last executing test programs: 1m7.127254086s ago: executing program 0 (id=1): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000005c0)='io_uring_create\x00', 0xffffffffffffffff, 0x0, 0xc}, 0x18) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x7}], 0x1, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd", 0x23}, {&(0x7f0000000200)}], 0x2) getrlimit(0x4, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="aa", 0x1, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c) eventfd(0x0) r3 = fanotify_init(0x8, 0x0) r4 = openat$qrtrtun(0xffffff9c, &(0x7f0000000640), 0x101840) read$qrtrtun(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000808000240000000030c00048005000100690000000c00038005000100430000000900010073797a3000000000d4d9445512d4720900020073797a3200000000140000001100010000000000000000000000000ada5aa99db56e8e1e877fe6f3e631a572d3bc43d013102c8be4701cc54e798d9ef876fd20f496b0e1b807da85aa39dc6e27f669cce00ceebe18c8a01169c6626743c211f9134c8d7d593ad9b29e80d1ce762e24038770b65132f4e2f69a74a307990aad16b388022c747f7ce4a2ba6321852386119992f7293ab663b23a1576473ffb068a5ea76c81d32960c073aba89aaf6703f37104dd68bb9b17e1569a292492c78adeceba7e89105a3290bb3f2c6e794781e118bfeae35ca9a1d18897f116f6eda83505"], 0x94}}, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x21, 0x8000019, r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) 1m5.978682675s ago: executing program 0 (id=11): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x6) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7f36, 0x10100, 0x0, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x0) bind(r2, &(0x7f0000000100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80206433, &(0x7f0000000200)=""/250) r7 = dup(r6) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000f46000/0x4000)=nil) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004a00)={0x2020}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000002140)="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", 0x2000, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000080)) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2a122bb2d0d9ccdf, 0x14, &(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 1m4.959185379s ago: executing program 0 (id=15): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000500000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$hiddev(&(0x7f00000001c0), 0x2, 0x8240) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='nsfs\x00', 0x10050, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x102) 1m4.769144021s ago: executing program 0 (id=16): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000083c0)=ANY=[@ANYBLOB="0100000000000000010000000000000005000000199c134d6769e75fcf815b51"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001140)={"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"}) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001140)={"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"}) 1m4.378850763s ago: executing program 0 (id=18): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) inotify_init() pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x8e84fffef67c07}}, r7}}, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14"]) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00') 49.348162621s ago: executing program 32 (id=18): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) inotify_init() pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x8e84fffef67c07}}, r7}}, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14"]) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00') 10.388164832s ago: executing program 3 (id=352): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_io_uring_setup(0x119, &(0x7f0000000140)={0x0, 0xfad6, 0x200}, &(0x7f0000000240), &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000849000/0x2000)=nil, 0x2000) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xdf, 0x0, 0x8000}) close(0x4) close(0x5) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000280), 0x57, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x401, 0x1, 0x3, 0x1, 0x1}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 10.00836354s ago: executing program 3 (id=353): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x2000c044}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x7, 0x1}, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) keyctl$revoke(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x4f, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001200010200000000cf8b1e405b3a7be97cd2be53000000000000000004de9369b0a706fa1c4e0e893b820901156a3999e7", @ANYRES32=0x0, @ANYBLOB="0000b4e416a7000008000a00", @ANYRES32], 0x28}}, 0x0) socket(0x2a, 0x80000, 0x9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = openat$rtc(0xffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$RTC_IRQP_SET(r5, 0x4004700c, 0xc8b) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2000000, 0x0) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000193, 0x48, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x40001b6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') socket$netlink(0x10, 0x3, 0x13) 9.088498351s ago: executing program 3 (id=358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r4 = syz_open_procfs(0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8001, '\x00', 0x0, r4, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000080)='./file0\x00', r5, 0x4000, r4}, 0x14) (async) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, 0x0, 0x0) shutdown(r6, 0x0) (async, rerun: 32) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async, rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {}, 0xa}}, 0x26) (async, rerun: 64) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x6, 0x40) sendmsg(r7, 0x0, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0x0, 0xfe, 0x0, 0x21df, 0x2, 0x3, 0x1, 0x9, 0x6, 0x1, 0x5, 0x0, 0x7, 0x6, 0x1, 0x0, 0x9, 0x9, '\x00', 0xc, 0x2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 8.968467908s ago: executing program 3 (id=359): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0x0, 0x0, 0x800}, 0xc) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 8.898539704s ago: executing program 3 (id=360): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00'}) io_uring_enter(r0, 0x8aa, 0x0, 0xc, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 8.378730163s ago: executing program 3 (id=361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x802, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x31e}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000200)={0x100, r6}, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x4300, r7}, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) r8 = memfd_secret(0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r8, 0x2e, 0x4608, @void}, 0x10) openat$cgroup_devices(r8, 0x0, 0x2, 0x0) mkdir(0x0, 0x100) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x5ed, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)="3254c18895d89ff071bddb3547c7994fc83a318232bb177350feaf67c508a067119e2142494ff3abec9390732ce33276ecaf5e11b076be598144e81530524fca8260ad60db350d1d33fcb770af98b88d50", 0x51, 0x2101}) io_uring_enter(r2, 0x6e2, 0x0, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000300)={0xfffff7fc}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0xab, 0x4, 0x0, 0x0, 0x40000000}, {0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0xdf, 0x0, 0x2, 0x6}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x105}]}) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r10, 0x0, &(0x7f0000000000), 0x0) 8.375233836s ago: executing program 33 (id=361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x802, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x31e}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000200)={0x100, r6}, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x4300, r7}, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) r8 = memfd_secret(0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r8, 0x2e, 0x4608, @void}, 0x10) openat$cgroup_devices(r8, 0x0, 0x2, 0x0) mkdir(0x0, 0x100) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x5ed, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)="3254c18895d89ff071bddb3547c7994fc83a318232bb177350feaf67c508a067119e2142494ff3abec9390732ce33276ecaf5e11b076be598144e81530524fca8260ad60db350d1d33fcb770af98b88d50", 0x51, 0x2101}) io_uring_enter(r2, 0x6e2, 0x0, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000300)={0xfffff7fc}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0xab, 0x4, 0x0, 0x0, 0x40000000}, {0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0xdf, 0x0, 0x2, 0x6}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x105}]}) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r10, 0x0, &(0x7f0000000000), 0x0) 7.102935235s ago: executing program 1 (id=370): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000b80)="fd", 0x1, 0x48851, &(0x7f0000000c80)={0xa, 0x4e20, 0x5, @private1, 0x8}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x0, 0x6}, 0xc) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x751000, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000180)={r4, 0x2}, &(0x7f0000000240)=0x8) getxattr(0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x25, 0x7, 0x2, 0x16, 0x80, 0x8000, 0x3, 0x0, 0xffffffffffffffff}}) 6.354523119s ago: executing program 5 (id=369): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5110) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x204800, 0x1b6, 0x10}, 0x18) 5.616606437s ago: executing program 1 (id=377): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x101180, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYBLOB="0000000000000000b7"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) tkill(r2, 0x2c) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) (async) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000a0a0101000000eaffffff00020000080c0010400000030800064000000000080007400000003a08000440000000020900020073797a3000000000300011800d00010073796e70726f7879400000001c000280060001400001000005000200ff000000050002000a"], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4) (async) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) (async) socket(0x10, 0x3, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6e, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000480)="1c3513000000", &(0x7f0000000ac0)=""/4111, 0x0, 0x0, 0x0, 0x0}) 5.490762913s ago: executing program 5 (id=369): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5110) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x204800, 0x1b6, 0x10}, 0x18) 4.705029449s ago: executing program 1 (id=379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000100)=0x1) write$dsp(r2, &(0x7f0000000000)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250f00000008003c00a906000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x8, @mcast1, 0x40}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r8, 0x43403d05, &(0x7f0000000740)={0xf}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$TCSETS(r7, 0x89f2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000300)=""/15, 0xf}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000a80)=""/198, 0xc6}, {&(0x7f0000000340)=""/37, 0x25}], 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x49, [0x600], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0xe0) 3.418227569s ago: executing program 5 (id=369): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5110) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x204800, 0x1b6, 0x10}, 0x18) 2.438364442s ago: executing program 4 (id=385): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="115ac84fe221236f72665f7099b5298bcf24179fb268351158cdaafd588beacce1112e57d904f64066cd64834b8db0a8cd68663183d1d2b66c4a6e7ffe2f1659197b0f42617c1deef27e6118a89dd81ad7ce9ae1e2e95d48479cf073f29f22cf1dd8507927bb29033e1a61fa47db38c9530192275521e5e354dff1c20f83820d66", 0x81}, {&(0x7f0000000140)="3ba3f99de1c528d8732d52629f7d1eebe0fb662a70166e56", 0xfffffffffffffe45}, {&(0x7f00000001c0)="861cfc25c0a449fca28335538fbdc42ee4aef55c378264c207756e44bda51d79d8c1f335b3c388bb8512f5cd8093872773b6b5bc358020378e650344a3963f6615cbe331f0b967caa4a1e267408668efc022d14cf6a38099dd8bccb23a61c3482b9e48f1f90bc48286094a768e829f527faeebc00577c9304a3ba596e580720a4c4bf781139999ceb83aa08df9ec8e23ac3e8348b2fa118b031c0b627b0f27d74ae3c29de1f72f294fc96aa706332e676c4bca359a65665f0323afc9d40f2c6fee1f4a33c2929cb1b997e8209f5323ff", 0xd2}, {0x0}, {&(0x7f0000000900)="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", 0xfffffffffffffd4c}, {&(0x7f00000003c0)="bad9b017c0afc0a413d0a81dcb71b76444bfdb0fab4c1bfc02c4b47864b50ef5f3782f9c1e988508c7ecb351d3ce2f5e68b25381f3021aabfa14b338407fb05e60c0c62b633e6e0eec346184aa4034df4c9e5b9aeeb83064f5d888d4dbc47056164f8adbbe31940aff1b888ef3d3e074c295a5007718ddbfea279b8678f94ef72c27f64b", 0x84}, {&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000580)="8ea3613c1371e6dc1ad9667a94d21a0f9c4eda6cf8e9bfa45efb1c91cd67c7147f0b1e13b31e631692ddf048132bba719dce904ef0998416eec314dbfd24c74db1e85496440738bb7f6cd18b2713a4b8ad7bbb376361b6b95f8c28776d01c51cd4d0326a506cc007fe42a119917f09b09ec1ff88ccb0", 0x76}, {&(0x7f0000000740)="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", 0x199}], 0x9, &(0x7f0000000300)=[{0x6c, 0x0, 0x2, "8d265d8322d10e46ab93c38cf3dbe4b2754d6ecd9093fe64e375b7f1ab2524f0760e1029e6dfe867f22ebbae47535781707edb4a9a389730ac7b21326e9cbdd41e3ce8c4fdb62ed1c9a581fbddcfd08b04bebcf141e7fe989e31f81a7b"}, {0x14, 0x88, 0x0, "fc26090c7b"}], 0x80}, 0x90) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@rights={{0x10, 0x1, 0x1, [r4]}}], 0x10, 0x1}, 0x40) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r6, 0x4b46, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63fd64486dd65e0f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb0}}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r7, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.434767743s ago: executing program 2 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x29, 0x0, 0x4081000, 0xfffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7}}, 0x50) 2.434457507s ago: executing program 2 (id=387): setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0xb1, 0x0) setresuid(0x0, 0xee00, 0xee01) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x48, 0x1, [@m_skbedit={0x0, 0xd, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0xfff2, 0xa}}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0x7cbd}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x5}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0x4}]}, {0x0, 0x6, "4faad8eeaf1ce45796f5545a9f45100751df27895094855cd3ebb1a5977e10b95b5103c5a6175ce0f0290b818cba239544b5aad5d7963abeecb1"}, {}, {0x0, 0x8, {0x2, 0x1}}}}]}, {0x0, 0x1, [@m_ctinfo={0x0, 0xd, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x800}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x0, 0x7, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x0, 0x5, 0x1000}]}, {0x0, 0x6, "c533636bb81952482667605959e344"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) fcntl$lock(r2, 0x26, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x1}) ioctl$RTC_WKALM_SET(r1, 0x40187013, &(0x7f0000000080)={0x1, 0x2, {0xfffffffe, 0x10000009, 0x0, 0x0, 0x9, 0xfffffffd, 0x6, 0x7b}}) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x2, &(0x7f0000000140)={0x2, 0x0, 0x1}, 0x2) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x4, 0x82011, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5034d564b"]) 2.358245263s ago: executing program 4 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) (async) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x0, 0x106) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00020000000300", @ANYRES32=r4, @ANYBLOB="22003300b004f9bdaa8e17adbcb339e7"], 