last executing test programs: 53.530324107s ago: executing program 1 (id=207): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x1, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES16=r6, @ANYBLOB='\x002\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$inet6(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r8, 0x0, 0x0, 0x0, 0x40010020}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r11 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x10200, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r11, 0x4004510f, &(0x7f0000000140)=0xff) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f121c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) r13 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 53.191753736s ago: executing program 1 (id=208): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x101, 0x0, 0x1, [], [], [0x4, 0x81], [0x0, 0x100000003, 0xe]}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x8, &(0x7f0000004380)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x91, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2b) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="020000000800000004000000", @ANYRES32, @ANYBLOB="cd8b14b9cc86fb00725ac372b6f62cd689bc2ce6f8bc8bdfdb71dd34bc399674502eeeb86604f0f0dc6b7ae83de71fe6905f1e7cc02e86c80d7fb77e6532940440c1fb2013594814ab9009e264ec66eee885abdfd6f27795eb2d346c66b99715a39bc00716602f7965feea467691a54fc8369e75e5a43be6c128cc6b4cb45bca6612543bab38cac122dffaf57741fb", @ANYRES64=0x0], 0x20) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0502103, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) write$UHID_CREATE(r8, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r1, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) 52.60049331s ago: executing program 1 (id=212): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000008060102000000000000000000000003052ca93ff463044937ff65bb970577d8ad000100"], 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 52.597610711s ago: executing program 1 (id=214): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[], 0x34}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="080100002d0001010000000000000000f60000800c0011000000000000000080140001000000100000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682164875ec58e9a3ddb90d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc50600000000000000"], 0x108}], 0x1}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x5c, 0x2, 0x6, 0x0, 0x0, 0x0, {0x6}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x20048000) pwrite64(r4, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) ioctl$BLKRRPART(r4, 0x125f, 0x1f) open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x3}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x48, &(0x7f0000000080)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 51.850711798s ago: executing program 1 (id=218): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf", 0x56}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 51.750260424s ago: executing program 1 (id=219): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000900)={0x0, 0x55, "7145ba95eae62c0bfd4f9b3df55bb6d2573fcfb7d67115ed08900081cca4eecc19a3dbbe95b5941fb7674f174469feb51d1f0e26a0cf9ef6351d17210c57f65fde7233bc4ae04f38749463b83718997928fafd62eb"}, &(0x7f00000001c0)=0x5d) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000e40)={r4, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x3, 0x3, 0x0, 0x2093, 0xa1, 0x0, 0x8}, 0x9c) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@remote, {}, {0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x100}}]}, 0x13c}}, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) r6 = socket(0x10, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x52cd, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 33.949920122s ago: executing program 32 (id=219): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000900)={0x0, 0x55, "7145ba95eae62c0bfd4f9b3df55bb6d2573fcfb7d67115ed08900081cca4eecc19a3dbbe95b5941fb7674f174469feb51d1f0e26a0cf9ef6351d17210c57f65fde7233bc4ae04f38749463b83718997928fafd62eb"}, &(0x7f00000001c0)=0x5d) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000e40)={r4, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x3, 0x3, 0x0, 0x2093, 0xa1, 0x0, 0x8}, 0x9c) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@remote, {}, {0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x100}}]}, 0x13c}}, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) r6 = socket(0x10, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x52cd, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 5.343479338s ago: executing program 4 (id=424): mknod$loop(0x0, 0xfff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) socket$kcm(0x21, 0x2, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x4000000b}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f00000000c0)=""/4096, 0x1000) openat$cuse(0xffffff9c, &(0x7f00000010c0), 0x2, 0x0) 3.973713017s ago: executing program 2 (id=433): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000580), 0x68, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000600)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[r3, r4, r5, 0x0], &(0x7f00000006c0), 0x8000, 0x4, 0x6}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast1, @dev}, &(0x7f0000000240)=0xc) getpeername$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x80, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8015}, 0x80) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r11, 0x5100) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r13, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x54, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @from_mac, {0x0, 0x38}}, 0x203c, @val={0x8c, 0x10, {0xb22, "8ad608976552", @short="86eca2ffedf1ee91"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.652261812s ago: executing program 4 (id=435): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48582, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x235, &(0x7f0000000740)={0x0, 0x142a, 0x10100, 0x2, 0x2ea, 0x0, r2}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000001900)=""/4099, 0x1003}], 0x1) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000000fb090c00fa2824011fe2e7dc65ff7ba69e220200fffffffc006c0002000015000000000000000000007210de685f31fd273256fce94a50ecfc6e22d49fe6c18973bb5ba78487b3565d90c5dd3ca6b4b161110223a3429f82e8ad477c08b93193b1aba507ce2efb05fde851c6d34a5e705e0d70c35bbb45e33172bab2f369de54046387b1d52246542f935d9d0296dd97f8531d7e309fa74ccf0a03ce22b9d8861881cecc23671e179d0eaccae944f086adafe6a5d8caba05bb"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004810) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 3.139625316s ago: executing program 0 (id=436): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0, 0x0, 0x8}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x2c00000000000000, 0xd, 0x1, 0x5, 0x4002004c5, 0x1000, 0x2, 0x0, 0x7, 0x2000000000e, 0x0, 0x6, 0x0, 0x4b], 0xdddd1000, 0x80200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.096323044s ago: executing program 2 (id=437): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60281, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0000000000008000280012"], 0x50}}, 0x4000800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f00000000c0)=0x5, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) accept4$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) 2.765074483s ago: executing program 3 (id=438): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x3}, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x19) r3 = syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r5}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) openat$sysctl(0xffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000040601010000007574d3c5000500000905000100070000000500010007000000050001000700"], 0x2c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x24081) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) io_uring_setup(0x5f40, &(0x7f00000001c0)={0x0, 0x4000000, 0x2}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01ff22010000bfa90d2c0826364f080001"], 0x1c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4) 2.702927651s ago: executing program 0 (id=439): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000000c0)="7757ac", 0x3}], 0x1}}, {{&(0x7f0000000680)={0xa, 0x5e20, 0x7, @remote, 0x1}, 0x1c, 0x0}}], 0x2, 0x0) 2.702441701s ago: executing program 0 (id=440): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001c40)=""/182, 0xb6}], 0x20000000000000c9) 2.632121034s ago: executing program 4 (id=441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="b70200000b000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f7a80d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001e8c76bbe7ff988a28ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4522bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b9fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabfd50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd1389a0963de85dd2b189774450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f326df86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c39b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa525235da0000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc32a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f8293cf83bceaf6c9eda1f83166aa1e2093d626870510e6cd176d501fe01e4a752fc30134073188e3f826f695e4e14fca6596943467c7df154493023f77c107b3db20ea75b493b4b38dc43986d94748cbfab954edae20982b6d212a44f4b40387876bc9eb73900"/3112], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0x8, &(0x7f0000000440)={0xe, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2c, 0x4, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000500)={0x1, {{0xa, 0x4e23, 0x2, @mcast2, 0x6}}, {{0xa, 0x4e22, 0x400, @remote, 0x1}}}, 0x104) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r7 = inotify_init() inotify_add_watch(r7, 0x0, 0x20000002) fcntl$lock(r6, 0x6, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) 2.631740548s ago: executing program 0 (id=442): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x3}, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x19) r2 = syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141121) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) openat$sysctl(0xffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000040601010000007574d3c50005000009050001000700000005000100070000000500010007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x24081) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x5f40, &(0x7f00000001c0)={0x0, 0x4000000, 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="01ff22010000bfa90d2c0826364f080001"], 0x1c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) 2.040916839s ago: executing program 0 (id=443): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x3}, 'syz1\x00', 0x52}) ioctl$UI_DEV_CREATE(r0, 0x5501) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xa75e, 0x200, 0x0, 0x1a1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000800)="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", 0x0, 0x1, 0x0, 0xffffffffffffff90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a3200000000440005800800024000000002080001"], 0x2d4}}, 0x4048010) r5 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x64, 0x0, r3, &(0x7f0000000240), 0xffffffffffffffff, 0x3, 0x0, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000007c0), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000048000000030a01020000000000000000010000000900030073797a32000000001c0004800800024000000000080001400000000508000140000000020900010073797a31000040004c000000050a01010000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xdc}}, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0) readv(r11, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.024597814s ago: executing program 2 (id=444): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) vmsplice(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000240)='u', 0x1}], 0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 1.910566418s ago: executing program 2 (id=445): mknod$loop(0x0, 0xfff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) socket$kcm(0x21, 0x2, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="021800000b0000000000000000000000030005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x24000894) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x4000000b}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f00000000c0)=""/4096, 0x1000) openat$cuse(0xffffff9c, &(0x7f00000010c0), 0x2, 0x0) 1.722999766s ago: executing program 3 (id=446): socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='suspend_resume\x00', r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x1, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10e, &(0x7f00000004c0)={0x0, 0x310, 0x4000, 0xffffffff, 0x10b}, &(0x7f0000000340), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r4, 0x0, 0x0, 0x0, 0x6) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7ffffffe) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000380)={0x2}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 1.108201833s ago: executing program 0 (id=447): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@deltfilter={0xcc, 0x2d, 0x800, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xf}, {0x4, 0xfff1}, {0xc, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x9}}, @filter_kind_options=@f_flow={{0x9}, {0x94, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12dda}, @TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0}}, @TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x10, 0x7, 0xc}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9}, {0x1, 0x9, 0x1, 0x1, 0x9, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xb, 0x3, 0x2}, {0x6, 0xb, 0x9, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7c8d}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0x2}}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x379}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xfdd}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='numa_maps\x00') read$FUSE(r6, &(0x7f0000006280)={0x2020}, 0x2020) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f00000003c0)=""/72, &(0x7f00000001c0)=0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e0000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) r9 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="00020201"], 0x18) 1.018870905s ago: executing program 4 (id=448): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0, 0x0, 0x8}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x2c00000000000000, 0xd, 0x1, 0x5, 0x4002004c5, 0x1000, 0x2, 0x0, 0x7, 0x2000000000e, 0x0, 0x6, 0x0, 0x4b], 0xdddd1000, 0x80200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 965.185247ms ago: executing program 2 (id=449): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x3}, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x19) r3 = syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r5}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) openat$sysctl(0xffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$IPSET_CMD_FLUSH(r3, 0x0, 0x24081) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) io_uring_setup(0x5f40, &(0x7f00000001c0)={0x0, 0x4000000, 0x2}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4) 782.032275ms ago: executing program 3 (id=450): memfd_secret(0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x29, 0xffffff81, 0x2a000b02, 0x2, 0x0, 0x6}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1d0) ioctl$FIBMAP(r3, 0x401070ca, &(0x7f0000000000)) 651.402357ms ago: executing program 3 (id=451): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f00000017c0)={0x0, @frame_sync}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123280, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r3 = fsmount(0xffffffffffffffff, 0x0, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={r6, 0x3f1}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r6, 0x7f, 0x0, 0x2}, &(0x7f0000000100)=0x10) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 592.685151ms ago: executing program 4 (id=452): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x3}, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x19) r2 = syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141121) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) openat$sysctl(0xffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000040601010000007574d3c50005000009050001000700000005000100070000000500010007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x24081) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x5f40, &(0x7f00000001c0)={0x0, 0x4000000, 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="01ff22010000bfa90d2c0826364f080001"], 0x1c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) 500.430081ms ago: executing program 4 (id=453): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x1, 0x3}}, 0xb4}}, 0x0) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e21, 0x9, @remote, 0xd}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 96.309054ms ago: executing program 3 (id=454): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80), 0x0, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 796.09µs ago: executing program 2 (id=455): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60281, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f00000000c0)=0x5, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) accept4$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) 0s ago: executing program 3 (id=456): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x40, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000001, 0xe95, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x809, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x24008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000200)={0x2, "515bb8af8e0fb0cb3348869d3a2e45602e9d7db15eccfa8647a7fa4eaaeac1e7", 0x3, 0x20, 0x3, 0x7, 0x4, 0x2, 0x7e, 0x4000a23}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404"], 0xd) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x1ad72f7) accept4$netrom(r5, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:4961' (ED25519) to the list of known hosts. [ 40.942037][ T5862] cgroup: Unknown subsys name 'net' [ 41.107305][ T5862] cgroup: Unknown subsys name 'cpuset' [ 41.113081][ T5862] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.016338][ T5862] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.492257][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.496041][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.496347][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.496723][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.497290][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.497517][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.498011][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.498262][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.498555][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.499013][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.499267][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.503535][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.504976][ T5309] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.506250][ T5960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.510486][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.512133][ T5960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.514610][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.516402][ T5960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.520064][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.534746][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.725271][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 45.788070][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 45.863095][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 45.881962][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.885044][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.887956][ T5945] bridge_slave_0: entered allmulticast mode [ 45.890873][ T5945] bridge_slave_0: entered promiscuous mode [ 45.906291][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.908673][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.911201][ T5945] bridge_slave_1: entered allmulticast mode [ 45.914363][ T5945] bridge_slave_1: entered promiscuous mode [ 45.980107][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 46.009329][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.012310][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.014473][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.016543][ T5946] bridge_slave_0: entered allmulticast mode [ 46.018909][ T5946] bridge_slave_0: entered promiscuous mode [ 46.032765][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.036298][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.038353][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.040406][ T5946] bridge_slave_1: entered allmulticast mode [ 46.042828][ T5946] bridge_slave_1: entered promiscuous mode [ 46.147296][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.149755][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.152082][ T5947] bridge_slave_0: entered allmulticast mode [ 46.154962][ T5947] bridge_slave_0: entered promiscuous mode [ 46.159371][ T5945] team0: Port device team_slave_0 added [ 46.162689][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.181337][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.183783][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.186081][ T5947] bridge_slave_1: entered allmulticast mode [ 46.188676][ T5947] bridge_slave_1: entered promiscuous mode [ 46.192335][ T5945] team0: Port device team_slave_1 added [ 46.195634][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.297519][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.299821][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.302079][ T5958] bridge_slave_0: entered allmulticast mode [ 46.305620][ T5958] bridge_slave_0: entered promiscuous mode [ 46.309545][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.312828][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.315071][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.322873][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.327576][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.329886][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.339286][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.344393][ T5946] team0: Port device team_slave_0 added [ 46.346486][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.348712][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.350924][ T5958] bridge_slave_1: entered allmulticast mode [ 46.353845][ T5958] bridge_slave_1: entered promiscuous mode [ 46.357517][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.365501][ T5946] team0: Port device team_slave_1 added [ 46.421143][ T5947] team0: Port device team_slave_0 added [ 46.464730][ T5947] team0: Port device team_slave_1 added [ 46.467012][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.469186][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.477495][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.482321][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.511304][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.513672][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.521769][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.526533][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.531955][ T5945] hsr_slave_0: entered promiscuous mode [ 46.534234][ T5945] hsr_slave_1: entered promiscuous mode [ 46.581135][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.584144][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.592003][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.596650][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.598811][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.607990][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.617630][ T5958] team0: Port device team_slave_0 added [ 46.621686][ T5958] team0: Port device team_slave_1 added [ 46.752442][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.754953][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.762848][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.769662][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.771840][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.780008][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.797730][ T5946] hsr_slave_0: entered promiscuous mode [ 46.800000][ T5946] hsr_slave_1: entered promiscuous mode [ 46.802062][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.804829][ T5946] Cannot create hsr debugfs directory [ 46.808990][ T5947] hsr_slave_0: entered promiscuous mode [ 46.811221][ T5947] hsr_slave_1: entered promiscuous mode [ 46.813494][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.815854][ T5947] Cannot create hsr debugfs directory [ 46.957218][ T5958] hsr_slave_0: entered promiscuous mode [ 46.960576][ T5958] hsr_slave_1: entered promiscuous mode [ 46.962695][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.965397][ T5958] Cannot create hsr debugfs directory [ 47.146352][ T5945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.152676][ T5945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.157087][ T5945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.165690][ T5945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.191870][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.198795][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.205357][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.225403][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.244124][ T5946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.250539][ T5946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.255107][ T5946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.266752][ T5946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.305215][ T5958] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.312239][ T5958] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.316549][ T5958] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.322381][ T5958] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.359425][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.387667][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.391969][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.405417][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.407764][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.415183][ T1048] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.417456][ T1048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.426188][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.443197][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.445571][ T1206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.458488][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.465644][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.467890][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.499896][ T5947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.503843][ T5947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.510213][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.514515][ T5953] Bluetooth: hci0: command tx timeout [ 47.523971][ T5953] Bluetooth: hci2: command tx timeout [ 47.536272][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.539234][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.544716][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.547654][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.555067][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.586660][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.594595][ T5953] Bluetooth: hci1: command tx timeout [ 47.596550][ T5953] Bluetooth: hci3: command tx timeout [ 47.603490][ T1048] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.605761][ T1048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.618910][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.625058][ T1048] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.627881][ T1048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.644600][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.659852][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.701817][ T5945] veth0_vlan: entered promiscuous mode [ 47.710627][ T5945] veth1_vlan: entered promiscuous mode [ 47.724956][ T5947] veth0_vlan: entered promiscuous mode [ 47.731207][ T5947] veth1_vlan: entered promiscuous mode [ 47.740894][ T5945] veth0_macvtap: entered promiscuous mode [ 47.748067][ T5945] veth1_macvtap: entered promiscuous mode [ 47.754482][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.766006][ T5947] veth0_macvtap: entered promiscuous mode [ 47.770183][ T5947] veth1_macvtap: entered promiscuous mode [ 47.775309][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.781082][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.786822][ T5945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.789640][ T5945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.792336][ T5945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.796033][ T5945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.813093][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.829711][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.838162][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.844459][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.847219][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.849937][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.852634][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.861132][ T5946] veth0_vlan: entered promiscuous mode [ 47.881792][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.885500][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.896789][ T5946] veth1_vlan: entered promiscuous mode [ 47.912462][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.915563][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.926527][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.929006][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.935928][ T5958] veth0_vlan: entered promiscuous mode [ 47.941881][ T5958] veth1_vlan: entered promiscuous mode [ 47.957771][ T5946] veth0_macvtap: entered promiscuous mode [ 47.965551][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.965918][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.966326][ T5946] veth1_macvtap: entered promiscuous mode [ 47.968851][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.979537][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.989102][ T5958] veth0_macvtap: entered promiscuous mode [ 47.992798][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.000959][ T5958] veth1_macvtap: entered promiscuous mode [ 48.005738][ T5946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.009136][ T5946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.012218][ T5946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.016203][ T5946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.047243][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.053966][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.054881][ T6032] fuse: Bad value for 'user_id' [ 48.059769][ T6032] fuse: Bad value for 'user_id' [ 48.062105][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.065682][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.068230][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.069300][ T5958] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.070786][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.074961][ T5958] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.079516][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.081082][ T5958] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.086874][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.087517][ T5958] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.090174][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.095873][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.098328][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.100761][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.103242][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.106403][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.108784][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.111934][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.115271][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.117735][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.120138][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.120948][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.122571][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.126817][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.130337][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.133365][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.135906][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.138460][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.140980][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.144170][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.146760][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.149027][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.149154][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.151938][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.155145][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.160219][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.168389][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.170937][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.175606][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.178712][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.181943][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.185089][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.187321][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.188317][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.191020][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.193809][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.193824][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.193835][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.193847][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.193858][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.193870][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.193881][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.193892][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.193904][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.193915][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.193926][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.228884][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.291976][ T6043] Cannot find del_set index 3 as target [ 48.299888][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 48.385026][ T40] audit: type=1400 audit(1750183915.639:2): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=6046 comm="syz.1.5" [ 48.491200][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.493735][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.496148][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.498527][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.500898][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.503358][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.505762][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.508125][ T840] hid-generic 0000:0081:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.513358][ T840] hid-generic 0000:0081:FFFFFFFE.0002: hidraw1: HID v0.00 Device [syz1] on syz1 [ 48.659837][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 48.705383][ T6053] team0: Port device team_slave_0 removed [ 48.719248][ T6054] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 48.928748][ T6056] syzkaller1: entered promiscuous mode [ 48.930536][ T6056] syzkaller1: entered allmulticast mode [ 48.933817][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 48.988696][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 49.005812][ T6058] bond1: entered promiscuous mode [ 49.007449][ T6058] bond1: entered allmulticast mode [ 49.009317][ T6058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.593786][ T5953] Bluetooth: hci0: command tx timeout [ 49.603453][ T5953] Bluetooth: hci2: command tx timeout [ 49.673529][ T5953] Bluetooth: hci3: command tx timeout [ 49.675315][ T5952] Bluetooth: hci1: command tx timeout [ 49.972197][ T6072] batadv_slave_1: entered promiscuous mode [ 50.270922][ T6074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12'. [ 50.386823][ T6077] fuse: Bad value for 'group_id' [ 50.388996][ T6077] fuse: Bad value for 'group_id' [ 50.436968][ T6079] Illegal XDP return value 4294967294 on prog (id 5) dev N/A, expect packet loss! [ 50.549261][ T6084] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 50.554128][ T6084] warning: `syz.0.