last executing test programs: 8m12.501096958s ago: executing program 32 (id=201): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYRES32, @ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000001185b0000010000000000000000000000186900000b000000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, r0}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0xc4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x94, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x400, 0x0, 0x1], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x4, 0x3, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc10}]}]}]}}]}, 0xc4}}, 0x8000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0e00180a5171ce00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r11, 0x0, 0x0, 0x4}, 0x20) r12 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 8m12.428582552s ago: executing program 33 (id=203): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) r2 = timerfd_create(0x9, 0x80000) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000006}, {@dev}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 8m3.477141563s ago: executing program 34 (id=105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1a}, 0x94) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8']) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000f8ffffffffffffff05000600000000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="2f0000000000befce153fa66352c14060000000000000056", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r4, @ANYRESDEC=0x0, @ANYBLOB="d917763b746a1ed4802ac6de88020004000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = accept4$unix(r7, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x800) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000300)) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0x5, 0x3}, {0xffff, 0xfff3}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) fcntl$lock(r0, 0x7, &(0x7f0000000a00)={0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0xffffffffffffffff}) (async) fcntl$lock(r0, 0x7, &(0x7f0000000a00)={0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r6], 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r6], 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x8, 0xe, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x700, 0x700, 0x72, 0x9}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=r10, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000049d76f4d2570e9f7000000000000000000"], 0x50) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=r10, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000049d76f4d2570e9f7000000000000000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r10}, &(0x7f0000000840), &(0x7f0000000880)='%-5lx \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x20, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000050000000000000003e9ff0018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000faffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a50000001853000003000000000000000000000018540000020000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x1da, 0x12, &(0x7f0000000640)=""/18, 0x40f00, 0x24, '\x00', r11, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x17028, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[0x1, r12, r13]}, 0x94) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x440900, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x440900, 0x0) 7m42.821946982s ago: executing program 35 (id=578): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf020000000000002600000000000000e8020000000081ffffff0000080038000100040004000d00"], 0x78) 7m25.414670803s ago: executing program 4 (id=652): rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) (async) r0 = gettid() (async) r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f00000000c0)={0x29, 0x4, 0x4}) (async) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$watch_queue(r2, &(0x7f0000000300)=""/176, 0xb0) r3 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x19) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000140)={0x3, 0x0, [{0x80000007, 0x3, 0x0, 0x7dec, 0xc28, 0x80000000, 0x3}, {0x40000000, 0x3, 0x0, 0x1a, 0x1, 0xcaba, 0x10001}, {0x80000007, 0x3, 0x6, 0x10001, 0x3, 0x9}]}) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f00000000c0)=0x2, 0x4) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000080)={0x7968786d, 0xfffffffa, 0x7, 0x3dc, 0xd, "d925b2bb00d06a601dc0d091f16dc6930100", 0xd, 0xe}) 7m24.464355053s ago: executing program 4 (id=659): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x107140, 0x0) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000380)={0x2, 0xfe, 0x7, 0xa, 0x92, 0x2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r3}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 7m24.119162857s ago: executing program 4 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './bus\x00'}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f0000000180)='./bus\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 7m23.911895766s ago: executing program 4 (id=664): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', r5, 0x28, 0x7, 0x8, 0x2, {{0x10, 0x4, 0x1, 0x2f, 0x40, 0x65, 0x0, 0xfa, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x6f, [@empty]}, @cipso={0x86, 0x21, 0x2, [{0x7, 0xa, "3d51b7dfeb7bf0a6"}, {0x6, 0x11, "e2d6e5cf14289215c96676cb7b9034"}]}, @noop, @noop]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getchain={0x44, 0x66, 0x2, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x1, 0xb}, {0xfff1, 0xffe0}, {0xffea, 0x8}}, [{0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x48040) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r5, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x405, 0xfffffffd, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, 0x10408, 0x2140}, [@IFLA_LINKMODE={0x5, 0x11, 0x3}, @IFLA_ADDRESS={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000881}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000140)={0x80, 0x0, 0x7}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 7m23.707318732s ago: executing program 4 (id=666): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000200)={0xa, {0x2, 0x7, 0x7, 0x9, 0x4dcc, 0xb}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fstat(r3, &(0x7f0000000100)) 7m23.447158073s ago: executing program 4 (id=668): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000d000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES32=r4], 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m17.877085255s ago: executing program 36 (id=606): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x100, 0xfffffffd, 0x3, {{{@in=@private=0xa010100, @in=@private=0xa010100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, @in=@local, {0x80000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200, 0x3}, {0xffff, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x82}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x28400, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x9, 0x0, 0x0, 0xca12}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 7m8.431439108s ago: executing program 37 (id=668): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000d000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES32=r4], 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m18.973361408s ago: executing program 7 (id=1645): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @dev={0xfe, 0x80, '\x00', 0x32}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000003c0)="7cb1f1e7b19ff15db04eacbae5fcadd8b91a2532c86e90d7c8b7f4860ba38d05f694f79607fb7004c4b132da8df1a51132208fceb5a908ec63b31e90bca6cec833151a41b25f21b65b9f197725379246916c694af97729941a774e0bde277553f6f5beaf2aaa2cffe1d7a47c2ba5e833dba485564534648d4ea335c9c96ccd925a9db98bd82f243b27ed407ceb34f578ef760c83995936b7de95f7dc380666b6313f80b210fe33e65cbf42279ce6a9c65ab9862d815ae8f2cda8c24a2c31af6a4430edba98582ed26f", 0xc9}], 0x1}}], 0x1, 0x931766f6359ee500) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) shutdown(r1, 0x1) sendto$inet6(r1, &(0x7f00000006c0)="8ad41e011c01", 0x6, 0x8000, &(0x7f0000000780)={0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0xe27, 0x220000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000240)={r6, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000300)={r6, @in={{0x2, 0x4e24, @private=0xa010102}}}, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000182000007b692bd4bcbce500e754d717bb5399e7a6bacd0430478b8052d712b7d36ead11d56241537361055ac292a7bc5bad28946843e104098057dd7a71c8fb4208de6d25c55efb5c5c1f00e1b47695f211ed391c12c3acf14997", @ANYRES32=r0, @ANYBLOB="000000000000000071000000000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) 5m18.772216691s ago: executing program 7 (id=1647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, "1c4a6d", "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"}}, 0x110) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x106, 0xa}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r4, 0x2}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 5m18.532529717s ago: executing program 7 (id=1651): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x5, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000a40], 0x0, 0x0, &(0x7f0000000a40)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x108) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r2, 0x11, 0x0, 0x4, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x83, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x20, 0x43, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0xa3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x0, 0x4}}}}}]}}]}}, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5ffe}}, 0x0, 0x0, 0x36, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) shutdown(r1, 0x1) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000000)="a9d8e9f2adc20fb1ba80b14e0028c20577c725ccff669b42e89f", 0x1a, 0x4, &(0x7f0000000040)={0x11, 0x6, 0x0, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) 5m17.822347194s ago: executing program 7 (id=1662): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) socket$netlink(0x10, 