last executing test programs: 2m49.258632847s ago: executing program 1 (id=1115): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x107000, 0x800}, 0x1c) socket(0x9, 0x800, 0x40) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000bdd000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x9, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x108, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x2}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m48.819755336s ago: executing program 1 (id=1123): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=@newtaction={0x1f18, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, {0x1e74, 0x1, [@m_police={0x195c, 0x15, 0x0, 0x0, {{0xb}, {0x18e4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1800, 0x2, 0x531, 0xe1, 0x0, 0x8, 0x10, 0x0, 0x7fffffff, 0x8, 0x2, 0xff, 0x7, 0x800, 0x5, 0x2, 0x5e, 0x6, 0x101, 0xfffffffc, 0x1fe0000, 0xe0000000, 0x2, 0x3, 0x1, 0x80000001, 0xc7, 0x7f, 0x8, 0x9, 0x4160, 0x10001, 0x0, 0x1, 0x9, 0x8, 0x7eaf, 0x8, 0x5, 0x5, 0xf9, 0x2754, 0x10001, 0x800, 0x7, 0x8, 0x6, 0x7fffffff, 0xd, 0x7, 0x7ff, 0x3, 0x6, 0x4, 0x3, 0x81, 0x4, 0x6, 0x2, 0x5, 0x0, 0x3, 0x401, 0x5, 0x3c, 0x1, 0xc677, 0x546, 0x10001, 0x9, 0x3f78, 0xf07, 0x3, 0x3, 0x2, 0xffffffff, 0x10000, 0xfffffff7, 0x80000001, 0x81, 0x7, 0x0, 0x3, 0x5, 0x7f, 0x6, 0x8, 0x7, 0xc6, 0xb25, 0x8, 0xb, 0x4, 0x5b9b, 0x8, 0x2, 0xfe000000, 0x401, 0x10000000, 0x15, 0x4, 0x7d344b49, 0xfffffff4, 0x6d, 0x2ec7, 0x41e, 0xfffffffc, 0x2, 0x5, 0x4, 0x101, 0x40, 0x6, 0x1, 0xfffffffe, 0xfff, 0x8, 0xd92, 0x4, 0x2, 0x8, 0xffff, 0xfffffffc, 0x1, 0xfffffffb, 0x10001, 0x2, 0xae85, 0x0, 0x0, 0x5, 0x7, 0x2, 0x5, 0x0, 0x5, 0x4, 0x0, 0x10b1, 0x3, 0x3, 0x8, 0x7, 0x3542, 0x6, 0x40, 0x101, 0x9, 0xfffffffa, 0x8, 0x81, 0x4, 0x6, 0x6, 0x7, 0x10, 0x7179, 0x8, 0x6, 0xfffffffd, 0x3, 0x5, 0x0, 0xb85, 0xffffffff, 0x8, 0x0, 0xffffff47, 0xffff8001, 0x63b, 0xe, 0x3, 0x0, 0x8, 0xff, 0x8, 0x7d49, 0x4, 0x5ea8, 0x9, 0x3, 0x4, 0x80, 0x3, 0x0, 0x9, 0x1, 0xa, 0x1, 0xfffffffc, 0x3, 0x6, 0x9, 0x9, 0xbfd2, 0x5, 0x80000001, 0x3, 0x8001, 0x7fff, 0x8000, 0x8000, 0x0, 0x8c, 0x9, 0x8001, 0x80, 0x3, 0x8, 0xffff, 0xe, 0x2, 0x5, 0xbbda, 0x5, 0x9, 0x1, 0x1, 0x0, 0x54, 0x0, 0x200, 0x3, 0x7, 0x4, 0x28d2, 0x4, 0x4, 0x6, 0x5, 0x3, 0x7ff, 0x1, 0x8, 0x70, 0x0, 0x7, 0x0, 0x7ff, 0xa1b, 0x7, 0x2, 0x8, 0x5, 0x7, 0xe7, 0xc51, 0x3, 0x492dd4bb, 0x3b, 0x845a, 0x6, 0x6e, 0x9, 0x1000, 0xfffff801]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0xf, 0x4, 0x400, 0x7c8, 0xa5, 0x40, 0x6b, 0x9, 0x7, 0x7a, 0x0, 0x7ff, 0x5, 0x7, 0x10001, 0x4, 0x101, 0x7, 0x4, 0x200, 0x4, 0x0, 0x9, 0x4, 0x0, 0x2, 0x9d4c, 0x10001, 0x8000, 0x6, 0x8, 0x0, 0x4800, 0x1, 0x7, 0x3ff, 0x1000, 0x0, 0x3ff, 0x70, 0x7, 0x10001, 0xc3a, 0x3, 0xbb, 0x10000000, 0x401, 0xa2, 0x8, 0x1, 0x1, 0x1, 0xff, 0xc993, 0x7, 0xffffffff, 0x2, 0x3, 0x5, 0x0, 0x8, 0xffffff80, 0x2, 0x556d, 0xc72e, 0x713b, 0x7, 0xc, 0x0, 0x3, 0x9, 0x4, 0x4, 0x55fd1c9e, 0x1, 0x7fff, 0x6, 0x2, 0x8, 0x2, 0x3, 0x7, 0xfffffff7, 0x7, 0x0, 0x7, 0x7, 0x7fff, 0x53, 0x7, 0x6, 0x0, 0x7, 0x0, 0x2, 0x8000, 0xe, 0x6, 0x8, 0xe, 0x432, 0x0, 0x9, 0x5, 0x4, 0x4, 0x8, 0xffff, 0x4, 0x9, 0x7, 0x2, 0x3, 0x3ff, 0xda5, 0x5, 0x0, 0xd7, 0xa, 0x6, 0x7de, 0xe09, 0xde, 0x9, 0x3, 0x6, 0xfffffffa, 0x7, 0x3, 0x5, 0x6, 0x8, 0x0, 0xffffff52, 0x185, 0x9, 0x590b, 0x7, 0x8, 0x4, 0xf, 0xb, 0x7, 0xfffffff9, 0x4, 0x6, 0x5, 0x2, 0x2, 0x6, 0x5, 0x5, 0xcbfe, 0x54c56930, 0x0, 0x9, 0x3, 0xcb, 0x4, 0x4, 0x5c, 0x6, 0x1ff, 0x5, 0xfffff585, 0x1ffe0000, 0x2, 0xb6d6, 0xb, 0x4, 0x4, 0xffffffff, 0x2, 0xffffff90, 0xfffffff9, 0x70b8, 0x7, 0x200003, 0x8, 0x5, 0x7a8, 0x200, 0x10, 0x0, 0x1, 0x0, 0x5, 0x4, 0x80, 0x4, 0x81, 0x100, 0x100, 0x3, 0x4, 0x6, 0x76da, 0x5, 0x1c00000, 0x90, 0x101, 0x5, 0x7ff, 0x3ff, 0x0, 0x0, 0x850d, 0xeb2, 0x7fff, 0x5, 0x5, 0xa, 0x9, 0x80000001, 0x101, 0x8, 0x3, 0x1, 0x9, 0x0, 0x2, 0x8, 0x8, 0x1, 0x5, 0x8, 0x10000, 0xc66a9d8, 0x10001, 0xfd, 0xac8, 0x2, 0x9, 0x88, 0x800, 0x7, 0x101, 0x3, 0xfffffffe, 0x3, 0x1, 0x1, 0x5, 0x3, 0x5, 0x5, 0x2634, 0x6, 0x7f, 0x3, 0x6, 0x10, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6, 0xffffffff, 0x5, 0x5, 0xffff, 0xfd48, 0x0, 0x50000000, 0x400, 0x4, 0x9933, 0xfffffffc, 0x7, 0x2fa405f3, 0xfff, 0x0, 0x2, 0x0, 0x4, 0x7, 0x24, 0x2, 0x6, 0x1, 0x6, 0x0, 0x5, 0x0, 0x7, 0x3ff, 0x8, 0xaef4, 0x3, 0x1000, 0x3, 0xf, 0x8, 0x9, 0x3, 0x9, 0xffffffff, 0x1, 0x4, 0x6, 0x5, 0x8, 0x6, 0x4, 0x9, 0xffffffff, 0x8, 0x7, 0x1, 0x81, 0x7f, 0x4, 0x2, 0xfd, 0x8, 0x8, 0x9, 0x9, 0x3774, 0x7, 0x101, 0x2, 0x1, 0x7fffffff, 0x2, 0x8000, 0x1ff, 0xa, 0x4, 0x7, 0x0, 0x7fff, 0x10000, 0x985, 0x4, 0x80000001, 0xffff, 0x5, 0x18000, 0x4, 0x8, 0x4, 0x4, 0x3, 0x6, 0x6, 0x9, 0xfffffffc, 0x3ff, 0x7fffffff, 0x71, 0xb, 0x3, 0x302d, 0x2, 0x82cb, 0x6, 0x6, 0xf1, 0xb, 0xd, 0x6, 0x3, 0x95, 0x17, 0x5863, 0x7, 0x8d, 0x4, 0x5, 0x9, 0xe, 0x8, 0x200, 0x8001, 0xfff, 0x4, 0x7, 0x200, 0xbfff, 0x1, 0x3, 0xfffffc00, 0x2, 0x5, 0x5, 0x41c00, 0x2, 0x6773, 0x606, 0x17ce, 0xc2, 0x5, 0x7, 0x7fffffff, 0xe00, 0x8, 0x4, 0xf, 0xff, 0xca5, 0xfffffffe, 0x3, 0x3, 0x3ff, 0x2f5, 0x0, 0x10, 0x9c2a, 0x3ff, 0x80010000, 0x3, 0x1, 0xa, 0x1, 0x40, 0x49, 0x7, 0x7, 0xffffffef, 0x7, 0x9, 0xfb, 0x200, 0x5, 0x6, 0x6, 0x595e, 0x3, 0x0, 0xc, 0x6f, 0x7, 0x6, 0x8, 0x2, 0x2, 0x8, 0xe, 0xb, 0xfffffffd, 0x401, 0x5, 0x52, 0x1, 0x3, 0x401, 0x7fff, 0x1, 0x7f, 0x7, 0xd, 0x8, 0x9, 0xfffffff3, 0x2, 0x1595, 0xa2e, 0x9, 0x2, 0x181, 0x0, 0x100, 0x4, 0x1, 0x7, 0x0, 0x9, 0x3, 0xc86, 0x1, 0x8, 0x5, 0x6, 0x8, 0x6, 0x10000, 0xfffffffc, 0x0, 0xfffffffa, 0x81, 0x7, 0x1, 0x3, 0x22, 0x4d06ed49, 0x1000, 0x9, 0x0, 0x6, 0xfffffff7, 0x10001, 0xb, 0xfff, 0x8, 0x1, 0x3, 0x1, 0xfffffff8, 0x14cb, 0x80000001, 0x7, 0x8, 0x1, 0x800, 0x1ff, 0x2, 0x4, 0xfffffffd, 0x7fffffff, 0x6]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x21b, 0x6, 0xf, 0x9, 0x4ab1, 0x29, 0xba, 0x9, 0xc0000000, 0x950, 0xb16, 0xe8, 0x3ff, 0x5, 0x9, 0x0, 0xffffffff, 0x2a96, 0xa9, 0x1, 0x84, 0x4, 0x9, 0xc, 0x2, 0x0, 0x1, 0xda, 0xff, 0x0, 0x5, 0x10000, 0x0, 0x40, 0x9, 0x7, 0x5, 0x7, 0x3, 0x3, 0x101, 0x6030, 0x25e, 0x7, 0x800, 0x0, 0xae1f, 0x77, 0xfffff8d6, 0x7, 0x2, 0x80000000, 0x6, 0x100, 0x8f80, 0x8, 0x6, 0x2, 0x0, 0x3, 0x8, 0x7, 0xfffffffd, 0x3, 0x96, 0xdbc3, 0x788c, 0xfffffff8, 0x8, 0x5, 0x52, 0xfde4, 0x80000000, 0x5, 0x0, 0x6, 0x6, 0x0, 0x400, 0x3efb0fa2, 0x7, 0x2, 0x6, 0x401, 0x7fff, 0x1, 0x2, 0x7a, 0x6, 0x5, 0xff, 0x2, 0xfffffff9, 0xf, 0x80000000, 0x1, 0x0, 0xf473, 0x32, 0xbf1, 0x80000001, 0x100, 0x0, 0x1, 0xfff, 0x6, 0xff, 0x7fff, 0x583, 0x8e9, 0x80000000, 0xd1c, 0x0, 0x5, 0x6, 0x8, 0x1, 0x7ff, 0x1ff, 0x3eb1, 0x5, 0x4fb, 0x80000000, 0x3, 0x84e, 0x1, 0x6, 0x800, 0xfff, 0xc2d, 0xfffffeff, 0x6, 0xacfe, 0x5, 0xfffffffa, 0x3, 0x0, 0xfffffff1, 0xfffffffd, 0x7, 0x7, 0x2, 0x5, 0x3f, 0xd, 0x8, 0x4, 0x3, 0x200, 0x7, 0x5, 0x2, 0x3a, 0x5, 0x80, 0x8, 0x2, 0xcd5, 0x6, 0xfffff919, 0x2, 0x8, 0x6, 0x7ca6, 0x6, 0x8, 0x35, 0x4, 0x46, 0x4, 0x3, 0x800000, 0x3, 0x0, 0x5, 0xdb, 0x3ff, 0xfd2, 0x2, 0x1000, 0x0, 0x4d4, 0x6, 0x400, 0x7, 0x2, 0x100, 0x8, 0x7fff, 0x3, 0x400, 0xfffffffa, 0x9, 0x593, 0x3, 0x74cd5364, 0x8, 0x80000, 0x1000, 0x200, 0xfffffffa, 0x2, 0x300000, 0x7, 0x5, 0xb8, 0x200, 0x4a, 0x9, 0x75, 0x8, 0x1, 0x4, 0x0, 0x0, 0x5, 0x5f, 0xfffffff4, 0x7e, 0x8, 0x2, 0x1, 0x2, 0x1, 0x7, 0xfffffff7, 0x3, 0x7f, 0x4, 0x2, 0x2477, 0x7, 0xd, 0x4, 0x5a, 0x1200000, 0x3, 0xbc702f1, 0x5, 0x2, 0x4, 0x2, 0xfffffff9, 0xa, 0x1, 0x2, 0x97, 0x7fff, 0xfff, 0x7, 0xe, 0x6, 0xbb7, 0x9, 0x2, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8bf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x20000000, 0x4, 0x5, 0x9, {0xf, 0x2, 0x400, 0x53b1, 0x7}, {0xff, 0x0, 0xf801, 0x2, 0x0, 0x1}, 0x652, 0x40, 0x93219573}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0x6, 0x8, 0xff, 0xb, 0x8, 0x0, 0x1, 0x3ff, 0x4, 0x1, 0xc0, 0x4, 0x200, 0x3, 0x2, 0x1ff, 0xc, 0x8000, 0x9, 0x3, 0x52, 0x80000001, 0x99e, 0x2, 0xc, 0x2, 0x8, 0x4, 0x5a, 0x6c5, 0x6, 0x4000000, 0xfffffffe, 0x1, 0xd, 0x9, 0x5, 0x6, 0x10, 0x1, 0x8, 0xfe6, 0x4, 0xffffffff, 0x1000, 0x8, 0x0, 0x8b0, 0xaf, 0x0, 0xd4c5, 0x101, 0x3ff0, 0xa, 0x2, 0x5, 0x9, 0x2, 0x6, 0x3f3a146c, 0x9, 0x3, 0x2, 0xfffffff7, 0x8001, 0x7f, 0x0, 0x7, 0x1c000000, 0x2, 0xffff47f9, 0x8, 0x68, 0xb, 0x1, 0x5, 0xffff, 0xb, 0x0, 0x571, 0x5, 0xfffffff0, 0x0, 0x1, 0x401, 0x7, 0xd, 0x7fff, 0x7, 0xffffff43, 0x0, 0x3, 0x80000000, 0x0, 0x7f, 0xd1, 0x0, 0x120, 0x800, 0xa, 0xf5, 0x6, 0x4, 0x3, 0x8, 0x6, 0x6, 0xf208, 0x0, 0x1, 0x3, 0x1, 0x9, 0x6, 0xe, 0x2e6, 0x800, 0x8, 0x200, 0x2, 0x10001, 0x9, 0x4, 0x10, 0x2, 0x9, 0x1, 0x6, 0xffffffff, 0x6, 0xf, 0x8, 0xfffffffa, 0x6, 0x6, 0x1, 0x1, 0x86, 0x1, 0xfffff13d, 0x83, 0x1, 0x3, 0xfffffffd, 0xffff8000, 0x4, 0x2, 0x10000, 0x2, 0x4dc, 0x9, 0x3, 0x18, 0x200, 0x8, 0x59, 0x6, 0x1, 0x59e, 0x7fffffff, 0x1, 0x5, 0xd5, 0x7f, 0xfff, 0x7, 0x8, 0x4, 0x200000, 0x3, 0x101, 0x1, 0xd9, 0x0, 0x6, 0x0, 0x8, 0x6, 0x0, 0x2, 0x3, 0xa8b, 0x1, 0x3, 0xbd, 0x2, 0x3, 0x7f, 0x5, 0x1ff, 0xffffffff, 0x40, 0x1, 0x75, 0xcc, 0x0, 0xd, 0x4, 0x5, 0x1, 0x7ff, 0xffffff81, 0x101, 0x80000001, 0x1d, 0x9, 0x9, 0xf, 0x705, 0x2, 0xd, 0x77b5, 0x83aa, 0x6, 0x7, 0xfffffff7, 0x6, 0x7, 0x6, 0x1000, 0x5bf6, 0x4, 0x6, 0x1, 0x7fffffff, 0x8, 0x8, 0x7ff, 0xf, 0x8, 0x8, 0x83, 0x3, 0x6, 0x1, 0x1bccaa1, 0xb91, 0x5, 0x5, 0x401, 0x33014667, 0x400, 0xfff, 0x1, 0xfff, 0x6, 0x3, 0x4fd, 0x8, 0x10000, 0x5, 0x200, 0x5, 0x170800]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x3, 0x9, 0x7, 0x1, {0x0, 0x2, 0x5, 0xfffa, 0x800, 0x5}, {0x2b, 0x2, 0xdb5, 0x7f, 0x2}, 0x1ff, 0x8, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x200, 0xffff, 0x24, 0x7, 0x6, 0x0, 0x1e00, 0x5, 0x80000001, 0x7fffffff, 0x2, 0x5, 0xd800000, 0x7ff, 0x4, 0x4, 0x3, 0xbaa6, 0x0, 0x4, 0x2, 0x39, 0x1, 0x7f, 0x2, 0xd7a, 0xd, 0x5fc, 0x8000, 0x39, 0x1ff, 0xb0, 0xf, 0x2, 0x7, 0x4, 0x2cb6ad4e, 0x3de, 0x6, 0x2, 0x8b, 0x4, 0x9, 0x8, 0xfff, 0x191, 0x0, 0xb00, 0x20000, 0x5, 0x3, 0x7, 0x8, 0x7, 0x2, 0x6, 0x80000001, 0x101, 0x2, 0x3, 0xd2, 0x5, 0x4, 0xe8, 0x8, 0x80de, 0x4, 0x9, 0x6800, 0x40, 0x1, 0x4000000, 0x5, 0x400, 0x6, 0xe, 0x800, 0x0, 0x2, 0x3, 0x5, 0x17f, 0x2, 0x5, 0x7f9, 0x6, 0x3, 0xfff, 0x5, 0x81, 0x7f, 0xf, 0xa9f, 0x7, 0x5, 0x3ff, 0x3ff, 0xfffe000, 0xffffffff, 0x200, 0x9, 0x2, 0x75, 0x7fff, 0x10001, 0xd06a, 0xfff, 0x81, 0x8, 0x2, 0x9dd4, 0xa, 0x600000, 0x6a7875c5, 0x6, 0x401, 0x7, 0x2491, 0x0, 0x881, 0x4, 0x7, 0xb4, 0x0, 0x4, 0x10, 0x2, 0x3, 0x1, 0x8, 0x1, 0x0, 0x4, 0xa7, 0xd5e, 0x3, 0x7, 0x5, 0x19, 0x8, 0x9, 0x7, 0x0, 0x3, 0xff, 0x6, 0x40, 0x8, 0x3ff, 0x0, 0x9, 0x59, 0x9, 0x7, 0xee52, 0x8001, 0x82a, 0x401, 0xad, 0x1e, 0x9, 0x6, 0x61, 0xe, 0xbe, 0x8, 0x9, 0x7c03, 0xc2, 0x80dc, 0x9, 0x6000, 0xd, 0x3, 0xea6, 0x8, 0x8, 0x2, 0x400, 0x7, 0x7ff, 0x81, 0xbe, 0xdf5e, 0x6, 0x2, 0x59341803, 0x0, 0x7, 0xffffffff, 0x9, 0x9, 0x8, 0x80000000, 0x27ca, 0x28a4511c, 0x51c, 0xe, 0x1, 0x9, 0x9, 0x5, 0x80000000, 0x6, 0x6, 0x0, 0x7, 0x80000001, 0xefab, 0x80, 0xb7a1, 0x1ff, 0x0, 0x8, 0xff, 0x3, 0x12, 0x6, 0xbc59, 0x9, 0xab, 0x8, 0xf5, 0x9, 0xfffffffd, 0x7ff, 0x7ff, 0x1d37, 0x800, 0x7, 0x7, 0xfffffe01, 0x8, 0x7df, 0x7, 0x100, 0x0, 0x6, 0xfff, 0x7ff, 0xc418, 0x0, 0x80000001, 0x3, 0x469, 0x11e02897, 0x547dc0f4, 0x4, 0x1, 0xffc00000, 0x0, 0x6, 0x6, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4e, 0x6, "339b86a183600b492823c792a9a7b4e9cd7377e686c4bc06fb703db60b248e1173729d9178d9d48d1f2697edc8e3d6c95056f0bc7154ef230f6ac3e2ab84a5fd3e89eaf0a0978108a5ec"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0xec, 0x2, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x1e, 0x6, './cgroup.cpu/cgroup.procs\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x0, 0x8, 0x1, 0x4e}}]}, {0x8b, 0x6, "0361e748448d0a97167685d8112cf4cba4331422c47f39bd81b6852468bd88a1411bc72be8bf341d9e71f75fa357ef31c6856003db2218d3cef2e164bc125537bc758f6cb24b095b258ce89e33db2f3bde4554aa6c2f72d4b5d04bd71d64dfc2117f490177dde0e91bc53f3ea48cf29b1d6711308c932f41534a123328135d78953d3746a2c7c1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0xd8, 0x11, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x6, 0xb, 0x1ff}, 0x5f}}]}, {0x8f, 0x6, "eb1b65b23a2eefdaa9e9c59771a030344e822adfe7e7236800c7641797f0b03de2d5ec08295913a2480198a66232867da4f5e893a8dc3fb534fe64e69c530d156f1c149101079ead790712e390fa97834d4726b7f462515f8f784fe330a106332028b58298f85fd8638e896c73919875da6c940f08715651c9662a8fdb6c121d214ce3c60db4928236ac6e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xb8225112d9d92090, 0x3}}}}, @m_mirred={0x1a4, 0x9, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1a6f24f3, 0x8, 0x6, 0x1, 0x4800}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x8e96, 0x10000000, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x786, 0x3, 0xb2105a94def58939, 0x81, 0x256461c9}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7, 0x1, 0x2, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x800, 0x20000000, 0x9, 0x400}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xf, 0x20000000, 0x9, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x200, 0x6, 0x10, 0xfffff02c}, 0x1}}]}, {0x98, 0x6, "b5a090123e4ec9a88272ca743b34a97cfb023cd178aea389180968de456c2f8cb8ebd70bccccf8dac15e0608df2c44cf21408f83fad52348b822812e9636e895e50e2722bfdf971d8bd7ff5e7bcb38acca1b0b5fbeef05f28f16b2f1769a02d334e12240fb49e936ea038eab1ecd12970bf95d54beea3751a7d2a2c0e63a8608ff00a87cbe98c92a7b75534fb226ffb7e4f6d3eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x7c, 0x9, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3238e}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9913}, @TCA_MPLS_BOS={0x5}]}, {0x26, 0x6, "9760e5d86470db2aa36be284dfe066c106c61c3091756e4396846c8a0863d0652067"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x130, 0x7, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}]}, {0xc6, 0x6, "7c74cd30dd01c65f186e988888386371969981e35fca88d9a1995384396e08ebc54ca55704bc2da4dade07ecf593bd771cde3598b0ed4cc0d777d9a3bcc37e120509db729ee85965112bce1edb8e57ece44b5090c0b18514a2b4aeed516ecb2a5e83ddcfb5d1c85868bc0addf3757d093ef802ccf2ad8da41478f35f2af9b67d2c2f6e7b2d373919ff3a1bb41d1f0e257ceee1aec5cdf6c8891a5c33ff4a0aad8d199d8b9761435638d5863305b5c411ed42809e2a7be8dd4cf8659bbea8308cc3a4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1f18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000003c0)=@nullb, r2, &(0x7f00000004c0)='./cgroup.cpu/cgroup.procs\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet6(r3, 0x0, 0x0, 0x11) getrlimit(0xd, &(0x7f0000000040)) syz_io_uring_setup(0x1512, &(0x7f0000000300)={0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, r0}, &(0x7f0000000280), 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r0, 0x0, 0x3a) 2m47.710154837s ago: executing program 1 (id=1131): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='objagg_obj_create\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2m46.825707895s ago: executing program 1 (id=1136): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28a101e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) 2m46.769951087s ago: executing program 1 (id=1138): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x6, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) setresuid(0xee00, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) syz_emit_ethernet(0xd9, &(0x7f0000000200)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x7f, 0x0, {0x2b, 0x4, 0x1, 0x8, 0x5, 0x67, 0x0, 0xa, 0x33, 0x9, @multicast1, @multicast2, {[@noop, @rr={0x7, 0xb, 0x7, [@multicast2, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0x32, 0x1, 0x8, [{@empty, 0x9b73}, {@multicast2, 0x6}, {@local, 0x3}]}, @timestamp_addr={0x44, 0x44, 0xa3, 0x1, 0x1, [{@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfe1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6cb4}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@broadcast, 0xffffffff}, {@rand_addr=0x64010102, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast1, 0xfff}]}, @cipso={0x86, 0x1f, 0x2, [{0x1, 0xe, "eee1f35dfaf4b414776a3c61"}, {0x2, 0x2}, {0x2, 0x9, "a1f2ae5a73f5df"}]}, @ra={0x94, 0x4}, @noop, @rr={0x7, 0x7, 0xab, [@local]}]}}, "15bff5"}}}}}, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r7, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=virtio,tfltuil=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x401, 0x4, 0x3, @remote, 'ip6_vti0\x00'}) 2m46.56955943s ago: executing program 1 (id=1140): socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r2 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x2, 0x34325241, 0x3, @stepwise={0x7b1, 0x3, 0x4, 0x0, 0x6, 0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TCSETS(r5, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x80, 0x0, 0x11, "3eccd2000500"}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff000000000000", @ANYBLOB="4000ec01000000b00056b85f", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m46.554913511s ago: executing program 32 (id=1140): socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r2 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x2, 0x34325241, 0x3, @stepwise={0x7b1, 0x3, 0x4, 0x0, 0x6, 0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TCSETS(r5, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x80, 0x0, 0x11, "3eccd2000500"}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff000000000000", @ANYBLOB="4000ec01000000b00056b85f", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m6.479777118s ago: executing program 2 (id=1423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m6.286392389s ago: executing program 2 (id=1425): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0xfffffffffffffffe, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x7c}}, 0x8010) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x3, 0x0, @private=0xa010100, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x13}}}}}}}, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000240)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)) syz_emit_ethernet(0x52, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='squashfs\x00', 0x8, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2m4.898957446s ago: executing program 2 (id=1432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd287100000000000001090224000100"], 0x0) shutdown(r0, 0x1) 2m3.489622092s ago: executing program 2 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m3.459942926s ago: executing program 2 (id=1439): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='objagg_obj_create\x00', r4}, 0x18) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2m3.086979716s ago: executing program 2 (id=1445): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 2m3.012971781s ago: executing program 33 (id=1445): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 1m58.99970387s ago: executing program 5 (id=1446): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m58.936092445s ago: executing program 5 (id=1470): socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r2 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000000)={0x2, 0x34325241, 0x3, @stepwise={0x7b1, 0x3, 0x4, 0x0, 0x6, 0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TCSETS(r5, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x80, 0x0, 0x11, "3eccd2000500"}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff000000000000", @ANYBLOB="4000ec01000000b00056b85f", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m56.519556558s ago: executing program 5 (id=1482): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) creat(&(0x7f0000000100)='./file0\x00', 0x106) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m56.415436525s ago: executing program 34 (id=1482): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) creat(&(0x7f0000000100)='./file0\x00', 0x106) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 10.099366276s ago: executing program 4 (id=1854): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='objagg_obj_create\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 10.074003036s ago: executing program 4 (id=1857): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x64}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08060001080006040001aaaaaaaaaaaaac1414bb0180c2000000ffff"], 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x20000000}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f0000000780)=""/4110, 0x100e) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = io_uring_setup(0x673d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x500000}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 10.073479557s ago: executing program 3 (id=1859): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xe2940) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff9a, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x6}, 0xffffffff, 0xfffffffc, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0xa, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5}}, 0xe4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x334a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0xffff0000, @ipv4={'\x00', '\xff\xff', @dev}, 0x8}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r5, &(0x7f0000000300)=""/154, 0x9a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000010772030000000000000000070000081400078008000240000000060800014000000005"], 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@volatile}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@index_off}]}) socket$inet6(0xa, 0x1, 0x0) 2.444061923s ago: executing program 0 (id=1860): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = io_uring_setup(0x4668, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x1, 0xa2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000002f80)=""/4096, 0x1069}], 0x1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000001ec0), r0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r6}, 0x10) sysfs$2(0x2, 0x19, &(0x7f0000000080)=""/101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffd, &(0x7f00000001c0)) gettid() 2.434589371s ago: executing program 6 (id=1861): fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r2 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000000)={0x2, 0x34325241, 0x3, @stepwise={0x7b1, 0x3, 0x4, 0x0, 0x6, 0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TCSETS(r6, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x80, 0x0, 0x11, "3eccd2000500"}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff000000000000", @ANYBLOB="4000ec01000000b00056b85f", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.434018733s ago: executing program 4 (id=1862): syz_open_dev$radio(&(0x7f0000000080), 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write(r2, &(0x7f0000000040)="05000000010000", 0x7) write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x1, [0x0], [], [0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0xf, 0x8]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000100)={r10, 0x0, 0xffffffffffffffff}) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r12, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r11}) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.433855592s ago: executing program 3 (id=1863): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x0, 0x0, 0x9c6e, 0x0, 0x0}) sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socket$nl_crypto(0x10, 0x3, 0x15) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "4b38c3", 0x14, 0x29, 0x1, @local, @mcast2, {[], "59132926ac841b11e80c0220c53c3f58b562ec28"}}}}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xb, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab30", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000002c0), 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xaa2c5000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 2.422562002s ago: executing program 4 (id=1864): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='objagg_obj_create\x00', r5}, 0x18) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2.421055914s ago: executing program 0 (id=1865): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='objagg_obj_create\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2.420660524s ago: executing program 6 (id=1866): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {0x0, 0x9}, {0x9}, {0x1}, {0x8}, {0xfffffffa, 0x6}, {0x0, 0x997a}, {0x0, 0x4}], 0x0, 0x0, 0x4, 0x0, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet(0x2, 0x3, 0x5) ioctl$FS_IOC_GETVERSION(r3, 0x80047601, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000340)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000300)=0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) syz_init_net_socket$ax25(0x3, 0x5, 0xce) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r7, &(0x7f0000000140)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f0000000080)}], 0x2) 2.42041224s ago: executing program 3 (id=1867): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xe0c}}, 0x0) recvmmsg(r2, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/181, 0xb5}, {&(0x7f00000002c0)=""/144, 0x90}], 0x2}, 0x3}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}, 0xfffffff8}], 0x2, 0x10000, 0x0) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6401, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000c28000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r8, 0x708, 0x2) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000380)={0x0, 0x2, 0x5, &(0x7f00000003c0)={0x5, "14a6c63d876ff44271f1ac0700000018dab7299602aed03463604d70b41d4008e3"}}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r9 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x3, 0x1, 0x0, 0x2000, &(0x7f0000014000/0x2000)=nil}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000007300004000"]) 2.418111047s ago: executing program 0 (id=1868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x81}, 0x18) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) getsockname(r2, 0x0, &(0x7f00000101c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) socket$packet(0x11, 0x2, 0x300) mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000002c0)='ext3\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) r8 = syz_io_uring_setup(0x2705, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000001440)) io_uring_enter(r8, 0xa3d, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000002000010000000000000000000a80000000000001180001001400110076657468305f746f5f6873720000000014000100fc010000000000000000000000000000140003006c6f0000006e3ddb5499fb18d8000000"], 0x58}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44040}, 0x0) 2.417810283s ago: executing program 4 (id=1869): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f000003b000/0xf000)=nil, 0xf000, 0x1000006, 0x38011, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 2.416615468s ago: executing program 6 (id=1870): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r0, &(0x7f0000000200)=""/82, 0x52) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write(r2, &(0x7f00000003c0)="01", 0x1) splice(r2, &(0x7f0000000040), r1, 0x0, 0x3, 0x0) 2.416488108s ago: executing program 3 (id=1871): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000100060000"], 0x50) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\xb7\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca>\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce\b\x00\x00\x00$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\"K\f\x03i\xba', 0x0) 2.275096703s ago: executing program 3 (id=1872): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$drirender128(0xffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x100000021, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1, 0x0, [0x0], [0xf3], [0x5, 0x0, 0x2, 0x4], [0xffffffffffffffff, 0xfffffffefefffffc]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000280)={0x0, 0x101, 0x9, 0xfffffffe, 0x1, [0x0, 0x0, 0x0, 0x0], [0x6, 0x6, 0x8], [0x4, 0x9, 0x54, 0x6], [0x6c, 0x4, 0xa, 0x3]}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06464b8, &(0x7f0000000380)={r2, 0x72, 0xfd9, 0x1, 0x3, [r6, r7, r8, r9], [0x800, 0x5, 0x5, 0x5], [0x0, 0xc0, 0x3ff, 0xc9f4], [0x9, 0x8, 0x400, 0x5]}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="080000100414130425bd701508032b99b67298"], 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x880) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r12 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r11, &(0x7f0000000600)={'#! ', './file0', [], 0xa, "03fc8eee296910f45d1ec0471b454d448414a7984983f183fe6d09e46b22772701ef000000000000"}, 0x33) write$binfmt_script(r11, &(0x7f0000000300)={'#! ', './file1', [{0x20, 'GPL\x00'}, {0x20, '#! '}, {0x20, 'GPL\x00'}], 0xa, "2240c4c242628d833ddc9cb147cd4b8fef93251889434d1e386f9378d34abf3d099d16d539340c10bb19c58755c263d0d36f85cd13ad45bdd5d009933ff23bf34622d7eb12bfef1766a0d4013082be6ce09528e578803296b0a65b0220299939df95024ede918a58afcf3e16d0a71f19061b1018cc09c1b8aa0e965f5b281526f3226078aefaf50093269a2f29e98ed399c330f561242e319778460bdf8bb4aa044b2e72b491d1eeb3c20f32b04ce4eca4ca"}, 0xcb) write$UHID_INPUT(r11, &(0x7f0000002140)={0x8, {"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", 0x1000}}, 0x1006) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r12, 0x0) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) read$FUSE(r13, &(0x7f0000000540)={0x2020}, 0x2020) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r14, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r14, &(0x7f0000000000)="3f0000000100f4", 0x7) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r15, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) setsockopt(r10, 0x5, 0x7, &(0x7f0000000100)="f9af5161ada7465cb4ec2500af70a4f617f3f178915a0225b6f99b392369adc0b402b432001815e111e9d7756e976bbeb93e555f3e9e3d949cfdcb87b7159b17948dc3bafe9b7b81e769af", 0x4b) 2.207458249s ago: executing program 6 (id=1873): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0xcd8, 0x1, 0x30383653, 0x5, 0xdc, 0x0, 0x6, 0x4, 0x0, 0x4, 0x1, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') write$6lowpan_enable(r1, &(0x7f0000000340)='1', 0x1) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$unix(0x1, 0x5, 0x0) eventfd2(0x0, 0x1) setuid(0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000feffffff00"/27], 0x50) r3 = socket$inet(0x2, 0x1, 0xf) recvmmsg(r3, &(0x7f0000000300), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0), 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x7, 0x303, 0x100}}) socket$packet(0x11, 0x3, 0x300) clock_nanosleep(0x2, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000020c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x1f0, 0x94, 0x284, 0x284, 0x144, 0x35c, 0x35c, 0x35c, 0x35c, 0x35c, 0x6, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'vlan0\x00', 'veth1\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@ip={@rand_addr, @empty, 0x0, 0x0, 'dummy0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'caif0\x00', 'rose0\x00'}, 0x0, 0xb4, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x24}}]}, @TTL={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x44c) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020}, 0x2020) 1.971571068s ago: executing program 3 (id=1874): keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0xa, 0x85) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0100001000130400000000f9dbdf25fe800000000000000000000000000000ac1414bb000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000003200000064010100000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000200620000004c001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000041bfdbf000000000000000080000000"], 0x13c}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @thr={0x0, 0x0}}, 0x0) mremap(&(0x7f00008d0000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000f65000/0x3000)=nil) madvise(&(0x7f000078a000/0x1000)=nil, 0x1000, 0x12) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r5 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r5, 0x1, 0x1012) socketpair$unix(0x1, 0x1, 0x0, 0x0) getpgid(0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_usb_connect$cdc_ncm(0x4, 0xffffffffffffff52, 0x0, 0x0) write(r4, &(0x7f0000000340)="07000000010000", 0x7) 1.372074315s ago: executing program 0 (id=1875): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x5c7}], 0x1}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) futex(&(0x7f0000000040)=0x1, 0x8, 0x1, 0x0, 0x0, 0xfffffffd) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @empty}], 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r2 = socket$inet6(0xa, 0x80000, 0x0) listen(r2, 0x101) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x3}}, 0x18) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_open_dev$vim2m(&(0x7f0000000000), 0x12, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setpgid(0x0, 0x0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="a637016f65de46fc", 0x8}], 0x1}}], 0x1, 0x800) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000004b00)=0x52, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000102, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f0000000800)=0xfffffffffffffd14) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e04046d0c"], 0x7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0xfffffff9, 0x7, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x66, 0x0, 0x9, 0x29, 0x0, @broadcast, @empty}}}}) connect(r8, &(0x7f0000000780)=@can={0x1d, r9}, 0x80) 1.264754917s ago: executing program 6 (id=1876): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, &(0x7f0000000500), 0x0, 0x48004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x500, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) poll(&(0x7f0000000080)=[{r7, 0x8024}], 0x1, 0xfffffff9) 1.192178198s ago: executing program 0 (id=1877): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x40}}], {0x14}}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe79, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x7ac}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) 596.36953ms ago: executing program 4 (id=1878): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000001c0)) close(r6) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socket$inet(0x2, 0x80000, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$UHID_CREATE2(r10, 0x0, 0x1000) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}]}, 0x30}, 0x1, 0x7}, 0x0) unshare(0x22020400) 42.201142ms ago: executing program 0 (id=1879): socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, &(0x7f0000000100)='./mnt\x00', 0x261) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendto$inet6(r3, &(0x7f0000000100)="80000fdc2208", 0x6, 0x880, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b11a4000000000066b60000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcd, &(0x7f0000000400)=""/205, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c6ba6bef4a1c4e384d8c033ed7a80ffdfef0f000060000000a2bc5603ca00000f7f8900000008000000372471083ec6991778581acb6c01", 0x48}], 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat(r6, &(0x7f0000000000)='./file0\x00', 0x10880, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x51) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000080)={0x28, 0x3, 0x0, r8, 0x9, 0x8000000000000001, 0x3ff}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000080)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000000), 0x2, 0x0) 0s ago: executing program 6 (id=1880): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0x80000007, 0x4, 0x0, 0x10, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3, 0x7fffffff, 0x5, 0xffff}, {0xb, 0xe5f, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0xb, 0x2bb, 0x0, 0xd, 0x3, 0x7ff, 0x400}, {0x40000001, 0x100, 0x4, 0x6, 0x3, 0x1, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff}]}) socket$inet(0x2, 0x80000, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) unshare(0x22020400) timerfd_create(0x9, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x100, 0x0, 0x10}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400}, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): bpf: Bad value for 'mode' [ 162.888351][ T7916] KVM: debugfs: duplicate directory 7916-10 [ 163.485685][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 163.874874][ T7918] Set syz1 is full, maxelem 65536 reached [ 164.395734][ T7939] loop6: detected capacity change from 0 to 524287999 [ 164.399691][ C3] blk_print_req_error: 25 callbacks suppressed [ 164.399706][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.404214][ C3] buffer_io_error: 25 callbacks suppressed [ 164.404225][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.420361][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.422815][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.425698][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.428241][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.430754][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.433284][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.435607][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.438136][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.440449][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.443027][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.445423][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.447974][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.450618][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.453177][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.455475][ T7939] ldm_validate_partition_table(): Disk read failed. [ 164.457408][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.459957][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.462147][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.464754][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.467187][ T7939] Dev loop6: unable to read RDB block 0 [ 164.469294][ T7939] loop6: unable to read partition table [ 164.470915][ T7939] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 164.543572][ T7940] loop6: detected capacity change from 524287999 to 524288000 [ 165.669353][ T7965] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 165.671519][ T7965] netlink: 784 bytes leftover after parsing attributes in process `syz.0.397'. [ 165.675285][ T7965] netlink: 'syz.0.397': attribute type 10 has an invalid length. [ 167.265220][ T7988] syz.2.411: attempt to access beyond end of device [ 167.265220][ T7988] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 167.290455][ T7988] XFS (nbd2): SB validate failed with error -5. [ 167.984082][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 168.532277][ T8006] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 168.534714][ T8006] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.538660][ T8006] vhci_hcd vhci_hcd.0: Device attached [ 168.792937][ T63] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 169.687234][ T8007] vhci_hcd: connection reset by peer [ 169.690610][ T1171] vhci_hcd: stop threads [ 169.691842][ T1171] vhci_hcd: release socket [ 169.693584][ T1171] vhci_hcd: disconnect device [ 170.530750][ T8025] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 170.794595][ T8034] fuse: Unknown parameter 'user_iM' [ 171.649999][ T8037] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 171.652551][ T8037] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 172.207825][ T8045] syz.1.416: attempt to access beyond end of device [ 172.207825][ T8045] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 172.213151][ T8045] XFS (nbd1): SB validate failed with error -5. [ 172.372683][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 172.536471][ T8065] bpf: Bad value for 'mode' [ 172.713346][ T8069] netlink: 'syz.0.421': attribute type 1 has an invalid length. [ 172.716454][ T8069] netlink: 244 bytes leftover after parsing attributes in process `syz.0.421'. [ 172.785841][ T8066] KVM: debugfs: duplicate directory 8066-10 [ 173.902908][ T63] vhci_hcd: vhci_device speed not set [ 174.582316][ T8094] syz.3.424: attempt to access beyond end of device [ 174.582316][ T8094] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 174.586092][ T8094] XFS (nbd3): SB validate failed with error -5. [ 174.969231][ T8103] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 175.113064][ T5962] Bluetooth: hci3: command 0x0405 tx timeout [ 175.263126][ T63] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 175.412945][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 175.421158][ T63] usb 6-1: unable to get BOS descriptor or descriptor too short [ 175.424635][ T63] usb 6-1: config 15 has an invalid interface number: 189 but max is 1 [ 175.426941][ T63] usb 6-1: config 15 has an invalid interface number: 186 but max is 1 [ 175.429245][ T63] usb 6-1: config 15 has no interface number 0 [ 175.431024][ T63] usb 6-1: config 15 has no interface number 1 [ 175.432922][ T63] usb 6-1: config 15 interface 189 altsetting 168 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 175.436206][ T63] usb 6-1: config 15 interface 189 altsetting 168 