last executing test programs: 1m51.908999331s ago: executing program 3 (id=1298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x20, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = openat$tun(0xffffff9c, &(0x7f0000000300), 0xc0800, 0x0) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000340)=0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010000304000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=0x0], 0x40}}, 0x0) io_setup(0x2, &(0x7f0000000180)=0x0) r7 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_submit(r6, 0x0, &(0x7f0000000340)) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) get_mempolicy(0x0, 0x0, 0xfffffffffffffefe, &(0x7f0000340000/0x3000)=nil, 0x1) sendto$inet6(r0, &(0x7f00000000c0)="cb", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x3f00}}, 0x1c) r8 = dup(0xffffffffffffffff) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) recvmmsg(r8, &(0x7f0000004b80)=[{{&(0x7f0000000380)=@isdn, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)=""/247, 0xf7}, {&(0x7f0000000580)=""/200, 0xc8}, {&(0x7f0000000680)=""/153, 0x99}], 0x3}, 0x4}, {{&(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/39, 0x27}, {&(0x7f0000000800)=""/184, 0xb8}], 0x2, &(0x7f0000000900)=""/122, 0x7a}, 0x5}, {{&(0x7f0000000980)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000a00)=""/115, 0x73}, {&(0x7f0000000a80)=""/181, 0xb5}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/204, 0xcc}, {&(0x7f0000001c40)=""/71, 0x47}, {&(0x7f0000001cc0)=""/97, 0x61}, {&(0x7f0000001d40)=""/130, 0x82}, {&(0x7f0000001e00)=""/199, 0xc7}, {&(0x7f0000001f00)=""/253, 0xfd}], 0x9, &(0x7f0000002080)=""/219, 0xdb}, 0x3}, {{&(0x7f0000002180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002200)=""/225, 0xe1}, {&(0x7f0000002300)=""/215, 0xd7}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/187, 0xbb}, {&(0x7f00000034c0)=""/141, 0x8d}, {&(0x7f0000003580)=""/252, 0xfc}], 0x6, &(0x7f00000036c0)=""/176, 0xb0}}, {{&(0x7f0000003780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003800)=""/88, 0x58}], 0x1, &(0x7f00000038c0)=""/40, 0x28}, 0x10}, {{&(0x7f0000003900)=@x25={0x9, @remote}, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/218, 0xda}, {&(0x7f0000004a80)=""/62, 0x3e}], 0x3, &(0x7f0000004b00)=""/106, 0x6a}, 0xbca6}], 0x6, 0x10021, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m50.787637796s ago: executing program 3 (id=1300): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m50.710377727s ago: executing program 3 (id=1301): r0 = socket$isdn_base(0x22, 0x3, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2, 0x4, 0x2, 0x5}) (async) r1 = socket$inet6(0xa, 0x4, 0x5) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x15c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x128, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x40}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xd8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x58}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9c2a}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf0bc}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x53e}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfda6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) connect$phonet_pipe(r4, &(0x7f00000003c0)={0x23, 0x92, 0xc2, 0x4}, 0x10) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x9}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000480)={r5, 0x5, 0xbd, 0xc, 0x6, 0x8}, &(0x7f00000004c0)=0x14) (async) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000500)=0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x10) (async) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockname$inet6(r7, &(0x7f0000000540), &(0x7f0000000580)=0x1c) close_range(r6, r6, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x0, 0x3, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x68, 0x0, 0xca, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0xcd, 0x3, 0x2, [{@rand_addr=0x64010102, 0x4}, {@multicast2, 0x9}, {@multicast1, 0x6}]}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@dellink={0x28, 0x11, 0x20, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x180, 0x404}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xea1d}]}, 0x28}}, 0x2404c050) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000780)={r5, 0x5, 0x8000}, 0x8) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000007c0)={0x2ef5, 0x81, 0x80000000, 0xea1, 0x6}, 0x14) (rerun: 64) connect$netlink(r4, &(0x7f0000000800)=@unspec, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) pread64(r1, &(0x7f0000000840)=""/58, 0x3a, 0x1) (async, rerun: 32) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000880)) (async, rerun: 32) bind$packet(r4, &(0x7f00000008c0)={0x11, 0xf8, r8, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) (async) execveat(r4, &(0x7f0000000900)='./file0\x00', &(0x7f0000000b00)={[&(0x7f0000000940)='\x00', &(0x7f0000000980)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000009c0)='syztnl1\x00', &(0x7f0000000a00)='/\x00', &(0x7f0000000a40)='gretap0\x00', &(0x7f0000000a80)='wlan1\x00', &(0x7f0000000ac0)='wlan1\x00']}, &(0x7f0000000cc0)={[&(0x7f0000000b40)='}\x00', &(0x7f0000000b80)='\x00', &(0x7f0000000bc0)='nl80211\x00', &(0x7f0000000c00)='syztnl1\x00', &(0x7f0000000c40)='wlan1\x00', &(0x7f0000000c80)='syztnl1\x00']}, 0x1000) openat$binderfs(0xffffff9c, &(0x7f0000000d00)='./binderfs/binder1\x00', 0x2, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x74, r10, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b5cca2218af1609dc506b40bd4"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "56e81dbf8c682c"}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8e9fb71b123e3ea60470c73d43"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "ce293929a233a8a76abd94"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x800) 1m50.620262565s ago: executing program 3 (id=1302): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000200)={0x6, 'nr0\x00', {0x9}, 0x3}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0x1, '\x00', 0x4}, {0xfe, 0x3, 0x0, '\x00', 0x6}, {0x7, 0xff, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x2}, {0xf, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0xa}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0x9}, {0x7, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x7f}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x60, 0x4, '\x00', 0x12}, {0xb, 0x8, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x7}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) (async) r5 = socket$inet(0x2, 0x3, 0x6) connect$inet(r5, &(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@ip_retopts={{0xc}}], 0xc}}], 0x2, 0x2400d800) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) (async, rerun: 32) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x80000) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (async, rerun: 32) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (rerun: 32) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) (async) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0x0, 0x3}}, 0x18) (async) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) close(r6) 1m50.51005772s ago: executing program 3 (id=1303): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x2, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open_tree(0xffffffffffffff9c, 0x0, 0x89801) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x41) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 1m50.507673437s ago: executing program 3 (id=1304): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0xfffffffffffffe8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="73787374656d2ec51ca48629790218eb3a5d222c5b2922252924ab275eba80"], 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) syz_io_uring_setup(0x5d3b, 0x0, 0x0, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TIOCGDEV(r3, 0x540e, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x4, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f00000003c0)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x4, 0x1, 0x4, 0x0, r6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket(0xa, 0x5, 0x1) 1m35.668689493s ago: executing program 32 (id=1304): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0xfffffffffffffe8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="73787374656d2ec51ca48629790218eb3a5d222c5b2922252924ab275eba80"], 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) syz_io_uring_setup(0x5d3b, 0x0, 0x0, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TIOCGDEV(r3, 0x540e, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x4, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f00000003c0)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x4, 0x1, 0x4, 0x0, r6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket(0xa, 0x5, 0x1) 1m11.081307142s ago: executing program 1 (id=1504): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x6281, &(0x7f0000000080)={0x0, 0x0, 0x10}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pipe(&(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket(0x23, 0xa, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffffd, 0x5, 0x2, 0x0, &(0x7f0000000040), 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGDEV(r3, 0x540e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m10.233849192s ago: executing program 1 (id=1511): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYRES64], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x33, @void, @value}, 0x94) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"fe0d1acc7f00001f0000000000000000000000fbffffff00", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$autofs(0xffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getpid() r7 = syz_open_dev$MSR(&(0x7f0000000400), 0x8000, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f0000002080)=0x3a, 0x7) 1m9.992669603s ago: executing program 1 (id=1513): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x2, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open_tree(0xffffffffffffff9c, 0x0, 0x89801) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x41) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 1m9.337009509s ago: executing program 1 (id=1516): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x88, 0x30, 0x9, 0x0, 0x0, {}, [{0x17, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x5}, {}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000040)=0x22, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x368d, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0x0, 0xa5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0xda8, 0xd, 0x0, 0x0) 1m9.233620546s ago: executing program 1 (id=1517): setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000240)=0x9, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x642582, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x3) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000007f880108000000000000000006000002"], 0x14}}, 0x20004804) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x3}, {0x5, 0x1}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x9b7a, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0x6, 0x0, 0x0, 0x4, 0x0, {0x0, r6}}) fsmount(r0, 0x1, 0x8) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1000, 0x1, 0x0, 0x5b0c579e}]}, 0x8) 1m9.081450171s ago: executing program 1 (id=1518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000ff5fd2d088c9f25baf7f00009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x19, 0x7, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300000000000000001556db2bbc71d698550a7d980000ff1800000045bf000000000000080000009500000000000000146afcff100000009500000000000000"], &(0x7f0000000c40)='syzkaller\x00', 0x81, 0xe, &(0x7f0000000c80)=""/14, 0x41000, 0xd, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000012c0)={0x4, 0x6, 0x12}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r6 = openat$mixer(0xffffff9c, &(0x7f0000000480), 0x541000, 0x0) r7 = openat$iommufd(0xffffff9c, &(0x7f0000000b40), 0x400100, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000b80)={0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000bc0)=0x0) r10 = gettid() sendmmsg$unix(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001600)="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", 0x1000}, {&(0x7f00000003c0)="072a93ac4f5dc77d9b301697ea7149037cef73c03ddb89a6077dc1db9951ecd88520b7edeef81cdce1d271b357e203daa7921a4d35565c93cd75c9ba9f1e3f3a5c7554a55b3d69409b5892b4aa46d4d382c2bbd4841eb10ff3740950dcf7fc269bcf75b3c0268d5628a5a565b392af374494cd184e680e9b639231e27ca11577c6a05beb9a8bf1bbcbca04f53a8cc63371297c4346145ef29f96fa2d12a4a89e6d20faef38dae7a32cdb17dd00fbbcaf7b42bf44", 0xb4}, {&(0x7f00000006c0)="b80c174905d31256f38d1a6a995a6d37961e7d4f45589720bbe12c5b4e0b7de43a9204fdf2b368a9dcebb43ae139ec5268428c408b857b6af38cd5093b3da57aabfaf43208d29f194257f21f333296b996559b653cd73ea3043654b88753496c40b27e9bf9bf7a49baabc5c1bb784f72424c5583e1873e45abaa7ee8aa470843deae28bf38c314243f8f42ed69bde1434cfdfa8d93eafcb88facee1b0518f319bbfe214bb2903ed0a0d876dd233bea1800d9535ff208b575b98e26c68df35584ecc484c9f5547409bd4a9421c143b03ff67f", 0xd2}, {&(0x7f0000000180)="0dbce095b8de912fef13be7c1082dca60b21a0aec713d3b2b15eff175bef9e6ad46565ae9fa9817623ea2fecbd40ea0237e8c0dbf583c77ff651d5fdd745f95dabd8b336fd68eca99ef2d9898e1613204283653270da64a03b577a7a48f3ea9f4e50", 0x62}, {&(0x7f00000007c0)="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", 0xfd}, {&(0x7f0000000300)="ed1eaab49a4919104220fd43f7ef5e83f8af7ac7e06c40c7526a780c65d3e96b685f651d6b8f7a9c28638e35cbadff3136e968ccfafb777f5a3731c5ef5280bbeeb67f3b0e34d1a9aacdc7419ef44226cf241861e8ae122583dfba", 0x5b}, {&(0x7f00000008c0)="786587a3a8bf8aee56254d4724dd5a9a46dab27373b20b3c298856d3c05ed648e61472c7eeb4cf1f2333860e78b06c95ed115208af697107dd76017cb73789a03879c2f05bbdc9efe08f7e6efb35fc97def23dcea0385cec4206f9db863039dca22b25119ce08513537b2155c7c5bd81cd994ea62442e9634747ec574830d88a192743a25097229d05dc5b58f9119da46b999184dfc726fb6c1b256c3431df5608596888429bf30dbe263039176f4db77eea2f9fcf09b4b2a509afadf562a9a58e08046fd265f6cc2a80b155a261cd40c96c32e755b7f26967bf95860e66e901ab671edf885aa5838a8d937b7ab42a", 0xef}, {&(0x7f0000000580)="1f8ef2d7b5887dc494491c173201f20168bb1de175d3e99f9d9588de8a9e99934e893c802d0fcdb3e070bcdf4f716797e81136d80b0d471b6183a258fe66dc4e8831f1e7f373ccfe4760038f06de2930f0c79df53a0a4a31aaa287", 0x5b}, {&(0x7f00000000c0)="1fa0e4dc009d18fa091fe1bdaf5424e42b1e345920460b49", 0x18}, {&(0x7f00000009c0)="1a0fcae1f896e2c690737c513aff68335778a2070a1119d068a5e9d30ae1e276e59b3ebed4655f3bf82860ca895d3b137c31515f4ef5d07ce79d7f0b3367b4b75aed81281c6015dd55f49bef4de2615db727f864712801d287703377a83f0a492b10c6eeab23a364460d84a64e5e8d264ee98981d2b08c0748cf5aa42cfa70e60b85cfb664d804baa61419084ad71c99e128836b007eb07aca438d21cf99c0e5918c13079184eab0e283fd4db69a3c0915a1edb2730a01f2b4a6a810a7abf5166ea6878c4ea39d8150dd31d3838da252924992ab7f22ca05086c001bc41d76cc0ea1a1844904f854082886a44c2fce", 0xef}], 0xa, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f086240000000174f1a63c91", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="180000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=0xee01, @ANYBLOB="180000000100000002000000", @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xbc}}, {{&(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001000)="415395dc24e69558cf9306284350cf2dc8c32ad54fcb9d0a2f69fe0232f5d6954f658fd301f53c1afcbd3a5ad93cab9bf7", 0x31}, {&(0x7f0000001040)="578ac97d866052425f0caf11f7f65b44b415cb3a2c07345d6cf83707c3fe", 0x1e}, {&(0x7f0000001080)="18e032bfa032bd07807dc9bf20e802781c3fb860c3003e116790e83788f1b6c448f417c82e1eecc91e02203ba3fffb4c893a454a5f80e1a916fdf6880e458baa347f031ba889a437ad211e6e6e44144d99d3991c8498af08d5a1b64ddf89a80fb064eebc80fc99068776b25d08b0933d4c8cecdcbe6778ae033ea98ae2332354a23ac851117cf8", 0x87}, {&(0x7f0000001140)="e2fc46f5550f508d04a203170d050db873bddd6e581cefc539218e95784830fffb8727b06c527f1ba74b2a04e46687f9fcdf2a3500f3d9bc6858a7213152ee9e642fd50b1f83bb485af768ab052c6510fe47d756a7973ff3155fc262573f06452cb2d686105fffe8dc57c5f163255777691651856ca32781cb581fa767a1df5bd3542faf5f54817732e0f6fc9d9371f700f4adb94ca6129545e20dbc8366fa52bd87ad90061309a7f9c33d1d0fc96bbd8d4dad8dbc47f8c42521dbcbdea0867ce8d9688a2c4d6afabca665f6671c7b0f53dff7f0a2b4f9ea7b321237155fd8fb573a8d18af230a160575a63b6709b3541847fc1784ba", 0xf6}, {&(0x7f0000001240)="bef60a7b7335e2ad816fd2efd152af6a8bbfaa66912786e2f2657bfda756103159caf1f4a60aa5574385", 0x2a}], 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="017c0fd515bd5f9dce6e79e5ca4dc08353bbca7404b0f022f245b2def16a3cb2d9f004e7ba521fc2d0221874642d6e52391bab8912f7f6519dfdcab8a11e23928c0c9404522e4ea69598cc5efbda1b2a42dfa5fdff79e28df389d2f9853b24fefd16998e8c35738ed10b924e7b59524fd9265d679a4537a840e7b3af2155", @ANYRES32=r5, @ANYRES32=r3, @ANYRES32, @ANYRES32=r7], 0x1c, 0x20004010}}], 0x2, 0x8) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) eventfd(0x8001) r11 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x40000, 0x2, 0x12, 0x356}, &(0x7f0000000380)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x98968d201c1120ce, 0x1}) io_uring_enter(r11, 0x3f70, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4}) 1m9.01955963s ago: executing program 33 (id=1518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000ff5fd2d088c9f25baf7f00009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x19, 0x7, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300000000000000001556db2bbc71d698550a7d980000ff1800000045bf000000000000080000009500000000000000146afcff100000009500000000000000"], &(0x7f0000000c40)='syzkaller\x00', 0x81, 0xe, &(0x7f0000000c80)=""/14, 0x41000, 0xd, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000012c0)={0x4, 0x6, 0x12}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r6 = openat$mixer(0xffffff9c, &(0x7f0000000480), 0x541000, 0x0) r7 = openat$iommufd(0xffffff9c, &(0x7f0000000b40), 0x400100, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000b80)={0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000bc0)=0x0) r10 = gettid() sendmmsg$unix(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001600)="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", 0x1000}, {&(0x7f00000003c0)="072a93ac4f5dc77d9b301697ea7149037cef73c03ddb89a6077dc1db9951ecd88520b7edeef81cdce1d271b357e203daa7921a4d35565c93cd75c9ba9f1e3f3a5c7554a55b3d69409b5892b4aa46d4d382c2bbd4841eb10ff3740950dcf7fc269bcf75b3c0268d5628a5a565b392af374494cd184e680e9b639231e27ca11577c6a05beb9a8bf1bbcbca04f53a8cc63371297c4346145ef29f96fa2d12a4a89e6d20faef38dae7a32cdb17dd00fbbcaf7b42bf44", 0xb4}, {&(0x7f00000006c0)="b80c174905d31256f38d1a6a995a6d37961e7d4f45589720bbe12c5b4e0b7de43a9204fdf2b368a9dcebb43ae139ec5268428c408b857b6af38cd5093b3da57aabfaf43208d29f194257f21f333296b996559b653cd73ea3043654b88753496c40b27e9bf9bf7a49baabc5c1bb784f72424c5583e1873e45abaa7ee8aa470843deae28bf38c314243f8f42ed69bde1434cfdfa8d93eafcb88facee1b0518f319bbfe214bb2903ed0a0d876dd233bea1800d9535ff208b575b98e26c68df35584ecc484c9f5547409bd4a9421c143b03ff67f", 0xd2}, {&(0x7f0000000180)="0dbce095b8de912fef13be7c1082dca60b21a0aec713d3b2b15eff175bef9e6ad46565ae9fa9817623ea2fecbd40ea0237e8c0dbf583c77ff651d5fdd745f95dabd8b336fd68eca99ef2d9898e1613204283653270da64a03b577a7a48f3ea9f4e50", 0x62}, {&(0x7f00000007c0)="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", 0xfd}, {&(0x7f0000000300)="ed1eaab49a4919104220fd43f7ef5e83f8af7ac7e06c40c7526a780c65d3e96b685f651d6b8f7a9c28638e35cbadff3136e968ccfafb777f5a3731c5ef5280bbeeb67f3b0e34d1a9aacdc7419ef44226cf241861e8ae122583dfba", 0x5b}, {&(0x7f00000008c0)="786587a3a8bf8aee56254d4724dd5a9a46dab27373b20b3c298856d3c05ed648e61472c7eeb4cf1f2333860e78b06c95ed115208af697107dd76017cb73789a03879c2f05bbdc9efe08f7e6efb35fc97def23dcea0385cec4206f9db863039dca22b25119ce08513537b2155c7c5bd81cd994ea62442e9634747ec574830d88a192743a25097229d05dc5b58f9119da46b999184dfc726fb6c1b256c3431df5608596888429bf30dbe263039176f4db77eea2f9fcf09b4b2a509afadf562a9a58e08046fd265f6cc2a80b155a261cd40c96c32e755b7f26967bf95860e66e901ab671edf885aa5838a8d937b7ab42a", 0xef}, {&(0x7f0000000580)="1f8ef2d7b5887dc494491c173201f20168bb1de175d3e99f9d9588de8a9e99934e893c802d0fcdb3e070bcdf4f716797e81136d80b0d471b6183a258fe66dc4e8831f1e7f373ccfe4760038f06de2930f0c79df53a0a4a31aaa287", 0x5b}, {&(0x7f00000000c0)="1fa0e4dc009d18fa091fe1bdaf5424e42b1e345920460b49", 0x18}, {&(0x7f00000009c0)="1a0fcae1f896e2c690737c513aff68335778a2070a1119d068a5e9d30ae1e276e59b3ebed4655f3bf82860ca895d3b137c31515f4ef5d07ce79d7f0b3367b4b75aed81281c6015dd55f49bef4de2615db727f864712801d287703377a83f0a492b10c6eeab23a364460d84a64e5e8d264ee98981d2b08c0748cf5aa42cfa70e60b85cfb664d804baa61419084ad71c99e128836b007eb07aca438d21cf99c0e5918c13079184eab0e283fd4db69a3c0915a1edb2730a01f2b4a6a810a7abf5166ea6878c4ea39d8150dd31d3838da252924992ab7f22ca05086c001bc41d76cc0ea1a1844904f854082886a44c2fce", 