0x3, 0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @multicast2}, {0x306, @link_local}, 0x0, {0x2, 0x4e23, @empty}, 'batadv_slave_1\x00'}) 5m17.632851364s ago: executing program 7 (id=1666): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) (async) r0 = socket$inet(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2100, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xf4d}) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x40083, 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000140)) 5m17.407000529s ago: executing program 7 (id=1669): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18005c0003000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) (async) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='oom_score_adj_update\x00', r5}, 0x18) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 5m2.210460375s ago: executing program 38 (id=1669): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18005c0003000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) (async) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='oom_score_adj_update\x00', r5}, 0x18) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 2m29.945003879s ago: executing program 5 (id=3011): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000400)='x', 0x1, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m29.821657421s ago: executing program 5 (id=3012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m28.887361297s ago: executing program 5 (id=3014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c6970001400078008"], 0x60}}, 0xc000) 2m28.740849971s ago: executing program 5 (id=3016): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x8, 0x0, 0x0, {0x40, 0x3, 0x6, 0xffff, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f00000002c0)={0xfdfd, 0x6e, 0x5d, 0x4, 0x1d, "070a5d5a8ad0c6d99b34a733b20cc3daf67dae", 0x76fbae7, 0x1}) 2m28.561752792s ago: executing program 5 (id=3017): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b"], 0xd4}}, 0x0) 2m28.434503491s ago: executing program 5 (id=3019): r0 = mq_open(0x0, 0x40, 0x24, 0x0) mq_getsetattr(r0, &(0x7f0000000100)={0x0, 0x7fffffff, 0x10000, 0x80}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = creat(0x0, 0xd931d3864d39ddae) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x12, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2m20.368813333s ago: executing program 8 (id=3033): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)="67b20c7b993c92ddffc4f60cf51aeaa026ac51a1a58a5af882b8219a914b281f6a448441ab76812af738df1d2f8dee3f4d2015041bda3b186c557549662f2717e8b3c67f1cceb625809ed98efc822fd9"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 2m20.229636543s ago: executing program 8 (id=3035): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b"], 0xd4}}, 0x0) 2m20.100602526s ago: executing program 8 (id=3037): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) 2m19.919330509s ago: executing program 8 (id=3039): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) sendmmsg(r0, &(0x7f0000007380)=[{{&(0x7f00000000c0)=@ieee802154, 0x80, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000600)="2856d9e498fe5fbf0cdbabf0260a4d148a038581eae4860bc9c578174dcf1830f09e269abd418c1cce84e74e5ba58b3fffa8c2c3f8717c33fb20d6cb0f8ffd1af273e0d9a27968880e784501ddb3a7d4d53e680c2645ba32460e2c3c497421083703a15bc1846562eaf4f3da19e783f4605d87d857b4825db1fd9749a90174e16a7586869dc5fd09f0232d0292959888e885d823750c8268293324d9a6d72276aa131181bbecb7b8458daf22404c2bb83b9a3abb3c68be28f8c1502729d0258fce879c0d26ed304cb7be6fc2a766f2a37a9caa228dbeb2823bf554502ffa4b2b877fb2aa27", 0xe5}, {&(0x7f0000000700)="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", 0xd30}, {&(0x7f0000000140)="74452ad699216b87699dfffd48ec324679e30cdc5a36b8da23d2870789e62ddca2ee20e32b085c782021c003fae6d5fdbb0153b32e6040fb82f4999f28cbb0bba8a8e9eb7a8113826b9e78", 0x4b}, {&(0x7f0000001700)="312c3d8ad7477cf13df7b67a35a15073bfce1ce714d5b5a22e1d3e082d9dc532946db5a1aad6ddb7aaec5bfcb780cfc7d96bfee27057841bafcb111398122c5636907bb1bbeccb907dd45d4de391101fce9174c625ed686580ae9b6038924b0d7108140fd8c69425611edaf0cda72a45509e2b3f6536b4c725e0cda7f1c762f5dc224db7612674f80e5e9bd2a52121dd70ba02841836358099afe55dd77e09775897b28c81cf36fa1c588fcc42cb21e294aa54b9408b2a2780cf0d1d776f16f360e788b37f077afdb9873b5cd620ba78cb387bfefcb46670c6b0e420db84876b805d63e73f7e95a5337b1445f053", 0xee}, {&(0x7f0000001800)}, {&(0x7f00000018c0)="caf49f1113c2f1d3547ffb064ee30dcccb0d460358ebae68f8d699d1f5c5b5ad9c29f4ecc5a4d52e0c1c1b1121cb6660b7ea45cc52d93e", 0x37}], 0x7}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000040) 2m18.991983727s ago: executing program 8 (id=3042): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)=0x0) r2 = inotify_init() readv(r2, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) 2m15.813550057s ago: executing program 8 (id=3050): syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 2m13.104603241s ago: executing program 39 (id=3019): r0 = mq_open(0x0, 0x40, 0x24, 0x0) mq_getsetattr(r0, &(0x7f0000000100)={0x0, 