0x50}}, 0x4) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00020000000300", @ANYRES32=r4, @ANYBLOB="22003300b004f9bdaa8e17adbcb339e7"], 0x50}}, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000240)=0x3, 0x4) (async) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000240)=0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x4ba12, 0x20f}, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = io_uring_setup(0x3632, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) socket$inet6(0xa, 0x4, 0x30ef) 2.357527669s ago: executing program 2 (id=389): socket$rds(0x15, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) socket$netlink(0x10, 0x3, 0x10) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x40) (async) eventfd2(0x0, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x3, &(0x7f0000000180)) (async) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9, {"a2e339084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34333b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d366d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea76db496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff94ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2375fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495103f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158ee3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc00100000000000000662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000d1b0000000000000000000000000000000000000000000000000000510b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x1000}}, 0x1006) (async, rerun: 32) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$VT_DISALLOCATE(r5, 0x5608) 2.356974685s ago: executing program 5 (id=369): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5110) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x204800, 0x1b6, 0x10}, 0x18) 1.266338854s ago: executing program 4 (id=390): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) fsopen(&(0x7f00000002c0)='msdos\x00', 0x0) 1.265825834s ago: executing program 1 (id=391): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDSETMODE(r2, 0x4b45, 0x4) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 32) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r1, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1.265624266s ago: executing program 2 (id=392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@dellink={0x38, 0x11, 0x101, 0x70bd29, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@dellink={0x38, 0x11, 0x101, 0x70bd29, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x38}}, 0x0) (async) 1.265268695s ago: executing program 4 (id=393): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f00000001c0)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r3 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x200, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000b80)={&(0x7f0000000b40)=[{0x3, 0x0, 0x3d, &(0x7f0000000900)="60e438821e4e492904e89723b4ec1f8644fdffc361793dde77a1645a839334dda1464646051f5ff03f108ea8732d3a33343b0300d584ada221d4456917"}], 0x1}) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rmdir(0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0xec, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {0x0, 0x62c}}}, 0xec}}, 0x0) (async) syz_io_uring_submit(0x0, r2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0xf144440c) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x4000000, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) 1.260295496s ago: executing program 2 (id=394): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000f51f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000730000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000e80)=[{r1}], 0x2000000000000016, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.259036098s ago: executing program 1 (id=395): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xaa2c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsync(0xffffffffffffffff) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0xfffffffa, 0x200, 0x5}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$video(0x0, 0x7, 0x40580) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000008, 0x80010, r2, 0x0) openat$khugepaged_scan(0xffffff9c, 0x0, 0x1, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r5, 0xc0089364, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x2a, 0xb, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x6000, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002c00010000000000000000000401"], 0x114}], 0x1}, 0x2000000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000003c0)='U'}) 1.18558053s ago: executing program 5 (id=369): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5110) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x204800, 0x1b6, 0x10}, 0x18) 9.241519ms ago: executing program 4 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000300)=0x5, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xde12523019129bf7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fcdbdf251500000008000300", @ANYRES32=r10, @ANYBLOB="08002a00e9"], 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x2040094) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00e7bf", @ANYRES16=r9, @ANYBLOB="02002abd7000fbdbdf250d00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000000000e5ffffff00000a44000000160a01020000000000000000010000090c00054000000000000000010900020073797a30000000000900010073797a31000000000c0005400000000000000002140000001100010000000000000000000000000a"], 0x6c}}, 0x0) 6.805503ms ago: executing program 1 (id=397): mount(0x0, 0x0, &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fcntl$addseals(r0, 0x409, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) openat$autofs(0xffffff9c, 0x0, 0x50cc0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_udp(0x2, 0x2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bind$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000100)=""/60, 0x325000, 0x800}, 0x1c) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r5 = socket(0x22, 0x2, 0x4) sendto$netrom(r5, 0x0, 0x0, 0x4000001, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="010000000260618d7d0fb39e9f18700000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 0s ago: executing program 2 (id=398): r0 = creat(&(0x7f0000000380)='./file0\x00', 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414800c"], 0x528}}, 0xc000) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x9) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000300)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4000001}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000100)}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000540)="da68e66475bb4dc91ee5dd64e24ac15e925c79c5a4bb91cc19fcafdd8cc0d8949b63271d674a8d4326a741880e5ab4c1797d18272050043ea59cac3bbc8ee9ebdbbf987be3ffe0d5316eec898b3990fed3c1d3ca602984e28a950f297b75658e3b73bf78b8e35acd3071efed0996c4fa7331784a7d8a54d68f5b77706077dd30088130028b6c5fccbf6d49a35ae07981e9bd071a5daefb45ec74a62236fb2a54f00800e59eecc3f5", 0xa8}, {&(0x7f0000000640)="369958f4f241fbfdcb6c57081a786e6006fe587060874459596bddd2e00d2c69e57b5ec6af1575e7140e4f4157651c25d360eb0fd31a288480c8e26b1671ba38cba2f5b54da9a6b91b53855e9a702509f364996fbe20e8c9579d469d97ba0e757df8436695b29d5129bd716fc042c06dadfea7b400a0cd0e92bd7f6b433e6e6f971fe8f81ae991d40dd29a50177c9ff129cc6ef251948bc85ec468c6028ba12803f81ce23273dbcd1556b0d0f08a15c225c88c8cea51131f", 0xb8}, {&(0x7f0000000700)="9981cd0c96f9fff9057307403c3ef39ea62fc86ea9a668ebd23362b1d4b9025d0a02bd743f696507c5c6f35805f271d40bbb8712c99dd253cec6f99e244c72e9b45a68ddfe92e2ff536dd92fc815e298c07bcf8647209a936ab43d34026694d39396a2d24de905e6b660865f4f959d39f6e3f436d5c6c19c1866ada05ef2631acc978035a076e088cdc8ffaf2cbfd39f2992a77d900bb3ab9aad5e0816f744b41b368983c731", 0xa6}, {&(0x7f00000007c0)="420869ac2ff43839a6cc8276e67288106f055d8a13bc6be266dd8b9356ca1c357f80f9502bc493488d8f19e83c4a19bdf869000000350035b4540dd15083e949f4e846f19f70680870c0f00fd2ef28c5bd9a593f43d1a379", 0x58}], 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="100000002900000034000000010000002c00000029000000040000009303000000000000000100c91020010000000000000000000000000001000100e40100002900000036000000d83900000000000004018107d3e9f151aa3c29749c55d66352a288cd698575f6cc3ef077077a08478d8fe198a781f93c66f1edbe7351b65f8edde6b67e7ff1e8aa22f21943ad61e316bfe2b662db02fd05b5513dda30a63b1e0124b4babca15f5fb80c2657d6710bdcbdd00094caab96948aac5fb4cca8a89ddba85bd3834f4cce94a4e989c589e37fdf8762c3170cc61847d33567f244393846e4ed729862fec34783035ff342d9f04fa8057a180d30aab948c8e48b310067679f0c9ce019939aa6d95e0035e9f2a769dcb19e8fe60e00c27e35ffa11555be785aec82fdb4410502000900565d9644a59db021ed140a0cb3f27732ab3b313dd9985e6bc833c426f36e41d679d99d5ed00a2750c66da819da81657c53a12999c2423452eb9964e1624da3b5a84b312b0f789a4b877106740ebb95cf1dd79b209f6c2e0993f08fbb7081dcfceb67973183a8b427a90918e7a8d4af0eb88dc81bdaac84750218a048012da655bac7960bb939d5c578b6ed991676636c126411f4804ebdcf5ddb10aac26857e2e27166f1d28fab4043053fd6f8615003aa0c7da9fc298e5ca0e5e643e0d6b22e95437c24793f7c10a1f0ffd4c44db836c35137d8d39836ccadc570b604e19535c92429a18f73544134b0d38900010000000000b400000029000000390000001614009300000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000ffffffffffff0000000000000000000000000000000100000000000000000000ffff64010101fe80000000000000000000000000002bfe80000000000000000000000000001300000000000000000000000000000001fc020000000000000000000000000001ff010000000000000000000000000001ac00000029000000370000003a12000000000000050200c0c2040000007f0740000000030e03100000000000000000000600000000000000ff070000000000000900000000000000ffffffffffffffff0000000000800000f2080000000000000740000000010e014f83f5ffffffffffffffc9060000000000000300000000000000050000000000000000080000000000000700000000000000040000000000000001040000000000000000"], 0x380}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0x80, @private2, 0x4}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000b40)="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", 0xfa}, {&(0x7f0000000c40)="40b7dfd179e23dff5ffe39b560d70d6c1b765a692cabbe44060e4a939ffc4f3ff04756780d448236156a5d67", 0x2c}, {&(0x7f00000029c0)="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", 0x1000}, {&(0x7f0000000c80)="1401854234445605d325273cbab79c76899f30a15bf88652d35d91df10fbc7", 0x1f}, {&(0x7f0000000cc0)="2038ef1a70ce7be1b203fc78c32abdf3efde43fd6cd2fdaa9546b1e691", 0x1d}], 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="200000002900000032000000fc020000000000000000000000000001", @ANYRES64=r0, @ANYBLOB="10000000ff0825680800000031640000"], 0x30}}], 0x3, 0x40000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) prctl$PR_SET_THP_DISABLE(0x29, 0x1) listen(0xffffffffffffffff, 0x101) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0xc3, "0f11a77635451a24351c12edd11f286c7768218daea8f525078a8d02f3b58d5d042745c63940a898ecf127380254d4a6808356c6366dd4323a15a145e732a537708bf31b64b8230000006509d099c56a413bb218f70c0000005573e7425b374155f5717faee7e5e3f2f4a74de8c24f84c16e489f5bbb535c532ef8ee4d78b56745588c055f22f08aecc0c95842853ec014fcfad4b8d9252d6764f912bf4bf30669c9673b8e8859de89ffe85ef025d80a3c43cd19111328a95cdc21b9a0fd8ae80a4f0b"}, &(0x7f00000001c0)=0xcb) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r6, 0x6, 0x3d, 0x8, 0x8, 0x800}, &(0x7f0000000280)=0x14) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) read$proc_mixer(0xffffffffffffffff, &(0x7f00000003c0)=""/65, 0x41) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000f00)=""/4095, &(0x7f0000000000)=0xfff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f0000000840)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x2, @empty, 0x2000000}, @in6={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000003c0)={r8, 0x1c, "d24ec8bedb50a214ed375f000000005d78a68a4da375e3119a0000ff"}, &(0x7f0000000480)=0x24) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:32624' (ED25519) to the list of known hosts. [ 41.342904][ T5931] cgroup: Unknown subsys name 'net' [ 41.480268][ T5931] cgroup: Unknown subsys name 'cpuset' [ 41.484196][ T5931] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.253576][ T5931] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.361871][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.366457][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.370352][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.378837][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.382926][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.386028][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.388782][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.391050][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.393598][ T5949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.396820][ T5957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.399519][ T5957] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 45.401845][ T5957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.402532][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.405357][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.408003][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.410667][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.410847][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.413097][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.415627][ T5297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.419259][ T5953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.425101][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.425219][ T5297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.430236][ T5297] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.433724][ T5297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.615110][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 45.649737][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 45.661255][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 45.664512][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 45.728558][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.731701][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.733991][ T5942] bridge_slave_0: entered allmulticast mode [ 45.736267][ T5942] bridge_slave_0: entered promiscuous mode [ 45.797515][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.800179][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.803218][ T5942] bridge_slave_1: entered allmulticast mode [ 45.806469][ T5942] bridge_slave_1: entered promiscuous mode [ 45.829632][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.832512][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.835454][ T5950] bridge_slave_0: entered allmulticast mode [ 45.838832][ T5950] bridge_slave_0: entered promiscuous mode [ 45.843204][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.846075][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.850067][ T5950] bridge_slave_1: entered allmulticast mode [ 45.854933][ T5950] bridge_slave_1: entered promiscuous mode [ 45.938321][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.949374][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.951531][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.953631][ T5944] bridge_slave_0: entered allmulticast mode [ 45.955898][ T5944] bridge_slave_0: entered promiscuous mode [ 45.970042][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.974207][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.993512][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.996368][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.999527][ T5951] bridge_slave_0: entered allmulticast mode [ 46.002640][ T5951] bridge_slave_0: entered promiscuous