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.585078][ T6085] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.592006][ T6085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15'. [ 50.804430][ T6071] batadv_slave_1: left promiscuous mode [ 50.863485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.335676][ T6094] block device autoloading is deprecated and will be removed. [ 51.503475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.503502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.508574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.624891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.683391][ T5952] Bluetooth: hci2: command tx timeout [ 51.685465][ T5952] Bluetooth: hci0: command tx timeout [ 51.700393][ T6109] ieee802154 phy0 wpan0: encryption failed: -22 [ 51.749895][ T6109] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.753707][ T5952] Bluetooth: hci3: command tx timeout [ 51.753738][ T5952] Bluetooth: hci1: command tx timeout [ 51.931988][ T6109] netlink: 'syz.3.20': attribute type 23 has an invalid length. [ 52.063417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.173496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.176151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.213722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.293817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.323212][ T6103] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 52.476727][ T6139] FAULT_INJECTION: forcing a failure. [ 52.476727][ T6139] name failslab, interval 1, probability 0, space 0, times 1 [ 52.481892][ T6139] CPU: 3 UID: 0 PID: 6139 Comm: syz.3.24 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 52.481914][ T6139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.481924][ T6139] Call Trace: [ 52.481930][ T6139] [ 52.481937][ T6139] dump_stack_lvl+0x16c/0x1f0 [ 52.481968][ T6139] should_fail_ex+0x512/0x640 [ 52.481991][ T6139] ? fs_reclaim_acquire+0xae/0x150 [ 52.482012][ T6139] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 52.482034][ T6139] should_failslab+0xc2/0x120 [ 52.482050][ T6139] __kmalloc_noprof+0xd2/0x510 [ 52.482080][ T6139] tomoyo_realpath_from_path+0xc2/0x6e0 [ 52.482105][ T6139] ? tomoyo_profile+0x47/0x60 [ 52.482132][ T6139] tomoyo_path_perm+0x274/0x460 [ 52.482149][ T6139] ? tomoyo_path_perm+0x260/0x460 [ 52.482171][ T6139] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 52.482224][ T6139] ? __fget_files+0x20e/0x3c0 [ 52.482252][ T6139] security_inode_getattr+0x116/0x290 [ 52.482273][ T6139] do_statx_fd+0x11b/0x3a0 [ 52.482294][ T6139] ? __pfx_do_statx_fd+0x10/0x10 [ 52.482335][ T6139] ? __might_fault+0x154/0x190 [ 52.482358][ T6139] ? __pfx_ksys_write+0x10/0x10 [ 52.482385][ T6139] __ia32_sys_statx+0x197/0x1f0 [ 52.482406][ T6139] __do_fast_syscall_32+0x7c/0x3a0 [ 52.482425][ T6139] do_fast_syscall_32+0x32/0x80 [ 52.482441][ T6139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.482461][ T6139] RIP: 0023:0xf7f87579 [ 52.482474][ T6139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 52.482489][ T6139] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 000000000000017f [ 52.482505][ T6139] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 52.482515][ T6139] RDX: 0000000000001000 RSI: 0000000000000310 RDI: 00000000800004c0 [ 52.482524][ T6139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.482534][ T6139] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 52.482543][ T6139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.482566][ T6139] [ 52.482573][ T6139] ERROR: Out of memory at tomoyo_realpath_from_path. [ 53.583563][ T40] audit: type=1326 audit(1750183920.805:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.1.27" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 53.754202][ T5952] Bluetooth: hci2: command tx timeout [ 53.756610][ T5953] Bluetooth: hci0: command tx timeout [ 53.833443][ T5952] Bluetooth: hci3: command tx timeout [ 53.835371][ T5953] Bluetooth: hci1: command tx timeout [ 54.138499][ T6204] Zero length message leads to an empty skb [ 54.140710][ T6204] netlink: 36 bytes leftover after parsing attributes in process `syz.3.31'. [ 54.413623][ T6212] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 54.453459][ T839] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 54.480348][ T6214] 8021q: VLANs not supported on wg1 [ 54.521460][ T839] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 54.591764][ T6216] fido_id[6216]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.771836][ T54] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.776203][ T54] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 57.191610][ T6281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.51'. [ 58.195042][ T6029] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 58.198944][ T6029] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 58.312169][ T6297] fido_id[6297]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0005/report_descriptor': No such file or directory [ 58.703115][ T6306] netlink: 'syz.1.56': attribute type 10 has an invalid length. [ 58.706259][ T6306] syz_tun: entered promiscuous mode [ 58.710539][ T6306] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 58.879822][ T6310] Cannot find set identified by id 0 to match [ 59.192269][ T6038] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 59.197210][ T6038] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 59.368756][ T6322] fido_id[6322]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.532135][ T6326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.59'. [ 59.743882][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 59.747061][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 59.790499][ T6331] ceph: No mds server is up or the cluster is laggy [ 59.843776][ T6337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.62'. [ 60.679121][ T6346] tipc: Failed to remove unknown binding: 66,1,1/0:1548929754/1548929756 [ 60.682796][ T6346] tipc: Failed to remove unknown binding: 66,1,1/0:1548929754/1548929756 [ 60.873199][ T5808] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 60.877085][ T5808] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 60.955642][ T6038] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 61.135809][ T6038] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 61.139495][ T6038] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 61.146174][ T6038] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 61.153241][ T6038] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.163684][ T6346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.171708][ T6038] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 61.700832][ T6370] FAULT_INJECTION: forcing a failure. [ 61.700832][ T6370] name failslab, interval 1, probability 0, space 0, times 0 [ 61.710408][ T6370] CPU: 0 UID: 0 PID: 6370 Comm: syz.1.69 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 61.710424][ T6370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.710431][ T6370] Call Trace: [ 61.710435][ T6370] [ 61.710439][ T6370] dump_stack_lvl+0x16c/0x1f0 [ 61.710459][ T6370] should_fail_ex+0x512/0x640 [ 61.710474][ T6370] ? __kmalloc_noprof+0xbf/0x510 [ 61.710489][ T6370] ? alloc_pipe_info+0x1ec/0x590 [ 61.710504][ T6370] should_failslab+0xc2/0x120 [ 61.710513][ T6370] __kmalloc_noprof+0xd2/0x510 [ 61.710529][ T6370] ? kasan_save_track+0x14/0x30 [ 61.710544][ T6370] alloc_pipe_info+0x1ec/0x590 [ 61.710561][ T6370] splice_direct_to_actor+0x77d/0xa30 [ 61.710575][ T6370] ? __pfx_direct_splice_actor+0x10/0x10 [ 61.710589][ T6370] ? __pfx_aa_file_perm+0x10/0x10 [ 61.710603][ T6370] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 61.710615][ T6370] ? get_pid_task+0xfc/0x250 [ 61.710632][ T6370] do_splice_direct+0x174/0x240 [ 61.710645][ T6370] ? __pfx_do_splice_direct+0x10/0x10 [ 61.710657][ T6370] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 61.710677][ T6370] ? rw_verify_area+0xcf/0x680 [ 61.710697][ T6370] do_sendfile+0xb06/0xe50 [ 61.710720][ T6370] ? __pfx_do_sendfile+0x10/0x10 [ 61.710740][ T6370] ? __fget_files+0x20e/0x3c0 [ 61.710765][ T6370] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 61.710779][ T6370] ? ksys_write+0x1ac/0x250 [ 61.710800][ T6370] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 61.710817][ T6370] ? rcu_is_watching+0x12/0xc0 [ 61.710835][ T6370] __do_fast_syscall_32+0x7c/0x3a0 [ 61.710852][ T6370] do_fast_syscall_32+0x32/0x80 [ 61.710867][ T6370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.710885][ T6370] RIP: 0023:0xf710e579 [ 61.710898][ T6370] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 61.710911][ T6370] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 61.710927][ T6370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000003 [ 61.710936][ T6370] RDX: 0000000000000000 RSI: 0000000000000457 RDI: 0000000000000000 [ 61.710945][ T6370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.710953][ T6370] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 61.710961][ T6370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.710975][ T6370] [ 61.791765][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.805186][ T1121] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 61.809019][ T1121] sr 2:0:0:0: [sr0] tag#3 Sense Key : Illegal Request [current] [ 61.851032][ T1121] sr 2:0:0:0: [sr0] tag#3 Add. Sense: Invalid command operation code [ 61.856806][ T1121] sr 2:0:0:0: [sr0] tag#3 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 61.861035][ T1121] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 61.869309][ T1121] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 61.872134][ T1121] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 62.817459][ T6390] FAULT_INJECTION: forcing a failure. [ 62.817459][ T6390] name failslab, interval 1, probability 0, space 0, times 0 [ 62.821853][ T6390] CPU: 1 UID: 0 PID: 6390 Comm: syz.1.75 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 62.821869][ T6390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.821875][ T6390] Call Trace: [ 62.821879][ T6390] [ 62.821883][ T6390] dump_stack_lvl+0x16c/0x1f0 [ 62.821904][ T6390] should_fail_ex+0x512/0x640 [ 62.821920][ T6390] ? fs_reclaim_acquire+0xae/0x150 [ 62.821933][ T6390] ? tomoyo_encode2+0x100/0x3e0 [ 62.821947][ T6390] should_failslab+0xc2/0x120 [ 62.821958][ T6390] __kmalloc_noprof+0xd2/0x510 [ 62.821973][ T6390] ? d_absolute_path+0x136/0x1a0 [ 62.821986][ T6390] tomoyo_encode2+0x100/0x3e0 [ 62.822002][ T6390] tomoyo_encode+0x29/0x50 [ 62.822016][ T6390] tomoyo_realpath_from_path+0x18f/0x6e0 [ 62.822034][ T6390] tomoyo_path_number_perm+0x245/0x580 [ 62.822046][ T6390] ? tomoyo_path_number_perm+0x237/0x580 [ 62.822059][ T6390] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 62.822086][ T6390] ? find_held_lock+0x2b/0x80 [ 62.822097][ T6390] ? hook_file_ioctl_common+0x145/0x410 [ 62.822112][ T6390] ? __fget_files+0x20e/0x3c0 [ 62.822125][ T6390] ? __pfx_fput+0x10/0x10 [ 62.822137][ T6390] security_file_ioctl_compat+0x9b/0x240 [ 62.822152][ T6390] __ia32_compat_sys_ioctl+0xc3/0x370 [ 62.822167][ T6390] __do_fast_syscall_32+0x7c/0x3a0 [ 62.822178][ T6390] do_fast_syscall_32+0x32/0x80 [ 62.822188][ T6390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.822201][ T6390] RIP: 0023:0xf710e579 [ 62.822209][ T6390] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 62.822220][ T6390] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 62.822230][ T6390] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080845663 [ 62.822236][ T6390] RDX: 0000000080001580 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.822242][ T6390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.822248][ T6390] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 62.822254][ T6390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.822266][ T6390] [ 62.822276][ T6390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.099459][ T839] usb 8-1: USB disconnect, device number 2 [ 63.475061][ T839] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.522549][ T839] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 63.568260][ T6404] fido_id[6404]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.984715][ T6416] netlink: 32 bytes leftover after parsing attributes in process `syz.3.82'. [ 64.658890][ T5808] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.663011][ T5808] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 65.111166][ T840] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 65.120591][ T840] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 65.309045][ T840] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 65.322772][ T840] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 65.400854][ T6458] fido_id[6458]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.507879][ T5808] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 65.521655][ T5808] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 65.579683][ T6465] fido_id[6465]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 66.130651][ T6472] netlink: 36 bytes leftover after parsing attributes in process `syz.2.96'. [ 66.276939][ T6477] netlink: 48 bytes leftover after parsing attributes in process `syz.1.98'. [ 66.287100][ T61] hid-generic 0005:17BF:5505.000D: unknown main item tag 0x0 [ 66.289425][ T61] hid-generic 0005:17BF:5505.000D: unknown main item tag 0x0 [ 66.294276][ T6477] overlayfs: conflicting options: userxattr,metacopy=on [ 66.299309][ T61] hid-generic 0005:17BF:5505.000D: hidraw1: BLUETOOTH HID v20.00 Device [syz0] on aa:aa:aa:aa:aa:aa [ 66.500942][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 66.667593][ T6489] netlink: 36 bytes leftover