0xef}], 0xa, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f086240000000174f1a63c91", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="180000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=0xee01, @ANYBLOB="180000000100000002000000", @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xbc}}, {{&(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001000)="415395dc24e69558cf9306284350cf2dc8c32ad54fcb9d0a2f69fe0232f5d6954f658fd301f53c1afcbd3a5ad93cab9bf7", 0x31}, {&(0x7f0000001040)="578ac97d866052425f0caf11f7f65b44b415cb3a2c07345d6cf83707c3fe", 0x1e}, {&(0x7f0000001080)="18e032bfa032bd07807dc9bf20e802781c3fb860c3003e116790e83788f1b6c448f417c82e1eecc91e02203ba3fffb4c893a454a5f80e1a916fdf6880e458baa347f031ba889a437ad211e6e6e44144d99d3991c8498af08d5a1b64ddf89a80fb064eebc80fc99068776b25d08b0933d4c8cecdcbe6778ae033ea98ae2332354a23ac851117cf8", 0x87}, {&(0x7f0000001140)="e2fc46f5550f508d04a203170d050db873bddd6e581cefc539218e95784830fffb8727b06c527f1ba74b2a04e46687f9fcdf2a3500f3d9bc6858a7213152ee9e642fd50b1f83bb485af768ab052c6510fe47d756a7973ff3155fc262573f06452cb2d686105fffe8dc57c5f163255777691651856ca32781cb581fa767a1df5bd3542faf5f54817732e0f6fc9d9371f700f4adb94ca6129545e20dbc8366fa52bd87ad90061309a7f9c33d1d0fc96bbd8d4dad8dbc47f8c42521dbcbdea0867ce8d9688a2c4d6afabca665f6671c7b0f53dff7f0a2b4f9ea7b321237155fd8fb573a8d18af230a160575a63b6709b3541847fc1784ba", 0xf6}, {&(0x7f0000001240)="bef60a7b7335e2ad816fd2efd152af6a8bbfaa66912786e2f2657bfda756103159caf1f4a60aa5574385", 0x2a}], 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="017c0fd515bd5f9dce6e79e5ca4dc08353bbca7404b0f022f245b2def16a3cb2d9f004e7ba521fc2d0221874642d6e52391bab8912f7f6519dfdcab8a11e23928c0c9404522e4ea69598cc5efbda1b2a42dfa5fdff79e28df389d2f9853b24fefd16998e8c35738ed10b924e7b59524fd9265d679a4537a840e7b3af2155", @ANYRES32=r5, @ANYRES32=r3, @ANYRES32, @ANYRES32=r7], 0x1c, 0x20004010}}], 0x2, 0x8) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) eventfd(0x8001) r11 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x40000, 0x2, 0x12, 0x356}, &(0x7f0000000380)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x98968d201c1120ce, 0x1}) io_uring_enter(r11, 0x3f70, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4}) 22.623689946s ago: executing program 4 (id=1880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r1, 0x301, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r3, 0x8b21, &(0x7f0000000000)) 22.519373947s ago: executing program 4 (id=1881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0xda, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)}, 0x10) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) pipe2(&(0x7f0000000080), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x144000, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r4, &(0x7f0000000180), 0x20000000}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r4, &(0x7f0000000180), 0x0}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x52}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x34}}, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000000)=0xfffffffffffffff7, 0x12) 22.5175087s ago: executing program 4 (id=1882): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 22.442417842s ago: executing program 4 (id=1884): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) syz_io_uring_setup(0x5a96, &(0x7f0000000040)={0x0, 0xa9cc, 0x0, 0x1, 0xd2}, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x9264}, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x116, &(0x7f0000000300)={0x0, 0x0, 0x10000, 0x200000, 0xfffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_GET_VERSION(r7, 0x8004552d, &(0x7f0000000280)) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 22.440276459s ago: executing program 4 (id=1886): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$netlink(0x10, 0x3, 0xb) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000001c0)=0x10, 0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r5, 0x541b, &(0x7f0000000100)) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2, 0x400, 0x0, 0x100000}, &(0x7f0000000180)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r6, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x7ff, 0x2, 0x0, 0x4000000000000}, 0x0, 0x0) 21.871057155s ago: executing program 4 (id=1893): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000001280)='blkio.bfq.idle_time\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xcd8f3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000240)=[{0x3, 0x8, 0x6, 0x6048}, {0xc653, 0x8, 0x9b}, {0xad, 0x6, 0x40, 0xe}, {0x2, 0x5, 0xf9, 0x1}, {0xfffe, 0x3, 0x6, 0x7}]}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x2000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000003980), 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x4000300) 21.848823894s ago: executing program 34 (id=1893): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000001280)='blkio.bfq.idle_time\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xcd8f3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000240)=[{0x3, 0x8, 0x6, 0x6048}, {0xc653, 0x8, 0x9b}, {0xad, 0x6, 0x40, 0xe}, {0x2, 0x5, 0xf9, 0x1}, {0xfffe, 0x3, 0x6, 0x7}]}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x2000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000003980), 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x4000300) 9.216665139s ago: executing program 0 (id=1945): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2deb, 0x4000, 0x57, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x4, r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$uinput_user_dev(r7, &(0x7f0000000880)={'syz0\x00', {0x5, 0x4b99, 0x4, 0x1}, 0x1e, [0x5, 0x4379, 0x8, 0x4, 0x2, 0x7ff, 0x2, 0x9, 0x654f, 0x7, 0x7, 0xba7, 0x8, 0x9, 0x5, 0x3, 0x2b9d, 0x9, 0xaf7, 0x1, 0x3c, 0x1, 0x5, 0x907, 0x4, 0x80, 0x8, 0xfffffff7, 0x6, 0x0, 0xb, 0x370, 0x5, 0x778ac212, 0x1, 0x10001, 0x1000, 0x401, 0x3, 0x19, 0x10000, 0x9, 0xe, 0x7, 0x9, 0x5, 0x1, 0x8c02, 0x3, 0x9, 0x7, 0x4, 0x10000, 0x5, 0x100, 0x48d4, 0xfffffffc, 0xfffffffa, 0x40, 0xc4a4, 0x5, 0x1, 0x9, 0x1713], [0x8, 0x8, 0x8001, 0xfff, 0x3ff, 0xfffffffd, 0x3, 0x7fff, 0x2b, 0xc, 0x5, 0x0, 0xffffffff, 0x9508, 0x0, 0x5, 0xd, 0x1, 0x6, 0x1, 0x10001, 0x3ff, 0xffffffff, 0x7, 0x2df4, 0x4, 0xffffff7f, 0x1000, 0x1ff, 0x6, 0xb, 0x9, 0x4, 0x40, 0xfffffffb, 0x6, 0x4, 0x7fffffff, 0x8, 0xf, 0x1, 0xc, 0x9, 0x80000000, 0x14c0eb9d, 0x1, 0x7, 0x80, 0x7, 0x7f, 0xab3, 0x6, 0xe, 0xa, 0xa, 0x4, 0x2, 0x800000e, 0x5, 0x3, 0x6ece, 0x3ff, 0xe773, 0x8], [0xde3, 0x5dd4, 0x6, 0x4, 0x3, 0x5, 0x0, 0x400005, 0xfffffffa, 0x5, 0x7ff, 0x401, 0xffffffff, 0x8, 0x7, 0xd04c, 0x2, 0x4, 0x4, 0x8, 0x80000000, 0x19000000, 0x8, 0x1ff, 0x6, 0xf, 0x0, 0x0, 0x2e6, 0x1, 0x8, 0x4000004, 0x9, 0x0, 0x4, 0x0, 0x3, 0x3, 0x5, 0x7, 0x1000, 0x4, 0x3, 0x7bb14aae, 0x1, 0x1000, 0xffffffff, 0x3, 0x3, 0xb, 0x5, 0x0, 0x0, 0x3, 0x3ff, 0x7, 0xfffff801, 0x8, 0x3, 0x1, 0x2, 0xfffffffe, 0x20000004, 0x1], [0x7f, 0x401, 0x101, 0x1b4, 0x1, 0x0, 0x7, 0x1000, 0x4, 0x1645, 0x2, 0xffffff80, 0x7, 0x0, 0x4, 0x0, 0x7, 0x9, 0x6, 0x1000, 0x8, 0x10000, 0xfffffdd2, 0x2a8, 0x470, 0x8d1, 0x5, 0x8, 0x10, 0x5, 0x5, 0xa, 0x7, 0x6, 0x4e1bbb9d, 0x5, 0x1, 0x90a, 0x7fffffff, 0xfffffffd, 0x10, 0x0, 0x3, 0x4, 0x5, 0x0, 0xb, 0xe, 0x4, 0x2, 0x5, 0x1, 0x100, 0x2, 0x2, 0xc, 0x4, 0x6, 0xbf09, 0x9, 0x6, 0x1, 0x5, 0xa3]}, 0x45c) r8 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="92", 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r8) keyctl$read(0xb, r8, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "97e46e2921705cb9", "7eb560b5f7b2d2ab1b423d28b6417d7decab8a498df2072dce8cadadf5008f08", "01803103", "035f8b690ff31ffd"}, 0x38) recvmsg(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/146, 0x92}], 0x1}, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x9) 9.154338275s ago: executing program 6 (id=1894): r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r5, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fanotify_mark(r0, 0x11, 0x48000038, r5, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fanotify_init(0x0, 0x0) (async) epoll_create1(0x0) (async) syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)) (async) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r6, r5, 0x2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) fanotify_mark(r0, 0x11, 0x48000038, r5, 0x0) (async) socket$inet6(0xa, 0x3, 0x4) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x90) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) 7.645293203s ago: executing program 0 (id=1947): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000240)={0x1, &(0x7f0000000880)=[{@none}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delrule={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x14, 0x2, @local}]}, 0x30}}, 0x0) 7.500745522s ago: executing program 6 (id=1894): r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r5, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fanotify_mark(r0, 0x11, 0x48000038, r5, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fanotify_init(0x0, 0x0) (async) epoll_create1(0x0) (async) syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)) (async) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r6, r5, 0x2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) fanotify_mark(r0, 0x11, 0x48000038, r5, 0x0) (async) socket$inet6(0xa, 0x3, 0x4) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x90) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) 5.892432577s ago: executing program 0 (id=1950): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x40, 0x1410, 0x1, 0x70bd30, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "b4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95d83ffffa407677d18bc"}}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendto$inet6(r4, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 5.891239406s ago: executing program 5 (id=1951): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa500, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa500, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x9, 0x6d82c1) socket$rxrpc(0x21, 0x2, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 5.791066679s ago: executing program 6 (id=1894): r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r5, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fanotify_mark(r0, 0x11, 0x48000038, r5, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fanotify_init(0x0, 0x0) (async) epoll_create1(0x0) (async) syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)) (async) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r6, r5, 0x2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) fanotify_mark(r0, 0x11, 0x48000038, r5, 0x0) (async) socket$inet6(0xa, 0x3, 0x4) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x90) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) 5.744807433s ago: executing program 2 (id=1953): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x33, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x7) 4.066781053s ago: executing program 0 (id=1954): r0 = socket$inet6(0xa, 0xa, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) poll(&(0x7f0000000100)=[{r0, 0x21}, {0xffffffffffffffff, 0x782}], 0x2, 0xa) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x1, 0x5, 0xf, 0x4}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0xdd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x697, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./bus/file0\x00', &(0x7f0000000280)={0x0, 0x6, 0x1}, 0x18) open_by_handle_at(r5, &(0x7f00000002c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x80000001, 0x1, 0x1ff}}, 0x202000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0xa, 0x6, 0x5e33abcb71b8373c, 0x2, 0x0, 0x70bd2b, 0x25dfdbff}, 0x10}}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 4.066565092s ago: executing program 5 (id=1955): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000004000000400000000080000000020000c637d566839e0fdb97d3a0527e0a5bc10c3d0017a88e17166be7c93e9564fe0e520c680a1f41a090da20651dab32dc2b1dee7a1eef01ac59f2b25976d84e065b03f7397834d2df32ca71cd7450adfc4d3316f0c6236c8355e530c1ca48f5ef170b6d730ba55976bedd15062300f841b719ef5a9ee3f33b48150137ba1bb06a4eab30c20f2c909e25ad3f3ad6040c203a", @ANYRES32=r0, @ANYBLOB="6afd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000000000000500"/28], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000020605"], 0x20}, 0x1, 0x0, 0x0, 0x4c004}, 0x4841) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYRESDEC=r3]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x800000000000], 0x1000, 0x14000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x3, 0x9b1b, 0x4250, 0x0, 0x0, 0xefffffffffffffff, 0xff, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5000, 0x121000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @local, 0xb}, 0x1c) listen(r9, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000a00)=ANY=[@ANYRES16=r1, @ANYBLOB="349a7d796c9a15f39fce5d0dce95d50a41f131baa083bc1ddda3cb1aa7fc050e656a65b1657c12810a1f2518c246cc911a1daa95cd5468f7da2a974949f36fb38020c2be15837ae4c1cc0f9cb9aa1f123801dcfa9ad9415d3b67ab37e15b6f2fcd6247f44ac4bc934cc95de06546d3f942a255779d513446f00c6085992935057c5e2ab5b1cf2da3690dcba8496d3e96af960764534937ad892f49fa0f20a4954bc0b67fc9c6d7a28f8a7b6ee4f2cc07538b7ffebff8a82e457e18e1e69f826de4cc10abfc810ec49fa64362872c39a5735d63b7d705dc96c038cc3b5d43e11908aac70b16fda5f336760508", @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESDEC=r7], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r1, 0x20, &(0x7f0000000980)={&(0x7f0000000440)=""/68, 0x44, 0x0, &(0x7f0000000880)=""/228, 0xe4}}, 0x10) 4.066181736s ago: executing program 2 (id=1956): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000bc0), 0x0) socket$netlink(0x10, 0x3, 0x12) r1 = syz_open_dev$vcsu(0x0, 0x9, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0x5}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0x0, 0xaf, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb4206757531"}, 0x4c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080)="1bee08e97434830332e0f2580c365dcc9593d9469570b433f3e492b9a87cfd7e0f7af7e98e01acc8274cd63b2751fb2bf5933a0c7bc93282e03c6c18617354e4c9ffcf4670c044dd75516dcc0213cbb789c1c7903ec6ec78196101374b14860b48bea6fe226702fc8f1fb1c133", &(0x7f0000000240), 0x7ff, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, 0x0, &(0x7f0000000540), 0x6c, r6}, 0x38) close(0x3) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000005c0), 0x34, 0x7, 0x1, 0xffff, 0x0, @void, @value}, 0x28) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000340), 0x10000, 0x0) syz_usb_disconnect(0xffffffffffffffff) 4.065689759s ago: executing program 5 (id=1957): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$ptys(0xc, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x11, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)='i', 0x1}], 0x1}, 0x0) 3.969959201s ago: executing program 6 (id=1894): r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r5, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fanotify_mark(r0, 0x11, 0x48000038, r5, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fanotify_init(0x0, 0x0) (async) epoll_create1(0x0) (async) syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)) (async) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r6, r5, 0x2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) fanotify_mark(r0, 0x11, 0x48000038, r5, 0x0) (async) socket$inet6(0xa, 0x3, 0x4) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x90) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) 2.190800768s ago: executing program 0 (id=1958): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000500)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x74}}, 0x0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0xc6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r11, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r10}, 0x18) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$nci(r4, &(0x7f00000002c0)=""/97, 0x61) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r12) 2.190441747s ago: executing program 5 (id=1959): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000240)={0x1, &(0x7f0000000880)=[{@none}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delrule={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x14, 0x2, @local}]}, 0x30}}, 0x0) 2.077967853s ago: executing program 6 (id=1894): r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r5, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fanotify_mark(r0, 0x11, 0x48000038, r5, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fanotify_init(0x0, 0x0) (async) epoll_create1(0x0) (async) syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)) (async) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r6, r5, 0x2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) fanotify_mark(r0, 0x11, 0x48000038, r5, 0x0) (async) socket$inet6(0xa, 0x3, 0x4) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x90) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) 172.792658ms ago: executing program 0 (id=1960): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{}, {0x0, 0x3938700}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfffffef5, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x5, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioprio_get$pid(0x2, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x23, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x80000000}}, 0x10) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'macsec0\x00', 0x800}) socket(0x6, 0x4, 0xfffffffa) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) acct(&(0x7f00000001c0)='./file0\x00') (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES16=r5], &(0x7f0000000440)='GPL\x00', 0x0, 0x39, 0x0, 0x0, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000300)='rxrpc_transmit\x00', r6}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='4\x00', 0xfffffffffffffe12) (async) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000040)=0xd) (async) unshare(0x62040200) 172.372548ms ago: executing program 5 (id=1961): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x1, 'queue0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000030000180060002000000000006000400e5ffffff1300030000000000000000000000000000000000060001"], 0x44}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xe8) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x11, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r3, {0x4, 0x400}}, './file0\x00'}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r10, 0xffffffffffffffff) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1e) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f0000244000/0x3000)=nil, 0x0, 0x0, 0x0, 0x3, 0x0, 0x63, 0x0, 0x1}) read$char_usb(r5, &(0x7f00000001c0)=""/4068, 0xfe4) 172.188154ms ago: executing program 2 (id=1962): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 105.331111ms ago: executing program 2 (id=1963): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x103100, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffb, 0x0, "81fb08cc2b000000f6c05b7225ffff00ffffff"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) fstatat64(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3100) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') 103.870797ms ago: executing program 5 (id=1964): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) timer_create(0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd27, 0x30bd27, 0x2, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {}, {0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xfd}}, @filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x53, 0x1, 0x720, 0x1ff, 0x1, 0x8, 0x3, 0x10001, 0xf9, 0x4, 0x7, 0x4, 0xaa, 0x1, 0x645a, 0x4, 0x5, 0x3, 0x5, 0xb4e, 0x2, 0x4, 0x1, 0x5c8d, 0x6, 0xb, 0x7, 0x0, 0x80000001, 0x0, 0x2, 0x1, 0xffffffe2, 0x2, 0x2, 0x53bd73d6, 0x60, 0xbff, 0xfff, 0x200, 0x7ff, 0x7f, 0x90, 0x8000, 0x1, 0xb50, 0xffffffff, 0x5, 0x9, 0x4, 0xc4, 0x1, 0xda1b, 0x3, 0x5fa, 0x1, 0x80000001, 0x8000, 0x2, 0x8, 0x617b, 0xfffffe01, 0x3, 0x9, 0x2, 0x32b, 0xe2aa, 0x8, 0x2, 0x0, 0x7, 0x0, 0x0, 0x8, 0x7000000, 0x7, 0x6, 0x4, 0x8000, 0xa21, 0x8, 0x24, 0x9, 0xffffff80, 0x9ff6, 0x10000, 0x50, 0x1, 0x10000, 0x7, 0x200, 0xffffffff, 0x0, 0x1, 0x5, 0x7, 0x8, 0x7, 0x3, 0x0, 0x6, 0x80000001, 0xa6, 0x7, 0x2, 0x92f0, 0x8, 0x2501, 0x3, 0x80000001, 0x80000001, 0xbd95, 0x713, 0xfff, 0x3, 0x7, 0x2, 0x0, 0x1, 0xffffffff, 0x4, 0x100, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc9, 0x1, 0x6, 0x80000000, 0x4, 0x9, 0x4, 0x6, 0xaca, 0x9, 0x81, 0x7, 0xf, 0x2, 0x0, 0x673f, 0x1, 0x8000, 0x4, 0xffffffff, 0x5, 0x8000, 0x6, 0x81, 0x1, 0x2, 0x7, 0x4, 0x1, 0xb, 0x8, 0x4, 0xb, 0x0, 0x2, 0x1, 