mode [ 46.006135][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.009072][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.011453][ T5944] bridge_slave_1: entered allmulticast mode [ 46.013662][ T5944] bridge_slave_1: entered promiscuous mode [ 46.017141][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.026972][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.029831][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.032708][ T5951] bridge_slave_1: entered allmulticast mode [ 46.035864][ T5951] bridge_slave_1: entered promiscuous mode [ 46.076625][ T5942] team0: Port device team_slave_0 added [ 46.080705][ T5942] team0: Port device team_slave_1 added [ 46.101998][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.106464][ T5950] team0: Port device team_slave_0 added [ 46.126932][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.130419][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.134321][ T5950] team0: Port device team_slave_1 added [ 46.145044][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.147301][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.155153][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.168890][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.179197][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.181315][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.189431][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.209252][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.211423][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.219567][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.225648][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.228282][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.236223][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.241649][ T5944] team0: Port device team_slave_0 added [ 46.255634][ T5951] team0: Port device team_slave_0 added [ 46.258770][ T5951] team0: Port device team_slave_1 added [ 46.263682][ T5944] team0: Port device team_slave_1 added [ 46.306610][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.308837][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.316440][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.331216][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.333613][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.342986][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.355918][ T5942] hsr_slave_0: entered promiscuous mode [ 46.359661][ T5942] hsr_slave_1: entered promiscuous mode [ 46.362342][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.364561][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.372819][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.379995][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.382494][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.391436][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.407368][ T5950] hsr_slave_0: entered promiscuous mode [ 46.409554][ T5950] hsr_slave_1: entered promiscuous mode [ 46.411699][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.414674][ T5950] Cannot create hsr debugfs directory [ 46.474744][ T5951] hsr_slave_0: entered promiscuous mode [ 46.480621][ T5951] hsr_slave_1: entered promiscuous mode [ 46.483023][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.485728][ T5951] Cannot create hsr debugfs directory [ 46.524893][ T5944] hsr_slave_0: entered promiscuous mode [ 46.527554][ T5944] hsr_slave_1: entered promiscuous mode [ 46.529922][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.532948][ T5944] Cannot create hsr debugfs directory [ 46.734183][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.740098][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.743873][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.751179][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.770162][ T5950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.774754][ T5950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.780084][ T5950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.795811][ T5950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.809719][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.813826][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.822996][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.827558][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.854999][ T5944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.866305][ T5944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.870936][ T5944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.877540][ T5944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.921328][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.951109][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.958909][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.966396][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.976378][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.979419][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.984709][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.987661][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.003033][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.007341][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.014755][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.017553][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.031337][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.034061][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.043848][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.046863][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.054519][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.057605][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.090533][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.107164][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.116387][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.118580][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.135363][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.138388][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.201386][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.213238][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.225937][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.251672][ T5951] veth0_vlan: entered promiscuous mode [ 47.267994][ T5950] veth0_vlan: entered promiscuous mode [ 47.272127][ T5951] veth1_vlan: entered promiscuous mode [ 47.284620][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.288765][ T5942] veth0_vlan: entered promiscuous mode [ 47.294203][ T5950] veth1_vlan: entered promiscuous mode [ 47.300726][ T5942] veth1_vlan: entered promiscuous mode [ 47.320962][ T5951] veth0_macvtap: entered promiscuous mode [ 47.324834][ T5951] veth1_macvtap: entered promiscuous mode [ 47.339646][ T5942] veth0_macvtap: entered promiscuous mode [ 47.348896][ T5944] veth0_vlan: entered promiscuous mode [ 47.353110][ T5942] veth1_macvtap: entered promiscuous mode [ 47.356990][ T5950] veth0_macvtap: entered promiscuous mode [ 47.362975][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.369765][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.373661][ T5950] veth1_macvtap: entered promiscuous mode [ 47.379987][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.383763][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.388290][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.392906][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.396970][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.400692][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.403658][ T5944] veth1_vlan: entered promiscuous mode [ 47.410558][ T5942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.414318][ T5942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.420117][ T5942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.423780][ T5942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.430754][ T5951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.433136][ T5951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.435496][ T5951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.437906][ T5951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.446428][ T5944] veth0_macvtap: entered promiscuous mode [ 47.447417][ T5297] Bluetooth: hci1: command tx timeout [ 47.447869][ T5948] Bluetooth: hci0: command tx timeout [ 47.448659][ T63] Bluetooth: hci2: command tx timeout [ 47.448967][ T5948] Bluetooth: hci3: command tx timeout [ 47.456868][ T5944] veth1_macvtap: entered promiscuous mode [ 47.471749][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.475262][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.479212][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.483297][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.488555][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.495152][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.499884][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.502536][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.505355][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.507984][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.510733][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.513754][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.517067][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.520129][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.523117][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.526284][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.529869][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.535316][ T5944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.538226][ T5944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.540809][ T5944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.543394][ T5944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.551630][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.555815][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.559468][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.562934][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.566137][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.569888][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.573895][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.600031][ T5950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.603605][ T5950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.606582][ T5950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.611137][ T5950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.621139][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.624166][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.640444][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.642789][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.655608][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.658969][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.676076][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.682441][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.685297][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.689982][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.692127][ T5942] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.720376][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.722125][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.722736][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.725431][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.745374][ T216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.749248][ T216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.847795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.906886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.909512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.912073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.914058][ T6016] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 47.914580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.961471][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.018878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.018961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.024590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.085098][ T6018] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 48.121905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.214987][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'. [ 48.223634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.339126][ T6019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.386517][ T6019] option changes via remount are deprecated (pid=6009 comm=syz.3.4) [ 48.482331][ T6028] ======================================================= [ 48.482331][ T6028] WARNING: The mand mount option has been deprecated and [ 48.482331][ T6028] and is ignored by this kernel. Remove the mand [ 48.482331][ T6028] option from the mount to silence this warning. [ 48.482331][ T6028] ======================================================= [ 49.123020][ T6052] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9'. [ 49.217439][ T6043] befs: (nullb0): No write support. Marking filesystem read-only [ 49.221325][ T6043] befs: (nullb0): invalid magic header [ 49.436239][ T6057] veth1_macvtap: left promiscuous mode [ 49.526923][ T63] Bluetooth: hci1: command tx timeout [ 49.529202][ T63] Bluetooth: hci2: command tx timeout [ 49.531454][ T63] Bluetooth: hci0: command tx timeout [ 49.536903][ T63] Bluetooth: hci3: command tx timeout [ 50.073598][ T6060] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 50.141400][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.144245][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.146483][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.148871][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.151080][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.153285][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.155748][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.158185][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.160514][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.162748][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.164964][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.167391][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.169853][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.172095][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.174298][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.176499][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.178836][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.181045][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.183248][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.185454][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.187796][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.190579][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.193112][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.195321][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.197733][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.200132][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.202324][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.204513][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.207140][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.210144][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.213103][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.215985][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.221849][ T5983] hid-generic 0000:0000:0000.0002: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 