0x7fffffff, 0x10000, 0x80}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = creat(0x0, 0xd931d3864d39ddae) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x12, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2m5.210903239s ago: executing program 9 (id=3057): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) 2m2.36892931s ago: executing program 9 (id=3059): ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) close_range(r0, 0xffffffffffffffff, 0x0) 2m0.563752421s ago: executing program 40 (id=3050): syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1m58.81065232s ago: executing program 9 (id=3064): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) getpid() r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xc4fffffe) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000840)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c0c0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x180) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000002180)={'ipvs\x00'}, &(0x7f00000021c0)=0x1e) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) 1m58.415426279s ago: executing program 9 (id=3066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1m57.345475551s ago: executing program 9 (id=3068): bpf$MAP_CREATE(0x0, 0x0, 0x50) getpid() r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 1m56.273601286s ago: executing program 0 (id=3072): syz_emit_vhci(0x0, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) 1m56.12755369s ago: executing program 0 (id=3073): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r0, 0x400000) 1m56.011562677s ago: executing program 9 (id=3074): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) socket(0x2b, 0xa, 0x1) lseek(0xffffffffffffffff, 0x101, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) 1m56.00262487s ago: executing program 0 (id=3076): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x1}, 0x76e0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 1m55.533949102s ago: executing program 0 (id=3078): ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108000000000000a700000000000500010006"], 0x1c}}, 0x0) 1m55.336458309s ago: executing program 0 (id=3079): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) 1m53.768789732s ago: executing program 0 (id=3080): sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1m40.87672461s ago: executing program 41 (id=3074): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) socket(0x2b, 0xa, 0x1) lseek(0xffffffffffffffff, 0x101, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) 1m38.780353527s ago: executing program 42 (id=3080): sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 37.093228736s ago: executing program 2 (id=3316): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffd14, 0x0, 'syz0\x00', 0x0, 0x3}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000340)={0xda, 0x0, 0x1}) r3 = syz_clone(0x82102000, &(0x7f0000000240)="0b5ee0829b16bde4dcf9fb5a0330b1b65eca0740cf56575c7dadcf8aaf41c11c3c6cfb7018be73d7357289027c56b4bb4e820d6542210919b5f9dfae25cdf2aefdd729074f8c520564951ac55fbfd489fd73949e5663ef7b90ff70cf9f6e89413c31bd02b3e15412b6e36480a3d213c59212bb2ede0fbccc2ef6f1adc7a000aefafda9bf13c4a5c2dd7c03ecc48f372a923b35be961cf512ce6f7bd209099222", 0xa0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000003c0)="17270b8e5f9b205ffbc90a9489ebc902bbbb7a48acad0ea31b7b46f8a978cd96ebd03e0f77e914ebfe9103b8caba1a8a46268ba10dc1c102a9d1c106e3a350fe63") sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x40, 0x100, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0x8, 0xc7, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4054}, 0xc000) syz_usb_connect(0x3, 0x2d, &(0x7f0000008ec0)={{0x12, 0x1, 0x110, 0x2b, 0x95, 0xd9, 0x8, 0x4e2, 0x1412, 0xca10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x8, 0x6, 0x62, 0x0, [], [{{0x9, 0x5, 0x9, 0x1, 0x200, 0x4, 0x8, 0xf8}}]}}]}}]}}, 0x0) prctl$PR_SET_FPEXC(0xc, 0x80000) prctl$PR_SET_FPEXC(0xc, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x6a7}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x1, 0x3, 0xffffffff, 0x100}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, &(0x7f00000000c0)) prctl$PR_SET_FPEXC(0xc, 0x80) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x400000b2, 0xbc9faef6, 0xbf}]}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000010300)={0x2020, 0x0, 0x0, 0x0}, 0x2074) syz_fuse_handle_req(r10, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x2, {0x3, 0x0, 0x0, 0x5, 0x0, 0x1000, {0x1, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x0, 0x6, 0x0, 0x7, 0xa000, 0x2, r11, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, r11, &(0x7f0000000140)='./cgroup\x00') 34.089420781s ago: executing program 2 (id=3331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, r4, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 33.118584557s ago: executing program 2 (id=3341): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x0, 0x25dfdbff}, 0x18}}, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000040)={@multicast, @random='\x00\x00\x00 \x00', @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x3d, 0x25, 0x0, 0x0, 0x1, 0x2, 0x0, @private=0xa010101, @multicast1, {[@ra={0x94, 0x4}]}}, {0x11, 0x7c, 0x0, @multicast1, "73f3000062"}}}}}, 0x0) 32.9705572s ago: executing program 2 (id=3342): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0x81) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) (async) ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0x81) (async) 32.060522576s ago: executing program 2 (id=3348): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(r4, &(0x7f0000000080)='.