last executing test programs: 1m1.061009705s ago: executing program 1 (id=543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async, rerun: 64) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) (rerun: 64) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13", 0x1}], 0x2) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (rerun: 64) userfaultfd(0x801) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000140)='./file1\x00') (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (rerun: 64) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000700, 0x0, &(0x7f00000000c0)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) 1m0.75147757s ago: executing program 1 (id=544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 1m0.749774926s ago: executing program 1 (id=545): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}}) lstat(&(0x7f00000003c0)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37, 0x10, &(0x7f0000000000)={0x1}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m0.539157075s ago: executing program 1 (id=546): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r4, 0x4048aec9, &(0x7f0000001440)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xc, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x7}, {0x0, 0x9}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x12a35}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffffd}]}}]}, 0xfffffe3a}, 0x1, 0x0, 0x0, 0x80}, 0x800) r9 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$FBIOPUTCMAP(r9, 0x4605, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000040)=[0xffff, 0x9, 0x6], &(0x7f0000000080), &(0x7f00000000c0), 0x0}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1414, 0x1}, 0x10}}, 0x0) 59.611025969s ago: executing program 1 (id=550): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newtaction={0x234, 0x30, 0x300, 0x0, 0x2, {}, [{0x220, 0x1, [@m_bpf={0x164, 0x4, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xd050, 0x90, 0x4, 0x9}, {0x81, 0xf, 0xe2, 0x4}, {0x7, 0x2, 0x5, 0xffff7f9f}, {0x9, 0x5, 0x7, 0x10001}, {0x9, 0x1, 0x2, 0x10}, {0xff81, 0x7, 0x1, 0x8001}, {0x3, 0x73, 0x7, 0xd}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x7f, 0x5, 0x2, 0x6}}]}, {0xce, 0x6, "75f3689895ad0434107b08d792f6329cd84f2939a1b596d378aa3763f57c0a8f1a54d7daa5c0bd321a604373572dc77cc475978b168074947c3629dccd60f245fefccbffef0a0cbbdfc4d5ee76f35b8c0d0c6c3bc3fec2660e4c3645045db49508085184c7d2da3841907b804898d88d6845c3aec06aa5eb17f31dca1e5b7844b5d7a3feb63234d43b25b525c4ce76b00ad4bccfc4598bea7a71bfd3b0bf46e203c7b45ebc6a3d6a5e1909d9475b55e5e2127f1f09244d2dba2091824dcf0b09e6868f07258a838976ac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xb8, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x400000}}}]}, {0x72, 0x6, "9a63fce0ef23600eed3e61baa0511a99f2a5c8d83dead40aa939350fc27c64643bbaeaeac7c1f7962804038bdde98dad69400575ccc1e8d39365db94019816b0e499c9738b99b5d35b026f0781c39514a1fc50fb172ae721ae0fcc31845be2667d293b25cb5c392f2db717684254"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18) (async) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0x2, 0x40000) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmsg$alg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4004800) (async) read$alg(r7, &(0x7f00000000c0)=""/188, 0xbc) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000030a05000000000000000000000000040901000000000000000000000900030073797a3000000000140000001100010000000000000000000a00000a"], 0x54}, 0x1, 0x0, 0x0, 0x24048084}, 0x40040) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) (async) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) (async) sendto$inet6(r5, &(0x7f00000007c0)="87", 0x1, 0x0, 0x0, 0x0) 59.289177163s ago: executing program 1 (id=553): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x35f6, 0x0, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x24b9, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd_index=0x3}) r7 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x1, 0x0, 0x0, r8}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r11) sendmsg$IEEE802154_LLSEC_DEL_KEY(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000ea", @ANYRES16=r12, @ANYBLOB="0100adbd7000fddbdf252800000008002c000101000005002b000200000005002e00010000000a0001007770616e30000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) r13 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r13, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r14 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0x4d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r15, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r15, r16, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r14, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000000), &(0x7f0000000600)=[{}, {}, {}], r9, 0x0, '\x00', 0x56, 0x3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000240)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], r9, 0x0, '\x00', 0x9, 0x6}) io_uring_enter(r4, 0x3c2c, 0x0, 0x1e, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x40406300, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) 59.278366035s ago: executing program 32 (id=553): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x35f6, 0x0, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x24b9, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd_index=0x3}) r7 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x1, 0x0, 0x0, r8}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r11) sendmsg$IEEE802154_LLSEC_DEL_KEY(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000ea", @ANYRES16=r12, @ANYBLOB="0100adbd7000fddbdf252800000008002c000101000005002b000200000005002e00010000000a0001007770616e30000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) r13 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r13, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r14 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0x4d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r15, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r15, r16, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r14, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000000), &(0x7f0000000600)=[{}, {}, {}], r9, 0x0, '\x00', 0x56, 0x3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000240)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], r9, 0x0, '\x00', 0x9, 0x6}) io_uring_enter(r4, 0x3c2c, 0x0, 0x1e, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x40406300, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) 58.681548872s ago: executing program 2 (id=561): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x1c) chdir(&(0x7f0000000140)='./bus\x00') lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00') 58.611280539s ago: executing program 2 (id=562): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000340)="05000000", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000080)=0x6c, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x29, 0xb, 0x5, 0x4, 0x1a, @mcast2, @private0, 0x10, 0x1, 0x3, 0x4}}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = socket$inet(0x2b, 0x80000, 0x6) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3220004, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRES16=r3, @ANYRES64=r3, @ANYRESHEX=r0]) write$FUSE_INIT(r0, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) 57.523076855s ago: executing program 2 (id=566): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000008010040"]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "3dab2026179e3f9e94f795c462aef6c3ea5725a79a084ad573851312355a1302", 0xff, 0x3, 0x6, 0x2}, 0x3c) (async) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "3dab2026179e3f9e94f795c462aef6c3ea5725a79a084ad573851312355a1302", 0xff, 0x3, 0x6, 0x2}, 0x3c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) dup(r10) (async) r11 = dup(r10) ioctl$KVM_SET_VAPIC_ADDR(r11, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x4, 0x1, 0x80a0000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x4, 0x1, 0x80a0000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 56.97145737s ago: executing program 2 (id=567): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1230023, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x6d]}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x12c, 0x30, 0x1, 0x0, 0x0, {}, [{0x118, 0x1, [@m_tunnel_key={0xcc, 0xa, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}]}, {0x7e, 0x6, "f807da5317d4de708ddd82e370d55370a0e925b2eabef3ac73d516ff85ffb6bb5d2440bad54c8f9f42490c3d268f5bea038a838d6949efa196aebaab2d77400c7a47c1c078d97085a7cb30e0bc3a053f5c45923484c2962334d51eb2a134003963ac22c66a3260db5ae0f01fe2f884e8f940ece454fc8c95c764"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x9aaa5d4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@ifindex, 0x32, 0x4bb11a8cf0efaf80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000020000103000018000000000002000000000000001c80000014001100626f6e643000"/48], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300002004000000040000000a67000000000000d3c19990886a759a7df549c66d239a9c64c21a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x0, 0x0, 0x5f750e7cbdce9344, 0x3, 0x20, 0x10}], &(0x7f00000000c0)='syzkaller\x00', 0x100, 0xff3d, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 56.015335923s ago: executing program 2 (id=569): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendto$inet6(r1, &(0x7f0000000280)="800037bbfa9b28db", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @mcast2, 0xf}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r4, 0x6f000) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x34}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x541b, 0x0) 55.130960234s ago: executing program 2 (id=572): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x3861253e7e26f701, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000cc0)='contention_begin\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3f000000010003", 0x7) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) socket$kcm(0x2, 0x7, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc01cf509, &(0x7f0000000040)={r6, 0x8, 0xc580, 0x4}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f0000000340)="436e3cd90195398d0976771a8b19ac2e468da853556b7ed0cce5bd40589409eee9b08e7b5d621423cc9a127291548471d1df7f35f13d933b16c6b034ca8e6ec99b26808210", &(0x7f00000003c0)=""/169, &(0x7f0000000480)="c1eb120eb84d344791608196da39a34e3a1204700c63dc4fb3e87ebb9893929ed4f3846e66c351cad4ee2b30f0b3c88ee95a54501fe0fb546bb0883ee4aa2a628a492509bf064820a332c8b921d8a4fad75e", &(0x7f0000000500)="77eb2f70dfcb0687cd8c2bc0ea0d9619df0d4feda4d7b88f3972829fddbd514b40116352fbe4f2f2ef97e81e7769ae2d92fd2a2ff746be656e656f577fddf3298da035a4624c55a5a05e6f02fd45f794a67bfb1e35d2458574a8af4cb12b7d42a2066932fc544d663c673e5799039a349f55cad3a86fa166b8a4f56c9db26cbbd060153210cbac5c39ede7c2", 0x100, r7}, 0x38) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'dvmrp0\x00', @local}) 40.05365963s ago: executing program 33 (id=572): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x3861253e7e26f701, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000cc0)='contention_begin\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3f000000010003", 0x7) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) socket$kcm(0x2, 0x7, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc01cf509, &(0x7f0000000040)={r6, 0x8, 0xc580, 0x4}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f0000000340)="436e3cd90195398d0976771a8b19ac2e468da853556b7ed0cce5bd40589409eee9b08e7b5d621423cc9a127291548471d1df7f35f13d933b16c6b034ca8e6ec99b26808210", &(0x7f00000003c0)=""/169, &(0x7f0000000480)="c1eb120eb84d344791608196da39a34e3a1204700c63dc4fb3e87ebb9893929ed4f3846e66c351cad4ee2b30f0b3c88ee95a54501fe0fb546bb0883ee4aa2a628a492509bf064820a332c8b921d8a4fad75e", &(0x7f0000000500)="77eb2f70dfcb0687cd8c2bc0ea0d9619df0d4feda4d7b88f3972829fddbd514b40116352fbe4f2f2ef97e81e7769ae2d92fd2a2ff746be656e656f577fddf3298da035a4624c55a5a05e6f02fd45f794a67bfb1e35d2458574a8af4cb12b7d42a2066932fc544d663c673e5799039a349f55cad3a86fa166b8a4f56c9db26cbbd060153210cbac5c39ede7c2", 0x100, r7}, 0x38) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'dvmrp0\x00', @local}) 5.11351779s ago: executing program 3 (id=876): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xffffff67) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0x4e22, 0x3, 0x4e22, 0x3, 0xa, 0x0, 0x0, 0x3c, 0x0, r1}, {0x7f, 0x3, 0x6, 0xdcc, 0x8000000000000001, 0x5, 0x5, 0x4}, {0xbc8, 0x7, 0x0, 0x400}, 0xe, 0x6e6bb4, 0xc3f152fcfd773142, 0x0, 0x1}, {{@in=@local, 0x4d6, 0x2b}, 0xa, @in=@remote, 0x3501, 0x4, 0x2, 0x7, 0x244, 0x8, 0x100}}, 0xe4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000) r5 = openat$vimc1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000240)={0x9, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x40000000) 3.669006142s ago: executing program 3 (id=883): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000300)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x81, 0x6, 0x9b2, 0x10, 0x2, 0xd23f, "fef1fde00813f67ab071f25917c817ec39c4e6598e7b8233e0ba5b0a0d1b37b288537a8d4a4c85cb1408b2572cf415c144d37f453a895af71d7aef5f01f522580b66cb9cfafd756ecb925b38259ab836ed286ae404d074200d4f2e0bc71f89c8b6093207b9a7c28d0d643eeb03a98d60f3643ed2bbe2c604dcdac5f91007776210"}}, 0x199) bind$rose(r3, &(0x7f0000000280)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x26}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000180)={{@host}, 0x0, 0x90, 0x2, 0x4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000002060508000000000000000000070000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000a8240007800c00028008000140000000020c0001800800014000000006080006000002001005000500020000000500010006"], 0x70}}, 0x0) 3.329264151s ago: executing program 0 (id=885): socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x181, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000140)={0x5000, 0x1000, 0x4, 0x1, 0xb3}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, r2, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local, @dev, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x3, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x3c, 0x24, 0x67, 0x0, 0x4, 0x21, 0x0, @remote, @multicast2}, {{0x4e21, 0x4e23, 0x4, 0x1, 0xc, 0x0, 0x0, 0xa, 0x7, "e07576", 0x7, "4100fe"}}}}}}, 0x0) 3.305454653s ago: executing program 0 (id=887): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2000000000000376, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)=0x5) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x57c91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = gettid() r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r4, &(0x7f0000000080)="cd", 0x1) write$dsp(r4, &(0x7f00000000c0)="1359a7b637341adbff62ec6add15460c682304e4fccad9e34173348bfa33359731791967c61a51691f2e3d3d44601d5154e3516d956d4645ec724600"/84, 0x54) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) 2.776468588s ago: executing program 3 (id=890): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xffffff67) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000240)={0x9, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x40000000) 2.764428764s ago: executing program 4 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x4d, &(0x7f00000009c0)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14) r1 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15r1, {0xa}}, './file0\x00'}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, &(0x7f0000000000)={0x2, @none={0x0, 0xffff}}, 0x14) (async) connect$802154_dgram(r6, &(0x7f0000000000)={0x2, @none={0x0, 0xffff}}, 0x14) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000300)=""/102400, 0x19000) (async) read$msr(r7, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x89) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001400)=ANY=[@ANYRESOCT]) (async) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001400)=ANY=[@ANYRESOCT]) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x28201, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x28201, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_PIT(r9, 0x8048ae66, 0x0) (async) ioctl$KVM_SET_PIT(r9, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x10200, 0x0, 0x80a0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4], 0x2}) 2.330917889s ago: executing program 0 (id=893): openat$nullb(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'team0\x00', 0x200}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) readahead(r2, 0x0, 0x4000000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x354, 0x0, 0x0, 0x148, 0x1f0, 0x148, 0x2c0, 0x240, 0x240, 0x2c0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x2, 0x0, 'syz0\x00', 0x8}}, @common=@addrtype={{0x2c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3}, {0xffffffffffffffff, [], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x4, 0x5, 0x6, 0x7, 0x6], 0x4}, {0xffffffffffffffff, [0x0, 0x0, 0x5, 0x0, 0x6, 0x2], 0x2, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3b0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0x494, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xfffffffffffffd4d, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x164, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7}}}]}, {0x11d, 0x6, "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"}, {0xc}, {0xc}}}]}, {0x2d4, 0x1, [@m_vlan={0x12c, 0xf, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xf5, 0x6, "ac43f38499c6782c4fedda8ec5cdfbbf9445021e360ec7c508497e37a8669fcbc99101ae04b5a50547afb05fe3b5888a5a22e68fb197a2edd9c3e4a9db2f8883733fb826039ea5c92007799ed99eee8f4fd87821c8258e6954ba91b9579fcf84faa8764920d8f82755568b197d394251a36c41bce1ca33bcc6078475096358ea7674129a9796f3cfdec8dba5fe8f18906a16875e1f20fabb845c81b02ec168e7221ebf8e21799e4010b64a357bc0ad6e7e5b60ae0d823f36fa67d82da4e5afd8b82945f39342d9cb4950b9a0c833510936053d2240997e2090e801c441801efa8cc6a141a6b686bb1b309a88d79610bd42"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x6}}}}, @m_vlan={0x74, 0x1c, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8d9}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x2, 0x2, 0x7, 0x7}, 0x1}}]}, {0x1b, 0x6, "3205cb11a537b49790ddf1a167f3d087aa8bffdbca68cc"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x130, 0x11, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x201}]}, {0xfa, 0x6, "23f5f608e35261cbad8fe5941384352d4207f2fce7ef8c5fcfc0f45d83f8f8bcafa480381ee98f8b12a6d6fc14fc2dad4f9b79d77ce7a09b631e1a9c817393e246d624d1fbb50db8de3a2f4aeafa22317eea6e501e2a971c59268e6bd204d3a7a2f9f3c5185bfa86aeb665db6906e9e5edb2858a3906b84422113cd68b272716ab57c56c3a4426e9857ed3ad7cd476f6ac5f58feb8ebc13e9795d624d27a21e36beed922903aa7275d3501a60c981a0dde75495c9b4b2addad0b1d4910eda2e84c6d60b03c747844027d29918bf5560df917365beae39053f327c542c8542a07ff30a88ef1a90bef4179d1c774d894a32eb716495dcd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x494}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000002380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x2000000, &(0x7f0000000000), 0x82}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) 1.820574889s ago: executing program 4 (id=894): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="4c8329681a1bc3a3df62b466c1150ef7b433890ce775c11bc58ece9aa4f3fac27cfd25060198d4161443a9ef09ece46d1ceb6f79776ca82e3f625cc56829bd2963b2eaec3ce65cf0c8c95a7f"], 0x1c}}, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x0) (async) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r6, 