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 175.439273][ T63] usb 6-1: config 15 interface 189 altsetting 168 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 175.442356][ T63] usb 6-1: config 15 interface 189 altsetting 168 has a duplicate endpoint with address 0x4, skipping [ 175.445634][ T63] usb 6-1: config 15 interface 189 altsetting 168 bulk endpoint 0x1 has invalid maxpacket 16 [ 175.448427][ T63] usb 6-1: config 15 interface 189 altsetting 168 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 175.451499][ T63] usb 6-1: config 15 interface 189 altsetting 168 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 175.454685][ T63] usb 6-1: config 15 interface 186 altsetting 129 has a duplicate endpoint with address 0x1, skipping [ 175.457831][ T63] usb 6-1: config 15 interface 186 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 175.460839][ T63] usb 6-1: config 15 interface 186 altsetting 129 has a duplicate endpoint with address 0x9, skipping [ 175.463918][ T63] usb 6-1: config 15 interface 186 altsetting 129 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 175.467235][ T63] usb 6-1: config 15 interface 186 altsetting 129 has a duplicate endpoint with address 0x7, skipping [ 175.470339][ T63] usb 6-1: config 15 interface 189 has no altsetting 0 [ 175.472250][ T63] usb 6-1: config 15 interface 186 has no altsetting 0 [ 175.481416][ T63] usb 6-1: New USB device found, idVendor=14aa, idProduct=0002, bcdDevice=77.e0 [ 175.484099][ T63] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.486340][ T63] usb 6-1: Product: 䯚ç‰ã©¶ê¹­ã“«î­©ê´‹í—栣➙é‘㗚ṫ関턂毵á©ê‘Œë Žâ‰ë¥±í”Œë©°ä©¨ê„¢æ±–è·ší‹ë‰±å¢¸â°•ì¸¥à¯¸ï¿à»ºá¨½î‚•ë„–箼벟鎑䰫澂貛䳬멉澃y䥬ꠓ⨒࠿ൗ鷉캫ᨉᑎ웹滉å–췿㊳릣ê“넂낧뗶äŠïŒ»â¤€ã®•è”å®å”´å…™ä³—ë·çŠ äŒ‡ä…ટ戚僘ꃎ奮é„ã˜í‚“ꌤȇ褰熥뢈촵ä‡î¦”è¯ì‹“ä•î•ä¶“ê­’ë„廬ᷭã³ã‘‡Þ¼ä•ëŽ™ [ 175.503024][ T63] usb 6-1: Manufacturer: 鳂薢ê¸è…€á´€ë—®éŒ‚å¯ç‚¨æªˆà´¤î„“棚ペᴭî©äˆç»šë®ƒï “è¦ã¬–⹤㌤➧煪椡粵饂橳ᨤ [ 175.512937][ T63] usb 6-1: SerialNumber: à³› [ 175.679805][ T8114] syz.0.426: attempt to access beyond end of device [ 175.679805][ T8114] nbd0: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 175.683644][ T8114] XFS (nbd0): SB validate failed with error -5. [ 177.392633][ T63] dvb-usb: found a 'AVerMedia AverTV DVBT USB1.1' in warm state. [ 177.396460][ T63] dvb-usb: bulk message failed: -71 (3/0) [ 177.417248][ T63] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.420605][ T63] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVBT USB1.1) [ 177.423076][ T63] usb 6-1: media controller created [ 177.431040][ T63] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.439987][ T63] dvb-usb: bulk message failed: -71 (6/0) [ 177.441786][ T63] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVBT USB1.1' [ 177.445486][ T63] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input6 [ 177.450694][ T63] dvb-usb: schedule remote query interval to 150 msecs. [ 177.453177][ T63] dvb-usb: bulk message failed: -71 (3/0) [ 177.472884][ T63] dvb-usb: AVerMedia AverTV DVBT USB1.1 successfully initialized and connected. [ 177.479988][ T63] dvb-usb: found a 'AVerMedia AverTV DVBT USB1.1' in warm state. [ 177.483465][ T63] dvb-usb: bulk message failed: -71 (3/0) [ 177.504043][ T63] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.507486][ T63] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVBT USB1.1) [ 177.509898][ T63] usb 6-1: media controller created [ 177.519386][ T63] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.530632][ T63] dvb-usb: bulk message failed: -71 (6/0) [ 177.533092][ T63] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVBT USB1.1' [ 177.537901][ T63] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input7 [ 177.545044][ T63] dvb-usb: schedule remote query interval to 150 msecs. [ 177.548593][ T63] dvb-usb: bulk message failed: -71 (3/0) [ 177.562924][ T63] dvb-usb: AVerMedia AverTV DVBT USB1.1 successfully initialized and connected. [ 177.567921][ T63] usb 6-1: USB disconnect, device number 3 [ 177.616096][ T63] dvb-usb: AVerMedia AverTV DVBT USB1.1 successfully deinitialized and disconnected. [ 177.635761][ T63] dvb-usb: AVerMedia AverTV DVBT USB1.1 successfully deinitialized and disconnected. [ 177.825306][ T8143] bpf: Bad value for 'mode' [ 177.964290][ T8150] KVM: debugfs: duplicate directory 8150-10 [ 178.569481][ T8160] fuse: Unknown parameter 'user_iM' [ 181.890492][ T8205] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 181.892102][ T8205] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.896074][ T8208] overlayfs: missing 'lowerdir' [ 181.896137][ T8205] vhci_hcd vhci_hcd.0: Device attached [ 182.009961][ T8212] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 182.063723][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 182.158804][ T57] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 182.750772][ T8207] vhci_hcd: connection reset by peer [ 182.782392][ T46] vhci_hcd: stop threads [ 182.783995][ T46] vhci_hcd: release socket [ 182.786939][ T46] vhci_hcd: disconnect device [ 183.174638][ T8227] syz.3.450: attempt to access beyond end of device [ 183.174638][ T8227] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 183.178436][ T8227] XFS (nbd3): SB validate failed with error -5. [ 185.249598][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 186.476000][ T8290] random: crng reseeded on system resumption [ 186.568174][ T8291] syz.0.465: attempt to access beyond end of device [ 186.568174][ T8291] nbd0: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 186.601006][ T8291] XFS (nbd0): SB validate failed with error -5. [ 187.295770][ T57] vhci_hcd: vhci_device speed not set [ 187.346014][ T8302] random: crng reseeded on system resumption [ 188.159739][ T8320] 9pnet_virtio: no channels available for device syz [ 189.506294][ T8337] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 189.508536][ T8337] netlink: 784 bytes leftover after parsing attributes in process `syz.1.474'. [ 189.516605][ T8337] netlink: 'syz.1.474': attribute type 10 has an invalid length. [ 190.412563][ T8362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.494236][ T8363] random: crng reseeded on system resumption [ 190.929487][ T8372] 9pnet_fd: Insufficient options for proto=fd [ 191.203003][ T2297] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 191.394493][ T8378] random: crng reseeded on system resumption [ 191.735468][ T2297] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 191.737775][ T2297] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.740565][ T2297] usb 5-1: config 0 has no interface number 0 [ 191.743314][ T2297] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.746841][ T2297] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 191.749768][ T2297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.753371][ T2297] usb 5-1: config 0 descriptor?? [ 191.759305][ T2297] ldusb 5-1:0.55: Interrupt in endpoint not found [ 192.084683][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 193.493025][ T8394] SET target dimension over the limit! [ 193.525782][ T6013] usb 5-1: USB disconnect, device number 2 [ 193.600281][ T8405] netlink: 'syz.2.488': attribute type 1 has an invalid length. [ 193.610498][ T8405] netlink: 784 bytes leftover after parsing attributes in process `syz.2.488'. [ 193.634525][ T8405] netlink: 'syz.2.488': attribute type 10 has an invalid length. [ 193.684223][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.686337][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.136493][ T8485] random: crng reseeded on system resumption [ 197.717872][ T8500] netlink: 68 bytes leftover after parsing attributes in process `syz.3.506'. [ 197.725000][ T8500] ISOFS: Unable to identify CD-ROM format. [ 199.340557][ T8532] Cannot find add_set index 3 as target [ 202.046143][ T8581] random: crng reseeded on system resumption [ 202.228271][ T8588] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.309759][ T8588] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.684925][ T8588] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.939635][ T8588] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.060538][ T8588] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.068679][ T8588] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.075359][ T8588] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.083476][ T8588] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.765587][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'. [ 206.352064][ T40] audit: type=1800 audit(1742422218.514:50): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.550" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 206.359114][ T5961] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 206.833822][ T8694] dccp_invalid_packet: P.Data Offset(10) too large [ 206.938142][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 207.084542][ T8694] syz.1.551: attempt to access beyond end of device [ 207.084542][ T8694] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 207.089565][ T8694] SQUASHFS error: Failed to read block 0x0: -5 [ 207.091813][ T8694] unable to read squashfs_super_block [ 207.142551][ T8715] veth1_macvtap: left promiscuous mode [ 207.452451][ T8720] random: crng reseeded on system resumption [ 207.872946][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'. [ 210.152984][ T8771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.286479][ T8779] 9pnet_virtio: no channels available for device syz [ 210.345600][ T8781] netlink: 68 bytes leftover after parsing attributes in process `syz.0.567'. [ 210.350948][ T8781] ISOFS: Unable to identify CD-ROM format. [ 210.377640][ T5961] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 210.379683][ T5961] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 214.970458][ T8904] random: crng reseeded on system resumption [ 219.922954][ T5962] Bluetooth: hci3: command 0x0405 tx timeout [ 222.499328][ T9035] dccp_invalid_packet: P.Data Offset(10) too large [ 224.256430][ T9073] netlink: 'syz.0.623': attribute type 11 has an invalid length. [ 224.424072][ T9075] random: crng reseeded on system resumption [ 224.573649][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 227.535265][ T9144] netlink: 'syz.3.638': attribute type 3 has an invalid length. [ 229.322847][ T9175] dccp_invalid_packet: P.Data Offset(10) too large [ 229.338578][ T9175] syz.2.642: attempt to access beyond end of device [ 229.338578][ T9175] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 229.342160][ T9175] SQUASHFS error: Failed to read block 0x0: -5 [ 229.344014][ T9175] unable to read squashfs_super_block [ 230.362950][ T40] audit: type=1326 audit(1742422242.524:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.646" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf739e579 code=0x0 [ 231.947848][ T9222] dccp_invalid_packet: P.Data Offset(10) too large [ 231.961080][ T9222] syz.1.661: attempt to access beyond end of device [ 231.961080][ T9222] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 231.964928][ T9222] SQUASHFS error: Failed to read block 0x0: -5 [ 231.967180][ T9222] unable to read squashfs_super_block [ 232.246327][ T9239] random: crng reseeded on system resumption [ 232.388755][ T9241] dccp_invalid_packet: P.Data Offset(10) too large [ 232.494198][ T9241] syz.0.655: attempt to access beyond end of device [ 232.494198][ T9241] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 232.512957][ T5324] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 232.520288][ T9241] SQUASHFS error: Failed to read block 0x0: -5 [ 232.525472][ T9241] unable to read squashfs_super_block [ 232.617619][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.657'. [ 232.621007][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.657'. [ 232.667866][ T5324] usb 7-1: config 0 interface 0 has no altsetting 0 [ 232.670280][ T5324] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 232.673449][ T5324] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.685112][ T5324] usb 7-1: config 0 descriptor?? [ 232.912702][ T5961] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 232.919797][ T5324] usbhid 7-1:0.0: can't add hid device: -71 [ 232.921760][ T5324] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 232.926306][ T5324] usb 7-1: USB disconnect, device number 2 [ 234.309789][ T9283] ieee802154 phy0 wpan0: encryption failed: -90 [ 234.320917][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 234.326562][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 234.329213][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 234.331643][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 234.334303][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 234.336716][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 234.340266][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 234.340314][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 238.184720][ T9375] netlink: 'syz.2.693': attribute type 10 has an invalid length. [ 238.187504][ T9375] syz_tun: entered promiscuous mode [ 238.191238][ T9375] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 238.309414][ T9381] usb usb7: usbfs: process 9381 (syz.0.703) did not claim interface 0 before use [ 238.965662][ T5961] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 240.523757][ T9443] 9pnet_virtio: no channels available for device syz [ 241.311295][ T9480] __nla_validate_parse: 43 callbacks suppressed [ 241.311311][ T9480] netlink: 132 bytes leftover after parsing attributes in process `syz.3.723'. [ 241.433063][ T5962] Bluetooth: hci3: command 0x0405 tx timeout [ 242.876292][ T9540] mac80211_hwsim hwsim5 ÿÿÿÿÿÿ: renamed from wlan1 [ 243.965116][ T9554] 9pnet_virtio: no channels available for device syz [ 245.303003][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 245.464329][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 245.470470][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.474428][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 245.477485][ T10] usb 8-1: SerialNumber: syz [ 245.768872][ T10] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 245.787695][ T9617] netlink: 72 bytes leftover after parsing attributes in process `syz.1.755'. [ 245.790529][ T10] usb 8-1: USB disconnect, device number 3 [ 246.072944][ T5962] Bluetooth: hci3: command 0x0405 tx timeout [ 248.162917][ T5961] Bluetooth: hci3: command 0x0405 tx timeout [ 248.199101][ T9697] dccp_invalid_packet: P.Data Offset(10) too large [ 248.212089][ T9697] syz.0.772: attempt to access beyond end of device [ 248.212089][ T9697] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 248.217326][ T9697] SQUASHFS error: Failed to read block 0x0: -5 [ 248.219502][ T9697] unable to read squashfs_super_block [ 250.437910][ T9765] dccp_invalid_packet: P.Data Offset(10) too large [ 252.520778][ T9818] dccp_invalid_packet: P.Data Offset(10) too large [ 252.557838][ T9818] syz.3.799: attempt to access beyond end of device [ 252.557838][ T9818] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 252.563436][ T9818] SQUASHFS error: Failed to read block 0x0: -5 [ 252.565953][ T9818] unable to read squashfs_super_block [ 253.489894][ T63] hid-generic 0003:0003:FFFFFFFD.0002: unknown main item tag 0x0 [ 253.498576][ T63] hid-generic 0003:0003:FFFFFFFD.0002: unknown main item tag 0x0 [ 253.515700][ T63] hid-generic 0003:0003:FFFFFFFD.0002: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 255.117071][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.121487][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.186885][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'. [ 257.032985][ T6102] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 257.182980][ T6102] usb 6-1: Using ep0 maxpacket: 8 [ 257.188224][ T6102] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.196635][ T6102] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.204282][ T6102] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 257.209434][ T6102] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.219819][ T6102] usb 6-1: config 0 descriptor?? [ 257.433605][ T6102] usbhid 6-1:0.0: can't add hid device: -71 [ 257.435681][ T6102] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 257.442669][ T6102] usb 6-1: USB disconnect, device number 4 [ 257.683238][ T9985] syz.2.849: attempt to access beyond end of device [ 257.683238][ T9985] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 257.687010][ T9985] SQUASHFS error: Failed to read block 0x0: -5 [ 257.728240][ T9985] unable to read squashfs_super_block [ 257.887076][ T9990] dccp_invalid_packet: P.Data Offset(10) too large [ 257.889873][ T9990] syz.0.850: attempt to access beyond end of device [ 257.889873][ T9990] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 257.893545][ T9990] SQUASHFS error: Failed to read block 0x0: -5 [ 257.895307][ T9990] unable to read squashfs_super_block [ 258.508211][ T63] hid-generic 0003:0003:FFFFFFFD.0003: unknown main item tag 0x0 [ 258.510881][ T63] hid-generic 0003:0003:FFFFFFFD.0003: unknown main item tag 0x0 [ 258.515359][ T63] hid-generic 0003:0003:FFFFFFFD.0003: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 258.627422][T10006] dccp_invalid_packet: P.Data Offset(10) too large [ 258.630188][T10006] syz.3.855: attempt to access beyond end of device [ 258.630188][T10006] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 258.633898][T10006] SQUASHFS error: Failed to read block 0x0: -5 [ 258.635626][T10006] unable to read squashfs_super_block [ 259.334130][T10033] tipc: Enabling of bearer rejected, failed to enable media [ 260.032916][ T9656] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 260.088473][ T5961] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 260.267130][ T9656] usb 6-1: unable to get BOS descriptor or descriptor too short [ 260.288157][ T9656] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 260.291207][ T9656] usb 6-1: can't read configurations, error -71 [ 260.791312][T10058] syz_tun: entered allmulticast mode [ 260.803551][T10057] syz_tun: left allmulticast mode [ 261.586274][T10074] dccp_invalid_packet: P.Data Offset(10) too large [ 261.590748][T10074] syz.1.880: attempt to access beyond end of device [ 261.590748][T10074] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 261.596732][T10074] SQUASHFS error: Failed to read block 0x0: -5 [ 261.598540][T10074] unable to read squashfs_super_block [ 265.347433][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'. [ 267.672935][ T31] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 267.864823][ T31] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 267.936274][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 267.951202][ T31] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.967148][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 267.982278][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 267.997162][ T31] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 268.006960][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 268.021017][ T31] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.035728][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 268.047601][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 268.057934][ T31] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 268.062360][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 268.069397][ T31] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.079774][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 268.084167][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 268.091156][ T31] usb 6-1: string descriptor 0 read error: -22 [ 268.096179][ T31] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 268.099803][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.188489][ T31] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 268.453784][T10242] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.270150][T10255] syz.2.924: attempt to access beyond end of device [ 269.270150][T10255] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 269.274678][T10255] SQUASHFS error: Failed to read block 0x0: -5 [ 269.276625][T10255] unable to read squashfs_super_block [ 269.866874][T10271] dccp_invalid_packet: P.Data Offset(10) too large [ 269.876714][T10271] syz.0.929: attempt to access beyond end of device [ 269.876714][T10271] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 269.881999][T10271] SQUASHFS error: Failed to