9, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r10, &(0x7f00000016c0)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, 0x0, 0x0) 11.834107347s ago: executing program 5 (id=10902): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=0x6e, 0x80800) r1 = fsmount(r0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) r4 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r5 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="75574f715bb6c581c1d86af43ee70e16970adb7fea73ff90723dbf764145916ba0abd102a5d1611412b5e48dbcf32360d7573231bb9c4d40", 0x38, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r5, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x21, 0x0) listen(r5, 0xda8c) accept4(r5, 0x0, 0x0, 0x0) fchdir(r1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ftruncate(r7, 0xb66f) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) sendfile(r6, r7, 0x0, 0x7ffff006) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c000000100001002cbd70002000000000000000", @ANYRES16=r4, @ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x2004a010) 11.833046674s ago: executing program 4 (id=10904): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x1eb482, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000080), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0x4e, &(0x7f00000003c0)=""/78, 0x3236054959490c78, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x5, 0xffffff66, 0x6}, 0x10, 0x1616f, 0xffffffffffffffff, 0x4, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2], &(0x7f0000000c40)=[{0x4, 0x2, 0x4}, {0x0, 0x2, 0xa, 0x1}, {0x2, 0x4, 0x5, 0x2}, {0x0, 0x1, 0xf, 0xb}], 0x10, 0x2c}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000001c0)=0x7ff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000500)='fusectl\x00', 0x80000, &(0x7f00000005c0)='\x00') r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10.314848479s ago: executing program 5 (id=10905): socket$igmp(0x2, 0x3, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) 10.230863556s ago: executing program 4 (id=10906): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getqdisc={0xfffffffffffffd7f, 0x26, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0xd, 0xffff}, {0xc, 0xf}, {0xfff3, 0x5}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x2) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000001000f1080000000000000000"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) (rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r8, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000680)=""/113, 0x71}, {&(0x7f0000000ac0)=""/194, 0xc2}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000a00)=""/168, 0xa8}, {&(0x7f0000000740)=""/142, 0x8e}, {&(0x7f0000000800)=""/98, 0x62}, {&(0x7f0000000880)=""/85, 0x55}], 0x9, &(0x7f00000003c0)=""/40, 0x28}, 0x3}], 0x1, 0x142, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) 9.733758901s ago: executing program 5 (id=10907): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = syz_usb_connect(0x3, 0xc64, &(0x7f0000000340)={{0x12, 0x1, 0x101, 0x4a, 0x5, 0x2f, 0xff, 0xf88, 0x42e, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc52, 0x4, 0xe, 0x6, 0xf0, 0xbe, [{{0x9, 0x4, 0xb4, 0x8, 0x9, 0xa0, 0x76, 0x64, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x8dd, 0x3}, [@mixer_unit={0x9, 0x24, 0x4, 0x1, 0x0, "3dd02f29"}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0x2, "90223d98"}]}], [{{0x9, 0x5, 0x1, 0x8, 0x0, 0x66, 0x0, 0x30, [@generic={0xe0, 0x3, "017f121c71dde3bfc5c8daa85259a2082e15f0b6e73408ba4ecc5f9fe274ad633dfdee839fc57fcbda5ab5564a3bc4396e6d363c31a64fc688f38a638899d6aa58d1462dcc1f5c60708d242fad72f676ba196218042bd137c42bd55b6ccaac3902e15b27835a4c52c74ecae00cd7166058bf5a55043bace672f93d0beedffaa706cf929424020d8e071e5ab0c4ed0320291d80a8f27e576e48cf30bcf34ef95f1db0858d8822a002a41b93805f27696eeb2c1957865a17b87b8a1f90b32e4d047d2121cc02a181cfd4315ac5ff7ba241913c96b33523dc026b6d5477e7dc"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x4, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x0, 0x2, 0x1, [@generic={0xf, 0x23, "5e36b277f7729d373dd34e06ab"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x4, 0xee, 0x5, [@generic={0x3b, 0xe, "54e4e098faa678bcd086f67157539088fb25305e36531e5d673cf309956a3f8e0590cb8126f8ab6333c1ebea4a569e378ccb56c71f40d3a0b5"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0xc3, 0x3, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7d, 0xa2b}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x6, 0x1, 0x18, [@generic={0xf, 0x7, "e9e47b87fd99383bb5a41dabd0"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x4, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x4, 0xfe, 0x66, [@generic={0xe0, 0x30, "8be81833c4b46f5f6eb6f7b8f97d5d4b6a36a78963ab081dfc8cc42e99443efc4a2f2100341cbf89ea544880eae676ad598c5c4ad7c784d040ab01829b642b77a95bea0b68604622cc62bce5d2a0f8281cf1a564bf8055ba50b9167df98678fa1fcd5f0c308944d334683e071c200701d45d53ae65b62cc7adcab5083564eb7a446340bdbf92b99850e5e4ebd9196edb279d8fa2aef51df31874377d02d3d3f33da24e14d8ec06c8126b7f0c33dc09868d4d25582d4ab7ba8c863514c2ce315eb7809caff1b5742549b6464b4282f03ad509d356b2a040ea077d50969ad3"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x4, 0x53, 0x3, [@generic={0xae, 0x21, "973fab8adc60ae95a33ec6245a863572eca676bf84f68a07aa14c38a327fd7dd7d36207770fd4a4d26db7e5f7bd07a9fe8d1f18be446aa256a89066e400b8f3fd3424965bb0e14f9082ea0ed5209ac874105d0c244a0959f033c6ddd144b986c1177bf23ff0efb50dba9d95fca38613bb4f111213e79ad240e8d13925f5464e64fd49614631bcc281c44296e81e483f1454e8a14e090fc4917adc504b932c5d41c6d04bd3d33eb15ecafce26"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}]}}]}}, {{0x9, 0x4, 0xd6, 0x0, 0x5, 0xff, 0x1, 0x19, 0xff, [@generic={0xe4, 0xe, "9145cf359acad528dd7954d6f9ec66ba9a9707d7a98be8e452a73edb144a06fe344d17f661804b7ae5fb16dec32557f88ef69178e49518b93d05eb7b2115d317246c880d00cb0e8788a7b94fc0d5afebdb94eb8eda87994c0defbec65892a43a3d7319a7993b06a8f0180e30e943e49b8b038bf91b2bfc9deef0960893e7793b21df4cf6743030fa984e998099b9474af322cfbc80dd1f8cd22aea1fe7d5a9f9596170d1b09a0b92c22e0ff403c0ebecb1afbd165866550e1d4ec3806fa117dcce8e59a694ade0424de11bb8a5ed21aad82a949dc3bf0ef64a680e7328c8454e57f6"}], [{{0x9, 0x5, 0x0, 0x0, 0x600, 0x6, 0xa, 0x3a, [@generic={0x34, 0x11, "ad34f3c5538de24a605a7b28aaed2a0809af6ff4de729e54645fdb1ae59bd753238c7a62ae1b0dd1affabde40f21dcd7943e"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x4, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0x5}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x0, 0x7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xed}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x9, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x7, 0x6, 0x9, [@generic={0xef, 0x22, "d72dc28738d245b2f06dd4bf87d892c4c9a1f88290c1cd5f4d0a4a4e2be4146a53e3eb68db814121eb11f8c621a3dc42d33c14ee66df6a8b679ed2734a73ff5074dc913f6ffeb405a1e81214bf797c22bab0b9f32313b0052cf43c797bf3830e2cdfd0b6e22741df093b3ab703861159eda3388105525159b800ce2a82dfb284249a26cc9cb1cab01e0e50720105911b361b868ec47faf62ba912331bbb714b314ff3378cd3de85997c05efb239de397b3e9cc9d623dd1cec75ca15946e0577eb77e0d3378b263599e2e104be7fdcca3b007085a98d3e6c37bd1b742dd042bdce6a62231e04ea1343145f9be7c"}, @generic={0x86, 0x0, "3e004a8b8399503bbc250524943ec2df51d04f9a546d1519baa3ee42e5e87ec270677a2027cda912c2e032b0bc586765b790860b356ec03213947a3c0afd275c3b1041cfeb0b92cb1647bc008f963a197527e758cf7a832f6146e705de87e734d389d8d774155cb6b8e1af26b0157f0346d56d730b81559f29a484fc327e21bd4254368b"}]}}]}}, {{0x9, 0x4, 0x3c, 0x9f, 0x2, 0xff, 0x18, 0x4d, 0xfa, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x69a}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7, 0x6, 0x6}, {0x6, 0x24, 0x1a, 0x4}, [@mdlm_detail={0x2e, 0x24, 0x13, 0x8, "906eb4a3a409bfdff3d9cc87887dd57379c0ee0105bf23e5f688fc5bffb896abda2973bd008154d42827"}, @mbim_extended={0x8, 0x24, 0x1c, 0xffc0, 0xde, 0x9}]}, @generic={0x9a, 0x10, "20b602b83bb0b37f88a031a986463ef4c63a58c0d1d183dc646752537913e69bbedd5d7145563fccfa9a49995eac2727859ace3147569325143a0548f1a11c140465cb2c2307cbe4892b3dab1581b55af22d91ed78930f40d59d76dd0c4a6e6da6cf8ac7e2ea1c3e907374f0520e029307a3cdc116cca3cb0eb8ef5015698998c3955776b2b3ea42796b987ddbe83db733f96268ebe9115a"}], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x6, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x37, 0x9}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x7, 0x4, 0xd6, [@generic={0x62, 0x5, "5a9995e8f94838398707fb9b6af184ca15dc09f960df1fe9279379b7a72994f7eee21d6bda300a025a816d7f6ea4a1d843fd991cd126772f3f81dd087526cf007640140f116f43002589e01d5e90e8657c5ec4f0e9adc07c6ef5d286a98c82ff"}]}}]}}, {{0x9, 0x4, 0x3, 0x7, 0xc, 0xf9, 0x9d, 0x6d, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x7f}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x4, 0x4, "93816209"}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x2, 0x9, "4268e432d002"}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x2, 0xa, 0x1, 0x5, 0x5]}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x1, "fd"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x2, 0xd2, "2263d1d8fe"}]}], [{{0x9, 0x5, 0xc, 0x2, 0x20, 0xe, 0x6, 0x54, [@generic={0xe4, 0x22, "59e0d7299839da8c201df349e2d601850b34751782efd342cdc8b020811518fec3ae071994e9529dc10a9a3b9c79b0970c7e5e5eb500d3614923152fde4d911b5746c2adea98c1014c54d1856fb219806bfb72426a78b345373bafb0c1a797bad98e7a7fde4b2ee8441f92156ef4724a92b38e9386a9ffa5bfa46ad561525d3c2510b06d4e509231784170fb5a20f4b945f17c3f6f780459ceb870cc3153f55f3edc252d5241ccc8ba34a37d2c191e979de528b551afde69a0fa511fe708b6b0966447ee3d2dbfe260921a475ffa030dc3eec5af9248c87abc19d730baaea63ba011"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x1f, 0x40, 0x7, 0x1, 0x5, [@generic={0xc4, 0x21, "40601856c1e4ddf75c1ca4302395c1e8d093865afa20f1582b5e001e293e2cb0047ed93b6492c255f93a37eef149e22482c57de0c1d81d541d7b3848cc92ce0fe9191057875472fde8bb60a7247f63b54bb73c6eb0e53ae70b3c032ec64b001db8930683f4f8dc15307ad4bead89387718a1c03716583ffbb13fad1dcaa194252c9693ebc06c54a5033c7d82b57264e1831558cd4f2b435fcca9781b51e682b1df4e59a553ddb988bf4cac659ea163e83f94f098e4614e9e006d0c9bb1a4fc3052cb"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0x2, 0x6, 0x4b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xec, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x1, 0x2, 0xa7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x13, 0x7c}, @generic={0xbc, 0x1, "3f1ee272ec8319c5f3cfed58f8dcffd0951beb1ccd9bb95ee59091bdf133a441daf1340883f6fc20d4177034a916f26e8446830b206ce17b576757637a40f01bb5fa296901004370c709a3738be32ab0c99d773760ef6ec4625b6db4a6167237ee5599c59651eb7628bcf69511a9df774ed00304367eda6dae23a7c190bca8f5e60e31c930480785935aa8d9bcd46011e9bb1c57713a3defa6043a0c77f8225b8cb25ccaa1b34d611ec3e379f301b1cf9deb46a07fbf4c7783a0"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x7, 0x2, 0x9, [@generic={0x82, 0x30, "4051ae529137de23436eb3a28df5fa853667766afda7d9fba20d14f9dfd0a8dbe192d3c0cb4cafbc4fa0315c217ef5596e6fc138eeaf07694e2902e5a737ef3d707502f01fed732f88537604add1f2d547f4891ed24d50acb41992e2bce803ba03111360dd71e10b3f9520a8086cd63db6a583de0bf363a1f0f18d53eb8c68f0"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x68, 0x1, 0x3, 0x9, [@generic={0x5f, 0x11, "256eccdb3ac713b0a0d2fb3fac9eeef690bd0b734999f3eab850e46c5c048f04df83cb30d1a063b98eb032b698472369bfc50046f9d1c150dd13fdb7f0199a1132f93480eca0eec0ad2e30f5464824fedffb775600b64e04ff77614ce2"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xfd, 0xd, 0x0, [@generic={0x24, 0x31, "1cdce04f3b22cae66dc970658e5adba9d93311eeff3a673f79d969ceace77d09e05b"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0x6}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x5, 0x22, 0x6, [@generic={0x27, 0x22, "898e2907a191242f37ba683f78b7def4c14a225d4a834a12b2c5c4eedf0a3641fcace9e19c"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0x8f, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xfe, 0x0, 0x88, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1000}, @generic={0x10, 0x21, "a8086211e64379f58cedacb23021"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0x81, 0xa, [@generic={0x9, 0x30, "0e9d62298aee93"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x7f, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x5}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0x40, 0x0, 0x20, 0x45}, 0xe1, &(0x7f0000000080)={0x5, 0xf, 0xe1, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x2, 0xe}, @wireless={0xb, 0x10, 0x1, 0x8, 0x41, 0x3, 0x1, 0xdd6, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x5, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x1, 0x1, 0xbc2}, @generic={0xbc, 0x10, 0x2, "0082ee931f65973ebc82ac29bf3961d08bb54e538090032a15b56149503c2eeda32f74ab5e277d75c19f242c1e2dea3c3d2075ceab1b9df7d37582c4419acf3c60a4895478b8eb624ef6ffd3d311b7953974b472caba49bc531111ba193e558551aff5bf21d03db93e421b1c3807decff06d47c1e784ccf3edab0f5ea60ce52a0c9b47b57eaa050b07b832ac15fd8f2288e3e83fe6aa21bf8237302cc7dc7f22178603f23450a63ebb88577753c084b1083cb87a73437ac91b"}]}, 0x3, [{0x72, &(0x7f0000000180)=@string={0x72, 0x3, "2677eef43c30a1871e50f40f1bc3e3a4ebefb6ef2e2cef1b8a4df8fd79304632989e917bc3be4fd813791e2f4f0dfc2575259d373cfdff55e592332a19c77601566e4394ee5e86c9179d697bedb457aecbef3831a33c6082c374ec08c5b99d520ec48237bcd833722ebd4d3f726ce1c3"}}, {0x25, &(0x7f0000000200)=@string={0x25, 0x3, "f3409dc8e7c26e89aec18f48b8d9cff93f80e1fd41fcda9b9726b7df0be42a897f54f2"}}, {0xa7, &(0x7f0000000fc0)=@string={0xa7, 0x3, "d2bf4e18927025a62385475818eeaee27a97677b3d711f6ba23372626280eedd31f8098d9bdb2f98d79b587e831060236ea0c951d366f25677ac295589f968210d36e19e7347955129594cf426b28c0d50ed06041699fb3a64c345fdbef59fdb289579b3603212100f6e57ea25eca1938a16ec771b443831796b45a487609fc838e59f9c27390c8dd3788ecb648a10b85fd676a4320821f59ace77d7c7644555dc53a9f7b2"}}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$lan78xx(r2, &(0x7f0000001140)={0xc, &(0x7f0000001080)={0x40, 0xd, 0xa3, {0xa3, 0x0, "d47d5f00e10f41e63d50d11ac4eabbfd6c6e3432862d4af1e5674a6c1559a325e29b194d7ed5950c9a4d651258f026a7666a420029b7ec8baafe071ea0c15e6ad38eaa2aa260901c55d5a615fdb904fa650c66181c9fba89c0d8ad60fb7f877963fcdbf57606d75b42046343c4e8a3aa2b154ee04e9199dfd8428e015e173778d7194f0da547731c7ae3d6a632e163200fc696dfcb25e140ec475e21e10af25609"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}}, &(0x7f00000013c0)={0x1c, &(0x7f0000001180)={0x0, 0x16, 0xbc, "24e4153a7734e2f745cd80912f228057d055dbb618d94da2e9bdf95d4551d4792fe9efa9926858fbe5fb9d2c4ac2ef75135f39ed240d47e98c9e5323541fa8f88d02c77d0520cdac54a6697b64d0ade9b1be0559310e409bceda4bbe9dc2729c3183976037325fecdea88ea7ed235d625f7648d53fde65c49c5b8c3bc37316dc0bcdada886b87db42055159ccc04a17ffe290cd11ede2821e516c2b4d9162398882929a7b9be5093c95467cfe99e3d09547d227dfdace1731a99d196"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000012c0)={0x0, 0x8, 0x1}, &(0x7f0000001300)={0xc0, 0xa1, 0x4, 0x7f5}, &(0x7f0000001340)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000001380)={0xc0, 0xa2, 0x2f, "3cc3ee5fef51a7128e8d8645b418547f6dcceac16e05394f1634bea7fe6ca0191e6ff99d627cb0a48f4df33bf5ecc6"}}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = landlock_create_ruleset(&(0x7f0000000100)={0x6700}, 0x9, 0x0) landlock_restrict_self(r6, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000004165be"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x10, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 9.410773768s ago: executing program 4 (id=10908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.460443481s ago: executing program 3 (id=10909): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0xfffffdef}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x0, 0x7b993478f2088146) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x100000000000002) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$binderfs(0xffffff9c, &(0x7f0000000a00)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r5, 0xc00c6211, &(0x7f0000000a40)) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r5, 0xc00c6211, &(0x7f0000000a40)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="040000000023000000000000000000000000000000000000000000008dbe84165decc4e50e3163de85cc913193cf406090f6a9989c6b7d92e3e2911505670e74e8e1d18dc8abab760aa3633e68bdd2526c34eeedf61f1bb418133ef8a2a45fe5842d3d21c9e3c4f20a54600f2a047d1471fd84eb32913d10fed7d1679a868479991c082bc6a62cc55daf19be9addbfd84fdb1002c98b8a9e69a1a229c267e7e723c539980246c16cf586bd6aab0263cdb3c6cecbfc2a4b6f3a4f4d292c3d6feadac56f9774bd9ea5f36d35a1"], 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) (async) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) 7.286101336s ago: executing program 3 (id=10910): socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x800000, 0xa, 0x0, 0x500, 0x7ffffffe, 0x44b30046}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 6.564657551s ago: executing program 5 (id=10911): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x88ff, &(0x7f0000000000)={&(0x7f0000000440)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES64, @ANYRES8], 0x38}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000c40)=ANY=[@ANYBLOB="8caa9ce6aaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c5157907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649ff7f0000000000008dfa871c51852e4451b57d037ac045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1173669ca"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r8, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000000680), 0x2}, 0x38) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 979.925849ms ago: executing program 3 (id=10912): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250700000014000300100000000000000000000000000000001400020000000000000000000000ffffac1414bb"], 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r4, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20044080, &(0x7f0000000000)={0xa, 0xcaa1, 0xffffff7c, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xd}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) write$6lowpan_enable(r7, &(0x7f0000000100)='1', 0x1) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r8, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) linkat(r0, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1400) 904.322642ms ago: executing program 2 (id=10913): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=0x6e, 0x80800) r1 = fsmount(r0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) r4 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r5 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="75574f715bb6c581c1d86af43ee70e16970adb7fea73ff90723dbf764145916ba0abd102a5d1611412b5e48dbcf32360d7573231bb9c4d40", 0x38, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r5, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x21, 0x0) listen(r5, 0xda8c) accept4(r5, 0x0, 0x0, 0x0) fchdir(r1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ftruncate(r7, 0xb66f) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) sendfile(r6, r7, 0x0, 0x7ffff006) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c000000100001002cbd70002000000000000000", @ANYRES16=r4, @ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x2004a010) 783.747408ms ago: executing program 5 (id=10914): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x200404a, &(0x7f0000000040)=ANY=[@ANYBLOB="237cb4", @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r0, @ANYRES8=r0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x2, {0x40, 0x3, 0x8, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f5, &(0x7f0000000000)) close_range(r2, r0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000008050005000a800000050001000600000005000400000000000900ff07000000001d00000011000300686173683a69702c706f7274000000000c0007800800064000000100"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_delrule={0x30, 0x21, 0x121, 0x0, 0x25dfdbff, {0xa, 0x0, 0x10}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}}, 0x80) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x94, 0x9, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, '-\\&#-&\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x424}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x12, 0x1a, '7!