0x8b32, &(0x7f0000000040)) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000010400)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009885f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4dbcacea29d4554d2d95ed4444e9bcbd6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa35e548ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f5823", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="0a44566bd8cd7422e078875d6a98d0a2dcc0a0c7881e44e46c6bf84253a3ba4cba8183c2236313cd49babfb721c547a5caed646bac2f2ea43e134e2a05d84cd813c9e2a96e68352f95c458f6ba48078f1d10fce44d869b4a00c68ca338ff3b877cb434f502cedfe83cbfb33d5233d081ec8ee2ac10e08194f6257183be922fc7203071a2aaf87478d1420237a1516e749623929f0d60f15e536376ba41fbbce034588b60680572f0d1d76ed122dc46252cc143f0e665e3f4e3f56bc454957265bd9a029cf8c7397ca01f95bc0e6601673bb31804c34307725385260df48c32527d74e51e5f26728aaedf9f379f5960f5e6e7146eff3254aaf54eb42834e1f57595a2b0333f5ca1474e07c2447c33dbe8f62f24cd788ac18475493edb813450e917837b125ad6f850e6af93e16828a6741c6ac00a4e25cfcd498f1b857e74a4eb8dce5ffcb3999031f1da13e9e6a973134ec04795a3fe91388fb6b349e668f49bd4c4ffa71a8662916219b4a2075bbfe4892cd1080f662005c1c2030d35999c9637f4836ae5745acae8ff0d745184e58241510d780f8a9aeeccb17b9213527a1b747dd23df6b4ac2ca4bd07fb7de6bb4bf8811e5c2f99f4bbcb3cba79fc483182bb981815a1b1ba5afad464631e6eb940a5da4e73787e9e0103bc7ea59cc8d63f740131a14c3cd034e91e885bd730521ba80c1071f25e0073a44bf8e36cc23a5f433378a13d2e2be7fbb8ca204976651924ae8637b339e883f4d388e239424031e20616341a5d51cd5d574382d518e4824dcdadba86143b4de3ff8126f0be226d1e6526a2af981d11092c428bc699ea208d4d38d63ef525b8da551207397fdb7d57a52c2062182072b017141de1b70bd15c758c88c65f6acffd5b5b0846c2a779660ceef46b22336abf817a24d27c3f66839b5f2f99131898dd372a124d9e5df84b24fa7be045b92fb225a735da1be1972c706120c391ffadf231603ffbb86d38ff2c76202a0f81317a7f790dadcdca1d109e4428f52246b17f6b5822f64d36da71167df86cedf76f4405f320f70a3d6d6307a13e023d9a23985fd9c95793118674346d7977654ed14a121c1bc0b3e8672087245e0721230edc667c1fb6bcdb22b3264b7fffedb589a2899096493ba97ce5fb0ad97821d0a4528465380e086b61f632eb0ce1f89eea2d8336217f51b4085433d426d404431360be55776cbb0f80c33e807732df3d73bf9d9a8e3b1468d2ac7c73a4aa239c96bbeef3965132a02254d887e65fbeaf517e913cc331ed36c3e326163d1a3aef7df9db06f8997668cc35e39813c82a440a73f12011bcc0b2abb993b99e79727d49e6656e8d9ecfb7b65c2c187ca6262361c6a7d3679aba9df764d13485874b1443f47d8caea64963011294082a9d50ed2fb08cdfaaa7dbcf782b7e8f8d8206dbc421bf9807727126b1ea364498f3ae693fe19f5b56af13df090892919c136c201a0d058c1863f136a3ff389cc510c17b1de341ca9a8d6ffd80fd019ac3fd9eeeb845202f2c5f207b1e7e169d57164855b9c3dbdf3c696124136d07a4de6be16b43352567a3e3bab0f73ccdd41255ffeb3ecb2bdf9eedd1d4332f4a7534b01b6331474880d4d07b464bd8c3b18d02fbf1faeeff70c8ae35b4eef002930dfa9a0c9350ffb72c82535a55280ac9c6d5384cf9aa3c66cc918497f51a6dbad608eee21f6085f85990983d0a51e5b41cb69ae52d60fa835045aaa0132be8b4dfdb10f521bc22b0192a4133040453c5a0a8bbb5d4c46ea25f2be5b0e79d71c4a13db6e9cb66db9f2c4804d41b9c26f96fd23c358ee9c8f57322540953224b56072af25b5c7041de560f1d4bde367eb3bbac949d9a9a86123ae62d0f4741446192e85772fb893b64c0e7c44a6e967af906b0f50e32be384027379c8dde251f549f94b16cee199da537d07ae89848da801b43bab3b65651402756cb22d17e602cdc33790ec8a5484a955bc8f487597ac9752166a405bbd7dfc9107af72b46e39d29afd2a0447e53377fd11997ab21db0f740699843a168720377e365caf88fd319dca184cadb8ffb4d288a0045b349be5ecb64561a2bdfa13336ef96aea86c48a5e405330a01c5390d482e6ccf4ebb2cf149d8b6274b2f9e6e1066004172a1a90e0db9838afafcb663bd693b2e5ca35858dcb82c05cbc87ec5cedfbb08daf55c472e250861bf357569342d90a667f3ac7fc2d4e54220444a97810ac14b0af6b043a07c1d791182635b983492f21db4a6ffee2d686238869e50b9bb73d75ec26087c0c8cb92ff25740b3995e4d771469b8474efef04d8d75f3544aaf84f02ad977948764d4c1bce36aa4198d6f22091b263d9eae96f1096fe3d8045949f189f33ec713101fea26ea043fe98b987542e33ab372058c64205e90a0e1f52d04b2c5ba7a5572ddb95f7d2b04f22e2e987c5d0f879db65718d8979da2a45cd333a5aacf96081977a9eb3dcee4afb44443ad37528c5a314d1ea08d1c3f0a36d4bdf77fc0caaeaa1eb2746a26683561b62d22f4e166192892e2ec1597f8bf6e89cd53840c8d7baea220e1b5e17df52a05017363727b0cc77ee61577a79b3de2ed364f3419a30d23701044b45ed3ba44b01804750bacf5bc959cffba86619f3331cc939fecadb5cba1edfe28952e0f70d2d99ce696dab9411aa2f7e7ca6207a3b16fc36a70e339aa5a618f6bcb0272968eba6edd95242825fe6e47cf1d50d229d4b1676aad0e9410aa1f2d6d2fcb9c4ec8e06c83faefbc2143de2367123bdb7669bd959782cf64def3a601c596611ac98d76df33e1fe340829340ba0a582d014ffacf9a9394300ab7efd60222cf96a99e42dae6e1ff1fcad1e3280ca07de5ea7e08b264a60015ffb76cc72d70ded58a1e2f59906f3c76433e4353a94a2a49f91103e2b5491ac7f66d54ae2a0e82099c4c9bd683971c2d3dd51601bf5e94f7660158bc6fdc1b2ce3d689a3aa64c29810ad7d9e91e49b72e6f97230a2a966434bf5cdb339556e6452e6b446766f55df45219fc02192cb73076285e74eb848229bffd812f6058782b3f5d0efa4d7b0d3c120931aa8b679e318ecc5ea539e3dcaf87473e2573189ce500b616957d88a09a014baffbd66990e41a3432891279cb82d9c4b50675ff067b76503535631aab9a29ee7e274eded1cd542c801bf519e1119fbab84f57c7686209c9e5177545bf0f403609c81fe6d8f2979d886c43fa3053b38b6e21ec3632011c97451d8409f169f71d226e61fdd206ec5f962b0277eee286a694ba5381493941ed44b3659994d3cd2a8c9c3bdb2f63d77eaee180428d7d6df86f6738cf7adb4b863c9ee9da9904bba4c2c3188a1ce31c5b082857e5566055c8cf58a9e9f7624d220b8d3093cbc6eaed7fcf15fc700ed711575aff5fb5cb7e206c810ea7a766d2960a1356687aad2ec171e4a1db6540a9257385a1e8b9f029485866c32e74c1a19e1113040c9d215f9f4bb4311f0d587b9cb6d11cdf28d4cbcdde4ee7831e5c8608335a1e41883b55b3609b9c4fb8489619481dffc6224e4c98b1e89831187b28b6bcebe7f78c779f5a2896e47bef8e607811b435c517e8e3f19d74752d7ae99cb7caf69c0f977f1b94f8f11bdbf35444fabaac2fc0e568d3b5b3b9f13162b1fa92615bc16492b870fc85c79c51b6516276f8e559e769a8d37a2335d67edbdbe2d4ded10e79ad26629ba6de862acb27fa7d0607a5c83840e446ca0d231ae9175ae9cddf35443ef8434a61d54b704d2b46835ca030d4325dd62918d361c27bd6e422f3f8431ff979953c88a5f3d07a84b733b2fffda5dedbc2ba876ea653aaa2a8446019d2cb69c4c7023177af7b5de358c4a93ba969415c7e3bd3e10a17653cc4c0031dc779d47bedc8d0f77b9fb39484e47d1edfa16a4839d7e3c1f4147bf7a5a41395980d0234577d433c4f3663a648865cf5cfc4a713bfde809cae8161f044770d8f3dd65f183392ed73dd0512951dce40dd6f68927144d09a6df1225769a47a2f1dc7da5a0e5651dc0198c2feb7de7aae5675a3753272294cdc8f05b4bf1b478d6e2a18f6a9dfdc42421bae7072786a4122cb3fcc61b2d0bc9314b92be8be3f9b8b109631305e06b52c0bf621d577f014d0572327c49fd705b45794aa8f198b37c139c4a8008763c654af912552549203733ad09c667104a3c1756dacc50af3d19bd996a99a7f857d9ff8c337c6feb16cb7fe282cbf8c975bdb60a7ddaa056352d9cf752f2b49fd0ae9dd7a263c4e1c1a027c7d45529b5a49de9f2306862b8ef8d386594f9909aabc849c5955241d192ab57d52fd2c7db0e4066bc3f70445599a60016de606b30a92b1bcbcd9dc8cfb492a6e66aa2be612e1d5f7fc61989d51285f1ef8a4e724a46c36bdaa6bed82ec972fe3e929a7a708397432b13e266d9a66954e011a158c9bc031587f9315382dfcc2334100d99b7d50b87096970d294261dd3263bee8f5aac2d86f070d70e278ecca4cf6ff05e511c0a65d6da81b68d94cd635e9dc98c1259fa2060de60d05117090a9a36d7b7aab999cd28a6c0727336312ede8f7fe0118e22aeb4094a64311fa766412d68ee04a93a1b9e2da91afcc91a1fc3c216f0aed6da74baed3242e620482ae01d3055562d16cab58500a5f41145d2275f6da8e24003cae19a7bdb9de8ef57965341253901962d846fcfd687e32fc81e716c42fae279382c8a750c9ef9543c942ca644287ec9cc921f99e9c901810a342e198f3b60a5c75aa91e67c1a6f08008841ddbe0766604b38a211929682303ce61e8024ea4589aa955886adc98f365af515daf30c376eb2b96fd78d46bc3999935a336c89f02ebe822bb5db6a1fd145c4d403b88f17b3fac670b2eb1296b3a5a7055556c21259695c248696162fc179aa1b4ec10e022ea7bacd0255937f9aa89f4d4c58bdedb54b43fde47268552f51b949a9cfbdabf6e3172853e6de9d0b0d9643349595769e98dab85282c49ce8c52301c04710a2c43cf63decaf65243d4756015b681bb680fdd1aba59d63b54e2ebedc62df32e575a95adfb2b18a79688b23ffb498d03012250f0dfaaed5353025aea7a35c8a89873b5f73adb41cc864b9f86e14624d70c917f05e47bab793958de9957cf23c94a9807b30bd7574edf66250224b887a8c02baa05cc02abd4c008339129b3109f1b04da29a9edf472991a440fcc8e586bef32b8c95fcd3d6702b9f43bf41454d5fe72a1f1ac80604c93dc9e9abf9a824c6d45e65b4f39f8341799dce4eac5e9036450ba7829221fdac7ec394c0a8e9813f5aad3ad0052f5156b3dca979e9c9a8755d4be2502727d346889210a13e5391951afef1880bcbd2a9ea020c9b2946563cd40c40f6202bce9bd1d2a1bbc3e5e6b2a9d2220343fd1ff5cde1b4d27c0601b8890b6ad8d3d80075a23725bddd81c15cd1b63e0123c4ac01de7b62b1e0fe2b72eaf400a1bcc63f76316d471eb191c931d5350e83a110b89e77668cfdc47734b91c2268fbbd89ce15b50b84c423a1f27943c32739e99b046a665c966275dba2dd6449b69ec53e5cb9cde89afe4149589c7378f5f3648d748bf3d46fa53f50d1228714252a328cebe7146d81dbb2f850aad492bc0697e2760dc9c60bc76a010e85110c0076478a21b47e5fbc4f7397a319e1db642e305bb1330674d96eb4b421f0f2131d125d4cec8aef4637dce572bad633e076972c9147a48b4c67135ace6a4490e16fa4731d62864e910762f1eb58afa63031c78c375a90147ceef07cd1e8155a649f2558d67dba9d6d2e012a3af4b603cd094e4a3b2e30c65c80cf8d9b2cb840e9df91e70162b80e74be96467574ca0ac5ad52238163283c556f0865c2338d6dcc73fa330634f6e5ce68e766df2db5b7edce0d98203e1d4374e7eda3558667229ea2daeb74156cf5895c4afb460cb4037456b14d9b748ddf7b8f3d5accd3e0d8d2eca2a78056d945eb4383078cc09a3a77736ce4e91f8174fe03fdceef8df92a50c2797b0cd06c6f1ae95650e48d103fb269c0a004d62237b77257807c8954678476030d788543d84770a1533a72141c7ea919e533bc182a3306782233d1a20153fa3e9e315a856e75f760bb7f943ea2f5956243f75fdb241ddfb4c081219ebb4eb3c3e989e3d953a93d96dafe1142c29434a554a92d319747e618cbd3af5202e51d30761e81b6c2d6febf221e3147b63171ea5dbaab4cba1b0fe7dc9cb249d74bbbcd7ef11c35fade1132ee4b74dc6090cfb6f852fb01d79aa0e5ee6897b7c021c6a1e69995e0546932c56e65b2581d619fc59f9775f3e8573b3c4926b8f6a9041512788d11a6fb279941ce24fea916e6568db25f1fcd3fd1e907fb3c45ddbca37230f5b3ffd48cf9c2269ec068d0bc528aac14807636c9067c5e32f2c2f259f6502ffffdbea40ad1b6b4a1d819fccc5c77da908204781747ecb0f2245dfa2941a9dba5d11ad186ab0eb87173dda634bd5a9221143e244c793d6262c904a64ba36cdced65abdd3be06d534b649b03791f7ce41e9abdea4d2c17f14bfbee0455dfa791f241341c78ce24cb8b86a9e332787d4ac1bdc20d022ae9588e8d63c22925d5e507bf41faddc17e01d3354c597908124705d88131b2e8ce8d04d660ce4100b5288d750d996e069bca1fe21f9b84c97011dd14c95c3cd538bf619b1df241fcf286c7014f8467a7ee81b2bef1c3bc56573894dbb54efb6a2fff0302b26c7589e08993e755059ba8b94fe728f1fdcb8ab10a5133d0434973e6667c25288b6e5e2d75202aec6bc0255177a53ea7c666afa79dca738a9d20990f118075b9f1cfb8ff1e5be75b49635bcbf43cb3bf97719dae8ec5c5528fcf89a9dda8fe6c08f7f737d69ef181ad3e35cf8e46efd94358b4640de1c387e295ae38edd0d5b80287f022895ca4dd9532bece6b2bbe100a83fef98dc5af595f4f7e4747ff5d28ab372db71b7c1c423183fa8ba4d823cc05b7be8819dd669b6517bd753e83f4d407a72dcbfcd0e9b2d5daef7fa88c1618236375a50ad2baa6a5e0551e679dce352181a1f9e72f5fca8c323b945bdd92e2d424b3e75041734d099f778fcb1e6407c80e7724d52ab110b02c0c9d1d4b78df12fc443fd8dc8fe82d9f3c8da7b87fdfb11e912c97a4e61425ac7b3954cb2e7e46ed0e24cc0c961dd5c2fc619a9e5e3550ca7bc21f2adc1a85c5b9dade357f1ecfd72646b27e7ab59b1b4d63c63082907b3be4cda341c49ade8992af489d11cf285b81a34c5614284ab4bb94018009e2333aa8e4630a9f6792b44b62d9c6e9d1855ffecab30c611cf5dc1e6ec09088b83a4c2cda9e5ee080df0b5e36b9badc035d6991bfd82fbb408faac15ced6ddcc917a9249b767f8844d6458411c1a31ff84e272311ea968ed3ff02f2e0caa47b1a6e030b07984c07d71e740420a9ed47b26799feecbba4f26dcdb61c9422e940550bfafa99ef0f826d2bcb1d7862016abe81d021be29adabe2c399fb9aa2f3ac472012b26ccd4eea2957343b06ac8ad71a637b8fa209ab6d4351fae53a9af0e920c043df94eccd5c1a847cb17d13589021f1a621b457fbe02a16f0f4b9dee0e7eb9358b8afd999d47f5143d49d4aef227f5b06ecef1ed71207e3526ff82b6ec69d3e8788f6c476437fe96f0533394027cf48e3e146aed7943d872bc35de34f7fdba13e5e1c259a68aa8050a813aa734f202ad7faba9f64b16f5068b43bdfb726e5fa54a1675dcab0697fc47a4fa3dd472022cc0d317d39076ad9847e72e1965b227f3e49ad6e8e742305bdd05d0c88b5859d6cfc98cc47a566269dbc4c200615f3e995511a69d8e724f0c842c06c46b5460dca83137656aae785e8415cfb57d57265af9c1d8f126081bcb218a427b80ccfaa95b8bd3f87f58f09ac52a2a47bbff99b057576d26876fa758c8e41172dd2bd45742a30d55f1b65bafc0c7c9c785f583069caf6de080c9057238e110456c0f9e8d898918b6981011f8dd17c55caced49eed32839305ec37b45e8cc4c35aec0c8a4cac54035a941842e5d19fd298757799c4a501718bf21a024106a292626d4eb3c784119b9f5003c6cdb36e442c04ca5b0ea59efb63fe90f9e218fdd9f0864f407cf8edbe71f3fb1d3a587ccfadbf7a5acbb0713b1ca1991e25e75738ca68e1817d08fdbacfab6900242b91ed9541efd2ca469bf7acc7857185d47506fd0a735d7b542949241976cfb1252f2e490fcdef3166f993ff9a812d0af902001a4f239989c087b41de65f83af93e349a2d37ad3b59c5009465e14030ecdfc8fec2d27939af2311bc5d544b19220b12a5782deb83f0e193f57cc4631d8746e7d0736e1295128f3a48aeacf2952be3005b09de00c9a4565e07692d8355a947d072de4324f2e8f3b2f01483d31999826b4ac7bad4f6ae099225f751995f463e5f762b9671ebb79fdfc51b5080af6fae4837a4e00a76b775eaa6f1fa1479b6afe5d66ac5fd148fdc4750d6ae1e268da446ba08dc4d7c872bd6401f1dd6b226e91bcf77c085e3c115f49d05a69c4e282caa7b8a60a1fe09a2e98227a2cbaa838d6053cb56bc7cc84e6ffa81c18ee26c1b32c2ce205c8fee3b2f4fa8d983b4901c80d766a3299fd62e3339a697305ab7cda995b3cce61e3372f152841ec1d540c9f6cfe2871e7cf4e6997afac85b1c05bed03a5e017bce4b45b0903e9c60cf3538df7df9d8fa93b53856fe93f522f723470c553799c90c56fb705040ba78141f7e5e9117f4876c45884edd5059c8588fc39f9c6268038c4a462a4a5fbbecac0daaf54876ac0217a9ab6f83ec52f15a170005e57baead0e8b1570508e10d2c9808ff3a437436d93ffd02c72c703e2e1917c0c82c3a4b4c03cb91c961451e3f6e2d9d9e58ac1810831d7618f81a34c23cc14029326f16cd043e82ea3bea5c6bcb84152d140659d1a4f135cee82640f96e177c030907117a6c6a8049fd3815fa06249ba4b37c2381c0eca124e7f5abd393c6d175ccf0c5fd4a6e9e00d5338899ed03b5a5023dbe4c6ae1f1ffc192411049e6fa34adeefa3b2e6b45165f341e0b853561ea0d183d93100efe80237ab878312281d607ac8dc10f34e6840a6b6d5c2975348a15761326504c24d5ec648f5714254087bd8c53fe131461ca4cea09ab52848b2526edb91a2bf6c0287aeaac51eb720507d66522ff2f94d90ec584f6088910ee079538e43cf8db55e2f0d70a60eac90eafd82480d11ea5dd795a05a698c2961eedad5f8a79dc3ffa92129f76b8d795e24a1905fc82f11c40d68d11af282621b9a2e39a8dd146013bd3a044f55366af078f7c15adc548029ba4ed896ddb646d74e3af69d8597831e08eb4df1b7ed54b8f3b327753ebf47d50a215c461cd422483c8f2d54f010fa9b76e5afef86b1bb8aa6d4b0c5c9ee798791379ed4dea481feb37ea18b5c7c0146aed32772245cc39628ecc13e03b76c302f80ebcb50279fa2ff74139468a23f36881ee7e7119d8040f90c7e3d8f75d80624d17d881e363b4913eb02e73224c7dac1077d19cc9063f8831053eaa9ecf87ffc31140f6a0a47869e5a5660e5d53b404c34e17b4693df9d5418131c8aaabb0e15aee98594c57cfb2202f209a4529a293b37ef68a2e95fb8fe5142e974f1d3fe3a08ed169379387e96ab5d927771ca7157e9bbd2650992680105dcd6a75829e0643b5ad708e5c65ea4b04b3eeedc24bcac8152cb887f32436a11efab6dc2509fa42d3d31e8aac73e9e8e84a88d7096b9549bc4a879d8f824eb63809a253409294f359b76ac3f031e6bf74a4de018f1c666239bae7bb01c523f53efc922232415d68264872296967dd150af095a12717e7eaeeb98f48c84a70fce8063790f9c2f43db477175e1c8da911ce853042d84e7f24df59e8caca5ee93e2daa6aa18e92930b4495dc22ff6729964942d1baaccd07233dcab828c2254f719132271e9239390e2ebb74ddde7284ebb8955719f7d086cdbe7eef6d7298576fac821eae5a8b6ddf9d88a1dcb32121b6d3ce49c245dd675e8a3b2254a9998ec0d0d7d9570bf6b6db0392c5b060872e154841096351d880f71bc00e5a576b14c26f85840c93a0c424cdbbc57b1d1212e300a874921c1f9c0de14a8cf61f8ebd03eee5cc79f34a41235b6c72aebf48243250c6dae8547b6634374e0bd073f7c162d4226a26032bc154eba7964b2975a8d35f17560a5312cf124741c74774f9a30f8d5ddc891e78bafdaf4f86d16d4c1363d23708463ab1314e3bade23316c7fbf51d2a2417da5162f9112c4331eab695d457e3712bb5f880c68367dba95b61f6f6a9297e477eaec615dff2cd3222f21d90abd8bd4b12fabb278c9fd44ce1ed024ccf908cb4995a1d9da53f62532203d7079e20a46b2b069be4b13a52a81c3b5227f57d6c184945a1799e80dbc7cd137e3427df352c0c0fba04f3b7fb02aa36c9af4611ebb51333326f8f750d662a0a8b43e30acaaeaf2653431b57e95a77adf8261298f791d200c02bdf4b821f7d09f972dd165ce92109c8dce081bd0bd53f598200bb3c5d875bbf1be2a7dc68355e42c515c20f2d72cef3d680a42e8a705f17c6ce15f47b144e55a3e566cb73ba5ee18c5a1535e5f4b4c1774736ed1654bc024b6c748b48d9cea48a06a571d264fc876f9afb2bb43441b39bb3f9e844f70dabd4d0ea06a46c1361a60ef5914411397600e63ecaa65f6598b4ce6f3a967c93ef0697e268b70d0637709ea3fef1da8afed0d2ffd36503197efcf68e0a2cb10b4104b209c133fdbe11e07a8d5c511045d19b69c63818e55168de4357a99eed1d8410664efdc866451de9bf6794d9742e2182449e2ae3869a01f1ed7ee37ffe817a38c502b8243a1c05f1ccbd349c7b9864cbf45b5a3c6f395e4a6602a02bb80ccac94ab66d67dfd8e5cc6fa6321e930354a2c40a1e8d360752dbdcf00134d34a21b24b9acfa2cd37f3c191461f4c9d8243176f42a8109bb05c37ee715ceb027861cf71268f283035d71ce4bae4ac5f79ee5211475ddfc33f02dcd91276e5ca265e5b9104222fdff5969f434a4412ba9fe00aec27f559b63c25a9e8d53c063db549035ec2c8e91e1a6247045541a7e28ff6c13e9f29a3683e55731d80d714b9d5801cfbf617aeb6651290293ac0f4e246df99e72434772b7d8494485537b7b2063c7bc5e80eb6c7ab6647d01189cc910aae2fe8249a0fc3226caa8994b476c6777bf113d153c43da337a6304fd10582d58919596a6de42ad500b62c1e6550d8cdc059496073a48110b2fccb42c96e3e3640f1a87fe379779adcd8836aa8dc545db39bb3afc032c16977e150e9572c3e5f8e04bc15497ec8217a0e187ba097fa95a855af66d47a105bdc3c837091daf5fbeb3ee5ce10b132f912b89ea1c6b9ecb8fbee0e4ea4e43b835ae583b67aab430dec741ea03195fed3cc164472d4b571d166ae20e0a309a80ce00b0fb349f7641f41a31993a8bd9ee092aa7ef16c9563e4db6236c9e702710dc95b198f533b1140441a1827aa4bef6a01c689127eb7028d1bb083edc8a08b8d239389d99948f1290623ba908e6e1c606035b70ba7065f8011451151dca715fb920b4d87858f01c5484df0e63656", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f000000a200)={0x2020, 0x0, 0x0}, 0x2020) (async) linkat(r4, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000400)='./file0\x00', 0x0) (async) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000005c0)={0x5, 0x9, 0xff7f, 0x3c91, 0x0, 0x8000}) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x78, 0xfffffffffffffff5, r7, {0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x7, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x7}}}, 0x78) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x61, &(0x7f0000000440)={'filter\x00', 0xcf, "f9d3ea9eb759d7e52c32ea5b4b70973d013931e76e40576439d5f11deb6eea105850e12172254d5550263a69811573ab967cfda8b1899caf0a5efdb5860120d39bcf8a52b2d15e8256243680227552356d8dd5d75c1aa21999277522ef0c3320083cf13381ab45f813c66580806951771a44fc329b70158013042701a932e1feb50c3a38dc86ac6ac701faeeb2a5145f6e256af7cec6a7392c76f6301d7af7f4a471167fd3fb3adb3907c4fb5ea2cdfaee1fbc200e65ceba1178103c5631c1cbcc31364fa159d5c1c27a65bdb04243"}, &(0x7f0000000540)=0xf3) write$FUSE_INIT(r4, &(0x7f00000001c0)={0xfffffffffffffebe, 0x0, r7, {0x7, 0x21, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, 'btrfs\x00'}}], [], 0x6b}}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "18372b6dba265d68", "1c7ac968494aaa313de67bfe9c17855a", "6222c016", "68e9e3f1298d793f"}, 0x28) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) mount(&(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x42a240, 0x0) 1.710779978s ago: executing program 4 (id=895): r0 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180), &(0x7f0000000680)) io_uring_enter(r3, 0xd0, 0x3ffc, 0x0, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_mr_cache\x00') (async, rerun: 64) r4 = socket(0x2b, 0x80801, 0x1) (async, rerun: 64) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x8, @local, 0x3}, 0x1c) (async, rerun: 64) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000580)="2d3e46ae011f64177771ee79000079fc03ea9e74ea21dba0604cd52e070b5cc63c1c0ac8e2e830b8a76d2cd827f113933fb5d60d30bcb0810ddb441cee9f23d51e9e4b6c82b4e510310a46ad98a93cb0cf7a5bdc0ca69a6cb329bcf9b3329ea82b04fda00105b1a384f2984091ef4b35253461d1777d0a412fed5c23ae333e260d71dd", 0x83, 0xfffffffffffffffd) (rerun: 64) r6 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) (async) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c09dbc7b73a7ad36e7f288650", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={'crc32c\x00'}}) (async, rerun: 32) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0) (rerun: 32) pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffffc, 0x0, 0xffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6, 0x500}, 0x0, &(0x7f0000000540)={0x7, 0x0, 0x10001, 0x7b, 0x101, 0x0, 0x1, 0xfffffffffffffffd}, 0x0, 0x0) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYRESOCT=r2], 0x18) (async) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0xffffffff, 0x0, 0xf}}, 0x0, 0x0}}) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x193441, 0x21}, 0xfffffffffffffe27) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a000000ff000009"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200"], 0x5c}}, 0x0) socket(0x10, 0x3, 0x0) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async, rerun: 32) r10 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) close(r0) 1.638738498s ago: executing program 4 (id=896): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x35f6, 0x0, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0xe0fc, 0x4, 0x400000, 0x3a7}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r7 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x1, 0x0, 0x0, r8, 0x0, 0x1f000000}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000000), &(0x7f0000000600)=[{}, {}, {}], r9, 0x0, '\x00', 0x56, 0x3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, 0x0) io_uring_enter(r4, 0x353, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x40406300, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x4000000, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) 1.35067831s ago: executing program 3 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) 1.246087672s ago: executing program 0 (id=898): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 32) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) (rerun: 64) dup(r2) r3 = syz_io_uring_setup(0x7bf2, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCFLSH(r6, 0x541b, 0x69de07874f7f0000) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) (async) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) (async) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r7, 0x400, 0x0) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) (async) write$binfmt_script(r8, &(0x7f0000001300), 0x8f) (async, rerun: 64) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)=0x40) (async, rerun: 64) writev(r8, &(0x7f00000030c0), 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) (async) writev(r8, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000200)={0x0, 0x40}, 0x8) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000109050000119400028005010100060000002c00018014000300ff02000000000000000000000000219b9db834c921fc00"/66], 0x50}, 0x1, 0x0, 0x0, 0x4040004}, 0x44000) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) 1.245904799s ago: executing program 5 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 1.245508427s ago: executing program 3 (id=900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mkdir(0x0, 0x1e0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x8, 0xb6, &(0x7f0000000140)=""/182, 0xc1000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x237, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_genetlink_get_family_id$batadv(0x0, r6) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10000050}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f00000000c0)={@lba, 0x3, 0x10, &(0x7f0000000080)=""/16}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'team0\x00', 0x200}) 1.191062081s ago: executing program 5 (id=901): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2000000000000376, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)=0x5) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x57c91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = gettid() r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r4, &(0x7f0000000080)="cd", 