0xfffffffc, 0x0, 0x5, 0x3, 0x5, 0x8, 0x1, 0x3, 0x5, 0x58, 0x400, 0x3, 0xe8, 0xe, 0x3, 0x6, 0x4, 0x9, 0x8, 0x7, 0x9, 0x9, 0x44261b5b, 0x7fff, 0x1d, 0x4, 0x6, 0xfff, 0x0, 0x6ae, 0x3, 0x1, 0x2, 0x8000, 0x1, 0xffffff00, 0x694a, 0x8000, 0x36e, 0x1000, 0x0, 0x7e9, 0x7fff, 0x7, 0x3, 0x2, 0x200, 0x4, 0x3, 0x6, 0x5, 0x3, 0xfffffff7, 0x7, 0xfffffffa, 0x7, 0x6, 0x7f, 0x8001, 0x3, 0x4f078b3, 0x1, 0x10001, 0x0, 0x3, 0xad2b, 0x7ff, 0xe026, 0x2, 0x1, 0x100, 0x100, 0x9, 0x8, 0x1, 0x5, 0x1, 0x8, 0x80000001, 0xfffffffb, 0xa, 0x0, 0x1, 0x6, 0x4, 0x4, 0x8, 0x73, 0x80, 0x1, 0x8, 0x8, 0x7ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x68c4, 0x3, 0x3, 0x200, 0xfff, 0x1, 0x2b29, 0xfffffffb, 0x8, 0x5, 0x9, 0x9, 0x2, 0x8, 0x8, 0x4b6, 0x5, 0x0, 0x5, 0x4, 0xd9, 0x7, 0x7, 0x9, 0xbe, 0x10, 0x6, 0x8, 0x3, 0x9, 0x6, 0x6, 0x7, 0x0, 0x8, 0x8, 0x68, 0x1d0e, 0x0, 0x62, 0x0, 0x5, 0x8, 0x200, 0x8, 0x10001, 0x8001, 0x280000, 0x7, 0x988, 0x81, 0x28000, 0x1, 0x2476, 0xffff, 0x8d, 0x4, 0xfffffff9, 0x8, 0x2, 0x6, 0xfff, 0x6, 0x2, 0x7fe0, 0xffff, 0x9, 0xe, 0xffffff80, 0x200, 0x8, 0xf, 0xca4d90a, 0x6, 0xf3, 0x7, 0xfffffffe, 0x5, 0x4, 0x1, 0x2, 0x27cd, 0x40, 0x6459, 0x1, 0xfffffff9, 0x1000, 0x80000001, 0x9, 0x400, 0x2, 0x5, 0x3, 0x7f, 0x8, 0x6, 0x8, 0x0, 0x80000001, 0xfffffffc, 0xc85d, 0x3, 0x2, 0x7fff, 0x0, 0xfffffffb, 0x9, 0x3ff, 0x40, 0xff, 0x5, 0x4, 0x4, 0x80, 0x4, 0x7, 0x3, 0x6, 0x9, 0x7, 0x7fff, 0xfff, 0x5, 0xffff7fff, 0xcb, 0x6, 0x3, 0x0, 0x8001, 0x11, 0x800, 0x4e, 0xfff, 0x7fff, 0x8, 0x10001, 0x5, 0x7, 0xe, 0x6, 0x9, 0x2, 0x5, 0xf, 0x7fffffff, 0x10001, 0x400, 0xd1a, 0x7, 0x200, 0x7, 0x9, 0x8, 0x4000000, 0x5, 0x6, 0x9, 0xfae2, 0xade9, 0x401, 0x7, 0x4, 0x6, 0x0, 0x7, 0x0, 0x3, 0x4, 0x8, 0x800, 0x40, 0x0, 0xffffffff, 0x101, 0x9000, 0x9, 0xffff00c5, 0x9, 0x9, 0x0, 0x0, 0x100, 0xbba, 0x34, 0xffff0000, 0x9, 0x4d5, 0x0, 0x7, 0xa6, 0x5, 0x8, 0x3, 0xffff, 0xfffffff7, 0x5, 0x5, 0x45, 0x3, 0x5, 0xfffffffb, 0x4, 0x9, 0x4, 0x2, 0x5, 0x60a4, 0x4921, 0x7, 0x3, 0x74, 0x53, 0x7fffffff, 0xffffffff, 0x1ff, 0x3, 0x0, 0x4, 0xfffffffd, 0xca8f, 0x3ff, 0xda, 0x7, 0x200, 0x1, 0x9, 0xec1, 0x3, 0x3, 0x4, 0x98b6, 0x4, 0x8, 0x2, 0x3ff, 0x2, 0x9, 0x8, 0x2, 0x8, 0x1, 0x80000000, 0x8000, 0x6, 0x2, 0x1, 0x2, 0xe, 0x2, 0x1ff, 0x0, 0x4, 0x3a, 0x10000, 0xc, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x7f, 0x7, 0x4, {0xc, 0x2, 0x7, 0x5, 0x5, 0x7}, {0x2, 0x0, 0x6, 0x2, 0x0, 0x1}, 0xd39, 0x8, 0x9}}]}]}}]}, 0x884}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x2, 0x1, &(0x7f0000000140)=""/187, &(0x7f0000000380)=""/45, &(0x7f0000000280)=""/163, 0x80a0000}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r0, &(0x7f00000000c0)=0x58, 0x5) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000f9000009000008001f00000000"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 103.291332ms ago: executing program 2 (id=1965): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x33, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x7) 241.489µs ago: executing program 2 (id=1966): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, r0, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x7, 0x20000274, 0x200002a0, 0x0, 0x4], 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000f8ffffffffffffff000000000000000000800000000000000000000100000000000000ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000009ac0000000feffffff0000000000000000000000000000000000000000000000000000000004000000000000000000000000000000feffffff00000000"]}, 0xe0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffff9c, &(0x7f0000000080), 0x71b200, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000001000000040060809c0a01"], 0xab4}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='&\x00') syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@local}, @my=0x1, 0x0, 0x0, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x0, 0x7}) connect$unix(r3, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) 0s ago: executing program 6 (id=1894): r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r5, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fanotify_mark(r0, 0x11, 0x48000038, r5, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fanotify_init(0x0, 0x0) (async) epoll_create1(0x0) (async) syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)) (async) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) (async) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r6, r5, 0x2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) fanotify_mark(r0, 0x11, 0x48000038, r5, 0x0) (async) socket$inet6(0xa, 0x3, 0x4) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x90) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) kernel console output (not intermixed with test programs): speed USB device number 38 using dummy_hcd [ 197.374030][T11534] siw: device registration error -23 [ 197.478161][ T1451] usb 6-1: Using ep0 maxpacket: 8 [ 197.482932][ T1451] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 197.486901][ T1451] usb 6-1: config 179 has no interface number 0 [ 197.490315][ T1451] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 197.495211][ T1451] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 197.500999][ T1451] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 197.506326][ T1451] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 197.511271][ T1451] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 197.516865][ T1451] usb 6-1: config 179 interface 65 has no altsetting 0 [ 197.520213][ T1451] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 197.524010][ T1451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.531386][T11528] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 197.535561][T11528] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 197.548176][ T1451] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input29 [ 197.598392][ T5346] input input29: unable to receive magic message: -110 [ 197.602614][ T5346] input input29: unable to receive magic message: -32 [ 197.609610][ T5346] input input29: unable to receive magic message: -32 [ 197.613045][ T5346] input input29: unable to receive magic message: -32 [ 197.628929][ T5960] input input29: unable to receive magic message: -32 [ 197.648938][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 197.660564][ T5346] input input29: unable to receive magic message: -32 [ 197.663299][ T5346] input input29: unable to receive magic message: -32 [ 197.743152][ T6769] usb 6-1: USB disconnect, device number 38 [ 197.743177][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 197.748190][ T6769] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 198.075129][T11542] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 198.343040][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 198.445723][T11552] lo speed is unknown, defaulting to 1000 [ 198.498564][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 198.503227][ T8] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 198.506357][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 198.512180][ T8] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 198.520611][ T8] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 198.534202][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.545294][ T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 198.548916][ T8] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 198.551512][ T8] usb 5-1: Product: syz [ 198.552788][ T8] usb 5-1: Manufacturer: syz [ 198.558173][ T8] usb 5-1: SerialNumber: syz [ 198.562542][ T8] usb 5-1: config 0 descriptor?? [ 198.567874][ T8] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 198.573280][ T8] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 198.687534][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 198.918530][ T5997] usb 5-1: USB disconnect, device number 25 [ 198.922009][ T5997] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 198.972220][T11566] Bluetooth: MGMT ver 1.23 [ 200.026491][T11591] Invalid logical block size (768) [ 200.454441][T11598] netlink: 'syz.0.1218': attribute type 1 has an invalid length. [ 200.456868][T11598] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1218'. [ 200.466885][T11598] netlink: set zone limit has 8 unknown bytes [ 200.718319][ T5997] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 200.868197][ T5997] usb 5-1: Using ep0 maxpacket: 16 [ 200.872208][ T5997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.876942][ T5997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.882556][ T5997] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 200.890733][ T5997] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 200.894554][ T5997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.905245][ T5997] usb 5-1: config 0 descriptor?? [ 201.325483][ T5997] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 201.335947][ T5997] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 201.338462][ T5997] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 201.526531][ T30] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 201.526619][ T8] usb 5-1: USB disconnect, device number 26 [ 201.530265][ T30] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 201.530304][ T30] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 201.538959][ T30] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 201.922709][T11616] siw: device registration error -23 [ 202.382534][ T39] audit: type=1326 audit(1735644391.811:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11631 comm="syz.2.1226" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x0 [ 203.158105][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.218167][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.268330][T11653] siw: device registration error -23 [ 203.998740][ T1451] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 204.148147][ T1451] usb 6-1: Using ep0 maxpacket: 8 [ 204.150881][ T1451] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.154390][ T1451] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.157177][ T1451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.160875][ T1451] usb 6-1: config 0 descriptor?? [ 204.278244][ T62] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 204.369025][ T1451] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 204.429623][ T62] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.432951][ T62] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 204.435750][ T62] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.438538][ T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.446244][T11676] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 204.450858][ T62] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.653729][ T1451] usb 8-1: USB disconnect, device number 25 [ 204.773072][ T1448] usb 6-1: USB disconnect, device number 39 [ 204.775155][ C2] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 204.857003][ T39] audit: type=1326 audit(1735644394.281:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.3.1236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 204.865170][ T39] audit: type=1326 audit(1735644394.281:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.3.1236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 204.873540][ T39] audit: type=1326 audit(1735644394.291:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.3.1236" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 204.880838][ T39] audit: type=1326 audit(1735644394.291:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.3.1236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 204.887702][ T39] audit: type=1326 audit(1735644394.291:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.3.1236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 204.894522][ T39] audit: type=1326 audit(1735644394.291:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.3.1236" exe="/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 204.901246][ T39] audit: type=1326 audit(1735644394.291:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.3.1236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 204.908116][ T39] audit: type=1326 audit(1735644394.291:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.3.1236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 204.914737][ T39] audit: type=1326 audit(1735644394.291:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.3.1236" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 205.086670][T11680] overlayfs: failed to resolve './file1': -2 [ 205.688399][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 206.874563][T11708] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1245'. [ 206.877488][T11708] netlink: 'syz.0.1245': attribute type 5 has an invalid length. [ 206.879950][T11708] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1245'. [ 207.250909][T11711] lo speed is unknown, defaulting to 1000 [ 208.074781][T11756] @: renamed from vlan0 [ 208.126460][T11766] netlink: 'syz.1.1255': attribute type 16 has an invalid length. [ 208.139413][T11756] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 208.141551][T11756] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 208.145632][T11756] vhci_hcd vhci_hcd.0: Device attached [ 208.151876][T11761] 9pnet_fd: Insufficient options for proto=fd [ 208.338449][ T30] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 208.428221][ T1451] usb 40-1: SetAddress Request (2) to port 0 [ 208.430338][ T1451] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 208.488116][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 208.490846][ T30] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 208.493453][ T30] usb 8-1: config 179 has no interface number 0 [ 208.495370][ T30] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 208.499082][ T30] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 208.502339][ T30] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 208.505768][ T30] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 208.509375][ T30] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 208.513455][ T30] usb 8-1: config 179 interface 65 has no altsetting 0 [ 208.515490][ T30] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 208.518694][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.522299][T11760] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 208.524519][T11760] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 208.531029][ T30] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input31 [ 208.568370][ T5346] input input31: unable to receive magic message: -110 [ 208.571995][ T5346] input input31: unable to receive magic message: -32 [ 208.575492][ T5346] input input31: unable to receive magic message: -32 [ 208.578219][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 208.580957][ T5346] input input31: unable to receive magic message: -32 [ 208.595025][ T5960] input input31: unable to receive magic message: -32 [ 208.600793][ T5346] input input31: unable to receive magic message: -32 [ 208.603890][ T5346] input input31: unable to receive magic message: -32 [ 208.608896][ T5346] input input31: unable to receive magic message: -32 [ 208.657784][T11767] vhci_hcd: connection reset by peer [ 208.658138][ T8] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 208.661212][ T7499] vhci_hcd: stop threads [ 208.663234][ T7499] vhci_hcd: release socket [ 208.664644][ T7499] vhci_hcd: disconnect device [ 208.731905][T11760] FAULT_INJECTION: forcing a failure. [ 208.731905][T11760] name failslab, interval 1, probability 0, space 0, times 0 [ 208.735690][T11760] CPU: 3 UID: 0 PID: 11760 Comm: syz.3.1257 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 208.739081][T11760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.742347][T11760] Call Trace: [ 208.743380][T11760] [ 208.744302][T11760] dump_stack_lvl+0x16c/0x1f0 [ 208.745742][T11760] should_fail_ex+0x497/0x5b0 [ 208.747279][T11760] ? fs_reclaim_acquire+0xae/0x150 [ 208.748855][T11760] should_failslab+0xc2/0x120 [ 208.750298][T11760] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 208.751856][T11760] ? getname_flags.part.0+0x4c/0x550 [ 208.753435][T11760] ? vfs_write+0x306/0x1150 [ 208.754805][T11760] getname_flags.part.0+0x4c/0x550 [ 208.756415][T11760] getname+0x8d/0xe0 [ 208.757650][T11760] do_sys_openat2+0x104/0x1e0 [ 208.759022][T11760] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.760582][T11760] ? __fget_files+0x206/0x3a0 [ 208.761983][T11760] __ia32_compat_sys_openat+0x16e/0x210 [ 208.763645][T11760] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 208.765453][T11760] ? ksys_write+0x1ba/0x250 [ 208.766865][T11760] __do_fast_syscall_32+0x73/0x120 [ 208.768377][T11760] do_fast_syscall_32+0x32/0x80 [ 208.769822][T11760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.771705][T11760] RIP: 0023:0xf7fe8579 [ 208.772932][T11760] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 208.778927][T11760] RSP: 002b:00000000f5136100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 208.781377][T11760] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5136150 [ 208.783716][T11760] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 00000000f7473ff4 [ 208.786150][T11760] RBP: 0000000000004800 R08: 0000000000000000 R09: 0000000000000000 [ 208.788471][T11760] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 208.790752][T11760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.793133][T11760] [ 208.796121][ T1448] usb 8-1: USB disconnect, device number 26 [ 208.796210][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 208.801058][ T1448] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 208.808714][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 208.814948][ T8] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 208.817414][ T8] usb 5-1: config 179 has no interface number 0 [ 208.828098][ T8] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 208.831477][ T8] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 208.835066][ T8] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 208.848080][ T8] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 208.851453][ T8] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 208.855381][ T8] usb 5-1: config 179 interface 65 has no altsetting 0 [ 208.858681][ T8] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 208.861383][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.865244][T11775] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 208.867422][T11775] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 208.872644][ T8] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input32 [ 208.908318][ T5346] input input32: unable to receive magic message: -110 [ 208.912813][ T5346] input input32: unable to receive magic message: -32 [ 208.919878][ T5346] input input32: unable to receive magic message: -32 [ 208.924644][ T5346] input input32: unable to receive magic message: -32 [ 208.968097][ T5960] input input32: unable to receive magic message: -32 [ 208.974639][ T5346] input input32: unable to receive magic message: -32 [ 208.979922][ T5346] input input32: unable to receive magic message: -32 [ 209.077003][T11775] input input32: unable to receive magic message: -32 [ 209.080212][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 209.085344][ T8] usb 5-1: USB disconnect, device number 27 [ 209.087276][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 209.090464][ T8] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 209.900148][T11807] lo speed is unknown, defaulting to 1000 [ 210.328447][ T1448] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 210.478415][ T1448] usb 6-1: Using ep0 maxpacket: 8 [ 210.492105][ T1448] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 210.496265][ T1448] usb 6-1: config 179 has no interface number 0 [ 210.498386][ T1448] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 210.501637][ T1448] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 210.504802][ T1448] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 210.508192][ T1448] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 210.512411][ T1448] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 210.517447][ T1448] usb 6-1: config 179 interface 65 has no altsetting 0 [ 210.520282][ T1448] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 210.523880][ T1448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.529897][T11817] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 210.532771][T11817] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 210.537204][ T1448] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input33 [ 210.588796][ T5346] input input33: unable to receive magic message: -110 [ 210.601923][ T5346] input input33: unable to receive magic message: -32 [ 210.604694][ T5346] input input33: unable to receive magic message: -32 [ 210.607940][ T5346] input input33: unable to receive magic message: -32 [ 210.613027][ T5346] input input33: unable to receive magic message: -32 [ 210.739565][T11817] FAULT_INJECTION: forcing a failure. [ 210.739565][T11817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.743423][T11817] CPU: 3 UID: 0 PID: 11817 Comm: syz.1.1271 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 210.746586][T11817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 210.749630][T11817] Call Trace: [ 210.750620][T11817] [ 210.751477][T11817] dump_stack_lvl+0x16c/0x1f0 [ 210.752856][T11817] should_fail_ex+0x497/0x5b0 [ 210.754217][T11817] strncpy_from_user+0x3b/0x2d0 [ 210.755645][T11817] getname_flags.part.0+0x8f/0x550 [ 210.757141][T11817] getname+0x8d/0xe0 [ 210.758318][T11817] do_sys_openat2+0x104/0x1e0 [ 210.759689][T11817] ? __pfx_do_sys_openat2+0x10/0x10 [ 210.761205][T11817] ? __fget_files+0x206/0x3a0 [ 210.762649][T11817] __ia32_compat_sys_openat+0x16e/0x210 [ 210.764329][T11817] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 210.766141][T11817] ? ksys_write+0x1ba/0x250 [ 210.767428][T11817] __do_fast_syscall_32+0x73/0x120 [ 210.768960][T11817] do_fast_syscall_32+0x32/0x80 [ 210.770339][T11817] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.772151][T11817] RIP: 0023:0xf7fb3579 [ 210.773356][T11817] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 210.778817][T11817] RSP: 002b:00000000f5106100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 210.781212][T11817] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5106150 [ 210.783496][T11817] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 00000000f7443ff4 [ 210.785719][T11817] RBP: 0000000000004800 R08: 0000000000000000 R09: 0000000000000000 [ 210.788007][T11817] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 210.790289][T11817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.792529][T11817] [ 210.799334][ T6649] usb 6-1: USB disconnect, device number 40 [ 210.801182][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 210.804076][ T6649] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 210.868152][ T1448] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 211.038154][ T1448] usb 8-1: Using ep0 maxpacket: 8 [ 211.041556][ T1448] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 211.044694][ T1448] usb 8-1: config 179 has no interface number 0 [ 211.047229][ T1448] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 211.051640][ T1448] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 211.055934][ T1448] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 211.060423][ T1448] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 211.064777][ T1448] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 211.069857][ T1448] usb 8-1: config 179 interface 65 has no altsetting 0 [ 211.072460][ T1448] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 211.076465][ T1448] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.084520][T11830] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 211.087383][T11830] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 211.091997][ T1448] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input34 [ 211.138305][ T5346] input input34: unable to receive magic message: -110 [ 211.152990][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 211.159506][ T5346] input input34: unable to receive magic message: -32 [ 211.162426][ T5346] input input34: unable to receive magic message: -32 [ 211.165443][ T5346] input input34: unable to receive magic message: -32 [ 211.178502][ T5960] input input34: unable to receive magic message: -32 [ 211.191429][ T5346] input input34: unable to receive magic message: -32 [ 211.195813][ T5346] input input34: unable to receive magic message: -32 [ 211.200792][ T5346] input input34: unable to receive magic message: -32 [ 211.240297][T11842] netlink: 'syz.2.1280': attribute type 10 has an invalid length. [ 211.244143][T11842] bond0: (slave wlan1): Opening slave failed [ 211.299004][T11830] input input34: unable to receive magic message: -32 [ 211.307441][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 211.310110][ T1448] usb 8-1: USB disconnect, device number 27 [ 211.312227][ T1448] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 211.336230][T11842] syz.2.1280 (11842): drop_caches: 2 [ 211.398934][T11852] kAFS: Can only specify source 'none' with -o dyn [ 211.696148][ T30] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 211.883368][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 211.887774][ T30] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 211.891131][ T30] usb 5-1: config 179 has no interface number 0 [ 211.894943][ T30] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 211.904734][ T30] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 211.916168][ T30] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 212.035502][ T30] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 212.039174][ T30] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 212.043150][ T30] usb 5-1: config 179 interface 65 has no altsetting 0 [ 212.045266][ T30] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 212.048302][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.058315][T11854] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 212.060485][T11854] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 212.081070][ T30] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input35 [ 212.118383][ T5346] input input35: unable to receive magic message: -110 [ 212.120982][ T62] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 212.124249][ T5346] input input35: unable to receive magic message: -32 [ 212.128499][ T5346] input input35: unable to receive magic message: -32 [ 212.131299][ T5346] input input35: unable to receive magic message: -32 [ 212.178567][ T5346] input input35: unable to receive magic message: -32 [ 212.186084][ T5346] input input35: unable to receive magic message: -32 [ 212.194212][ T5346] input input35: unable to receive magic message: -32 [ 212.268118][ T62] usb 8-1: Using ep0 maxpacket: 8 [ 212.273910][ T62] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 212.275317][T11854] input input35: unable to receive magic message: -32 [ 212.277135][ T62] usb 8-1: config 179 has no interface number 0 [ 212.282827][ T62] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 212.286075][ T62] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 212.289646][ T62] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 212.292999][ T62] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 212.296307][ T62] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 212.301108][ T62] usb 8-1: config 179 interface 65 has no altsetting 0 [ 212.302764][ T30] usb 5-1: USB disconnect, device number 28 [ 212.302835][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 212.303932][ T62] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 212.308678][ T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.312816][ T30] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 212.315163][T11875] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 212.318777][T11875] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 212.324721][ T62] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input36 [ 212.368451][ T5346] input input36: unable to receive magic message: -110 [ 212.373140][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 212.378554][ T5346] input input36: unable to receive magic message: -32 [ 212.388778][ T5346] input input36: unable to receive magic message: -32 [ 212.393298][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 212.400192][ T5346] input input36: unable to receive magic message: -32 [ 212.428249][ T5960] input input36: unable to receive magic message: -32 [ 212.432415][ T5346] input input36: unable to receive magic message: -32 [ 212.434782][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 212.462709][ T5346] input input36: unable to receive magic message: -32 [ 212.469927][ T5346] input input36: unable to receive magic message: -32 [ 212.522151][T11875] FAULT_INJECTION: forcing a failure. [ 212.522151][T11875] name failslab, interval 1, probability 0, space 0, times 0 [ 212.527021][T11875] CPU: 2 UID: 0 PID: 11875 Comm: syz.3.1289 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 212.531242][T11875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.535571][T11875] Call Trace: [ 212.536934][T11875] [ 212.538142][T11875] dump_stack_lvl+0x16c/0x1f0 [ 212.540052][T11875] should_fail_ex+0x497/0x5b0 [ 212.542046][T11875] ? fs_reclaim_acquire+0xae/0x150 [ 212.544194][T11875] should_failslab+0xc2/0x120 [ 212.546088][T11875] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 212.548216][T11875] ? alloc_empty_file+0x73/0x1e0 [ 212.550198][T11875] alloc_empty_file+0x73/0x1e0 [ 212.552129][T11875] path_openat+0xe1/0x2d60 [ 212.553927][T11875] ? hlock_class+0x4e/0x130 [ 212.555736][T11875] ? __lock_acquire+0x15a9/0x3c40 [ 212.557755][T11875] ? __pfx_path_openat+0x10/0x10 [ 212.559723][T11875] ? __pfx___lock_acquire+0x10/0x10 [ 212.561770][T11875] ? lock_acquire.part.0+0x11b/0x380 [ 212.563859][T11875] ? find_held_lock+0x2d/0x110 [ 212.565749][T11875] do_filp_open+0x20c/0x470 [ 212.567600][T11875] ? __pfx_do_filp_open+0x10/0x10 [ 212.569677][T11875] ? find_held_lock+0x2d/0x110 [ 212.571645][T11875] ? alloc_fd+0x41f/0x760 [ 212.573365][T11875] do_sys_openat2+0x17a/0x1e0 [ 212.575258][T11875] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.577291][T11875] ? __fget_files+0x206/0x3a0 [ 212.579201][T11875] __ia32_compat_sys_openat+0x16e/0x210 [ 212.581381][T11875] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 212.583793][T11875] ? ksys_write+0x1ba/0x250 [ 212.585604][T11875] __do_fast_syscall_32+0x73/0x120 [ 212.587662][T11875] do_fast_syscall_32+0x32/0x80 [ 212.589584][T11875] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.592104][T11875] RIP: 0023:0xf7fe8579 [ 212.593643][T11875] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 212.601295][T11875] RSP: 002b:00000000f5136100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 212.604635][T11875] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5136150 [ 212.607729][T11875] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 00000000f7473ff4 [ 212.610651][T11875] RBP: 0000000000004800 R08: 0000000000000000 R09: 0000000000000000 [ 212.612965][T11875] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 212.615287][T11875] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.617609][T11875] [ 212.625524][ T6063] usb 8-1: USB disconnect, device number 28 [ 212.625577][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 212.643986][ T6063] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 212.997917][T11897] 9pnet_fd: Insufficient options for proto=fd [ 213.178295][ T1448] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 213.339594][ T1448] usb 5-1: descriptor type invalid, skip [ 213.348522][ T1448] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 213.351618][ T1448] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.355425][ T1448] usb 5-1: config 1 interface 0 has no altsetting 0 [ 213.508317][ T5997] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 213.528338][ T1451] usb 40-1: device descriptor read/8, error -110 [ 213.528437][ T5953] Bluetooth: hci0: command 0x0401 tx timeout [ 213.576495][T11905] wireguard0: entered promiscuous mode [ 213.688144][ T5997] usb 6-1: Using ep0 maxpacket: 8 [ 213.690857][ T5997] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 213.693298][ T5997] usb 6-1: config 179 has no interface number 0 [ 213.695177][ T5997] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 213.698814][ T5997] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 213.702261][ T5997] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 213.705595][ T5997] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 213.708999][ T5997] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 213.712933][ T5997] usb 6-1: config 179 interface 65 has no altsetting 0 [ 213.715029][ T5997] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 213.717754][ T5997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.721547][T11903] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 213.723712][T11903] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 213.728482][ T5997] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input37 [ 213.768358][ T5346] input input37: unable to receive magic message: -110 [ 213.770997][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 213.774125][ T5346] input input37: unable to receive magic message: -32 [ 213.778198][ T5346] input input37: unable to receive magic message: -32 [ 213.784846][ T5346] input input37: unable to receive magic message: -32 [ 213.805071][ T5960] input input37: unable to receive magic message: -32 [ 213.820134][ T5346] input input37: unable to receive magic message: -32 [ 213.832017][ T5346] input input37: unable to receive magic message: -32 [ 213.928688][ T1451] usb usb40-port1: attempt power cycle [ 213.934545][T11900] input input37: unable to receive magic message: -32 [ 214.058972][T11911] netlink: 'syz.2.1299': attribute type 10 has an invalid length. [ 214.065580][T11911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.069546][T11911] batadv0: entered promiscuous mode [ 214.071414][T11911] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 214.468333][T11925] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 214.499308][ T1451] usb usb40-port1: unable to enumerate USB device [ 214.745409][T11934] ISOFS: Unable to identify CD-ROM format. [ 215.905666][ T1448] usb 5-1: string descriptor 0 read error: -71 [ 215.908358][ T1448] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.40 [ 215.912032][ T1448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.920041][ T1448] usb 5-1: can't set config #1, error -71 [ 215.923176][ T1448] usb 5-1: USB disconnect, device number 29 [ 216.148399][ T5997] usb 6-1: USB disconnect, device number 41 [ 216.148473][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 216.153831][ T5997] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 216.174561][T11946] siw: device registration error -23 [ 217.007493][T11958] lo speed is unknown, defaulting to 1000 [ 217.877979][T11972] lo speed is unknown, defaulting to 1000 [ 217.880161][T11972] lo speed is unknown, defaulting to 1000 [ 217.882144][T11972] lo speed is unknown, defaulting to 1000 [ 217.886509][T11972] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 217.895225][T11972] lo speed is unknown, defaulting to 1000 [ 217.897693][T11972] lo speed is unknown, defaulting to 1000 [ 217.902752][T11972] lo speed is unknown, defaulting to 1000 [ 217.904984][T11972] lo speed is unknown, defaulting to 1000 [ 218.179537][T11977] siw: device registration error -23 [ 218.894048][T11979] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1316'. [ 219.104352][T11981] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 219.110423][T11981] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.353543][T11985] siw: device registration error -23 [ 221.451000][T12021] siw: device registration error -23 [ 221.985269][T12028] vlan0: entered promiscuous mode [ 222.176710][T12031] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 222.266789][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1335'. [ 222.345973][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1337'. [ 223.451587][T12060] siw: device registration error -23 [ 223.639122][T12068] netlink: 'syz.1.1345': attribute type 11 has an invalid length. [ 223.642752][T12068] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1345'. [ 223.652609][T12068] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 223.922086][T12079] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1349'. [ 224.586216][T12092] kAFS: Can only specify source 'none' with -o dyn [ 224.842908][T12095] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 224.913754][ T39] kauditd_printk_skb: 49 callbacks suppressed [ 224.913765][ T39] audit: type=1326 audit(1735644414.466:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.0.1355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 224.923551][ T39] audit: type=1326 audit(1735644414.466:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.0.1355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 224.930744][ T39] audit: type=1326 audit(1735644414.487:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.0.1355" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 224.937466][ T39] audit: type=1326 audit(1735644414.487:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.0.1355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 224.945274][ T39] audit: type=1326 audit(1735644414.487:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.0.1355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 224.951698][ T39] audit: type=1326 audit(1735644414.487:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.0.1355" exe="/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 224.958351][ T39] audit: type=1326 audit(1735644414.487:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.0.1355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 224.965765][ T39] audit: type=1326 audit(1735644414.487:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.0.1355" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 224.974548][ T39] audit: type=1326 audit(1735644414.487:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.0.1355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 224.985410][ T39] audit: type=1326 audit(1735644414.497:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.0.1355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 225.172752][T12101] bridge_slave_0: left allmulticast mode [ 225.177241][T12101] bridge_slave_0: left promiscuous mode [ 225.181181][T12101] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.187764][T12101] bridge_slave_1: left allmulticast mode [ 225.189555][T12101] bridge_slave_1: left promiscuous mode [ 225.191516][T12101] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.200011][T12101] bond0: (slave bond_slave_0): Releasing backup interface [ 225.207866][T12101] bond0: (slave bond_slave_1): Releasing backup interface [ 225.245465][T12101] team0: Port device team_slave_0 removed [ 225.257748][T12101] team0: Port device team_slave_1 removed [ 225.273760][T12101] bond0: (slave wlan1): Releasing backup interface [ 225.315178][T12105] team0: Mode changed to "loadbalance" [ 225.659964][T12118] siw: device registration error -23 [ 226.569329][T12135] wireguard0: entered promiscuous mode [ 226.693526][T12138] siw: device registration error -23 [ 227.163178][T12146] siw: device registration error -23 [ 228.804925][T12163] siw: device registration error -23 [ 229.629683][ T5950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.635143][ T5950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.638537][ T5950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.650144][ T5950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.659177][ T5950] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.661735][ T5950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.692852][T12169] lo speed is unknown, defaulting to 1000 [ 229.726907][T12169] lo speed is unknown, defaulting to 1000 [ 229.815432][T12169] chnl_net:caif_netlink_parms(): no params data found [ 229.935551][T12169] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.947443][T12169] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.968512][T12169] bridge_slave_0: entered allmulticast mode [ 229.994453][T12169] bridge_slave_0: entered promiscuous mode [ 229.997289][T12169] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.999518][T12169] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.001709][T12169] bridge_slave_1: entered allmulticast mode [ 230.004059][T12169] bridge_slave_1: entered promiscuous mode [ 230.025570][T12169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.029501][T12169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.052498][T12169] team0: Port device team_slave_0 added [ 230.056371][T12169] team0: Port device team_slave_1 added [ 230.073380][T12169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.075544][T12169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.083799][T12169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.087648][T12169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.089867][T12169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.097542][T12169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.128156][T12169] hsr_slave_0: entered promiscuous mode [ 230.134265][T12169] hsr_slave_1: entered promiscuous mode [ 