/]:(-&](\'\\\xd7\x8a'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x2c008810}, 0x80) write$FUSE_INIT(r0, &(0x7f0000000940)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x16d0348, 0x40, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x100, 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 721.009682ms ago: executing program 3 (id=10915): socket$igmp(0x2, 0x3, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) 348.106456ms ago: executing program 5 (id=10916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000a700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000009734937d71b45cb000000ef"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x5, 0xfe, "ff00"}) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000040)={0x200, 0x5, 0x0, 0x3ff, 0x17, "0108c179cd5f7837"}) close_range(r2, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = gettid() timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x61, 0x2, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi4\x00', 0x62a000, 0x0) ioctl$COMEDI_BUFINFO(r7, 0xc02c640e, &(0x7f0000000080)={0x3, 0x624, 0x8000, 0xac9, 0x100, 0x0, 0x8}) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x30) fcntl$setlease(r9, 0x400, 0x1) r10 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r10, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$kcm(0x2, 0x3, 0x2) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000005000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0300006f58f8ff00000000bfa2000000b5020007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESDEC=r6, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000", @ANYRES64=r7], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x38, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 328.953346ms ago: executing program 4 (id=10917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r1, 0x239, 0x70bd25, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4cc14) 328.45786ms ago: executing program 3 (id=10918): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010f000000000900020073797a3100000000140007b769e9f0c94c0d03001800124000000000050005000a000000050001000600000011000300686173683a69702c706f72740000000000000000000000000000000000000000bf456d820fb4746b833a891516211e24843d3eb384bea719232cab6fe872f496b00f84721ca8d51194f3b432d362c5d805fb9db4b064fbc22adf1c5fb4b1d00a2a769bfa2d18474ba78b9a68e72b9794db9ab7f1e75a5f2f062005edda607de8c5905eb78077e3d1d66b1fec1bf3f86da8f3423c381fd0eab7cb0b7f35a81ca78f8c88b270febd41"], 0x60}}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0x1}, 0x8) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x80db, 0xabf4, 0x3a6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) close_range(r2, 0xffffffffffffffff, 0x0) 134.341341ms ago: executing program 4 (id=10919): r0 = openat$vnet(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/69, 0x45}], 0x1) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x800) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="0300bf700de5f6656c955d90857c4352980000000000002000120100008014abee68fb873ac70067656e657665000010000280060005004e24000003000000000000004bc1040ee162a1c8f00d96b6fbd95af5646b2e6c510b50c579f9c195fe01d56bca7fb978d6349fecafbd5c0a80e22c0464194a2cad336208a9619ce0cb28c1d22c7f903775a98d342b75abf3ceaee2b27e21345407180aeff3a7861f06cf6ca93d3a1ae2636b9850931308729b31ac3b9e333e2e9beaff6a9bcd7b726cba02a967d6e2af1311d4a6999819e26c869e71daf87ae88ee6855abab1ce", @ANYRES32=r4, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x400, 0x4000000, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x5f, 0x0, 0x9}, 0x800) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=10920): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb02f, 0x7ff, 0x4, 0x4000002, 0x88d7, 0x8d, 0x1007, 0x0, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0xff, 0x400002, 0x1]}) r0 = syz_io_uring_setup(0xa31, &(0x7f0000000480)={0x0, 0x8902, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @loopback}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x2007, @fd=r0, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) r5 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xcb44, 0x800, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080)=[0x3fffffffffff], 0x1}, 0x20) pselect6(0x40, &(0x7f0000000040)={0xb, 0xb36a, 0x5, 0x2, 0x5, 0x7, 0x7, 0x1}, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): face 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1820.074477][ T1316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1820.078723][ T1316] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1820.083065][ T1316] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1820.088327][ T1316] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1820.092332][ T1316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.097633][ T1316] usb 7-1: config 0 descriptor?? [ 1820.258101][ T4822] sg_write: process 963 (syz.1.9382) changed security contexts after opening file descriptor, this is not allowed. [ 1820.311150][ T1316] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1820.524738][ T29] usb 7-1: USB disconnect, device number 62 [ 1820.528199][ T29] usblp0: removed [ 1820.942892][ T4828] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1821.059944][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9384'. [ 1821.063545][ T4832] netlink: 'syz.2.9384': attribute type 30 has an invalid length. [ 1821.072236][ T733] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1821.075835][ T733] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1821.078623][ T733] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1821.082351][ T733] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1821.118180][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9385'. [ 1821.823849][ T4842] cdrom: dropping to single frame dma [ 1822.074893][ T4848] ubi31: detaching mtd0 [ 1822.084841][ T4848] ubi31: mtd0 is detached [ 1822.108605][ T4850] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1822.111359][ T4850] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1822.114682][ T4850] vhci_hcd vhci_hcd.0: Device attached [ 1822.118717][ T4851] vhci_hcd: cannot find the pending unlink 4294967287 [ 1822.248810][ T4854] loop3: detected capacity change from 0 to 7 [ 1822.255762][ T4854] Dev loop3: unable to read RDB block 7 [ 1822.258008][ T4854] loop3: unable to read partition table [ 1822.260299][ T4854] loop3: partition table beyond EOD, truncated [ 1822.263432][ T4854] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1822.322169][ T4859] tipc: Enabling of bearer rejected, failed to enable media [ 1822.381021][T18347] usb 46-1: SetAddress Request (2) to port 0 [ 1822.383309][T18347] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1822.870259][ T4851] vhci_hcd: connection reset by peer [ 1822.873008][T29264] vhci_hcd: stop threads [ 1822.874452][T29264] vhci_hcd: release socket [ 1822.875927][T29264] vhci_hcd: disconnect device [ 1823.415784][ T4876] FAULT_INJECTION: forcing a failure. [ 1823.415784][ T4876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1823.420289][ T4876] CPU: 2 UID: 0 PID: 4876 Comm: syz.1.9398 Not tainted syzkaller #0 PREEMPT(full) [ 1823.420317][ T4876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1823.420329][ T4876] Call Trace: [ 1823.420336][ T4876] [ 1823.420345][ T4876] dump_stack_lvl+0x16c/0x1f0 [ 1823.420378][ T4876] should_fail_ex+0x512/0x640 [ 1823.420399][ T4876] _copy_to_user+0x32/0xd0 [ 1823.420421][ T4876] simple_read_from_buffer+0xcb/0x170 [ 1823.420448][ T4876] proc_fail_nth_read+0x197/0x240 [ 1823.420476][ T4876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1823.420505][ T4876] ? rw_verify_area+0xcf/0x6c0 [ 1823.420528][ T4876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1823.420554][ T4876] vfs_read+0x1e4/0xcf0 [ 1823.420586][ T4876] ? __pfx_vfs_read+0x10/0x10 [ 1823.420609][ T4876] ? find_held_lock+0x2b/0x80 [ 1823.420643][ T4876] ? __fget_files+0x20e/0x3c0 [ 1823.420676][ T4876] ksys_read+0x12a/0x250 [ 1823.420702][ T4876] ? __pfx_ksys_read+0x10/0x10 [ 1823.420729][ T4876] ? rcu_is_watching+0x12/0xc0 [ 1823.420760][ T4876] __do_fast_syscall_32+0x7c/0x300 [ 1823.420780][ T4876] do_fast_syscall_32+0x32/0x80 [ 1823.420797][ T4876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1823.420839][ T4876] RIP: 0023:0xf7ff7579 [ 1823.420856][ T4876] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1823.420874][ T4876] RSP: 002b:00000000f54e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1823.420892][ T4876] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54e6620 [ 1823.420905][ T4876] RDX: 000000000000000f RSI: 00000000f7485ff4 RDI: 0000000000000000 [ 1823.420915][ T4876] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1823.420924][ T4876] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1823.420934][ T4876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1823.420962][ T4876] [ 1823.480738][ C2] vkms_vblank_simulate: vblank timer overrun [ 1823.586245][ T4878] tipc: Enabling of bearer rejected, failed to enable media [ 1823.596309][ T4880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9400'. [ 1823.609282][ T4884] lo speed is unknown, defaulting to 1000 [ 1823.622310][ T4884] lo speed is unknown, defaulting to 1000 [ 1823.626408][ T4884] lo speed is unknown, defaulting to 1000 [ 1823.721042][ T4881] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1823.723759][ T4881] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1823.727536][ T4881] vhci_hcd vhci_hcd.0: Device attached [ 1823.862691][ T4895] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1823.949770][ T4905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9406'. [ 1824.031585][ T29] usb 44-1: SetAddress Request (18) to port 0 [ 1824.051152][ T29] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1824.228271][ T4911] tipc: Enabling of bearer rejected, failed to enable media [ 1824.285977][ T4913] tipc: Enabled bearer , priority 0 [ 1824.289325][ T4913] syzkaller0: entered promiscuous mode [ 1824.292880][ T4913] syzkaller0: entered allmulticast mode [ 1824.300494][ T4913] tipc: Resetting bearer [ 1824.306156][ T4912] tipc: Resetting bearer [ 1824.317950][ T4912] tipc: Disabling bearer [ 1825.150670][ T4925] netlink: 'syz.1.9412': attribute type 4 has an invalid length. [ 1825.455261][ T4923] could not allocate digest TFM handle sha1-generic [ 1825.482455][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9411'. [ 1825.720951][ T4890] vhci_hcd: connection reset by peer [ 1825.723353][T27366] vhci_hcd: stop threads [ 1825.724747][T27366] vhci_hcd: release socket [ 1825.736082][T27366] vhci_hcd: disconnect device [ 1825.847621][ T4939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1825.858418][ T4942] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9416'. [ 1825.900447][ T4944] tipc: Enabling of bearer rejected, failed to enable media [ 1825.964930][ T4950] tipc: Started in network mode [ 1825.967367][ T4950] tipc: Node identity d6c3b3a219f1, cluster identity 4711 [ 1825.970687][ T4950] tipc: Enabled bearer , priority 0 [ 1825.977304][ T4950] syzkaller0: entered promiscuous mode [ 1825.979865][ T4950] syzkaller0: entered allmulticast mode [ 1825.990776][ T4950] tipc: Resetting bearer [ 1825.996032][ T4948] tipc: Resetting bearer [ 1826.012523][ T4948] tipc: Disabling bearer [ 1826.362190][ T4960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9422'. [ 1827.404366][ T4979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9428'. [ 1827.451853][T18347] usb 46-1: device descriptor read/8, error -110 [ 1827.509500][ T5949] Bluetooth: hci3: unexpected event for opcode 0x0c7d [ 1827.516897][ T4988] trusted_key: encrypted_key: keyword 'u#Sáe' not recognized [ 1827.604337][ T4991] fuse: Bad value for 'fd' [ 1827.795838][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 1827.795855][ T40] audit: type=1326 audit(2000000699.263:9904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.2.9437" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffd579 code=0x0 [ 1827.845256][T18347] usb usb46-port1: attempt power cycle [ 1828.451778][T18347] usb usb46-port1: unable to enumerate USB device [ 1828.741810][ T5031] netlink: 'syz.3.9444': attribute type 6 has an invalid length. [ 1829.141080][ T29] usb 44-1: device descriptor read/8, error -110 [ 1829.531858][ T29] usb usb44-port1: attempt power cycle [ 1830.173172][ T29] usb usb44-port1: unable to enumerate USB device [ 1830.673675][ T5069] tipc: Enabled bearer , priority 0 [ 1830.707523][ T5069] syzkaller0: entered promiscuous mode [ 1830.710081][ T5069] syzkaller0: entered allmulticast mode [ 1830.731753][ T5069] tipc: Resetting bearer [ 1830.737608][ T5068] tipc: Resetting bearer [ 1830.759153][ T5068] tipc: Disabling bearer [ 1831.069080][ T5080] netlink: 'syz.3.9459': attribute type 1 has an invalid length. [ 1831.072829][ T5080] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9459'. [ 1832.332706][ T5096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9464'. [ 1832.336133][ T5096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9464'. [ 1832.452014][ T5099] tipc: Enabled bearer , priority 0 [ 1832.456795][ T5099] syzkaller0: entered promiscuous mode [ 1832.459231][ T5099] syzkaller0: entered allmulticast mode [ 1832.468996][ T5099] tipc: Resetting bearer [ 1832.478768][ T5098] tipc: Resetting bearer [ 1832.490571][ T5098] tipc: Disabling bearer [ 1833.230595][ T5118] fuse: Unknown parameter '0x0000000000000004' [ 1833.413479][ T5120] ubi31: attaching mtd0 [ 1833.420174][ T5120] ubi31: scanning is finished [ 1833.635802][ T5120] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1833.638286][ T5120] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1833.640600][ T5120] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1833.643846][ T5120] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1833.646934][ T5120] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1833.649762][ T5120] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1833.653034][ T5120] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1224862052 [ 1833.656365][ T5120] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1833.659535][ T5139] ubi31: background thread "ubi_bgt31d" started, PID 5139 [ 1833.719202][ T5143] tipc: Enabling of bearer rejected, failed to enable media [ 1834.047369][ T5153] fuse: Unknown parameter '0x0000000000000004' [ 1836.367374][ T5171] tipc: Enabling of bearer rejected, failed to enable media [ 1836.430688][ T5174] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9489'. [ 1836.439665][ T5174] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9489'. [ 1836.515766][ T5177] input: syz1 as /devices/virtual/input/input45 [ 1836.555264][ T5179] lo speed is unknown, defaulting to 1000 [ 1836.559198][ T5179] lo speed is unknown, defaulting to 1000 [ 1836.564474][ T5179] lo speed is unknown, defaulting to 1000 [ 1836.579502][ T5181] fuse: Unknown parameter 'fd0x0000000000000004' [ 1836.582414][ T5182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9491'. [ 1836.598477][ T5182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9491'. [ 1836.603449][ T5182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9491'. [ 1836.779282][ T5185] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1837.152860][ T1120] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1837.156285][ T1120] sr 2:0:0:0: [sr0] tag#3 Sense Key : Illegal Request [current] [ 1837.158972][ T1120] sr 2:0:0:0: [sr0] tag#3 Add. Sense: Invalid command operation code [ 1837.162835][ T1120] sr 2:0:0:0: [sr0] tag#3 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 1837.169068][ T1120] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1837.173089][ T1120] buffer_io_error: 6 callbacks suppressed [ 1837.173098][ T1120] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1837.225337][ T5203] Bluetooth: MGMT ver 1.23 [ 1837.252558][ T5204] siw: device registration error -23 [ 1837.462951][ T5212] fuse: Unknown parameter 'fd0x0000000000000004' [ 1838.139980][ T5230] FAULT_INJECTION: forcing a failure. [ 1838.139980][ T5230] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.144533][ T5230] CPU: 1 UID: 0 PID: 5230 Comm: syz.2.9507 Not tainted syzkaller #0 PREEMPT(full) [ 1838.144550][ T5230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1838.144557][ T5230] Call Trace: [ 1838.144561][ T5230] [ 1838.144565][ T5230] dump_stack_lvl+0x16c/0x1f0 [ 1838.144586][ T5230] should_fail_ex+0x512/0x640 [ 1838.144597][ T5230] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1838.144613][ T5230] should_failslab+0xc2/0x120 [ 1838.144625][ T5230] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1838.144639][ T5230] ? alloc_vmap_area+0x648/0x29e0 [ 1838.144659][ T5230] ? alloc_vmap_area+0x648/0x29e0 [ 1838.144675][ T5230] alloc_vmap_area+0x648/0x29e0 [ 1838.144697][ T5230] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1838.144718][ T5230] __get_vm_area_node+0x1ca/0x330 [ 1838.144731][ T5230] __vmalloc_node_range_noprof+0x271/0x1480 [ 1838.144743][ T5230] ? bpf_check+0x1bf/0xbdd0 [ 1838.144772][ T5230] ? find_held_lock+0x2b/0x80 [ 1838.144788][ T5230] ? bpf_check+0x1bf/0xbdd0 [ 1838.144798][ T5230] ? rcu_is_watching+0x12/0xc0 [ 1838.144813][ T5230] ? ___kmalloc_large_node+0x114/0x160 [ 1838.144826][ T5230] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1838.144837][ T5230] ? rcu_is_watching+0x12/0xc0 [ 1838.144852][ T5230] ? rcu_is_watching+0x12/0xc0 [ 1838.144867][ T5230] ? trace_kmalloc+0x2b/0xd0 [ 1838.144875][ T5230] ? __kvmalloc_node_noprof.cold+0x61/0x66 [ 1838.144897][ T5230] ? bpf_check+0x1bf/0xbdd0 [ 1838.144907][ T5230] __vmalloc_node_noprof+0xad/0xf0 [ 1838.144919][ T5230] ? bpf_check+0x1bf/0xbdd0 [ 1838.144931][ T5230] bpf_check+0x1bf/0xbdd0 [ 1838.144941][ T5230] ? __lock_acquire+0x622/0x1c90 [ 1838.144953][ T5230] ? css_rstat_updated+0x1c2/0x510 [ 1838.144970][ T5230] ? __pfx_css_rstat_updated+0x10/0x10 [ 1838.144989][ T5230] ? __lock_acquire+0xb8a/0x1c90 [ 1838.145002][ T5230] ? __pfx_bpf_check+0x10/0x10 [ 1838.145016][ T5230] ? find_held_lock+0x2b/0x80 [ 1838.145032][ T5230] ? rcu_is_watching+0x12/0xc0 [ 1838.145046][ T5230] ? ktime_get_with_offset+0x26e/0x3b0 [ 1838.145057][ T5230] ? __asan_memset+0x23/0x50 [ 1838.145069][ T5230] ? lsm_blob_alloc+0x2b/0x90 [ 1838.145086][ T5230] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 1838.145100][ T5230] bpf_prog_load+0x112e/0x2850 [ 1838.145117][ T5230] ? __pfx_bpf_prog_load+0x10/0x10 [ 1838.145131][ T5230] ? __lock_acquire+0xb8a/0x1c90 [ 1838.145158][ T5230] __sys_bpf+0x3e72/0x4980 [ 1838.145174][ T5230] ? __pfx___sys_bpf+0x10/0x10 [ 1838.145188][ T5230] ? find_held_lock+0x2b/0x80 [ 1838.145205][ T5230] ? find_held_lock+0x2b/0x80 [ 1838.145223][ T5230] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1838.145248][ T5230] ? fput+0x9b/0xd0 [ 1838.145259][ T5230] ? ksys_write+0x1ac/0x250 [ 1838.145274][ T5230] ? __pfx_ksys_write+0x10/0x10 [ 1838.145291][ T5230] __ia32_sys_bpf+0x76/0xe0 [ 1838.145307][ T5230] __do_fast_syscall_32+0x7c/0x300 [ 1838.145318][ T5230] do_fast_syscall_32+0x32/0x80 [ 1838.145328][ T5230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1838.145341][ T5230] RIP: 0023:0xf6ffd579 [ 1838.145350][ T5230] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1838.145360][ T5230] RSP: 002b:00000000f53cc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1838.145371][ T5230] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 1838.145378][ T5230] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 1838.145384][ T5230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1838.145390][ T5230] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1838.145396][ T5230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1838.145410][ T5230] [ 1838.145438][ T5230] warn_alloc: 1 callbacks suppressed [ 1838.145445][ T5230] syz.2.9507: vmalloc error: size 2464, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1838.283440][ T5230] CPU: 1 UID: 0 PID: 5230 Comm: syz.2.9507 Not tainted syzkaller #0 PREEMPT(full) [ 1838.283461][ T5230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1838.283470][ T5230] Call Trace: [ 1838.283477][ T5230] [ 1838.283484][ T5230] dump_stack_lvl+0x16c/0x1f0 [ 1838.283511][ T5230] warn_alloc+0x248/0x3a0 [ 1838.283531][ T5230] ? __pfx_warn_alloc+0x10/0x10 [ 1838.283550][ T5230] ? kfree+0x2b8/0x6d0 [ 1838.283564][ T5230] ? __get_vm_area_node+0x2cd/0x330 [ 1838.283583][ T5230] ? __get_vm_area_node+0x2cd/0x330 [ 1838.283595][ T5230] ? __get_vm_area_node+0x208/0x330 [ 1838.283613][ T5230] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 1838.283632][ T5230] ? find_held_lock+0x2b/0x80 [ 1838.283655][ T5230] ? bpf_check+0x1bf/0xbdd0 [ 1838.283674][ T5230] ? rcu_is_watching+0x12/0xc0 [ 1838.283696][ T5230] ? ___kmalloc_large_node+0x114/0x160 [ 1838.283714][ T5230] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1838.283729][ T5230] ? rcu_is_watching+0x12/0xc0 [ 1838.283748][ T5230] ? rcu_is_watching+0x12/0xc0 [ 1838.283766][ T5230] ? trace_kmalloc+0x2b/0xd0 [ 1838.283777][ T5230] ? __kvmalloc_node_noprof.cold+0x61/0x66 [ 1838.283800][ T5230] ? bpf_check+0x1bf/0xbdd0 [ 1838.283813][ T5230] __vmalloc_node_noprof+0xad/0xf0 [ 1838.283827][ T5230] ? bpf_check+0x1bf/0xbdd0 [ 1838.283843][ T5230] bpf_check+0x1bf/0xbdd0 [ 1838.283857][ T5230] ? __lock_acquire+0x622/0x1c90 [ 1838.283872][ T5230] ? css_rstat_updated+0x1c2/0x510 [ 1838.283893][ T5230] ? __pfx_css_rstat_updated+0x10/0x10 [ 1838.283917][ T5230] ? __lock_acquire+0xb8a/0x1c90 [ 1838.283934][ T5230] ? __pfx_bpf_check+0x10/0x10 [ 1838.283952][ T5230] ? find_held_lock+0x2b/0x80 [ 1838.283972][ T5230] ? rcu_is_watching+0x12/0xc0 [ 1838.283990][ T5230] ? ktime_get_with_offset+0x26e/0x3b0 [ 1838.284004][ T5230] ? __asan_memset+0x23/0x50 [ 1838.284020][ T5230] ? lsm_blob_alloc+0x2b/0x90 [ 1838.284042][ T5230] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 1838.284058][ T5230] bpf_prog_load+0x112e/0x2850 [ 1838.284086][ T5230] ? __pfx_bpf_prog_load+0x10/0x10 [ 1838.284102][ T5230] ? __lock_acquire+0xb8a/0x1c90 [ 1838.284142][ T5230] __sys_bpf+0x3e72/0x4980 [ 1838.284163][ T5230] ? __pfx___sys_bpf+0x10/0x10 [ 1838.284180][ T5230] ? find_held_lock+0x2b/0x80 [ 1838.284203][ T5230] ? find_held_lock+0x2b/0x80 [ 1838.284226][ T5230] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1838.284259][ T5230] ? fput+0x9b/0xd0 [ 1838.284273][ T5230] ? ksys_write+0x1ac/0x250 [ 1838.284292][ T5230] ? __pfx_ksys_write+0x10/0x10 [ 1838.284314][ T5230] __ia32_sys_bpf+0x76/0xe0 [ 1838.284333][ T5230] __do_fast_syscall_32+0x7c/0x300 [ 1838.284349][ T5230] do_fast_syscall_32+0x32/0x80 [ 1838.284361][ T5230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1838.284378][ T5230] RIP: 0023:0xf6ffd579 [ 1838.284390][ T5230] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1838.284403][ T5230] RSP: 002b:00000000f53cc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1838.284417][ T5230] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 1838.284426][ T5230] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 1838.284434][ T5230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1838.284442][ T5230] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1838.284450][ T5230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1838.284469][ T5230] [ 1838.284474][ T5230] Mem-Info: [ 1838.408023][ T5230] active_anon:3335 inactive_anon:357 isolated_anon:0 [ 1838.408023][ T5230] active_file:1511 inactive_file:541 isolated_file:0 [ 1838.408023][ T5230] unevictable:2793 dirty:229 writeback:0 [ 1838.408023][ T5230] slab_reclaimable:7672 slab_unreclaimable:94790 [ 1838.408023][ T5230] mapped:25519 shmem:5638 pagetables:1023 [ 1838.408023][ T5230] sec_pagetables:346 bounce:0 [ 1838.408023][ T5230] kernel_misc_reclaimable:0 [ 1838.408023][ T5230] free:26943 free_pcp:5210 free_cma:0 [ 1838.427143][ T5230] Node 0 active_anon:272kB inactive_anon:300kB active_file:1888kB inactive_file:1132kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:772kB dirty:112kB writeback:0kB shmem:4164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8292kB pagetables:1192kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB [ 1838.440442][ T5230] Node 1 active_anon:13064kB inactive_anon:1128kB active_file:4160kB inactive_file:1032kB unevictable:7732kB isolated(anon):0kB isolated(file):0kB mapped:101408kB dirty:872kB writeback:0kB shmem:18464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7980kB pagetables:2952kB sec_pagetables:212kB all_unreclaimable? no Balloon:0kB [ 1838.453552][ T5230] Node 0 DMA free:2188kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 1838.466349][ T5230] lowmem_reserve[]: 0 292 292 292 292 [ 1838.468750][ T5230] Node 0 DMA32 free:18692kB boost:2048kB min:15496kB low:18856kB high:22216kB reserved_highatomic:0KB free_highatomic:0KB active_anon:272kB inactive_anon:300kB active_file:1888kB inactive_file:1132kB unevictable:3536kB writepending:112kB zspages:692kB present:1032196kB managed:299636kB mlocked:0kB bounce:0kB free_pcp:2252kB local_pcp:920kB free_cma:0kB [ 1838.482398][ T5230] lowmem_reserve[]: 0 0 0 0 0 [ 1838.484447][ T5230] Node 1 DMA32 free:86776kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13064kB inactive_anon:1128kB active_file:4160kB inactive_file:1032kB unevictable:7732kB writepending:872kB zspages:4156kB present:1048432kB managed:948220kB mlocked:4196kB bounce:0kB free_pcp:19224kB local_pcp:15264kB free_cma:0kB [ 1838.498520][ T5230] lowmem_reserve[]: 0 0 0 0 0 [ 1838.500585][ T5230] Node 0 DMA: 49*4kB (U) 19*8kB (U) 9*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2188kB [ 1838.506712][ T5230] Node 0 DMA32: 499*4kB (UME) 347*8kB (UME) 98*16kB (UME) 102*32kB (UME) 38*64kB (UME) 16*128kB (M) 10*256kB (UM) 0*512kB 2*1024kB (UM) 0*2048kB 0*4096kB = 18692kB [ 1838.513590][ T5230] Node 1 DMA32: 24*4kB (UME) 35*8kB (UME) 126*16kB (UME) 419*32kB (ME) 281*64kB (UME) 134*128kB (UM) 68*256kB (UM) 22*512kB (UME) 7*1024kB (UM) 0*2048kB 0*4096kB = 86776kB [ 1838.519027][ T5230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1838.522158][ T5230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1838.525021][ T5230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1838.528947][ T5230] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1838.533113][ T5230] 8262 total pagecache pages [ 1838.535224][ T5230] 530 pages in swap cache [ 1838.537246][ T5230] Free swap = 75332kB [ 1838.539043][ T5230] Total swap = 124996kB [ 1838.540894][ T5230] 524155 pages RAM [ 1838.542495][ T5230] 0 pages HighMem/MovableOnly [ 1838.544476][ T5230] 208351 pages reserved [ 1838.546232][ T5230] 0 pages cma reserved [ 1838.592793][ T5237] tipc: Enabling of bearer rejected, failed to enable media [ 1838.654271][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9509'. [ 1838.826458][ T5242] 8ÿÖÿÿ: entered promiscuous mode [ 1839.171819][ T5249] syzkaller0: entered promiscuous mode [ 1839.173931][ T5249] syzkaller0: entered allmulticast mode [ 1839.680997][ T40] audit: type=1326 audit(2000000711.143:9905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.9517" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1839.691147][ T40] audit: type=1326 audit(2000000711.153:9906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.9517" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1839.703022][ T40] audit: type=1326 audit(2000000711.153:9907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.9517" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1839.720099][ T40] audit: type=1326 audit(2000000711.153:9908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.9517" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1839.729325][ T40] audit: type=1326 audit(2000000711.163:9909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.9517" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1839.737251][ T40] audit: type=1326 audit(2000000711.163:9910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.9517" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1839.746366][ T40] audit: type=1326 audit(2000000711.173:9911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.9517" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1839.755297][ T40] audit: type=1326 audit(2000000711.183:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.9517" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd598 code=0x7ffc0000 [ 1839.831357][ T40] audit: type=1326 audit(2000000711.293:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.9517" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd598 code=0x7ffc0000 [ 1839.837994][ T40] audit: type=1326 audit(2000000711.303:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.9517" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1839.890364][ T5258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9517'. [ 1840.731118][ T5949] Bluetooth: hci2: command tx timeout [ 1840.831013][T25219] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1841.013963][T25219] usb 7-1: config 0 has no interfaces? [ 1841.032220][T25219] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1841.035723][T25219] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.038977][T25219] usb 7-1: Product: syz [ 1841.051645][T25219] usb 7-1: Manufacturer: syz [ 1841.053552][T25219] usb 7-1: SerialNumber: syz [ 1841.070481][T25219] usb 7-1: config 0 descriptor?? [ 1841.466925][ T5258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9517'. [ 1841.487195][ T5276] lo speed is unknown, defaulting to 1000 [ 1841.490977][ T5276] lo speed is unknown, defaulting to 1000 [ 1841.494109][ T5276] lo speed is unknown, defaulting to 1000 [ 1841.707658][ T5306] fuse: Unknown parameter 'gr_iÁ' [ 1841.953871][ T5313] siw: device registration error -23 [ 1842.881168][ T1316] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1842.962455][ T5325] tipc: Enabled bearer , priority 0 [ 1842.966804][ T5325] syzkaller0: entered promiscuous mode [ 1842.968681][ T5325] syzkaller0: entered allmulticast mode [ 1842.976222][ T5324] tipc: Resetting bearer [ 1842.989025][ T5324] tipc: Disabling bearer [ 1843.040936][ T1316] usb 9-1: Using ep0 maxpacket: 8 [ 1843.044514][ T1316] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1843.047970][ T1316] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1843.051660][ T1316] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1843.055278][ T1316] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1843.059434][ T1316] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1843.063109][ T1316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.272278][ T1316] usb 9-1: GET_CAPABILITIES returned 0 [ 1843.274785][ T1316] usbtmc 9-1:16.0: can't read capabilities [ 1843.496749][T18347] usb 7-1: USB disconnect, device number 63 [ 1843.565050][ T5336] binder_alloc: 5316: binder_alloc_buf, no vma [ 1843.703696][ T5339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input46 [ 1843.990258][T18347] usb 9-1: USB disconnect, device number 10 [ 1845.121164][ T5362] bond0: option updelay: invalid value (18446744073709551359) [ 1845.123562][ T5362] bond0: option updelay: allowed values 0 - 2147483647 [ 1845.185162][ T5363] netlink: 'syz.2.9541': attribute type 10 has an invalid length. [ 1845.310983][ T5363] infiniband {yz1: set active [ 1845.313120][ T5363] infiniband {yz1: added syz_tun [ 1845.333894][ T5363] RDS/IB: {yz1: added [ 1845.335634][ T5363] smc: adding ib device {yz1 with port count 1 [ 1845.340056][ T5363] smc: ib device {yz1 port 1 has no pnetid [ 1845.583509][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 1845.583527][ T40] audit: type=1326 audit(2000000717.053:9928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.4.9543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ff00000 [ 1845.595646][ T40] audit: type=1326 audit(2000000717.053:9929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.4.9543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ff00000 [ 1845.604438][ T40] audit: type=1326 audit(2000000717.053:9930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.4.9543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ff00000 [ 1845.613604][ T40] audit: type=1326 audit(2000000717.053:9931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.4.9543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ff00000 [ 1845.625401][ T40] audit: type=1326 audit(2000000717.053:9932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.4.9543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ff00000 [ 1845.634911][ T40] audit: type=1326 audit(2000000717.053:9933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.4.9543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ff00000 [ 1845.643926][ T40] audit: type=1326 audit(2000000717.053:9934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.4.9543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ff00000 [ 1845.653100][ T40] audit: type=1326 audit(2000000717.053:9935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.4.9543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ff00000 [ 1845.661982][ T40] audit: type=1326 