0x1) write$dsp(r4, &(0x7f00000000c0)="1359a7b637341adbff62ec6add15460c682304e4fccad9e34173348bfa33359731791967c61a51691f2e3d3d44601d5154e3516d956d4645ec724600"/84, 0x54) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) 1.181829285s ago: executing program 4 (id=902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010f3bdac91f0403b01cc202f5d9400010000000000000000000000000a28000000000a0101000000005e1a0affffff00000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900e4007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) write$tun(r1, &(0x7f0000000580)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x4, 0xfa, 0x1, 0x6}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000480)={0x1, @pix_mp={0x7, 0xfffffffd, 0x32314d54, 0x0, 0x9, [{0x1}, {}, {0x0, 0x4}, {0x0, 0x10}, {0x0, 0xfffffffe}, {}, {0x3}, {0x0, 0xff}], 0xb5, 0x0, 0x3, 0x0, 0x3}}) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$9p(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000080)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x6, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x1], 0x0, 0x10, 0x33, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000003e80)=[{{&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000600)=""/30, 0x1e}, {&(0x7f0000001680)=""/10, 0xa}, {&(0x7f00000016c0)=""/148, 0x94}, {&(0x7f0000001780)}, {&(0x7f00000017c0)=""/71, 0x47}, {&(0x7f0000001840)=""/81, 0x51}, {&(0x7f00000018c0)=""/65, 0x41}], 0x8, &(0x7f0000001980)=""/200, 0xc8}}, {{&(0x7f0000001a80)=@sco, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/96, 0x60}, {&(0x7f0000002b80)=""/177, 0xb1}, {&(0x7f0000002c40)=""/28, 0x1c}, {&(0x7f0000002c80)=""/214, 0xd6}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/17, 0x11}], 0x7, &(0x7f0000003e00)=""/80, 0x50}, 0x9}], 0x2, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.130374827s ago: executing program 0 (id=903): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$autofs(0xffffff9c, 0x0, 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffff1, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], 0x50}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000340), &(0x7f0000000580)=""/186, 0xfffffffffffffef3, &(0x7f0000000640)={&(0x7f0000000200)={'blake2b-160-generic\x00'}, &(0x7f0000000480)="ae6aae40435e7d8b9218283ff31565a78f976b7f0513ba3dfa852de054ed640dd9733d9679fe24007a9a2e19c10c889ee25c42", 0x33}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7fdce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x20000010, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) r6 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x8000, @rand_addr, 0x9ea}, 0x1c) listen(r6, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x5) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r9 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r9, &(0x7f0000001500), 0x588, 0x3000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) 738.919441ms ago: executing program 3 (id=904): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r2, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r3, 0xb}}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="09000000f5e57aa04e", 0x9) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) r6 = syz_io_uring_setup(0x4dff, &(0x7f0000002840), &(0x7f00000028c0)=0x0, &(0x7f0000002900)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x19, &(0x7f0000002f00)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) readv(r8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000100)=""/172, 0xac}, {&(0x7f0000000340)=""/76, 0x4c}, {&(0x7f0000000240)=""/191, 0xbf}], 0x4) r9 = openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0185647, &(0x7f0000000400)={0xa20000, 0x200, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x990a66, 0x7fffffff, '\x00', @p_u32=&(0x7f0000000200)=0x91}}) r10 = signalfd4(r8, &(0x7f00000001c0)={[0x101, 0x1]}, 0x8, 0x800) pidfd_getfd(r9, r10, 0x0) io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x85, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x4f, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x32}]}], "fb36eeca6fad50b375a22a584d16ca"}}}}}}}, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r11, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYRESDEC=r7, @ANYRES32=r7], 0x24}}, 0x4000000) shutdown(r11, 0x1) 608.954883ms ago: executing program 0 (id=905): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xffffff67) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000240)={0x9, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x40000000) 270.779373ms ago: executing program 5 (id=906): pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x4, 0x4, 0x0, [{0x3, 0x88b, 0x2, '\x00', 0x800}, {0x0, 0x7, 0x7f, '\x00', 0x1100}, {0xffffffffffffff8e, 0x2d6c, 0x448, '\x00', 0xa08}, {0x2, 0x2, 0x8, '\x00', 0x1001}]}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)={0x3, 0x0, [{0xeeee8000, 0xc2, &(0x7f0000000340)=""/194}, {0x1000, 0x8e, &(0x7f0000000440)=""/142}, {0x4000, 0x1000, &(0x7f0000000500)=""/4096}]}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) 114.795352ms ago: executing program 5 (id=907): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100003050000000000000000000000ff", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0500064000000000"], 0x48}}, 0x0) 364.088µs ago: executing program 4 (id=908): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@generic={0x6}) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=909): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x78, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x4, @loopback, 0xf6}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e22, 0xfffffff7, @loopback, 0x2}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f00000003c0)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000002000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @private1, [], [], 'pimreg1\x00', 'wlan1\x00'}, 0x0, 0x1a0, 0x208, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={r1, 0x5, 0x2, [0xfffc, 0x3]}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="8520009d959ed82c10a49691510400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800014000000011080002400000000108000340000000110900010073797a30000000000900020073797a32"], 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x0, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet(0x2, 0x2, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x2000, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000780)=ANY=[@ANYBLOB="06ffc0ffa22c00000000000088a824008100400080355cd784acac1ac5273349cd4aca44248316b6c35221837c473f47a234426cb26316250654992a019faf2d54e2c070754b84c55d77b853a6aca44493a8ebf011088a3b5e80dfc0255c7241587bf836e2456954f063617d8c2c6bfd2c1b5af52e08e73215899a8a80420666cf46c551f98ebbbe07ac919eb62b7bac0a91de554ebf0aac6f283db01d1aed1b4d1daa73bf804927756e6b5ebf8b9d4c7552c682dcff70069046a27435da7043ea14ad93e035a373ae1cfe1db439e714d37b1b"], 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000090000000100000000000000"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): 61][ T7031] binder: 7022:7031 ioctl 8818564c 0 returned -22 [ 97.012702][ T7032] fuse: Bad value for 'fd' [ 97.148067][ T7037] binder: BINDER_SET_CONTEXT_MGR already set [ 97.152446][ T7037] binder: 7034:7037 ioctl 4018620d 20000100 returned -16 [ 97.158626][ T7037] binder: BINDER_SET_CONTEXT_MGR already set [ 97.160324][ T7037] binder: 7034:7037 ioctl 4018620d 20000040 returned -16 [ 98.792935][ T7066] usb usb4: usbfs: process 7066 (syz.0.233) did not claim interface 0 before use [ 98.873040][ T39] audit: type=1326 audit(1734760731.430:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.3.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 98.879097][ T39] audit: type=1326 audit(1734760731.430:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.3.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 98.884758][ T39] audit: type=1326 audit(1734760731.430:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.3.234" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 98.902563][ T39] audit: type=1326 audit(1734760731.430:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.3.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 98.911513][ T39] audit: type=1326 audit(1734760731.430:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.3.234" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 98.917205][ T39] audit: type=1326 audit(1734760731.430:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.3.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 98.924563][ T39] audit: type=1326 audit(1734760731.430:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.3.234" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 98.931411][ T39] audit: type=1326 audit(1734760731.430:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.3.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 98.938933][ T39] audit: type=1326 audit(1734760731.430:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.3.234" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 98.940103][ T7070] netlink: 'syz.3.235': attribute type 10 has an invalid length. [ 98.949071][ T7070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.235'. [ 98.994390][ T7075] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 99.074460][ T7070] team0: Port device geneve0 added [ 99.114302][ T7070] ucma_write: process 206 (syz.3.235) changed security contexts after opening file descriptor, this is not allowed. [ 99.117971][ T7070] capability: warning: `syz.3.235' uses 32-bit capabilities (legacy support in use) [ 99.460535][ T7088] netlink: 'syz.3.239': attribute type 4 has an invalid length. [ 99.463386][ T7088] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.239'. [ 99.504040][ T7089] usb usb4: usbfs: process 7089 (syz.2.238) did not claim interface 0 before use [ 100.446900][ T7100] random: crng reseeded on system resumption [ 101.165888][ T6011] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 101.349212][ T6011] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 101.351548][ T6011] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.355229][ T6011] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 101.357668][ T6011] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 101.359899][ T6011] usb 7-1: Manufacturer: syz [ 101.368882][ T6011] usb 7-1: config 0 descriptor?? [ 101.425830][ T6011] rc_core: IR keymap rc-hauppauge not found [ 101.427530][ T6011] Registered IR keymap rc-empty [ 101.429660][ T6011] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 101.433950][ T6011] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input14 [ 101.485873][ T1910] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.593757][ T9] usb 7-1: USB disconnect, device number 5 [ 101.637782][ T1910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 101.642142][ T1910] usb 5-1: config 1 interface 0 altsetting 170 bulk endpoint 0x82 has invalid maxpacket 16 [ 101.645088][ T1910] usb 5-1: config 1 interface 0 has no altsetting 0 [ 101.650614][ T1910] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.653053][ T1910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.655649][ T1910] usb 5-1: Product: syz [ 101.657546][ T1910] usb 5-1: Manufacturer: syz [ 101.658931][ T1910] usb 5-1: SerialNumber: syz [ 101.661558][ T7118] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 102.009308][ T1910] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 102.015975][ T1910] usb 5-1: USB disconnect, device number 5 [ 102.049631][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 102.088159][ T7135] binder: BINDER_SET_CONTEXT_MGR already set [ 102.090432][ T7135] binder: 7134:7135 ioctl 4018620d 20000100 returned -16 [ 102.094021][ T7136] binder_alloc: binder_alloc_mmap_handler: 7134 20ffd000-21000000 already mapped failed -16 [ 102.094226][ T7137] binder: BINDER_SET_CONTEXT_MGR already set [ 102.098299][ T7136] binder_alloc: binder_alloc_mmap_handler: 7134 20ffd000-21000000 already mapped failed -16 [ 102.098751][ T7136] binder_alloc: binder_alloc_mmap_handler: 7134 20ffd000-21000000 already mapped failed -16 [ 102.098851][ T7136] binder_alloc: binder_alloc_mmap_handler: 7134 20ffd000-21000000 already mapped failed -16 [ 102.098959][ T7136] binder_alloc: binder_alloc_mmap_handler: 7134 20ffd000-21000000 already mapped failed -16 [ 102.099060][ T7136] binder_alloc: binder_alloc_mmap_handler: 7134 20ffd000-21000000 already mapped failed -16 [ 102.099168][ T7136] binder_alloc: binder_alloc_mmap_handler: 7134 20ffd000-21000000 already mapped failed -16 [ 102.099270][ T7136] binder_alloc: binder_alloc_mmap_handler: 7134 20ffd000-21000000 already mapped failed -16 [ 102.099361][ T7136] binder_alloc: binder_alloc_mmap_handler: 7134 20ffd000-21000000 already mapped failed -16 [ 102.099452][ T7136] binder_alloc: binder_alloc_mmap_handler: 7134 20ffd000-21000000 already mapped failed -16 [ 102.126979][ T7137] binder: 7134:7137 ioctl 4018620d 20000040 returned -16 [ 102.129594][ T7137] binder: BINDER_SET_CONTEXT_MGR already set [ 102.131550][ T7135] binder: BINDER_SET_CONTEXT_MGR already set [ 102.133464][ T7137] binder: 7134:7137 ioctl 4018620d 20000040 returned -16 [ 102.135625][ T7135] binder: 7134:7135 ioctl 4018620d 20000100 returned -16 [ 102.138122][ T7137] binder: BINDER_SET_CONTEXT_MGR already set [ 102.138128][ T7137] binder: 7134:7137 ioctl 4018620d 20000040 returned -16 [ 102.138160][ T7137] binder: BINDER_SET_CONTEXT_MGR already set [ 102.138164][ T7137] binder: 7134:7137 ioctl 4018620d 20000040 returned -16 [ 102.138197][ T7137] binder: BINDER_SET_CONTEXT_MGR already set [ 102.138201][ T7137] binder: 7134:7137 ioctl 4018620d 20000040 returned -16 [ 102.138232][ T7137] binder: BINDER_SET_CONTEXT_MGR already set [ 102.138236][ T7137] binder: 7134:7137 ioctl 4018620d 20000040 returned -16 [ 102.138267][ T7137] binder: BINDER_SET_CONTEXT_MGR already set [ 102.138271][ T7137] binder: 7134:7137 ioctl 4018620d 20000040 returned -16 [ 102.138301][ T7137] binder: BINDER_SET_CONTEXT_MGR already set [ 102.138304][ T7137] binder: 7134:7137 ioctl 4018620d 20000040 returned -16 [ 102.138337][ T7137] binder: BINDER_SET_CONTEXT_MGR already set [ 102.243893][ T7142] input: syz0 as /devices/virtual/input/input15 [ 102.246187][ T7142] input: failed to attach handler leds to device input15, error: -6 [ 102.395884][ T7137] binder: 7134:7137 ioctl 4018620d 20000040 returned -16 [ 102.395906][ T7135] binder: BINDER_SET_CONTEXT_MGR already set [ 102.399514][ T7135] binder: 7134:7135 ioctl 4018620d 20000100 returned -16 [ 102.466023][ T64] libceph: connect (1)[c::]:6789 error -101 [ 102.472947][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 102.747353][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 102.750169][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 102.857530][ T7142] ceph: No mds server is up or the cluster is laggy [ 103.116937][ T7165] binder_alloc: 6143: binder_alloc_buf, no vma [ 103.165475][ T7160] binder: BINDER_SET_CONTEXT_MGR already set [ 103.167662][ T7160] binder: 7154:7160 ioctl 4018620d 20000100 returned -16 [ 103.176264][ T7160] binder: BINDER_SET_CONTEXT_MGR already set [ 103.177913][ T7160] binder: 7154:7160 ioctl 4018620d 200002c0 returned -16 [ 103.236288][ T7167] binder: 7154:7167 ioctl 8818564c 0 returned -22 [ 103.253923][ T7165] infiniband syz1: set down [ 103.255902][ T7165] infiniband syz1: added syzkaller0 [ 103.316430][ T7165] RDS/IB: syz1: added [ 103.317652][ T7165] smc: adding ib device syz1 with port count 1 [ 103.319350][ T7165] smc: ib device syz1 port 1 has pnetid [ 103.678418][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'. [ 103.961186][ T1044] smc: removing ib device syz1 [ 104.243427][ T7187] netlink: 60 bytes leftover after parsing attributes in process `syz.3.265'. [ 104.493802][ T7190] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 105.227773][ T7209] sg_write: data in/out 11/10 bytes for SCSI command 0xfd-- guessing data in; [ 105.227773][ T7209] program syz.1.269 not setting count and/or reply_len properly [ 105.367529][ T7210] binder: BINDER_SET_CONTEXT_MGR already set [ 105.369807][ T7210] binder: 7206:7210 ioctl 4018620d 20000100 returned -16 [ 105.395594][ T7210] binder: BINDER_SET_CONTEXT_MGR already set [ 105.398383][ T7210] binder: 7206:7210 ioctl 4018620d 200002c0 returned -16 [ 105.459840][ T7215] binder: 7206:7215 ioctl 8818564c 20001740 returned -22 [ 105.539499][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 105.584059][ T5958] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 105.588389][ T5951] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.628696][ T7223] overlayfs: failed to get inode (-116) [ 105.630868][ T7223] overlayfs: failed to get inode (-116) [ 105.632801][ T7223] overlayfs: failed to get inode (-116) [ 105.634469][ T7223] overlayfs: failed to get inode (-116) [ 106.166108][ T1910] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 106.318823][ T1910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 106.322638][ T1910] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 106.326368][ T1910] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 106.333215][ T1910] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.336677][ T1910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.339602][ T1910] usb 5-1: Product: ⲟ孤轟⒥ᓿ륬ꔲ梾䮟ꗺ빢钽낷貛籆ì‹íºç½£ç­» [ 106.342930][ T1910] usb 5-1: Manufacturer: 권﬩ࢋ㼮떅䞖᪉觵纄á§à·¸ë‚‡èš»î‚‡íˆ ä¸­ìž”쾔㼮윊æ¼ä‘”꽡黂롱몲磊è¿ãœ„╫㉢ԅ䨴䶨頻뿷穦쌹ᗔ䯋ã˜ç¿‘á‘鼈튔有é¨á¾¼ï†Ÿáƒ é¶‰í‰™ì‹æ²•í”­æ‚î¡äš§Î” [ 106.349916][ T1910] usb 5-1: SerialNumber: Б [ 106.354429][ T7224] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.858916][ T7253] syz_tun: entered promiscuous mode [ 106.861640][ T7253] batadv_slave_1: entered promiscuous mode [ 106.864163][ T7253] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 106.866284][ T7253] Cannot create hsr debugfs directory [ 106.908431][ T7255] binder: BINDER_SET_CONTEXT_MGR already set [ 106.910080][ T7255] binder: 7254:7255 ioctl 4018620d 20000100 returned -16 [ 106.921908][ T7255] binder: BINDER_SET_CONTEXT_MGR already set [ 106.923555][ T7255] binder: 7254:7255 ioctl 4018620d 20004a80 returned -16 [ 106.926227][ T7255] binder: 7254:7255 ioctl c0306201 200004c0 returned -14 [ 106.928697][ T7255] binder: 7254:7255 ioctl c0306201 200001c0 returned -14 [ 106.930940][ T7255] binder: 7254:7255 ioctl c0306201 20000180 returned -14 [ 107.070643][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 108.591484][ T1910] cdc_ncm 5-1:1.0: bind() failure [ 108.606139][ T1910] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 108.608650][ T1910] cdc_ncm 5-1:1.1: bind() failure [ 108.621553][ T1910] usb 5-1: USB disconnect, device number 6 [ 108.754204][ T7291] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.684420][ T7310] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 109.684420][ T7310] program syz.3.297 not setting count and/or reply_len properly [ 110.074627][ T7316] infiniband syz1: set down [ 110.076022][ T7316] infiniband syz1: added syzkaller0 [ 110.083570][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 110.105375][ T7316] RDS/IB: syz1: added [ 110.107047][ T7316] smc: adding ib device syz1 with port count 1 [ 110.108916][ T7316] smc: ib device syz1 port 1 has pnetid [ 110.381566][ T1044] smc: removing ib device syz1 [ 110.476743][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 110.476753][ T39] audit: type=1326 audit(1734760743.040:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.303" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 110.511354][ T39] audit: type=1326 audit(1734760743.040:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.303" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 110.518809][ T39] audit: type=1326 audit(1734760743.040:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.303" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 110.528062][ T39] audit: type=1326 audit(1734760743.040:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.303" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 110.533807][ T39] audit: type=1326 audit(1734760743.040:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.303" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 110.540973][ T39] audit: type=1326 audit(1734760743.040:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.303" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 110.549113][ T39] audit: type=1326 audit(1734760743.040:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.303" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 110.555159][ T39] audit: type=1326 audit(1734760743.040:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.303" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 110.562097][ T39] audit: type=1326 audit(1734760743.070:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.303" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 110.568965][ T39] audit: type=1326 audit(1734760743.070:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.303" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 110.675556][ T7337] netlink: 'syz.2.305': attribute type 3 has an invalid length. [ 111.075950][ T1910] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 111.236094][ T1910] usb 7-1: Using ep0 maxpacket: 