read block 0x0: -5 [ 269.885144][T10271] unable to read squashfs_super_block [ 269.998076][ T5961] Bluetooth: hci3: command 0x0405 tx timeout [ 270.978943][T10301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.936'. [ 271.103813][T10306] dccp_invalid_packet: P.Data Offset(10) too large [ 271.115255][T10306] syz.3.934: attempt to access beyond end of device [ 271.115255][T10306] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 271.118837][T10306] SQUASHFS error: Failed to read block 0x0: -5 [ 271.121160][T10306] unable to read squashfs_super_block [ 271.372019][T10317] syz.2.938: attempt to access beyond end of device [ 271.372019][T10317] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 271.377655][T10317] SQUASHFS error: Failed to read block 0x0: -5 [ 271.379964][T10317] unable to read squashfs_super_block [ 271.991873][T10324] dccp_invalid_packet: P.Data Offset(10) too large [ 271.995734][T10324] syz.3.941: attempt to access beyond end of device [ 271.995734][T10324] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 271.999399][T10324] SQUASHFS error: Failed to read block 0x0: -5 [ 272.001185][T10324] unable to read squashfs_super_block [ 272.473706][ T6102] usb 6-1: USB disconnect, device number 7 [ 272.718446][T10344] dccp_invalid_packet: P.Data Offset(10) too large [ 272.721381][T10344] syz.0.944: attempt to access beyond end of device [ 272.721381][T10344] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 272.725275][T10344] SQUASHFS error: Failed to read block 0x0: -5 [ 272.727221][T10344] unable to read squashfs_super_block [ 273.825210][T10374] netlink: 72 bytes leftover after parsing attributes in process `syz.0.960'. [ 274.014060][T10386] netlink: 188 bytes leftover after parsing attributes in process `syz.1.956'. [ 274.017466][T10386] netlink: 'syz.1.956': attribute type 1 has an invalid length. [ 275.446915][T10432] dccp_invalid_packet: P.Data Offset(10) too large [ 275.460778][T10432] syz.1.970: attempt to access beyond end of device [ 275.460778][T10432] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 275.464368][T10432] SQUASHFS error: Failed to read block 0x0: -5 [ 275.466139][T10432] unable to read squashfs_super_block [ 276.386141][T10455] 9pnet_virtio: no channels available for device syz [ 276.563065][T10462] input: syz1 as /devices/virtual/input/input10 [ 276.834288][T10477] dccp_invalid_packet: P.Data Offset(10) too large [ 276.851363][T10477] syz.3.987: attempt to access beyond end of device [ 276.851363][T10477] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 276.855668][T10477] SQUASHFS error: Failed to read block 0x0: -5 [ 276.857414][T10477] unable to read squashfs_super_block [ 280.119946][T10535] dccp_invalid_packet: P.Data Offset(10) too large [ 280.156308][T10535] syz.3.1003: attempt to access beyond end of device [ 280.156308][T10535] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 280.159984][T10535] SQUASHFS error: Failed to read block 0x0: -5 [ 280.161826][T10535] unable to read squashfs_super_block [ 280.552875][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 280.704326][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 280.706692][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.712401][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 280.721983][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 280.728391][ T10] usb 5-1: Manufacturer: syz [ 280.744825][ T10] usb 5-1: config 0 descriptor?? [ 280.792943][ T10] rc_core: IR keymap rc-hauppauge not found [ 280.796156][ T10] Registered IR keymap rc-empty [ 280.800335][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 280.806115][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 280.954631][ T6102] usb 5-1: USB disconnect, device number 3 [ 282.021791][T10583] dccp_invalid_packet: P.Data Offset(10) too large [ 282.051503][T10583] syz.1.1014: attempt to access beyond end of device [ 282.051503][T10583] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 282.055532][T10583] SQUASHFS error: Failed to read block 0x0: -5 [ 282.057247][T10583] unable to read squashfs_super_block [ 284.233260][T10630] veth0_vlan: left promiscuous mode [ 284.236759][T10630] veth0_vlan: entered promiscuous mode [ 284.301603][T10634] syz.2.1029: attempt to access beyond end of device [ 284.301603][T10634] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 284.312907][T10634] SQUASHFS error: Failed to read block 0x0: -5 [ 284.315438][T10634] unable to read squashfs_super_block [ 284.327429][T10630] syz.1.1030 (10630) used greatest stack depth: 20640 bytes left [ 284.338719][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1031'. [ 284.950575][T10661] dccp_invalid_packet: P.Data Offset(10) too large [ 284.969589][T10661] syz.3.1038: attempt to access beyond end of device [ 284.969589][T10661] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 284.973295][T10661] SQUASHFS error: Failed to read block 0x0: -5 [ 284.975010][T10661] unable to read squashfs_super_block [ 286.916209][T10714] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 286.966949][T10716] raw_sendmsg: syz.1.1050 forgot to set AF_INET. Fix it! [ 287.685422][ T5961] Bluetooth: hci1: unexpected subevent 0x22 length: 12 < 19 [ 288.652969][ T6102] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 288.802949][ T6102] usb 5-1: Using ep0 maxpacket: 8 [ 288.807386][ T6102] usb 5-1: config 0 has no interfaces? [ 288.809598][ T6102] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 288.814260][ T6102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.818659][ T6102] usb 5-1: config 0 descriptor?? [ 289.286266][T10763] dccp_invalid_packet: P.Data Offset(10) too large [ 289.317727][T10763] syz.3.1065: attempt to access beyond end of device [ 289.317727][T10763] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 289.321302][T10763] SQUASHFS error: Failed to read block 0x0: -5 [ 289.323330][T10763] unable to read squashfs_super_block [ 290.364549][T10774] veth0_vlan: left promiscuous mode [ 290.367406][T10774] veth0_vlan: entered promiscuous mode [ 290.667193][ T191] team0: Port device @ removed [ 290.767554][ T1171] tipc: Resetting bearer [ 291.399160][ T63] usb 5-1: USB disconnect, device number 4 [ 292.552959][ T5962] Bluetooth: hci4: command 0xfc11 tx timeout [ 292.553018][ T5961] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 292.966633][T10833] veth0_vlan: left promiscuous mode [ 292.969515][T10833] veth0_vlan: entered promiscuous mode [ 293.100162][T10844] dccp_invalid_packet: P.Data Offset(10) too large [ 293.129212][T10844] syz.0.1083: attempt to access beyond end of device [ 293.129212][T10844] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 293.137462][T10844] SQUASHFS error: Failed to read block 0x0: -5 [ 293.140442][T10844] unable to read squashfs_super_block [ 293.653031][ T26] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 293.820869][ T26] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.823923][ T26] usb 8-1: config 0 has no interfaces? [ 293.827176][ T26] usb 8-1: New USB device found, idVendor=1de1, idProduct=c1fd, bcdDevice=7d.08 [ 293.830499][ T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.832892][ T26] usb 8-1: Product: syz [ 293.834062][ T26] usb 8-1: Manufacturer: syz [ 293.835759][ T26] usb 8-1: SerialNumber: syz [ 293.839593][ T26] usb 8-1: config 0 descriptor?? [ 294.089604][T10865] dccp_invalid_packet: P.Data Offset(10) too large [ 294.104138][T10865] syz.0.1090: attempt to access beyond end of device [ 294.104138][T10865] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 294.107710][T10865] SQUASHFS error: Failed to read block 0x0: -5 [ 294.109431][T10865] unable to read squashfs_super_block [ 294.260091][ T63] usb 8-1: USB disconnect, device number 4 [ 294.991059][T10881] dccp_invalid_packet: P.Data Offset(10) too large [ 295.008918][T10881] syz.3.1094: attempt to access beyond end of device [ 295.008918][T10881] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 295.013145][T10881] SQUASHFS error: Failed to read block 0x0: -5 [ 295.015120][T10881] unable to read squashfs_super_block [ 295.175366][T10885] syz.0.1097: attempt to access beyond end of device [ 295.175366][T10885] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 295.182399][T10885] SQUASHFS error: Failed to read block 0x0: -5 [ 295.185015][T10885] unable to read squashfs_super_block [ 295.991948][T10899] syz.1.1102: attempt to access beyond end of device [ 295.991948][T10899] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 295.995665][T10899] SQUASHFS error: Failed to read block 0x0: -5 [ 295.998280][T10899] unable to read squashfs_super_block [ 296.223048][ T5324] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 296.385386][ T5324] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 296.387916][ T5324] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 296.391303][ T5324] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 296.394593][ T5324] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 296.398889][ T5324] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 296.405885][ T5324] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 296.409572][ T5324] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 296.412708][ T5324] usb 8-1: Product: syz [ 296.414412][ T5324] usb 8-1: Manufacturer: syz [ 296.421107][ T5324] cdc_wdm 8-1:1.0: skipping garbage [ 296.423665][ T5324] cdc_wdm 8-1:1.0: skipping garbage [ 296.427136][ T5324] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 296.429581][ T5324] cdc_wdm 8-1:1.0: Unknown control protocol [ 296.533230][ T40] audit: type=1800 audit(1742422308.694:52): pid=10913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1108" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 296.631515][ T6102] usb 8-1: USB disconnect, device number 5 [ 298.847347][T10978] input: syz1 as /devices/virtual/input/input12 [ 299.584120][T10993] syz.3.1129: attempt to access beyond end of device [ 299.584120][T10993] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 299.587758][T10993] SQUASHFS error: Failed to read block 0x0: -5 [ 299.590354][T10993] unable to read squashfs_super_block [ 300.766352][ T191] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.810297][T11022] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1142'. [ 300.814369][T11022] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 300.819705][T11022] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1142'. [ 300.822232][T11022] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 300.908854][ T5324] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 300.909153][ T5962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.917648][ T5962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.918288][ T191] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.920055][ T5962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.924752][ T5962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.927859][ T5962] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 300.929923][ T5962] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.009872][ T191] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.018021][T11027] chnl_net:caif_netlink_parms(): no params data found [ 301.082906][ T5324] usb 8-1: Using ep0 maxpacket: 8 [ 301.085621][ T5324] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 301.088032][ T5324] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.090831][ T5324] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.093559][ T5324] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.096399][ T5324] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.100018][ T5324] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 301.100767][ T191] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.102599][ T5324] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.128705][T11027] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.131636][T11027] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.134637][T11027] bridge_slave_0: entered allmulticast mode [ 301.136844][T11027] bridge_slave_0: entered promiscuous mode [ 301.142356][T11027] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.145313][T11027] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.148166][T11027] bridge_slave_1: entered allmulticast mode [ 301.151259][T11027] bridge_slave_1: entered promiscuous mode [ 301.177583][T11027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.184883][T11027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.244152][T11027] team0: Port device team_slave_0 added [ 301.251714][T11027] team0: Port device team_slave_1 added [ 301.316333][ T5324] usb 8-1: usb_control_msg returned -32 [ 301.322899][ T5324] usbtmc 8-1:16.0: can't read capabilities [ 301.491532][ T6102] usb 8-1: USB disconnect, device number 6 [ 301.591753][ T191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.598235][ T191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.602140][ T191] bond0 (unregistering): Released all slaves [ 301.614162][T11027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.616108][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.623462][T11027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.635936][T11027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.638553][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.645747][T11027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.676306][T11027] hsr_slave_0: entered promiscuous mode [ 301.678180][T11027] hsr_slave_1: entered promiscuous mode [ 301.679928][T11027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.682069][T11027] Cannot create hsr debugfs directory [ 301.700410][ T191] tipc: Left network mode [ 301.723710][ T191] IPVS: stopping master sync thread 7655 ... [ 301.903763][ T191] hsr_slave_0: left promiscuous mode [ 301.906169][ T191] hsr_slave_1: left promiscuous mode [ 301.922511][ T191] veth1_macvtap: left allmulticast mode [ 301.927812][ T191] veth1_macvtap: left promiscuous mode [ 301.929714][ T191] veth0_macvtap: left promiscuous mode [ 302.648807][ T191] team0 (unregistering): Port device team_slave_1 removed [ 302.779111][ T191] team0 (unregistering): Port device team_slave_0 removed [ 302.956612][ T5962] Bluetooth: hci3: command tx timeout [ 303.570199][ T6102] infiniband syz0: ib_query_port failed (-19) [ 303.585542][T11027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.595395][T11027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.599717][T11027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.606846][T11027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.642627][T11027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.660695][T11027] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.665161][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.667367][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.673692][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.675793][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.889206][T11027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.975026][T11117] syz.0.1157: attempt to access beyond end of device [ 303.975026][T11117] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 303.978679][T11117] SQUASHFS error: Failed to read block 0x0: -5 [ 303.980437][T11117] unable to read squashfs_super_block [ 303.989860][ T191] IPVS: stop unused estimator thread 0... [ 304.229265][T11027] veth0_vlan: entered promiscuous mode [ 304.238785][T11027] veth1_vlan: entered promiscuous mode [ 304.262265][T11027] veth0_macvtap: entered promiscuous mode [ 304.269225][T11027] veth1_macvtap: entered promiscuous mode [ 304.289728][T11027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.295715][T11027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.323624][T11027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.342947][T11027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.346588][T11027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.349008][T11027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.730571][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.734974][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.805233][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.807394][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.933496][T11146] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 305.033555][ T5962] Bluetooth: hci3: command tx timeout [ 306.196295][T11206] dccp_invalid_packet: P.Data Offset(10) too large [ 306.222759][T11206] syz.4.1166: attempt to access beyond end of device [ 306.222759][T11206] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 306.227236][T11206] SQUASHFS error: Failed to read block 0x0: -5 [ 306.229597][T11206] unable to read squashfs_super_block [ 307.122982][ T5962] Bluetooth: hci3: command tx timeout [ 307.709504][T11241] dccp_invalid_packet: P.Data Offset(10) too large [ 307.724617][T11241] syz.0.1174: attempt to access beyond end of device [ 307.724617][T11241] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 307.729995][T11241] SQUASHFS error: Failed to read block 0x0: -5 [ 307.732220][T11241] unable to read squashfs_super_block [ 309.202992][ T5962] Bluetooth: hci3: command tx timeout [ 310.311982][T11300] dccp_invalid_packet: P.Data Offset(10) too large [ 310.358700][T11300] syz.0.1187: attempt to access beyond end of device [ 310.358700][T11300] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 310.363916][T11300] SQUASHFS error: Failed to read block 0x0: -5 [ 310.366507][T11300] unable to read squashfs_super_block [ 314.245077][T11383] pim6reg1: entered promiscuous mode [ 314.246663][T11383] pim6reg1: entered allmulticast mode [ 314.800812][T11403] netlink: 1032 bytes leftover after parsing attributes in process `syz.3.1223'. [ 314.802910][ T63] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 314.965082][ T63] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.969091][ T63] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.972354][ T63] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.976679][ T63] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.981876][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.987991][ T63] usb 9-1: config 0 descriptor?? [ 315.418540][ T63] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 315.429065][ T63] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 315.682686][ T26] usb 9-1: USB disconnect, device number 2 [ 316.334723][T11458] dccp_invalid_packet: P.Data Offset(10) too large [ 316.403718][T11462] syz.3.1231: attempt to access beyond end of device [ 316.403718][T11462] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 316.407343][T11462] SQUASHFS error: Failed to read block 0x0: -5 [ 316.416607][T11462] unable to read squashfs_super_block [ 316.568148][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.298322][T11485] dccp_invalid_packet: P.Data Offset(10) too large [ 317.313896][T11485] syz.4.1237: attempt to access beyond end of device [ 317.313896][T11485] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 317.318402][T11485] SQUASHFS error: Failed to read block 0x0: -5 [ 317.320794][T11485] unable to read squashfs_super_block [ 319.884365][T11568] dccp_invalid_packet: P.Data Offset(10) too large [ 319.936326][T11568] syz.4.1250: attempt to access beyond end of device [ 319.936326][T11568] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 319.940141][T11568] SQUASHFS error: Failed to read block 0x0: -5 [ 319.941964][T11568] unable to read squashfs_super_block [ 320.719617][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1256'. [ 321.053047][ T26] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 321.222976][ T26] usb 9-1: Using ep0 maxpacket: 8 [ 321.226284][ T26] usb 9-1: config 0 has no interfaces? [ 321.230069][ T26] usb 9-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 321.233395][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.236079][ T26] usb 9-1: Product: syz [ 321.237287][ T26] usb 9-1: Manufacturer: syz [ 321.238587][ T26] usb 9-1: SerialNumber: syz [ 321.240751][ T26] usb 9-1: config 0 descriptor?? [ 321.450721][ T26] usb 9-1: USB disconnect, device number 3 [ 321.814799][T11618] syz.2.1267: attempt to access beyond end of device [ 321.814799][T11618] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 321.818418][T11618] SQUASHFS error: Failed to read block 0x0: -5 [ 321.820188][T11618] unable to