audit(2000000717.053:9936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.4.9543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ff00000 [ 1845.670949][ T40] audit: type=1326 audit(2000000717.053:9937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.4.9543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ff00000 [ 1847.126443][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9546'. [ 1847.322746][ T5388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1847.325131][ T5388] IPv6: NLM_F_CREATE should be set when creating new route [ 1847.610138][ T5393] lo speed is unknown, defaulting to 1000 [ 1847.615222][ T5393] lo speed is unknown, defaulting to 1000 [ 1847.622245][ T5393] lo speed is unknown, defaulting to 1000 [ 1847.875834][ T5397] tipc: Started in network mode [ 1847.877523][ T5397] tipc: Node identity feef0d17bf43, cluster identity 4711 [ 1847.879843][ T5397] tipc: Enabled bearer , priority 0 [ 1847.883321][ T5397] syzkaller0: entered promiscuous mode [ 1847.885056][ T5397] syzkaller0: entered allmulticast mode [ 1847.890448][ T5396] tipc: Resetting bearer [ 1847.918300][ T5396] tipc: Disabling bearer [ 1848.833540][ T5414] /dev/sr0: Can't open blockdev [ 1848.912341][ T5417] 9pnet_fd: Insufficient options for proto=fd [ 1849.519065][ T5424] tipc: Enabled bearer , priority 0 [ 1849.533638][ T5424] tipc: Resetting bearer [ 1849.591884][ T5423] tipc: Disabling bearer [ 1850.188086][ T5429] tipc: Enabling of bearer rejected, failed to enable media [ 1850.305850][ T5437] siw: device registration error -23 [ 1850.649149][ T5435] tipc: Enabling of bearer rejected, failed to enable media [ 1850.999123][ T5450] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1851.009899][ T5450] CIFS mount error: No usable UNC path provided in device string! [ 1851.009899][ T5450] [ 1851.015745][ T5450] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1851.429639][ T5453] overlay: ./file1 is not a directory [ 1851.889409][ T5457] tipc: Enabled bearer , priority 0 [ 1851.902379][ T5457] tipc: Resetting bearer [ 1851.936834][ T5456] tipc: Disabling bearer [ 1852.433299][ T5466] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1852.436197][ T5466] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1852.458182][ T5466] vhci_hcd vhci_hcd.0: Device attached [ 1852.573109][ T5471] trusted_key: encrypted_key: insufficient parameters specified [ 1852.737539][ T5475] binder: 5472:5475 ioctl 0 80000040 returned -22 [ 1852.741010][T31119] usb 42-1: SetAddress Request (106) to port 0 [ 1852.743226][T31119] usb 42-1: new SuperSpeed USB device number 106 using vhci_hcd [ 1853.043491][ T5467] vhci_hcd: connection reset by peer [ 1853.046900][T27375] vhci_hcd: stop threads [ 1853.048659][T27375] vhci_hcd: release socket [ 1853.050382][T27375] vhci_hcd: disconnect device [ 1853.555280][ T5484] 9pnet_fd: Insufficient options for proto=fd [ 1853.756053][ T5488] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1853.758989][ T5488] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1853.784836][ T5488] vhci_hcd vhci_hcd.0: Device attached [ 1854.051343][T26475] usb 46-1: SetAddress Request (6) to port 0 [ 1854.052438][ T40] kauditd_printk_skb: 23658 callbacks suppressed [ 1854.052453][ T40] audit: type=1326 audit(2000000725.523:33596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.9577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 1854.053314][T26475] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1854.070055][ T5494] overlay: ./file0 is not a directory [ 1854.072502][ T40] audit: type=1326 audit(2000000725.533:33597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.9577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 1854.101010][ T40] audit: type=1326 audit(2000000725.533:33598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.9577" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 1854.110099][ T40] audit: type=1326 audit(2000000725.533:33599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.9577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 1854.121423][ T40] audit: type=1326 audit(2000000725.533:33600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.9577" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 1854.130611][ T40] audit: type=1326 audit(2000000725.533:33601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.9577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 1854.140245][ T40] audit: type=1326 audit(2000000725.533:33602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.9577" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 1854.152430][ T40] audit: type=1326 audit(2000000725.533:33603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.9577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 1854.161702][ T40] audit: type=1326 audit(2000000725.533:33604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.9577" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 1854.170694][ T40] audit: type=1326 audit(2000000725.533:33605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.9577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 1854.192418][ T5494] pim6reg: entered allmulticast mode [ 1854.341632][ T5497] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9578'. [ 1854.355914][ T5489] vhci_hcd: connection reset by peer [ 1854.358356][ T3153] vhci_hcd: stop threads [ 1854.360025][ T3153] vhci_hcd: release socket [ 1854.361995][ T3153] vhci_hcd: disconnect device [ 1854.537580][ T5497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1854.549041][ T5497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1854.571707][ T5497] bond0 (unregistering): (slave team0): Releasing backup interface [ 1854.586122][ T5497] bond0 (unregistering): Released all slaves [ 1854.753323][ T5491] pim6reg: left allmulticast mode [ 1855.646842][ T5517] overlay: Unknown parameter 'smackfstransmute' [ 1856.325819][ T5536] lo speed is unknown, defaulting to 1000 [ 1856.335238][ T5536] lo speed is unknown, defaulting to 1000 [ 1856.344523][ T5536] lo speed is unknown, defaulting to 1000 [ 1857.113830][ T1316] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 1857.117441][ T1316] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 1857.120592][ T1316] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 1857.125157][ T1316] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 1857.127657][ T1316] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 1857.133340][ T1316] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 1857.135742][ T1316] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 1857.148416][ T1316] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 1857.150975][ T1316] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 1857.153832][ T1316] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 1857.162498][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9592'. [ 1857.165446][ T1316] hid-generic 0003:0004:0000.0028: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1857.295121][ T5564] binder: 5557:5564 ioctl 0 80000040 returned -22 [ 1857.410981][T18347] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1857.560934][T18347] usb 8-1: Using ep0 maxpacket: 8 [ 1857.565355][T18347] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1857.569570][T18347] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.573907][T18347] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1857.579905][T18347] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1857.583681][T18347] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.586863][T18347] usb 8-1: Product: syz [ 1857.588659][T18347] usb 8-1: Manufacturer: syz [ 1857.590558][T18347] usb 8-1: SerialNumber: syz [ 1857.773626][T31119] usb 42-1: device descriptor read/8, error -110 [ 1857.773874][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.545553][T31119] usb usb42-port1: attempt power cycle [ 1858.826680][ T5593] program syz.4.9605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1859.131235][T26475] usb 46-1: device descriptor read/8, error -110 [ 1859.131800][T31119] usb usb42-port1: unable to enumerate USB device [ 1859.551113][T26475] usb usb46-port1: attempt power cycle [ 1860.121855][T26475] usb usb46-port1: unable to enumerate USB device [ 1860.189899][T31119] usb 8-1: USB disconnect, device number 27 [ 1860.893098][ T5631] tipc: Enabled bearer , priority 0 [ 1860.904981][ T5631] syzkaller0: entered promiscuous mode [ 1860.906839][ T5631] syzkaller0: entered allmulticast mode [ 1860.943192][ T5631] tipc: Resetting bearer [ 1860.951158][ T5630] tipc: Resetting bearer [ 1860.971916][ T5630] tipc: Disabling bearer [ 1861.359132][ T40] kauditd_printk_skb: 138 callbacks suppressed [ 1861.359147][ T40] audit: type=1804 audit(2000000732.823:33744): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9619" name="bus" dev="ramfs" ino=153211 res=1 errno=0 [ 1861.369635][ T40] audit: type=1804 audit(2000000732.823:33745): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9619" name="bus" dev="ramfs" ino=153211 res=1 errno=0 [ 1861.528403][ T5654] tipc: Enabled bearer , priority 0 [ 1861.535903][ T5654] syzkaller0: entered promiscuous mode [ 1861.538151][ T5654] syzkaller0: entered allmulticast mode [ 1861.548144][ T5654] tipc: Resetting bearer [ 1861.552342][ T5653] tipc: Resetting bearer [ 1861.565942][ T5653] tipc: Disabling bearer [ 1861.841839][ T5657] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1861.920227][ T5660] syz_tun: refused to change device tx_queue_len [ 1864.504618][ T5699] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1864.506710][ T5699] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1864.511729][ T5699] vhci_hcd vhci_hcd.0: Device attached [ 1864.578287][ T5707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9639'. [ 1864.591951][ T5704] vhci_hcd: connection closed [ 1864.592235][T29266] vhci_hcd: stop threads [ 1864.595019][T29266] vhci_hcd: release socket [ 1864.596456][T29266] vhci_hcd: disconnect device [ 1865.184881][ T5717] ALSA: mixer_oss: invalid OSS volume '—ˆ†åÉY¢¤{õ›´žÜÿ¬¤Uøü°ŽDíÆD ' [ 1865.187607][ T5717] ALSA: mixer_oss: invalid OSS volume 'ߧ«4cÑTÆÒÈ󯆩"¦m!lŠT.îšÎ œ¾®ì' [ 1865.190186][ T5717] ALSA: mixer_oss: invalid OSS volume 'lg§' [ 1865.193415][ T5717] ALSA: mixer_oss: invalid OSS volume 'í)nÃäÃkëKi†·,r‚¾WY\ñZV‰Óå¼÷?J`G' [ 1865.196106][ T5717] ALSA: mixer_oss: invalid OSS volume 'kûO0ÍÇòª$ÛÒgÀ¾{ƒpl{ˆúy;_A¸RW§€' [ 1865.198722][ T5717] ALSA: mixer_oss: invalid OSS volume 'ò' [ 1865.200757][ T5717] ALSA: mixer_oss: invalid OSS volume 'sv«ˆ Fu{Qby>áñh%w¾áõ]' [ 1865.203921][ T5717] ALSA: mixer_oss: invalid OSS volume 'ŽEÙ“•= Øv?ïÌ@4Åä8î¶@»híüÉÆL' [ 1865.206532][ T5717] ALSA: mixer_oss: invalid OSS volume 'î+­³?>3Iq¡»0:i¸Ýq½|û—UëDœÅ™¯û' [ 1865.209099][ T5717] ALSA: mixer_oss: invalid OSS volume 'vÓ·*xrµýN0¡Ü—ƒácŒ†Až‚€åìdâhû' [ 1865.212616][ T5717] ALSA: mixer_oss: invalid OSS volume '±äJMÊïé œ%HœJ[~S' [ 1865.669124][ T5733] tipc: Enabling of bearer rejected, failed to enable media [ 1865.876180][ T5743] tipc: Enabled bearer , priority 0 [ 1865.882763][ T5743] syzkaller0: entered promiscuous mode [ 1865.885130][ T5743] syzkaller0: entered allmulticast mode [ 1865.903135][ T5743] tipc: Resetting bearer [ 1865.913318][ T5741] tipc: Resetting bearer [ 1865.932972][ T5741] tipc: Disabling bearer [ 1866.310798][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9651'. [ 1866.314408][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9651'. [ 1867.487769][ T5770] tipc: Enabled bearer , priority 0 [ 1867.492214][ T5770] syzkaller0: entered promiscuous mode [ 1867.493937][ T5770] syzkaller0: entered allmulticast mode [ 1867.502821][ T5770] tipc: Resetting bearer [ 1867.508307][ T5769] tipc: Resetting bearer [ 1867.520213][ T5769] tipc: Disabling bearer [ 1867.878517][ T5779] netlink: 'syz.2.9661': attribute type 10 has an invalid length. [ 1868.564791][ T5804] tipc: Enabled bearer , priority 0 [ 1868.570228][ T5804] syzkaller0: entered promiscuous mode [ 1868.573005][ T5804] syzkaller0: entered allmulticast mode [ 1868.581730][ T5804] tipc: Resetting bearer [ 1868.587706][ T5803] tipc: Resetting bearer [ 1868.598439][ T5803] tipc: Disabling bearer [ 1869.038298][ T5949] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1869.326058][ T5831] mkiss: ax0: crc mode is auto. [ 1869.980787][ T5842] vlan2: entered promiscuous mode [ 1869.984198][ T5842] vlan2: entered allmulticast mode [ 1869.986483][ T5842] hsr_slave_1: entered allmulticast mode [ 1870.360286][ T5847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9680'. [ 1870.505159][ T5857] vxcan0: tx drop: invalid sa for name 0x0000000000000004 [ 1870.584452][ T5863] 8ÿÖÿÿ: entered promiscuous mode [ 1870.746139][ T5868] lo speed is unknown, defaulting to 1000 [ 1870.750029][ T5868] lo speed is unknown, defaulting to 1000 [ 1870.755111][ T5868] lo speed is unknown, defaulting to 1000 [ 1871.031646][ T1316] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1871.297433][ T1316] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1871.310152][ T1316] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1871.314071][ T1316] usb 8-1: Product: syz [ 1871.315675][ T1316] usb 8-1: Manufacturer: syz [ 1871.320347][ T1316] usb 8-1: SerialNumber: syz [ 1871.326186][ T1316] usb 8-1: config 0 descriptor?? [ 1871.352945][ T1316] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1871.356373][ T1316] dvb-usb: bulk message failed: -22 (2/0) [ 1871.362925][ T1316] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1871.371448][ T1316] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1871.374374][ T1316] usb 8-1: media controller created [ 1871.422017][ T1316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1872.863048][ T5898] tipc: Enabling of bearer rejected, failed to enable media [ 1873.668787][ T1316] cxusb: set interface failed [ 1873.673375][ T1316] dvb-usb: bulk message failed: -22 (1/0) [ 1873.984601][ T1316] DVB: Unable to find symbol mt352_attach() [ 1873.986678][ T1316] dvb-usb: bulk message failed: -22 (5/0) [ 1873.989054][ T1316] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1873.998615][ T1316] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1874.014767][ T5925] tipc: Enabled bearer , priority 0 [ 1874.018577][ T5925] syzkaller0: entered promiscuous mode [ 1874.020341][ T5925] syzkaller0: entered allmulticast mode [ 1874.025450][ T5925] tipc: Resetting bearer [ 1874.036932][ T5924] tipc: Resetting bearer [ 1874.044266][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9701'. [ 1874.078526][ T5924] tipc: Disabling bearer [ 1874.091179][ T1316] rc_core: IR keymap rc-dvico-mce not found [ 1874.093620][ T1316] Registered IR keymap rc-empty [ 1874.096642][ T1316] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 1874.113333][ T1316] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input47 [ 1874.118975][ T1316] dvb-usb: schedule remote query interval to 100 msecs. [ 1874.121729][ T1316] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1874.125720][ T1316] usb 8-1: USB disconnect, device number 28 [ 1874.172729][ T1316] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1874.337125][ T5932] random: crng reseeded on system resumption [ 1875.483317][ T5956] netlink: 237 bytes leftover after parsing attributes in process `syz.1.9705'. [ 1875.516771][ T5951] wireguard0: entered promiscuous mode [ 1875.519140][ T5951] wireguard0: entered allmulticast mode [ 1876.178779][ T6008] syzkaller0: entered promiscuous mode [ 1876.181610][ T6008] syzkaller0: entered allmulticast mode [ 1877.299326][ T6036] 9pnet_fd: Insufficient options for proto=fd [ 1877.504109][ T6047] syzkaller0: entered promiscuous mode [ 1877.506625][ T6047] syzkaller0: entered allmulticast mode [ 1877.751724][ T6059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1877.772801][ T6059] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1877.788985][T27384] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1877.796952][ T6059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1877.913264][T29266] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1878.847928][ T6083] syzkaller0: entered promiscuous mode [ 1878.851354][ T6083] syzkaller0: entered allmulticast mode [ 1879.339111][ T6098] overlayfs: failed to resolve './file1': -2 [ 1880.896156][ T40] audit: type=1326 audit(2000000752.353:33746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.9750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1880.903290][ T40] audit: type=1326 audit(2000000752.353:33747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.9750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1880.910170][ T40] audit: type=1326 audit(2000000752.353:33748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.9750" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1880.917164][ T40] audit: type=1326 audit(2000000752.363:33749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.9750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1880.924203][ T40] audit: type=1326 audit(2000000752.363:33750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.9750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1880.931377][ T40] audit: type=1326 audit(2000000752.363:33751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.9750" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1880.938138][ T40] audit: type=1326 audit(2000000752.363:33752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.9750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1880.945444][ T40] audit: type=1326 audit(2000000752.363:33753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.9750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1880.952367][ T40] audit: type=1326 