8 [ 111.240603][ T1910] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 111.243572][ T1910] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.247334][ T1910] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.250826][ T1910] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.254352][ T1910] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.262416][ T1910] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.264774][ T1910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.488155][ T1910] usb 7-1: GET_CAPABILITIES returned 0 [ 111.489635][ T1910] usbtmc 7-1:16.0: can't read capabilities [ 111.879855][ T1910] usb 7-1: USB disconnect, device number 6 [ 111.879857][ T7339] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 111.905958][ T5991] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 112.055907][ T5991] usb 6-1: Using ep0 maxpacket: 8 [ 112.058401][ T5991] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.060917][ T5991] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.063504][ T5991] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.066191][ T5991] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.069520][ T5991] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.071851][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.282100][ T5991] usb 6-1: usb_control_msg returned -32 [ 112.284206][ T5991] usbtmc 6-1:16.0: can't read capabilities [ 112.601737][ T7371] binder: transaction release 76 bad handle 1, ret = -22 [ 112.604799][ T7371] binder: 7369:7371 ioctl 8818564c 20000f00 returned -22 [ 112.697938][ T833] usb 6-1: USB disconnect, device number 3 [ 112.989250][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 114.175173][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 114.273200][ T7414] netlink: 'syz.0.325': attribute type 4 has an invalid length. [ 114.275886][ T6011] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 114.276646][ T7414] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.325'. [ 114.437403][ T6011] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.441329][ T6011] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.444791][ T6011] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.454454][ T6011] usb 7-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 114.457985][ T6011] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.462960][ T6011] usb 7-1: config 0 descriptor?? [ 114.545831][ T6087] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 114.573975][ T7424] random: crng reseeded on system resumption [ 114.697649][ T6087] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 114.699917][ T6087] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.703370][ T6087] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 114.705806][ T6087] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 114.707928][ T6087] usb 6-1: Manufacturer: syz [ 114.710291][ T6087] usb 6-1: config 0 descriptor?? [ 114.745881][ T6087] rc_core: IR keymap rc-hauppauge not found [ 114.747479][ T6087] Registered IR keymap rc-empty [ 114.751310][ T6087] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 114.754582][ T6087] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input16 [ 115.928841][ T7434] infiniband syz1: set down [ 115.930136][ T7434] infiniband syz1: added syzkaller0 [ 115.949377][ T7434] RDS/IB: syz1: added [ 115.950501][ T7434] smc: adding ib device syz1 with port count 1 [ 115.954653][ T7434] smc: ib device syz1 port 1 has pnetid [ 116.280461][ T1063] smc: removing ib device syz1 [ 116.382303][ T6011] usbhid 7-1:0.0: can't add hid device: -71 [ 116.384112][ T6011] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 116.406541][ T6011] usb 7-1: USB disconnect, device number 7 [ 116.627278][ T7441] binder: BINDER_SET_CONTEXT_MGR already set [ 116.628950][ T7441] binder: 7438:7441 ioctl 4018620d 20000100 returned -16 [ 116.639315][ T7441] binder: BINDER_SET_CONTEXT_MGR already set [ 116.641006][ T7441] binder: 7438:7441 ioctl 4018620d 200002c0 returned -16 [ 116.643655][ T7441] binder: 7438:7441 ioctl c0306201 200003c0 returned -14 [ 117.040472][ T7452] binder_alloc: 6143: binder_alloc_buf, no vma [ 117.128998][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 117.177874][ T7452] infiniband syz1: set down [ 117.179130][ T7452] infiniband syz1: added syzkaller0 [ 117.224795][ T7452] RDS/IB: syz1: added [ 117.227507][ T7452] smc: adding ib device syz1 with port count 1 [ 117.230477][ T7452] smc: ib device syz1 port 1 has pnetid [ 117.396956][ T6087] usb 6-1: USB disconnect, device number 4 [ 117.655719][ T1063] smc: removing ib device syz1 [ 118.441576][ T7479] netlink: 'syz.2.339': attribute type 3 has an invalid length. [ 118.498477][ T7480] netlink: 'syz.1.338': attribute type 39 has an invalid length. [ 118.638077][ T7483] Process accounting resumed [ 119.417428][ T7505] dlm: Unknown command passed to DLM device : 0 [ 119.417428][ T7505] [ 119.796792][ T7525] binder_alloc: 6143: binder_alloc_buf, no vma [ 119.819383][ T7510] xt_NFQUEUE: number of queues (257) out of range (got 65786) [ 119.833628][ T7526] binder_alloc: 6185: binder_alloc_buf, no vma [ 120.010443][ T7520] infiniband syz1: set down [ 120.011793][ T7520] infiniband syz1: added syzkaller0 [ 120.064011][ T7520] RDS/IB: syz1: added [ 120.065407][ T7520] smc: adding ib device syz1 with port count 1 [ 120.067935][ T7520] smc: ib device syz1 port 1 has pnetid [ 120.488984][ T11] smc: removing ib device syz1 [ 121.897439][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 121.897449][ T39] audit: type=1326 audit(1734760754.460:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7557 comm="syz.0.359" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707e579 code=0x0 [ 121.966714][ T7564] ALSA: mixer_oss: invalid OSS volume 'u' [ 122.015907][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 122.175823][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 122.178765][ T25] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 122.182958][ T25] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 122.185652][ T25] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 122.188012][ T25] usb 6-1: Product: syz [ 122.189132][ T25] usb 6-1: Manufacturer: syz [ 122.190358][ T25] usb 6-1: SerialNumber: syz [ 122.193048][ T25] usb 6-1: config 0 descriptor?? [ 122.196336][ T7561] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.460988][ T35] usb 6-1: USB disconnect, device number 5 [ 122.499519][ T7577] binder_alloc: 6859: binder_alloc_buf, no vma [ 122.598614][ T7577] infiniband syz1: set down [ 122.599989][ T7577] infiniband syz1: added syzkaller0 [ 122.635604][ T7577] RDS/IB: syz1: added [ 122.638409][ T7577] smc: adding ib device syz1 with port count 1 [ 122.640030][ T7577] smc: ib device syz1 port 1 has pnetid [ 122.954962][ T11] smc: removing ib device syz1 [ 123.534120][ T7600] Cannot find set identified by id 0 to match [ 124.295819][ T35] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 124.457289][ T35] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 124.459669][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.463049][ T35] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 124.465543][ T35] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 124.467725][ T35] usb 8-1: Manufacturer: syz [ 124.469919][ T35] usb 8-1: config 0 descriptor?? [ 124.486746][ T7619] binder_alloc: 6859: binder_alloc_buf, no vma [ 124.535855][ T35] rc_core: IR keymap rc-hauppauge not found [ 124.538073][ T35] Registered IR keymap rc-empty [ 124.541214][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 124.545104][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input17 [ 125.107861][ T7619] infiniband syz1: set down [ 125.109242][ T7619] infiniband syz1: added syzkaller0 [ 125.181364][ T7619] RDS/IB: syz1: added [ 125.186229][ T7619] smc: adding ib device syz1 with port count 1 [ 125.189051][ T7619] smc: ib device syz1 port 1 has pnetid [ 125.293065][ T7628] netfs: Couldn't get user pages (rc=-14) [ 125.515872][ T7629] netem: change failed [ 125.660411][ T12] smc: removing ib device syz1 [ 127.194844][ T64] usb 8-1: USB disconnect, device number 7 [ 127.343974][ T7660] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 127.346917][ T7660] netlink: 224 bytes leftover after parsing attributes in process `syz.3.383'. [ 127.688128][ T7668] netlink: 'syz.0.385': attribute type 4 has an invalid length. [ 127.690986][ T7668] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.385'. [ 127.982732][ T7673] infiniband syz1: set down [ 127.984099][ T7673] infiniband syz1: added syzkaller0 [ 128.012972][ T7673] RDS/IB: syz1: added [ 128.017503][ T7673] smc: adding ib device syz1 with port count 1 [ 128.019258][ T7673] smc: ib device syz1 port 1 has pnetid [ 128.328869][ T1044] smc: removing ib device syz1 [ 128.497977][ T7677] random: crng reseeded on system resumption [ 128.607399][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 128.742614][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 129.067861][ T5991] libceph: connect (1)[c::]:6789 error -101 [ 129.071050][ T5991] libceph: mon0 (1)[c::]:6789 connect error [ 129.336036][ T35] libceph: connect (1)[c::]:6789 error -101 [ 129.337672][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 129.624740][ T7694] ceph: No mds server is up or the cluster is laggy [ 129.780902][ T7725] binder_alloc: 6185: binder_alloc_buf, no vma [ 129.835101][ T7728] [U] [ 129.836037][ T7728] [U] [ 129.836772][ T7728] [U] [ 129.837516][ T7728] [U] [ 129.840141][ T7728] [U] [ 129.840865][ T7728] [U] [ 129.841563][ T7728] [U] [ 129.842271][ T7728] [U] [ 129.843137][ T7728] [U] [ 129.843888][ T7728] [U] [ 129.844621][ T7728] [U] [ 129.845352][ T7728] [U] [ 129.846802][ T7728] [U] [ 129.847542][ T7728] [U] [ 129.848334][ T7728] [U] [ 129.849071][ T7728] [U] [ 129.849898][ T7728] [U] [ 129.850640][ T7728] [U] [ 129.851348][ T7728] [U] [ 129.852092][ T7728] [U] [ 129.852933][ T7728] [U] [ 129.853636][ T7728] [U]  [ 129.854397][ T7728] [U] [ 129.855120][ T7728] [U] [ 129.857143][ T7728] [U]  [ 129.857878][ T7728] [U] [ 129.858593][ T7728] [U] [ 129.859301][ T7728] [U]  [ 129.860177][ T7728] [U] [ 129.860871][ T7728] [U] [ 129.861595][ T7728] [U]  [ 129.862332][ T7728] [U] [ 129.863988][ T7728] [U] [ 129.864758][ T7728] [U]  [ 129.865511][ T7728] [U] [ 129.866313][ T7728] [U] [ 129.867850][ T7728] [U]  [ 129.868609][ T7728] [U] [ 129.869323][ T7728] [U] [ 129.870055][ T7728] [U]  [ 129.870907][ T7728] [U] [ 129.871617][ T7728] [U] [ 129.872321][ T7728] [U]  [ 129.873016][ T7728] [U] [ 129.873902][ T7728] [U] [ 129.874628][ T7728] [U]  [ 129.875323][ T7728] [U] [ 129.876066][ T7728] [U] [ 129.877005][ T7728] [U]  [ 129.877754][ T7728] [U] [ 129.878410][ T7725] infiniband syz1: set down [ 129.878565][ T7728] [U] [ 129.879904][ T7725] infiniband syz1: added syzkaller0 [ 129.880512][ T7728] [U]  [ 129.880623][ T7728] [U] [ 129.884046][ T7728] [U] [ 129.885097][ T7728] [U]  [ 129.886198][ T7728] [U] [ 129.896490][ T7725] RDS/IB: syz1: added [ 129.897719][ T7725] smc: adding ib device syz1 with port count 1 [ 129.899430][ T7725] smc: ib device syz1 port 1 has pnetid [ 129.918416][ T7728] [U] [ 129.919206][ T7728] [U]  [ 129.919993][ T7728] [U] [ 129.920737][ T7728] [U] [ 129.921939][ T7728] [U]  [ 129.922667][ T7728] [U] [ 129.923401][ T7728] [U] [ 129.924134][ T7728] [U]  [ 129.924992][ T7728] [U] [ 129.925871][ T7728] [U] [ 129.926599][ T7728] [U]  [ 129.927336][ T7728] [U] [ 129.928633][ T7728] [U] [ 129.929388][ T7728] [U]  [ 129.930125][ T7728] [U] [ 129.930849][ T7728] [U] [ 129.931734][ T7728] [U]  [ 129.932482][ T7728] [U] [ 129.933230][ T7728] [U] [ 129.933979][ T7728] [U]  [ 129.934850][ T7728] [U] [ 129.935620][ T7728] [U] [ 129.936376][ T7728] [U]  [ 129.937138][ T7728] [U] [ 129.939654][ T7728] [U] [ 129.940428][ T7728] [U]  [ 129.941190][ T7728] [U] [ 129.941916][ T7728] [U] [ 129.942799][ T7728] [U]  [ 129.943575][ T7728] [U] [ 129.944331][ T7728] [U] [ 129.945072][ T7728] [U]  [ 129.947012][ T7728] [U] [ 129.947798][ T7728] [U] [ 129.948557][ T7728] [U]  [ 129.949327][ T7728] [U] [ 129.951822][ T7728] [U] [ 129.952594][ T7728] [U]  [ 129.953364][ T7728] [U] [ 129.954108][ T7728] [U] [ 129.955446][ T7728] [U]  [ 129.955812][ T35] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 129.956235][ T7728] [U] [ 129.958951][ T7728] [U] [ 129.959706][ T7728] [U]  [ 129.961021][ T7728] [U] [ 129.961774][ T7728] [U] [ 129.962528][ T7728] [U]  [ 129.963290][ T7728] [U] [ 129.964365][ T7728] [U] [ 129.965117][ T7728] [U]  [ 129.965892][ T7728] [U] [ 129.966634][ T7728] [U] [ 129.968037][ T7728] [U]  [ 129.968798][ T7728] [U] [ 129.969540][ T7728] [U] [ 129.970283][ T7728] [U]  [ 129.971603][ T7728] [U] [ 129.972372][ T7728] [U] [ 129.973124][ T7728] [U]  [ 129.973884][ T7728] [U] [ 129.974900][ T7728] [U] [ 129.975669][ T7728] [U]  [ 129.976442][ T7728] [U] [ 129.977193][ T7728] [U] [ 129.980035][ T7728] [U]  [ 129.980829][ T7728] [U] [ 129.981577][ T7728] [U] [ 129.982337][ T7728] [U]  [ 129.983361][ T7728] [U] [ 129.984129][ T7728] [U] [ 129.984870][ T7728] [U] [ 130.012094][ T7727] netlink: 'syz.0.404': attribute type 10 has an invalid length. [ 130.016399][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.019265][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.072846][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.075426][ T7727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.078738][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.081368][ T7727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.086600][ T7727] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 130.098198][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 130.101410][ T7727] bridge_slave_1: left allmulticast mode [ 130.103418][ T7727] bridge_slave_1: left promiscuous mode [ 130.105348][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.110513][ T35] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 130.112831][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.116872][ T35] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 130.119304][ T35] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 130.123163][ T35] usb 8-1: Manufacturer: syz [ 130.129376][ T35] usb 8-1: config 0 descriptor?? [ 130.191865][ T7727] bridge_slave_0: left allmulticast mode [ 130.193506][ T7727] bridge_slave_0: left promiscuous mode [ 130.195215][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.216731][ T7727] bond0: (slave bridge0): Releasing backup interface [ 130.221079][ T5958] Bluetooth: hci1: unexpected event for opcode 0x043d [ 130.225832][ T35] rc_core: IR keymap rc-hauppauge not found [ 130.227628][ T35] Registered IR keymap rc-empty [ 130.235641][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 130.239526][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input18 [ 130.579375][ T1219] smc: removing ib device syz1 [ 130.765936][ T7710] [U] [ 130.949740][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.956031][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.160281][ T7750] binder: Bad value for 'max' [ 131.185920][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 131.264524][ T7760] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 131.335818][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 131.360443][ T7770] binder_alloc: 6859: binder_alloc_buf, no vma [ 131.360497][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 131.365858][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 131.369006][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.371719][ T9] usb 6-1: Product: ဵ屢ῷሾ鸲ꜥ险칑빖妇è„ì¿£ [ 131.374082][ T9] usb 6-1: Manufacturer: 겈ⷳ⛌ã²ê±žèˆ¿é€Ÿæ©²îˆ™î‘§ç‰§ê¨ã¡«à¸¥ê›³æ´â…®èŽªå‹ï†„ᬰ̋㢗ዶ癹疇á‡ì¤¢î¶‰â®ºà¢Ÿï¨˜î—“绂底é¤ï§žè †ç±§à¶¥á•¬á§ªÝºê…´ä‡´Ï˜æ¥à¬™ä–ƒêƒ¾ì¦œè»‹è—¯â¸±ç£¹è¾æ¡å»©ï²‰è”»ë¬­ä¶·î´¼æ¾Ÿâ§ã±¨æ¶”庤䫡છ澋㸫䦥栒䑡ꧫஒ痢凷숇腦쨭㩺්拋î©æ¹‰î‚µá€·æ¦ªæ—´ [ 131.384050][ T9] usb 6-1: SerialNumber: 鼸ᚗ锰î“ê—¶à»æ¨¼æ¿¸ì»»æ±ŠÅ°æ¹«ë›©ê‚ᰈ䤻耫ྩאַ꾦ì¥é³ƒã—¶è­£å†ºìº½î³ç©Šë…²æš…宸ꤎç¤ê§¨ê½­ìŽ³äŽ¯ç’ƒæŠ’éŽæ¸ èœºæŒŠêŽ«é¬£ê£©ë´»ê™§ç¦µà²„ëžá…žïŠ¨ã½¦à¥¢ë¦å‘泃챊䲘î–뿤洦郚嗊庹뻆ᖞ뀛軾ã³ä‰•æ¡Â½è»ºä¤é‚¤â±˜à³¿æ·¼ë¼Þ‡ë„®î¾³è¨à§–腿䤩뭡伖虞ݺ걱솩 [ 131.441853][ T7770] infiniband syz1: set down [ 131.443186][ T7770] infiniband syz1: added syzkaller0 [ 131.474882][ T7770] RDS/IB: syz1: added [ 131.477258][ T7770] smc: adding ib device syz1 with port count 1 [ 131.478939][ T7770] smc: ib device syz1 port 1 has pnetid [ 131.708653][ T1044] smc: removing ib device syz1 [ 131.998887][ T7776] FAULT_INJECTION: forcing a failure. [ 131.998887][ T7776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.002248][ T7776] CPU: 3 UID: 0 PID: 7776 Comm: syz.2.416 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 132.004941][ T7776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.007658][ T7776] Call Trace: [ 132.008545][ T7776] [ 132.009316][ T7776] dump_stack_lvl+0x16c/0x1f0 [ 132.010540][ T7776] should_fail_ex+0x497/0x5b0 [ 132.011774][ T7776] _copy_from_iter+0x29b/0x1400 [ 132.013034][ T7776] ? trace_lock_acquire+0x14e/0x1f0 [ 132.014392][ T7776] ? __alloc_skb+0x200/0x380 [ 132.015607][ T7776] ? __pfx__copy_from_iter+0x10/0x10 [ 132.016957][ T7776] ? __virt_addr_valid+0x1a4/0x590 [ 132.018295][ T7776] ? __virt_addr_valid+0x5e/0x590 [ 132.019609][ T7776] ? __phys_addr_symbol+0x30/0x80 [ 132.020902][ T7776] ? __check_object_size+0x488/0x710 [ 132.022275][ T7776] netlink_sendmsg+0x813/0xd70 [ 132.023513][ T7776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.024882][ T7776] ____sys_sendmsg+0x9ae/0xb40 [ 132.026122][ T7776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.027477][ T7776] ? get_compat_msghdr+0x11b/0x170 [ 132.028810][ T7776] ___sys_sendmsg+0x135/0x1e0 [ 132.030032][ T7776] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.031380][ T7776] ? __pfx_lock_release+0x10/0x10 [ 132.032682][ T7776] ? trace_lock_acquire+0x14e/0x1f0 [ 132.034036][ T7776] ? __fget_files+0x206/0x3a0 [ 132.035254][ T7776] __sys_sendmsg+0x16e/0x220 [ 132.036456][ T7776] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.037780][ T7776] __do_fast_syscall_32+0x73/0x120 [ 132.039130][ T7776] do_fast_syscall_32+0x32/0x80 [ 132.040394][ T7776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.042023][ T7776] RIP: 0023:0xf7fe5579 [ 132.043078][ T7776] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 132.048113][ T7776] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 132.050363][ T7776] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 132.052396][ T7776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.054430][ T7776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.056461][ T7776] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 132.058502][ T7776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.060532][ T7776] [ 132.138254][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.818115][ T5991] usb 8-1: USB disconnect, device number 8 [ 133.215943][ T5991] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 133.245901][ T35] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.365862][ T5991] usb 8-1: Using ep0 maxpacket: 16 [ 133.370336][ T5991] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 133.372633][ T5991] usb 8-1: config 0 has no interface number 0 [ 133.374245][ T5991] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.378414][ T5991] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 133.382196][ T5991] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 133.384698][ T5991] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 133.388704][ T5991] usb 8-1: Product: syz [ 133.389839][ T5991] usb 8-1: SerialNumber: syz [ 133.392228][ T5991] usb 8-1: config 0 descriptor?? [ 133.398201][ T5991] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 133.400806][ T5991] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input19 [ 133.406923][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.409614][ T35] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 133.412231][ T35] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.420872][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 133.424506][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.427528][ T35] usb 5-1: Product: syz [ 133.429163][ T35] usb 5-1: Manufacturer: syz [ 133.430949][ T35] usb 5-1: SerialNumber: syz [ 133.603025][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 133.626596][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 133.640358][ T35] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 133.832649][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.832718][ T35] usb 8-1: USB disconnect, device number 9 [ 133.834562][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 133.840041][ T35] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 133.848177][ T7797] netlink: 'syz.0.424': attribute type 21 has an invalid length. [ 133.850869][ T7797] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 133.854490][ T30] usb 5-1: USB disconnect, device number 7 [ 133.857948][ T30] usblp0: removed [ 133.869022][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 133.914296][ T7820] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 133.949476][ T9] usbhid 6-1:1.0: can't add hid device: -71 [ 133.951068][ T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 133.954006][ T9] usb 6-1: USB disconnect, device number 6 [ 134.077424][ T7830] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 134.087990][ T7830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.972173][ T7845] usb usb4: usbfs: process 7845 (syz.0.436) did not claim interface 0 before use [ 135.022692][ T7843] usb usb4: usbfs: process 7843 (syz.3.435) did not claim interface 0 before use [ 135.387950][ T7862] binder_alloc: 6859: binder_alloc_buf, no vma [ 135.515899][ T5991] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 135.671438][ T5991] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 135.675964][ T5991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.686406][ T5991] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 135.689695][ T5991] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 135.692422][ T5991] usb 6-1: Manufacturer: syz [ 135.704964][ T5991] usb 6-1: config 0 descriptor?? [ 135.766028][ T5991] rc_core: IR keymap rc-hauppauge not found [ 135.772888][ T5991] Registered IR keymap rc-empty [ 135.778989][ T5991] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 135.785313][ T5991] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input20 [ 136.901625][ T5958] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 137.044680][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 137.174779][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 138.006700][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 138.033019][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 138.127171][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 138.379307][ T30] usb 6-1: USB disconnect, device number 7 [ 138.436787][ T35] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.601050][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 138.607079][ T35] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 138.609336][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.612663][ T35] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 138.615067][ T35] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 138.617679][ T35] usb 5-1: Manufacturer: syz [ 138.620837][ T35] usb 5-1: config 0 descriptor?? [ 138.665909][ T35] rc_core: IR keymap rc-hauppauge not found [ 138.667567][ T35] Registered IR keymap rc-empty [ 138.669540][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 138.672851][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 140.229073][ T7972] usb usb4: usbfs: process 7972 (syz.3.463) did not claim interface 0 before use [ 141.195913][ T8] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 141.223327][ T9] usb 5-1: USB disconnect, device number 8 [ 141.367267][ T8] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 141.372613][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.377229][ T8] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 141.380296][ T8] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 141.383071][ T8] usb 8-1: Manufacturer: syz [ 141.386235][ T8] usb 8-1: config 0 descriptor?? [ 141.436057][ T8] rc_core: IR keymap rc-hauppauge not found [ 141.438157][ T8] Registered IR keymap rc-empty [ 141.440275][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 141.444960][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input22 [ 141.671082][ T7998] /dev/nullb0: Can't open blockdev [ 142.070532][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 143.186485][ T8019] nbd2: detected capacity change from 0 to 67108884 [ 143.192952][ T6310] block nbd2: Send control failed (result -89) [ 143.195439][ T6310] block nbd2: Request send failed, requeueing [ 143.202727][ T5958] block nbd2: Receive control failed (result -32) [ 143.210035][ T71] block nbd2: Dead connection, failed to find a fallback [ 143.212776][ T71] block nbd2: shutting down sockets [ 143.214856][ T71] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.218162][ T71] Buffer I/O error on dev nbd2, logical block 0, async page read [ 143.222257][ T6310] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.225633][ T6310] Buffer I/O error on dev nbd2, logical block 0, async page read [ 143.228759][ T6310] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.230972][ T6310] Buffer I/O error on dev nbd2, logical block 0, async page read [ 143.233046][ T6310] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.235381][ T6310] Buffer I/O error on dev nbd2, logical block 0, async page read [ 143.238129][ T6310] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.240786][ T6310] Buffer I/O error on dev nbd2, logical block 0, async page read [ 143.243704][ T6310] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.246958][ T6310] Buffer I/O error on dev nbd2, logical block 0, async page read [ 143.249221][ T6310] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.251883][ T6310] Buffer I/O error on dev nbd2, logical block 0, async page read [ 143.254714][ T6310] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.257994][ T6310] Buffer I/O error on dev nbd2, logical block 0, async page read [ 143.260757][ T6310] ldm_validate_partition_table(): Disk read failed. [ 143.263129][ T6310] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.266430][ T6310] Buffer I/O error on dev nbd2, logical block 0, async page read [ 143.270582][ T6310] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.273606][ T6310] Buffer I/O error on dev nbd2, logical block 0, async page read [ 143.276583][ T6310] Dev nbd2: unable to read RDB block 0 [ 143.278963][ T6310] nbd2: unable to read partition table [ 143.300748][ T8024] usb usb4: usbfs: process 8024 (syz.1.475) did not claim interface 0 before use [ 143.519646][ T6310] ldm_validate_partition_table(): Disk read failed. [ 143.522154][ T6310] Dev nbd2: unable to read RDB block 0 [ 143.524933][ T6310] nbd2: unable to read partition table [ 143.596783][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 143.806249][ T8017] ldm_validate_partition_table(): Disk read failed. [ 143.808407][ T8017] Dev nbd2: unable to read RDB block 0 [ 143.810242][ T8017] nbd2: unable to read partition table [ 143.813342][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 143.816579][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554441, location=33554441 [ 143.819520][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554185, location=33554185 [ 143.822251][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554440, location=33554440 [ 143.824969][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554184, location=33554184 [ 143.827748][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554439, location=33554439 [ 143.831056][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554183, location=33554183 [ 143.833789][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554291, location=33554291 [ 143.836625][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554035, location=33554035 [ 143.839297][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554289, location=33554289 [ 143.841993][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554033, location=33554033 [ 143.844781][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 143.847826][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 143.850349][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777220, location=16777220 [ 143.853088][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776964, location=16776964 [ 143.856751][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777219, location=16777219 [ 143.859472][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776963, location=16776963 [ 143.861993][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777218, location=16777218 [ 143.864443][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776962, location=16776962 [ 143.867197][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777070, location=16777070 [ 143.869784][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776814, location=16776814 [ 143.872316][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777068, location=16777068 [ 143.875003][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776812, location=16776812 [ 143.878257][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 143.881168][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 143.883691][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388609, location=8388609 [ 143.886424][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388353, location=8388353 [ 143.889099][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388608, location=8388608 [ 143.891751][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388352, location=8388352 [ 143.894407][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388607, location=8388607 [ 143.897152][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388351, location=8388351 [ 143.899796][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388459, location=8388459 [ 143.902471][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388203, location=8388203 [ 143.905138][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388457, location=8388457 [ 143.907853][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388201, location=8388201 [ 143.910514][ T8017] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 143.912940][ T8017] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 144.016752][ T1910] usb 8-1: USB disconnect, device number 10 [ 144.103598][ T39] audit: type=1326 audit(1734760776.660:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.3.481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 144.113215][ T39] audit: type=1326 audit(1734760776.670:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.3.481" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 144.120034][ T39] audit: type=1326 audit(1734760776.670:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.3.481" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 144.126631][ T39] audit: type=1326 audit(1734760776.670:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.3.481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 144.132396][ T39] audit: type=1326 audit(1734760776.670:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.3.481" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 144.431707][ T8051] netlink: 'syz.1.483': attribute type 10 has an invalid length. [ 144.470830][ T8051] batman_adv: batadv0: Adding interface: team0 [ 144.473210][ T8051] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.482409][ T8051] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 144.487005][ T8053] netlink: 'syz.1.483': attribute type 10 has an invalid length. [ 144.490064][ T8053] netlink: 2 bytes leftover after parsing attributes in process `syz.1.483'. [ 144.493232][ T8053] team0: entered promiscuous mode [ 144.494918][ T8053] team_slave_0: entered promiscuous mode [ 144.497903][ T8053] team_slave_1: entered promiscuous mode [ 144.508282][ T8053] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.514236][ T8053] batman_adv: batadv0: Interface activated: team0 [ 144.525839][ T8053] batman_adv: batadv0: Interface deactivated: team0 [ 144.528368][ T8053] batman_adv: batadv0: Removing interface: team0 [ 144.531489][ T8053] bridge0: port 3(team0) entered blocking state [ 144.533171][ T8053] bridge0: port 3(team0) entered disabled state [ 144.534869][ T8053] team0: entered allmulticast mode [ 144.536453][ T8053] team_slave_0: entered allmulticast mode [ 144.537985][ T8053] team_slave_1: entered allmulticast mode [ 144.541022][ T8053] bridge0: port 3(team0) entered blocking state [ 144.543623][ T8053] bridge0: port 3(team0) entered forwarding state [ 144.751533][ T8056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.484'. [ 144.778095][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 144.783020][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 145.755596][ T8068] random: crng reseeded on system resumption [ 146.175879][ T35] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 146.327079][ T35] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 146.330051][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.337104][ T35] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 146.339409][ T35] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 146.341586][ T35] usb 6-1: Manufacturer: syz [ 146.343669][ T35] usb 6-1: config 0 descriptor?? [ 146.385850][ T35] rc_core: IR keymap rc-hauppauge not found [ 146.388076][ T35] Registered IR keymap rc-empty [ 146.390421][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 146.397254][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 146.828004][ T8096] netlink: 'syz.0.495': attribute type 4 has an invalid length. [ 146.830076][ T8096] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.495'. [ 147.340081][ T8102] random: crng reseeded on system resumption [ 148.656253][ T8119] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 148.659246][ T8119] netlink: 224 bytes leftover after parsing attributes in process `syz.2.499'. [ 148.679509][ T8119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.499'. [ 148.757754][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 148.760119][ T8124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.501'. [ 148.994730][ T6087] usb 6-1: USB disconnect, device number 8 [ 149.083769][ T8138] netlink: 'syz.2.505': attribute type 4 has an invalid length. [ 149.086019][ T8138] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.505'. [ 149.479669][ T8151] random: crng reseeded on system resumption [ 149.643238][ T8157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.087897][ T8168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.516'. [ 150.106137][ T35] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 150.278736][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 150.279865][ T35] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 150.284469][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.288582][ T35] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 150.291877][ T35] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 150.294752][ T35] usb 8-1: Manufacturer: syz [ 150.298582][ T35] usb 8-1: config 0 descriptor?? [ 150.355984][ T35] rc_core: IR keymap rc-hauppauge not found [ 150.358243][ T35] Registered IR keymap rc-empty [ 150.360614][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 150.363896][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input24 [ 150.431612][ T39] audit: type=1326 audit(1734760782.990:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.1.518" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x0 [ 150.994499][ T8196] netlink: 'syz.2.523': attribute type 4 has an invalid length. [ 150.996676][ T8196] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.523'. [ 151.236793][ T8200] random: crng reseeded on system resumption [ 151.962993][ T30] IPVS: starting estimator thread 0... [ 152.066010][ T8213] IPVS: using max 37 ests per chain, 88800 per kthread [ 152.351985][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 152.421682][ T8224] capability: warning: `syz.1.530' uses deprecated v2 capabilities in a way that may be insecure [ 152.810721][ T30] usb 8-1: USB disconnect, device number 11 [ 152.966043][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.088332][ T39] audit: type=1326 audit(1734760785.650:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.1.534" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f66579 code=0x0 [ 153.148075][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 153.150691][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.155284][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 153.159292][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 153.162265][ T9] usb 5-1: Manufacturer: syz [ 153.166217][ T9] usb 5-1: config 0 descriptor?? [ 153.187677][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 153.217008][ T9] rc_core: IR keymap rc-hauppauge not found [ 153.218658][ T9] Registered IR keymap rc-empty [ 153.220597][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 153.227726][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 153.278494][ T8249] Invalid logical block size (-2) [ 154.143243][ T8262] Illegal XDP return value 4294967294 on prog (id 130) dev N/A, expect packet loss! [ 154.275892][ T5985] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 154.427387][ T5985] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 154.429655][ T5985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.432991][ T5985] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 154.435389][ T5985] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 154.437572][ T5985] usb 8-1: Manufacturer: syz [ 154.440030][ T5985] usb 8-1: config 0 descriptor?? [ 154.485878][ T5985] rc_core: IR keymap rc-hauppauge not found [ 154.487644][ T5985] Registered IR keymap rc-empty [ 154.489775][ T5985] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1 [ 154.493396][ T5985] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1/input26 [ 155.714284][ T8] usb 5-1: USB disconnect, device number 9 [ 155.902210][ T5953] syz_tun (unregistering): left promiscuous mode [ 156.031805][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.552'. [ 156.105167][ T1063] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.149128][ T8302] tmpfs: Bad value for 'mpol' [ 156.159392][ T1063] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.219753][ T1063] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.228344][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.232804][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.236323][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.243132][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.245605][ T5951] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.247929][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.305180][ T1063] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.337623][ T8305] chnl_net:caif_netlink_parms(): no params data found [ 156.424322][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.556'. [ 156.424661][ T8305] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.429402][ T8316] netlink: 60 bytes leftover after parsing attributes in process `syz.0.556'. [ 156.429647][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.434702][ T8305] bridge_slave_0: entered allmulticast mode [ 156.436916][ T8305] bridge_slave_0: entered promiscuous mode [ 156.441829][ T8305] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.443732][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.445693][ T8305] bridge_slave_1: entered allmulticast mode [ 156.447890][ T8305] bridge_slave_1: entered promiscuous mode [ 156.472686][ T8305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.477031][ T8305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.523231][ T8305] team0: Port device team_slave_0 added [ 156.537281][ T8305] team0: Port device team_slave_1 added [ 156.559172][ T1063] team0: left allmulticast mode [ 156.560701][ T1063] team_slave_0: left allmulticast mode [ 156.562299][ T1063] team_slave_1: left allmulticast mode [ 156.564882][ T1063] bridge0: port 3(team0) entered disabled state [ 156.570865][ T1063] bridge_slave_1: left allmulticast mode [ 156.572925][ T1063] bridge_slave_1: left promiscuous mode [ 156.574517][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.588479][ T1063] bridge_slave_0: left allmulticast mode [ 156.590196][ T1063] bridge_slave_0: left promiscuous mode [ 156.592390][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.715105][ T8329] overlayfs: missing 'workdir' [ 156.854858][ T1063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.860208][ T1063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.864241][ T1063] bond0 (unregistering): Released all slaves [ 156.898526][ T8305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.900709][ T8305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.907710][ T8305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.913437][ T8305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.916265][ T8305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.924876][ T8305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.988490][ T8305] hsr_slave_0: entered promiscuous mode [ 156.992106][ T8305] hsr_slave_1: entered promiscuous mode [ 156.995252][ T8305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.998736][ T8305] Cannot create hsr debugfs directory [ 157.005632][ T8333] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 157.008278][ T8332] IPVS: stopping master sync thread 8333 ... [ 157.034613][ T8332] ./file0: Can't lookup blockdev [ 157.116455][ T30] usb 8-1: USB disconnect, device number 12 [ 157.314969][ T1063] batadv_slave_1: left promiscuous mode [ 157.341938][ T1063] hsr_slave_0: left promiscuous mode [ 157.346392][ T1063] hsr_slave_1: left promiscuous mode [ 157.348653][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.350716][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.354720][ T8340] netlink: 36 bytes leftover after parsing attributes in process `syz.3.564'. [ 157.358686][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.360732][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.451372][ T1063] veth1_macvtap: left promiscuous mode [ 157.453302][ T1063] veth0_macvtap: left promiscuous mode [ 157.455045][ T1063] veth1_vlan: left promiscuous mode [ 157.456998][ T1063] veth0_vlan: left promiscuous mode [ 158.296016][ T5958] Bluetooth: hci2: command tx timeout [ 158.425107][ T8359] hugetlbfs: Bad value 'm' for mount option 'size' [ 158.425107][ T8359] [ 158.501010][ T1063] team_slave_1 (unregistering): left promiscuous mode [ 158.507687][ T1063] team0 (unregistering): Port device team_slave_1 removed [ 158.599548][ T1063] team_slave_0 (unregistering): left promiscuous mode [ 158.603592][ T1063] team0 (unregistering): Port device team_slave_0 removed [ 159.165627][ T8305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.176233][ T8305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.203790][ T8362] : renamed from bond0 (while UP) [ 159.210874][ T8305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.219184][ T8305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 159.253192][ T8364] tc_dump_action: action bad kind [ 159.275256][ T8305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.282092][ T8305] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.287434][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.290001][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.296330][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.298860][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.420305][ T8305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.539524][ T8305] veth0_vlan: entered promiscuous mode [ 159.543835][ T8305] veth1_vlan: entered promiscuous mode [ 159.574092][ T8305] veth0_macvtap: entered promiscuous mode [ 159.579881][ T8305] veth1_macvtap: entered promiscuous mode [ 159.588225][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.591266][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.594796][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.602396][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.604980][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.609480][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.623132][ T8305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.632942][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.635706][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.640895][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.643626][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.646413][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.648362][ T1910] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 159.649153][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.649851][ T8305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.675592][ T8305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.678260][ T8305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.680560][ T8305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.682820][ T8305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.720759][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.722643][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.731700][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.733859][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.798687][ T1910] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 159.801571][ T1910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.806578][ T1910] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 159.809957][ T1910] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 159.813111][ T1910] usb 5-1: Manufacturer: syz [ 159.822080][ T1910] usb 5-1: config 0 descriptor?? [ 159.865905][ T1910] rc_core: IR keymap rc-hauppauge not found [ 159.868060][ T1910] Registered IR keymap rc-empty [ 159.870689][ T1910] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 159.875289][ T1910] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 160.375879][ T5958] Bluetooth: hci2: command tx timeout [ 161.313156][ T8457] infiniband syz1: set down [ 161.314803][ T8457] infiniband syz1: added syzkaller0 [ 161.346875][ T8457] RDS/IB: syz1: added [ 161.348181][ T8457] smc: adding ib device syz1 with port count 1 [ 161.349908][ T8457] smc: ib device syz1 port 1 has pnetid [ 162.228657][ T12] smc: removing ib device syz1 [ 162.469187][ T5958] Bluetooth: hci2: command tx timeout [ 162.712782][ T6011] usb 5-1: USB disconnect, device number 10 [ 162.898079][ T8486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.585'. [ 162.975816][ T39] audit: type=1326 audit(1734760795.530:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.4.586" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x77ff0000 [ 163.159439][ T8486] veth0_vlan: left promiscuous mode [ 163.162581][ T8486] veth0_vlan: entered promiscuous mode [ 163.285998][ T8486] syz.3.585 (8486) used greatest stack depth: 21152 bytes left [ 163.317333][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 163.982007][ T8504] infiniband syz1: set down [ 163.983806][ T8504] infiniband syz1: added syzkaller0 [ 164.044647][ T8504] RDS/IB: syz1: added [ 164.046811][ T8504] smc: adding ib device syz1 with port count 1 [ 164.049750][ T8504] smc: ib device syz1 port 1 has pnetid [ 164.070092][ T8507] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.072465][ T8507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.074763][ T8507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.080512][ T8507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.082588][ T8507] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.086729][ T8507] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.445901][ T1910] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 164.591971][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 164.594369][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 164.599442][ T1910] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 164.610288][ T1910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.626619][ T1910] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 164.629796][ T1910] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 164.632570][ T1910] usb 5-1: Manufacturer: syz [ 164.656019][ T1910] usb 5-1: config 0 descriptor?? [ 164.659773][ T1044] smc: removing ib device syz1 [ 164.725919][ T1910] rc_core: IR keymap rc-hauppauge not found [ 164.727999][ T1910] Registered IR keymap rc-empty [ 164.731425][ T1910] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 164.738302][ T1910] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 165.279679][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.598'. [ 165.385928][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 166.135941][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.138152][ T5958] Bluetooth: hci2: command 0x0405 tx timeout [ 166.138575][ T5308] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.141385][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.546733][ T8558] sp0: Synchronizing with TNC [ 166.554188][ T8558] sp0: Found TNC [ 167.026693][ T8568] overlayfs: failed to resolve './bus': -2 [ 167.252139][ T6011] usb 5-1: USB disconnect, device number 11 [ 167.472397][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 167.686133][ T35] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 167.837267][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.872746][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.903180][ T35] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.906726][ T35] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.909123][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.919860][ T35] usb 9-1: config 0 descriptor?? [ 168.215880][ T5951] Bluetooth: hci2: command 0x0405 tx timeout [ 168.358837][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 168.361200][ T35] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 168.370808][ T35] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 168.765865][ T2199] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 168.916516][ T8610] usb usb4: usbfs: process 8610 (syz.3.618) did not claim interface 0 before use [ 168.917213][ T2199] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 168.921934][ T2199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.937408][ T2199] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 168.940566][ T2199] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 168.943337][ T2199] usb 5-1: Manufacturer: syz [ 168.958519][ T2199] usb 5-1: config 0 descriptor?? [ 169.015895][ T2199] rc_core: IR keymap rc-hauppauge not found [ 169.018028][ T2199] Registered IR keymap rc-empty [ 169.020215][ T2199] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 169.024539][ T2199] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 170.300737][ T5951] Bluetooth: hci2: command 0x0405 tx timeout [ 170.483960][ T2199] usb 9-1: USB disconnect, device number 2 [ 170.653435][ T8629] trusted_key: encrypted_key: insufficient parameters specified [ 170.729625][ T8633] netlink: 'syz.4.622': attribute type 1 has an invalid length. [ 170.731811][ T8633] netlink: 224 bytes leftover after parsing attributes in process `syz.4.622'. [ 170.742692][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.622'. [ 171.236242][ T39] audit: type=1326 audit(1734760803.800:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.3.624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 171.242126][ T39] audit: type=1326 audit(1734760803.800:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.3.624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 171.247762][ T39] audit: type=1326 audit(1734760803.810:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.3.624" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 171.253223][ T39] audit: type=1326 audit(1734760803.810:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.3.624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 171.258688][ T39] audit: type=1326 audit(1734760803.810:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.3.624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 171.299367][ T39] audit: type=1326 audit(1734760803.860:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.3.624" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 171.305213][ T39] audit: type=1326 audit(1734760803.860:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.3.624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 171.550204][ T6011] usb 5-1: USB disconnect, device number 12 [ 171.608354][ T8645] syz.0.625: attempt to access beyond end of device [ 171.608354][ T8645] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 171.612045][ T8645] FAT-fs (loop0): unable to read boot sector [ 171.619011][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.625'. [ 171.720831][ T8648] IPv6: syztnl0: Disabled Multicast RS [ 172.383442][ T5951] Bluetooth: hci2: command 0x0405 tx timeout [ 172.762024][ T8695] netlink: 'syz.0.631': attribute type 4 has an invalid length. [ 172.764139][ T8695] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.631'. [ 172.949867][ T8704] libceph: resolve '0' (ret=-3): failed [ 172.975961][ T8704] gfs2: gfs2 mount does not exist [ 173.343685][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 173.348311][ T8718] IPVS: Error joining to the multicast group [ 173.731598][ T8722] random: crng reseeded on system resumption [ 174.825007][ T39] audit: type=1326 audit(1734760807.380:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.3.636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 174.875238][ T8738] netlink: 'syz.3.638': attribute type 1 has an invalid length. [ 174.877467][ T8738] netlink: 224 bytes leftover after parsing attributes in process `syz.3.638'. [ 175.189748][ T8747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.641'. [ 175.192701][ T8747] netlink: 60 bytes leftover after parsing attributes in process `syz.3.641'. [ 175.576857][ T5958] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.585081][ T5958] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.588052][ T5958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.599129][ T5958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.602439][ T5958] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 175.605416][ T5958] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.629369][ T6215] syz_tun (unregistering): left promiscuous mode [ 175.750558][ T8755] chnl_net:caif_netlink_parms(): no params data found [ 175.814187][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.816849][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.818809][ T8755] bridge_slave_0: entered allmulticast mode [ 175.820862][ T8755] bridge_slave_0: entered promiscuous mode [ 175.823408][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.825415][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.831932][ T8755] bridge_slave_1: entered allmulticast mode [ 175.834247][ T8755] bridge_slave_1: entered promiscuous mode [ 175.900095][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.902976][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.914362][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.944638][ T8768] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.954594][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.995507][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.000038][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.008921][ T8755] team0: Port device team_slave_0 added [ 176.012697][ T8755] team0: Port device team_slave_1 added [ 176.026791][ T8768] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.048402][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.050230][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.056878][ T8755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.061200][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.063003][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.069793][ T8755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.097400][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.100551][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.143051][ T8768] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.160128][ T8755] hsr_slave_0: entered promiscuous mode [ 176.162098][ T8755] hsr_slave_1: entered promiscuous mode [ 176.163936][ T8755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.166340][ T8755] Cannot create hsr debugfs directory [ 176.178854][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.182174][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.239450][ T8768] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.284301][ T8755] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.294847][ T8755] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.303768][ T8755] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.324688][ T8755] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.348326][ T1142] bridge_slave_1: left allmulticast mode [ 176.350406][ T1142] bridge_slave_1: left promiscuous mode [ 176.352964][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.363471][ T1142] bridge_slave_0: left allmulticast mode [ 176.365559][ T1142] bridge_slave_0: left promiscuous mode [ 176.370406][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.660308][ T8782] syz.0.649 (8782): drop_caches: 2 [ 176.696262][ T1142]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.699961][ T1142]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.708763][ T1142]  (unregistering): Released all slaves [ 176.814841][ T1142] bond1 (unregistering): Released all slaves [ 176.825938][ T8768] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.860424][ T8768] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.868886][ T8768] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.873340][ T8768] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.907308][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.931981][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.937841][ T8793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.940325][ T8793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.952145][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.954126][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.961623][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.963532][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.981701][ T6011] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 176.998482][ T8755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.001360][ T8755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.127322][ T6011] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 177.130403][ T6011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.134978][ T6011] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 177.138497][ T6011] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 177.141344][ T6011] usb 5-1: Manufacturer: syz [ 177.162265][ T6011] usb 5-1: config 0 descriptor?? [ 177.198006][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 177.215286][ T1142] batadv_slave_1: left promiscuous mode [ 177.223013][ T1142] hsr_slave_0: left promiscuous mode [ 177.225186][ T1142] hsr_slave_1: left promiscuous mode [ 177.228338][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.230296][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.233079][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.235505][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.235977][ T6011] rc_core: IR keymap rc-hauppauge not found [ 177.239438][ T6011] Registered IR keymap rc-empty [ 177.240977][ T6011] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 177.247995][ T6011] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input30 [ 177.280574][ T1142] veth1_macvtap: left promiscuous mode [ 177.282085][ T1142] veth0_macvtap: left promiscuous mode [ 177.284015][ T1142] veth1_vlan: left promiscuous mode [ 177.285398][ T1142] veth0_vlan: left promiscuous mode [ 177.665930][ T5951] Bluetooth: hci4: command tx timeout [ 178.215868][ T6011] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 178.313053][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 178.391241][ T6011] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 178.393888][ T6011] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.394118][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 178.397581][ T6011] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 178.401122][ T6011] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 178.403212][ T6011] usb 8-1: Manufacturer: syz [ 178.406187][ T6011] usb 8-1: config 0 descriptor?? [ 178.469612][ T6011] rc_core: IR keymap rc-hauppauge not found [ 178.471761][ T6011] Registered IR keymap rc-empty [ 178.474532][ T6011] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1 [ 178.479518][ T6011] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1/input31 [ 179.005356][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.149770][ T8755] veth0_vlan: entered promiscuous mode [ 179.155451][ T8755] veth1_vlan: entered promiscuous mode [ 179.177262][ T8755] veth0_macvtap: entered promiscuous mode [ 179.182234][ T8755] veth1_macvtap: entered promiscuous mode [ 179.188804][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.191540][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.194030][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.198704][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.201533][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.204540][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.208257][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.216759][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.220351][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.223378][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.232144][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.234720][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.238501][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.242543][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.243523][ T8838] netlink: 'syz.4.656': attribute type 1 has an invalid length. [ 179.245695][ T8755] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.247792][ T8838] netlink: 224 bytes leftover after parsing attributes in process `syz.4.656'. [ 179.248784][ T8755] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.253493][ T8755] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.256152][ T8755] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.320921][ T1063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.322990][ T1063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.332493][ T1063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.334657][ T1063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.470398][ T1142] IPVS: stop unused estimator thread 0... [ 179.736087][ T5951] Bluetooth: hci4: command tx timeout [ 179.758149][ T9] usb 5-1: USB disconnect, device number 13 [ 179.904502][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 180.455558][ T8902] netlink: 'syz.4.664': attribute type 1 has an invalid length. [ 180.458340][ T8902] netlink: 224 bytes leftover after parsing attributes in process `syz.4.664'. [ 180.653844][ T8911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.667'. [ 180.656231][ T8911] netlink: 60 bytes leftover after parsing attributes in process `syz.4.667'. [ 180.710106][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 180.795965][ T6087] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 180.816199][ T8915] netlink: 20 bytes leftover