after parsing attributes in process `syz.0.101'. [ 66.821235][ T6492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.102'. [ 67.578918][ T5953] Bluetooth: hci1: connection err: -111 [ 68.382878][ T61] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 68.393450][ T61] hid-generic 0000:0000:0000.000E: hidraw2: HID v0.00 Device [syz1] on syz0 [ 68.638496][ T6529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.110'. [ 69.092690][ T6542] loop6: detected capacity change from 0 to 524287999 [ 69.111488][ T6542] netlink: 'syz.3.114': attribute type 12 has an invalid length. [ 69.682079][ T6556] process 'syz.2.117' launched './file2' with NULL argv: empty string added [ 70.609392][ T54] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 70.614091][ T54] hid-generic 0000:0000:0000.000F: hidraw2: HID v0.00 Device [syz1] on syz0 [ 70.653875][ T6586] bridge_slave_0: left allmulticast mode [ 70.655752][ T6586] bridge_slave_0: left promiscuous mode [ 70.658445][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.792319][ T6586] bridge_slave_1: left allmulticast mode [ 70.794565][ T6586] bridge_slave_1: left promiscuous mode [ 70.795944][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.797141][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.798413][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.806977][ T6583] netlink: 'syz.2.124': attribute type 10 has an invalid length. [ 70.993501][ T6586] bond0: (slave bond_slave_0): Releasing backup interface [ 71.005796][ T6589] fido_id[6589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.114075][ T6586] bond0: (slave bond_slave_1): Releasing backup interface [ 71.268740][ T6586] team0: Port device team_slave_0 removed [ 71.337432][ T6586] team0: Port device team_slave_1 removed [ 71.343159][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.345946][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.399668][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.402285][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.542503][ T6583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.550502][ T6583] team0: Port device bond0 added [ 71.776375][ T6595] netlink: 32 bytes leftover after parsing attributes in process `syz.1.125'. [ 72.503934][ T5808] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 72.637315][ T5808] usb 8-1: device descriptor read/64, error -71 [ 72.873590][ T5808] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 73.003473][ T5808] usb 8-1: device descriptor read/64, error -71 [ 73.113692][ T5808] usb usb8-port1: attempt power cycle [ 73.466984][ T5808] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 73.491894][ T5808] usb 8-1: device descriptor read/8, error -71 [ 73.586388][ T6038] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 73.590175][ T6038] hid-generic 0000:0000:0000.0010: hidraw2: HID v0.00 Device [syz1] on syz0 [ 73.610060][ T6632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.136'. [ 73.743478][ T5808] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 73.773961][ T5808] usb 8-1: device descriptor read/8, error -71 [ 73.885470][ T5808] usb usb8-port1: unable to enumerate USB device [ 74.228858][ T40] audit: type=1326 audit(1750183941.485:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.2.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 74.236700][ T40] audit: type=1326 audit(1750183941.485:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.2.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 74.243395][ T40] audit: type=1326 audit(1750183941.485:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.2.137" exe="/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 74.250211][ T40] audit: type=1326 audit(1750183941.485:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.2.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 74.256915][ T40] audit: type=1326 audit(1750183941.485:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.2.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 74.264073][ T40] audit: type=1326 audit(1750183941.485:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.2.137" exe="/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 74.270740][ T40] audit: type=1326 audit(1750183941.485:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.2.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 74.277487][ T40] audit: type=1326 audit(1750183941.485:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.2.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 74.284079][ T40] audit: type=1326 audit(1750183941.485:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.2.137" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 74.290693][ T40] audit: type=1326 audit(1750183941.485:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.2.137" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 74.827003][ T6643] cdrom: dropping to single frame dma [ 74.835242][ T6644] netlink: zone id is out of range [ 74.837753][ T6644] netlink: zone id is out of range [ 74.839448][ T6644] netlink: zone id is out of range [ 74.924759][ T6644] netlink: zone id is out of range [ 75.061081][ T6644] netlink: zone id is out of range [ 75.133668][ T6644] netlink: zone id is out of range [ 75.135553][ T6644] netlink: zone id is out of range [ 75.137761][ T6644] netlink: zone id is out of range [ 75.151133][ T6644] netlink: set zone limit has 4 unknown bytes [ 75.618692][ T6655] 9pnet_fd: Insufficient options for proto=fd [ 75.713534][ T6667] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 75.715718][ T6667] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 75.720402][ T6667] vhci_hcd vhci_hcd.0: Device attached [ 76.053368][ T54] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 76.264646][ T6668] vhci_hcd: connection reset by peer [ 76.270202][ T95] vhci_hcd: stop threads [ 76.272392][ T95] vhci_hcd: release socket [ 76.281801][ T95] vhci_hcd: disconnect device [ 76.607812][ T6675] netlink: 32 bytes leftover after parsing attributes in process `syz.2.146'. [ 76.708780][ T6680] loop6: detected capacity change from 0 to 524287999 [ 78.823593][ T6726] netlink: 'syz.2.160': attribute type 10 has an invalid length. [ 78.841263][ T6726] veth0_vlan: left promiscuous mode [ 78.844786][ T6726] veth0_vlan: entered promiscuous mode [ 78.853427][ T6726] team0: Device veth0_vlan failed to register rx_handler [ 79.400113][ T24] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 79.403557][ T24] hid-generic 0000:0000:0000.0011: hidraw2: HID v0.00 Device [syz1] on syz0 [ 79.771792][ T6740] fido_id[6740]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.794779][ T6742] ======================================================= [ 79.794779][ T6742] WARNING: The mand mount option has been deprecated and [ 79.794779][ T6742] and is ignored by this kernel. Remove the mand [ 79.794779][ T6742] option from the mount to silence this warning. [ 79.794779][ T6742] ======================================================= [ 79.864686][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'. [ 81.036115][ T60] cfg80211: failed to load regulatory.db [ 81.052409][ T6775] netlink: 36 bytes leftover after parsing attributes in process `syz.2.179'. [ 81.185136][ T54] vhci_hcd: vhci_device speed not set [ 81.211839][ T6038] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 81.257928][ T6038] hid-generic 0000:0000:0000.0012: hidraw2: HID v0.00 Device [syz1] on syz0 [ 81.792069][ T6783] fido_id[6783]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.128782][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 82.249862][ T6802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.258647][ T6802] bond0: (slave rose0): Enslaving as an active interface with an up link [ 82.393232][ T5808] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 82.544790][ T5808] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 82.547299][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 82.550680][ T5808] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.554538][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 82.558033][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 82.563412][ T5808] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 82.565829][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 82.569243][ T5808] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.572882][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 82.576634][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 82.580892][ T5808] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 82.583335][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 82.586697][ T5808] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.590334][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 82.594229][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 82.601009][ T5808] usb 6-1: string descriptor 0 read error: -22 [ 82.603182][ T5808] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 82.605993][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.621640][ T5808] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 82.911326][ T6038] usb 6-1: USB disconnect, device number 2 [ 83.004234][ T6832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.189'. [ 83.155831][ T6835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.190'. [ 83.686916][ T6840] netlink: 32 bytes leftover after parsing attributes in process `syz.3.192'. [ 83.849275][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 84.393270][ T54] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.543066][ T5808] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 84.713165][ T5808] usb 8-1: Using ep0 maxpacket: 16 [ 84.722083][ T5808] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.726445][ T5808] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.735378][ T5808] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 84.739122][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.742577][ T5808] usb 8-1: Product: syz [ 84.744602][ T5808] usb 8-1: Manufacturer: syz [ 84.746565][ T5808] usb 8-1: SerialNumber: syz [ 84.751034][ T5808] usb 8-1: config 0 descriptor?? [ 84.914056][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 85.001812][ T54] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 85.006455][ T54] usb 5-1: config 0 has no interface number 0 [ 85.009063][ T54] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.012872][ T54] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 85.017152][ T54] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.020487][ T54] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.024488][ T54] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 85.027437][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.031064][ T54] usb 5-1: config 0 descriptor?? [ 85.038816][ T54] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 85.404609][ T54] usb 5-1: USB disconnect, device number 2 [ 85.407891][ T54] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 86.252974][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.402946][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 86.408252][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.412437][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.423690][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.432984][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.436295][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.445565][ T9] usb 5-1: config 0 descriptor?? [ 86.669887][ T6879] kvm: apic: phys broadcast and lowest prio [ 86.801172][ T61] usb 8-1: USB disconnect, device number 7 [ 86.945741][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 86.950786][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0013/input/input5 [ 86.984502][ T9] microsoft 0003:045E:07DA.0013: input,hidraw2: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 87.026320][ T6887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.207'. [ 87.205775][ T61] usb 5-1: USB disconnect, device number 3 [ 87.395489][ T9] hid-generic 00A0:0008:0003.0014: unknown main item tag 0x0 [ 87.397857][ T9] hid-generic 00A0:0008:0003.0014: unknown main item tag 0x0 [ 87.409124][ T9] hid-generic 00A0:0008:0003.0014: unknown main item tag 0x0 [ 87.412026][ T9] hid-generic 00A0:0008:0003.0014: unknown main item tag 0x0 [ 87.421807][ T9] hid-generic 00A0:0008:0003.0014: item fetching failed at offset 13/15 [ 87.426794][ T9] hid-generic 00A0:0008:0003.0014: probe with driver hid-generic failed with error -22 [ 87.902687][ T6903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.212'. [ 88.053200][ T29] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 88.059109][ T29] hid-generic 0000:0000:0000.0015: hidraw2: HID v0.00 Device [syz1] on syz0 [ 