audit(2000000752.363:33754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.9750" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1880.959380][ T40] audit: type=1326 audit(2000000752.363:33755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.4.9750" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1881.131422][ T1316] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1881.281875][ T1316] usb 9-1: no configurations [ 1881.283875][ T1316] usb 9-1: can't read configurations, error -22 [ 1881.341378][ T6140] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1881.421019][ T1316] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1881.592151][ T1316] usb 9-1: no configurations [ 1881.594129][ T1316] usb 9-1: can't read configurations, error -22 [ 1881.597038][ T1316] usb usb9-port1: attempt power cycle [ 1881.931115][ T1316] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1881.952547][ T1316] usb 9-1: no configurations [ 1881.954277][ T1316] usb 9-1: can't read configurations, error -22 [ 1882.081035][ T1316] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1882.103068][ T1316] usb 9-1: no configurations [ 1882.105052][ T1316] usb 9-1: can't read configurations, error -22 [ 1882.107898][ T1316] usb usb9-port1: unable to enumerate USB device [ 1883.651482][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9758'. [ 1883.655502][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9758'. [ 1883.773575][ T6170] FAULT_INJECTION: forcing a failure. [ 1883.773575][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 1883.777323][ T5949] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1883.778098][ T6170] CPU: 3 UID: 0 PID: 6170 Comm: syz.4.9762 Not tainted syzkaller #0 PREEMPT(full) [ 1883.778115][ T6170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1883.778122][ T6170] Call Trace: [ 1883.778127][ T6170] [ 1883.778132][ T6170] dump_stack_lvl+0x16c/0x1f0 [ 1883.778154][ T6170] should_fail_ex+0x512/0x640 [ 1883.778169][ T6170] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1883.778189][ T6170] should_failslab+0xc2/0x120 [ 1883.778201][ T6170] __kvmalloc_node_noprof+0x141/0x9c0 [ 1883.778219][ T6170] ? seq_read_iter+0x830/0x12d0 [ 1883.778244][ T6170] ? seq_read_iter+0x830/0x12d0 [ 1883.778273][ T6170] seq_read_iter+0x830/0x12d0 [ 1883.778298][ T6170] seq_read+0x3a3/0x570 [ 1883.778311][ T6170] ? __pfx_seq_read+0x10/0x10 [ 1883.778334][ T6170] ? __pfx_seq_read+0x10/0x10 [ 1883.778352][ T6170] proc_reg_read+0x120/0x330 [ 1883.778369][ T6170] ? __pfx_proc_reg_read+0x10/0x10 [ 1883.778386][ T6170] vfs_read+0x1e4/0xcf0 [ 1883.778406][ T6170] ? __pfx_vfs_read+0x10/0x10 [ 1883.778420][ T6170] ? find_held_lock+0x2b/0x80 [ 1883.778445][ T6170] ? __fget_files+0x20e/0x3c0 [ 1883.778459][ T6170] ? handle_mm_fault+0x1f0/0xd10 [ 1883.778476][ T6170] ksys_read+0x12a/0x250 [ 1883.778492][ T6170] ? __pfx_ksys_read+0x10/0x10 [ 1883.778509][ T6170] ? rcu_is_watching+0x12/0xc0 [ 1883.778528][ T6170] __do_fast_syscall_32+0x7c/0x300 [ 1883.778540][ T6170] do_fast_syscall_32+0x32/0x80 [ 1883.778550][ T6170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1883.778565][ T6170] RIP: 0023:0xf70bd579 [ 1883.778575][ T6170] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1883.778585][ T6170] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 1883.778596][ T6170] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002480 [ 1883.778603][ T6170] RDX: 0000000000002071 RSI: 0000000000000000 RDI: 0000000000000000 [ 1883.778610][ T6170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1883.778617][ T6170] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1883.778623][ T6170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1883.778638][ T6170] [ 1883.879343][ T6172] 8021q: VLANs not supported on gre0 [ 1884.087253][ T6189] mkiss: ax0: crc mode is auto. [ 1884.751883][ T6213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1884.755161][ T6213] IPv6: NLM_F_CREATE should be set when creating new route [ 1885.120952][T26475] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 1885.272627][T26475] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1885.276075][T26475] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1885.280692][T26475] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1885.285730][T26475] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1885.292017][T26475] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1885.294497][T26475] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1885.297832][T26475] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1885.301591][T26475] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1885.305419][T26475] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1885.307781][T26475] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1885.311314][T26475] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1885.315175][T26475] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1885.320488][T26475] usb 8-1: string descriptor 0 read error: -22 [ 1885.323128][T26475] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1885.326926][T26475] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.333449][T26475] adutux 8-1:168.0: interrupt endpoints not found [ 1885.541676][T18347] usb 8-1: USB disconnect, device number 29 [ 1887.861957][ T6261] hub 8-0:1.0: USB hub found [ 1887.864076][ T6261] hub 8-0:1.0: 1 port detected [ 1888.267372][ T6270] tipc: Enabling of bearer rejected, failed to enable media [ 1888.902691][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9800'. [ 1889.008272][ T6292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9803'. [ 1889.151600][ T6272] orangefs_mount: mount request failed with -4 [ 1889.559173][ T6303] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1890.654090][ T6333] netlink: 'syz.4.9816': attribute type 1 has an invalid length. [ 1890.683131][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9816'. [ 1890.713595][ T6333] bond3: (slave gretap2): making interface the new active one [ 1890.718810][ T6333] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1891.382324][ T6352] siw: device registration error -23 [ 1891.537478][ T6356] lo speed is unknown, defaulting to 1000 [ 1891.540301][ T6356] lo speed is unknown, defaulting to 1000 [ 1891.543201][ T6356] lo speed is unknown, defaulting to 1000 [ 1891.982903][ T6374] binder: 6362:6374 ioctl c00c6211 0 returned -14 [ 1892.193114][ T6388] 9pnet_fd: Insufficient options for proto=fd [ 1892.545388][ T6390] can0: slcan on pty26. [ 1892.558035][ T1316] libceph: connect (1)[c::]:6789 error -13 [ 1892.560073][ T1316] libceph: mon0 (1)[c::]:6789 connect error [ 1892.845165][ T1316] libceph: connect (1)[c::]:6789 error -13 [ 1892.847771][ T1316] libceph: mon0 (1)[c::]:6789 connect error [ 1892.966297][ T6402] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1893.031742][ T6383] can0 (unregistered): slcan off pty26. [ 1893.043700][ T6386] ceph: No mds server is up or the cluster is laggy [ 1893.731128][ T6426] random: crng reseeded on system resumption [ 1894.372254][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9843'. [ 1894.415249][ T6434] FAULT_INJECTION: forcing a failure. [ 1894.415249][ T6434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1894.419941][ T6434] CPU: 0 UID: 0 PID: 6434 Comm: syz.1.9844 Not tainted syzkaller #0 PREEMPT(full) [ 1894.419965][ T6434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1894.419975][ T6434] Call Trace: [ 1894.419982][ T6434] [ 1894.419989][ T6434] dump_stack_lvl+0x16c/0x1f0 [ 1894.420018][ T6434] should_fail_ex+0x512/0x640 [ 1894.420038][ T6434] _copy_to_user+0x32/0xd0 [ 1894.420056][ T6434] simple_read_from_buffer+0xcb/0x170 [ 1894.420079][ T6434] proc_fail_nth_read+0x197/0x240 [ 1894.420102][ T6434] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1894.420125][ T6434] ? rw_verify_area+0xcf/0x6c0 [ 1894.420143][ T6434] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1894.420164][ T6434] vfs_read+0x1e4/0xcf0 [ 1894.420190][ T6434] ? __pfx_vfs_read+0x10/0x10 [ 1894.420208][ T6434] ? find_held_lock+0x2b/0x80 [ 1894.420237][ T6434] ? __fget_files+0x20e/0x3c0 [ 1894.420255][ T6434] ? __ia32_sys_timer_settime32+0x110/0x2c0 [ 1894.420282][ T6434] ksys_read+0x12a/0x250 [ 1894.420302][ T6434] ? __pfx_ksys_read+0x10/0x10 [ 1894.420321][ T6434] ? __do_compat_sys_rt_sigreturn+0x1ba/0x270 [ 1894.420347][ T6434] ? rcu_is_watching+0x12/0xc0 [ 1894.420371][ T6434] __do_fast_syscall_32+0x7c/0x300 [ 1894.420389][ T6434] do_fast_syscall_32+0x32/0x80 [ 1894.420404][ T6434] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1894.420423][ T6434] RIP: 0023:0xf7ff7579 [ 1894.420436][ T6434] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1894.420450][ T6434] RSP: 002b:00000000f54e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1894.420466][ T6434] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54e6620 [ 1894.420476][ T6434] RDX: 000000000000000f RSI: 00000000f7485ff4 RDI: 0000000000000000 [ 1894.420486][ T6434] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1894.420495][ T6434] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1894.420504][ T6434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1894.420527][ T6434] [ 1894.848306][ T6443] netlink: 'syz.1.9847': attribute type 3 has an invalid length. [ 1894.853066][ T6443] netlink: 'syz.1.9847': attribute type 3 has an invalid length. [ 1894.860916][ T6444] netlink: 'syz.2.9846': attribute type 11 has an invalid length. [ 1894.863254][ T6444] netlink: 'syz.2.9846': attribute type 5 has an invalid length. [ 1894.865565][ T6444] netlink: 4112 bytes leftover after parsing attributes in process `syz.2.9846'. [ 1895.501939][ T6448] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1895.504793][ T6448] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1895.508344][ T6448] vhci_hcd vhci_hcd.0: Device attached [ 1895.780931][T28540] usb 42-1: SetAddress Request (110) to port 0 [ 1895.783023][T28540] usb 42-1: new SuperSpeed USB device number 110 using vhci_hcd [ 1896.150688][ T6465] No control pipe specified [ 1896.199201][ T6465] 9pnet_virtio: no channels available for device syz [ 1896.207695][ T6449] vhci_hcd: connection reset by peer [ 1896.209598][T27384] vhci_hcd: stop threads [ 1896.211302][T27384] vhci_hcd: release socket [ 1896.212927][T27384] vhci_hcd: disconnect device [ 1896.647937][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9856'. [ 1896.762961][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9857'. [ 1897.376660][ T6513] siw: device registration error -23 [ 1897.390325][ T6510] infiniband syz1: set active [ 1897.392574][ T6510] infiniband syz1: added syz_tun [ 1897.430770][ T6510] RDS/IB: syz1: added [ 1897.432628][ T6510] smc: adding ib device syz1 with port count 1 [ 1897.435176][ T6510] smc: ib device syz1 port 1 has pnetid SYZ2 (user defined) [ 1897.494110][ T6511] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.513092][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9866'. [ 1897.578251][ T6511] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.683573][ T6511] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.758974][ T6511] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.902672][T29264] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.912738][T29264] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.921832][ T1348] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.932035][T27375] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.238513][T18347] {yz1: Port: 1 Link DOWN [ 1898.245123][T29453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1898.248449][T29453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1898.251700][T29453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1898.256299][T29453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1898.259798][T29453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1898.649015][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 1898.649026][ T40] audit: type=1326 audit(2000000770.113:33794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.9873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1898.657796][ T40] audit: type=1326 audit(2000000770.113:33795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.9873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1898.665095][ T40] audit: type=1326 audit(2000000770.123:33796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.9873" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1898.672051][ T40] audit: type=1326 audit(2000000770.123:33797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.9873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1898.678879][ T40] audit: type=1326 audit(2000000770.123:33798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.9873" exe="/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1898.686290][ T40] audit: type=1326 audit(2000000770.123:33799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.9873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1898.694829][ T40] audit: type=1326 audit(2000000770.123:33800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.9873" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1898.704029][ T40] audit: type=1326 audit(2000000770.123:33801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.9873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1898.710774][ T40] audit: type=1326 audit(2000000770.123:33802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.9873" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1898.717652][ T40] audit: type=1326 audit(2000000770.123:33803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.4.9873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1899.117535][T27375] smc: removing ib device {yz1 [ 1899.117920][ T6525] lo speed is unknown, defaulting to 1000 [ 1899.124074][ T6525] lo speed is unknown, defaulting to 1000 [ 1899.126679][ T6525] lo speed is unknown, defaulting to 1000 [ 1899.398477][ T6543] tipc: Cannot configure node identity twice [ 1899.469693][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 1899.703642][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.705958][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1899.708287][ T6525] bridge_slave_0: entered allmulticast mode [ 1899.711650][ T6525] bridge_slave_0: entered promiscuous mode [ 1899.714852][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1899.717135][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1899.719476][ T6525] bridge_slave_1: entered allmulticast mode [ 1899.726790][ T6525] bridge_slave_1: entered promiscuous mode [ 1899.809292][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1899.823399][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1899.928357][ T6525] team0: Port device team_slave_0 added [ 1899.935933][ T6525] team0: Port device team_slave_1 added [ 1900.000697][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1900.003760][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1900.013063][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1900.018506][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1900.020745][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1900.028881][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1900.200363][ T6525] hsr_slave_0: entered promiscuous mode [ 1900.203927][ T6525] hsr_slave_1: entered promiscuous mode [ 1900.206284][ T6525] debugfs: 'hsr0' already exists in 'hsr' [ 1900.208208][ T6525] Cannot create hsr debugfs directory [ 1900.331027][T29453] Bluetooth: hci1: command tx timeout [ 1900.397999][ T6563] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1900.400767][ T6563] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1900.406626][ T6563] vhci_hcd vhci_hcd.0: Device attached [ 1900.410058][ T6525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1900.415161][ T6525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.513682][ T6569] ieee802154 phy0 wpan0: encryption failed: -22 [ 1900.516097][ T6525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1900.519627][ T6525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.538223][ T6570] tipc: Enabling of bearer rejected, failed to enable media [ 1900.601748][ T6525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1900.605192][ T6525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.686426][ T5943] usb 44-1: SetAddress Request (22) to port 0 [ 1900.688943][ T5943] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1900.696299][ T6525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1900.699682][ T6525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.121549][T28540] usb 42-1: device descriptor read/8, error -110 [ 1901.141121][ T6564] vhci_hcd: connection reset by peer [ 1901.149393][ T3153] vhci_hcd: stop threads [ 1901.150743][ T3153] vhci_hcd: release socket [ 1901.156968][ T3153] vhci_hcd: disconnect device [ 1901.182583][ T1348] bond1 (unregistering): Released all slaves [ 1901.212415][T29264] smc: removing ib device syz1 [ 1901.223618][ T1316] syz1: Port: 1 Link DOWN [ 1901.276339][ T1348] tipc: Left network mode [ 1901.361755][ T6525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1901.366563][ T6525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1901.377446][ T6525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1901.386254][ T6525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1901.503953][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1901.514050][T28540] usb usb42-port1: attempt power cycle [ 1901.546090][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1901.556527][T27384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.559096][T27384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1901.569559][T27384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.572491][T27384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1901.750340][ T6603] tipc: Enabling of bearer rejected, failed to enable media [ 1901.789604][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1901.817398][ T6525] veth0_vlan: entered promiscuous mode [ 1901.822402][ T6525] veth1_vlan: entered promiscuous mode [ 1901.840261][ T6525] veth0_macvtap: entered promiscuous mode [ 1901.848279][ T6525] veth1_macvtap: entered promiscuous mode [ 1901.861874][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1901.868423][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1901.876254][T27375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.879160][T27375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.883351][T27375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.886255][T27375] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.953603][T29276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.957697][T29276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1901.995300][T29266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.997858][T29266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1902.019635][ T6615] netlink: 'syz.3.9892': attribute type 4 has an invalid length. [ 1902.083646][T28540] usb usb42-port1: unable to enumerate USB device [ 1902.363889][ T6626] netlink: 'syz.4.9894': attribute type 4 has an invalid length. [ 1902.398387][ T1348] hsr_slave_0: left promiscuous mode [ 1902.402392][ T1348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1902.406046][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1902.409858][ T1348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1902.415793][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1902.422975][T29453] Bluetooth: hci1: command tx timeout [ 1902.484804][ T1348] veth1_macvtap: left promiscuous mode [ 1902.486881][ T1348] veth0_macvtap: left promiscuous mode [ 1902.489405][ T1348] veth1_vlan: left promiscuous mode [ 1902.491652][ T1348] veth0_vlan: left promiscuous mode [ 1903.525415][ T1348] team0 (unregistering): Port device team_slave_1 removed [ 1903.632276][ T1348] team0 (unregistering): Port device team_slave_0 removed [ 1904.494974][T29453] Bluetooth: hci1: command tx timeout [ 1904.519526][ T6639] tipc: Enabling of bearer rejected, failed to enable media [ 1905.089960][ T1348] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.135141][ T6679] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9910'. [ 1905.163284][ T1348] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.187112][ T6681] tipc: Enabling of bearer rejected, failed to enable media [ 1905.256389][ T1348] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.283890][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1905.290075][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1905.293075][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1905.298205][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1905.300773][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1905.324307][ T1348] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.353855][ T6686] lo speed is unknown, defaulting to 1000 [ 1905.359887][ T6686] lo speed is unknown, defaulting to 1000 [ 1905.367323][ T6686] lo speed is unknown, defaulting to 1000 [ 1905.612762][ T1348] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1905.617162][ T1348] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1905.653196][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9913'. [ 1905.658431][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9913'. [ 1905.662841][ T6695] netlink: 'syz.3.9913': attribute type 14 has an invalid length. [ 1905.665573][ T6695] netlink: 'syz.3.9913': attribute type 13 has an invalid length. [ 1905.717210][ T6696] random: crng reseeded on system resumption [ 1905.784870][ T5943] usb 44-1: device descriptor read/8, error -110 [ 1905.829372][ T6701] netlink: 'syz.2.9914': attribute type 4 has an invalid length. [ 1905.962759][ T1348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1905.969298][ T1348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1905.974809][ T1348] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1905.981515][ T1348] bond0 (unregistering): Released all slaves [ 1906.093798][ T1348] bond1 (unregistering): Released all slaves [ 1906.128139][ T6686] chnl_net:caif_netlink_parms(): no params data found [ 1906.191250][ T5943] usb usb44-port1: attempt power cycle [ 1906.207335][ T1348] tipc: Left network mode [ 1906.408425][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.411016][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1906.415534][ T6686] bridge_slave_0: entered allmulticast mode [ 1906.425051][ T6686] bridge_slave_0: entered promiscuous mode [ 1906.431463][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.434011][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.436968][ T6686] bridge_slave_1: entered allmulticast mode [ 1906.441335][ T6686] bridge_slave_1: entered promiscuous mode [ 1906.498770][ T1348] hsr_slave_0: left promiscuous mode [ 1906.502336][ T1348] hsr_slave_1: left promiscuous mode [ 1906.505047][ T1348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1906.507728][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1906.512390][ T1348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1906.515186][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1906.577065][T29453] Bluetooth: hci1: command tx timeout [ 1906.585479][ T1348] veth1_macvtap: left promiscuous mode [ 1906.589651][ T1348] veth0_macvtap: left promiscuous mode [ 1906.591569][ T1348] veth1_vlan: left promiscuous mode [ 1906.595500][ T1348] veth0_vlan: left promiscuous mode [ 1906.767973][ T5943] usb usb44-port1: unable to enumerate USB device [ 1907.298294][ T6722] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1907.300431][ T6722] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1907.306354][ T6722] vhci_hcd vhci_hcd.0: Device attached [ 1907.379821][T29453] Bluetooth: hci0: command tx timeout [ 1907.567664][T28540] usb 44-1: SetAddress Request (26) to port 0 [ 1907.745647][T28540] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1907.960698][ T6723] vhci_hcd: connection reset by peer [ 1907.962774][T27375] vhci_hcd: stop threads [ 1907.964615][T27375] vhci_hcd: release socket [ 1907.966353][T27375] vhci_hcd: disconnect device [ 1908.420903][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1908.426132][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1908.461604][ T6686] team0: Port device team_slave_0 added [ 1908.465003][ T6686] team0: Port device team_slave_1 added [ 1908.534380][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1908.536770][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1908.545850][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1908.550282][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1908.552468][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1908.560853][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1908.584812][ T6740] tipc: Enabling of bearer rejected, failed to enable media [ 1908.630766][ T6686] hsr_slave_0: entered promiscuous mode [ 1908.633082][ T6686] hsr_slave_1: entered promiscuous mode [ 1908.635382][ T6686] debugfs: 'hsr0' already exists in 'hsr' [ 1908.637192][ T6686] Cannot create hsr debugfs directory [ 1908.789395][T25219] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1908.796487][ T6686] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1908.803160][ T6686] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1908.808145][ T6686] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1908.812409][ T6686] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1908.866958][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1908.888565][ T6686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1908.905080][T29266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.907706][T29266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1908.915189][ T1348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.917712][ T1348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1908.940331][T25219] usb 7-1: Using ep0 maxpacket: 8 [ 1908.953578][T25219] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1908.957844][T25219] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1908.962853][T25219] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1908.967088][T25219] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1908.974263][T25219] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1908.978091][T25219] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.060793][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1909.192326][T25219] usb 7-1: GET_CAPABILITIES returned 0 [ 1909.194490][T25219] usbtmc 7-1:16.0: can't read capabilities [ 1909.211502][ T6686] veth0_vlan: entered promiscuous mode [ 1909.216458][ T6686] veth1_vlan: entered promiscuous mode [ 1909.235754][ T6686] veth0_macvtap: entered promiscuous mode [ 1909.239851][ T6686] veth1_macvtap: entered promiscuous mode [ 1909.250692][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1909.259821][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1909.266362][T29266] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.269708][T29266] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.272873][T29266] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.278470][T29266] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.315278][T29266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1909.317805][T29266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1909.329989][T27375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1909.332784][T27375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1909.470695][T29453] Bluetooth: hci0: command tx timeout [ 1909.528533][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.531222][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.553010][ T6780] bridge_slave_1: left allmulticast mode [ 1909.556068][ T6780] bridge_slave_1: left promiscuous mode [ 1909.560060][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.562754][ T6779] binder_alloc: 6737: binder_alloc_buf, no vma [ 1909.570553][ T6780] bridge_slave_0: left allmulticast mode [ 1909.575235][ T6780] bridge_slave_0: left promiscuous mode [ 1909.580841][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.916060][T21266] usb 7-1: USB disconnect, device number 64 [ 1911.044575][ T6794] tipc: Enabling of bearer rejected, failed to enable media [ 1911.107037][ T6796] tipc: Enabling of bearer rejected, failed to enable media [ 1911.416325][ T6810] netlink: 14 bytes leftover after parsing attributes in process `syz.5.9934'. [ 1911.553433][T29453] Bluetooth: hci0: command tx timeout [ 1912.096161][ T6810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1912.104626][ T6810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1912.110500][ T6810] bond0 (unregistering): Released all slaves [ 1912.835434][T28540] usb 44-1: device descriptor read/8, error -110 [ 1913.220244][ T6839] tipc: Enabling of bearer rejected, failed to enable media [ 1913.626542][T29453] Bluetooth: hci0: command tx timeout [ 1913.694773][T28540] usb usb44-port1: attempt power cycle [ 1913.697030][ T6857] binder: 6854:6857 ioctl 0 80000040 returned -22 [ 1914.388054][ T6868] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.9948'. [ 1914.642617][T28540] usb usb44-port1: unable to enumerate USB device [ 1915.581297][ T6882] raw_sendmsg: syz.2.9952 forgot to set AF_INET. Fix it! [ 1915.778544][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9956'. [ 1916.105811][ T6902] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1916.107905][ T6902] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1916.111011][ T6902] vhci_hcd vhci_hcd.0: Device attached [ 1916.480678][T28540] usb 42-1: SetAddress Request (114) to port 0 [ 1916.483205][T28540] usb 42-1: new SuperSpeed USB device number 114 using vhci_hcd [ 1916.577738][ T2058] syz_tun (unregistering): left allmulticast mode [ 1916.658126][ T6903] vhci_hcd: connection reset by peer [ 1916.660386][T29264] vhci_hcd: stop threads [ 1916.663588][T29264] vhci_hcd: release socket [ 1916.667259][T29264] vhci_hcd: disconnect device [ 1916.726587][ T733] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.852366][ T733] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.991864][ T733] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.006020][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1917.009644][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1917.012923][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1917.015999][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1917.018776][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1917.043804][ T6912] lo speed is unknown, defaulting to 1000 [ 1917.046390][ T6912] lo speed is unknown, defaulting to 1000 [ 1917.049006][ T6912] lo speed is unknown, defaulting to 1000 [ 1917.087857][ T733] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.187490][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 1917.465411][T21266] hid_parser_main: 8 callbacks suppressed [ 1917.465424][T21266] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 1917.469620][T21266] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 1917.472761][T21266] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 1917.475852][T21266] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 1917.478982][T21266] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 1917.481939][T21266] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 1917.488480][T21266] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 1917.490959][T21266] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 1917.494206][T21266] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 1917.497253][T21266] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 1917.512705][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9964'. [ 1917.512998][T21266] hid-generic 0003:0004:0000.0029: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1917.624781][ T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1917.629564][ T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1917.634392][ T733] bond0 (unregistering): Released all slaves [ 1917.769786][ T733] bond1 (unregistering): Released all slaves [ 1917.953773][ T733] bond2 (unregistering): Released all slaves [ 1918.042236][ T6939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1918.071657][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.082961][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1918.085739][ T6912] bridge_slave_0: entered allmulticast mode [ 1918.088678][ T6912] bridge_slave_0: entered promiscuous mode [ 1918.091998][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.095924][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.098531][ T6912] bridge_slave_1: entered allmulticast mode [ 1918.101501][ T6912] bridge_slave_1: entered promiscuous mode [ 1918.112943][ T733] 8ÿÖÿÿ: left promiscuous mode [ 1918.244671][ T6943] netlink: 'syz.2.9970': attribute type 12 has an invalid length. [ 1918.248078][ T733] tipc: Left network mode [ 1918.254504][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1918.265650][T26475] libceph: connect (1)[c::]:6789 error -101 [ 1918.268496][T26475] libceph: mon0 (1)[c::]:6789 connect error [ 1918.270365][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1918.277232][ T6948] tipc: Enabling of bearer rejected, failed to enable media [ 1918.368700][ T6912] team0: Port device team_slave_0 added [ 1918.391509][ T6912] team0: Port device team_slave_1 added [ 1918.436986][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1918.439914][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1918.451074][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1918.457190][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1918.459415][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1918.468594][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1918.534872][T26475] libceph: connect (1)[c::]:6789 error -101 [ 1918.536910][T26475] libceph: mon0 (1)[c::]:6789 connect error [ 1918.563318][ T6912] hsr_slave_0: entered promiscuous mode [ 1918.567099][ T6912] hsr_slave_1: entered promiscuous mode [ 1918.570062][ T6912] debugfs: 'hsr0' already exists in 'hsr' [ 1918.572279][ T6912] Cannot create hsr debugfs directory [ 1918.618141][ T733] hsr_slave_0: left promiscuous mode [ 1918.620606][ T733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1918.623066][ T733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1918.626337][ T733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1918.628660][ T733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1918.671492][ T733] veth1_macvtap: left promiscuous mode [ 1918.673600][ T733] veth0_macvtap: left promiscuous mode [ 1918.676219][ T733] veth1_vlan: left promiscuous mode [ 1918.678658][ T733] veth0_vlan: left promiscuous mode [ 1918.917497][ T6945] ceph: No mds server is up or the cluster is laggy [ 1919.023541][ T6970] fuse: Bad value for 'rootmode' [ 1919.049506][ T6972] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.9974'. [ 1919.074493][ T5949] Bluetooth: hci2: command tx timeout [ 1919.236647][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.404979][T31119] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1919.565274][T31119] usb 7-1: Using ep0 maxpacket: 32 [ 1919.569254][T31119] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1919.573284][T31119] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1919.576553][T31119] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1919.579498][T31119] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.583164][T31119] usb 