230.264369][T12169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 230.283877][T12169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 230.287734][T12169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 230.293517][T12169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.309466][T12169] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.311651][T12169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.313915][T12169] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.316039][T12169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.339908][T12169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.348252][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.352125][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.366190][T12169] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.382125][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.385002][ T7439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.389247][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.391399][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.493469][T12169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.551962][T12191] can0: slcan on ptm0. [ 230.717941][T12192] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 230.984910][T12207] siw: device registration error -23 [ 231.220408][T12169] veth0_vlan: entered promiscuous mode [ 231.227732][T12169] veth1_vlan: entered promiscuous mode [ 231.248957][T12169] veth0_macvtap: entered promiscuous mode [ 231.259670][T12169] veth1_macvtap: entered promiscuous mode [ 231.271206][T12169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.276651][T12169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.283434][T12169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.291175][T12169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.296948][T12169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.306720][T12169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.315780][T12169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.320221][T12169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.324845][T12169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.331503][T12169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.391828][ T7499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.402062][ T7499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.452641][ T7499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.455605][ T7499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.480621][T12186] can0 (unregistered): slcan off ptm0. [ 231.641707][ T5953] Bluetooth: hci4: command tx timeout [ 232.188315][T12234] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 232.818514][T12237] siw: device registration error -23 [ 233.075727][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 233.075738][ T39] audit: type=1326 audit(1735644423.032:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12241 comm="syz.2.1382" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x0 [ 233.240376][T12223] syz.1.1377 (12223) used greatest stack depth: 20480 bytes left [ 233.603808][ T5953] Bluetooth: hci4: command tx timeout [ 234.534112][T12274] siw: device registration error -23 [ 235.460650][T12289] siw: device registration error -23 [ 235.584889][ T5953] Bluetooth: hci4: command tx timeout [ 235.641917][ T6769] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 235.784870][ T6769] usb 5-1: Using ep0 maxpacket: 8 [ 235.788047][ T6769] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 235.790642][ T6769] usb 5-1: config 179 has no interface number 0 [ 235.792597][ T6769] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 235.796489][ T6769] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 235.800326][ T6769] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 235.803558][ T6769] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 235.808994][ T6769] usb 5-1: config 179 interface 65 has no altsetting 0 [ 235.811188][ T6769] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 235.814164][ T6769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.819824][T12284] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 236.022977][ T5961] usb 5-1: USB disconnect, device number 30 [ 236.535205][T12295] syz.2.1397 (12295): drop_caches: 1 [ 237.110731][T12312] siw: device registration error -23 [ 237.566100][ T5953] Bluetooth: hci4: command tx timeout [ 237.963404][T12329] siw: device registration error -23 [ 238.313873][T12337] lo speed is unknown, defaulting to 1000 [ 238.352098][T12337] lo speed is unknown, defaulting to 1000 [ 238.490379][ T5961] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 238.642810][ T5961] usb 5-1: Using ep0 maxpacket: 8 [ 238.645520][ T5961] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 238.647966][ T5961] usb 5-1: config 179 has no interface number 0 [ 238.649862][ T5961] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 238.653247][ T5961] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 238.656784][ T5961] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 238.660142][ T5961] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 238.664106][ T5961] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 238.668232][ T5961] usb 5-1: config 179 interface 65 has no altsetting 0 [ 238.670545][ T5961] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 238.673540][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.679428][T12335] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 238.686108][T12335] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 238.694536][ T5961] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input38 [ 238.728786][ T5346] input input38: unable to receive magic message: -110 [ 238.735490][T12356] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 238.765666][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 238.769120][ T5346] input input38: unable to receive magic message: -32 [ 238.772040][ T5346] input input38: unable to receive magic message: -32 [ 238.775074][ T5346] input input38: unable to receive magic message: -32 [ 238.887122][T12335] input input38: unable to receive magic message: -32 [ 238.891400][ T1451] usb 5-1: USB disconnect, device number 31 [ 238.891442][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 238.895833][ T1451] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 239.973984][ T39] audit: type=1326 audit(1735644430.276:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.2.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 240.003932][ T39] audit: type=1326 audit(1735644430.276:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.2.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 240.029112][ T39] audit: type=1326 audit(1735644430.297:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.2.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 240.057262][ T39] audit: type=1326 audit(1735644430.297:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.2.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 240.100425][ T39] audit: type=1326 audit(1735644430.297:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.2.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 240.109173][ T39] audit: type=1326 audit(1735644430.297:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.2.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 240.118747][ T39] audit: type=1326 audit(1735644430.297:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.2.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 240.164529][ T39] audit: type=1326 audit(1735644430.297:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.2.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 240.171056][ T39] audit: type=1326 audit(1735644430.297:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.2.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 240.177379][ T39] audit: type=1326 audit(1735644430.297:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.2.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 240.186993][T12380] siw: device registration error -23 [ 242.022333][T12410] unknown channel width for channel at 909000KHz? [ 242.300096][T12421] can0: slcan on ptm0. [ 242.839794][T12433] siw: device registration error -23 [ 243.005208][T12438] can1: slcan on ptm1. [ 243.160010][T12418] can0 (unregistered): slcan off ptm0. [ 243.211785][T12444] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1433'. [ 243.713462][T12434] can1 (unregistered): slcan off ptm1. [ 244.810794][T12496] mkiss: ax0: crc mode is auto. [ 245.060616][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 245.060627][ T39] audit: type=1326 audit(1735644435.619:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.4.1443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 245.072417][ T39] audit: type=1326 audit(1735644435.619:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.4.1443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 245.081408][ T39] audit: type=1326 audit(1735644435.630:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.4.1443" exe="/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 245.087984][ T39] audit: type=1326 audit(1735644435.630:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.4.1443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 245.094701][ T39] audit: type=1326 audit(1735644435.630:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.4.1443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 245.110793][ T39] audit: type=1326 audit(1735644435.630:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.4.1443" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 245.130166][ T39] audit: type=1326 audit(1735644435.630:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.4.1443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 245.142023][ T39] audit: type=1326 audit(1735644435.630:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.4.1443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 245.159564][ T39] audit: type=1326 audit(1735644435.630:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.4.1443" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 245.179237][ T39] audit: type=1326 audit(1735644435.630:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.4.1443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 245.486917][T12510] IPv6: sit1: Disabled Multicast RS [ 245.496148][T12510] sit1: entered allmulticast mode [ 245.524874][T12510] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.527700][T12510] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.530412][T12510] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.533023][T12510] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.549083][T12510] team0: Port device vxlan0 added [ 245.634796][ T30] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 245.872035][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 245.884884][ T30] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 245.887526][ T30] usb 5-1: config 179 has no interface number 0 [ 245.889413][ T30] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 245.892818][ T30] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 245.896139][ T30] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 245.899569][ T30] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 245.910970][ T30] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 245.914897][ T30] usb 5-1: config 179 interface 65 has no altsetting 0 [ 245.916971][ T30] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 245.919649][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.928336][T12512] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.930590][T12512] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.936136][ T30] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input39 [ 245.977792][ T5346] input input39: unable to receive magic message: -110 [ 245.982819][ T5346] input input39: unable to receive magic message: -32 [ 245.990622][ T5346] input input39: unable to receive magic message: -32 [ 245.994334][ T5346] input input39: unable to receive magic message: -32 [ 246.021206][ T5346] input input39: unable to receive magic message: -32 [ 246.026799][ T5346] input input39: unable to receive magic message: -32 [ 246.033657][ T5960] input input39: unable to receive magic message: -32 [ 246.058704][ T5346] input input39: unable to receive magic message: -32 [ 246.140303][T12512] input input39: unable to receive magic message: -32 [ 246.158805][ T30] usb 5-1: USB disconnect, device number 32 [ 246.158856][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 246.163865][ T30] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 246.370428][T12531] ceph: No mds server is up or the cluster is laggy [ 247.140452][ T1448] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 247.771147][T12576] ip6tnl1: entered promiscuous mode [ 248.785162][T12593] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 249.017458][T12598] syz.4.1467: attempt to access beyond end of device [ 249.017458][T12598] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 249.027054][T12598] syz.4.1467: attempt to access beyond end of device [ 249.027054][T12598] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 249.030950][T12598] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 249.034291][T12598] syz.4.1467: attempt to access beyond end of device [ 249.034291][T12598] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 249.044682][T12598] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 249.047505][T12598] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 249.049762][T12598] UDF-fs: Scanning with blocksize 512 failed [ 249.052466][T12598] syz.4.1467: attempt to access beyond end of device [ 249.052466][T12598] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 249.076889][T12598] syz.4.1467: attempt to access beyond end of device [ 249.076889][T12598] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 249.080892][T12598] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 249.084301][T12598] syz.4.1467: attempt to access beyond end of device [ 249.084301][T12598] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 249.088300][T12598] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 249.091370][T12598] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 249.096101][T12598] UDF-fs: Scanning with blocksize 1024 failed [ 249.098187][T12598] syz.4.1467: attempt to access beyond end of device [ 249.098187][T12598] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 249.103640][T12598] syz.4.1467: attempt to access beyond end of device [ 249.103640][T12598] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 249.107471][T12598] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 249.110303][T12598] syz.4.1467: attempt to access beyond end of device [ 249.110303][T12598] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 249.117361][T12598] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 249.120194][T12598] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 249.125283][T12598] UDF-fs: Scanning with blocksize 2048 failed [ 249.127320][T12598] syz.4.1467: attempt to access beyond end of device [ 249.127320][T12598] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 249.133817][T12598] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 249.136732][T12598] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 249.139813][T12598] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 249.142088][T12598] UDF-fs: Scanning with blocksize 4096 failed [ 249.143898][T12598] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 249.938676][ T39] kauditd_printk_skb: 72 callbacks suppressed [ 249.938688][ T39] audit: type=1326 audit(1735644440.732:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.1.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 249.947636][ T39] audit: type=1326 audit(1735644440.732:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.1.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 250.359397][ T5997] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 250.489156][ T39] audit: type=1326 audit(1735644441.320:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.0.1483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 250.497802][ T39] audit: type=1326 audit(1735644441.320:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.0.1483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 250.502273][ T5997] usb 9-1: Using ep0 maxpacket: 8 [ 250.505986][ T39] audit: type=1326 audit(1735644441.320:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.0.1483" exe="/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 250.512387][ T39] audit: type=1326 audit(1735644441.320:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.0.1483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 250.512392][ T5997] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 250.518795][ T39] audit: type=1326 audit(1735644441.320:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.0.1483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 250.527870][ T39] audit: type=1326 audit(1735644441.330:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.0.1483" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 250.536538][ T39] audit: type=1326 audit(1735644441.330:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.0.1483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 250.539745][ T5997] usb 9-1: config 179 has no interface number 0 [ 250.543316][ T39] audit: type=1326 audit(1735644441.330:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.0.1483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 250.652265][T12655] syz.0.1483 (12655): drop_caches: 1 [ 250.654315][ T5997] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 250.664269][ T5997] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 250.667639][ T5997] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 250.671042][ T5997] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 250.680880][ T5997] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 250.684919][ T5997] usb 9-1: config 179 interface 65 has no altsetting 0 [ 250.686978][ T5997] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 250.690062][ T5997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.694134][T12647] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 250.696405][T12647] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 250.700763][ T5997] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input40 [ 250.748095][ T5346] input input40: unable to receive magic message: -110 [ 250.753782][ T5346] input input40: unable to receive magic message: -32 [ 250.778156][ T5346] input input40: unable to receive magic message: -32 [ 250.819930][ T5346] input input40: unable to receive magic message: -32 [ 250.830760][ T5346] input input40: unable to receive magic message: -32 [ 250.884410][ T5346] input input40: unable to receive magic message: -32 [ 250.887393][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 250.942671][T12663] siw: device registration error -23 [ 251.034289][T12641] input input40: unable to receive magic message: -32 [ 251.046817][ T5997] usb 9-1: USB disconnect, device number 2 [ 251.048656][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 251.051570][ T5997] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 251.408631][T12670] siw: device registration error -23 [ 251.678345][T12667] syz.0.1493 (12667): drop_caches: 1 [ 252.040153][T12685] fuse: Bad value for 'rootmode' [ 252.813034][T12700] tipc: Started in network mode [ 252.814439][T12700] tipc: Node identity ffffffff, cluster identity 4711 [ 252.816230][T12700] tipc: Node number set to 4294967295 [ 252.901983][T12705] siw: device registration error -23 [ 253.429231][T12708] kvm: Disabled LAPIC found during irq injection [ 253.572962][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.575043][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.660735][T12712] syz.1.1498 (12712): drop_caches: 1 [ 254.701244][T12750] fuse: Bad value for 'user_id' [ 254.702737][T12750] fuse: Bad value for 'user_id' [ 254.762169][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 254.762179][ T39] audit: type=1326 audit(1735644445.802:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12751 comm="syz.4.1509" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x0 [ 254.773171][ T39] audit: type=1326 audit(1735644445.802:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12751 comm="syz.4.1509" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x0 [ 254.952092][ T39] audit: type=1326 audit(1735644446.002:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 254.958300][ T39] audit: type=1326 audit(1735644446.002:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 254.964963][ T39] audit: type=1326 audit(1735644446.002:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 254.971995][ T39] audit: type=1326 audit(1735644446.002:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 254.979714][ T39] audit: type=1326 audit(1735644446.002:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 254.982897][T12759] syz.1.1511 (12759): drop_caches: 1 [ 254.986816][ T39] audit: type=1326 audit(1735644446.002:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 254.995543][ T39] audit: type=1326 audit(1735644446.002:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 255.003310][ T39] audit: type=1326 audit(1735644446.002:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 255.911724][ T8434] bond0: (slave syz_tun): Releasing backup interface [ 256.231474][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.248505][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.251908][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.260805][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.264465][ T5950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 256.268091][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.304613][T12790] lo speed is unknown, defaulting to 1000 [ 256.358547][T12790] lo speed is unknown, defaulting to 1000 [ 256.482383][T12790] chnl_net:caif_netlink_parms(): no params data found [ 256.540329][T12790] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.542644][T12790] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.544753][T12790] bridge_slave_0: entered allmulticast mode [ 256.547267][T12790] bridge_slave_0: entered promiscuous mode [ 256.549983][T12790] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.552525][T12790] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.554706][T12790] bridge_slave_1: entered allmulticast mode [ 256.556885][T12790] bridge_slave_1: entered promiscuous mode [ 256.576276][T12790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.580704][T12790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.602566][T12790] team0: Port device team_slave_0 added [ 256.606042][T12790] team0: Port device team_slave_1 added [ 256.644611][T12803] syz.4.1522 (12803): drop_caches: 1 [ 256.651696][T12790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.654633][T12790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.665336][T12790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.665389][ T6063] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 256.669846][T12790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.673151][T12790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.683300][T12790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.719968][T12790] hsr_slave_0: entered promiscuous mode [ 256.725658][T12790] hsr_slave_1: entered promiscuous mode [ 256.734333][T12790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.737362][T12790] Cannot create hsr debugfs directory [ 256.808199][ T6063] usb 5-1: device descriptor read/64, error -71 [ 256.820569][T12790] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 256.827498][T12790] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.831406][T12790] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.834704][T12790] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 256.849678][T12790] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.852241][T12790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.855106][T12790] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.857400][T12790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.888434][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.894866][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.914804][T12790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.922266][T12790] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.929224][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.932065][ T7439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.938176][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.940312][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.030141][T12790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.036932][ T6063] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 257.124708][T12790] veth0_vlan: entered promiscuous mode [ 257.130995][T12790] veth1_vlan: entered promiscuous mode [ 257.143843][T12790] veth0_macvtap: entered promiscuous mode [ 257.147198][T12790] veth1_macvtap: entered promiscuous mode [ 257.155229][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.158473][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.161764][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.164927][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.169288][T12790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.174739][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.178075][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.179703][ T6063] usb 5-1: device descriptor read/64, error -71 [ 257.183534][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.187640][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.192391][T12790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.196562][T12790] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.199476][T12790] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.202021][T12790] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.204984][T12790] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.234631][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.239213][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.251670][ T7468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.254509][ T7468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.284572][ T6063] usb usb5-port1: attempt power cycle [ 257.301226][T12824] cgroup: fork rejected by pids controller in /syz5 [ 257.617923][ T6063] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 257.637359][ T6063] usb 5-1: device descriptor read/8, error -71 [ 257.884625][ T6063] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 257.904077][ T6063] usb 5-1: device descriptor read/8, error -71 [ 258.008692][ T6063] usb usb5-port1: unable to enumerate USB device [ 259.630599][ T7439] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.648522][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.652439][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.656030][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.659109][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.661482][ T5953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.664318][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.687607][T12839] lo speed is unknown, defaulting to 1000 [ 259.706348][T12838] syz.4.1530 (12838): drop_caches: 1 [ 259.724827][T12839] lo speed is unknown, defaulting to 1000 [ 259.777816][T12839] chnl_net:caif_netlink_parms(): no params data found [ 259.881739][T12839] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.889879][T12839] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.892052][T12839] bridge_slave_0: entered allmulticast mode [ 259.896034][T12839] bridge_slave_0: entered promiscuous mode [ 259.898632][T12839] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.900847][T12839] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.902953][T12839] bridge_slave_1: entered allmulticast mode [ 259.906708][T12839] bridge_slave_1: entered promiscuous mode [ 259.930259][T12839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.935669][T12839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.963253][T12839] team0: Port device team_slave_0 added [ 259.966051][T12839] team0: Port device team_slave_1 added [ 259.994168][T12839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.996312][T12839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.005150][T12839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.009559][T12839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.011622][T12839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.019478][T12839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.042710][T12839] hsr_slave_0: entered promiscuous mode [ 260.044892][T12839] hsr_slave_1: entered promiscuous mode [ 260.047183][T12839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.049455][T12839] Cannot create hsr debugfs directory [ 260.133970][ T5961] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 260.428060][ T1451] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 260.495949][T12869] wg2: entered promiscuous mode [ 260.498038][T12869] wg2: entered allmulticast mode [ 260.570990][ T1451] usb 5-1: Using ep0 maxpacket: 8 [ 260.576077][ T1451] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 260.578779][ T1451] usb 5-1: config 179 has no interface number 0 [ 260.581205][ T1451] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 260.584621][ T1451] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 260.587876][ T1451] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 260.591917][ T1451] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 260.595283][ T1451] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 260.600052][ T1451] usb 5-1: config 179 interface 65 has no altsetting 0 [ 260.602125][ T1451] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 260.604860][ T1451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.609142][T12858] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 260.612633][T12858] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 260.618923][ T1451] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input41 [ 260.656413][ T5346] input input41: unable to receive magic message: -110 [ 260.660902][ T5346] input input41: unable to receive magic message: -32 [ 260.663841][ T5346] input input41: unable to receive magic message: -32 [ 260.676034][ T5346] input input41: unable to receive magic message: -32 [ 260.690430][ T5960] input input41: unable to receive magic message: -32 [ 260.693669][ T5346] input input41: unable to receive magic message: -32 [ 260.698423][ T5346] input input41: unable to receive magic message: -32 [ 260.702236][ T5346] input input41: unable to receive magic message: -32 [ 260.817093][T12858] input input41: unable to receive magic message: -32 [ 260.823637][ T6063] usb 5-1: USB disconnect, device number 37 [ 260.823643][ C2] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 260.828015][ T6063] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 261.222153][ T7439] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.229869][T12879] input: syz0 as /devices/virtual/input/input42 [ 261.235143][T12879] dlm: no locking on control device [ 261.329746][ T7439] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.383431][T12885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1542'. [ 261.402097][T12877] syz.2.1539 (12877): drop_caches: 1 [ 261.414338][ T7439] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.597900][ T7439] bridge_slave_1: left allmulticast mode [ 261.600774][ T7439] bridge_slave_1: left promiscuous mode [ 261.652675][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.654348][T12890] gfs2: not a GFS2 filesystem [ 261.676599][ T5950] Bluetooth: hci0: command tx timeout [ 261.821542][ T7439] bridge_slave_0: left allmulticast mode [ 261.823350][ T7439] bridge_slave_0: left promiscuous mode [ 261.825141][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.869958][T12895] SET target dimension over the limit! [ 262.402719][ T7439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.412347][ T7439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.418263][ T7439] bond0 (unregistering): Released all slaves [ 262.436615][T12916] No control pipe specified [ 262.446645][T12921] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 262.525399][T12917] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1550'. [ 262.997570][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 262.997634][ T39] audit: type=1800 audit(2000000007.999:1557): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1547" name="cpuset.effective_cpus" dev="9p" ino=37099007 res=0 errno=0 [ 263.104265][T11933] syz_tun (unregistering): left promiscuous mode [ 263.384896][ T7468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.389002][ T7468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.480944][T12931] syz.2.1553 (12931): drop_caches: 1 [ 263.628265][ T5950] Bluetooth: hci0: command tx timeout [ 263.838297][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1556'. [ 263.863719][ T7439] hsr_slave_0: left promiscuous mode [ 263.866148][ T7439] hsr_slave_1: left promiscuous mode [ 263.870597][ T7439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.873731][ T7439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.879093][ T7439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.881934][ T7439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.919175][ T7439] veth1_macvtap: left promiscuous mode [ 263.921800][ T7439] veth0_macvtap: left promiscuous mode [ 263.925021][ T7439] veth1_vlan: left promiscuous mode [ 263.927101][ T7439] veth0_vlan: left promiscuous mode [ 263.934621][ T39] audit: type=1326 audit(2000000008.986:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.2.1557" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x0 [ 264.867994][ T7439] team0 (unregistering): Port device team_slave_1 removed [ 264.973521][ T7439] team0 (unregistering): Port device team_slave_0 removed [ 265.378785][T12978] syz.4.1564 (12978): drop_caches: 1 [ 265.584271][T12984] siw: device registration error -23 [ 265.610523][ T5950] Bluetooth: hci0: command tx timeout [ 265.719544][T12839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.724484][T12839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 265.731261][T12839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 265.735372][T12839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 265.826977][T12839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.842031][T12839] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.862273][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.864478][ T7468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.878476][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.880753][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.012294][T12839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.066515][ T1146] Bluetooth: hci3: Frame reassembly failed (-84) [ 266.067709][T13004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.071701][ T1146] Bluetooth: hci3: Frame reassembly failed (-84) [ 266.072052][T13004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.118587][T12839] veth0_vlan: entered promiscuous mode [ 266.130778][T12839] veth1_vlan: entered promiscuous mode [ 266.142592][T12839] veth0_macvtap: entered promiscuous mode [ 266.146932][T12839] veth1_macvtap: entered promiscuous mode [ 266.156246][T12839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.159442][T12839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.163245][T12839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.166429][T12839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.170042][T12839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.175069][T12839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.178303][T12839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.181444][T12839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.185681][T12839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.190083][T12839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.196653][T12839] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.199837][T12839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.203787][T12839] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.206695][T12839] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.251830][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.254595][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.273251][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.275876][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.320879][T13022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1527'. [ 266.380531][T13020] syz.0.1573 (13020): drop_caches: 1 [ 266.562382][T13033] kAFS: unable to lookup cell ' /dev/ttyHS 506 0-255 serial [ 266.562382][T13033] ttyprintk /dev/ttyprintk 5 3 console [ 266.562382][T13033] ttynull /dev/ttynull 235 0 console [ 266.562382][T13033] nozomi_tty /dev/noz 236 0-255 serial [ 266.562382][T13033] serial /dev/ttyS 4 64-95 serial [ 266.562382][T13033] gsmtty /dev/gsmtty 237 0-255 serial [ 266.562382][T13033] pty_slave /dev/pts 136 0-1048575 pty' [ 266.574729][T13025] vivid-007: disconnect [ 266.610046][T13035] fuse: Unknown parameter '000000000000000000000x0000000000000003' [ 266.614910][T13036] mkiss: ax0: crc mode is auto. [ 267.167781][T13024] vivid-007: reconnect [ 267.591353][ T5954] Bluetooth: hci0: command tx timeout [ 267.972166][ T5954] Bluetooth: hci3: command 0xfc11 tx timeout [ 267.973159][ T5950] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 268.262853][T13059] syz.4.1584 (13059): drop_caches: 1 [ 268.591161][ T5950] Bluetooth: hci5: command 0x1003 tx timeout [ 268.593548][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 269.226658][T13098] siw: device registration error -23 [ 269.358795][T13097] syz.4.1594 (13097): drop_caches: 1 [ 269.853037][T13112] openvswitch: netlink: Key type 30 is not supported [ 269.955107][T13117] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1599'. [ 269.960072][T13117] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1599'. [ 270.034025][T13119] tipc: Started in network mode [ 270.035644][T13119] tipc: Node identity ac14140f, cluster identity 4711 [ 270.038260][T13119] tipc: New replicast peer: 255.255.255.255 [ 270.041517][T13119] tipc: Enabled bearer , priority 10 [ 270.483286][T13134] syz.5.1604 (13134): drop_caches: 1 [ 270.934456][ T1451] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 271.096350][ T1451] usb 10-1: Using ep0 maxpacket: 16 [ 271.100329][ T1451] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.103556][ T1451] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 271.108604][ T6769] tipc: Node number set to 2886997007 [ 271.109052][ T1451] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.114284][ T1451] usb 10-1: config 0 descriptor?? [ 271.117949][ T1451] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input43 [ 271.382527][ T5346] bcm5974 10-1:0.0: could not read from device [ 271.386728][ T5346] bcm5974 10-1:0.0: could not read from device [ 271.389825][ T1451] usb 10-1: USB disconnect, device number 2 [ 271.413594][ T5346] bcm5974 10-1:0.0: could not read from device [ 271.864620][T13189] syz.4.1615 (13189): /proc/13188/oom_adj is deprecated, please use /proc/13188/oom_score_adj instead. [ 271.882774][T13189] hfs: can't find a HFS filesystem on dev sr0 [ 272.013948][T13197] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 272.182182][ T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 272.392231][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 272.395766][ T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.399130][ T8] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 272.404917][ T8] usb 10-1: New USB device found, idVendor=0421, idProduct=0294, bcdDevice=c5.93 [ 272.407715][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.410505][ T8] usb 10-1: Product: syz [ 272.411938][ T8] usb 10-1: Manufacturer: syz [ 272.413377][ T8] usb 10-1: SerialNumber: syz [ 272.418038][ T8] usb 10-1: config 0 descriptor?? [ 272.494190][T13206] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 272.496207][T13206] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.498971][T13206] vhci_hcd vhci_hcd.0: Device attached [ 272.617940][T13194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.621592][T13194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.632176][ T5961] usb 10-1: USB disconnect, device number 3 [ 272.667996][ T8] vhci_hcd: vhci_device speed not set [ 272.724100][T13210] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 272.726506][T13210] UDF-fs: Scanning with blocksize 2048 failed [ 272.729120][T13210] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 272.731417][T13210] UDF-fs: Scanning with blocksize 4096 failed [ 272.736056][ T8] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 273.214506][T13224] 9pnet_virtio: no channels available for device syz [ 273.890293][T13207] vhci_hcd: connection reset by peer [ 273.892053][ T7439] vhci_hcd: stop threads [ 273.893372][ T7439] vhci_hcd: release socket [ 273.894909][ T7439] vhci_hcd: disconnect device [ 274.221821][ T39] audit: type=1326 audit(2000000019.788:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 274.228516][ T39] audit: type=1326 