after parsing attributes in process `syz.4.669'. [ 180.947256][ T6087] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 180.950106][ T6087] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.954084][ T6087] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 180.957221][ T6087] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 180.959873][ T6087] usb 10-1: Manufacturer: syz [ 180.963002][ T6087] usb 10-1: config 0 descriptor?? [ 180.992464][ T64] usb 8-1: USB disconnect, device number 13 [ 181.018029][ T6087] rc_core: IR keymap rc-hauppauge not found [ 181.020027][ T6087] Registered IR keymap rc-empty [ 181.022029][ T6087] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 181.026499][ T6087] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input32 [ 181.236172][ T8929] infiniband syz1: set down [ 181.237875][ T8929] infiniband syz1: added syzkaller0 [ 181.285557][ T8929] RDS/IB: syz1: added [ 181.290272][ T8929] smc: adding ib device syz1 with port count 1 [ 181.291937][ T8929] smc: ib device syz1 port 1 has pnetid [ 181.375870][ T2199] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 181.527041][ T2199] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.531303][ T2199] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 181.533927][ T2199] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.540902][ T2199] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 181.545222][ T2199] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 181.549819][ T2199] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.552178][ T2199] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.554253][ T2199] usb 5-1: Product: syz [ 181.555361][ T2199] usb 5-1: Manufacturer: syz [ 181.559818][ T2199] cdc_wdm 5-1:1.0: skipping garbage [ 181.561204][ T2199] cdc_wdm 5-1:1.0: skipping garbage [ 181.563957][ T2199] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 181.569732][ T2199] cdc_wdm 5-1:1.0: Unknown control protocol [ 181.825792][ T5951] Bluetooth: hci4: command tx timeout [ 182.316992][ T1063] smc: removing ib device syz1 [ 182.744767][ T8961] syz_tun: entered promiscuous mode [ 182.748227][ T8961] batadv_slave_1: entered promiscuous mode [ 182.750372][ T8961] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 182.752441][ T8961] Cannot create hsr debugfs directory [ 182.977802][ T6087] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 183.149762][ T6087] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 183.151987][ T6087] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.155205][ T6087] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 183.160407][ T6087] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 183.165495][ T6087] usb 8-1: Manufacturer: syz [ 183.170093][ T6087] usb 8-1: config 0 descriptor?? [ 183.226177][ T6087] rc_core: IR keymap rc-hauppauge not found [ 183.227814][ T6087] Registered IR keymap rc-empty [ 183.230307][ T6087] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1 [ 183.233450][ T6087] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1/input33 [ 183.691465][ T64] usb 10-1: USB disconnect, device number 2 [ 183.896053][ T5951] Bluetooth: hci4: command tx timeout [ 184.178512][ T6011] usb 5-1: USB disconnect, device number 14 [ 185.244866][ T8996] syz_tun: entered promiscuous mode [ 185.249009][ T8996] batadv_slave_1: entered promiscuous mode [ 185.251580][ T8996] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 185.253639][ T8996] Cannot create hsr debugfs directory [ 185.454489][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 185.656817][ T1910] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 185.662629][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.695'. [ 185.753826][ T6087] usb 8-1: USB disconnect, device number 14 [ 185.807156][ T1910] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 185.809397][ T1910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.812648][ T1910] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 185.815034][ T1910] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 185.818701][ T1910] usb 9-1: Manufacturer: syz [ 185.821901][ T1910] usb 9-1: config 0 descriptor?? [ 185.875820][ T1910] rc_core: IR keymap rc-hauppauge not found [ 185.877435][ T1910] Registered IR keymap rc-empty [ 185.878985][ T1910] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 185.882212][ T1910] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input34 [ 185.978813][ T9026] overlay: Unknown parameter 'measure' [ 185.985398][ T9026] ptrace attach of "/syz-executor exec"[5950] was attempted by "/syz-executor exec"[9026] [ 186.835648][ T9048] Invalid source name [ 186.841083][ T9048] UBIFS error (pid: 9048): cannot open "./file0", error -22 [ 186.846773][ T9040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.701'. [ 186.923747][ T9054] nfs4: Unknown parameter '¬¸°02¶' [ 187.758762][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.705'. [ 188.085462][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.706'. [ 188.143011][ T9077] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 188.495011][ T6082] usb 9-1: USB disconnect, device number 4 [ 188.687729][ T9082] infiniband syz1: set down [ 188.689601][ T9082] infiniband syz1: added syzkaller0 [ 188.758280][ T9082] RDS/IB: syz1: added [ 188.759827][ T9082] smc: adding ib device syz1 with port count 1 [ 188.766214][ T9082] smc: ib device syz1 port 1 has pnetid [ 189.089143][ T9100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.149416][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 189.158360][ T9104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.717'. [ 189.422745][ T1142] smc: removing ib device syz1 [ 189.535940][ T6082] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 189.768408][ T6082] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 189.770708][ T6082] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.777083][ T6082] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 189.779620][ T6082] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 189.781836][ T6082] usb 8-1: Manufacturer: syz [ 189.931336][ T6082] usb 8-1: config 0 descriptor?? [ 190.145989][ T6082] rc_core: IR keymap rc-hauppauge not found [ 190.147607][ T6082] Registered IR keymap rc-empty [ 190.149137][ T6082] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 190.152111][ T6082] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input35 [ 190.436658][ T9147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.724'. [ 190.595397][ T9148] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 190.604805][ T9148] Cannot find add_set index 3 as target [ 190.824325][ T9168] netlink: 'syz.0.726': attribute type 10 has an invalid length. [ 191.117053][ T5985] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 191.277603][ T5985] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.280724][ T5985] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 191.283267][ T5985] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.285529][ T5985] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 191.288750][ T5985] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 191.293975][ T5985] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.296604][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.298811][ T5985] usb 5-1: Product: syz [ 191.299922][ T5985] usb 5-1: Manufacturer: syz [ 191.303652][ T5985] cdc_wdm 5-1:1.0: skipping garbage [ 191.305022][ T5985] cdc_wdm 5-1:1.0: skipping garbage [ 191.309900][ T9183] netlink: 36 bytes leftover after parsing attributes in process `syz.5.728'. [ 191.315452][ T5985] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 191.317372][ T5985] cdc_wdm 5-1:1.0: Unknown control protocol [ 191.518970][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 191.521118][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 191.523318][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 191.524955][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 191.526699][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 191.528384][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 191.529046][ T5985] usb 5-1: USB disconnect, device number 16 [ 191.529839][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 191.660212][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 192.323578][ T6011] usb 8-1: USB disconnect, device number 15 [ 192.525522][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 192.619608][ T9235] IPVS: length: 198 != 24 [ 192.701975][ T9233] infiniband syz1: set down [ 192.703516][ T9233] infiniband syz1: added syzkaller0 [ 192.798191][ T9233] RDS/IB: syz1: added [ 192.799910][ T9233] smc: adding ib device syz1 with port count 1 [ 192.802738][ T9233] smc: ib device syz1 port 1 has pnetid [ 193.008193][ T9245] o2cb: This node has not been configured. [ 193.009859][ T9245] o2cb: Cluster check failed. Fix errors before retrying. [ 193.011716][ T9245] (syz.4.743,9245,1):user_dlm_register:674 ERROR: status = -22 [ 193.017215][ T9245] (syz.4.743,9245,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 193.245155][ T9258] syz.5.747[9258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.245245][ T9258] syz.5.747[9258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.250831][ T9258] syz.5.747[9258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.265165][ T9257] netlink: 'syz.5.747': attribute type 10 has an invalid length. [ 193.282229][ T9257] team0: Device ipvlan1 failed to register rx_handler [ 193.347095][ T8] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 193.381486][ T9266] netlink: 'syz.0.749': attribute type 1 has an invalid length. [ 193.384380][ T9266] netlink: 224 bytes leftover after parsing attributes in process `syz.0.749'. [ 193.456565][ T69] smc: removing ib device syz1 [ 193.520851][ T8] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 193.523062][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.529611][ T8] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 193.532074][ T8] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 193.534133][ T8] usb 9-1: Manufacturer: syz [ 193.547017][ T8] usb 9-1: config 0 descriptor?? [ 193.589135][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.625858][ T8] rc_core: IR keymap rc-hauppauge not found [ 193.627504][ T8] Registered IR keymap rc-empty [ 193.637670][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 193.646849][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input36 [ 194.175180][ T9291] netlink: 'syz.3.753': attribute type 4 has an invalid length. [ 194.177527][ T9291] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.753'. [ 194.202979][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.754'. [ 194.369516][ T9296] can0: slcan on ttyS3. [ 194.446615][ T9296] can0 (unregistered): slcan off ttyS3. [ 194.628480][ T9299] random: crng reseeded on system resumption [ 194.679724][ T9299] can0: slcan on ttyS3. [ 194.686000][ T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 194.856734][ T8] usb 10-1: Using ep0 maxpacket: 8 [ 194.865900][ T8] usb 10-1: unable to get BOS descriptor or descriptor too short [ 194.872195][ T8] usb 10-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 194.875266][ T8] usb 10-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1023 [ 194.878357][ T8] usb 10-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 194.884473][ T8] usb 10-1: config 1 interface 0 has no altsetting 0 [ 194.892010][ T8] usb 10-1: string descriptor 0 read error: -22 [ 194.894319][ T8] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.897275][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.904632][ T9297] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 194.911623][ T9297] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 195.135980][ T8] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 195.144481][ T8] usb 10-1: USB disconnect, device number 3 [ 195.193272][ T9315] netlink: 'syz.0.758': attribute type 1 has an invalid length. [ 195.196162][ T9315] netlink: 224 bytes leftover after parsing attributes in process `syz.0.758'. [ 195.207246][ T9295] can0 (unregistered): slcan off ttyS3. [ 195.212100][ T9309] infiniband syz1: set down [ 195.213505][ T9309] infiniband syz1: added syzkaller0 [ 195.242805][ T9309] RDS/IB: syz1: added [ 195.244535][ T9309] smc: adding ib device syz1 with port count 1 [ 195.252238][ T9309] smc: ib device syz1 port 1 has pnetid [ 195.698239][ T69] smc: removing ib device syz1 [ 195.791641][ T9328] Device name cannot be null; rc = [-22] [ 196.032985][ T9331] blk_print_req_error: 79 callbacks suppressed [ 196.032999][ T9331] I/O error, dev loop7, sector 12032 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 196.039650][ T9331] I/O error, dev loop7, sector 12288 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 196.042290][ T9331] I/O error, dev loop7, sector 12032 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.044761][ T9331] buffer_io_error: 39 callbacks suppressed [ 196.044769][ T9331] Buffer I/O error on dev loop7, logical block 1504, async page read [ 196.065303][ T9331] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 196.067901][ T9331] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 196.070184][ T9331] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 196.072424][ T9331] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 196.074636][ T9331] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 196.080467][ T9331] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 196.082673][ T9331] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 196.084836][ T9331] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 196.087583][ T9331] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 196.095843][ T9331] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 196.101569][ T9331] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 196.108912][ T9331] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 196.109041][ T6011] usb 9-1: USB disconnect, device number 5 [ 196.115674][ T9331] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 196.121764][ T9331] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 196.128766][ T9331] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 196.134578][ T9331] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 196.350532][ T9346] Invalid ELF header len 5 [ 196.376130][ T9346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.490081][ T9353] netlink: 'syz.0.767': attribute type 1 has an invalid length. [ 196.492132][ T9353] netlink: 224 bytes leftover after parsing attributes in process `syz.0.767'. [ 196.521724][ T9355] netlink: 'syz.0.768': attribute type 8 has an invalid length. [ 196.523809][ T9355] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.768'. [ 196.530852][ T9355] veth0_to_bridge: entered promiscuous mode [ 196.534222][ T9354] veth0_to_bridge: left promiscuous mode [ 196.612195][ T9357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 196.614668][ T9357] netlink: 60 bytes leftover after parsing attributes in process `syz.0.769'. [ 196.706802][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'. [ 197.782555][ T9380] netlink: 'syz.3.774': attribute type 10 has an invalid length. [ 197.786315][ T9380] bond0: (slave wlan1): Opening slave failed [ 197.799627][ T9380] ptrace attach of "/syz-executor exec"[5955] was attempted by "/syz-executor exec"[9380] [ 197.911189][ T9382] overlayfs: cannot append lower layer [ 198.035582][ T9394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.778'. [ 198.039635][ T9394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.778'. [ 198.067526][ T9391] block nbd0: NBD_DISCONNECT [ 198.074650][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'. [ 198.079949][ T9391] block nbd0: Disconnected due to user request. [ 198.082684][ T9391] block nbd0: shutting down sockets [ 199.200489][ T9419] netlink: 28 bytes leftover after parsing attributes in process `syz.5.788'. [ 199.203606][ T9419] netlink: 60 bytes leftover after parsing attributes in process `syz.5.788'. [ 199.226025][ T9422] fuse: root generation should be zero [ 199.291205][ T9417] overlayfs: statfs failed on './file0' [ 199.387089][ T9435] netlink: 'syz.0.794': attribute type 1 has an invalid length. [ 199.526711][ T9441] Unsupported ieee802154 address type: 0 [ 199.786807][ T9455] netlink: 'syz.0.798': attribute type 13 has an invalid length. [ 199.789404][ T9455] macvtap0: entered promiscuous mode [ 199.796003][ T9455] macvtap0: refused to change device tx_queue_len [ 199.937346][ T9457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.774867][ T9490] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 200.844272][ T9486] infiniband syz1: set down [ 200.846052][ T9486] infiniband syz1: added syzkaller0 [ 200.885401][ T9486] RDS/IB: syz1: added [ 200.887964][ T9486] smc: adding ib device syz1 with port count 1 [ 200.889672][ T9486] smc: ib device syz1 port 1 has pnetid [ 201.243742][ T1044] smc: removing ib device syz1 [ 201.630425][ T9501] netlink: 'syz.4.810': attribute type 1 has an invalid length. [ 201.632298][ T9501] __nla_validate_parse: 3 callbacks suppressed [ 201.632305][ T9501] netlink: 224 bytes leftover after parsing attributes in process `syz.4.810'. [ 201.798123][ T9508] netlink: 'syz.4.812': attribute type 4 has an invalid length. [ 201.801472][ T9508] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.812'. [ 202.378994][ T9515] random: crng reseeded on system resumption [ 202.389762][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 202.397546][ T9511] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 202.411177][ T9511] kvm: pic: level sensitive irq not supported [ 202.411694][ T9511] kvm: pic: non byte read [ 202.415480][ T9511] kvm: pic: level sensitive irq not supported [ 202.415696][ T9511] kvm: pic: non byte read [ 202.420085][ T9511] kvm: pic: level sensitive irq not supported [ 202.420327][ T9511] kvm: pic: non byte read [ 202.562579][ T9522] binder_alloc: 6143: binder_alloc_buf, no vma [ 202.567803][ T9522] syzkaller0 speed is unknown, defaulting to 1000 [ 202.578105][ T9522] syzkaller0 speed is unknown, defaulting to 1000 [ 202.582261][ T9522] syzkaller0 speed is unknown, defaulting to 1000 [ 202.712982][ T9522] infiniband syz1: set down [ 202.714274][ T35] syzkaller0 speed is unknown, defaulting to 1000 [ 202.716432][ T9522] infiniband syz1: added syzkaller0 [ 202.756823][ T9522] RDS/IB: syz1: added [ 202.759299][ T9522] smc: adding ib device syz1 with port count 1 [ 202.761337][ T9522] smc: ib device syz1 port 1 has pnetid [ 202.766174][ T9522] syzkaller0 speed is unknown, defaulting to 1000 [ 202.780835][ T35] syzkaller0 speed is unknown, defaulting to 1000 [ 202.815909][ T8] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 202.880844][ T9522] syzkaller0 speed is unknown, defaulting to 1000 [ 202.916959][ T9522] syzkaller0 speed is unknown, defaulting to 1000 [ 202.952197][ T9522] syzkaller0 speed is unknown, defaulting to 1000 [ 203.003485][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.006794][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.009578][ T8] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.013117][ T8] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.015628][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.021201][ T8] usb 10-1: config 0 descriptor?? [ 203.243527][ T8] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 203.249518][ T8] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 203.661261][ T6087] usb 10-1: USB disconnect, device number 4 [ 203.706904][ T9548] FAULT_INJECTION: forcing a failure. [ 203.706904][ T9548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.710929][ T9548] CPU: 0 UID: 0 PID: 9548 Comm: syz.5.823 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 203.713653][ T9548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.716410][ T9548] Call Trace: [ 203.717286][ T9548] [ 203.718061][ T9548] dump_stack_lvl+0x16c/0x1f0 [ 203.719301][ T9548] should_fail_ex+0x497/0x5b0 [ 203.720531][ T9548] _copy_to_user+0x32/0xd0 [ 203.721694][ T9548] simple_read_from_buffer+0xd0/0x160 [ 203.723082][ T9548] proc_fail_nth_read+0x198/0x270 [ 203.724397][ T9548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.725827][ T9548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.727256][ T9548] vfs_read+0x1df/0xbe0 [ 203.728342][ T9548] ? __fget_files+0x1fc/0x3a0 [ 203.729566][ T9548] ? __pfx___mutex_lock+0x10/0x10 [ 203.730877][ T9548] ? __pfx_vfs_read+0x10/0x10 [ 203.732131][ T9548] ? __fget_files+0x206/0x3a0 [ 203.733364][ T9548] ksys_read+0x12b/0x250 [ 203.734471][ T9548] ? __pfx_ksys_read+0x10/0x10 [ 203.735747][ T9548] __do_fast_syscall_32+0x73/0x120 [ 203.737042][ T9548] do_fast_syscall_32+0x32/0x80 [ 203.738321][ T9548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.739979][ T9548] RIP: 0023:0xf7fd5579 [ 203.741040][ T9548] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 203.746006][ T9548] RSP: 002b:00000000f5126590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 203.748174][ T9548] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5126620 [ 203.750203][ T9548] RDX: 000000000000000f RSI: 00000000f7463ff4 RDI: 0000000000000000 [ 203.752239][ T9548] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 203.754278][ T9548] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 