7-1: config 0 descriptor?? [ 1919.912516][ T733] team0 (unregistering): Port device team_slave_1 removed [ 1920.058458][ T733] team0 (unregistering): Port device team_slave_0 removed [ 1920.204706][T31119] ft260 0003:0403:6030.002A: chip code: 0000 0000 [ 1920.410298][T31119] ft260 0003:0403:6030.002A: failed to retrieve system status [ 1920.413794][T31119] ft260 0003:0403:6030.002A: probe with driver ft260 failed with error -32 [ 1921.159830][ T5949] Bluetooth: hci2: command tx timeout [ 1921.175119][ T6979] tipc: Enabling of bearer rejected, failed to enable media [ 1921.568462][T28540] usb 42-1: device descriptor read/8, error -110 [ 1921.625770][ T6992] lo speed is unknown, defaulting to 1000 [ 1921.631051][ T6992] lo speed is unknown, defaulting to 1000 [ 1921.634998][ T6992] lo speed is unknown, defaulting to 1000 [ 1921.804530][ T6912] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1921.818845][ T6912] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1921.826198][ T6912] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1921.872129][ T6912] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1921.989033][ T6912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1921.989807][T28540] usb usb42-port1: attempt power cycle [ 1922.013930][ T6912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1922.039898][T29264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.042732][T29264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1922.058160][T29276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.061259][T29276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1922.201174][T26475] usb 7-1: USB disconnect, device number 65 [ 1922.257019][ T6912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1922.283127][ T6912] veth0_vlan: entered promiscuous mode [ 1922.294700][ T6912] veth1_vlan: entered promiscuous mode [ 1922.322346][ T6912] veth0_macvtap: entered promiscuous mode [ 1922.329682][ T6912] veth1_macvtap: entered promiscuous mode [ 1922.346953][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1922.357069][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1922.370773][T29276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.376545][T29276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.380836][T29276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.392158][T29276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.437929][T29264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1922.440662][T29264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1922.468658][ T733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1922.472838][ T733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1922.561380][T28540] usb usb42-port1: unable to enumerate USB device [ 1922.796399][T26475] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1922.942681][ T7026] tipc: Enabling of bearer rejected, failed to enable media [ 1922.950404][T26475] usb 7-1: Using ep0 maxpacket: 8 [ 1922.967922][T26475] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1922.970283][T26475] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1922.973508][T26475] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.977594][T26475] usb 7-1: config 0 descriptor?? [ 1923.240540][ T5949] Bluetooth: hci2: command tx timeout [ 1923.404102][T26475] hid_parser_main: 9 callbacks suppressed [ 1923.404114][T26475] mcp2221 0003:04D8:00DD.002B: unknown main item tag 0x0 [ 1923.408338][T26475] mcp2221 0003:04D8:00DD.002B: unknown main item tag 0x0 [ 1923.414257][T26475] mcp2221 0003:04D8:00DD.002B: item fetching failed at offset 2/5 [ 1923.421065][T26475] mcp2221 0003:04D8:00DD.002B: can't parse reports [ 1923.428310][T26475] mcp2221 0003:04D8:00DD.002B: probe with driver mcp2221 failed with error -22 [ 1923.677740][T25219] usb 7-1: USB disconnect, device number 66 [ 1923.952889][ T7045] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1923.954903][ T7045] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1923.972267][ T7045] vhci_hcd vhci_hcd.0: Device attached [ 1924.157846][ T7061] FAULT_INJECTION: forcing a failure. [ 1924.157846][ T7061] name failslab, interval 1, probability 0, space 0, times 0 [ 1924.163128][ T7061] CPU: 3 UID: 0 PID: 7061 Comm: syz.3.9993 Not tainted syzkaller #0 PREEMPT(full) [ 1924.163146][ T7061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1924.163154][ T7061] Call Trace: [ 1924.163159][ T7061] [ 1924.163163][ T7061] dump_stack_lvl+0x16c/0x1f0 [ 1924.163186][ T7061] should_fail_ex+0x512/0x640 [ 1924.163197][ T7061] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1924.163217][ T7061] should_failslab+0xc2/0x120 [ 1924.163228][ T7061] __kvmalloc_node_noprof+0x141/0x9c0 [ 1924.163247][ T7061] ? traverse.part.0.constprop.0+0x397/0x650 [ 1924.163265][ T7061] ? traverse.part.0.constprop.0+0x397/0x650 [ 1924.163278][ T7061] traverse.part.0.constprop.0+0x397/0x650 [ 1924.163297][ T7061] seq_lseek+0x2bb/0x450 [ 1924.163314][ T7061] full_proxy_llseek+0x121/0x180 [ 1924.163328][ T7061] ksys_lseek+0xf3/0x1b0 [ 1924.163344][ T7061] __do_fast_syscall_32+0x7c/0x300 [ 1924.163362][ T7061] do_fast_syscall_32+0x32/0x80 [ 1924.163373][ T7061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1924.163388][ T7061] RIP: 0023:0xf703d579 [ 1924.163397][ T7061] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1924.163408][ T7061] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000013 [ 1924.163419][ T7061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 1924.163426][ T7061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1924.163432][ T7061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1924.163439][ T7061] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1924.163445][ T7061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1924.163461][ T7061] [ 1924.411776][T28540] usb 48-1: SetAddress Request (2) to port 0 [ 1924.413809][T28540] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1924.646000][ T7072] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1924.989866][ T7046] vhci_hcd: connection reset by peer [ 1925.008489][T27375] vhci_hcd: stop threads [ 1925.010285][T27375] vhci_hcd: release socket [ 1925.018594][T27375] vhci_hcd: disconnect device [ 1925.323581][ T5949] Bluetooth: hci2: command tx timeout [ 1925.654072][ T7097] tipc: Started in network mode [ 1925.655704][ T7097] tipc: Node identity ae44f0e5019b, cluster identity 4711 [ 1925.658281][ T7097] tipc: Enabled bearer , priority 0 [ 1925.667381][ T7097] tipc: Resetting bearer [ 1925.698280][ T7096] tipc: Disabling bearer [ 1925.829025][ T7099] lo speed is unknown, defaulting to 1000 [ 1925.831524][ T7099] lo speed is unknown, defaulting to 1000 [ 1925.834023][ T7099] lo speed is unknown, defaulting to 1000 [ 1926.878785][ T7115] tipc: Enabling of bearer rejected, failed to enable media [ 1927.067388][ T7125] usb usb8: usbfs: process 7125 (syz.5.10008) did not claim interface 0 before use [ 1927.073136][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 1927.073147][ T40] audit: type=1326 audit(2000001310.498:33808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.5.10008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 1927.092008][ T40] audit: type=1326 audit(2000001310.508:33809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.5.10008" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 1927.101463][ T40] audit: type=1326 audit(2000001310.508:33810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.5.10008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 1927.111551][ T40] audit: type=1326 audit(2000001310.508:33811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.5.10008" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 1927.120995][ T40] audit: type=1326 audit(2000001310.508:33812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.5.10008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 1927.130336][ T40] audit: type=1326 audit(2000001310.508:33813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.5.10008" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 1927.140808][ T40] audit: type=1326 audit(2000001310.508:33814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.5.10008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 1927.151066][ T40] audit: type=1326 audit(2000001310.508:33815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.5.10008" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 1927.160266][ T40] audit: type=1326 audit(2000001310.508:33816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.5.10008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 1927.171183][ T40] audit: type=1326 audit(2000001310.518:33817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.5.10008" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 1927.208876][T31119] libceph: connect (1)[c::]:6789 error -101 [ 1927.209037][T31119] libceph: mon0 (1)[c::]:6789 connect error [ 1927.472446][T31119] libceph: connect (1)[c::]:6789 error -101 [ 1927.475081][T31119] libceph: mon0 (1)[c::]:6789 connect error [ 1927.503044][ T7136] tipc: Enabling of bearer rejected, failed to enable media [ 1927.610882][ T7142] netlink: 'syz.2.10013': attribute type 11 has an invalid length. [ 1927.614378][ T7142] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10013'. [ 1927.656823][ T7126] ceph: No mds server is up or the cluster is laggy [ 1927.754223][ T7148] syzkaller1: entered promiscuous mode [ 1927.756611][ T7148] syzkaller1: entered allmulticast mode [ 1927.767884][ T7150] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1927.782452][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.785030][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.816263][ T7148] syz.2.10015: page allocation failure: order:10, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1927.862458][ T7148] CPU: 1 UID: 0 PID: 7148 Comm: syz.2.10015 Not tainted syzkaller #0 PREEMPT(full) [ 1927.862502][ T7148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1927.862513][ T7148] Call Trace: [ 1927.862521][ T7148] [ 1927.862529][ T7148] dump_stack_lvl+0x16c/0x1f0 [ 1927.862562][ T7148] warn_alloc+0x248/0x3a0 [ 1927.862588][ T7148] ? __pfx_warn_alloc+0x10/0x10 [ 1927.862609][ T7148] ? psi_memstall_leave+0x1e6/0x2d0 [ 1927.862636][ T7148] ? __alloc_pages_direct_compact+0x466/0x580 [ 1927.862660][ T7148] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 1927.862680][ T7148] ? psi_memstall_leave+0x1e1/0x2d0 [ 1927.862705][ T7148] ? psi_memstall_leave+0x1e6/0x2d0 [ 1927.862734][ T7148] __alloc_frozen_pages_noprof+0xe9b/0x2470 [ 1927.862769][ T7148] ? __lock_acquire+0x622/0x1c90 [ 1927.862785][ T7148] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1927.862811][ T7148] ? find_held_lock+0x2b/0x80 [ 1927.862840][ T7148] ? find_held_lock+0x2b/0x80 [ 1927.862862][ T7148] ? aa_file_perm+0x28f/0x12e0 [ 1927.862886][ T7148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1927.862910][ T7148] ? policy_nodemask+0xea/0x4e0 [ 1927.862930][ T7148] alloc_pages_mpol+0x1fb/0x550 [ 1927.862948][ T7148] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1927.862963][ T7148] ? __pfx_aa_file_perm+0x10/0x10 [ 1927.862987][ T7148] ? stack_trace_save+0x8e/0xc0 [ 1927.863011][ T7148] ? __pfx_stack_trace_save+0x10/0x10 [ 1927.863050][ T7148] ___kmalloc_large_node+0xed/0x160 [ 1927.863074][ T7148] __kmalloc_large_node_noprof+0x1c/0x70 [ 1927.863091][ T7148] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 1927.863114][ T7148] __kmalloc_noprof.cold+0xc/0x62 [ 1927.863138][ T7148] ? common_file_perm+0x1a9/0x340 [ 1927.863157][ T7148] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 1927.863183][ T7148] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 1927.863204][ T7148] qrtr_tun_write_iter+0xc1/0x1b0 [ 1927.863225][ T7148] aio_write+0x3b9/0x910 [ 1927.863251][ T7148] ? __pfx_aio_write+0x10/0x10 [ 1927.863273][ T7148] ? __lock_acquire+0xb8a/0x1c90 [ 1927.863306][ T7148] ? __might_fault+0xe3/0x190 [ 1927.863325][ T7148] ? __might_fault+0x13b/0x190 [ 1927.863351][ T7148] ? io_submit_one+0x1243/0x1df0 [ 1927.863373][ T7148] io_submit_one+0x1243/0x1df0 [ 1927.863399][ T7148] ? __lock_acquire+0xb8a/0x1c90 [ 1927.863419][ T7148] ? __pfx_io_submit_one+0x10/0x10 [ 1927.863450][ T7148] ? __might_fault+0xe3/0x190 [ 1927.863472][ T7148] ? __might_fault+0x13b/0x190 [ 1927.863498][ T7148] ? __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 1927.863521][ T7148] __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 1927.863548][ T7148] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 1927.863577][ T7148] ? syscall_user_dispatch+0x78/0x140 [ 1927.863599][ T7148] ? rcu_is_watching+0x12/0xc0 [ 1927.863651][ T7148] __do_fast_syscall_32+0x7c/0x300 [ 1927.863672][ T7148] do_fast_syscall_32+0x32/0x80 [ 1927.863690][ T7148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1927.863711][ T7148] RIP: 0023:0xf7f41579 [ 1927.863725][ T7148] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1927.863744][ T7148] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 1927.863763][ T7148] RAX: ffffffffffffffda RBX: 00000000f73df000 RCX: 0000000000000001 [ 1927.863773][ T7148] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1927.863784][ T7148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1927.863793][ T7148] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1927.863804][ T7148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1927.863828][ T7148] [ 1927.863891][ T7148] Mem-Info: [ 1927.986100][ T7148] active_anon:4444 inactive_anon:5016 isolated_anon:0 [ 1927.986100][ T7148] active_file:2868 inactive_file:1865 isolated_file:0 [ 1927.986100][ T7148] unevictable:1791 dirty:23 writeback:0 [ 1927.986100][ T7148] slab_reclaimable:7857 slab_unreclaimable:94803 [ 1927.986100][ T7148] mapped:32628 shmem:8590 pagetables:1111 [ 1927.986100][ T7148] sec_pagetables:346 bounce:0 [ 1927.986100][ T7148] kernel_misc_reclaimable:0 [ 1927.986100][ T7148] free:19323 free_pcp:1884 free_cma:0 [ 1928.042312][ T7148] Node 0 active_anon:320kB inactive_anon:2884kB active_file:0kB inactive_file:808kB unevictable:3620kB isolated(anon):0kB isolated(file):0kB mapped:2940kB dirty:8kB writeback:0kB shmem:7180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8376kB pagetables:1184kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB [ 1928.090593][ T7148] Node 1 active_anon:20548kB inactive_anon:11668kB active_file:12016kB inactive_file:6292kB unevictable:3544kB isolated(anon):0kB isolated(file):0kB mapped:128652kB dirty:84kB writeback:0kB shmem:28412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7808kB pagetables:3060kB sec_pagetables:212kB all_unreclaimable? no Balloon:0kB [ 1928.100852][ T7148] Node 0 DMA free:2056kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:68kB active_file:0kB inactive_file:36kB unevictable:0kB writepending:8kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:40kB free_cma:0kB [ 1928.103542][ T7157] tipc: Enabling of bearer rejected, failed to enable media [ 1928.110436][ T7148] lowmem_reserve[]: 0 292 292 292 292 [ 1928.115110][ T7148] Node 0 DMA32 free:16816kB boost:0kB min:13448kB low:16808kB high:20168kB reserved_highatomic:2048KB free_highatomic:1048KB active_anon:504kB inactive_anon:1484kB active_file:352kB inactive_file:444kB unevictable:3620kB writepending:0kB zspages:592kB present:1032196kB managed:299636kB mlocked:84kB bounce:0kB free_pcp:2236kB local_pcp:772kB free_cma:0kB [ 1928.126855][ T7148] lowmem_reserve[]: 0 0 0 0 0 [ 1928.137092][ T7148] Node 1 DMA32 free:60540kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21948kB inactive_anon:11268kB active_file:12416kB inactive_file:6292kB unevictable:3544kB writepending:0kB zspages:4260kB present:1048432kB managed:948220kB mlocked:8kB bounce:0kB free_pcp:2228kB local_pcp:392kB free_cma:0kB [ 1928.163051][ T7148] lowmem_reserve[]: 0 0 0 0 0 [ 1928.165202][ T7148] Node 0 DMA: 47*4kB (UM) 14*8kB (UM) 4*16kB (UM) 6*32kB (UM) 2*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2092kB [ 1928.171309][ T7148] Node 0 DMA32: 75*4kB (UMEH) 315*8kB (UMEH) 82*16kB (UMH) 130*32kB (UMH) 49*64kB (UMH) 27*128kB (UM) 13*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18212kB [ 1928.178243][ T7148] Node 1 DMA32: 29*4kB (UME) 82*8kB (UME) 21*16kB (ME) 139*32kB (UME) 80*64kB (UME) 41*128kB (UME) 90*256kB (UM) 14*512kB (UME) 9*1024kB (UME) 1*2048kB (M) 0*4096kB = 57396kB [ 1928.185090][ T7148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1928.189100][ T7148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1928.192760][ T7148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1928.196757][ T7148] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1928.200734][ T7148] 14202 total pagecache pages [ 1928.203260][ T7148] 467 pages in swap cache [ 1928.205314][ T7148] Free swap = 55948kB [ 1928.207179][ T7148] Total swap = 124996kB [ 1928.209444][ T7148] 524155 pages RAM [ 1928.211188][ T7148] 0 pages HighMem/MovableOnly [ 1928.213355][ T7148] 208351 pages reserved [ 1928.215268][ T7148] 0 pages cma reserved [ 1928.689220][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10020'. [ 1929.214678][ T7181] syzkaller0: entered promiscuous mode [ 1929.217083][ T7181] syzkaller0: entered allmulticast mode [ 1929.489855][T28540] usb 48-1: device descriptor read/8, error -110 [ 1929.881012][T28540] usb usb48-port1: attempt power cycle [ 1930.082391][ T7211] lo speed is unknown, defaulting to 1000 [ 1930.085940][ T7211] lo speed is unknown, defaulting to 1000 [ 1930.088872][ T7211] lo speed is unknown, defaulting to 1000 [ 1930.616845][T28540] usb usb48-port1: unable to enumerate USB device [ 1931.035238][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10037'. [ 1932.023862][ T7285] netlink: 