50.512173][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.718504][ T56] usb 7-1: config 0 has no interfaces? [ 50.720283][ T56] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 50.723089][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.728321][ T56] usb 7-1: config 0 descriptor?? [ 51.156353][ T6112] mmap: syz.1.19 (6112) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.607747][ T63] Bluetooth: hci3: command tx timeout [ 51.609365][ T5297] Bluetooth: hci1: command tx timeout [ 51.610916][ T5953] Bluetooth: hci0: command tx timeout [ 51.617112][ T5953] Bluetooth: hci2: command tx timeout [ 52.655855][ T6131] netlink: 72 bytes leftover after parsing attributes in process `syz.1.24'. [ 52.660040][ T6131] capability: warning: `syz.1.24' uses deprecated v2 capabilities in a way that may be insecure [ 53.312139][ T56] usb 7-1: string descriptor 0 read error: -71 [ 53.323349][ T56] usb 7-1: USB disconnect, device number 2 [ 53.649546][ T6163] netlink: 96 bytes leftover after parsing attributes in process `syz.2.30'. [ 53.696848][ T5953] Bluetooth: hci2: command tx timeout [ 53.699170][ T63] Bluetooth: hci0: command tx timeout [ 53.701394][ T5297] Bluetooth: hci3: command tx timeout [ 53.701450][ T5948] Bluetooth: hci1: command tx timeout [ 54.372815][ T6179] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.379223][ T6179] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 54.550924][ T6178] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 54.857006][ T40] audit: type=1800 audit(1735734128.604:2): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.39" name="/" dev="fuse" ino=1 res=0 errno=0 [ 54.917047][ T6200] tmpfs: Bad value for 'mpol' [ 55.125767][ T6203] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 55.307308][ T6205] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.509192][ T6219] dccp_v6_rcv: dropped packet with invalid checksum [ 57.127249][ T6224] tmpfs: Bad value for 'mpol' [ 57.177079][ T5983] kernel write not supported for file /full (pid: 5983 comm: kworker/3:3) [ 57.520121][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 57.953181][ T6264] netlink: 96 bytes leftover after parsing attributes in process `syz.1.54'. [ 58.105842][ T40] audit: type=1804 audit(1735734131.854:3): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.56" name="/newroot/11/file0/file0" dev="9p" ino=37098946 res=1 errno=0 [ 59.060833][ T6273] process 'syz.1.57' launched './file0' with NULL argv: empty string added [ 59.593762][ T6280] ipt_ECN: cannot use operation on non-tcp rule [ 60.192685][ T6283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.59'. [ 60.243461][ T40] audit: type=1326 audit(1735734133.994:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.3.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 60.252438][ T40] audit: type=1326 audit(1735734133.994:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.3.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 60.261205][ T40] audit: type=1326 audit(1735734133.994:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.3.61" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 60.269586][ T40] audit: type=1326 audit(1735734133.994:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.3.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 60.278502][ T40] audit: type=1326 audit(1735734133.994:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.3.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 60.286502][ T40] audit: type=1326 audit(1735734133.994:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.3.61" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 60.295859][ T40] audit: type=1326 audit(1735734133.994:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.3.61" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 60.304192][ T40] audit: type=1326 audit(1735734133.994:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.3.61" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 60.312569][ T40] audit: type=1326 audit(1735734134.004:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.3.61" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 60.320650][ T40] audit: type=1326 audit(1735734134.004:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.3.61" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 60.486821][ T2291] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.646836][ T2291] usb 8-1: Using ep0 maxpacket: 32 [ 60.652320][ T2291] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 60.655361][ T2291] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 60.658439][ T2291] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 60.661187][ T2291] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.664068][ T2291] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 60.667948][ T2291] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 60.673278][ T2291] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 60.676936][ T2291] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.688072][ T2291] usb 8-1: config 0 descriptor?? [ 60.900464][ T2291] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 61.164004][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.170227][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 61.174345][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.215783][ T6299] bridge_slave_0 (unregistering): left allmulticast mode [ 61.220242][ T6299] bridge_slave_0 (unregistering): left promiscuous mode [ 61.223218][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.344829][ T6303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.64'. [ 61.398821][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.402784][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.125168][ T6313] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 62.127760][ T6313] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.131426][ T6313] vhci_hcd vhci_hcd.0: Device attached [ 62.328478][ T6004] vhci_hcd: vhci_device speed not set [ 62.387215][ T6004] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 62.757407][ T6318] Zero length message leads to an empty skb [ 62.885066][ T6315] vhci_hcd: connection reset by peer [ 62.889001][ T1233] vhci_hcd: stop threads [ 62.890799][ T1233] vhci_hcd: release socket [ 62.892837][ T1233] vhci_hcd: disconnect device [ 62.969032][ T6321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'. [ 62.972133][ T6321] netlink: 48 bytes leftover after parsing attributes in process `syz.2.69'. [ 62.974916][ T6320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'. [ 62.977661][ T6320] netlink: 48 bytes leftover after parsing attributes in process `syz.2.69'. [ 63.166584][ T6325] syz.2.70: attempt to access beyond end of device [ 63.166584][ T6325] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 63.175628][ T6325] syz.2.70: attempt to access beyond end of device [ 63.175628][ T6325] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 63.179610][ T6325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 63.183975][ T6325] syz.2.70: attempt to access beyond end of device [ 63.183975][ T6325] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 63.188974][ T6325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 63.196276][ T6325] syz.2.70: attempt to access beyond end of device [ 63.196276][ T6325] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 63.203148][ T6325] syz.2.70: attempt to access beyond end of device [ 63.203148][ T6325] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 63.207636][ T6325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 63.210716][ T6325] syz.2.70: attempt to access beyond end of device [ 63.210716][ T6325] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 63.215303][ T6325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 63.220422][ T6325] syz.2.70: attempt to access beyond end of device [ 63.220422][ T6325] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 63.225593][ T6325] syz.2.70: attempt to access beyond end of device [ 63.225593][ T6325] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 63.230334][ T6325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 63.234402][ T6325] syz.2.70: attempt to access beyond end of device [ 63.234402][ T6325] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 63.239770][ T6325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 63.243754][ T6325] syz.2.70: attempt to access beyond end of device [ 63.243754][ T6325] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 63.248312][ T6325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 63.251601][ T6325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 63.254452][ T6325] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 63.402758][ T5983] usb 8-1: USB disconnect, device number 2 [ 63.412719][ T5983] usblp0: removed [ 63.648858][ T6333] tipc: Started in network mode [ 63.659916][ T6333] tipc: Node identity ffffffff, cluster identity 4711 [ 63.662441][ T6333] tipc: Node number set to 4294967295 [ 64.399336][ T2202] libceph: connect (1)[c::]:6789 error -101 [ 64.401767][ T2202] libceph: mon0 (1)[c::]:6789 connect error [ 64.415251][ T2202] libceph: connect (1)[c::]:6789 error -101 [ 64.420762][ T2202] libceph: mon0 (1)[c::]:6789 connect error [ 64.540125][ T6340] ceph: No mds server is up or the cluster is laggy [ 64.749065][ T6348] netlink: 'syz.2.76': attribute type 39 has an invalid length. [ 65.686737][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.689579][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.692388][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.701350][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.704050][ T5953] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.706598][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.941140][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.990887][ T6364] chnl_net:caif_netlink_parms(): no params data found [ 66.053260][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.085935][ T6377] loop7: detected capacity change from 0 to 16384 [ 66.110678][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.113536][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.116437][ T6364] bridge_slave_0: entered allmulticast mode [ 66.119687][ T6364] bridge_slave_0: entered promiscuous mode [ 66.123919][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.129178][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.131731][ T6364] bridge_slave_1: entered allmulticast mode [ 66.134903][ T6364] bridge_slave_1: entered promiscuous mode [ 66.152086][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.169324][ T6383] random: crng reseeded on system resumption [ 66.174954][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 66.184889][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 66.203183][ T6364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.232784][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.242380][ T6364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.271520][ T6364] team0: Port device team_slave_0 added [ 66.275268][ T6364] team0: Port device team_slave_1 added [ 66.296107][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.302359][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.309968][ T6364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.313867][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.315969][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.323635][ T6364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.359859][ T6364] hsr_slave_0: entered promiscuous mode [ 66.362757][ T6364] hsr_slave_1: entered promiscuous mode [ 66.365211][ T6364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.368328][ T6364] Cannot create hsr debugfs directory [ 66.411096][ T81] bridge_slave_1: left allmulticast mode [ 66.413686][ T81] bridge_slave_1: left promiscuous mode [ 66.417472][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.424979][ T81] bridge_slave_0: left allmulticast mode [ 66.427783][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 66.429794][ T81] bridge_slave_0: left promiscuous mode [ 66.430976][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 66.433211][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.698348][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.708288][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.711750][ T81] bond0 (unregistering): Released all slaves [ 66.899757][ T6404] capability: warning: `syz.1.89' uses 32-bit capabilities (legacy support in use) [ 66.976030][ T6364] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.980096][ T6364] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.985964][ T6364] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.992769][ T6364] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.051325][ T6364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.064697][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.068999][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.071183][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.080359][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.083340][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.116940][ T81] hsr_slave_0: left promiscuous mode [ 67.119882][ T81] hsr_slave_1: left promiscuous mode [ 67.122837][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.126038][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.131033][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.134180][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.156097][ T81] veth1_macvtap: left promiscuous mode [ 67.158068][ T81] veth0_macvtap: left promiscuous mode [ 67.160334][ T81] veth1_vlan: left promiscuous mode [ 67.162484][ T81] veth0_vlan: left promiscuous mode [ 67.527359][ T6004] vhci_hcd: vhci_device speed not set [ 67.663728][ T6439] x_tables: duplicate underflow at hook 3 [ 67.777863][ T5948] Bluetooth: hci3: command tx timeout [ 67.846875][ T81] team0 (unregistering): Port device team_slave_1 removed [ 67.915939][ T81] team0 (unregistering): Port device team_slave_0 removed [ 68.741065][ T6467] netlink: 96 bytes leftover after parsing attributes in process `syz.2.96'. [ 68.752579][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.919545][ T6364] veth0_vlan: entered promiscuous mode [ 68.926073][ T6364] veth1_vlan: entered promiscuous mode [ 68.939604][ T6364] veth0_macvtap: entered promiscuous mode [ 68.948208][ T6364] veth1_macvtap: entered promiscuous mode [ 68.968186][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.971987][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.975089][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.980724][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.985324][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.988746][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.993125][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.002714][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.006097][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.009146][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.012505][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.015478][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.018715][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.022068][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.029955][ T6364] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.032612][ T6364] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.035269][ T6364] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.039258][ T6364] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.071637][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.079389][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.099586][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.102633][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.141451][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 