\x00', 0x9001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) dup2(r2, r0) recvmmsg(r1, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000900)=""/243, 0xf3}], 0x1, &(0x7f0000000280)=""/11, 0xb}, 0x1}, {{0x0, 0x0, &(0x7f00000080c0)=[{&(0x7f0000007cc0)=""/122, 0x7a}], 0x1}, 0x9}], 0x2, 0x2, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) open_tree(r4, &(0x7f0000000080)='.\x00', 0x9001) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') (async) sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) (async) dup2(r2, r0) (async) recvmmsg(r1, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000900)=""/243, 0xf3}], 0x1, &(0x7f0000000280)=""/11, 0xb}, 0x1}, {{0x0, 0x0, &(0x7f00000080c0)=[{&(0x7f0000007cc0)=""/122, 0x7a}], 0x1}, 0x9}], 0x2, 0x2, 0x0) (async) close(r0) (async) 31.936857548s ago: executing program 2 (id=3350): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f0000000480)) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x38, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x2}, @enter_looper, @increfs_done={0x40106308, 0x3}, @dead_binder_done, @enter_looper, @enter_looper, @exit_looper], 0x1000, 0x0, &(0x7f0000000500)="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"}) close(r0) sendto$inet(r1, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) 16.627386092s ago: executing program 43 (id=3350): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f0000000480)) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x38, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x2}, @enter_looper, @increfs_done={0x40106308, 0x3}, @dead_binder_done, @enter_looper, @enter_looper, @exit_looper], 0x1000, 0x0, &(0x7f0000000500)="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"}) close(r0) sendto$inet(r1, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) 10.005528008s ago: executing program 1 (id=3523): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x1a4, r1, 0xe701ac47a3d23ecd, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x17e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00\x91d\xe6,\xd3@I\x17\xf3\xbeeI8bz\xdb\xb8s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\xacs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=40\xe8R\x83p,J\xca\x85\xcb\xfa:\xdb\xda\x05\xed\xc8\xad\xa2\xfc0C\x9e3\x8e*\xae\x91\xa4\xc7)\xc0\x87\x9b\xee~\xdb\xac\x03\x90\xb1\x05\x81\xb1j\xfaO`\xa7\xa0\xeb\x83\x13 \xc8\x98\xdb\v \x95\x8eD\xc3\xc6:\xcc%\x88\xc7\xa5\xe5\xfc\xccl\x96F_\x92\xa2\xc3\xea@\"\xb1\x1b`o~B\xb4W\xd8\v\xabCBL\x81A\x92D\xd5{K\xf0\xd5\x91\n\x94\x9b\xd9\xdb2E\\\xb1\x90\xf1\xfc\xc1}\x96\xf4\xba3g\xc8\xf7j\xbc\xf1\x11\xe3\x05\xean9M\xeb&\xd2\xdf\xbe\xa1\xe8[\x91\xa5\x90uX\xd0IH!\xe3\x8a9k\x94\xc8\xde\xea\xc6^\x96\xceV\xb2\xcba\x8b\xbc\xe9'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) r2 = userfaultfd(0x80001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4$nfc_llcp(r5, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)="8c") r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x400, 0x91, 0x3ff, 0x32315559, [0x219, 0x7], [0x8e, 0x195], 0x1}}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mlock(&(0x7f0000ab3000/0x4000)=nil, 0x4000) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000a21000/0x1000)=nil, &(0x7f00007eb000/0x1000)=nil, 0x1000, 0x2, 0x2}) 9.900304965s ago: executing program 1 (id=3524): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) sendmsg$inet_sctp(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000014c0)="87", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x4048000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="f2ff01"], 0xc) 9.81449743s ago: executing program 1 (id=3526): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) semop(0x0, &(0x7f0000000100)=[{0x3, 0xf, 0x1800}], 0x1) (async, rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0xfffffffe, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x10, 0x3}, 0x94) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0xffffffffffffff14, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, r2}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0xffffffffffffffbc) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000780)={&(0x7f0000000180), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/50, 0x32}, {&(0x7f00000003c0)=""/144, 0x90}, {&(0x7f00000004c0)=""/249, 0xf9}], 0x9, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40000000) bind$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) io_setup(0x1, &(0x7f00000012c0)=0x0) (async) r10 