audit(2000000019.788:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 274.235556][ T39] audit: type=1326 audit(2000000019.799:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 274.242485][ T39] audit: type=1326 audit(2000000019.799:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 274.249017][ T39] audit: type=1326 audit(2000000019.799:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 274.256218][ T39] audit: type=1326 audit(2000000019.799:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 274.263110][ T39] audit: type=1326 audit(2000000019.799:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 274.269819][ T39] audit: type=1326 audit(2000000019.799:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 274.276258][ T39] audit: type=1326 audit(2000000019.830:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 274.283278][ T39] audit: type=1326 audit(2000000019.830:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 274.608378][T13243] siw: device registration error -23 [ 274.986476][T13256] fuse: Unknown parameter 'dV0x0000000000000007' [ 275.002680][T13256] netfs: Couldn't get user pages (rc=-14) [ 275.882766][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'. [ 275.891944][T13278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1637'. [ 275.894640][T13278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1637'. [ 276.063534][ T5953] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 276.258571][T13296] siw: device registration error -23 [ 276.840383][ T5961] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 276.870817][T13304] afs: Unknown parameter '™‘ì¬' [ 276.942565][T13309] netlink: 'syz.2.1648': attribute type 10 has an invalid length. [ 276.942603][T13308] netlink: 'syz.2.1648': attribute type 10 has an invalid length. [ 276.985947][ T5961] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.989230][ T5961] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.992090][ T5961] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.002618][T13313] tipc: Can't bind to reserved service type 0 [ 277.003893][ T5961] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.007037][ T5961] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.013491][ T5961] usb 9-1: config 0 descriptor?? [ 277.036108][T13313] lo speed is unknown, defaulting to 1000 [ 277.179300][T13313] lo speed is unknown, defaulting to 1000 [ 277.399533][ T5961] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 277.405994][ T5961] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 277.649857][ T8] vhci_hcd: vhci_device speed not set [ 277.708086][T13328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.711793][T13328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.737856][ T6063] usb 9-1: USB disconnect, device number 4 [ 277.797502][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1654'. [ 277.857765][T13333] syzkaller0: entered promiscuous mode [ 277.858615][T13335] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 277.862272][T13333] syzkaller0: entered allmulticast mode [ 278.004150][T13339] ubi0: attaching mtd0 [ 278.023949][T13339] ubi0: scanning is finished [ 278.025638][T13339] ubi0: empty MTD device detected [ 278.205697][T13339] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 278.208125][T13339] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 278.210204][T13339] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 278.212341][T13339] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 278.214502][T13339] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 278.221212][T13339] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 278.223710][T13339] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2545061787 [ 278.226554][T13339] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 278.229676][T13346] ubi0: background thread "ubi_bgt0d" started, PID 13346 [ 278.714991][T13361] openvswitch: netlink: Unknown nsh attribute 0 [ 278.717666][T13361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.728794][T13361] netlink: 'syz.0.1662': attribute type 2 has an invalid length. [ 279.269664][ T62] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 279.432645][ T62] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.436044][ T62] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.438994][ T62] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.442051][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.445871][T13379] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.449611][ T62] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.470099][T13377] mkiss: ax0: crc mode is auto. [ 279.643572][ T6959] usb 5-1: USB disconnect, device number 38 [ 279.736175][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1672'. [ 279.777462][T13395] siw: device registration error -23 [ 279.784145][ T8] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 279.936495][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 279.940071][ T8] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.944001][ T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.953324][ T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.957300][ T8] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.972753][ T8] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 279.976268][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.288872][ T8] usb 9-1: usb_control_msg returned -32 [ 280.290564][ T8] usbtmc 9-1:16.0: can't read capabilities [ 280.511314][T13415] x_tables: duplicate underflow at hook 2 [ 280.524014][ T62] usb 9-1: USB disconnect, device number 5 [ 280.933713][T13440] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.936327][T13440] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.276064][T13446] syz.5.1687 (13446): drop_caches: 1 [ 281.328714][T13449] Process accounting resumed [ 281.802193][T13460] netlink: 'syz.2.1691': attribute type 2 has an invalid length. [ 281.946212][T13449] Process accounting resumed [ 282.943703][T13510] syz.4.1698 (13510): drop_caches: 1 [ 283.164017][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 283.171153][T13544] overlayfs: conflicting options: metacopy=off,verity=on [ 284.260495][T13562] lo speed is unknown, defaulting to 1000 [ 284.332877][T13562] lo speed is unknown, defaulting to 1000 [ 284.555440][T13568] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1711'. [ 284.956433][ T6769] IPVS: starting estimator thread 0... [ 285.108494][T13583] IPVS: using max 35 ests per chain, 84000 per kthread [ 285.917395][T13609] warn_alloc: 1 callbacks suppressed [ 285.917406][T13609] syz.4.1724: vmalloc error: size 1953655158, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 285.923932][T13609] CPU: 3 UID: 0 PID: 13609 Comm: syz.4.1724 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 285.927193][T13609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.930499][T13609] Call Trace: [ 285.931526][T13609] [ 285.932448][T13609] dump_stack_lvl+0x16c/0x1f0 [ 285.933948][T13609] warn_alloc+0x24d/0x3a0 [ 285.935276][T13609] ? __pfx_warn_alloc+0x10/0x10 [ 285.936791][T13609] ? hlock_class+0x4e/0x130 [ 285.938241][T13609] ? __lock_acquire+0xcc5/0x3c40 [ 285.939755][T13609] __vmalloc_node_range_noprof+0x10df/0x1530 [ 285.941763][T13609] ? __pfx___lock_acquire+0x10/0x10 [ 285.943452][T13609] ? find_held_lock+0x2d/0x110 [ 285.944926][T13609] ? ip_set_sockfn_get+0x185/0xc50 [ 285.946519][T13609] ? find_held_lock+0x2d/0x110 [ 285.947981][T13609] ? __pfx_aa_get_newest_label+0x10/0x10 [ 285.949702][T13609] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 285.951602][T13609] ? apparmor_capable+0x114/0x1d0 [ 285.953201][T13609] ? ip_set_sockfn_get+0x185/0xc50 [ 285.954850][T13609] vmalloc_noprof+0x6b/0x90 [ 285.956239][T13609] ? ip_set_sockfn_get+0x185/0xc50 [ 285.957796][T13609] ip_set_sockfn_get+0x185/0xc50 [ 285.959280][T13609] ? __pfx_lock_release+0x10/0x10 [ 285.960797][T13609] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 285.962458][T13609] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 285.964274][T13609] nf_getsockopt+0x79/0xe0 [ 285.965665][T13609] ip_getsockopt+0x18e/0x1e0 [ 285.967125][T13609] ? __pfx_ip_getsockopt+0x10/0x10 [ 285.968676][T13609] udp_getsockopt+0x61/0xb0 [ 285.970076][T13609] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 285.971880][T13609] do_sock_getsockopt+0x3fe/0x870 [ 285.973411][T13609] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 285.975101][T13609] ? lock_acquire+0x2f/0xb0 [ 285.976466][T13609] ? __fget_files+0x40/0x3a0 [ 285.977885][T13609] ? __fget_files+0x206/0x3a0 [ 285.979391][T13609] __sys_getsockopt+0x12f/0x260 [ 285.980895][T13609] __ia32_sys_getsockopt+0xbc/0x160 [ 285.982502][T13609] ? lockdep_hardirqs_on+0x7c/0x110 [ 285.984089][T13609] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 285.986092][T13609] __do_fast_syscall_32+0x73/0x120 [ 285.987653][T13609] do_fast_syscall_32+0x32/0x80 [ 285.989149][T13609] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.991091][T13609] RIP: 0023:0xf7f01579 [ 285.992352][T13609] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 285.998173][T13609] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 286.000656][T13609] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 286.003057][T13609] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000020000000 [ 286.005465][T13609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.007943][T13609] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 286.010316][T13609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.012712][T13609] [ 286.013788][ C3] vkms_vblank_simulate: vblank timer overrun [ 286.021535][T13609] Mem-Info: [ 286.022695][T13609] active_anon:9509 inactive_anon:89 isolated_anon:0 [ 286.022695][T13609] active_file:11359 inactive_file:2033 isolated_file:0 [ 286.022695][T13609] unevictable:1768 dirty:247 writeback:0 [ 286.022695][T13609] slab_reclaimable:6061 slab_unreclaimable:69686 [ 286.022695][T13609] mapped:32717 shmem:5349 pagetables:878 [ 286.022695][T13609] sec_pagetables:315 bounce:0 [ 286.022695][T13609] kernel_misc_reclaimable:0 [ 286.022695][T13609] free:62566 free_pcp:5081 free_cma:0 [ 286.037489][T13609] Node 0 active_anon:7240kB inactive_anon:344kB active_file:604kB inactive_file:4124kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4704kB dirty:4kB writeback:0kB shmem:6460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9784kB pagetables:876kB sec_pagetables:1132kB all_unreclaimable? yes [ 286.070496][T13609] Node 1 active_anon:30948kB inactive_anon:12kB active_file:44832kB inactive_file:4008kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:130248kB dirty:984kB writeback:0kB shmem:14984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4472kB pagetables:2636kB sec_pagetables:128kB all_unreclaimable? no [ 286.076806][T13611] siw: device registration error -23 [ 286.081729][T13609] Node 0 DMA free:2856kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:364kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:432kB local_pcp:148kB free_cma:0kB [ 286.082691][T13609] lowmem_reserve[]: 0 273 0 0 0 [ 286.082714][T13609] Node 0 DMA32 free:19420kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:6916kB inactive_anon:332kB active_file:604kB inactive_file:4124kB unevictable:3536kB writepending:4kB present:1032196kB managed:306308kB mlocked:0kB bounce:0kB free_pcp:940kB local_pcp:376kB free_cma:0kB [ 286.082743][T13609] lowmem_reserve[]: 0 0 0 0 0 [ 286.082765][T13609] Node 1 DMA32 free:226792kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:31048kB inactive_anon:12kB active_file:44832kB inactive_file:4008kB unevictable:3536kB writepending:984kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:19588kB local_pcp:668kB free_cma:0kB [ 286.082795][T13609] lowmem_reserve[]: 0 0 0 0 0 [ 286.082815][T13609] Node 0 DMA: 80*4kB (UE) 41*8kB (UE) 16*16kB (UE) 39*32kB (UE) 9*64kB (UE) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2856kB [ 286.082889][T13609] Node 0 DMA32: 506*4kB (UEH) 163*8kB (UMEH) 42*16kB (UMEH) 36*32kB (MEH) 49*64kB (UMEH) 20*128kB (UME) 7*256kB (UMH) 1*512kB (U) 4*1024kB (UMH) 1*2048kB (M) 0*4096kB = 19296kB [ 286.082980][T13609] Node 1 DMA32: 286*4kB (UM) 204*8kB (UE) 611*16kB (UM) 853*32kB (UME) 399*64kB (UME) 110*128kB (UME) 53*256kB (UM) 51*512kB (UM) 25*1024kB (UM) 10*2048kB (UM) 15*4096kB (UM) = 226664kB [ 286.083077][T13609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.083086][T13609] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 286.083095][T13609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.083104][T13609] Node 1 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 286.083113][T13609] 18806 total pagecache pages [ 286.083117][T13609] 0 pages in swap cache [ 286.083121][T13609] Free swap = 123848kB [ 286.083125][T13609] Total swap = 124996kB [ 286.083129][T13609] 524155 pages RAM [ 286.083133][T13609] 0 pages HighMem/MovableOnly [ 286.083136][T13609] 206675 pages reserved [ 286.083139][T13609] 0 pages cma reserved [ 286.305427][T13631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1725'. [ 286.573600][T13644] syz.0.1731 (13644): drop_caches: 1 [ 286.842531][ T6959] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 286.985211][ T6959] usb 10-1: Using ep0 maxpacket: 8 [ 286.988146][ T6959] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 286.990883][ T6959] usb 10-1: config 179 has no interface number 0 [ 286.993000][ T6959] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 286.997614][ T6959] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 287.001731][ T6959] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 287.009193][ T6959] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 287.016135][ T6959] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 287.022264][ T6959] usb 10-1: config 179 interface 65 has no altsetting 0 [ 287.025342][ T6959] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 287.028177][ T6959] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.032080][T13648] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 287.035860][T13648] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 287.040577][ T6959] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input46 [ 287.085682][ T5346] input input46: unable to receive magic message: -110 [ 287.095267][ T5346] input input46: unable to receive magic message: -32 [ 287.103870][ T5960] input input46: unable to receive magic message: -32 [ 287.116360][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 287.120864][ T5346] input input46: unable to receive magic message: -32 [ 287.124622][ T5346] input input46: unable to receive magic message: -32 [ 287.128240][ T5346] input input46: unable to receive magic message: -32 [ 287.241159][T13648] input input46: unable to receive magic message: -32 [ 287.254203][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 287.254206][ T5961] usb 10-1: USB disconnect, device number 4 [ 287.259462][ T5961] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 287.349632][T13679] input: syz1 as /devices/virtual/input/input47 [ 287.471202][T13684] syz.4.1743 (13684): drop_caches: 1 [ 287.670745][T13693] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 287.682500][T13694] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 287.829219][T13709] mkiss: ax0: crc mode is auto. [ 287.917863][T13709] can0: slcan on ttyS3. [ 288.033815][T13720] syz.4.1752 (13720): drop_caches: 1 [ 288.894515][T13741] netlink: 'syz.5.1757': attribute type 27 has an invalid length. [ 288.976709][T13741] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.979863][T13741] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.059751][T13741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.078049][T13741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.179537][T13741] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.183112][T13741] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.189780][T13741] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.192803][T13741] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.235983][T13743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.239642][T13743] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.245133][T13743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.258042][T13756] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 289.339105][T13759] syz.4.1763 (13759): drop_caches: 1 [ 289.418401][ T5953] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 289.465506][T13779] FAULT_INJECTION: forcing a failure. [ 289.465506][T13779] name failslab, interval 1, probability 0, space 0, times 0 [ 289.469609][T13779] CPU: 2 UID: 0 PID: 13779 Comm: syz.4.1765 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 289.473164][T13779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.476548][T13779] Call Trace: [ 289.477661][T13779] [ 289.478609][T13779] dump_stack_lvl+0x16c/0x1f0 [ 289.480098][T13779] should_fail_ex+0x497/0x5b0 [ 289.481603][T13779] ? fs_reclaim_acquire+0xae/0x150 [ 289.483207][T13779] should_failslab+0xc2/0x120 [ 289.484750][T13779] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 289.486654][T13779] ? __alloc_skb+0x2b3/0x380 [ 289.488115][T13779] __alloc_skb+0x2b3/0x380 [ 289.489580][T13779] ? __pfx___alloc_skb+0x10/0x10 [ 289.491129][T13779] ? lock_acquire+0x2f/0xb0 [ 289.493301][T13779] netlink_alloc_large_skb+0x69/0x130 [ 289.495014][T13779] netlink_sendmsg+0x689/0xd70 [ 289.496526][T13779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.498264][T13779] ____sys_sendmsg+0x9ae/0xb40 [ 289.499838][T13779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.501717][T13779] ? get_compat_msghdr+0x11b/0x170 [ 289.503581][T13779] ___sys_sendmsg+0x135/0x1e0 [ 289.505081][T13779] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.506751][T13779] ? __pfx_lock_release+0x10/0x10 [ 289.508362][T13779] ? trace_lock_acquire+0x14e/0x1f0 [ 289.510271][T13779] ? __fget_files+0x206/0x3a0 [ 289.512295][T13779] __sys_sendmsg+0x16e/0x220 [ 289.513914][T13779] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.515780][T13779] __do_fast_syscall_32+0x73/0x120 [ 289.517882][T13779] do_fast_syscall_32+0x32/0x80 [ 289.519820][T13779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.522345][T13779] RIP: 0023:0xf7f01579 [ 289.524040][T13779] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 289.530180][T13779] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 289.532710][T13779] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 289.535228][T13779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.537647][T13779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.540055][T13779] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 289.542472][T13779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.544885][T13779] [ 289.876700][T13801] syz.5.1772 (13801): drop_caches: 1 [ 290.073320][T13809] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1775'. [ 290.145958][T13807] lo speed is unknown, defaulting to 1000 [ 290.153901][ T5953] Bluetooth: hci0: command tx timeout [ 290.336462][T13817] netfs: Couldn't get user pages (rc=-14) [ 290.339748][T13817] netfs: Zero-sized read [R=1499] [ 290.359613][T13807] lo speed is unknown, defaulting to 1000 [ 290.634763][T13843] x_tables: duplicate underflow at hook 1 [ 290.692784][T13845] syz.0.1781 (13845): drop_caches: 1 [ 290.750926][T13856] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.753513][T13856] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.756295][T13856] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.759183][T13856] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.766105][T13856] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.768219][T13856] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.770731][T13856] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.773141][T13856] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.801487][T13859] fuse: Unknown parameter 'fd00000000000000000000011' [ 290.804973][T13859] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1785'. [ 290.854652][T13869] tipc: Enabling of bearer rejected, failed to enable media [ 292.046434][T13887] syz.4.1796 (13887): drop_caches: 1 [ 292.379325][T13912] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1803'. [ 292.496844][T13920] overlayfs: failed to resolve './file0/file0': -2 [ 294.324957][T13967] syz.4.1817 (13967): drop_caches: 1 [ 294.497453][T13977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1821'. [ 294.814913][T13981] siw: device registration error -23 [ 294.836415][T13986] netlink: 'syz.5.1818': attribute type 2 has an invalid length. [ 294.938885][ T5961] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 295.083207][ T5961] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 295.086167][ T5961] usb 9-1: config 0 has