69.252209][ T6508] 9pnet_virtio: no channels available for device syz [ 69.846832][ T5948] Bluetooth: hci3: command tx timeout [ 70.217380][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.222594][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.228318][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 70.231202][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 70.273209][ T6558] tipc: Enabling of bearer rejected, failed to enable media [ 70.279010][ T6560] tipc: Enabling of bearer rejected, failed to enable media [ 70.446859][ T2202] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 70.541755][ T6537] Set syz1 is full, maxelem 65536 reached [ 70.595504][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 70.595514][ T40] audit: type=1804 audit(1735734144.344:64): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.109" name="/newroot/2/file0/file0" dev="9p" ino=37099059 res=1 errno=0 [ 70.597993][ T2202] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 70.607058][ T2202] usb 6-1: config 0 has no interface number 0 [ 70.608996][ T2202] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 70.612233][ T2202] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 70.615432][ T2202] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 70.618217][ T2202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.622320][ T2202] usb 6-1: config 0 descriptor?? [ 70.624157][ T6559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.629608][ T2202] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.120/input/input7 [ 70.811492][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.813663][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.837264][ T6578] Bluetooth: MGMT ver 1.23 [ 70.847074][ T5983] usb 6-1: USB disconnect, device number 2 [ 71.037904][ T6584] netlink: 96 bytes leftover after parsing attributes in process `syz.3.111'. [ 71.926842][ T5948] Bluetooth: hci3: command tx timeout [ 72.242028][ T6619] batman_adv: batadv0: Adding interface: netdevsim0 [ 72.247887][ T6619] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.263141][ T6619] batman_adv: batadv0: Interface activated: netdevsim0 [ 72.508217][ T6641] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.125' resets device [ 73.206418][ T6647] netlink: 52 bytes leftover after parsing attributes in process `syz.2.127'. [ 73.434924][ T6656] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.444326][ T6656] vlan2: entered promiscuous mode [ 73.445963][ T6656] team0: Device vlan2 is already an upper device of the team interface [ 73.488550][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.131'. [ 73.491268][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.131'. [ 73.549349][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 73.558963][ T6661] syz_tun: entered promiscuous mode [ 73.561917][ T6661] batadv_slave_1: entered promiscuous mode [ 74.010818][ T5948] Bluetooth: hci3: command tx timeout [ 74.094088][ T6672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.100896][ T6672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.117507][ T6672] bond0 (unregistering): Released all slaves [ 74.263294][ T6685] QAT: failed to copy from user cfg_data. [ 74.266268][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'. [ 74.271850][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 74.275236][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.138'. [ 74.278191][ T6685] netlink: 'syz.3.138': attribute type 6 has an invalid length. [ 74.346596][ T6690] 9pnet_fd: Insufficient options for proto=fd [ 74.718792][ T6694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.757057][ T2202] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 74.916935][ T2202] usb 7-1: Invalid ep0 maxpacket: 64 [ 75.048033][ T2202] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 75.196809][ T2202] usb 7-1: Invalid ep0 maxpacket: 64 [ 75.199276][ T2202] usb usb7-port1: attempt power cycle [ 75.508621][ T6717] netlink: 96 bytes leftover after parsing attributes in process `syz.3.145'. [ 75.546861][ T2202] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 75.567317][ T2202] usb 7-1: Invalid ep0 maxpacket: 64 [ 75.696885][ T2202] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 75.717263][ T2202] usb 7-1: Invalid ep0 maxpacket: 64 [ 75.719139][ T2202] usb usb7-port1: unable to enumerate USB device [ 75.892239][ T6723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.147'. [ 76.334817][ T6731] Cannot find add_set index 0 as target [ 76.416899][ T5983] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 76.580793][ T5983] usb 9-1: config index 0 descriptor too short (expected 25183, got 18) [ 76.584249][ T5983] usb 9-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 76.588200][ T5983] usb 9-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 76.592017][ T5983] usb 9-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 76.597678][ T5983] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b [ 76.601651][ T5983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.605100][ T5983] usb 9-1: Product: syz [ 76.607074][ T5983] usb 9-1: Manufacturer: syz [ 76.609114][ T5983] usb 9-1: SerialNumber: syz [ 76.705868][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.709470][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.712609][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.715713][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.718877][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.721921][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.724951][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.728447][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.731507][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.734467][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.740004][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.742969][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.745922][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.749146][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.752174][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.755212][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.758762][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.762560][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.765543][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.769917][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.773217][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.776150][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.780175][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.783529][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.786440][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.791195][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.796418][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.800151][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.803076][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.805976][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.808945][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.811832][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.814791][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.817725][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.820670][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.823756][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.832050][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.838720][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.845319][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.851845][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.858311][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.861180][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.864711][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.868063][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.871147][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.874080][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.877291][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.880507][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.883422][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.886301][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.889284][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.892129][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.896834][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.899490][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.901762][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.904045][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.906280][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.909403][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.915189][ T56] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 76.936137][ T56] IPVS: starting estimator thread 0... [ 77.032500][ T6752] IPVS: using max 38 ests per chain, 91200 per kthread [ 77.213713][ T5983] usb 9-1: USB disconnect, device number 2 [ 77.284432][ T6755] netlink: 'syz.2.153': attribute type 10 has an invalid length. [ 77.287388][ T6755] syz_tun: entered promiscuous mode [ 77.292671][ T6755] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 77.564504][ T6761] netlink: 'syz.2.154': attribute type 10 has an invalid length. [ 77.568105][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.570980][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.577646][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.579844][ T6761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.582295][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.584498][ T6761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.589104][ T6761] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 77.601563][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 77.604272][ T6761] bridge_slave_1: left allmulticast mode [ 77.606001][ T6761] bridge_slave_1: left promiscuous mode [ 77.607893][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.611740][ T6761] bridge_slave_0: left allmulticast mode [ 77.613727][ T6761] bridge_slave_0: left promiscuous mode [ 77.616593][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.629723][ T6761] bond0: (slave bridge0): Releasing backup interface [ 77.776816][ T56] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 77.859579][ T6766] sp0: Synchronizing with TNC [ 77.938851][ T56] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.941632][ T56] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 77.945630][ T56] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.948458][ T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 77.951762][ T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 77.956217][ T56] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.959183][ T56] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.961607][ T56] usb 8-1: Product: syz [ 77.962933][ T56] usb 8-1: Manufacturer: syz [ 77.967339][ T56] cdc_wdm 8-1:1.0: skipping garbage [ 77.969000][ T56] cdc_wdm 8-1:1.0: skipping garbage [ 77.973380][ T56] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 77.975261][ T56] cdc_wdm 8-1:1.0: Unknown control protocol [ 78.180105][ T6763] Driver unsupported XDP return value 0 on prog (id 48) dev N/A, expect packet loss! [ 78.194294][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 78.194340][ T5983] usb 8-1: USB disconnect, device number 3 [ 78.196490][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 78.200314][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 78.645870][ T6786] __nla_validate_parse: 1 callbacks suppressed [ 78.645936][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 78.651487][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 79.182682][ T6803] tipc: Started in network mode [ 79.184196][ T6803] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 79.186601][ T6803] tipc: Enabled bearer , priority 0 [ 79.204980][ T6803] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.211009][ T6803] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 79.636927][ T2202] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 79.796785][ T2202] usb 6-1: Using ep0 maxpacket: 8 [ 79.799676][ T2202] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 79.802981][ T2202] usb 6-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config [ 79.807549][ T2202] usb 6-1: config 0 has no interface number 0 [ 79.809675][ T2202] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 64, changing to 10 [ 79.812943][ T2202] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 16448, setting to 1024 [ 79.816242][ T2202] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.820607][ T2202] usb 6-1: config 0 interface 52 has no altsetting 0 [ 79.824044][ T2202] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 79.826895][ T2202] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 79.829388][ T2202] usb 6-1: Product: syz [ 79.830746][ T2202] usb 6-1: SerialNumber: syz [ 79.833398][ T2202] usb 6-1: config 0 descriptor?? [ 80.042200][ T2202] input: syz (Stick) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.52/input/input10 [ 80.123210][ T6843] netlink: 96 bytes leftover after parsing attributes in process `syz.4.171'. [ 80.318062][ T2291] tipc: Node number set to 11578026 [ 80.338593][ T6761] syz.2.154 (6761) used greatest stack depth: 20912 bytes left [ 80.709100][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 80.713315][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.718099][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 80.890896][ T6892] netlink: 56 bytes leftover after parsing attributes in process `syz.3.181'. [ 80.894256][ T6892] netlink: 'syz.3.181': attribute type 5 has an invalid length. [ 80.896876][ T6892] netlink: 44 bytes leftover after parsing attributes in process `syz.3.181'. [ 81.058782][ T30] cfg80211: failed to load regulatory.db [ 81.167818][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 81.615603][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.688586][ T6932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.691881][ T6932] batadv_slave_1 (unregistering): left promiscuous mode [ 82.028787][ T6960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.192'. [ 82.476173][ T6966] netlink: 96 bytes leftover after parsing attributes in process `syz.3.191'. [ 82.539345][ T30] usb 6-1: USB disconnect, device number 3 [ 82.745428][ T30] hid-generic 0005:7FFF:0008.0004: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 82.815986][ T6991] xt_nat: multiple ranges no longer supported [ 82.835497][ T6993] fuse: Bad value for 'group_id' [ 82.838160][ T6993] fuse: Bad value for 'group_id' [ 82.902405][ T7003] dccp_v4_rcv: dropped packet with invalid checksum [ 82.949852][ T40] audit: type=1326 audit(1735734156.704:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 82.959525][ T40] audit: type=1326 audit(1735734156.704:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 82.965917][ T40] audit: type=1326 audit(1735734156.704:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 82.973366][ T40] audit: type=1326 audit(1735734156.704:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 82.984563][ T40] audit: type=1326 audit(1735734156.704:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 82.992983][ T40] audit: type=1326 audit(1735734156.704:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 83.017821][ T40] audit: type=1326 audit(1735734156.704:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.202" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x0 [ 83.613043][ T7033] bio_check_eod: 2 callbacks suppressed [ 83.613094][ T7033] syz.2.209: attempt to access beyond end of device [ 83.613094][ T7033] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 83.621338][ T7033] vxfs: unable to read disk superblock at 1 [ 83.624230][ T7033] syz.2.209: attempt to access beyond end of device [ 83.624230][ T7033] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 83.629415][ T7033] vxfs: unable to read disk superblock at 8 [ 83.631852][ T7033] vxfs: can't find superblock. [ 83.847462][ T7038] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 84.791704][ T7055] Process accounting resumed [ 84.859758][ T7062] binder: BINDER_SET_CONTEXT_MGR already set [ 84.862171][ T7062] binder: 7061:7062 ioctl 4018620d 20004a80 returned -16 [ 85.088097][ T7075] __nla_validate_parse: 2 callbacks suppressed [ 85.088110][ T7075] netlink: 96 bytes leftover after parsing attributes in process `syz.3.220'. [ 85.176845][ T2202] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 85.206795][ T5953] Bluetooth: hci3: command 0x0405 tx timeout [ 85.339478][ T2202] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.343969][ T2202] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 85.347273][ T2202] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 85.350199][ T2202] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.356029][ T2202] usb 9-1: config 0 descriptor?? [ 85.365495][ T2202] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 85.369943][ T2202] dvb-usb: bulk message failed: -22 (3/0) [ 85.381819][ T2202] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 85.387209][ T2202] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 85.389799][ T2202] usb 9-1: media controller created [ 85.393294][ T2202] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.404502][ T2202] dvb-usb: bulk message failed: -22 (6/0) [ 85.406776][ T2202] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 85.411648][ T2202] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input11 [ 85.417595][ T2202] dvb-usb: schedule remote query interval to 150 msecs. [ 85.420129][ T2202] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 85.578073][ T2202] dvb-usb: bulk message failed: -22 (1/0) [ 85.579919][ T2202] dvb-usb: error while querying for an remote control event. [ 85.609160][ T5948] block nbd4: Receive control failed (result -107) [ 85.707583][ T7078] nbd4: detected capacity change from 0 to 20 [ 85.715529][ T5958] block nbd4: Dead connection, failed to find a fallback [ 85.718047][ T5958] block nbd4: shutting down sockets [ 85.720810][ T5958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.726093][ T5958] Buffer I/O error on dev nbd4, logical block 0, async page read [ 85.743237][ T2202] dvb-usb: bulk message failed: -22 (1/0) [ 85.743385][ T5958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.745035][ T2202] dvb-usb: error while querying for an remote control event. [ 85.753076][ T5958] Buffer I/O error on dev nbd4, logical block 0, async page read [ 85.756937][ T5958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.759766][ T5958] Buffer I/O error on dev nbd4, logical block 0, async page read [ 85.764068][ T5958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.771594][ T5958] Buffer I/O error on dev nbd4, logical block 0, async page read [ 85.774752][ T5958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.779121][ T5958] Buffer I/O error on dev nbd4, logical block 0, async page read [ 85.782490][ T5958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.785265][ T5958] Buffer I/O error on dev nbd4, logical block 0, async page read [ 85.788187][ T5958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.791245][ T5958] Buffer I/O error on dev nbd4, logical block 0, async page read [ 85.794127][ T5958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.797219][ T5958] Buffer I/O error on dev nbd4, logical block 0, async page read [ 85.800018][ T5958] ldm_validate_partition_table(): Disk read failed. [ 85.804162][ T5958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.811261][ T5958] Buffer I/O error on dev nbd4, logical block 0, async page read [ 85.813957][ T5958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.820684][ T5958] Buffer I/O error on dev nbd4, logical block 0, async page read [ 85.823785][ T5958] Dev nbd4: unable to read RDB block 0 [ 85.826234][ T5958] nbd4: unable to read partition table [ 85.829246][ T5958] nbd4: partition table beyond EOD, truncated [ 85.844238][ T5958] ldm_validate_partition_table(): Disk read failed. [ 85.847515][ T5958] Dev nbd4: unable to read RDB block 0 [ 85.849970][ T5958] nbd4: unable to read partition table [ 85.852420][ T5958] nbd4: partition table beyond EOD, truncated [ 85.908407][ T2202] dvb-usb: bulk message failed: -22 (1/0) [ 85.910661][ T2202] dvb-usb: error while querying for an remote control event. [ 86.067258][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 86.070553][ T9] dvb-usb: error while querying for an remote control event. [ 86.203633][ T7095] usb 2-1: USB disconnect, device number 2 [ 86.214413][ T7099] kvm: kvm [7097]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7fff00000001 [ 86.227493][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 86.229329][ T9] dvb-usb: error while querying for an remote control event. [ 86.277054][ T7107] hub 2-0:1.0: USB hub found [ 86.279939][ T7107] hub 2-0:1.0: 6 ports detected [ 86.386909][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 86.391686][ T9] dvb-usb: error while querying for an remote control event. [ 86.446740][ T5294] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 86.582141][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 86.620952][ T9] dvb-usb: error while querying for an remote control event. [ 86.689226][ T5294] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 86.692064][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 86.694483][ T5294] usb 2-1: Product: QEMU USB Tablet [ 86.696046][ T5294] usb 2-1: Manufacturer: QEMU [ 86.697905][ T5294] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 86.716443][ T5294] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input12 [ 86.794048][ T5294] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 86.820157][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 86.821964][ T9] dvb-usb: error while querying for an remote control event. [ 86.911042][ T7124] netlink: 96 bytes leftover after parsing attributes in process `syz.3.230'. [ 86.981186][ T2202] dvb-usb: bulk message failed: -22 (1/0) [ 87.070700][ T2202] dvb-usb: error while querying for an remote control event. [ 87.082775][ T7114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.237188][ T2202] dvb-usb: bulk message failed: -22 (1/0) [ 87.242665][ T2202] dvb-usb: error while querying for an remote control event. [ 87.397023][ T2202] dvb-usb: bulk message failed: -22 (1/0) [ 87.398875][ T2202] dvb-usb: error while querying for an remote control event. [ 87.505896][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'. [ 87.556735][ T2202] dvb-usb: bulk message failed: -22 (1/0) [ 87.558764][ T2202] dvb-usb: error while querying for an remote control event. [ 87.585995][ T7132] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 87.716810][ T2202] dvb-usb: bulk message failed: -22 (1/0) [ 87.718564][ T2202] dvb-usb: error while querying for an remote control event. [ 87.839423][ T68] usb 9-1: USB disconnect, device number 3 [ 87.877092][ T68] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 87.917622][ T2291] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 88.046792][ T30] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 88.088378][ T7151] fuse: Unknown parameter 'fd00000000000000000000011' [ 88.094407][ T2291] usb 8-1: Using ep0 maxpacket: 8 [ 88.100285][ T2291] usb 8-1: config 0 has no interfaces? [ 88.102048][ T2291] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.104864][ T2291] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.108849][ T2291] usb 8-1: config 0 descriptor?? [ 88.216786][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 88.219829][ T30] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 88.222877][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.225768][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.228713][ T30] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 88.232570][ T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.235353][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.250182][ T30] usbtmc 7-1:16.0: bulk endpoints not found [ 88.433871][ T2291] usb 8-1: USB disconnect, device number 4 [ 89.147492][ T7163] mkiss: ax0: crc mode is auto. [ 89.252107][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 89.642948][ T7189] netlink: 96 bytes leftover after parsing attributes in process `syz.3.243'. [ 89.825415][ T7195] netlink: 63 bytes leftover after parsing attributes in process `syz.4.248'. [ 89.887236][ T7196] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 89.895965][ T7196] VFS: Can't find a romfs filesystem on dev nullb0. [ 89.895965][ T7196] [ 89.998043][ T7204] netlink: 48 bytes leftover after parsing attributes in process `syz.4.251'. [ 90.161706][ T7208] netlink: 'syz.1.253': attribute type 10 has an invalid length. [ 90.242581][ T7212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.254'. [ 90.317736][ T7218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.255'. [ 90.414207][ T7222] netlink: 96 bytes leftover after parsing attributes in process `syz.3.254'. [ 90.441598][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.255'. [ 90.666785][ T56] usb 7-1: USB disconnect, device number 7 [ 90.753646][ T7228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.814393][ T7227] option changes via remount are deprecated (pid=7226 comm=syz.2.257) [ 91.516792][ T56] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 91.680297][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.683813][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.688215][ T56] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 91.691125][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.708342][ T56] usb 8-1: config 0 descriptor?? [ 91.719361][ T7255] netlink: 96 bytes leftover after parsing attributes in process `syz.1.262'. [ 91.855999][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 92.124709][ T56] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 92.132149][ T56] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 92.177637][ T56] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0006/input/input13 [ 92.200569][ T56] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 92.218341][ T7272] syz.1.269: attempt to access beyond end of device [ 92.218341][ T7272] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 92.223053][ T7272] syz.1.269: attempt to access beyond end of device [ 92.223053][ T7272] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 92.229278][ T7272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 92.233439][ T7272] syz.1.269: attempt to access beyond end of device [ 92.233439][ T7272] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 92.240309][ T7272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 92.245149][ T7272] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 92.249024][ T7272] UDF-fs: Scanning with blocksize 512 failed [ 92.253910][ T7272] syz.1.269: attempt to access beyond end of device [ 92.253910][ T7272] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 92.258734][ T7272] syz.1.269: attempt to access beyond end of device [ 92.258734][ T7272] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 92.263566][ T7272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 92.266462][ T7272] syz.1.269: attempt to access beyond end of device [ 92.266462][ T7272] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 92.266960][ T7273] netlink: 96 bytes leftover after parsing attributes in process `syz.4.268'. [ 92.271156][ T7272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 92.278002][ T7272] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 92.282327][ T7272] UDF-fs: Scanning with blocksize 1024 failed [ 92.284670][ T7272] syz.1.269: attempt to access beyond end of device [ 92.284670][ T7272] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 92.288948][ T7272] syz.1.269: attempt to access beyond end of device [ 92.288948][ T7272] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 92.293284][ T7272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 92.297278][ T7272] syz.1.269: attempt to access beyond end of device [ 92.297278][ T7272] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 92.302468][ T7272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 92.305771][ T7272] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 92.308190][ T7272] UDF-fs: Scanning with blocksize 2048 failed [ 92.310331][ T7272] syz.1.269: attempt to access beyond end of device [ 92.310331][ T7272] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 92.314026][ T7272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 92.317029][ T7272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 92.319944][ T7272] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 92.322316][ T7272] UDF-fs: Scanning with blocksize 4096 failed [ 92.324210][ T7272] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 92.360524][ T2202] usb 8-1: USB disconnect, device number 5 [ 92.541478][ T6001] IPVS: starting estimator thread 0... [ 92.638816][ T7280] IPVS: using max 38 ests per chain, 91200 per kthread [ 92.893338][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 93.303530][ T7316] netlink: 96 bytes leftover after parsing attributes in process `syz.4.278'. [ 93.309781][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 93.312478][ T7314] netlink: 'syz.3.279': attribute type 20 has an invalid length. [ 93.316784][ T7314] trusted_key: encrypted_key: insufficient parameters specified [ 94.149199][ T7327] /dev/sr0: Can't open blockdev [ 94.192196][ T7339] binder: BC_ACQUIRE_RESULT not supported [ 94.192217][ T7339] binder: 7338:7339 ioctl c0306201 20000580 returned -22 [ 94.458150][ T6001] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 94.586779][ T68] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 94.608030][ T6001] usb 9-1: config 0 has no interfaces? [ 94.610338][ T6001] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 94.614500][ T6001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.630016][ T6001] usb 9-1: config 0 descriptor?? [ 94.716770][ T68] usb 8-1: device descriptor read/64, error -71 [ 94.875731][ T5948] block nbd1: Receive control failed (result -32) [ 94.875778][ T5953] block nbd1: Receive control failed (result -32) [ 94.882954][ T7332] block nbd1: shutting down sockets [ 94.986870][ T68] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 95.136798][ T68] usb 8-1: device descriptor read/64, error -71 [ 95.257048][ T68] usb usb8-port1: attempt power cycle [ 95.530380][ T9] usb 9-1: USB disconnect, device number 4 [ 95.607050][ T68] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 95.637408][ T68] usb 8-1: device descriptor read/8, error -71 [ 95.857241][ T7353] __nla_validate_parse: 5 callbacks suppressed [ 95.857251][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 95.896839][ T68] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 95.946545][ T68] usb 8-1: device descriptor read/8, error -71 [ 96.057179][ T68] usb usb8-port1: unable to enumerate USB device [ 96.577392][ T56] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 96.726812][ T56] usb 9-1: Using ep0 maxpacket: 8 [ 96.731516][ T56] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 