88.785134][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 88.907365][ T6935] capability: warning: `syz.0.221' uses deprecated v2 capabilities in a way that may be insecure [ 89.170019][ T6947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.224'. [ 90.125781][ T6961] sd 0:0:0:0: PR command failed: 1026 [ 90.127569][ T6961] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 90.129676][ T6961] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 91.233915][ T5808] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 91.237197][ T5808] hid-generic 0000:0000:0000.0016: hidraw2: HID v0.00 Device [syz1] on syz0 [ 91.368332][ T6029] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 91.371973][ T6029] hid-generic 0000:0000:0000.0017: hidraw2: HID v0.00 Device [syz1] on syz0 [ 92.211659][ T7007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.237'. [ 93.411563][ T7023] netlink: 48 bytes leftover after parsing attributes in process `syz.3.243'. [ 96.107208][ T7077] netlink: 32 bytes leftover after parsing attributes in process `syz.0.253'. [ 96.164103][ T6029] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.175785][ T6029] hid-generic 0000:0000:0000.0018: hidraw2: HID v0.00 Device [syz1] on syz0 [ 97.085140][ T7087] netlink: 'syz.3.259': attribute type 9 has an invalid length. [ 97.192693][ T29] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 97.199159][ T29] hid-generic 0000:0000:0000.0019: hidraw2: HID v0.00 Device [syz1] on syz0 [ 97.350578][ T7097] input: syz1 as /devices/virtual/input/input6 [ 98.189446][ T7107] dvmrp0: entered allmulticast mode [ 99.223661][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 99.858656][ T29] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 99.877702][ T29] hid-generic 0000:0000:0000.001A: hidraw2: HID v0.00 Device [syz1] on syz0 [ 99.931370][ T7151] fido_id[7151]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.001A/report_descriptor': No such file or directory [ 99.964715][ T7153] netlink: 36 bytes leftover after parsing attributes in process `syz.0.271'. [ 100.222237][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.382179][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 100.386167][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 100.389543][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.393802][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.397626][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.401157][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.403152][ T7161] FAULT_INJECTION: forcing a failure. [ 100.403152][ T7161] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.406641][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.411765][ T7161] CPU: 1 UID: 0 PID: 7161 Comm: syz.3.274 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 100.411788][ T7161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.411798][ T7161] Call Trace: [ 100.411805][ T7161] [ 100.411812][ T7161] dump_stack_lvl+0x16c/0x1f0 [ 100.411844][ T7161] should_fail_ex+0x512/0x640 [ 100.411874][ T7161] strncpy_from_user+0x3b/0x2e0 [ 100.411901][ T7161] getname_flags.part.0+0x8f/0x550 [ 100.411920][ T7161] ? handle_mm_fault+0x210/0xd10 [ 100.411951][ T7161] getname_flags+0x93/0xf0 [ 100.411974][ T7161] user_path_at+0x24/0x60 [ 100.411998][ T7161] __ia32_sys_umount+0x109/0x190 [ 100.412025][ T7161] ? __pfx___ia32_sys_umount+0x10/0x10 [ 100.412051][ T7161] ? rcu_is_watching+0x12/0xc0 [ 100.412088][ T7161] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 100.412120][ T7161] __do_fast_syscall_32+0x7c/0x3a0 [ 100.412157][ T7161] do_fast_syscall_32+0x32/0x80 [ 100.412177][ T7161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.412199][ T7161] RIP: 0023:0xf7f87579 [ 100.412213][ T7161] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 100.412228][ T7161] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000034 [ 100.412246][ T7161] RAX: ffffffffffffffda RBX: 0000000080000340 RCX: 0000000000000003 [ 100.412257][ T7161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.412267][ T7161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.412278][ T7161] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 100.412288][ T7161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.412311][ T7161] [ 100.486109][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.697943][ T24] usb 5-1: usb_control_msg returned -71 [ 100.699909][ T24] usbtmc 5-1:16.0: can't read capabilities [ 100.705117][ T24] usb 5-1: USB disconnect, device number 4 [ 104.408826][ T5946] bond0: (slave syz_tun): Releasing backup interface [ 106.719941][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.725951][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.732082][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.735250][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.739099][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.842635][ T24] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 106.890298][ T24] hid-generic 0000:0000:0000.001B: hidraw2: HID v0.00 Device [syz1] on syz0 [ 106.913414][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.918775][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.922574][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.927937][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.933039][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.009453][ T7191] fido_id[7191]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.061807][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 107.242420][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 107.289431][ T9] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 107.300328][ T9] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 107.301262][ T7185] chnl_net:caif_netlink_parms(): no params data found [ 107.339712][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.342823][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.345430][ T9] usb 7-1: Product: syz [ 107.346801][ T9] usb 7-1: Manufacturer: 뜺ᜃ⻛ޏꂐ࢔㌡ᛉ떂鸭寧「႗韝쥚ᗷ麟⭾쀟磒靔맻긜瀊᯼싀뜬陭䖲驔那綍൭뛚켫﹋⣋枅稍떻ͅ쿍牃낪⺰㻩⻄贈尘얿懥ឞﶎ㝁티᪙จ凓ꎶާ娺Ｌ畿貀寺瞢㶆▀⸮若 [ 107.358744][ T9] usb 7-1: SerialNumber: syz [ 107.372903][ T7193] chnl_net:caif_netlink_parms(): no params data found [ 107.555542][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.561843][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.564451][ T7185] bridge_slave_0: entered allmulticast mode [ 107.567460][ T7185] bridge_slave_0: entered promiscuous mode [ 107.572511][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.574798][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.577076][ T7185] bridge_slave_1: entered allmulticast mode [ 107.579627][ T7185] bridge_slave_1: entered promiscuous mode [ 107.668894][ T7185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.679421][ T7185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.731757][ T7184] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.279'. [ 107.736002][ T7182] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.279'. [ 107.746853][ T9] cdc_ncm 7-1:1.0: bind() failure [ 107.751455][ T9] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 107.753675][ T9] cdc_ncm 7-1:1.1: bind() failure [ 107.757614][ T9] usb 7-1: USB disconnect, device number 2 [ 107.769565][ T7185] team0: Port device team_slave_0 added [ 107.775897][ T7185] team0: Port device team_slave_1 added [ 107.792936][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.795685][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.798488][ T7193] bridge_slave_0: entered allmulticast mode [ 107.801593][ T7193] bridge_slave_0: entered promiscuous mode [ 107.832237][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.834392][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.836530][ T7193] bridge_slave_1: entered allmulticast mode [ 107.839548][ T7193] bridge_slave_1: entered promiscuous mode [ 107.856416][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.861799][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.870121][ T7185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.874437][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.876627][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.885694][ T7185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.904598][ T7193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.912600][ T7193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.947326][ T7193] team0: Port device team_slave_0 added [ 107.971890][ T7193] team0: Port device team_slave_1 added [ 108.007099][ T7185] hsr_slave_0: entered promiscuous mode [ 108.010264][ T7185] hsr_slave_1: entered promiscuous mode [ 108.014968][ T7185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.018122][ T7185] Cannot create hsr debugfs directory [ 108.033539][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.035793][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.044663][ T7193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.049022][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.051159][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.059118][ T7193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.164931][ T7193] hsr_slave_0: entered promiscuous mode [ 108.167125][ T7193] hsr_slave_1: entered promiscuous mode [ 108.169224][ T7193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.171595][ T7193] Cannot create hsr debugfs directory [ 108.337511][ T7215] netlink: 136 bytes leftover after parsing attributes in process `syz.2.283'. [ 108.341354][ T7215] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 108.348251][ T7185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.351058][ T7215] 9pnet_fd: Insufficient options for proto=fd [ 108.352366][ T7185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.363592][ T7185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.363770][ T7215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.283'. [ 108.375595][ T7185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.398767][ T7193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.478199][ T7193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.500953][ T7185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.516437][ T7185] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.524613][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.526992][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.535864][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.538317][ T1206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.590657][ T7193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.660495][ T6038] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 108.664794][ T7193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.692987][ T7185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.735909][ T6038] hid-generic 0000:0000:0000.001C: hidraw2: HID v0.00 Device [syz1] on syz0 [ 108.769759][ T7241] fido_id[7241]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.882291][ T5952] Bluetooth: hci0: command tx timeout [ 108.899013][ T7193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.904491][ T7193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.909437][ T7193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.913973][ T7193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.998224][ T7185] veth0_vlan: entered promiscuous mode [ 109.022101][ T7185] veth1_vlan: entered promiscuous mode [ 109.031698][ T5952] Bluetooth: hci1: command tx timeout [ 109.051286][ T7193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.077183][ T7185] veth0_macvtap: entered promiscuous mode [ 109.082623][ T7193] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.089173][ T7185] veth1_macvtap: entered promiscuous mode [ 109.100450][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.103597][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.121629][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.123933][ T1206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.141073][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.148070][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.149856][ T7254] trusted_key: encrypted_key: insufficient parameters specified [ 109.157865][ T7254] trusted_key: encrypted_key: insufficient parameters specified [ 109.163302][ T7185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.166566][ T7185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.169707][ T7185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.172959][ T7185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.283241][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.287028][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.306886][ T1206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.310084][ T1206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.350735][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.387786][ T7193] veth0_vlan: entered promiscuous mode [ 109.421216][ T7193] veth1_vlan: entered promiscuous mode [ 109.465320][ T7193] veth0_macvtap: entered promiscuous mode [ 109.476486][ T7193] veth1_macvtap: entered promiscuous mode [ 109.500297][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.509408][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.516122][ T7193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.520022][ T7193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.523962][ T7193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.527756][ T7193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.625992][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.629091][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.658914][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.697080][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.018966][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 110.953063][ T5952] Bluetooth: hci0: command tx timeout [ 111.111742][ T5952] Bluetooth: hci1: command tx timeout [ 111.499625][ T7282] xt_recent: Unsupported userspace flags (000000fe) [ 111.709959][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 111.713585][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 111.749911][ T7299] netlink: 84 bytes leftover after parsing attributes in process `syz.2.296'. [ 111.893429][ T7305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.298'. [ 113.014532][ T7266] Set syz1 is full, maxelem 65536 reached [ 113.042647][ T5952] Bluetooth: hci0: command tx timeout [ 113.202321][ T5952] Bluetooth: hci1: command tx timeout [ 114.483746][ T7325] Cannot find set identified by id 0 to match [ 114.899614][ T7338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.309'. [ 115.111806][ T5952] Bluetooth: hci0: command tx timeout [ 115.278263][ T5952] Bluetooth: hci1: command tx timeout [ 115.433819][ T7346] netlink: 32 bytes leftover after parsing attributes in process `syz.3.310'. [ 115.453797][ T6029] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 115.461448][ T6029] hid-generic 0000:0000:0000.001D: hidraw2: HID v0.00 Device [syz1] on syz0 [ 116.644491][ T7363] fuseblk: Unknown parameter 'rootmode 00000000000000000020000' [ 117.114905][ T7390] netlink: 32 bytes leftover after parsing attributes in process `syz.3.322'. [ 117.194366][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 117.194399][ T40] audit: type=1326 audit(1750183984.457:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 117.216141][ T40] audit: type=1326 audit(1750183984.457:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 117.225727][ T40] audit: type=1326 audit(1750183984.457:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.323" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 117.235466][ T40] audit: type=1326 audit(1750183984.457:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 117.244896][ T40] audit: type=1326 audit(1750183984.457:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 117.256687][ T40] audit: type=1326 audit(1750183984.457:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.323" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 117.266630][ T40] audit: type=1326 audit(1750183984.507:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 117.285805][ T40] audit: type=1326 audit(1750183984.507:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 117.327952][ T40] audit: type=1326 audit(1750183984.587:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.323" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 117.345585][ T40] audit: type=1326 audit(1750183984.587:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 118.164346][ T5952] Bluetooth: hci0: connection err: -111 [ 119.294648][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 120.095477][ T7436] netlink: 32 bytes leftover after parsing attributes in process `syz.2.334'. [ 120.858647][ T7449] overlayfs: failed to resolve './file1': -2 [ 120.880843][ T7449] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 120.884603][ T7450] block device autoloading is deprecated and will be removed. [ 121.191123][ T5953] Bluetooth: hci1: command 0x0405 tx timeout [ 122.157878][ T7485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.346'. [ 122.729777][ T7490] netlink: 36 bytes leftover after parsing attributes in process `syz.3.349'. [ 123.032192][ T6029] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.100203][ T7320] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 123.105001][ T7320] hid-generic 0000:0000:0000.001E: hidraw2: HID v0.00 Device [syz1] on syz0 [ 123.210915][ T6029] usb 5-1: Using ep0 maxpacket: 16 [ 123.215465][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.225511][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.234523][ T6029] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.240664][ T6029] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.243882][ T6029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.254406][ T6029] usb 5-1: config 0 descriptor?? [ 123.524995][ T7492] kvm: apic: phys broadcast and lowest prio [ 123.852672][ T6029] usbhid 5-1:0.0: can't add hid device: -71 [ 123.856866][ T6029] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 123.881319][ T6029] usb 5-1: USB disconnect, device number 5 [ 123.940128][ T7514] netlink: 48 bytes leftover after parsing attributes in process `syz.4.355'. [ 124.613612][ T7517] netlink: 48 bytes leftover after parsing attributes in process `syz.3.356'. [ 124.911172][ T7526] sd 0:0:0:0: PR command failed: 1026 [ 124.913101][ T7526] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 124.915701][ T7526] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 125.157029][ T7320] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 125.164479][ T7320] hid-generic 0000:0000:0000.001F: hidraw2: HID v0.00 Device [syz1] on syz0 [ 125.714691][ T7546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.362'. [ 126.715831][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 126.778246][ T7557] netlink: 48 bytes leftover after parsing attributes in process `syz.3.367'. [ 126.984188][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 128.955496][ T7596] netlink: 48 bytes leftover after parsing attributes in process `syz.0.379'. [ 129.344774][ T7558] Set syz1 is full, maxelem 65536 reached [ 129.587029][ T24] IPVS: starting estimator thread 0... [ 129.670676][ T7606] IPVS: using max 44 ests per chain, 105600 per kthread [ 129.851025][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 130.291202][ T6029] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 130.373800][ T6029] hid-generic 0000:0000:0000.0020: hidraw2: HID v0.00 Device [syz1] on syz0 [ 130.494632][ T7639] fido_id[7639]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 131.153355][ T7660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.155755][ T7660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.161053][ T7660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.164655][ T7660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.352532][ T5952] Bluetooth: hci0: connection err: -111 [ 131.834695][ T5952] Bluetooth: hci2: connection err: -111 [ 132.233568][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.235773][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.663693][ T7685] FAULT_INJECTION: forcing a failure. [ 132.663693][ T7685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.668246][ T7685] CPU: 1 UID: 0 PID: 7685 Comm: syz.3.404 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 132.668260][ T7685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.668266][ T7685] Call Trace: [ 132.668270][ T7685] [ 132.668275][ T7685] dump_stack_lvl+0x16c/0x1f0 [ 132.668377][ T7685] should_fail_ex+0x512/0x640 [ 132.668413][ T7685] _copy_to_user+0x32/0xd0 [ 132.668430][ T7685] simple_read_from_buffer+0xcb/0x170 [ 132.668445][ T7685] proc_fail_nth_read+0x197/0x270 [ 132.668458][ T7685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.668470][ T7685] ? rw_verify_area+0xcf/0x680 [ 132.668482][ T7685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.668494][ T7685] vfs_read+0x1e4/0xc60 [ 132.668508][ T7685] ? fdget_pos+0x2a2/0x370 [ 132.668523][ T7685] ? __pfx_vfs_read+0x10/0x10 [ 132.668535][ T7685] ? find_held_lock+0x2b/0x80 [ 132.668549][ T7685] ? __fget_files+0x20e/0x3c0 [ 132.668566][ T7685] ksys_read+0x12a/0x250 [ 132.668579][ T7685] ? __pfx_ksys_read+0x10/0x10 [ 132.668598][ T7685] ? rcu_is_watching+0x12/0xc0 [ 132.668611][ T7685] __do_fast_syscall_32+0x7c/0x3a0 [ 132.668622][ T7685] do_fast_syscall_32+0x32/0x80 [ 132.668631][ T7685] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.668644][ T7685] RIP: 0023:0xf703e579 [ 132.668652][ T7685] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 132.668662][ T7685] RSP: 002b:00000000f502e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 132.668672][ T7685] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f502e620 [ 132.668678][ T7685] RDX: 000000000000000f RSI: 00000000f73a2ff4 RDI: 0000000000000000 [ 132.668683][ T7685] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 132.668689][ T7685] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 132.668694][ T7685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.668706][ T7685] [ 132.989564][ T9] libceph: connect (1)[c::]:6789 error -101 [ 132.990576][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 132.992898][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 132.997411][ T24] hid-generic 0000:0000:0000.0021: hidraw2: HID v0.00 Device [syz1] on syz0 [ 133.251640][ T9] libceph: connect (1)[c::]:6789 error -101 [ 133.253831][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 133.343504][ T34] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 133.347759][ T34] hid-generic 0000:0000:0000.0022: hidraw2: HID v0.00 Device [syz1] on syz0 [ 133.384455][ T7717] fido_id[7717]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.760117][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 133.766819][ T9] libceph: connect (1)[c::]:6789 error -101 [ 133.770339][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 133.870782][ T7693] ceph: No mds server is up or the cluster is laggy [ 133.932317][ T5952] Bluetooth: hci1: connection err: -111 [ 134.370480][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 134.564251][ T7738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.672341][ T7738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.747688][ T7738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.831471][ T7738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.931633][ T7738] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.942054][ T7738] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.949305][ T7738] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.956933][ T7738] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.620974][ T54] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 135.627762][ T54] hid-generic 0000:0000:0000.0023: hidraw2: HID v0.00 Device [syz1] on syz0 [ 136.005674][ T7769] lo speed is unknown, defaulting to 1000 [ 136.007797][ T7769] lo speed is unknown, defaulting to 1000 [ 136.014164][ T7769] lo speed is unknown, defaulting to 1000 [ 136.024974][ T7769] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.043822][ T7769] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 136.202129][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 136.268804][ T7769] lo speed is unknown, defaulting to 1000 [ 136.271706][ T7769] lo speed is unknown, defaulting to 1000 [ 136.275319][ T7769] lo speed is unknown, defaulting to 1000 [ 136.279443][ T7769] lo speed is unknown, defaulting to 1000 [ 136.281977][ T7769] lo speed is unknown, defaulting to 1000 [ 136.284415][ T7769] lo speed is unknown, defaulting to 1000 [ 136.397236][ T7776] sd 0:0:0:0: PR command failed: 1026 [ 136.399602][ T7776] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 136.410658][ T7776] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 136.513479][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 136.682766][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.685509][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.784962][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.799030][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.836999][ T1206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.839737][ T1206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.932860][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.934933][ T7789] netlink: 48 bytes leftover after parsing attributes in process `syz.3.434'. [ 