no interface number 0 [ 295.088554][ T5961] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 295.091988][ T5961] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 295.095331][ T5961] usb 9-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 295.097981][ T5961] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.105857][ T5961] usb 9-1: config 0 descriptor?? [ 295.107860][T13983] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 295.111950][ T5961] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.120/input/input48 [ 295.120516][ C2] usbtouchscreen 9-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 295.260417][T14001] net_ratelimit: 1055 callbacks suppressed [ 295.260447][T14001] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 295.315388][T14000] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 295.318215][T14000] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 295.321508][T14000] vhci_hcd vhci_hcd.0: Device attached [ 295.369139][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1824'. [ 295.372544][T14004] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.375097][T14004] bridge0: port 2(bridge_slave_1) entered listening state [ 295.378799][T14004] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.381502][T14004] bridge0: port 1(bridge_slave_0) entered listening state [ 295.417074][ T5961] usb 9-1: USB disconnect, device number 6 [ 295.491943][ T1451] vhci_hcd: vhci_device speed not set [ 295.549228][ T1451] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 296.289527][T14018] siw: device registration error -23 [ 296.793301][T14028] siw: device registration error -23 [ 297.205301][T14032] siw: device registration error -23 [ 298.027974][T14002] vhci_hcd: connection reset by peer [ 298.030146][ T1146] vhci_hcd: stop threads [ 298.031512][ T1146] vhci_hcd: release socket [ 298.035904][ T1146] vhci_hcd: disconnect device [ 298.144817][T14057] netlink: 'syz.4.1835': attribute type 2 has an invalid length. [ 298.169423][T14055] siw: device registration error -23 [ 298.998266][T14071] lo speed is unknown, defaulting to 1000 [ 299.030126][T14068] syz.5.1841 (14068): drop_caches: 1 [ 299.386913][T14071] lo speed is unknown, defaulting to 1000 [ 299.393314][T14074] siw: device registration error -23 [ 299.928786][T14086] 8021q: adding VLAN 0 to HW filter on device bond3 [ 299.932330][T14086] bond3: entered promiscuous mode [ 299.934516][T14086] bond0: (slave bond3): Enslaving as an active interface with an up link [ 300.239724][T14114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.440473][T14121] siw: device registration error -23 [ 300.464124][ T1451] vhci_hcd: vhci_device speed not set [ 300.538171][T14126] siw: device registration error -23 [ 301.203596][T14141] syz.0.1856 (14141): drop_caches: 1 [ 301.318975][T14149] syz.0.1867 (14149): drop_caches: 1 [ 301.404050][T14152] overlay: Unknown parameter 'obj_type' [ 301.409769][T14152] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 301.978056][T14177] syz.4.1869 (14177): drop_caches: 1 [ 303.674143][T14250] lo speed is unknown, defaulting to 1000 [ 303.708506][T14250] lo speed is unknown, defaulting to 1000 [ 303.930941][T14264] netlink: 'syz.5.1898': attribute type 10 has an invalid length. [ 303.935504][T14264] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 306.139352][T14306] syz.2.1909 (14306): drop_caches: 1 [ 306.879154][T14315] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1911'. [ 306.882864][T14315] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1911'. [ 307.002554][T14334] siw: device registration error -23 [ 307.990034][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 307.996604][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 309.007503][T14349] syz.0.1920 (14349): drop_caches: 1 [ 309.047066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.268152][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 310.272269][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 310.333508][T14369] overlay: Unknown parameter '/' [ 311.600505][T14381] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1930'. [ 311.607963][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'. [ 312.098862][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.101553][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.017469][T14399] lo speed is unknown, defaulting to 1000 [ 313.071936][T14399] lo speed is unknown, defaulting to 1000 [ 314.387789][T14420] binder: 14406:14420 ioctl c400941b 20000a00 returned -22 [ 315.862157][T14428] syz.2.1943 (14428): drop_caches: 1 [ 319.609576][T14465] syz.2.1953 (14465): drop_caches: 1 [ 324.897494][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.900573][ C0] bridge0: topology change detected, propagating [ 324.903597][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.906658][ C0] bridge0: topology change detected, propagating [ 324.944573][T14500] netlink: 'syz.5.1961': attribute type 10 has an invalid length. [ 324.948174][T14500] team0: Cannot enslave team device to itself [ 325.034032][T14510] syz.2.1965 (14510): drop_caches: 1 [ 325.213979][T14507] ================================================================== [ 325.216513][T14507] BUG: KASAN: slab-use-after-free in isolate_migratepages_block+0x3ea4/0x5680 [ 325.219238][T14507] Read of size 8 at addr ffff888022e81860 by task syz.5.1964/14507 [ 325.223106][T14507] [ 325.224394][T14507] CPU: 1 UID: 0 PID: 14507 Comm: syz.5.1964 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 325.227791][T14507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 325.231002][T14507] Call Trace: [ 325.232025][T14507] [ 325.232934][T14507] dump_stack_lvl+0x116/0x1f0 [ 325.234360][T14507] print_report+0xc3/0x620 [ 325.235722][T14507] ? __virt_addr_valid+0x5e/0x590 [ 325.237283][T14507] ? __phys_addr+0xc6/0x150 [ 325.238677][T14507] kasan_report+0xd9/0x110 [ 325.240037][T14507] ? isolate_migratepages_block+0x3ea4/0x5680 [ 325.241874][T14507] ? isolate_migratepages_block+0x3ea4/0x5680 [ 325.243714][T14507] kasan_check_range+0xef/0x1a0 [ 325.245193][T14507] isolate_migratepages_block+0x3ea4/0x5680 [ 325.246974][T14507] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 325.248845][T14507] ? __pfx___might_resched+0x10/0x10 [ 325.250442][T14507] ? putback_movable_pages+0x2a0/0x700 [ 325.252051][T14507] compact_zone+0x1a5c/0x4280 [ 325.253484][T14507] ? mark_lock+0xb5/0xc60 [ 325.254797][T14507] ? __pfx___lock_acquire+0x10/0x10 [ 325.256358][T14507] ? __pfx_compact_zone+0x10/0x10 [ 325.257888][T14507] compact_node+0x1a2/0x2d0 [ 325.259257][T14507] ? __pfx_compact_node+0x10/0x10 [ 325.260775][T14507] ? __pfx___flush_work+0x10/0x10 [ 325.262304][T14507] ? __lru_add_drain_all+0xe7/0x6f0 [ 325.263898][T14507] sysctl_compaction_handler+0x145/0x220 [ 325.265606][T14507] proc_sys_call_handler+0x403/0x5d0 [ 325.267192][T14507] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 325.268952][T14507] ? splice_from_pipe_next+0x1f8/0x5d0 [ 325.270598][T14507] iter_file_splice_write+0x90f/0x10b0 [ 325.272245][T14507] ? __pfx_iter_file_splice_write+0x10/0x10 [ 325.274072][T14507] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 325.275801][T14507] ? splice_direct_to_actor+0x346/0xa40 [ 325.277468][T14507] ? __pfx_iter_file_splice_write+0x10/0x10 [ 325.279201][T14507] direct_splice_actor+0x18f/0x6c0 [ 325.280789][T14507] splice_direct_to_actor+0x346/0xa40 [ 325.282732][T14507] ? __pfx_direct_splice_actor+0x10/0x10 [ 325.284564][T14507] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 325.286365][T14507] ? __fget_files+0x1fc/0x3a0 [ 325.287795][T14507] do_splice_direct+0x178/0x250 [ 325.289287][T14507] ? __pfx_do_splice_direct+0x10/0x10 [ 325.290925][T14507] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 325.292717][T14507] do_sendfile+0xaed/0xe30 [ 325.294076][T14507] ? __pfx_do_sendfile+0x10/0x10 [ 325.295750][T14507] ? lock_acquire+0x2f/0xb0 [ 325.297157][T14507] ? __might_fault+0xe3/0x190 [ 325.298657][T14507] __ia32_compat_sys_sendfile+0x163/0x230 [ 325.300362][T14507] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 325.302245][T14507] __do_fast_syscall_32+0x73/0x120 [ 325.303783][T14507] do_fast_syscall_32+0x32/0x80 [ 325.305268][T14507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.307175][T14507] RIP: 0023:0xf715e579 [ 325.308405][T14507] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 325.314237][T14507] RSP: 002b:00000000f515055c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 325.316733][T14507] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000003 [ 325.319118][T14507] RDX: 00000000200000c0 RSI: 0000000000000005 RDI: 0000000000000000 [ 325.321519][T14507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.323889][T14507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.326276][T14507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.328649][T14507] [ 325.329614][T14507] [ 325.330325][T14507] Allocated by task 6448: [ 325.331627][T14507] kasan_save_stack+0x33/0x60 [ 325.333049][T14507] kasan_save_track+0x14/0x30 [ 325.334474][T14507] __kasan_slab_alloc+0x89/0x90 [ 325.335937][T14507] kmem_cache_alloc_lru_noprof+0x1c8/0x3b0 [ 325.337712][T14507] shmem_alloc_inode+0x25/0x50 [ 325.339162][T14507] alloc_inode+0x5d/0x230 [ 325.340464][T14507] new_inode+0x22/0x210 [ 325.341757][T14507] shmem_get_inode+0x194/0xf00 [ 325.343204][T14507] shmem_mknod+0x1a8/0x450 [ 325.344551][T14507] lookup_open.isra.0+0x1174/0x14c0 [ 325.346111][T14507] path_openat+0x904/0x2d60 [ 325.347490][T14507] do_filp_open+0x20c/0x470 [ 325.348881][T14507] do_sys_openat2+0x17a/0x1e0 [ 325.350302][T14507] __x64_sys_openat+0x175/0x210 [ 325.351787][T14507] do_syscall_64+0xcd/0x250 [ 325.353157][T14507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.354923][T14507] [ 325.355652][T14507] Freed by task 0: [ 325.356797][T14507] kasan_save_stack+0x33/0x60 [ 325.358227][T14507] kasan_save_track+0x14/0x30 [ 325.359653][T14507] kasan_save_free_info+0x3b/0x60 [ 325.361182][T14507] __kasan_slab_free+0x51/0x70 [ 325.362624][T14507] kmem_cache_free+0x152/0x4c0 [ 325.364065][T14507] i_callback+0x43/0x70 [ 325.365338][T14507] rcu_core+0x79d/0x14d0 [ 325.366655][T14507] handle_softirqs+0x213/0x8f0 [ 325.368117][T14507] __irq_exit_rcu+0x109/0x170 [ 325.369567][T14507] irq_exit_rcu+0x9/0x30 [ 325.370849][T14507] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 325.372543][T14507] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.374357][T14507] [ 325.375065][T14507] Last potentially related work creation: [ 325.376740][T14507] kasan_save_stack+0x33/0x60 [ 325.378172][T14507] __kasan_record_aux_stack+0xba/0xd0 [ 325.379769][T14507] __call_rcu_common.constprop.0+0x99/0x7a0 [ 325.381515][T14507] destroy_inode+0x12c/0x1b0 [ 325.382905][T14507] evict+0x5ed/0x960 [ 325.384086][T14507] iput+0x52a/0x890 [ 325.385260][T14507] dentry_unlink_inode+0x29c/0x480 [ 325.386810][T14507] __dentry_kill+0x1d0/0x600 [ 325.388198][T14507] dput.part.0+0x4b1/0x9b0 [ 325.389570][T14507] dput+0x1f/0x30 [ 325.390676][T14507] do_renameat2+0xc6f/0xdd0 [ 325.392024][T14507] __x64_sys_rename+0x7d/0xa0 [ 325.393446][T14507] do_syscall_64+0xcd/0x250 [ 325.394843][T14507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.396654][T14507] [ 325.397401][T14507] The buggy address belongs to the object at ffff888022e81398 [ 325.397401][T14507] which belongs to the cache shmem_inode_cache of size 1544 [ 325.401632][T14507] The buggy address is located 1224 bytes inside of [ 325.401632][T14507] freed 1544-byte region [ffff888022e81398, ffff888022e819a0) [ 325.405619][T14507] [ 325.406339][T14507] The buggy address belongs to the physical page: [ 325.408242][T14507] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888022e86f08 pfn:0x22e80 [ 325.411247][T14507] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 325.413694][T14507] memcg:ffff8880222c8101 [ 325.414907][T14507] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 325.417269][T14507] page_type: f5(slab) [ 325.418489][T14507] raw: 00fff00000000040 ffff88801beabcc0 ffffea0001614600 dead000000000003 [ 325.421050][T14507] raw: ffff888022e86f08 000000008013000a 00000001f5000000 ffff8880222c8101 [ 325.423612][T14507] head: 00fff00000000040 ffff88801beabcc0 ffffea0001614600 dead000000000003 [ 325.426164][T14507] head: ffff888022e86f08 000000008013000a 00000001f5000000 ffff8880222c8101 [ 325.428627][T14507] head: 00fff00000000003 ffffea00008ba001 ffffffffffffffff 0000000000000000 [ 325.431229][T14507] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 325.433817][T14507] page dumped because: kasan: bad access detected [ 325.435745][T14507] page_owner tracks the page as allocated [ 325.437472][T14507] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 37, tgid 37 (kdevtmpfs), ts 5594242827, free_ts 0 [ 325.443169][T14507] post_alloc_hook+0x2d1/0x350 [ 325.444556][T14507] get_page_from_freelist+0xfce/0x2f80 [ 325.446145][T14507] __alloc_pages_noprof+0x223/0x25b0 [ 325.447678][T14507] alloc_pages_mpol_noprof+0x2c9/0x610 [ 325.449326][T14507] new_slab+0x2c9/0x410 [ 325.450508][T14507] ___slab_alloc+0xce2/0x1650 [ 325.451936][T14507] __slab_alloc.constprop.0+0x56/0xb0 [ 325.453551][T14507] kmem_cache_alloc_lru_noprof+0xf0/0x3b0 [ 325.455231][T14507] shmem_alloc_inode+0x25/0x50 [ 325.456630][T14507] alloc_inode+0x5d/0x230 [ 325.457920][T14507] new_inode+0x22/0x210 [ 325.459156][T14507] shmem_get_inode+0x194/0xf00 [ 325.460565][T14507] shmem_mknod+0x1a8/0x450 [ 325.461918][T14507] vfs_mknod+0x5d7/0x8e0 [ 325.463190][T14507] devtmpfs_work_loop+0x1a8/0x7d0 [ 325.464703][T14507] devtmpfsd+0x4c/0x50 [ 325.465949][T14507] page_owner free stack trace missing [ 325.467530][T14507] [ 325.468264][T14507] Memory state around the buggy address: [ 325.469942][T14507] ffff888022e81700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.472300][T14507] ffff888022e81780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.474688][T14507] >ffff888022e81800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.477063][T14507] ^ [ 325.479221][T14507] ffff888022e81880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.481616][T14507] ffff888022e81900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.483999][T14507] ================================================================== [ 325.492445][T14507] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 325.495600][T14507] CPU: 0 UID: 0 PID: 14507 Comm: syz.5.1964 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 325.500156][T14507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 325.504747][T14507] Call Trace: [ 325.506219][T14507] [ 325.507510][T14507] dump_stack_lvl+0x3d/0x1f0 [ 325.509553][T14507] panic+0x71d/0x800 [ 325.511271][T14507] ? __pfx_panic+0x10/0x10 [ 325.513242][T14507] ? preempt_schedule_thunk+0x1a/0x30 [ 325.515545][T14507] ? preempt_schedule_common+0x44/0xc0 [ 325.517947][T14507] check_panic_on_warn+0xab/0xb0 [ 325.519903][T14507] end_report+0x117/0x180 [ 325.521603][T14507] kasan_report+0xe9/0x110 [ 325.523347][T14507] ? isolate_migratepages_block+0x3ea4/0x5680 [ 325.525751][T14507] ? isolate_migratepages_block+0x3ea4/0x5680 [ 325.528138][T14507] kasan_check_range+0xef/0x1a0 [ 325.530057][T14507] isolate_migratepages_block+0x3ea4/0x5680 [ 325.532395][T14507] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 325.534847][T14507] ? __pfx___might_resched+0x10/0x10 [ 325.536962][T14507] ? putback_movable_pages+0x2a0/0x700 [ 325.539091][T14507] compact_zone+0x1a5c/0x4280 [ 325.540945][T14507] ? mark_lock+0xb5/0xc60 [ 325.542646][T14507] ? __pfx___lock_acquire+0x10/0x10 [ 325.544677][T14507] ? __pfx_compact_zone+0x10/0x10 [ 325.546680][T14507] compact_node+0x1a2/0x2d0 [ 325.548463][T14507] ? __pfx_compact_node+0x10/0x10 [ 325.550466][T14507] ? __pfx___flush_work+0x10/0x10 [ 325.552442][T14507] ? __lru_add_drain_all+0xe7/0x6f0 [ 325.554504][T14507] sysctl_compaction_handler+0x145/0x220 [ 325.556690][T14507] proc_sys_call_handler+0x403/0x5d0 [ 325.558409][T14507] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 325.560332][T14507] ? splice_from_pipe_next+0x1f8/0x5d0 [ 325.562094][T14507] iter_file_splice_write+0x90f/0x10b0 [ 325.563695][T14507] ? __pfx_iter_file_splice_write+0x10/0x10 [ 325.565459][T14507] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 325.567169][T14507] ? splice_direct_to_actor+0x346/0xa40 [ 325.568805][T14507] ? __pfx_iter_file_splice_write+0x10/0x10 [ 325.570618][T14507] direct_splice_actor+0x18f/0x6c0 [ 325.572333][T14507] splice_direct_to_actor+0x346/0xa40 [ 325.574008][T14507] ? __pfx_direct_splice_actor+0x10/0x10 [ 325.575715][T14507] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 325.577698][T14507] ? __fget_files+0x1fc/0x3a0 [ 325.579173][T14507] do_splice_direct+0x178/0x250 [ 325.580656][T14507] ? __pfx_do_splice_direct+0x10/0x10 [ 325.582292][T14507] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 325.584077][T14507] do_sendfile+0xaed/0xe30 [ 325.585446][T14507] ? __pfx_do_sendfile+0x10/0x10 [ 325.586952][T14507] ? lock_acquire+0x2f/0xb0 [ 325.588332][T14507] ? __might_fault+0xe3/0x190 [ 325.589748][T14507] __ia32_compat_sys_sendfile+0x163/0x230 [ 325.591420][T14507] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 325.593267][T14507] __do_fast_syscall_32+0x73/0x120 [ 325.594769][T14507] do_fast_syscall_32+0x32/0x80 [ 325.596272][T14507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.598195][T14507] RIP: 0023:0xf715e579 [ 325.599429][T14507] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 325.605006][T14507] RSP: 002b:00000000f515055c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 325.607495][T14507] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000003 [ 325.609792][T14507] RDX: 00000000200000c0 RSI: 0000000000000005 RDI: 0000000000000000 [ 325.612120][T14507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.614451][T14507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.616753][T14507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.619141][T14507] [ 325.620672][T14507] Kernel Offset: disabled [ 325.622018][T14507] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:28:34 Registers: info registers vcpu 0 CPU#0 RAX=00000000009da915 RBX=0000000000000000 RCX=ffffffff8b1a4819 RDX=0000000000000000 RSI=ffffffff8b4cd300 RDI=ffffffff8bb17100 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901ce550 R15=0000000000000000 RIP=ffffffff8b1a5bff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f510eda4 CR3=0000000079692000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85143435 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc900038a6cd8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000036 R14=ffffffff851433d0 R15=0000000000000000 RIP=ffffffff8514345f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7476994 CR3=0000000079692000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000061009b RBX=0000000000000002 RCX=ffffffff8b1a4819 RDX=0000000000000000 RSI=ffffffff8b4cd300 RDI=ffffffff8bb17100 RBP=ffffed1003a57000 RSP=ffffc9000048fe08 R8 =0000000000000001 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d2b8000 R14=ffffffff901ce550 R15=0000000000000000 RIP=ffffffff8b1a5bff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a97e086000 CR3=000000004bfe4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=da83c118da83c118 da83c118da83c118 da83c118da83c118 da83c118da83c118 da83c118da83c118 da83c118da83c118 da83c118da83c118 da83c118da83c118 ZMM22=89d1732289d17322 89d1732289d17322 89d1732289d17322 89d1732289d17322 89d1732289d17322 89d1732289d17322 89d1732289d17322 89d1732289d17322 ZMM23=aa516d15aa516d15 aa516d15aa516d15 aa516d15aa516d15 aa516d15aa516d15 aa516d15aa516d15 aa516d15aa516d15 aa516d15aa516d15 aa516d15aa516d15 ZMM24=76c24ea676c24ea6 76c24ea676c24ea6 76c24ea676c24ea6 76c24ea676c24ea6 76c24ea676c24ea6 76c24ea676c24ea6 76c24ea676c24ea6 76c24ea676c24ea6 ZMM25=6c55d08a6c55d08a 6c55d08a6c55d08a 6c55d08a6c55d08a 6c55d08a6c55d08a 6c55d08a6c55d08a 6c55d08a6c55d08a 6c55d08a6c55d08a 6c55d08a6c55d08a ZMM26=fe2fbcc8fe2fbcc8 fe2fbcc8fe2fbcc8 fe2fbcc8fe2fbcc8 fe2fbcc8fe2fbcc8 fe2fbcc8fe2fbcc8 fe2fbcc8fe2fbcc8 fe2fbcc8fe2fbcc8 fe2fbcc8fe2fbcc8 ZMM27=36cfd07836cfd078 36cfd07836cfd078 36cfd07836cfd078 36cfd07836cfd078 36cfd07836cfd078 36cfd07836cfd078 36cfd07836cfd078 36cfd07836cfd078 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a70c0000a70c0000 a70c0000a70c0000 a70c0000a70c0000 a70c0000a70c0000 a70c0000a70c0000 a70c0000a70c0000 a70c0000a70c0000 a70c0000a70c0000 info registers vcpu 3 CPU#3 EAX=f6ad20f0 EBX=ffffffff ECX=00000000 EDX=81d2dcdb ESI=81d2dcdb EDI=f6ad1940 EBP=f6ad1ac0 ESP=ffac2300 EIP=f71449d2 EFL=00000296 [--S-AP-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 573c6440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c272373 CR3=0000000028fb0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000