96.735441][ T56] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.738698][ T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.741636][ T56] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 96.745579][ T56] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.748976][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.762756][ T56] usbtmc 9-1:16.0: bulk endpoints not found [ 97.401323][ T7385] openvswitch: netlink: Message has 1275 unknown bytes. [ 97.403615][ T7385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.357747][ T7409] hugetlbfs: Bad value 'l' for mount option 'size' [ 98.357747][ T7409] [ 98.416128][ T7411] bio_check_eod: 2 callbacks suppressed [ 98.416142][ T7411] syz.1.301: attempt to access beyond end of device [ 98.416142][ T7411] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 98.422001][ T7411] syz.1.301: attempt to access beyond end of device [ 98.422001][ T7411] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 98.425730][ T7411] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 98.428729][ T7411] syz.1.301: attempt to access beyond end of device [ 98.428729][ T7411] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 98.432538][ T7411] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 98.435249][ T7411] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 98.438360][ T7411] UDF-fs: Scanning with blocksize 1024 failed [ 98.441465][ T7411] syz.1.301: attempt to access beyond end of device [ 98.441465][ T7411] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 98.445310][ T7411] syz.1.301: attempt to access beyond end of device [ 98.445310][ T7411] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 98.449238][ T7411] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 98.452569][ T7411] syz.1.301: attempt to access beyond end of device [ 98.452569][ T7411] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 98.456265][ T7411] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 98.459449][ T7411] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 98.461640][ T7411] UDF-fs: Scanning with blocksize 2048 failed [ 98.463572][ T7411] syz.1.301: attempt to access beyond end of device [ 98.463572][ T7411] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 98.467508][ T7411] syz.1.301: attempt to access beyond end of device [ 98.467508][ T7411] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 98.471233][ T7411] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 98.474567][ T7411] syz.1.301: attempt to access beyond end of device [ 98.474567][ T7411] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 98.478585][ T7411] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 98.481459][ T7411] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 98.483662][ T7411] UDF-fs: Scanning with blocksize 4096 failed [ 98.485414][ T7411] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 98.630978][ T7417] netlink: 64 bytes leftover after parsing attributes in process `syz.1.302'. [ 98.707588][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 99.286799][ T56] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 99.361635][ T1479] usb 9-1: USB disconnect, device number 5 [ 99.459155][ T56] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.462827][ T56] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.466490][ T56] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.543652][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.623405][ T7437] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 99.828435][ T56] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.925344][ T7446] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 99.927404][ T7446] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.939016][ T7446] vhci_hcd vhci_hcd.0: Device attached [ 99.942227][ T7447] usbip_core: unknown command [ 99.944527][ T7447] vhci_hcd: unknown pdu 0 [ 99.944538][ T7447] usbip_core: unknown command [ 99.947640][ T12] vhci_hcd: stop threads [ 99.949090][ T12] vhci_hcd: release socket [ 99.952081][ T12] vhci_hcd: disconnect device [ 99.955700][ T7432] input: syz0 as /devices/virtual/input/input14 [ 100.451403][ T7461] netlink: 96 bytes leftover after parsing attributes in process `syz.2.309'. [ 100.626132][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'. [ 100.673546][ T7470] netlink: 'syz.4.313': attribute type 4 has an invalid length. [ 100.884701][ T7478] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 100.925134][ T7478] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 100.976069][ T7487] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 100.976162][ T7485] 9pnet_fd: Insufficient options for proto=fd [ 101.315380][ T40] audit: type=1800 audit(1735734175.054:72): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.319" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 101.392307][ T7492] warning: `syz.1.319' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.787955][ T7494] xt_CT: No such helper "syz0" [ 101.816082][ T40] audit: type=1800 audit(1735734175.564:73): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.321" name="file0" dev="9p" ino=37099059 res=0 errno=0 [ 101.836764][ T7497] overlay: ./file1 is not a directory [ 101.844515][ T40] audit: type=1800 audit(1735734175.594:74): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.321" name="file2" dev="9p" ino=37099037 res=0 errno=0 [ 101.952508][ T5294] usb 8-1: USB disconnect, device number 10 [ 102.011731][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 102.014097][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 102.016350][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.020461][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.022999][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.025758][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.030749][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.033087][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.035451][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.039092][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.041387][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.043707][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.045944][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.052586][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.054805][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.057537][ T68] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 102.064001][ T68] hid-generic 0000:3000000:0000.0007: hidraw1: HID v0.00 Device [sy] on syz0 [ 102.238837][ T7525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.324'. [ 102.324764][ T7539] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 102.381503][ T40] audit: type=1326 audit(1735734176.134:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 102.389515][ T40] audit: type=1326 audit(1735734176.134:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 102.398669][ T40] audit: type=1326 audit(1735734176.134:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 102.406738][ T40] audit: type=1326 audit(1735734176.134:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 102.414763][ T40] audit: type=1326 audit(1735734176.134:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 102.422879][ T40] audit: type=1326 audit(1735734176.134:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 102.430654][ T40] audit: type=1326 audit(1735734176.134:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 102.586828][ T68] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 102.737943][ T68] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.740920][ T68] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.745448][ T68] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.748323][ T68] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.750687][ T68] usb 9-1: SerialNumber: syz [ 102.754424][ T68] usb 9-1: bad CDC descriptors [ 102.956240][ T7541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.959286][ T7541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.978734][ T5294] usb 9-1: USB disconnect, device number 6 [ 103.608191][ T7576] bond1: entered promiscuous mode [ 103.609837][ T7576] bond1: entered allmulticast mode [ 103.611504][ T7576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.679339][ T7576] bond1 (unregistering): Released all slaves [ 103.882435][ T7586] syz.4.346: attempt to access beyond end of device [ 103.882435][ T7586] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 103.890221][ T7586] EXT4-fs (nbd4): unable to read superblock [ 103.904749][ T7586] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 103.907472][ T7586] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.915517][ T7586] vhci_hcd vhci_hcd.0: Device attached [ 104.107071][ T2202] vhci_hcd: vhci_device speed not set [ 104.177020][ T2202] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 104.595887][ T7605] overlay: ./file0 is not a directory [ 104.658603][ T7603] overlayfs: invalid origin (0000007900ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 104.675620][ T7589] vhci_hcd: connection reset by peer [ 104.681105][ T11] vhci_hcd: stop threads [ 104.682966][ T11] vhci_hcd: release socket [ 104.685930][ T11] vhci_hcd: disconnect device [ 105.068966][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 105.076942][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 105.080103][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 105.083061][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 105.086077][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 105.089787][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 105.092687][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 105.096130][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 105.099309][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 106.286070][ T5944] syz_tun (unregistering): left promiscuous mode [ 107.465785][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.562939][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.672341][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.735110][ T7698] batman_adv: batadv0: Adding interface: macvlan0 [ 107.738741][ T7698] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.746496][ T7698] batman_adv: batadv0: Interface activated: macvlan0 [ 107.749329][ T7698] netlink: 'syz.4.367': attribute type 1 has an invalid length. [ 107.751698][ T7698] netlink: 'syz.4.367': attribute type 2 has an invalid length. [ 107.754777][ T11] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 107.772885][ T40] kauditd_printk_skb: 102 callbacks suppressed [ 107.772895][ T40] audit: type=1326 audit(1735734181.524:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.4.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 107.783166][ T11] batman_adv: batadv0: Removing interface: netdevsim0 [ 107.784369][ T40] audit: type=1326 audit(1735734181.524:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.4.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 107.791740][ T40] audit: type=1326 audit(1735734181.524:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.4.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 107.792718][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.798683][ T40] audit: type=1326 audit(1735734181.534:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.4.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 107.808668][ T40] audit: type=1326 audit(1735734181.534:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.4.367" exe="/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 107.815299][ T40] audit: type=1326 audit(1735734181.534:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.4.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 107.825873][ T40] audit: type=1326 audit(1735734181.534:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.4.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 107.837730][ T40] audit: type=1326 audit(1735734181.534:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.4.367" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 107.844424][ T40] audit: type=1326 audit(1735734181.534:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.4.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 107.853352][ T40] audit: type=1326 audit(1735734181.534:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.4.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 107.907636][ T11] bridge_slave_1: left allmulticast mode [ 107.909743][ T11] bridge_slave_1: left promiscuous mode [ 107.911491][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.914500][ T11] bridge_slave_0: left allmulticast mode [ 107.917410][ T11] bridge_slave_0: left promiscuous mode [ 107.919197][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.131192][ T11] bond0 (unregistering): Released all slaves [ 108.222176][ T11] tipc: Left network mode [ 108.399050][ T11] hsr_slave_0: left promiscuous mode [ 108.402858][ T11] hsr_slave_1: left promiscuous mode [ 108.405539][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.409102][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.425789][ T11] veth0_macvtap: left promiscuous mode [ 108.427729][ T11] veth1_vlan: left promiscuous mode [ 108.430261][ T11] veth0_vlan: left promiscuous mode [ 108.534953][ T7732] evm: overlay not supported [ 108.973517][ T11] team0 (unregistering): Port device team_slave_1 removed [ 109.042113][ T11] team0 (unregistering): Port device team_slave_0 removed [ 109.278231][ T2202] vhci_hcd: vhci_device speed not set [ 109.927335][ T11] IPVS: stop unused estimator thread 0... [ 111.352708][ T7811] __nla_validate_parse: 6 callbacks suppressed [ 111.352719][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'. [ 112.523372][ T2291] IPVS: starting estimator thread 0... [ 112.526337][ T7832] tipc: Started in network mode [ 112.528046][ T7832] tipc: Node identity ac1414aa, cluster identity 4711 [ 112.531735][ T7832] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 112.534059][ T7832] tipc: Enabled bearer , priority 10 [ 112.618078][ T7840] IPVS: using max 37 ests per chain, 88800 per kthread [ 112.677020][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 112.806743][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 112.946777][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 113.086781][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 113.226794][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 113.366759][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 113.506788][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 113.650712][ T2291] tipc: Node number set to 2886997162 [ 113.779518][ T7858] binder: 7857:7858 ioctl c0306201 20000400 returned -14 [ 113.786819][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 114.056811][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 114.880743][ T7869] netlink: 40 bytes leftover after parsing attributes in process `syz.4.396'. [ 114.918315][ T7874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.399'. [ 114.931908][ T7871] ================================================================== [ 114.934401][ T7871] BUG: KASAN: slab-use-after-free in isolate_migratepages_block+0x3ea4/0x5680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 114.937054][ T7871] Read of size 8 at addr ffff8880232759b0 by task syz.2.398/7871 [ 114.940566][ T7871] [ 114.941848][ T7871] CPU: 1 UID: 0 PID: 7871 Comm: syz.2.398 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 114.945014][ T7871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.948232][ T7871] Call Trace: [ 114.949244][ T7871] [ 114.950166][ T7871] dump_stack_lvl+0x116/0x1f0 [ 114.951656][ T7871] print_report+0xc3/0x620 [ 114.953009][ T7871] ? __virt_addr_valid+0x5e/0x590 [ 114.954557][ T7871] ? __phys_addr+0xc6/0x150 [ 114.955931][ T7871] kasan_report+0xd9/0x110 [ 114.957298][ T7871] ? isolate_migratepages_block+0x3ea4/0x5680 [ 114.959145][ T7871] ? isolate_migratepages_block+0x3ea4/0x5680 [ 114.959637][ T7875] netlink: 'syz.2.398': attribute type 10 has an invalid length. [ 114.960982][ T7871] kasan_check_range+0xef/0x1a0 [ 114.960999][ T7871] isolate_migratepages_block+0x3ea4/0x5680 [ 114.961016][ T7871] ? __folio_batch_add_and_move+0x612/0xc60 [ 114.968583][ T7871] ? __pfx_lru_add+0x10/0x10 [ 114.969989][ T7871] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 114.971899][ T7871] ? folio_putback_lru+0x85/0xd0 [ 114.973486][ T7871] ? putback_movable_pages+0x2a0/0x700 [ 114.975117][ T7871] compact_zone+0x1a5c/0x4280 [ 114.976535][ T7871] ? mark_lock+0xb5/0xc60 [ 114.977860][ T7871] ? __pfx___lock_acquire+0x10/0x10 [ 114.979440][ T7871] ? __pfx_compact_zone+0x10/0x10 [ 114.980987][ T7871] compact_node+0x1a2/0x2d0 [ 114.982344][ T7871] ? __pfx_compact_node+0x10/0x10 [ 114.983862][ T7871] ? __pfx___flush_work+0x10/0x10 [ 114.985393][ T7871] ? __lru_add_drain_all+0xe7/0x6f0 [ 114.986980][ T7871] sysctl_compaction_handler+0x145/0x220 [ 114.988657][ T7871] proc_sys_call_handler+0x403/0x5d0 [ 114.990272][ T7871] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 114.992030][ T7871] ? splice_from_pipe_next+0x1f8/0x5d0 [ 114.993637][ T7871] iter_file_splice_write+0x90f/0x10b0 [ 114.995275][ T7871] ? __pfx_iter_file_splice_write+0x10/0x10 [ 114.997011][ T7871] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 114.998726][ T7871] ? splice_direct_to_actor+0x346/0xa40 [ 115.000396][ T7871] ? __pfx_iter_file_splice_write+0x10/0x10 [ 115.002190][ T7871] direct_splice_actor+0x18f/0x6c0 [ 115.003735][ T7871] splice_direct_to_actor+0x346/0xa40 [ 115.005368][ T7871] ? __pfx_direct_splice_actor+0x10/0x10 [ 115.007085][ T7871] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 115.008865][ T7871] ? __fget_files+0x1fc/0x3a0 [ 115.010317][ T7871] do_splice_direct+0x178/0x250 [ 115.011789][ T7871] ? __pfx_do_splice_direct+0x10/0x10 [ 115.013408][ T7871] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 115.015212][ T7871] do_sendfile+0xaed/0xe30 [ 115.016568][ T7871] ? __pfx_do_sendfile+0x10/0x10 [ 115.018134][ T7871] ? lock_acquire+0x2f/0xb0 [ 115.019543][ T7871] ? __might_fault+0xe3/0x190 [ 115.020954][ T7871] __ia32_compat_sys_sendfile+0x163/0x230 [ 115.022649][ T7871] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 115.024530][ T7871] __do_fast_syscall_32+0x73/0x120 [ 115.026081][ T7871] do_fast_syscall_32+0x32/0x80 [ 115.027531][ T7871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.029418][ T7871] RIP: 0023:0xf7fd0579 [ 115.030651][ T7871] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 115.036350][ T7871] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 115.038885][ T7871] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000005 [ 115.041265][ T7871] RDX: 00000000200000c0 RSI: 0000000000000009 RDI: 0000000000000000 [ 115.043637][ T7871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.046019][ T7871] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 115.048409][ T7871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.050813][ T7871] [ 115.051756][ T7871] [ 115.052483][ T7871] Allocated by task 37: [ 115.053715][ T7871] kasan_save_stack+0x33/0x60 [ 115.055114][ T7871] kasan_save_track+0x14/0x30 [ 115.056536][ T7871] __kasan_slab_alloc+0x89/0x90 [ 115.057959][ T7871] kmem_cache_alloc_lru_noprof+0x1c8/0x3b0 [ 115.059672][ T7871] shmem_alloc_inode+0x25/0x50 [ 115.061139][ T7871] alloc_inode+0x5d/0x230 [ 115.062450][ T7871] new_inode+0x22/0x210 [ 115.063736][ T7871] shmem_get_inode+0x194/0xf00 [ 115.065270][ T7871] shmem_mknod+0x1a8/0x450 [ 115.066639][ T7871] vfs_mknod+0x5d7/0x8e0 [ 115.067922][ T7871] devtmpfs_work_loop+0x1a8/0x7d0 [ 115.069429][ T7871] devtmpfsd+0x4c/0x50 [ 115.070677][ T7871] kthread+0x2c1/0x3a0 [ 115.071910][ T7871] ret_from_fork+0x45/0x80 [ 115.073251][ T7871] ret_from_fork_asm+0x1a/0x30 [ 115.074703][ T7871] [ 115.075429][ T7871] Freed by task 34: [ 115.076581][ T7871] kasan_save_stack+0x33/0x60 [ 115.078014][ T7871] kasan_save_track+0x14/0x30 [ 115.079446][ T7871] kasan_save_free_info+0x3b/0x60 [ 115.080977][ T7871] __kasan_slab_free+0x51/0x70 [ 115.082421][ T7871] kmem_cache_free+0x152/0x4c0 [ 115.083872][ T7871] i_callback+0x43/0x70 [ 115.085129][ T7871] rcu_core+0x79d/0x14d0 [ 115.086422][ T7871] handle_softirqs+0x213/0x8f0 [ 115.087877][ T7871] run_ksoftirqd+0x3a/0x60 [ 115.089222][ T7871] smpboot_thread_fn+0x661/0xa30 [ 115.090744][ T7871] kthread+0x2c1/0x3a0 [ 115.091980][ T7871] ret_from_fork+0x45/0x80 [ 115.093330][ T7871] ret_from_fork_asm+0x1a/0x30 [ 115.094796][ T7871] [ 115.095532][ T7871] Last potentially related work creation: [ 115.097245][ T7871] kasan_save_stack+0x33/0x60 [ 115.098682][ T7871] __kasan_record_aux_stack+0xba/0xd0 [ 115.100317][ T7871] __call_rcu_common.constprop.0+0x99/0x7a0 [ 115.102105][ T7871] destroy_inode+0x12c/0x1b0 [ 115.103497][ T7871] evict+0x5ed/0x960 [ 115.104668][ T7871] iput+0x52a/0x890 [ 115.105829][ T7871] do_unlinkat+0x5c3/0x760 [ 115.107203][ T7871] __ia32_sys_unlink+0xc4/0x110 [ 115.108677][ T7871] __do_fast_syscall_32+0x73/0x120 [ 115.110289][ T7871] do_fast_syscall_32+0x32/0x80 [ 115.111770][ T7871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.113674][ T7871] [ 115.114410][ T7871] The buggy address belongs to the object at ffff8880232754e8 [ 115.114410][ T7871] which belongs to the cache shmem_inode_cache of size 1544 [ 115.118725][ T7871] The buggy address is located 1224 bytes inside of [ 115.118725][ T7871] freed 1544-byte region [ffff8880232754e8, ffff888023275af0) [ 115.122833][ T7871] [ 115.123556][ T7871] The buggy address belongs to the physical page: [ 115.125464][ T7871] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888023277590 pfn:0x23270 [ 115.128452][ T7871] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 115.130989][ T7871] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 115.133484][ T7871] page_type: f5(slab) [ 115.134675][ T7871] raw: 00fff00000000240 ffff888040489cc0 ffffea00008f5210 ffffea00008cb010 [ 115.137192][ T7871] raw: ffff888023277590 0000000000130001 00000001f5000000 0000000000000000 [ 115.139711][ T7871] head: 00fff00000000240 ffff888040489cc0 ffffea00008f5210 ffffea00008cb010 [ 115.142298][ T7871] head: ffff888023277590 0000000000130001 00000001f5000000 0000000000000000 [ 115.144856][ T7871] head: 00fff00000000003 ffffea00008c9c01 ffffffffffffffff 0000000000000000 [ 115.147423][ T7871] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 115.149938][ T7871] page dumped because: kasan: bad access detected [ 115.151824][ T7871] page_owner tracks the page as allocated [ 115.153483][ T7871] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 37, tgid 37 (kdevtmpfs), ts 5522885766, free_ts 0 [ 115.159157][ T7871] post_alloc_hook+0x2d1/0x350 [ 115.160616][ T7871] get_page_from_freelist+0xfce/0x2f80 [ 115.162276][ T7871] __alloc_pages_noprof+0x223/0x25b0 [ 115.163865][ T7871] alloc_pages_mpol_noprof+0x2c9/0x610 [ 115.165490][ T7871] new_slab+0x2c9/0x410 [ 115.166726][ T7871] ___slab_alloc+0xce2/0x1650 [ 115.168125][ T7871] __slab_alloc.constprop.0+0x56/0xb0 [ 115.169693][ T7871] kmem_cache_alloc_lru_noprof+0xf0/0x3b0 [ 115.171378][ T7871] shmem_alloc_inode+0x25/0x50 [ 115.172748][ T7871] alloc_inode+0x5d/0x230 [ 115.174039][ T7871] new_inode+0x22/0x210 [ 115.175368][ T7871] shmem_get_inode+0x194/0xf00 [ 115.176824][ T7871] shmem_mknod+0x1a8/0x450 [ 115.178173][ T7871] vfs_mknod+0x5d7/0x8e0 [ 115.179431][ T7871] devtmpfs_work_loop+0x1a8/0x7d0 [ 115.181002][ T7871] devtmpfsd+0x4c/0x50 [ 115.182271][ T7871] page_owner free stack trace missing [ 115.183880][ T7871] [ 115.184605][ T7871] Memory state around the buggy address: [ 115.186297][ T7871] ffff888023275880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.188692][ T7871] ffff888023275900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.191119][ T7871] >ffff888023275980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.193511][ T7871] ^ [ 115.195208][ T7871] ffff888023275a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.197605][ T7871] ffff888023275a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 115.199987][ T7871] ================================================================== [ 115.204518][ T7871] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 115.206744][ T7871] CPU: 0 UID: 0 PID: 7871 Comm: syz.2.398 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 115.209907][ T7871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.213036][ T7871] Call Trace: [ 115.214076][ T7871] [ 115.214977][ T7871] dump_stack_lvl+0x3d/0x1f0 [ 115.216375][ T7871] panic+0x71d/0x800 [ 115.217602][ T7871] ? __pfx_panic+0x10/0x10 [ 115.219035][ T7871] ? preempt_schedule_thunk+0x1a/0x30 [ 115.220645][ T7871] ? preempt_schedule_common+0x44/0xc0 [ 115.222298][ T7871] check_panic_on_warn+0xab/0xb0 [ 115.223757][ T7871] end_report+0x117/0x180 [ 115.225013][ T7871] kasan_report+0xe9/0x110 [ 115.226342][ T7871] ? isolate_migratepages_block+0x3ea4/0x5680 [ 115.228193][ T7871] ? isolate_migratepages_block+0x3ea4/0x5680 [ 115.230009][ T7871] kasan_check_range+0xef/0x1a0 [ 115.231483][ T7871] isolate_migratepages_block+0x3ea4/0x5680 [ 115.233254][ T7871] ? __folio_batch_add_and_move+0x612/0xc60 [ 115.235039][ T7871] ? __pfx_lru_add+0x10/0x10 [ 115.236423][ T7871] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 115.238331][ T7871] ? folio_putback_lru+0x85/0xd0 [ 115.239819][ T7871] ? putback_movable_pages+0x2a0/0x700 [ 115.241464][ T7871] compact_zone+0x1a5c/0x4280 [ 115.242895][ T7871] ? mark_lock+0xb5/0xc60 [ 115.244196][ T7871] ? __pfx___lock_acquire+0x10/0x10 [ 115.245758][ T7871] ? __pfx_compact_zone+0x10/0x10 [ 115.247277][ T7871] compact_node+0x1a2/0x2d0 [ 115.248642][ T7871] ? __pfx_compact_node+0x10/0x10 [ 115.250163][ T7871] ? __pfx___flush_work+0x10/0x10 [ 115.251674][ T7871] ? __lru_add_drain_all+0xe7/0x6f0 [ 115.253231][ T7871] sysctl_compaction_handler+0x145/0x220 [ 115.254921][ T7871] proc_sys_call_handler+0x403/0x5d0 [ 115.256506][ T7871] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 115.258542][ T7871] ? splice_from_pipe_next+0x1f8/0x5d0 [ 115.260176][ T7871] iter_file_splice_write+0x90f/0x10b0 [ 115.261818][ T7871] ? __pfx_iter_file_splice_write+0x10/0x10 [ 115.263592][ T7871] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 115.265270][ T7871] ? splice_direct_to_actor+0x346/0xa40 [ 115.266940][ T7871] ? __pfx_iter_file_splice_write+0x10/0x10 [ 115.268746][ T7871] direct_splice_actor+0x18f/0x6c0 [ 115.270257][ T7871] splice_direct_to_actor+0x346/0xa40 [ 115.271840][ T7871] ? __pfx_direct_splice_actor+0x10/0x10 [ 115.273508][ T7871] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 115.275285][ T7871] ? __fget_files+0x1fc/0x3a0 [ 115.276694][ T7871] do_splice_direct+0x178/0x250 [ 115.278201][ T7871] ? __pfx_do_splice_direct+0x10/0x10 [ 115.279804][ T7871] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 115.281564][ T7871] do_sendfile+0xaed/0xe30 [ 115.282900][ T7871] ? __pfx_do_sendfile+0x10/0x10 [ 115.284378][ T7871] ? lock_acquire+0x2f/0xb0 [ 115.285740][ T7871] ? __might_fault+0xe3/0x190 [ 115.287166][ T7871] __ia32_compat_sys_sendfile+0x163/0x230 [ 115.288874][ T7871] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 115.290754][ T7871] __do_fast_syscall_32+0x73/0x120 [ 115.292293][ T7871] do_fast_syscall_32+0x32/0x80 [ 115.293766][ T7871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.295676][ T7871] RIP: 0023:0xf7fd0579 [ 115.296909][ T7871] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 115.302689][ T7871] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 115.305176][ T7871] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000005 [ 115.307528][ T7871] RDX: 00000000200000c0 RSI: 0000000000000009 RDI: 0000000000000000 [ 115.309873][ T7871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.312231][ T7871] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 115.314585][ T7871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.316948][ T7871] [ 115.318502][ T7871] Kernel Offset: disabled [ 115.319806][ T7871] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:23:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=1ffff92000701ed6 RCX=ffffffff81764859 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff901ce550 RBP=0000000000000000 RSP=ffffc9000380f698 R8 =0000000000000000 R9 =fffffbfff2d36d98 R10=ffffffff969b6cc7 R11=0000000000000003 R12=ffffffff8ddbad40 R13=0000000000000012 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff81fbb87d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74b5004 CR3=0000000063a76000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85143435 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc90003bcecd8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000002e R14=ffffffff851433d0 R15=0000000000000000 RIP=ffffffff8514345f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c240658 CR3=0000000074d2e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90007120000 RBX=0000000000000000 RCX=ffff888025449070 RDX=000000000000009d RSI=ffffffff865694e6 RDI=ffff888025449268 RBP=0000000000000001 RSP=ffffc90000548b88 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000003 R12=0000000000000001 R13=0000000000004e20 R14=ffff888025449070 R15=0000000000000001 RIP=ffffffff86569523 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc3fa497d00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc0b85bbd8 CR3=000000004ec04000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=d50e06a846424886 15b9f8a9cb07e415 d50e06a846424886 15b9f8a9cb07e415 d50e06a846424886 15b9f8a9cb07e415 d50e06a846424886 15b9f8a9cb07e415 ZMM18=f3aabb2cfe9ec1e9 f456f12d4e1f0ef7 f3aabb2cfe9ec1e9 f456f12d4e1f0ef7 f3aabb2cfe9ec1e9 f456f12d4e1f0ef7 f3aabb2cfe9ec1e9 f456f12d4e1f0ef7 ZMM19=5706000000000000 0000000000000005 5706000000000000 0000000000000004 5706000000000000 0000000000000003 5706000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=15b9f8a915b9f8a9 15b9f8a915b9f8a9 15b9f8a915b9f8a9 15b9f8a915b9f8a9 15b9f8a915b9f8a9 15b9f8a915b9f8a9 15b9f8a915b9f8a9 15b9f8a915b9f8a9 ZMM22=4642488646424886 4642488646424886 4642488646424886 4642488646424886 4642488646424886 4642488646424886 4642488646424886 4642488646424886 ZMM23=d50e06a8d50e06a8 d50e06a8d50e06a8 d50e06a8d50e06a8 d50e06a8d50e06a8 d50e06a8d50e06a8 d50e06a8d50e06a8 d50e06a8d50e06a8 d50e06a8d50e06a8 ZMM24=4e1f0ef74e1f0ef7 4e1f0ef74e1f0ef7 4e1f0ef74e1f0ef7 4e1f0ef74e1f0ef7 4e1f0ef74e1f0ef7 4e1f0ef74e1f0ef7 4e1f0ef74e1f0ef7 4e1f0ef74e1f0ef7 ZMM25=f456f12df456f12d f456f12df456f12d f456f12df456f12d f456f12df456f12d f456f12df456f12d f456f12df456f12d f456f12df456f12d f456f12df456f12d ZMM26=fe9ec1e9fe9ec1e9 fe9ec1e9fe9ec1e9 fe9ec1e9fe9ec1e9 fe9ec1e9fe9ec1e9 fe9ec1e9fe9ec1e9 fe9ec1e9fe9ec1e9 fe9ec1e9fe9ec1e9 fe9ec1e9fe9ec1e9 ZMM27=f3aabb2cf3aabb2c f3aabb2cf3aabb2c f3aabb2cf3aabb2c f3aabb2cf3aabb2c f3aabb2cf3aabb2c f3aabb2cf3aabb2c f3aabb2cf3aabb2c f3aabb2cf3aabb2c ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5506000055060000 5506000055060000 5506000055060000 5506000055060000 5506000055060000 5506000055060000 5506000055060000 5506000055060000 info registers vcpu 3 CPU#3 RAX=0000000000179e9f RBX=0000000000000003 RCX=ffffffff8b1a4819 RDX=0000000000000000 RSI=ffffffff8b4cd300 RDI=ffffffff8bb17100 RBP=ffffed10039df488 RSP=ffffc9000049fe08 R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901ce550 R15=0000000000000000 RIP=ffffffff8b1a5bff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5105da4 CR3=000000004ed90000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000