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r10, 0x0, 0x0, 0x200000000004}]) 9.499619256s ago: executing program 1 (id=3527): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = creat(&(0x7f0000001080)='./file0\x00', 0x8a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000012c0)={r1, 0x58, &(0x7f0000001240)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000012c0)={r1, 0x58, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', r3, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001300)=ANY=[@ANYRES8=r4, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="1b20baa6c04459cba9ff5fa5d4c3dcf291fbf9c5786bb2a17f3b6b6c6008dee0b7f93eef36917e0c6415fc84d4ad9bcc8e29ba9995a2ac16c2f2ae578819a7cc5efc3f81aa5300ee9c7b3b47240ca2b8b9bd0313fe90850c89857f90c6a6649997c6508dea32d1b095b0aa8c0835a470eb4adfaa80c841f897a08b9bc48da573771d0010a147e914751cc3e4ce19db7cc34519ef2e4a10c6d58cfd00be292faa53b09c01c4e8c8e3b3863bccb991b9f117dc54b87032e430b1b231d448c8ae40058d1c29e1056e50407eefc8116ebf7253dd54d1", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r0, r5, 0x2f, 0x2020, 0x4, @void, @void, @value=r6}, 0x20) socket(0x2, 0x80805, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x0, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) getsockopt$bt_hci(r7, 0x84, 0x0, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 9.376357149s ago: executing program 1 (id=3530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x20004044) r1 = socket(0x10, 0x80002, 0x0) socket$pptp(0x18, 0x1, 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) r2 = accept4$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x80000) socket(0x1d, 0x2, 0x6) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x141002, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x303100, 0x80) linkat(r4, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000001340)='./file0\x00', 0x1c00) 9.138591026s ago: executing program 1 (id=3534): unshare(0x62000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0xff2f}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0x7f, [0xfffffffd, 0x81], 0x8}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c0001001790000002000000080001"], 0xb8}}, 0x2) iopl(0x3) iopl(0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_oob_data_reply={{0x430, 0x26}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "a1bb6e0f0c991c1d4514a186ea4351bf", "5fedf225913168cb1f385093177c2d12"}}}, 0x2a) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 1.678004129s ago: executing program 6 (id=3567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="a87700001000030425bd7000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001400028005001700000000000500180001000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000002c0)={0x0, 0x5a}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000002c0)={0x0, 0x5a}) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r8, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r6, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x71}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4048001}, 0x10) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000000)="fc9a3b22edb808522544126f9a29a98197c3bae896d019a977d5e893d0e621d2f35f064af50462875c4de8ff01b0f292e1962a887758b4ce26b88d4fc91e58deb635ea53785279715a067c950574d1e53f5d14117663344d21242fa48c2c28b8d872d9d194c3be0060ae7ba05dc86a0ae25ed2ea94588bc95ab9e553611fa78493e9edfe82b446175ee1db238501e027499569", 0x93, r1}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) 1.297715196s ago: executing program 6 (id=3569): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000002e00030500"/20, @ANYRES32, @ANYBLOB="a4655c190ad5267ff33e34e50d9834d2aa191ada082cade51aa2dd933a36c829d9800c08abdcb35371db5696d9b699814d3cd66c4f8a11822296327e8c2cc99c4daf025f698e1e73fd55e73df96e5b519ad51eb7449a962eae704d62b0fc12768b5536f78a9e1e61c5190a556f715e7192b992c2acda8fb76a525af04fe342cf1d"], 0x30}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000002e00030500"/20, @ANYRES32, @ANYBLOB="a4655c190ad5267ff33e34e50d9834d2aa191ada082cade51aa2dd933a36c829d9800c08abdcb35371db5696d9b699814d3cd66c4f8a11822296327e8c2cc99c4daf025f698e1e73fd55e73df96e5b519ad51eb7449a962eae704d62b0fc12768b5536f78a9e1e61c5190a556f715e7192b992c2acda8fb76a525af04fe342cf1d"], 0x30}], 0x1}, 0x0) (async) 1.135546268s ago: executing program 6 (id=3570): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLL', 0x19}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r2, 0x0, 0x0, 0x3, &(0x7f0000000b40)='LLL'}) 1.069579145s ago: executing program 6 (id=3571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) 985.653757ms ago: executing program 6 (id=3572): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x5e55b37311de6d89, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 849.417826ms ago: executing program 6 (id=3574): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x440, 0x0) readv(r0, &(0x7f0000001400), 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000040) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1300, 