read squashfs_super_block [ 322.596692][T11641] syz.0.1276: attempt to access beyond end of device [ 322.596692][T11641] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 322.601734][T11641] syz.0.1276: attempt to access beyond end of device [ 322.601734][T11641] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 322.606509][T11641] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 322.609368][T11641] syz.0.1276: attempt to access beyond end of device [ 322.609368][T11641] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 322.614220][T11641] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 322.618241][T11641] syz.0.1276: attempt to access beyond end of device [ 322.618241][T11641] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 322.623296][T11641] syz.0.1276: attempt to access beyond end of device [ 322.623296][T11641] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 322.627403][T11641] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 322.630072][T11641] syz.0.1276: attempt to access beyond end of device [ 322.630072][T11641] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 322.635149][T11641] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 322.638038][T11641] syz.0.1276: attempt to access beyond end of device [ 322.638038][T11641] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 322.641503][T11641] syz.0.1276: attempt to access beyond end of device [ 322.641503][T11641] nbd0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 322.645698][T11641] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 322.648418][T11641] syz.0.1276: attempt to access beyond end of device [ 322.648418][T11641] nbd0: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 322.651951][T11641] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 322.662521][T11641] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 322.842243][T11652] mkiss: ax0: crc mode is auto. [ 323.263410][T11666] dccp_invalid_packet: P.Data Offset(10) too large [ 323.297243][T11666] SQUASHFS error: Failed to read block 0x0: -5 [ 323.299065][T11666] unable to read squashfs_super_block [ 323.737220][T11679] dccp_invalid_packet: P.Data Offset(10) too large [ 323.768442][T11679] SQUASHFS error: Failed to read block 0x0: -5 [ 323.771179][T11679] unable to read squashfs_super_block [ 324.595627][T11707] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.177990][T11741] input: syz0 as /devices/virtual/input/input13 [ 326.337104][T11773] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 326.342986][T11773] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 326.350693][T11773] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 326.358800][T11773] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 326.361762][T11773] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 326.364761][T11773] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 326.370496][T11773] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 326.374099][T11773] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 326.376800][T11773] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 326.462438][T11784] capability: warning: `syz.3.1317' uses deprecated v2 capabilities in a way that may be insecure [ 327.392927][ T5324] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 327.544481][ T5324] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.548846][ T5324] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.553740][ T5324] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 327.557254][ T5324] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.567361][ T5324] usb 7-1: config 0 descriptor?? [ 327.977613][ T5324] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 327.985011][ T5324] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0926:3333.0005/input/input14 [ 328.060559][ T5324] keytouch 0003:0926:3333.0005: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 328.183192][T11819] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 328.227141][ T63] usb 7-1: USB disconnect, device number 3 [ 328.606196][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'. [ 328.998576][T11885] bio_check_eod: 14 callbacks suppressed [ 328.998625][T11885] syz.2.1342: attempt to access beyond end of device [ 328.998625][T11885] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 329.005672][T11885] SQUASHFS error: Failed to read block 0x0: -5 [ 329.008888][T11885] unable to read squashfs_super_block [ 329.902471][T11906] dccp_invalid_packet: P.Data Offset(10) too large [ 329.916180][T11906] syz.0.1348: attempt to access beyond end of device [ 329.916180][T11906] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 329.919742][T11906] SQUASHFS error: Failed to read block 0x0: -5 [ 329.921570][T11906] unable to read squashfs_super_block [ 330.999436][T11950] dccp_invalid_packet: P.Data Offset(10) too large [ 331.015803][T11950] syz.0.1356: attempt to access beyond end of device [ 331.015803][T11950] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 331.017038][ T40] audit: type=1804 audit(1742422343.184:53): pid=11949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1358" name="/newroot/339/file0/file0" dev="9p" ino=36831271 res=1 errno=0 [ 331.019578][T11950] SQUASHFS error: Failed to read block 0x0: -5 [ 331.030030][T11950] unable to read squashfs_super_block [ 334.232372][T12008] syz.2.1374: attempt to access beyond end of device [ 334.232372][T12008] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 334.237440][T12008] SQUASHFS error: Failed to read block 0x0: -5 [ 334.240097][T12008] unable to read squashfs_super_block [ 335.547090][T12041] dccp_invalid_packet: P.Data Offset(10) too large [ 335.573594][T12041] syz.0.1380: attempt to access beyond end of device [ 335.573594][T12041] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 335.577650][T12041] SQUASHFS error: Failed to read block 0x0: -5 [ 335.579443][T12041] unable to read squashfs_super_block [ 336.377146][T12054] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 336.643980][T12058] syz_tun: entered allmulticast mode [ 337.250010][T12092] dccp_invalid_packet: P.Data Offset(10) too large [ 337.292508][T12097] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1395'. [ 337.293014][T12092] syz.0.1391: attempt to access beyond end of device [ 337.293014][T12092] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 337.300338][T12092] SQUASHFS error: Failed to read block 0x0: -5 [ 337.302330][T12092] unable to read squashfs_super_block [ 337.469271][T12110] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 337.576095][T12115] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 337.619797][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.621992][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.624357][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.627369][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.630363][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.634256][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.637949][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.640379][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.643873][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.646485][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.649080][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.651330][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.653965][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.656876][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.660165][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.665086][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.667672][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.670266][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.672546][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.675242][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.677925][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.680356][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.682666][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.691173][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.693631][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.695878][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.698185][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.700415][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.702699][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.705416][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.708196][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.711079][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.713461][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.715667][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.717920][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.720578][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.723759][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.726252][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.728436][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.730709][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.733662][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.736394][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.741238][ T63] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 337.744055][ T63] hid-generic 0000:007F:FFFFFFFE.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 338.588839][T12154] dccp_invalid_packet: P.Data Offset(10) too large [ 338.591820][ T40] audit: type=1800 audit(1742422350.754:54): pid=12153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1406" name="file1" dev="overlay" ino=1731 res=0 errno=0 [ 338.602403][T12154] syz.0.1405: attempt to access beyond end of device [ 338.602403][T12154] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 338.606131][T12154] SQUASHFS error: Failed to read block 0x0: -5 [ 338.607883][T12154] unable to read squashfs_super_block [ 340.820036][T12208] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 340.825444][T12208] nullb0: p1 start 1714368869 is beyond EOD, truncated [ 340.827414][T12208] nullb0: p2 start 1840217545 is beyond EOD, truncated [ 340.829337][T12208] nullb0: p3 start 2781609279 is beyond EOD, truncated [ 340.831248][T12208] nullb0: p4 start 2763479866 is beyond EOD, truncated [ 340.833639][T12208] nullb0: p5 size 1576935424 extends beyond EOD, truncated [ 340.838258][T12208] nullb0: p6 start 4255409061 is beyond EOD, truncated [ 340.840195][T12208] nullb0: p7 start 1354594978 is beyond EOD, truncated [ 340.842091][T12208] nullb0: p8 start 2203294751 is beyond EOD, truncated [ 340.844332][T12208] nullb0: p9 size 3667873493 extends beyond EOD, truncated [ 340.847074][T12208] nullb0: p10 start 2534445966 is beyond EOD, truncated [ 340.848991][T12208] nullb0: p11 start 1318227915 is beyond EOD, truncated [ 340.850892][T12208] nullb0: p12 size 3013114410 extends beyond EOD, truncated [ 340.923252][ T63] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 340.926092][ T63] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 341.632474][ T40] audit: type=1326 audit(1742422353.784:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12235 comm="syz.3.1426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 341.653458][ T40] audit: type=1326 audit(1742422353.784:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12235 comm="syz.3.1426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 341.681148][ T40] audit: type=1326 audit(1742422353.824:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12235 comm="syz.3.1426" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 341.712925][ T40] audit: type=1326 audit(1742422353.824:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12235 comm="syz.3.1426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 341.721259][ T40] audit: type=1326 audit(1742422353.824:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12235 comm="syz.3.1426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 341.782859][ T40] audit: type=1326 audit(1742422353.844:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12235 comm="syz.3.1426" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 341.789145][ T40] audit: type=1326 audit(1742422353.844:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12235 comm="syz.3.1426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 341.802978][ T40] audit: type=1326 audit(1742422353.844:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12235 comm="syz.3.1426" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 341.813041][ T40] audit: type=1326 audit(1742422353.844:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12235 comm="syz.3.1426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 341.853410][T12237] syz.2.1425: attempt to access beyond end of device [ 341.853410][T12237] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 341.858244][T12237] SQUASHFS error: Failed to read block 0x0: -5 [ 341.860595][T12237] unable to read squashfs_super_block [ 342.068507][T12247] block device autoloading is deprecated and will be removed. [ 342.855472][ T6016] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 343.042886][ T6016] usb 7-1: Using ep0 maxpacket: 16 [ 343.045765][ T6016] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.048761][ T6016] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 343.052952][ T6016] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 343.063383][ T6016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.069200][ T6016] usb 7-1: config 0 descriptor?? [ 343.287279][ T6016] usb 7-1: USB disconnect, device number 4 [ 343.316366][T12284] dccp_invalid_packet: P.Data Offset(10) too large [ 343.332593][T12284] syz.3.1435: attempt to access beyond end of device [ 343.332593][T12284] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 343.337320][T12284] SQUASHFS error: Failed to read block 0x0: -5 [ 343.339115][T12284] unable to read squashfs_super_block [ 344.113881][ T8213] bond0: (slave syz_tun): Releasing backup interface [ 344.236259][ T1171] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.332048][ T1171] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.430507][ T1171] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.486331][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.490875][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.497079][ T5961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.501720][ T1171] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.508740][ T5961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.512232][ T5961] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.514863][ T5961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.641997][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.650140][ T1171] bridge_slave_0: left allmulticast mode [ 344.652083][ T1171] bridge_slave_0: left promiscuous mode [ 344.654788][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.736900][T12336] dccp_invalid_packet: P.Data Offset(10) too large [ 344.751889][T12336] syz.3.1447: attempt to access beyond end of device [ 344.751889][T12336] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 344.755442][T12336] SQUASHFS error: Failed to read block 0x0: -5 [ 344.757917][T12336] unable to read squashfs_super_block [ 345.015335][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.021972][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.026111][ T1171] bond0 (unregistering): Released all slaves [ 345.035457][T12318] chnl_net:caif_netlink_parms(): no params data found [ 345.114442][T12341] block device autoloading is deprecated and will be removed. [ 345.136594][ T1171] IPVS: stopping master sync thread 6977 ... [ 345.164801][T12343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.243866][T12343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.272246][T12318] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.278324][T12318] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.280946][T12318] bridge_slave_0: entered allmulticast mode [ 345.284337][T12318] bridge_slave_0: entered promiscuous mode [ 345.292295][T12318] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.295127][T12318] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.297910][T12318] bridge_slave_1: entered allmulticast mode [ 345.300912][T12318] bridge_slave_1: entered promiscuous mode [ 345.334126][T12318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.343427][T12318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.400426][T12318] team0: Port device team_slave_0 added [ 345.417224][T12318] team0: Port device team_slave_1 added [ 345.470603][T12318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.473505][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.480119][T12318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.491149][T12318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.493550][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.500718][T12318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.544737][T12318] hsr_slave_0: entered promiscuous mode [ 345.546515][T12318] hsr_slave_1: entered promiscuous mode [ 345.548107][T12318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.550005][T12318] Cannot create hsr debugfs directory [ 345.700077][ T1171] hsr_slave_0: left promiscuous mode [ 345.703203][ T1171] hsr_slave_1: left promiscuous mode [ 345.728381][ T1171] veth0_macvtap: left promiscuous mode [ 345.958473][T12367] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 346.555171][ T5962] Bluetooth: hci1: command tx timeout [ 346.715368][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 346.819225][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 347.593056][T12318] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 347.603723][T12318] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 347.607626][T12318] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 347.611947][T12318] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 347.677396][T12318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.697441][T12318] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.726545][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.728921][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.736793][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.739082][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.961692][T12318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.125046][T12318] veth0_vlan: entered promiscuous mode [ 348.129090][T12318] veth1_vlan: entered promiscuous mode [ 348.151499][T12318] veth0_macvtap: entered promiscuous mode [ 348.155221][T12318] veth1_macvtap: entered promiscuous mode [ 348.161726][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.165926][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.169334][T12318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.183528][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.187750][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.190970][T12318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.201375][T12318] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.204554][T12318] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.206948][T12318] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.209390][T12318] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.255743][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.258797][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.271337][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.276133][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.854478][T12468] dccp_invalid_packet: P.Data Offset(10) too large [ 348.874979][T12468] syz.0.1472: attempt to access beyond end of device [ 348.874979][T12468] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 348.878622][T12468] SQUASHFS error: Failed to read block 0x0: -5 [ 348.880386][T12468] unable to read squashfs_super_block [ 350.348997][T12513] dccp_invalid_packet: P.Data Offset(10) too large [ 350.365262][T12513] syz.4.1478: attempt to access beyond end of device [ 350.365262][T12513] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 350.368980][T12513] SQUASHFS error: Failed to read block 0x0: -5 [ 350.370777][T12513] unable to read squashfs_super_block [ 350.516313][T12515] veth1_to_bond: entered allmulticast mode [ 350.518962][T12515] veth1_to_bond: entered promiscuous