136.935319][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.042991][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.046055][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.144937][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.148429][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.248823][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.251501][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.346647][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.361064][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.483562][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.499805][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.558384][ T7802] netlink: 48 bytes leftover after parsing attributes in process `syz.2.437'. [ 137.567921][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.756946][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.795816][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.798236][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.870344][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.872820][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.021618][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.024522][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.085065][ T34] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 138.099436][ T34] hid-generic 0000:0000:0000.0024: hidraw2: HID v0.00 Device [syz1] on syz0 [ 138.504855][ T7822] input: syz1 as /devices/virtual/input/input8 [ 138.520847][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 138.528280][ T95] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 138.599023][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.602727][ T7826] netlink: 48 bytes leftover after parsing attributes in process `syz.0.443'. [ 138.610013][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.760934][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.763477][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.783952][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.786641][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.890824][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.893927][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.982243][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.985546][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.082844][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.085937][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.188407][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.193045][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.292474][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.294982][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.401402][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.404897][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.494571][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.497076][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.602390][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.608913][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.714794][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.717247][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.722771][ T34] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 139.733108][ T34] hid-generic 0000:0000:0000.0025: hidraw2: HID v0.00 Device [syz1] on syz0 [ 139.809542][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.812837][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.828374][ T7849] fido_id[7849]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 139.913779][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.916614][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.078982][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.083217][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.140152][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.142717][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.219734][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.233885][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.326347][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.329801][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.355210][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 140.483006][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.487022][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.554051][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.557224][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.603187][ T7878] netlink: 36 bytes leftover after parsing attributes in process `syz.2.455'. [ 140.619321][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.622528][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.841656][ T46] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 140.896171][ T46] ------------[ cut here ]------------ [ 140.898171][ T46] WARNING: CPU: 3 PID: 46 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x4d5/0x580 [ 140.901376][ T46] Modules linked in: [ 140.902912][ T46] CPU: 3 UID: 0 PID: 46 Comm: kworker/u32:2 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 140.908903][ T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.912488][ T46] Workqueue: cfg80211 cfg80211_event_work [ 140.914461][ T46] RIP: 0010:__cfg80211_ibss_joined+0x4d5/0x580 [ 140.916667][ T46] Code: ff ff e8 be 19 e1 f6 90 0f 0b 90 e9 58 fe ff ff e8 f0 f8 46 f7 e9 22 fc ff ff e8 86 f8 46 f7 e9 66 fc ff ff e8 9c 19 e1 f6 90 <0f> 0b 90 e9 6f fc ff ff e8 8e 19 e1 f6 90 0f 0b e8 f6 f8 46 f7 e9 [ 140.923225][ T46] RSP: 0018:ffffc900006dfaf0 EFLAGS: 00010293 [ 140.925465][ T46] RAX: 0000000000000000 RBX: ffff88805f520d90 RCX: 0000000000000006 [ 140.928095][ T46] RDX: ffff8880201b8000 RSI: ffffffff8ada6eb4 RDI: ffffffff8c1563e0 [ 140.931083][ T46] RBP: ffffc900006dfba0 R08: 0000000000000001 R09: 0000000000000001 [ 140.933844][ T46] R10: ffffffff90a83057 R11: 0000000000000001 R12: ffff88805f520000 [ 140.936465][ T46] R13: 1ffff920000dbf62 R14: 0000000000000000 R15: ffffc900006dfb30 [ 140.939712][ T46] FS: 0000000000000000(0000) GS:ffff888097861000(0000) knlGS:0000000000000000 [ 140.943689][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.946470][ T46] CR2: 00007f8e4430ca10 CR3: 0000000075f2b000 CR4: 0000000000352ef0 [ 140.949766][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.953318][ T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.956571][ T46] Call Trace: [ 140.957984][ T46] [ 140.959277][ T46] ? do_raw_spin_lock+0x12c/0x2b0 [ 140.961676][ T46] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 140.964345][ T46] ? mark_held_locks+0x49/0x80 [ 140.966632][ T46] ? cfg80211_process_wdev_events+0x3dd/0x5c0 [ 140.968900][ T46] cfg80211_process_wdev_events+0x3dd/0x5c0 [ 140.970921][ T46] cfg80211_process_rdev_events+0x9f/0x130 [ 140.972780][ T46] cfg80211_event_work+0x2e/0x50 [ 140.974337][ T46] process_one_work+0x9cc/0x1b70 [ 140.975972][ T46] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 140.977737][ T46] ? __pfx_process_one_work+0x10/0x10 [ 140.979449][ T46] ? assign_work+0x1a0/0x250 [ 140.981127][ T46] worker_thread+0x6c8/0xf10 [ 140.982607][ T46] ? __pfx_worker_thread+0x10/0x10 [ 140.984237][ T46] kthread+0x3c5/0x780 [ 140.985748][ T46] ? __pfx_kthread+0x10/0x10 [ 140.987798][ T46] ? rcu_is_watching+0x12/0xc0 [ 140.989328][ T46] ? __pfx_kthread+0x10/0x10 [ 140.990957][ T46] ret_from_fork+0x5d7/0x6f0 [ 140.992445][ T46] ? __pfx_kthread+0x10/0x10 [ 140.993882][ T46] ret_from_fork_asm+0x1a/0x30 [ 140.995468][ T46] [ 140.996463][ T46] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.998939][ T46] CPU: 3 UID: 0 PID: 46 Comm: kworker/u32:2 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 141.003523][ T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.007957][ T46] Workqueue: cfg80211 cfg80211_event_work [ 141.010365][ T46] Call Trace: [ 141.011792][ T46] [ 141.013071][ T46] dump_stack_lvl+0x3d/0x1f0 [ 141.015023][ T46] panic+0x71c/0x800 [ 141.016707][ T46] ? __pfx_panic+0x10/0x10 [ 141.018601][ T46] ? show_trace_log_lvl+0x29b/0x3e0 [ 141.020823][ T46] ? check_panic_on_warn+0x1f/0xb0 [ 141.022976][ T46] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 141.025284][ T46] check_panic_on_warn+0xab/0xb0 [ 141.027377][ T46] __warn+0xf6/0x3c0 [ 141.029053][ T46] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 141.031366][ T46] report_bug+0x3c3/0x580 [ 141.033119][ T46] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 141.035038][ T46] handle_bug+0x184/0x210 [ 141.036433][ T46] exc_invalid_op+0x17/0x50 [ 141.037884][ T46] asm_exc_invalid_op+0x1a/0x20 [ 141.039423][ T46] RIP: 0010:__cfg80211_ibss_joined+0x4d5/0x580 [ 141.041372][ T46] Code: ff ff e8 be 19 e1 f6 90 0f 0b 90 e9 58 fe ff ff e8 f0 f8 46 f7 e9 22 fc ff ff e8 86 f8 46 f7 e9 66 fc ff ff e8 9c 19 e1 f6 90 <0f> 0b 90 e9 6f fc ff ff e8 8e 19 e1 f6 90 0f 0b e8 f6 f8 46 f7 e9 [ 141.047539][ T46] RSP: 0018:ffffc900006dfaf0 EFLAGS: 00010293 [ 141.049440][ T46] RAX: 0000000000000000 RBX: ffff88805f520d90 RCX: 0000000000000006 [ 141.051910][ T46] RDX: ffff8880201b8000 RSI: ffffffff8ada6eb4 RDI: ffffffff8c1563e0 [ 141.054359][ T46] RBP: ffffc900006dfba0 R08: 0000000000000001 R09: 0000000000000001 [ 141.056864][ T46] R10: ffffffff90a83057 R11: 0000000000000001 R12: ffff88805f520000 [ 141.059312][ T46] R13: 1ffff920000dbf62 R14: 0000000000000000 R15: ffffc900006dfb30 [ 141.061788][ T46] ? __cfg80211_ibss_joined+0x4d4/0x580 [ 141.063649][ T46] ? do_raw_spin_lock+0x12c/0x2b0 [ 141.065369][ T46] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 141.067227][ T46] ? mark_held_locks+0x49/0x80 [ 141.068763][ T46] ? cfg80211_process_wdev_events+0x3dd/0x5c0 [ 141.070659][ T46] cfg80211_process_wdev_events+0x3dd/0x5c0 [ 141.072525][ T46] cfg80211_process_rdev_events+0x9f/0x130 [ 141.074360][ T46] cfg80211_event_work+0x2e/0x50 [ 141.075976][ T46] process_one_work+0x9cc/0x1b70 [ 141.077543][ T46] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 141.079304][ T46] ? __pfx_process_one_work+0x10/0x10 [ 141.081162][ T46] ? assign_work+0x1a0/0x250 [ 141.082786][ T46] worker_thread+0x6c8/0xf10 [ 141.084414][ T46] ? __pfx_worker_thread+0x10/0x10 [ 141.086117][ T46] kthread+0x3c5/0x780 [ 141.087595][ T46] ? __pfx_kthread+0x10/0x10 [ 141.089120][ T46] ? rcu_is_watching+0x12/0xc0 [ 141.090632][ T46] ? __pfx_kthread+0x10/0x10 [ 141.092156][ T46] ret_from_fork+0x5d7/0x6f0 [ 141.093637][ T46] ? __pfx_kthread+0x10/0x10 [ 141.095194][ T46] ret_from_fork_asm+0x1a/0x30 [ 141.097260][ T46] [ 141.099204][ T46] Kernel Offset: disabled [ 141.101090][ T46] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:13:28 Registers: info registers vcpu 0 CPU#0 RAX=00000002000008fd RBX=ffff888023f34880 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000008 RSP=ffffc90002fe7cc0 R8 =0000000000000000 R9 =fffffbfff215060a R10=ffffffff90a83057 R11=0000000000000001 R12=0000000000000003 R13=1ffff920005fcf99 R14=0000000000000001 R15=ffffc90002fe7ce8 RIP=ffffffff81692f08 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097561000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002c1faffc CR3=0000000073968000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000003 RBX=0000000000000000 RCX=1ffffffff35b7008 RDX=0000000000000004 RSI=ffffffff815e562e RDI=ffff888043fa4858 RBP=0000000000000000 RSP=ffffc90002ff7d38 R8 =0000000000000000 R9 =ffffed10087f4921 R10=ffff888043fa490b R11=0000000000000001 R12=ffff888023f34de0 R13=ffff8880247aa998 R14=0000000000000000 R15=ffff88802b33bdc0 RIP=ffffffff815e5662 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097661000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008002f000 CR3=0000000073968000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000015200000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000052ce9 RCX=ffffffff822cfcf1 RDX=ffff888027fc0000 RSI=ffffffff822cfd65 RDI=0000000000000006 RBP=ffff88803fffa400 RSP=ffffc90002c17720 R8 =0000000000000006 R9 =0000000000001000 R10=0000000000000000 R11=0000000000000001 R12=000000000000000a R13=ffff88807ffce400 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bb8891 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097761000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f26e40 CR3=000000004c103000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73c2ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85582055 RDI=ffffffff9b06da40 RBP=ffffffff9b06da00 RSP=ffffc900006df460 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b06da00 R15=ffffffff85581ff0 RIP=ffffffff8558207f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097861000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8e4430ca10 CR3=0000000075f2b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000