0x6}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x128, 0x0, &(0x7f0000000840)=[@increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0xa, 0x2}, @fda={0x66646185, 0x3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}, @enter_looper, @clear_death, @request_death={0x400c630e, 0x3}, @increfs={0x40046304, 0x40002}, @exit_looper, @clear_death, @release={0x40046306, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@handle={0x73682a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x10b, 0x3}, @fd, @ptr={0x70742a85, 0x1, &(0x7f00000005c0)=""/209, 0xd1, 0x1, 0x1a}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @exit_looper], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x80000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r10 = socket$inet6(0xa, 0x5, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1108}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r11, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) r12 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r12, 0x40096101, &(0x7f00000016c0)={{}, 0xd}) write$dsp(r1, &(0x7f0000000000)="8df57b", 0x3) 526.225507ms ago: executing program 3 (id=3577): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000087c0), &(0x7f0000008800)=0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x90002) r2 = syz_io_uring_complete(0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x15, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x11011, r1, 0x2000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x28}}, './file0\x00'}) read$usbfs(r1, 0x0, 0x0) 449.607378ms ago: executing program 3 (id=3578): listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/235, 0xeb) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r1, 0x0, &(0x7f0000eaf000/0x3000)=nil, 0x3000, 0xfffffffffffffffc}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 339.5477ms ago: executing program 3 (id=3579): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_emit_ethernet(0xd3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0xc94, 0x0, {0x0, 0x1, 0x1, 0x0, 0xa2}, 0x4005}) (async, rerun: 64) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x80c1}, 0x800) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x33) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xa) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0xbe0, 0x2004cb, 0xfffffffffffffffe, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0x5], 0x10000}) (async, rerun: 64) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) socket(0x2, 0x2, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f00000002c0)=0x10) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r7, 0xae80, 0x0) (rerun: 64) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r9, &(0x7f0000000580)=ANY=[@ANYRES64=r7, @ANYRESOCT=r3, @ANYRES64=r0], 0x55) 250.143031ms ago: executing program 3 (id=3580): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r3, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "407327c360"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(r5, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r3, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "407327c360"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) 167.926158ms ago: executing program 3 (id=3581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'macvtap0\x00', &(0x7f0000000080)=@ethtool_regs={0x4, 0x7, 0xdd, "2d0dce11f319e36bbc6ba461f2f8e1b890ab53c0cc46064948aee6bca3399cd7c8106270fc733d5b476465f031c61a8c27116dffe6e0ba626c03ea02e7908bef3f975e6e4e2e854d891ded6d5938b2f1dd4b3cb57cc25203d8d0d825ca1774e56ba166ac1ffb28592d4c089f21b6a0c1d4eb8d14842511aadf0bf7ac2fef2ea0cb45f4071df762be9e1ed492cd75e97bc4d053cb5b4ff2181839bcee3910b16a30acfcfe25edb178a0c3a390d0735d34a9b3b345cf1612f47549f1b4622a5bf8f52f225efb4ca856631860612d91d793a497c6641eb403c447d8e5859f"}}) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xfffffffffffffffb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x58, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4c005, &(0x7f00000002c0)={0x11, 0x888e, r10, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa84dd6000000000200000fe800000000000c6123dcb93cc41e43ae439089400000000000000002cfe8000000000000000000000000000bb2f0200000000000004017f04010005020453c2"], 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa84dd6000000000200000fe800000000000c6123dcb93cc41e43ae439089400000000000000002cfe8000000000000000000000000000bb2f0200000000000004017f04010005020453c2"], 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={&(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r11}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={&(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r11}, 0x38) syz_emit_ethernet(0x3e, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08006070eae400080000fc00000000000000000000000000000000000000000000000000ffffac1e00010000050000000000"], 0x0) 0s ago: executing program 3 (id=3582): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xffffffff}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004a40)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) kernel