mode [ 350.522019][T12515] veth1_to_bond: left promiscuous mode [ 350.524511][T12515] veth1_to_bond: left allmulticast mode [ 350.850909][T12523] dccp_invalid_packet: P.Data Offset(10) too large [ 350.863910][T12523] syz.3.1481: attempt to access beyond end of device [ 350.863910][T12523] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 350.867509][T12523] SQUASHFS error: Failed to read block 0x0: -5 [ 350.869233][T12523] unable to read squashfs_super_block [ 350.926835][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.087546][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.092540][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.096081][ T5961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.098608][ T5961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.101622][ T5961] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 351.104159][ T5961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.357002][T12527] chnl_net:caif_netlink_parms(): no params data found [ 351.422989][T12527] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.425721][T12527] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.428355][T12527] bridge_slave_0: entered allmulticast mode [ 351.430909][T12527] bridge_slave_0: entered promiscuous mode [ 351.434311][T12527] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.437888][T12527] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.439951][T12527] bridge_slave_1: entered allmulticast mode [ 351.445143][T12527] bridge_slave_1: entered promiscuous mode [ 351.472570][T12527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.479748][T12527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.510944][T12527] team0: Port device team_slave_0 added [ 351.516631][T12527] team0: Port device team_slave_1 added [ 351.546801][T12527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.548769][T12527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.562482][T12527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.567591][T12527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.569534][T12527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.577360][T12527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.753911][T12527] hsr_slave_0: entered promiscuous mode [ 351.756790][T12527] hsr_slave_1: entered promiscuous mode [ 351.758695][T12527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.760966][T12527] Cannot create hsr debugfs directory [ 352.046519][T12527] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 352.054677][T12527] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 352.061763][T12527] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 352.068851][T12527] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 352.133579][T12527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.151841][T12527] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.194917][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.197745][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.201870][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.204679][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.030180][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 353.030197][ T40] audit: type=1326 audit(1742422365.194:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.1491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 353.052968][ T40] audit: type=1326 audit(1742422365.194:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.1491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 353.061171][ T40] audit: type=1326 audit(1742422365.204:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.1491" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 353.082863][ T40] audit: type=1326 audit(1742422365.204:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.1491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 353.088817][ T40] audit: type=1326 audit(1742422365.204:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.1491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 353.112922][ T40] audit: type=1326 audit(1742422365.204:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.1491" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 353.120910][ T40] audit: type=1326 audit(1742422365.204:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.1491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 353.129372][ T40] audit: type=1326 audit(1742422365.204:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.1491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 353.137290][ T40] audit: type=1326 audit(1742422365.204:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.1491" exe="/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 353.145354][ T40] audit: type=1326 audit(1742422365.204:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.1491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 353.206272][ T5962] Bluetooth: hci1: command tx timeout [ 353.959828][T12565] syz.0.1492: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 353.972860][T12565] CPU: 1 UID: 0 PID: 12565 Comm: syz.0.1492 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 353.972877][T12565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 353.972884][T12565] Call Trace: [ 353.972888][T12565] [ 353.972893][T12565] dump_stack_lvl+0x16c/0x1f0 [ 353.972913][T12565] warn_alloc+0x24d/0x3a0 [ 353.972929][T12565] ? __pfx_warn_alloc+0x10/0x10 [ 353.972948][T12565] ? __get_vm_area_node+0x1b0/0x2f0 [ 353.972960][T12565] ? __get_vm_area_node+0x1dc/0x2f0 [ 353.972975][T12565] __vmalloc_node_range_noprof+0x1102/0x1530 [ 353.972989][T12565] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.973009][T12565] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 353.973027][T12565] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 353.973045][T12565] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 353.973059][T12565] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 353.973073][T12565] vmalloc_user_noprof+0x6b/0x90 [ 353.973087][T12565] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 353.973102][T12565] vb2_vmalloc_alloc+0x11e/0x3d0 [ 353.973118][T12565] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 353.973132][T12565] __vb2_queue_alloc+0x896/0x1230 [ 353.973153][T12565] vb2_core_reqbufs+0xa73/0xfb0 [ 353.973169][T12565] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 353.973190][T12565] __vb2_init_fileio+0x3f3/0x1110 [ 353.973209][T12565] vb2_core_poll+0x5ec/0x700 [ 353.973224][T12565] vb2_poll+0x33/0x150 [ 353.973238][T12565] vb2_fop_poll+0x10f/0x2c0 [ 353.973251][T12565] ? __pfx_vb2_fop_poll+0x10/0x10 [ 353.973264][T12565] v4l2_poll+0x160/0x320 [ 353.973275][T12565] ? __pfx_v4l2_poll+0x10/0x10 [ 353.973286][T12565] io_file_supports_nowait+0x200/0x290 [ 353.973302][T12565] ? __pfx_io_file_supports_nowait+0x10/0x10 [ 353.973317][T12565] ? io_file_get_flags+0x102/0x140 [ 353.973327][T12565] ? io_rw_init_file+0x84b/0xbc0 [ 353.973342][T12565] __io_read+0xa07/0x12b0 [ 353.973357][T12565] ? __fget_files+0x206/0x3a0 [ 353.973374][T12565] io_read+0x1e/0x70 [ 353.973389][T12565] io_issue_sqe+0x175/0x12d0 [ 353.973401][T12565] io_submit_sqes+0x96a/0x2670 [ 353.973418][T12565] __do_sys_io_uring_enter+0xd60/0x1670 [ 353.973431][T12565] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 353.973442][T12565] ? __ia32_sys_futex_time32+0x1da/0x460 [ 353.973455][T12565] ? __ia32_sys_futex_time32+0x2fd/0x460 [ 353.973469][T12565] ? __ia32_compat_sys_openat+0x16e/0x210 [ 353.973480][T12565] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 353.973499][T12565] __do_fast_syscall_32+0x73/0x120 [ 353.973515][T12565] do_fast_syscall_32+0x32/0x80 [ 353.973529][T12565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.973544][T12565] RIP: 0023:0xf7ff4579 [ 353.973552][T12565] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 353.973562][T12565] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 353.973572][T12565] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000000047f6 [ 353.973578][T12565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.973583][T12565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.973589][T12565] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 353.973594][T12565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.973606][T12565] [ 353.973610][T12565] Mem-Info: [ 354.095206][T12565] active_anon:8489 inactive_anon:3356 isolated_anon:0 [ 354.095206][T12565] active_file:3351 inactive_file:5517 isolated_file:0 [ 354.095206][T12565] unevictable:1768 dirty:1594 writeback:0 [ 354.095206][T12565] slab_reclaimable:6290 slab_unreclaimable:62896 [ 354.095206][T12565] mapped:31885 shmem:8070 pagetables:1049 [ 354.095206][T12565] sec_pagetables:311 bounce:0 [ 354.095206][T12565] kernel_misc_reclaimable:0 [ 354.095206][T12565] free:59112 free_pcp:1589 free_cma:0 [ 354.111663][T12565] Node 0 active_anon:4628kB inactive_anon:0kB active_file:1064kB inactive_file:368kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8532kB dirty:320kB writeback:0kB shmem:7052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9296kB pagetables:1356kB sec_pagetables:1144kB all_unreclaimable? yes [ 354.123478][T12565] Node 1 active_anon:29328kB inactive_anon:13424kB active_file:12340kB inactive_file:21700kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:119008kB dirty:6056kB writeback:0kB shmem:25228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3120kB pagetables:2840kB sec_pagetables:100kB all_unreclaimable? no [ 354.136303][T12565] Node 0 DMA free:2120kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:432kB local_pcp:216kB free_cma:0kB [ 354.147256][T12565] lowmem_reserve[]: 0 294 294 294 294 [ 354.149368][T12565] Node 0 DMA32 free:22076kB boost:2048kB min:15608kB low:18996kB high:22384kB reserved_highatomic:4096KB active_anon:4616kB inactive_anon:0kB active_file:920kB inactive_file:368kB unevictable:3536kB writepending:320kB present:1032196kB managed:301724kB mlocked:0kB bounce:0kB free_pcp:628kB local_pcp:68kB free_cma:0kB [ 354.160726][T12565] lowmem_reserve[]: 0 0 0 0 0 [ 354.162588][T12565] Node 1 DMA32 free:212872kB boost:24576kB min:71720kB low:83504kB high:95288kB reserved_highatomic:0KB active_anon:29328kB inactive_anon:13424kB active_file:12340kB inactive_file:21700kB unevictable:3536kB writepending:6056kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:4784kB local_pcp:4064kB free_cma:0kB [ 354.174173][T12565] lowmem_reserve[]: 0 0 0 0 0 [ 354.176065][T12565] Node 0 DMA: 26*4kB (UM) 22*8kB (UM) 11*16kB (UM) 6*32kB (UM) 3*64kB (UM) 0*128kB 1*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2120kB [ 354.186011][T12565] Node 0 DMA32: 216*4kB (UMEH) 150*8kB (UMEH) 60*16kB (UMEH) 86*32kB (UEH) 42*64kB (UMEH) 24*128kB (UMEH) 13*256kB (UMEH) 4*512kB (UM) 5*1024kB (UMH) 0*2048kB 0*4096kB = 22032kB [ 354.192970][T12565] Node 1 DMA32: 114*4kB (UME) 62*8kB (UE) 226*16kB (UME) 334*32kB (UME) 158*64kB (UME) 79*128kB (UME) 43*256kB (UME) 21*512kB (ME) 92*1024kB (UM) 10*2048kB (UM) 10*4096kB (UM) = 212888kB [ 354.200316][T12565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.204033][T12565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 354.207504][T12565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.211008][T12565] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 354.215028][T12565] 17289 total pagecache pages [ 354.216961][T12565] 351 pages in swap cache [ 354.218637][T12565] Free swap = 115984kB [ 354.220220][T12565] Total swap = 124996kB [ 354.221421][T12565] 524155 pages RAM [ 354.222462][T12565] 0 pages HighMem/MovableOnly [ 354.225852][T12565] 207821 pages reserved [ 354.227337][T12565] 0 pages cma reserved [ 354.391018][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.410602][T12527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.497611][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.615066][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.646417][T12527] veth0_vlan: entered promiscuous mode [ 354.662722][T12527] veth1_vlan: entered promiscuous mode [ 354.678205][T12527] veth0_macvtap: entered promiscuous mode [ 354.682061][T12527] veth1_macvtap: entered promiscuous mode [ 354.690597][T12527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.694954][T12527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.698756][T12527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.702212][T12527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.714774][T12527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.725711][T12527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.728803][T12527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.734041][T12527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.738087][T12527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.741783][T12527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.747569][T12527] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.750286][T12527] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.754531][T12527] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.757265][T12527] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.851525][ T13] bridge_slave_1: left allmulticast mode [ 354.853488][ T13] bridge_slave_1: left promiscuous mode [ 354.855188][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.864838][ T13] bridge_slave_0: left allmulticast mode [ 354.866709][ T13] bridge_slave_0: left promiscuous mode [ 354.868443][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.275560][ T5962] Bluetooth: hci1: command tx timeout [ 355.293020][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.316988][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.328269][ T13] bond0 (unregistering): Released all slaves [ 355.473826][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.478109][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.540137][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.542302][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.769083][ T13] hsr_slave_0: left promiscuous mode [ 355.773201][ T13] hsr_slave_1: left promiscuous mode [ 355.775005][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.787807][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.796943][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.798998][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.826040][ T13] veth1_macvtap: left promiscuous mode [ 355.827620][ T13] veth0_macvtap: left promiscuous mode [ 355.829202][ T13] veth1_vlan: left promiscuous mode [ 355.830705][ T13] veth0_vlan: left promiscuous mode [ 356.236732][T12636] dccp_invalid_packet: P.Data Offset(10) too large [ 356.305718][T12639] syz.6.1484: attempt to access beyond end of device [ 356.305718][T12639] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 356.309588][T12639] SQUASHFS error: Failed to read block 0x0: -5 [ 356.311334][T12639] unable to read squashfs_super_block [ 357.362887][ T5962] Bluetooth: hci1: command tx timeout [ 357.536584][ T13] team0 (unregistering): Port device team_slave_1 removed [ 357.678301][ T13] team0 (unregistering): Port device team_slave_0 removed [ 359.259251][T12691] veth1_to_bond: entered allmulticast mode [ 359.261180][T12691] veth1_to_bond: entered promiscuous mode [ 359.264136][T12691] veth1_to_bond: left promiscuous mode [ 359.266454][T12691] veth1_to_bond: left allmulticast mode [ 359.442905][ T5962] Bluetooth: hci1: command tx timeout [ 359.564126][T12602] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 359.713022][T12602] usb 11-1: Using ep0 maxpacket: 32 [ 359.716161][T12602] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 359.725964][T12602] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 359.728545][T12602] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 359.734371][T12602] usb 11-1: Product: syz [ 359.736009][T12602] usb 11-1: Manufacturer: syz [ 359.737316][T12602] usb 11-1: SerialNumber: syz [ 359.744573][T12602] usb 11-1: config 0 descriptor?? [ 359.747147][T12699] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 360.068069][T12732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.072117][T12732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.083040][T12602] usb 11-1: USB disconnect, device number 2 [ 360.493070][T12749] input: syz0 as /devices/virtual/input/input16 [ 361.136210][T12769] dccp_invalid_packet: P.Data Offset(10) too large [ 361.182918][T12769] syz.6.1516: attempt to access beyond end of device [ 361.182918][T12769] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 361.187183][T12769] SQUASHFS error: Failed to read block 0x0: -5 [ 361.189053][T12769] unable to read squashfs_super_block [ 361.917031][T12791] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17 [ 362.277890][T12817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.026184][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 364.026196][ T40] audit: type=1326 audit(1742422376.194:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.4.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7fc00000 [ 364.036288][ T40] audit: type=1326 audit(1742422376.194:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.4.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe6579 code=0x7fc00000 [ 364.043240][ T40] audit: type=1326 audit(1742422376.194:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.4.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7fc00000 [ 364.049664][ T40] audit: type=1326 audit(1742422376.194:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.4.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7fc00000 [ 364.061468][ T40] audit: type=1326 audit(1742422376.194:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.4.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7fc00000 [ 364.070228][ T40] audit: type=1326 audit(1742422376.194:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.4.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7fc00000 [ 364.088967][ T40] audit: type=1326 audit(1742422376.194:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.4.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7fc00000 [ 364.103383][T12873] dccp_invalid_packet: P.Data Offset(10) too large [ 364.107396][ T40] audit: type=1326 audit(1742422376.194:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.4.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7fc00000 [ 364.121622][ T40] audit: type=1326 audit(1742422376.194:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.4.