203.756320][ T9548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.758497][ T9548] [ 203.974909][ T9559] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 204.339989][ T9579] netlink: 'syz.5.833': attribute type 1 has an invalid length. [ 204.342035][ T9579] netlink: 224 bytes leftover after parsing attributes in process `syz.5.833'. [ 204.583697][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 204.847883][ T9598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.841'. [ 204.850320][ T9598] netlink: 60 bytes leftover after parsing attributes in process `syz.3.841'. [ 204.860375][ T9596] netlink: 'syz.5.840': attribute type 4 has an invalid length. [ 204.862425][ T9596] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.840'. [ 204.945987][ T9601] netlink: 'syz.4.842': attribute type 1 has an invalid length. [ 204.948335][ T9601] netlink: 224 bytes leftover after parsing attributes in process `syz.4.842'. [ 205.020012][ T9605] xt_bpf: check failed: parse error [ 205.205914][ T9610] usb usb4: usbfs: process 9610 (syz.4.845) did not claim interface 0 before use [ 205.263074][ T9599] random: crng reseeded on system resumption [ 206.182270][ T9619] program syz.0.847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.611472][ T39] audit: type=1326 audit(1734760839.170:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.0.852" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 206.618948][ T39] audit: type=1326 audit(1734760839.170:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.0.852" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 206.627172][ T39] audit: type=1326 audit(1734760839.170:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.0.852" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707e579 code=0x0 [ 206.663705][ T39] audit: type=1326 audit(1734760839.220:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.0.852" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 206.669381][ T39] audit: type=1326 audit(1734760839.220:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.0.852" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 206.676302][ T39] audit: type=1326 audit(1734760839.220:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.0.852" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 206.683961][ T39] audit: type=1326 audit(1734760839.220:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.0.852" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 206.694172][ T39] audit: type=1326 audit(1734760839.220:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.0.852" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 206.703998][ T39] audit: type=1326 audit(1734760839.220:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.0.852" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 206.709527][ T39] audit: type=1326 audit(1734760839.220:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.0.852" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 206.785889][ T5989] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 206.955910][ T5989] usb 9-1: Using ep0 maxpacket: 16 [ 206.968112][ T5989] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 206.970876][ T5989] usb 9-1: can't read configurations, error -22 [ 207.044648][ T9644] syzkaller0 speed is unknown, defaulting to 1000 [ 207.106381][ T5989] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 207.255814][ T5989] usb 9-1: Using ep0 maxpacket: 16 [ 207.259365][ T5989] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 207.261579][ T5989] usb 9-1: can't read configurations, error -22 [ 207.264687][ T5989] usb usb9-port1: attempt power cycle [ 207.605870][ T5989] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 207.628422][ T5989] usb 9-1: Using ep0 maxpacket: 16 [ 207.632845][ T5989] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 207.635033][ T5989] usb 9-1: can't read configurations, error -22 [ 207.660586][ T5951] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 207.668152][ T9655] netlink: 'syz.0.857': attribute type 4 has an invalid length. [ 207.765931][ T5989] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 207.792149][ T5989] usb 9-1: Using ep0 maxpacket: 16 [ 207.795333][ T5989] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 207.797824][ T5989] usb 9-1: can't read configurations, error -22 [ 207.799646][ T5989] usb usb9-port1: unable to enumerate USB device [ 207.898175][ T9658] usb usb4: usbfs: process 9658 (syz.3.858) did not claim interface 0 before use [ 208.050046][ T9655] syz.0.857 (9655) used greatest stack depth: 20336 bytes left [ 208.248491][ T9667] netlink: 'syz.0.859': attribute type 4 has an invalid length. [ 208.251376][ T9667] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.859'. [ 208.820039][ T9672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.862'. [ 208.822245][ T9672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.862'. [ 208.854598][ T9674] netlink: 'syz.3.863': attribute type 1 has an invalid length. [ 208.876436][ T9674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.909953][ T9674] bond2: (slave veth7): Enslaving as an active interface with a down link [ 209.058312][ T9682] random: crng reseeded on system resumption [ 209.355953][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 209.450158][ T9705] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 209.495716][ T9711] usb usb4: usbfs: process 9711 (syz.0.871) did not claim interface 0 before use [ 209.691955][ T9718] netlink: 'syz.5.874': attribute type 1 has an invalid length. [ 210.532486][ T9728] syzkaller0 speed is unknown, defaulting to 1000 [ 210.663855][ T9731] netlink: 'syz.5.877': attribute type 4 has an invalid length. [ 210.665697][ T9731] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.877'. [ 210.670350][ T9726] syzkaller0 speed is unknown, defaulting to 1000 [ 211.033674][ T9739] random: crng reseeded on system resumption [ 211.036584][ T9738] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 211.038831][ T9738] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 211.498610][ T5951] Bluetooth: to_multiplier 8 < 10 [ 211.840542][ T9753] usb usb4: usbfs: process 9753 (syz.5.884) did not claim interface 0 before use [ 212.215682][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 212.404934][ T9769] netlink: zone id is out of range [ 212.407453][ T9769] netlink: zone id is out of range [ 212.408921][ T9769] netlink: zone id is out of range [ 212.410865][ T9769] netlink: zone id is out of range [ 212.412788][ T9769] netlink: zone id is out of range [ 212.414226][ T9769] netlink: zone id is out of range [ 212.418249][ T9769] netlink: zone id is out of range [ 212.420074][ T9769] netlink: zone id is out of range [ 212.421573][ T9769] netlink: set zone limit has 8 unknown bytes [ 212.737085][ T9779] syzkaller0 speed is unknown, defaulting to 1000 [ 212.778849][ T9785] netlink: 'syz.4.891': attribute type 4 has an invalid length. [ 212.791261][ T9785] netlink: 'syz.4.891': attribute type 4 has an invalid length. [ 213.575965][ T5951] Bluetooth: hci4: command tx timeout [ 213.843888][ T9806] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 214.258873][ T9822] syzkaller1: entered promiscuous mode [ 214.260350][ T9822] syzkaller1: entered allmulticast mode [ 214.346246][ T9829] mkiss: ax0: crc mode is auto. [ 214.661690][ T9837] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.887617][ T9843] syzkaller0 speed is unknown, defaulting to 1000 [ 215.428196][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.909'. [ 215.432447][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.908'. [ 215.436804][ T9854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.908'. [ 215.443566][ T5951] ================================================================== [ 215.446060][ T5951] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x16a/0x170 [ 215.448561][ T5951] Read of size 8 at addr ffff888051104188 by task kworker/u33:3/5951 [ 215.451137][ T5951] [ 215.452233][ T5951] CPU: 2 UID: 0 PID: 5951 Comm: kworker/u33:3 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 215.455483][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.458206][ T5951] Workqueue: hci2 hci_rx_work [ 215.459473][ T5951] Call Trace: [ 215.460284][ T5951] [ 215.460998][ T5951] dump_stack_lvl+0x116/0x1f0 [ 215.462138][ T5951] print_report+0xc3/0x620 [ 215.463243][ T5951] ? __virt_addr_valid+0x5e/0x590 [ 215.464555][ T5951] ? __phys_addr+0xc6/0x150 [ 215.465729][ T5951] kasan_report+0xd9/0x110 [ 215.466882][ T5951] ? l2cap_sock_ready_cb+0x16a/0x170 [ 215.468281][ T5951] ? l2cap_sock_ready_cb+0x16a/0x170 [ 215.470001][ T5951] l2cap_sock_ready_cb+0x16a/0x170 [ 215.471335][ T5951] l2cap_le_start+0x1ec/0xe30 [ 215.472545][ T5951] ? __pfx___mutex_lock+0x10/0x10 [ 215.474093][ T5951] ? __pfx_l2cap_le_start+0x10/0x10 [ 215.475962][ T5951] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 215.477530][ T5951] ? __l2cap_chan_add+0x3db/0xa20 [ 215.478836][ T5951] l2cap_connect_cfm+0x9a9/0xf10 [ 215.480088][ T5951] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 215.481458][ T5951] ? hci_cb_lookup+0x319/0x4e0 [ 215.482690][ T5951] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 215.484528][ T5951] le_conn_complete_evt+0x1623/0x1d10 [ 215.486287][ T5951] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 215.488296][ T5951] hci_le_conn_complete_evt+0x23c/0x370 [ 215.490256][ T5951] hci_le_meta_evt+0x2e2/0x5d0 [ 215.491924][ T5951] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 215.494039][ T5951] hci_event_packet+0x666/0x1190 [ 215.495816][ T5951] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 215.497697][ T5951] ? __pfx_hci_event_packet+0x10/0x10 [ 215.499590][ T5951] ? mark_held_locks+0x9f/0xe0 [ 215.501302][ T5951] ? kcov_remote_start+0x3cf/0x6e0 [ 215.503136][ T5951] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.504988][ T5951] hci_rx_work+0x2c5/0x16b0 [ 215.506586][ T5951] ? process_one_work+0x8bb/0x1b30 [ 215.508406][ T5951] process_one_work+0x958/0x1b30 [ 215.510169][ T5951] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 215.512171][ T5951] ? __pfx_process_one_work+0x10/0x10 [ 215.514077][ T5951] ? rcu_is_watching+0x12/0xc0 [ 215.515816][ T5951] ? assign_work+0x1a0/0x250 [ 215.517500][ T5951] worker_thread+0x6c8/0xf00 [ 215.519165][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 215.520563][ T5951] kthread+0x2c1/0x3a0 [ 215.521812][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.523520][ T5951] ? __pfx_kthread+0x10/0x10 [ 215.524696][ T5951] ret_from_fork+0x45/0x80 [ 215.525840][ T5951] ? __pfx_kthread+0x10/0x10 [ 215.527036][ T5951] ret_from_fork_asm+0x1a/0x30 [ 215.528688][ T5951] [ 215.529779][ T5951] [ 215.530642][ T5951] Allocated by task 9853: [ 215.532163][ T5951] kasan_save_stack+0x33/0x60 [ 215.533824][ T5951] kasan_save_track+0x14/0x30 [ 215.535462][ T5951] __kasan_kmalloc+0xaa/0xb0 [ 215.536986][ T5951] __kmalloc_noprof+0x21a/0x4f0 [ 215.538328][ T5951] sk_prot_alloc+0x1a8/0x2a0 [ 215.539521][ T5951] sk_alloc+0x36/0xb90 [ 215.540869][ T5951] bt_sock_alloc+0x3b/0x3a0 [ 215.542053][ T5951] l2cap_sock_alloc.constprop.0+0x33/0x1c0 [ 215.543503][ T5951] l2cap_sock_create+0x123/0x1f0 [ 215.544713][ T5951] bt_sock_create+0x182/0x350 [ 215.545922][ T5951] __sock_create+0x335/0x8d0 [ 215.547203][ T5951] __sys_socket+0x14f/0x260 [ 215.548787][ T5951] __ia32_sys_socket+0x72/0xb0 [ 215.550454][ T5951] __do_fast_syscall_32+0x73/0x120 [ 215.552318][ T5951] do_fast_syscall_32+0x32/0x80 [ 215.554090][ T5951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.556326][ T5951] [ 215.557177][ T5951] Freed by task 9854: [ 215.558589][ T5951] kasan_save_stack+0x33/0x60 [ 215.560298][ T5951] kasan_save_track+0x14/0x30 [ 215.561996][ T5951] kasan_save_free_info+0x3b/0x60 [ 215.563804][ T5951] __kasan_slab_free+0x51/0x70 [ 215.565480][ T5951] kfree+0x14f/0x4b0 [ 215.566867][ T5951] __sk_destruct+0x5eb/0x720 [ 215.568525][ T5951] sk_destruct+0xc2/0xf0 [ 215.570003][ T5951] __sk_free+0xf4/0x3e0 [ 215.571495][ T5951] sk_free+0x6a/0x90 [ 215.572897][ T5951] l2cap_sock_kill+0x171/0x2d0 [ 215.574591][ T5951] l2cap_sock_release+0x189/0x210 [ 215.576403][ T5951] __sock_release+0xb0/0x270 [ 215.578056][ T5951] sock_close+0x1c/0x30 [ 215.579539][ T5951] __fput+0x3f8/0xb60 [ 215.580983][ T5951] task_work_run+0x14e/0x250 [ 215.582631][ T5951] syscall_exit_to_user_mode+0x27b/0x2a0 [ 215.584613][ T5951] __do_fast_syscall_32+0x80/0x120 [ 215.586238][ T5951] do_fast_syscall_32+0x32/0x80 [ 215.587707][ T5951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.589908][ T5951] [ 215.590788][ T5951] The buggy address belongs to the object at ffff888051104000 [ 215.590788][ T5951] which belongs to the cache kmalloc-2k of size 2048 [ 215.595480][ T5951] The buggy address is located 392 bytes inside of [ 215.595480][ T5951] freed 2048-byte region [ffff888051104000, ffff888051104800) [ 215.600119][ T5951] [ 215.600959][ T5951] The buggy address belongs to the physical page: [ 215.603198][ T5951] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51100 [ 215.605949][ T5951] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 215.608348][ T5951] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 215.610360][ T5951] page_type: f5(slab) [ 215.611362][ T5951] raw: 04fff00000000040 ffff88801ac42f00 ffffea0001a1a200 dead000000000002 [ 215.613493][ T5951] raw: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 215.615656][ T5951] head: 04fff00000000040 ffff88801ac42f00 ffffea0001a1a200 dead000000000002 [ 215.618415][ T5951] head: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 215.621472][ T5951] head: 04fff00000000003 ffffea0001444001 ffffffffffffffff 0000000000000000 [ 215.624463][ T5951] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 215.627511][ T5951] page dumped because: kasan: bad access detected [ 215.629761][ T5951] page_owner tracks the page as allocated [ 215.631771][ T5951] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5953, tgid 5953 (syz-executor), ts 48159822779, free_ts 48157306124 [ 215.638098][ T5951] post_alloc_hook+0x2d1/0x350 [ 215.639351][ T5951] get_page_from_freelist+0xfce/0x2f80 [ 215.641187][ T5951] __alloc_pages_noprof+0x223/0x25b0 [ 215.643019][ T5951] alloc_pages_mpol_noprof+0x2c9/0x610 [ 215.644414][ T5951] new_slab+0x2c9/0x410 [ 215.645523][ T5951] ___slab_alloc+0xce2/0x1650 [ 215.646729][ T5951] __slab_alloc.constprop.0+0x56/0xb0 [ 215.648121][ T5951] __kmalloc_cache_noprof+0xf6/0x420 [ 215.649454][ T5951] rtnl_newlink+0x108/0x1d70 [ 215.650628][ T5951] rtnetlink_rcv_msg+0x95b/0xea0 [ 215.651864][ T5951] netlink_rcv_skb+0x165/0x410 [ 215.653046][ T5951] netlink_unicast+0x53c/0x7f0 [ 215.654280][ T5951] netlink_sendmsg+0x8b8/0xd70 [ 215.655494][ T5951] __sys_sendto+0x488/0x4f0 [ 215.656658][ T5951] __do_compat_sys_socketcall+0x5e2/0x700 [ 215.658147][ T5951] __do_fast_syscall_32+0x73/0x120 [ 215.659473][ T5951] page last free pid 30 tgid 30 stack trace: [ 215.660920][ T5951] free_unref_page+0x661/0x1080 [ 215.662135][ T5951] __folio_put+0x32a/0x450 [ 215.663329][ T5951] put_page+0x21e/0x280 [ 215.664687][ T5951] skb_release_data+0x4d7/0x730 [ 215.665973][ T5951] napi_consume_skb+0x15a/0x220 [ 215.667292][ T5951] net_rx_action+0x47c/0x1010 [ 215.668456][ T5951] handle_softirqs+0x213/0x8f0 [ 215.669668][ T5951] do_softirq+0xb2/0xf0 [ 215.670891][ T5951] __local_bh_enable_ip+0x100/0x120 [ 215.672476][ T5951] __dev_queue_xmit+0x8b0/0x43e0 [ 215.674030][ T5951] ip6_finish_output2+0x1801/0x2070 [ 215.675771][ T5951] ip6_finish_output+0x3f9/0x1360 [ 215.677204][ T5951] ip6_output+0x1f8/0x540 [ 215.678478][ T5951] mld_sendpack+0x9f0/0x11d0 [ 215.679873][ T5951] mld_ifc_work+0x740/0xca0 [ 215.681322][ T5951] process_one_work+0x958/0x1b30 [ 215.682868][ T5951] [ 215.683640][ T5951] Memory state around the buggy address: [ 215.685445][ T5951] ffff888051104080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.688002][ T5951] ffff888051104100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.690516][ T5951] >ffff888051104180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.692796][ T5951] ^ [ 215.694114][ T5951] ffff888051104200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.696541][ T5951] ffff888051104280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.698861][ T5951] ================================================================== [ 215.701336][ C2] vkms_vblank_simulate: vblank timer overrun [ 215.704876][ T5951] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 215.706968][ T5951] CPU: 2 UID: 0 PID: 5951 Comm: kworker/u33:3 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 215.709849][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.713260][ T5951] Workqueue: hci2 hci_rx_work [ 215.714832][ T5951] Call Trace: [ 215.715926][ T5951] [ 215.716923][ T5951] dump_stack_lvl+0x3d/0x1f0 [ 215.718486][ T5951] panic+0x71d/0x800 [ 215.719809][ T5951] ? __pfx_panic+0x10/0x10 [ 215.721136][ T5951] ? irqentry_exit+0x3b/0x90 [ 215.722451][ T5951] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.723994][ T5951] ? preempt_schedule_thunk+0x1a/0x30 [ 215.725724][ T5951] ? preempt_schedule_common+0x44/0xc0 [ 215.727527][ T5951] check_panic_on_warn+0xab/0xb0 [ 215.729159][ T5951] end_report+0x117/0x180 [ 215.730700][ T5951] kasan_report+0xe9/0x110 [ 215.732245][ T5951] ? l2cap_sock_ready_cb+0x16a/0x170 [ 215.733983][ T5951] ? l2cap_sock_ready_cb+0x16a/0x170 [ 215.735759][ T5951] l2cap_sock_ready_cb+0x16a/0x170 [ 215.737452][ T5951] l2cap_le_start+0x1ec/0xe30 [ 215.738708][ T5951] ? __pfx___mutex_lock+0x10/0x10 [ 215.740337][ T5951] ? __pfx_l2cap_le_start+0x10/0x10 [ 215.741704][ T5951] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 215.743353][ T5951] ? __l2cap_chan_add+0x3db/0xa20 [ 215.744577][ T5951] l2cap_connect_cfm+0x9a9/0xf10 [ 215.745835][ T5951] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 215.747345][ T5951] ? hci_cb_lookup+0x319/0x4e0 [ 215.748640][ T5951] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 215.750163][ T5951] le_conn_complete_evt+0x1623/0x1d10 [ 215.751607][ T5951] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 215.753143][ T5951] hci_le_conn_complete_evt+0x23c/0x370 [ 215.754667][ T5951] hci_le_meta_evt+0x2e2/0x5d0 [ 215.756031][ T5951] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 215.757908][ T5951] hci_event_packet+0x666/0x1190 [ 215.759325][ T5951] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 215.760764][ T5951] ? __pfx_hci_event_packet+0x10/0x10 [ 215.762235][ T5951] ? mark_held_locks+0x9f/0xe0 [ 215.763489][ T5951] ? kcov_remote_start+0x3cf/0x6e0 [ 215.764939][ T5951] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.766218][ T5951] hci_rx_work+0x2c5/0x16b0 [ 215.767434][ T5951] ? process_one_work+0x8bb/0x1b30 [ 215.768915][ T5951] process_one_work+0x958/0x1b30 [ 215.770276][ T5951] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 215.771732][ T5951] ? __pfx_process_one_work+0x10/0x10 [ 215.773094][ T5951] ? rcu_is_watching+0x12/0xc0 [ 215.774389][ T5951] ? assign_work+0x1a0/0x250 [ 215.775731][ T5951] worker_thread+0x6c8/0xf00 [ 215.776986][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 215.778419][ T5951] kthread+0x2c1/0x3a0 [ 215.779573][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.780912][ T5951] ? __pfx_kthread+0x10/0x10 [ 215.782080][ T5951] ret_from_fork+0x45/0x80 [ 215.783225][ T5951] ? __pfx_kthread+0x10/0x10 [ 215.784480][ T5951] ret_from_fork_asm+0x1a/0x30 [ 215.785699][ T5951] [ 215.787023][ T5951] Kernel Offset: disabled [ 215.788201][ T5951] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:00:48 Registers: info registers vcpu 0 CPU#0 RAX=00000002000008fd RBX=ffff888022bc0000 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000008 RSP=ffffc90000007d70 R8 =0000000000000000 R9 =fffffbfff2039c72 R10=ffffffff901ce397 R11=0000000000000004 R12=0000000000000003 R13=1ffff92000000faf R14=0000000000000001 R15=ffffc90000007d98 RIP=ffffffff8147a098 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000568484c0 CR3=0000000064eb8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff90ba3a62 RBX=ffffffff9035b040 RCX=dffffc0000000000 RDX=1ffffffff206b608 RSI=0000000000000000 RDI=ffffffff9035b040 RBP=ffffffff9035b040 RSP=ffffc900043274f8 R8 =ffffffff90ba3a68 R9 =ffffffff90ba93a0 R10=ffffc900043275a8 R11=000000000000e681 R12=ffffffff9035b040 R13=ffffffff81e68181 R14=ffffffff9035b040 R15=ffffffff9035b040 RIP=ffffffff8148e4f0 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005e5a2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142675 RDI=ffffffff9a6672c0 RBP=ffffffff9a667280 RSP=ffffc90003e47170 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000035393554 R12=0000000000000000 R13=0000000000000035 R14=ffffffff85142610 R15=0000000000000000 RIP=ffffffff8514269f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000007490a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b646740 RCX=ffffffff818d526c RDX=ffff88802537a440 RSI=ffffffff818d5246 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000676f9a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=ffffed10056c8ce9 R13=0000000000000001 R14=ffff88802b646748 R15=ffff88802b73ff80 RIP=ffffffff818d5248 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200000c0 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000