'syz.4.10049': attribute type 10 has an invalid length. [ 1932.290080][ T7291] 9pnet_fd: Insufficient options for proto=fd [ 1932.479295][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10042'. [ 1932.486652][ T7295] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.10042'. [ 1932.491606][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10042'. [ 1932.496121][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10042'. [ 1932.502104][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10042'. [ 1932.509373][ T7295] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10042'. [ 1933.511443][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10055'. [ 1933.581373][ T7309] syzkaller0: entered promiscuous mode [ 1933.583682][ T7309] syzkaller0: entered allmulticast mode [ 1933.820480][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10053'. [ 1934.004139][ T7311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1934.015022][ T7311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1934.119741][T29266] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.123411][T29266] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.130724][T29266] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.133624][T29266] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.418397][ T667] IPVS: starting estimator thread 0... [ 1934.507090][ T7320] IPVS: using max 24 ests per chain, 57600 per kthread [ 1934.596419][ T7326] ptrace attach of "/syz-executor exec"[6912] was attempted by "/syz-executor exec"[7326] [ 1936.706756][ T7384] syzkaller0: entered promiscuous mode [ 1936.708880][ T7384] syzkaller0: entered allmulticast mode [ 1938.297538][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10086'. [ 1939.187932][ T7462] befs: (nullb0): No write support. Marking filesystem read-only [ 1939.190556][ T7462] befs: (nullb0): invalid magic header [ 1939.199833][ T7464] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10095'. [ 1939.202777][ T7464] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10095'. [ 1939.456686][ T7476] »»»»»»: renamed from lo [ 1939.704562][ T7483] netlink: 'syz.2.10102': attribute type 1 has an invalid length. [ 1939.728624][ T7483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1939.755713][ T7483] bond1: (slave dummy0): making interface the new active one [ 1939.760257][ T7483] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1940.267357][ T7483] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1940.276648][ T7483] bond1 (unregistering): Released all slaves [ 1940.415448][ T7498] lo speed is unknown, defaulting to 1000 [ 1940.434658][ T7498] lo speed is unknown, defaulting to 1000 [ 1940.446704][ T7498] lo speed is unknown, defaulting to 1000 [ 1940.578429][ T7508] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1940.581090][ T7508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1940.584928][ T7507] bond0: (slave batadv0): Releasing backup interface [ 1940.588361][ T7508] vhci_hcd vhci_hcd.0: Device attached [ 1940.588804][ T7507] bond0: (slave bond_slave_0): Releasing backup interface [ 1940.601094][ T7507] bond0: (slave bond_slave_1): Releasing backup interface [ 1940.609170][ T7507] team0: Port device team_slave_0 removed [ 1940.621067][ T7507] team0: Port device team_slave_1 removed [ 1940.623181][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1940.632628][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1940.635649][ T7507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1940.681923][ T7511] team0: Mode changed to "loadbalance" [ 1940.861329][T28540] usb 44-1: SetAddress Request (30) to port 0 [ 1940.864058][T28540] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1941.310008][ T7509] vhci_hcd: connection reset by peer [ 1941.313123][ T733] vhci_hcd: stop threads [ 1941.314611][ T733] vhci_hcd: release socket [ 1941.316424][ T733] vhci_hcd: disconnect device [ 1941.854210][ T7533] netlink: 'syz.2.10113': attribute type 4 has an invalid length. [ 1942.907246][ T7557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10120'. [ 1942.952444][T25219] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1943.103831][T25219] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1943.111253][T25219] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1943.115123][T25219] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1943.118660][T25219] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.127148][ T7554] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1943.134726][T25219] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1943.413710][T25219] usb 10-1: USB disconnect, device number 2 [ 1945.905930][T28540] usb 44-1: device descriptor read/8, error -110 [ 1945.968364][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10140'. [ 1946.052038][ T7622] netlink: 'syz.3.10142': attribute type 4 has an invalid length. [ 1946.055460][ T7622] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10142'. [ 1946.059260][ T7622] FAULT_INJECTION: forcing a failure. [ 1946.059260][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 1946.063254][ T7622] CPU: 3 UID: 0 PID: 7622 Comm: syz.3.10142 Not tainted syzkaller #0 PREEMPT(full) [ 1946.063270][ T7622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1946.063277][ T7622] Call Trace: [ 1946.063282][ T7622] [ 1946.063288][ T7622] dump_stack_lvl+0x16c/0x1f0 [ 1946.063308][ T7622] should_fail_ex+0x512/0x640 [ 1946.063319][ T7622] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1946.063336][ T7622] should_failslab+0xc2/0x120 [ 1946.063348][ T7622] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1946.063362][ T7622] ? __alloc_skb+0x2b2/0x380 [ 1946.063381][ T7622] ? __alloc_skb+0x2b2/0x380 [ 1946.063395][ T7622] __alloc_skb+0x2b2/0x380 [ 1946.063411][ T7622] ? __pfx___alloc_skb+0x10/0x10 [ 1946.063425][ T7622] ? kasan_quarantine_put+0x10a/0x240 [ 1946.063440][ T7622] ? lockdep_hardirqs_on+0x7c/0x110 [ 1946.063458][ T7622] ? kfree+0x2b8/0x6d0 [ 1946.063472][ T7622] inet6_netconf_notify_devconf+0x87/0x180 [ 1946.063491][ T7622] addrconf_sysctl_unregister+0x134/0x1c0 [ 1946.063504][ T7622] addrconf_ifdown.isra.0+0x1498/0x1aa0 [ 1946.063520][ T7622] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 1946.063538][ T7622] addrconf_notify+0x89a/0x19e0 [ 1946.063551][ T7622] ? ip6mr_device_event+0x1bc/0x230 [ 1946.063567][ T7622] notifier_call_chain+0xbc/0x410 [ 1946.063579][ T7622] ? __pfx_addrconf_notify+0x10/0x10 [ 1946.063594][ T7622] call_netdevice_notifiers_info+0xbe/0x140 [ 1946.063608][ T7622] netif_set_mtu_ext+0x590/0x7d0 [ 1946.063627][ T7622] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1946.063650][ T7622] netif_set_mtu+0x98/0x140 [ 1946.063666][ T7622] ? __pfx_netif_set_mtu+0x10/0x10 [ 1946.063688][ T7622] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 1946.063715][ T7622] dev_set_mtu+0xb2/0x260 [ 1946.063727][ T7622] bond_change_mtu+0x17d/0x590 [ 1946.063747][ T7622] ? __pfx_bond_change_mtu+0x10/0x10 [ 1946.063768][ T7622] ? __pfx_bond_change_mtu+0x10/0x10 [ 1946.063784][ T7622] netif_set_mtu_ext+0x53d/0x7d0 [ 1946.063799][ T7622] ? up+0xcb/0x140 [ 1946.063810][ T7622] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1946.063827][ T7622] ? __pfx___schedule+0x10/0x10 [ 1946.063841][ T7622] ? __pfx_validate_linkmsg+0x10/0x10 [ 1946.063859][ T7622] ? __asan_memset+0x23/0x50 [ 1946.063873][ T7622] ? nla_strscpy+0x140/0x190 [ 1946.063889][ T7622] do_setlink.constprop.0+0x7f9/0x4380 [ 1946.063902][ T7622] ? preempt_schedule_common+0x44/0xc0 [ 1946.063919][ T7622] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 1946.063929][ T7622] ? preempt_count_add+0x76/0x150 [ 1946.063944][ T7622] ? __lock_acquire+0xb8a/0x1c90 [ 1946.063961][ T7622] ? __mutex_trylock_common+0xe9/0x250 [ 1946.063973][ T7622] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1946.063985][ T7622] ? __pfx___might_resched+0x10/0x10 [ 1946.064001][ T7622] ? rcu_is_watching+0x12/0xc0 [ 1946.064016][ T7622] ? trace_contention_end+0xdd/0x130 [ 1946.064027][ T7622] ? __mutex_lock+0x1c5/0x1060 [ 1946.064037][ T7622] ? __nla_validate_parse+0x600/0x2880 [ 1946.064051][ T7622] ? rcu_is_watching+0x12/0xc0 [ 1946.064067][ T7622] ? __pfx___mutex_lock+0x10/0x10 [ 1946.064086][ T7622] rtnl_newlink+0x1446/0x2000 [ 1946.064100][ T7622] ? __pfx_rtnl_newlink+0x10/0x10 [ 1946.064113][ T7622] ? kmem_cache_free+0x2d4/0x6c0 [ 1946.064127][ T7622] ? kfree_skbmem+0x1a4/0x1f0 [ 1946.064142][ T7622] ? kfree_skbmem+0x1a4/0x1f0 [ 1946.064156][ T7622] ? __lock_acquire+0x622/0x1c90 [ 1946.064168][ T7622] ? rcu_is_watching+0x12/0xc0 [ 1946.064187][ T7622] ? find_held_lock+0x2b/0x80 [ 1946.064201][ T7622] ? __pfx_rtnl_newlink+0x10/0x10 [ 1946.064210][ T7622] ? __pfx_rtnl_newlink+0x10/0x10 [ 1946.064219][ T7622] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1946.064230][ T7622] ? __pfx_rtnl_newlink+0x10/0x10 [ 1946.064240][ T7622] rtnetlink_rcv_msg+0x95e/0xe90 [ 1946.064251][ T7622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1946.064265][ T7622] ? ref_tracker_free+0x37c/0x830 [ 1946.064278][ T7622] netlink_rcv_skb+0x158/0x420 [ 1946.064289][ T7622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1946.064300][ T7622] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1946.064316][ T7622] ? netlink_deliver_tap+0x1ae/0xd30 [ 1946.064336][ T7622] netlink_unicast+0x5aa/0x870 [ 1946.064348][ T7622] ? __pfx_netlink_unicast+0x10/0x10 [ 1946.064364][ T7622] netlink_sendmsg+0x8c8/0xdd0 [ 1946.064377][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1946.064388][ T7622] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1946.064404][ T7622] ____sys_sendmsg+0xa98/0xc70 [ 1946.064418][ T7622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1946.064429][ T7622] ? get_compat_msghdr+0x11a/0x170 [ 1946.064452][ T7622] ___sys_sendmsg+0x134/0x1d0 [ 1946.064469][ T7622] ? __pfx____sys_sendmsg+0x10/0x10 [ 1946.064493][ T7622] ? find_held_lock+0x2b/0x80 [ 1946.064516][ T7622] __sys_sendmsg+0x16d/0x220 [ 1946.064533][ T7622] ? __pfx___sys_sendmsg+0x10/0x10 [ 1946.064556][ T7622] ? rcu_is_watching+0x12/0xc0 [ 1946.064573][ T7622] __do_fast_syscall_32+0x7c/0x300 [ 1946.064584][ T7622] do_fast_syscall_32+0x32/0x80 [ 1946.064594][ T7622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1946.064607][ T7622] RIP: 0023:0xf703d579 [ 1946.064617][ T7622] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1946.064628][ T7622] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1946.064638][ T7622] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1946.064645][ T7622] RDX: 0000000060044884 RSI: 0000000000000000 RDI: 0000000000000000 [ 1946.064651][ T7622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1946.064657][ T7622] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1946.064663][ T7622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1946.064678][ T7622] [ 1946.294471][T28540] usb usb44-port1: attempt power cycle [ 1946.300619][ T7622] : renamed from bond0 (while UP) [ 1946.349499][ T7628] syzkaller0: entered promiscuous mode [ 1946.351478][ T7628] syzkaller0: entered allmulticast mode [ 1946.403432][ T7626] MTD: Couldn't look up 'mountinfo': -2 [ 1946.413241][ T7626] program syz.2.10144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1946.471004][ T7631] program syz.2.10146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1946.531912][ T7637] syzkaller0: entered promiscuous mode [ 1946.534176][ T7637] syzkaller0: entered allmulticast mode [ 1946.875605][T28540] usb usb44-port1: unable to enumerate USB device [ 1948.474869][ T7659] mac80211_hwsim hwsim59 wlan1: entered allmulticast mode [ 1948.538903][ T7669] syzkaller0: entered promiscuous mode [ 1948.541025][ T7669] syzkaller0: entered allmulticast mode [ 1948.599090][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10159'. [ 1948.659507][ T7679] fuse: Bad value for 'user_id' [ 1948.664288][ T7679] fuse: Bad value for 'user_id' [ 1949.774460][ T7712] syzkaller0: entered promiscuous mode [ 1949.776828][ T7712] syzkaller0: entered allmulticast mode [ 1950.066285][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10171'. [ 1950.969381][ T7735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1951.020089][ T7735] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1951.051009][T27376] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1951.051223][ T7735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1951.166511][ T3153] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1951.173464][ T7741] syzkaller0: entered promiscuous mode [ 1951.175596][ T7741] syzkaller0: entered allmulticast mode [ 2124.728744][T29264] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2124.734899][T29264] CPU: 3 UID: 0 PID: 29264 Comm: kworker/u32:43 Not tainted syzkaller #0 PREEMPT(full) [ 2124.754591][T29264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2124.758594][T29264] Workqueue: netns cleanup_net [ 2124.762275][T29264] Call Trace: [ 2124.764785][T29264] [ 2124.766686][T29264] dump_stack_lvl+0x3d/0x1f0 [ 2124.769410][T29264] vpanic+0x640/0x6f0 [ 2124.773470][T29264] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 2124.778591][T29264] panic+0xca/0xd0 [ 2124.781030][T29264] ? __pfx_panic+0x10/0x10 [ 2124.790790][T29264] ? check_panic_on_warn+0x1f/0xb0 [ 2124.810089][T29264] check_panic_on_warn+0xab/0xb0 [ 2124.813176][T29264] __warn+0xf6/0x3c0 [ 2124.815719][T29264] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 2124.819875][T29264] report_bug+0x3c3/0x580 [ 2124.822678][T29264] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 2124.825211][T29264] handle_bug+0x184/0x210 [ 2124.827597][T29264] exc_invalid_op+0x17/0x50 [ 2124.833990][T29264] asm_exc_invalid_op+0x1a/0x20 [ 2124.841029][T29264] RIP: 0010:xfrm6_tunnel_net_exit+0x9f/0x160 SYZFAIL: failed to recv rpc [ 2124.844284][T29264] Code: 00 00 00 49 8d 3c dc 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 bd 00 00 00 89 e8 49 8b 04 c4 48 85 c0 74 ab e8 92 a7 98 f7 90 <0f> 0b 90 eb a0 4d 8d ac 24 00 08 00 00 31 db 49 be 00 00 00 00 00 [ 2124.867686][T29264] RSP: 0000:ffffc9000328fa90 EFLAGS: 00010293 [ 2124.873117][T29264] RAX: 0000000000000000 RBX: 0000000000000000 RCX: fffff52000651f23 [ 2124.877982][T29264] RDX: ffff88801b120000 RSI: ffffffff8a2410ce RDI: ffff88806370c000 [ 2124.883086][T29264] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 2124.899502][T29264] R10: ffffffff90836ed7 R11: 0000000000000001 R12: ffff88806370c000 [ 2124.909571][T29264] R13: dffffc0000000000 R14: fffffbfff2060c68 R15: ffffffff90306320 [ 2124.918414][T29264] ? xfrm6_tunnel_net_exit+0x9e/0x160 [ 2124.925679][T29264] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 2124.937354][T29264] ops_undo_list+0x2ee/0xab0 [ 2124.940500][T29264] ? __pfx_ops_undo_list+0x10/0x10 [ 2124.945356][T29264] ? cleanup_net+0x347/0x8b0 [ 2124.950121][T29264] ? idr_destroy+0x62/0x2e0 [ 2124.957445][T29264] cleanup_net+0x41b/0x8b0 [ 2124.960401][T29264] ? __pfx_cleanup_net+0x10/0x10 [ 2124.967919][T29264] ? rcu_is_watching+0x12/0xc0 [ 2124.983451][T29264] process_one_work+0x9cf/0x1b70 [ 2124.985570][T29264] ? __pfx_bond_mii_monitor+0x10/0x10 [ 2124.988303][T29264] ? __pfx_process_one_work+0x10/0x10 [ 2124.990617][T29264] ? assign_work+0x1a0/0x250 [ 2124.992696][T29264] worker_thread+0x6c8/0xf10 [ 2124.995181][T29264] ? __pfx_worker_thread+0x10/0x10 [ 2125.006014][T29264] kthread+0x3c5/0x780 [ 2125.009553][T29264] ? __pfx_kthread+0x10/0x10 [ 2125.012506][T29264] ? rcu_is_watching+0x12/0xc0 [ 2125.025481][T29264] ? __pfx_kthread+0x10/0x10 [ 2125.028928][T29264] ret_from_fork+0x675/0x7d0 [ 2125.031699][T29264] ? __pfx_kthread+0x10/0x10 [ 2125.035072][T29264] ret_from_fork_asm+0x1a/0x30 [ 2125.048169][T29264] [ 2125.065554][T29264] Kernel Offset: disabled [ 2125.068454][T29264] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:52:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff816b4685 RDI=ffffffff8dda9ee8 RBP=0000000000000001 RSP=ffffffff8e007a10 R8 =ffff88807ffc0040 R9 =ffffed1005647498 R10=ffff88802b23a4c3 R11=0000000000000001 R12=0000000000000008 R13=ffff88802b23a4c0 R14=0000000000000044 R15=dffffc0000000000 RIP=ffffffff816b46e4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000081000000 CR3=000000000e182000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000069400000000 0000000900000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b33b6c0 RCX=ffffffff81b0cb93 RDX=ffff88801daa4900 RSI=ffffffff81b0cb6d RDI=0000000000000005 RBP=ffffc9000044fcf8 RSP=ffffc9000044fba0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c79e2e R12=1ffff92000089f7c R13=0000000000000002 R14=0000000000000001 R15=ffffed10056676d9 RIP=ffffffff81b0cb79 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7370610 CR3=000000005b47f000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000069400000000 0000000900000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90000015000 RBX=0000000000000580 RCX=0000000000000004 RDX=0000000000000010 RSI=ffffc90000538a18 RDI=ffff88801c6b4580 RBP=0000000000000000 RSP=ffffc90000538910 R8 =0000000000000001 R9 =ffffed10038d68af R10=ffff88801c6b457f R11=0000000000000001 R12=ffff888040408e00 R13=0000000000000057 R14=0000000000000010 R15=0000000000000046 RIP=ffffffff853f3f62 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979df000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7406288 CR3=000000005fe50000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852e2155 RDI=ffffffff9adf3e80 RBP=ffffffff9adf3e40 RSP=ffffc9000328f270 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000006e R14=ffffffff9adf3e40 R15=ffffffff852e20f0 RIP=ffffffff852e217f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73f2738 CR3=000000005c268000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000