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7fc00000 [ 364.130375][ T40] audit: type=1326 audit(1742422376.194:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.4.1526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7fc00000 [ 364.160689][T12876] syz.3.1528: attempt to access beyond end of device [ 364.160689][T12876] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 364.173023][T12876] SQUASHFS error: Failed to read block 0x0: -5 [ 364.175155][T12876] unable to read squashfs_super_block [ 366.380813][T12937] dccp_invalid_packet: P.Data Offset(10) too large [ 366.424759][T12937] syz.4.1544: attempt to access beyond end of device [ 366.424759][T12937] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 366.428559][T12937] SQUASHFS error: Failed to read block 0x0: -5 [ 366.430439][T12937] unable to read squashfs_super_block [ 366.792207][T12953] kvm: pic: non byte read [ 366.795776][T12953] kvm: pic: non byte read [ 366.798183][T12953] kvm: pic: non byte read [ 367.298799][T12970] SET target dimension over the limit! [ 368.367054][T12981] dccp_close: ABORT with 32 bytes unread [ 368.750747][T13011] dccp_invalid_packet: P.Data Offset(10) too large [ 368.821452][T13013] syz.3.1559: attempt to access beyond end of device [ 368.821452][T13013] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 368.826415][T13013] SQUASHFS error: Failed to read block 0x0: -5 [ 368.828713][T13013] unable to read squashfs_super_block [ 369.342486][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 369.342501][ T40] audit: type=1800 audit(1742422381.504:117): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1562" name="file1" dev="overlay" ino=2063 res=0 errno=0 [ 371.562234][T13084] syzkaller0: entered promiscuous mode [ 371.567343][T13084] syzkaller0: entered allmulticast mode [ 373.867510][T13119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.086136][T13135] 9pnet_virtio: no channels available for device syz [ 374.187818][T13144] batman_adv: batadv0: Adding interface: ip6gretap1 [ 374.189772][T13144] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 374.195830][T13144] batman_adv: batadv0: Interface activated: ip6gretap1 [ 374.242586][T13148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1582'. [ 374.245295][T13148] netlink: 'syz.0.1582': attribute type 7 has an invalid length. [ 374.247964][T13148] netlink: 'syz.0.1582': attribute type 8 has an invalid length. [ 374.250102][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'. [ 374.259160][T13148] syz_tun: entered promiscuous mode [ 374.261131][T13148] erspan0: entered promiscuous mode [ 374.263587][T13148] gretap0: entered promiscuous mode [ 374.266125][T13148] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 375.866620][T13172] dccp_invalid_packet: P.Data Offset(10) too large [ 375.930893][T13172] syz.6.1589: attempt to access beyond end of device [ 375.930893][T13172] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 375.934738][T13172] SQUASHFS error: Failed to read block 0x0: -5 [ 375.936484][T13172] unable to read squashfs_super_block [ 376.330200][T13197] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967294 (8589934588 ns) > initial count (88 ns). Using initial count to start timer. [ 377.994445][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.464554][T13242] batadv_slave_1: entered promiscuous mode [ 378.474398][T13241] batadv_slave_1: left promiscuous mode [ 378.672274][T13250] dccp_invalid_packet: P.Data Offset(10) too large [ 378.729344][T13250] syz.6.1606: attempt to access beyond end of device [ 378.729344][T13250] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 378.738133][T13250] SQUASHFS error: Failed to read block 0x0: -5 [ 378.743777][T13250] unable to read squashfs_super_block [ 379.833326][T13266] random: crng reseeded on system resumption [ 383.957883][T13334] dccp_invalid_packet: P.Data Offset(100) too large [ 384.143373][ T40] audit: type=1326 audit(1742422396.314:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13331 comm="syz.6.1628" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x0 [ 385.045813][T13357] dccp_invalid_packet: P.Data Offset(10) too large [ 385.081440][T13357] syz.3.1632: attempt to access beyond end of device [ 385.081440][T13357] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 385.085251][T13357] SQUASHFS error: Failed to read block 0x0: -5 [ 385.087495][T13357] unable to read squashfs_super_block [ 385.434132][ T74] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 385.582978][ T74] usb 11-1: Using ep0 maxpacket: 8 [ 385.588806][ T74] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 385.592079][ T74] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.596002][ T74] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 385.599792][ T74] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 385.603704][ T74] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.611307][ T74] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.614920][ T74] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.885228][ T74] usb 11-1: usb_control_msg returned -32 [ 385.887362][ T74] usbtmc 11-1:16.0: can't read capabilities [ 386.246256][T13367] usbtmc 11-1:16.0: stb usb_control_msg returned -32 [ 386.623533][ T36] usb 11-1: USB disconnect, device number 3 [ 386.637952][T13380] mkiss: ax0: crc mode is auto. [ 387.539473][ T40] audit: type=1326 audit(1742422399.704:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13399 comm="syz.0.1645" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x0 [ 387.840231][T13409] dccp_invalid_packet: P.Data Offset(10) too large [ 387.902953][T13413] syz.6.1647: attempt to access beyond end of device [ 387.902953][T13413] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 387.907992][T13413] SQUASHFS error: Failed to read block 0x0: -5 [ 387.910100][T13413] unable to read squashfs_super_block [ 387.993013][ T36] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 388.142866][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 388.146534][ T36] usb 5-1: config 1 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.150811][ T36] usb 5-1: config 1 interface 0 has no altsetting 0 [ 388.155286][ T36] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40 [ 388.158927][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.162024][ T36] usb 5-1: Product: syz [ 388.163768][ T36] usb 5-1: Manufacturer: syz [ 388.165621][ T36] usb 5-1: SerialNumber: syz [ 388.410187][T13404] kvm: pic: non byte read [ 388.412469][T13404] kvm: pic: single mode not supported [ 388.412707][T13404] kvm: pic: non byte read [ 388.416669][T13404] kvm: pic: non byte read [ 388.418663][T13404] kvm: pic: non byte read [ 388.420476][T13404] kvm: pic: level sensitive irq not supported [ 388.420690][T13404] kvm: pic: non byte read [ 388.425201][T13404] kvm: pic: single mode not supported [ 388.425434][T13404] kvm: pic: non byte read [ 388.429003][T13404] kvm: pic: non byte read [ 388.431079][T13404] kvm: pic: non byte read [ 388.433290][T13404] kvm: pic: non byte read [ 388.435293][T13404] kvm: pic: non byte read [ 388.512923][ T31] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 388.682836][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 388.693873][ T31] usb 9-1: config 0 has no interfaces? [ 388.695533][ T31] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 388.698507][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.702004][ T31] usb 9-1: config 0 descriptor?? [ 388.906693][T13419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.909602][T13419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.029145][T12602] usb 9-1: USB disconnect, device number 4 [ 389.476129][T13435] ISOFS: Unable to identify CD-ROM format. [ 390.555885][ T36] usbhid 5-1:1.0: can't add hid device: -71 [ 390.559102][ T36] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 390.564504][ T36] usb 5-1: USB disconnect, device number 5 [ 390.798657][T13465] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.1660'. [ 390.801358][T13465] netlink: zone id is out of range [ 391.146755][T13465] netlink: zone id is out of range [ 391.148520][T13465] netlink: zone id is out of range [ 391.149983][T13465] netlink: zone id is out of range [ 391.151443][T13465] netlink: zone id is out of range [ 391.265883][T13465] netlink: zone id is out of range [ 391.283132][T13465] netlink: zone id is out of range [ 391.284717][T13465] netlink: zone id is out of range [ 391.286127][T13465] netlink: zone id is out of range [ 391.287556][T13465] netlink: zone id is out of range [ 391.940916][ C2] vcan0: j1939_tp_rxtimer: 0xffff888013423000: rx timeout, send abort [ 392.452048][ C2] vcan0: j1939_tp_rxtimer: 0xffff888013423000: abort rx timeout. Force session deactivation [ 392.719137][T13495] syz.4.1668: attempt to access beyond end of device [ 392.719137][T13495] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 392.723680][T13495] SQUASHFS error: Failed to read block 0x0: -5 [ 392.726158][T13495] unable to read squashfs_super_block [ 394.025225][T12532] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 394.186345][T12532] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 394.190620][T12532] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 394.193465][T12532] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 394.196142][T12532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.200434][T13516] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 394.207498][T12532] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 394.572210][ T57] usb 5-1: USB disconnect, device number 6 [ 394.806060][T13535] ubi31: detaching mtd0 [ 394.811442][T13535] ubi31: mtd0 is detached [ 394.817360][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1680'. [ 394.964161][T13535] hsr_slave_1 (unregistering): left promiscuous mode [ 395.033007][ T63] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 395.184926][ T63] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 395.188105][ T63] usb 8-1: config 0 has no interface number 0 [ 395.190490][ T63] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.194782][ T63] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 395.199303][ T63] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 395.203830][ T63] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 395.208011][ T63] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.213060][ T63] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 395.216631][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.222260][ T63] usb 8-1: config 0 descriptor?? [ 395.225088][T13533] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 395.233174][ T63] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 396.155535][ C2] vxcan0: j1939_tp_rxtimer: 0xffff888026ceb000: rx timeout, send abort [ 396.158094][ C2] vxcan0: j1939_tp_rxtimer: 0xffff888012dda800: rx timeout, send abort [ 396.160810][ C2] vxcan0: j1939_xtp_rx_abort_one: 0xffff888026ceb000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 396.166763][ C2] vxcan0: j1939_xtp_rx_abort_one: 0xffff888012dda800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 396.204667][ T31] usb 8-1: USB disconnect, device number 7 [ 396.207419][ T31] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 396.633216][ T5962] Bluetooth: hci1: command tx timeout [ 396.634033][T13566] 9pnet_fd: Insufficient options for proto=fd [ 396.812584][T13566] team0 (unregistering): Port device team_slave_0 removed [ 396.829401][T13566] team0 (unregistering): Port device team_slave_1 removed [ 397.035145][T13571] autofs4:pid:13571:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 397.448135][T13579] input: syz0 as /devices/virtual/input/input18 [ 398.629332][T13614] net_ratelimit: 9 callbacks suppressed [ 398.629344][T13614] dccp_invalid_packet: P.Data Offset(10) too large [ 398.706104][T13615] dccp_invalid_packet: P.Data Offset(10) too large [ 398.719563][T13615] syz.3.1700: attempt to access beyond end of device [ 398.719563][T13615] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 398.723327][T13615] SQUASHFS error: Failed to read block 0x0: -5 [ 398.725158][T13615] unable to read squashfs_super_block [ 398.731739][T13616] syz.4.1701: attempt to access beyond end of device [ 398.731739][T13616] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 398.735631][T13616] SQUASHFS error: Failed to read block 0x0: -5 [ 398.737898][T13616] unable to read squashfs_super_block [ 400.021010][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.024861][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.028034][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.030904][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.034211][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.037456][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.040403][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.043828][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.046809][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.049786][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.052727][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.056059][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.058986][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.061921][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.065144][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.068371][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.071499][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.075687][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.079705][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.083352][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.086723][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.089779][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.093862][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.159934][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.162983][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.165939][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.168858][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.172369][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.175347][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.178261][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.181249][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.184405][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.187398][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.190371][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.193564][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.196753][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.199748][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.202666][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.205753][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.208752][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.211679][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.222926][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.225942][ T74] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 400.236142][ T74] hid-generic 0000:007F:FFFFFFFE.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 402.436878][T13698] dccp_invalid_packet: P.Data Offset(10) too large [ 402.552184][T13708] syz.0.1713: attempt to access beyond end of device [ 402.552184][T13708] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 402.557360][T13708] SQUASHFS error: Failed to read block 0x0: -5 [ 402.559772][T13708] unable to read squashfs_super_block [ 403.108236][T13714] dccp_invalid_packet: P.Data Offset(10) too large [ 403.138558][T13714] syz.3.1715: attempt to access beyond end of device [ 403.138558][T13714] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 403.143597][T13714] SQUASHFS error: Failed to read block 0x0: -5 [ 403.145948][T13714] unable to read squashfs_super_block [ 406.030136][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1719'. [ 408.383234][T13814] ISOFS: Unable to identify CD-ROM format. [ 408.670518][T13819] dccp_invalid_packet: P.Data Offset(10) too large [ 408.722105][T13819] syz.0.1733: attempt to access beyond end of device [ 408.722105][T13819] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 408.726590][T13819] SQUASHFS error: Failed to read block 0x0: -5 [ 408.728517][T13819] unable to read squashfs_super_block [ 408.780544][T13821] dccp_invalid_packet: P.Data Offset(10) too large [ 408.801359][T13821] syz.6.1732: attempt to access beyond end of device [ 408.801359][T13821] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 408.807806][T13821] SQUASHFS error: Failed to read block 0x0: -5 [ 408.809617][T13821] unable to read squashfs_super_block [ 408.937528][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1735'. [ 408.987985][T13825] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 408.990683][T13825] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 408.995104][T13825] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 408.998670][T13825] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 409.002112][T13825] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 409.014283][T13825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1735'. [ 409.017446][T13825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.940837][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1746'. [ 412.064769][T13874] dccp_invalid_packet: P.Data Offset(10) too large [ 412.135407][T13875] syz.0.1745: attempt to access beyond end of device [ 412.135407][T13875] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 412.147344][T13875] SQUASHFS error: Failed to read block 0x0: -5 [ 412.149841][T13875] unable to read squashfs_super_block [ 412.170735][T13877] autofs4:pid:13877:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 412.443563][ T6102] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 413.858785][T13925] dccp_invalid_packet: P.Data Offset(10) too large [ 413.899602][T13925] syz.3.1752: attempt to access beyond end of device [ 413.899602][T13925] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 413.903352][T13925] SQUASHFS error: Failed to read block 0x0: -5 [ 413.905212][T13925] unable to read squashfs_super_block [ 419.707731][T13962] bridge_slave_0: left allmulticast mode [ 419.709762][T13962] bridge_slave_0: left promiscuous mode [ 419.711705][T13962] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.719617][T13962] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.736329][T13962] bond0: (slave bond_slave_0): Releasing backup interface [ 419.745479][T13962] bond0: (slave bond_slave_1): Releasing backup interface [ 419.761768][T13962] bond1: (slave geneve2): Releasing backup interface [ 419.767494][T13962] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.770137][T13962] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.772451][T13962] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.775134][T13962] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.979641][T13962] tipc: Enabling of bearer rejected, failed to enable media [ 419.979839][T13975] dccp_invalid_packet: P.Data Offset(10) too large [ 420.043198][T13982] syz.3.1760: attempt to access beyond end of device [ 420.043198][T13982] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 420.047090][T13982] SQUASHFS error: Failed to read block 0x0: -5 [ 420.049523][T13982] unable to read squashfs_super_block [ 420.945964][T13997] autofs4:pid:13997:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 422.018588][T14006] dccp_invalid_packet: P.Data Offset(10) too large [ 422.088809][T14006] syz.0.1765: attempt to access beyond end of device [ 422.088809][T14006] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 422.092457][T14006] SQUASHFS error: Failed to read block 0x0: -5 [ 422.095796][T14006] unable to read squashfs_super_block [ 422.641663][T14019] befs: (nullb0): No write support. Marking filesystem read-only [ 422.646097][T14019] befs: (nullb0): invalid magic header [ 423.342487][T14037] dccp_invalid_packet: P.Data Offset(10) too large [ 423.399060][T14039] syz.3.1771: attempt to access beyond end of device [ 423.399060][T14039] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 423.412685][T14039] SQUASHFS error: Failed to read block 0x0: -5 [ 423.414649][T14039] unable to read squashfs_super_block [ 423.431269][T14038] kernel profiling enabled (shift: 7) [ 424.267872][T14049] fuse: Bad value for 'fd' [ 424.585572][T12532] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 425.179618][T14068] ISOFS: Unable to identify CD-ROM format. [ 425.204380][ T74] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 425.308087][T14094] dccp_invalid_packet: P.Data Offset(10) too large [ 425.344713][T14094] syz.6.1777: attempt to access beyond end of device [ 425.344713][T14094] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 425.348289][T14094] SQUASHFS error: Failed to read block 0x0: -5 [ 425.350625][T14094] unable to read squashfs_super_block [ 425.714625][T14105] dccp_invalid_packet: P.Data Offset(10) too large [ 425.769913][T14110] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 425.801283][T14113] syz.6.1780: attempt to access beyond end of device [ 425.801283][T14113] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 425.836425][T14113] SQUASHFS error: Failed to read block 0x0: -5 [ 425.838272][T14113] unable to read squashfs_super_block [ 431.533966][T14146] dccp_invalid_packet: P.Data Offset(10) too large [ 431.574274][T14146] syz.3.1788: attempt to access beyond end of device [ 431.574274][T14146] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 431.578441][T14146] SQUASHFS error: Failed to read block 0x0: -5 [ 431.580712][T14146] unable to read squashfs_super_block [ 432.772615][T14173] ISOFS: Unable to identify CD-ROM format. [ 432.969003][T14198] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 434.094635][T14221] dccp_invalid_packet: P.Data Offset(10) too large [ 434.155281][T14226] syz.6.1794: attempt to access beyond end of device [ 434.155281][T14226] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 434.162886][T14226] SQUASHFS error: Failed to read block 0x0: -5 [ 434.182872][T14226] unable to read squashfs_super_block [ 434.747839][T14238] dccp_invalid_packet: P.Data Offset(10) too large [ 434.800315][T14238] syz.0.1796: attempt to access beyond end of device [ 434.800315][T14238] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 434.805581][T14238] SQUASHFS error: Failed to read block 0x0: -5 [ 434.807491][T14238] unable to read squashfs_super_block [ 438.482506][T14299] dccp_invalid_packet: P.Data Offset(10) too large [ 438.575465][T14303] syz.6.1809: attempt to access beyond end of device [ 438.575465][T14303] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 438.580214][T14303] SQUASHFS error: Failed to read block 0x0: -5 [ 438.582476][T14303] unable to read squashfs_super_block [ 438.635871][T14304] dccp_invalid_packet: P.Data Offset(10) too large [ 438.646437][T14304] syz.3.1810: attempt to access beyond end of device [ 438.646437][T14304] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 438.650062][T14304] SQUASHFS error: Failed to read block 0x0: -5 [ 438.651886][T14304] unable to read squashfs_super_block [ 439.435244][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.934324][T14319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.257552][T14352] dccp_invalid_packet: P.Data Offset(10) too large [ 442.312127][T14353] syz.6.1820: attempt to access beyond end of device [ 442.312127][T14353] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 442.316603][T14353] SQUASHFS error: Failed to read block 0x0: -5 [ 442.318526][T14353] unable to read squashfs_super_block [ 442.479065][T14359] dccp_invalid_packet: P.Data Offset(10) too large [ 442.518078][T14359] syz.0.1822: attempt to access beyond end of device [ 442.518078][T14359] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 442.521733][T14359] SQUASHFS error: Failed to read block 0x0: -5 [ 442.523574][T14359] unable to read squashfs_super_block [ 443.310615][T14374] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1823'. [ 446.686584][T14443] dccp_invalid_packet: P.Data Offset(10) too large [ 446.743221][T14444] syz.0.1835: attempt to access beyond end of device [ 446.743221][T14444] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 446.750998][T14444] SQUASHFS error: Failed to read block 0x0: -5 [ 446.753089][T14444] unable to read squashfs_super_block [ 448.052875][ T6102] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 448.202949][ T6102] usb 5-1: Using ep0 maxpacket: 8 [ 448.216668][ T6102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.219810][ T6102] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 448.222377][ T6102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.235860][ T6102] usb 5-1: config 0 descriptor?? [ 448.456680][ T6102] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 448.958314][ T63] usb 5-1: USB disconnect, device number 7 [ 448.998460][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 449.001425][T14457] bond_slave_1: entered promiscuous mode [ 449.003883][T14457] netlink: 'syz.0.1840': attribute type 2 has an invalid length. [ 450.183266][ T6102] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 450.800908][T14528] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1849'. [ 457.451917][T14597] overlayfs: conflicting lowerdir path [ 457.483385][ T835] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 461.993409][ T5961] Bluetooth: hci3: command 0x0406 tx timeout [ 464.934248][T14674] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 465.001736][T14679] loop2: detected capacity change from 0 to 7 [ 465.011729][T14679] Dev loop2: unable to read RDB block 7 [ 465.014606][T14679] loop2: unable to read partition table [ 465.019696][T14679] loop2: partition table beyond EOD, truncated [ 465.022200][T14679] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 465.493782][T14694] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1874'. [ 466.112889][ T5961] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 466.352994][T14706] input: syz1 as /devices/virtual/input/input19 [ 467.331007][T14716] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1879'. [ 467.433986][T14716] bond0 (unregistering): Released all slaves [ 467.439393][T14719] [ 467.440211][T14719] ====================================================== [ 467.442299][T14719] WARNING: possible circular locking dependency detected [ 467.444238][T14719] 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 Not tainted [ 467.447035][T14719] ------------------------------------------------------ [ 467.450214][T14719] syz.0.1879/14719 is trying to acquire lock: [ 467.451958][T14719] ffff888022970768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_change_mac+0x110/0x1480 [ 467.454773][T14719] [ 467.454773][T14719] but task is already holding lock: [ 467.457502][T14719] ffffffff8feebed0 (dev_addr_sem){++++}-{4:4}, at: dev_set_mac_address_user+0x22/0x50 [ 467.460638][T14719] [ 467.460638][T14719] which lock already depends on the new lock. [ 467.460638][T14719] [ 467.463780][T14719] [ 467.463780][T14719] the existing dependency chain (in reverse order) is: [ 467.466831][T14719] [ 467.466831][T14719] -> #2 (dev_addr_sem){++++}-{4:4}: [ 467.468936][T14719] down_read+0x9a/0x330 [ 467.470318][T14719] address_show+0x23/0x2a0 [ 467.471770][T14719] dev_attr_show+0x53/0xe0 [ 467.473200][T14719] sysfs_kf_seq_show+0x23e/0x410 [ 467.474740][T14719] seq_read_iter+0x4f4/0x12b0 [ 467.476181][T14719] kernfs_fop_read_iter+0x414/0x580 [ 467.477652][T14719] vfs_read+0x886/0xbf0 [ 467.478981][T14719] ksys_read+0x12b/0x250 [ 467.480330][T14719] do_syscall_64+0xcd/0x250 [ 467.481757][T14719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.483543][T14719] [ 467.483543][T14719] -> #1 (kn->active#20){++++}-{0:0}: [ 467.485593][T14719] kernfs_drain+0x48f/0x590 [ 467.486997][T14719] __kernfs_remove+0x281/0x670 [ 467.488500][T14719] kernfs_remove_by_name_ns+0xb2/0x130 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 467.490241][T14719] remove_files+0x96/0x1c0 [ 467.491724][T14719] sysfs_remove_group+0x8b/0x180 [ 467.493347][T14719] sysfs_remove_groups+0x60/0xa0 [ 467.494893][T14719] device_remove_attrs+0x204/0x290 [ 467.496443][T14719] device_del+0x38e/0x9f0 [ 467.498036][T14719] unregister_netdevice_many_notify+0x13aa/0x1f30 [ 467.500570][T14719] unregister_netdevice_queue+0x307/0x3f0 [ 467.502350][T14719] _cfg80211_unregister_wdev+0x64b/0x830 [ 467.504093][T14719] ieee80211_remove_interfaces+0x34f/0x720 [ 467.505860][T14719] ieee80211_unregister_hw+0x55/0x3a0 [ 467.507501][T14719] mac80211_hwsim_netlink_notify+0x2ec/0x8e0 [ 467.509388][T14719] notifier_call_chain+0xb7/0x410 [ 467.511026][T14719] blocking_notifier_call_chain+0x69/0xa0 [ 467.512767][T14719] netlink_release+0x1838/0x1fe0 [ 467.514109][T14719] __sock_release+0xb0/0x270 [ 467.515594][T14719] sock_close+0x1c/0x30 [ 467.516902][T14719] __fput+0x3ff/0xb70 [ 467.518159][T14719] __fput_sync+0xa1/0xc0 [ 467.519542][T14719] __ia32_sys_close+0x86/0x100 [ 467.520998][T14719] __do_fast_syscall_32+0x73/0x120 [ 467.522553][T14719] do_fast_syscall_32+0x32/0x80 [ 467.524059][T14719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.525963][T14719] [ 467.525963][T14719] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 467.528097][T14719] __lock_acquire+0x249e/0x3c40 [ 467.529581][T14719] lock_acquire.part.0+0x11b/0x380 [ 467.531137][T14719] __mutex_lock+0x19b/0xb10 [ 467.532547][T14719] ieee80211_change_mac+0x110/0x1480 [ 467.534151][T14719] dev_set_mac_address+0x301/0x4a0 [ 467.535750][T14719] dev_set_mac_address_user+0x30/0x50 [ 467.537606][T14719] dev_ifsioc+0xb8d/0x10d0 [ 467.539081][T14719] dev_ioctl+0x224/0x10c0 [ 467.540548][T14719] sock_do_ioctl+0x19e/0x280 [ 467.542087][T14719] compat_sock_ioctl+0x318/0x7e0 [ 467.543772][T14719] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 467.545829][T14719] __do_fast_syscall_32+0x73/0x120 [ 467.547908][T14719] do_fast_syscall_32+0x32/0x80 [ 467.549710][T14719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.551710][T14719] [ 467.551710][T14719] other info that might help us debug this: [ 467.551710][T14719] [ 467.554483][T14719] Chain exists of: [ 467.554483][T14719] &rdev->wiphy.mtx --> kn->active#20 --> dev_addr_sem [ 467.554483][T14719] [ 467.558778][T14719] Possible unsafe locking scenario: [ 467.558778][T14719] [ 467.561460][T14719] CPU0 CPU1 [ 467.563284][T14719] ---- ---- [ 467.565024][T14719] lock(dev_addr_sem); [ 467.566174][T14719] lock(kn->active#20); [ 467.568507][T14719] lock(dev_addr_sem); [ 467.570322][T14719] lock(&rdev->wiphy.mtx); [ 467.571599][T14719] [ 467.571599][T14719] *** DEADLOCK *** [ 467.571599][T14719] [ 467.573808][T14719] 2 locks held by syz.0.1879/14719: [ 467.575328][T14719] #0: ffffffff8fefa3e8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x213/0x10c0 [ 467.577776][T14719] #1: ffffffff8feebed0 (dev_addr_sem){++++}-{4:4}, at: dev_set_mac_address_user+0x22/0x50 [ 467.580632][T14719] [ 467.580632][T14719] stack backtrace: [ 467.582265][T14719] CPU: 3 UID: 0 PID: 14719 Comm: syz.0.1879 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 467.582278][T14719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.582284][T14719] Call Trace: [ 467.582290][T14719] [ 467.582297][T14719] dump_stack_lvl+0x116/0x1f0 [ 467.582321][T14719] print_circular_bug+0x490/0x760 [ 467.582342][T14719] check_noncircular+0x31a/0x400 [ 467.582358][T14719] ? __pfx_check_noncircular+0x10/0x10 [ 467.582376][T14719] ? hlock_class+0x4e/0x130 [ 467.582392][T14719] ? mark_lock+0xb5/0xc60 [ 467.582408][T14719] ? lockdep_lock+0xc6/0x200 [ 467.582417][T14719] ? __pfx_lockdep_lock+0x10/0x10 [ 467.582428][T14719] __lock_acquire+0x249e/0x3c40 [ 467.582443][T14719] ? __pfx___lock_acquire+0x10/0x10 [ 467.582461][T14719] lock_acquire.part.0+0x11b/0x380 [ 467.582474][T14719] ? ieee80211_change_mac+0x110/0x1480 [ 467.582486][T14719] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 467.582499][T14719] ? rcu_is_watching+0x12/0xc0 [ 467.582513][T14719] ? trace_lock_acquire+0x14e/0x1f0 [ 467.582529][T14719] ? find_held_lock+0x2d/0x110 [ 467.582544][T14719] ? ieee80211_change_mac+0x110/0x1480 [ 467.582560][T14719] ? lock_acquire+0x2f/0xb0 [ 467.582576][T14719] ? ieee80211_change_mac+0x110/0x1480 [ 467.582586][T14719] __mutex_lock+0x19b/0xb10 [ 467.582600][T14719] ? ieee80211_change_mac+0x110/0x1480 [ 467.582610][T14719] ? ieee80211_change_mac+0x110/0x1480 [ 467.582620][T14719] ? ib_device_get_by_netdev+0x95/0x520 [ 467.582630][T14719] ? __pfx___mutex_lock+0x10/0x10 [ 467.582643][T14719] ? vxlan_netdevice_event+0x120/0x370 [ 467.582654][T14719] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 467.582662][T14719] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.582678][T14719] ? ieee80211_change_mac+0x110/0x1480 [ 467.582688][T14719] ieee80211_change_mac+0x110/0x1480 [ 467.582701][T14719] dev_set_mac_address+0x301/0x4a0 [ 467.582744][T14719] ? __pfx_dev_set_mac_address+0x10/0x10 [ 467.582767][T14719] ? __pfx_down_write+0x10/0x10 [ 467.582789][T14719] ? full_name_hash+0xbc/0x110 [ 467.582800][T14719] dev_set_mac_address_user+0x30/0x50 [ 467.582813][T14719] dev_ifsioc+0xb8d/0x10d0 [ 467.582826][T14719] ? __pfx_dev_ifsioc+0x10/0x10 [ 467.582838][T14719] ? dev_ioctl+0x213/0x10c0 [ 467.582850][T14719] ? __pfx___mutex_lock+0x10/0x10 [ 467.582863][T14719] ? __pfx_lock_release+0x10/0x10 [ 467.582876][T14719] ? full_name_hash+0xbc/0x110 [ 467.582886][T14719] dev_ioctl+0x224/0x10c0 [ 467.582899][T14719] sock_do_ioctl+0x19e/0x280 [ 467.582910][T14719] ? __pfx_sock_do_ioctl+0x10/0x10 [ 467.582921][T14719] ? hci_sock_ioctl+0xc5/0x7d0 [ 467.582934][T14719] compat_sock_ioctl+0x318/0x7e0 [ 467.582946][T14719] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 467.582960][T14719] ? __fget_files+0x206/0x3a0 [ 467.582974][T14719] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 467.582986][T14719] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 467.582998][T14719] __do_fast_syscall_32+0x73/0x120 [ 467.583012][T14719] do_fast_syscall_32+0x32/0x80 [ 467.583025][T14719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.583041][T14719] RIP: 0023:0xf7ff4579 [ 467.583049][T14719] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 467.583059][T14719] RSP: 002b:00000000f50f555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 467.583069][T14719] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000000008924 [ 467.583074][T14719] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.583080][T14719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.583086][T14719] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 467.583091][T14719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.583099][T14719] [ 467.701826][ C3] vkms_vblank_simulate: vblank timer overrun [ 467.703657][T14691] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 467.817176][T14711] syz_tun (unregistering): left allmulticast mode [ 467.838230][T14716] syz_tun (unregistering): left promiscuous mode [ 468.136019][ T1138] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.285015][ T1138] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.344612][ T1138] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.404510][ T1138] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.658058][ T1138] bond0 (unregistering): Released all slaves [ 468.715465][ T1138] tipc: Disabling bearer [ 468.717553][ T1138] tipc: Left network mode [ 468.773261][ T1138] IPVS: stopping master sync thread 7511 ... [ 468.985118][ T1138] hsr_slave_0: left promiscuous mode [ 468.987130][ T1138] hsr_slave_1: left promiscuous mode [ 468.990432][ T1138] veth1_macvtap: left promiscuous mode [ 468.992049][ T1138] veth0_macvtap: left promiscuous mode [ 469.974170][ T1138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.025607][ T1138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.086209][ T1138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.175443][ T1138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.263985][ T1138] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.315564][ T1138] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.381244][ T1138] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.444692][ T1138] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.530975][ T1138] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.605370][ T1138] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.664902][ T1138] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.705832][ T1138] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.789904][ T1138] bridge_slave_1: left allmulticast mode [ 470.791524][ T1138] bridge_slave_1: left promiscuous mode [ 470.793787][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.797728][ T1138] bridge_slave_0: left allmulticast mode [ 470.799953][ T1138] bridge_slave_0: left promiscuous mode [ 470.802127][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.807851][ T1138] bridge_slave_1: left allmulticast mode [ 470.810039][ T1138] bridge_slave_1: left promiscuous mode [ 470.812242][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.817944][ T1138] bridge_slave_0: left allmulticast mode [ 470.819576][ T1138] bridge_slave_0: left promiscuous mode [ 470.821142][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.825543][ T1138] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 470.855488][ T1138] batman_adv: batadv0: Removing interface: ip6gretap1 [ 470.909488][ T1138] erspan0 (unregistering): left promiscuous mode [ 470.915511][ T1138] gretap0 (unregistering): left promiscuous mode [ 471.135706][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.138950][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.141759][ T1138] bond0 (unregistering): Released all slaves [ 471.221215][ T1138] bond1 (unregistering): Released all slaves [ 471.226395][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.229389][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.232144][ T1138] bond0 (unregistering): Released all slaves [ 471.296684][ T1138] tipc: Left network mode [ 471.356980][ T1138] IPVS: stopping master sync thread 7592 ... [ 471.968536][ T1138] hsr_slave_0: left promiscuous mode [ 471.970381][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.972423][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.975147][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.977203][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.980142][ T1138] hsr_slave_0: left promiscuous mode [ 471.981915][ T1138] hsr_slave_1: left promiscuous mode [ 471.985175][ T1138] hsr_slave_0: left promiscuous mode [ 471.986943][ T1138] hsr_slave_1: left promiscuous mode [ 471.988612][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.991000][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.995042][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.997372][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.003260][ T1138] veth1_macvtap: left promiscuous mode [ 472.004727][ T1138] veth0_macvtap: left promiscuous mode [ 472.006285][ T1138] veth1_vlan: left promiscuous mode [ 472.007782][ T1138] veth0_vlan: left promiscuous mode [ 472.009789][ T1138] veth1_macvtap: left promiscuous mode [ 472.011357][ T1138] veth0_macvtap: left promiscuous mode [ 472.014388][ T1138] veth1_macvtap: left promiscuous mode [ 472.015992][ T1138] veth0_macvtap: left promiscuous mode [ 472.017513][ T1138] veth1_vlan: left promiscuous mode [ 472.018996][ T1138] veth0_vlan: left promiscuous mode [ 472.181057][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 472.229920][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 473.085294][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 473.130437][ T1138] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 22:14:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b744bc0 RCX=ffffffff81ade35a RDX=ffff888025490000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006faf920 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10056e8979 R13=0000000000000001 R14=ffff88802b43ffc0 R15=ffff88802b744bc8 RIP=ffffffff81b9ebd2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3a8d51 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000005 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=84ab4463 EBX=ffffffff ECX=ffffffff EDX=84ab440f ESI=00000000 EDI=ffffffff EBP=f6c74c88 ESP=fff09810 EIP=f71279ad EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 5824d440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74a20a0 CR3=0000000072752000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000009 RCX=ffffffff84c90aae RDX=ffff888021948000 RSI=000000000000000f RDI=0000000000000010 RBP=ffffc90002eff440 RSP=ffffc90002eff1d8 R8 =0000000000000001 R9 =0000000000000008 R10=000000000000000f R11=0000000000000012 R12=000000000000000f R13=ffffc90002eff290 R14=ffff88802955f200 R15=ffffc90002eff448 RIP=ffffffff81b9ecf0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f74aecb6d00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563e3f785000 CR3=000000004eb7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=01645b7d01645b7d 01645b7d01645b7d 01645b7d01645b7d 01645b7d01645b7d 01645b7d01645b7d 01645b7d01645b7d 01645b7d01645b7d 01645b7d01645b7d ZMM22=95dd1f6b95dd1f6b 95dd1f6b95dd1f6b 95dd1f6b95dd1f6b 95dd1f6b95dd1f6b 95dd1f6b95dd1f6b 95dd1f6b95dd1f6b 95dd1f6b95dd1f6b 95dd1f6b95dd1f6b ZMM23=3b9433383b943338 3b9433383b943338 3b9433383b943338 3b9433383b943338 3b9433383b943338 3b9433383b943338 3b9433383b943338 3b9433383b943338 ZMM24=0e2192730e219273 0e2192730e219273 0e2192730e219273 0e2192730e219273 0e2192730e219273 0e2192730e219273 0e2192730e219273 0e2192730e219273 ZMM25=0266e3450266e345 0266e3450266e345 0266e3450266e345 0266e3450266e345 0266e3450266e345 0266e3450266e345 0266e3450266e345 0266e3450266e345 ZMM26=4262662542626625 4262662542626625 4262662542626625 4262662542626625 4262662542626625 4262662542626625 4262662542626625 4262662542626625 ZMM27=e2f57ce2e2f57ce2 e2f57ce2e2f57ce2 e2f57ce2e2f57ce2 e2f57ce2e2f57ce2 e2f57ce2e2f57ce2 e2f57ce2e2f57ce2 e2f57ce2e2f57ce2 e2f57ce2e2f57ce2 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=fd0f0000fd0f0000 fd0f0000fd0f0000 fd0f0000fd0f0000 fd0f0000fd0f0000 fd0f0000fd0f0000 fd0f0000fd0f0000 fd0f0000fd0f0000 fd0f0000fd0f0000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853eac75 RDI=ffffffff9ab72ea0 RBP=ffffffff9ab72e60 RSP=ffffc9000dfbef78 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9ab72e60 R15=0000000000000000 RIP=ffffffff853eac9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f80cffc CR3=00000000719fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000