console output (not intermixed with test programs): ysadm_t pid=15236 comm="syz.3.2767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b778f7c9 code=0x7ffc0000 [ 382.337698][ T40] audit: type=1326 audit(1764228923.860:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15236 comm="syz.3.2767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b778f7c9 code=0x7ffc0000 [ 382.350180][ T40] audit: type=1326 audit(1764228923.860:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15236 comm="syz.3.2767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b778f7c9 code=0x7ffc0000 [ 382.364657][ T40] audit: type=1326 audit(1764228923.860:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15236 comm="syz.3.2767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b778f7c9 code=0x7ffc0000 [ 382.482178][ T1347] usb 13-1: new high-speed USB device number 32 using dummy_hcd [ 382.673968][ T1347] usb 13-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 382.680854][ T1347] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.693553][ T1347] usb 13-1: Product: syz [ 382.695822][ T1347] usb 13-1: Manufacturer: syz [ 382.703400][ T1347] usb 13-1: SerialNumber: syz [ 382.709270][ T1347] usb 13-1: config 0 descriptor?? [ 382.715602][ T1347] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 382.752666][ T1347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 382.760549][ T1347] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 382.766919][ T1347] usb 13-1: media controller created [ 382.805706][T15259] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 382.806323][ T1347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.894307][ T1347] DVB: Unable to find symbol mt352_attach() [ 382.930066][ T840] rtl8150 10-1:1.0: eth6: rtl8150 is detected [ 382.992646][ T1347] DVB: Unable to find symbol nxt6000_attach() [ 383.008582][ T1347] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 383.019930][ T1347] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb13/13-1/input/input30 [ 383.048963][ T5942] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 383.061135][ T1347] dvb-usb: schedule remote query interval to 1000 msecs. [ 383.068961][ T1347] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 383.084133][ T1347] dvb-usb: bulk message failed: -22 (7/0) [ 383.089158][ T1347] dvb-usb: bulk message failed: -22 (7/0) [ 383.094121][ T1347] usb 13-1: USB disconnect, device number 32 [ 383.119466][ T9002] usb 10-1: USB disconnect, device number 29 [ 383.164145][ T1347] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 383.322627][T15272] can0: slcan on ttyS3. [ 383.400431][T15271] can0 (unregistered): slcan off ttyS3. [ 383.539190][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.729086][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.790310][ T5972] usb 13-1: new full-speed USB device number 33 using dummy_hcd [ 384.050110][ T5972] usb 13-1: unable to get BOS descriptor or descriptor too short [ 384.060434][ T5972] usb 13-1: not running at top speed; connect to a high speed hub [ 384.077822][ T1347] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 384.097630][ T5972] usb 13-1: config 0 has an invalid interface number: 177 but max is 0 [ 384.103699][ T5972] usb 13-1: config 0 has no interface number 0 [ 384.116157][ T5972] usb 13-1: config 0 interface 177 has no altsetting 0 [ 384.133161][ T5972] usb 13-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=4c.4a [ 384.145258][ T5972] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.151574][ T5972] usb 13-1: Product: syz [ 384.153473][ T5972] usb 13-1: Manufacturer: syz [ 384.166537][ T5972] usb 13-1: SerialNumber: syz [ 384.174355][ T5972] usb 13-1: config 0 descriptor?? [ 384.293507][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.315429][ T1347] usb 10-1: unable to get BOS descriptor or descriptor too short [ 384.320902][ T1347] usb 10-1: not running at top speed; connect to a high speed hub [ 384.328767][ T1347] usb 10-1: config 129 has an invalid interface number: 135 but max is 0 [ 384.340462][ T1347] usb 10-1: config 129 has an invalid interface number: 5 but max is 0 [ 384.346560][ T1347] usb 10-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 384.356873][ T1347] usb 10-1: config 129 has no interface number 0 [ 384.360948][ T1347] usb 10-1: config 129 has no interface number 1 [ 384.365563][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.366127][ T1347] usb 10-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 384.377060][ T1347] usb 10-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 384.397873][ T1347] usb 10-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 384.410434][ T1347] usb 10-1: config 129 interface 135 has no altsetting 0 [ 384.413957][ T1347] usb 10-1: config 129 interface 5 has no altsetting 0 [ 384.423164][ T5972] usb 13-1: Cannot retrieve CPort count: -71 [ 384.428465][ T5972] usb 13-1: Cannot retrieve CPort count: -71 [ 384.431592][ T5972] es2_ap_driver 13-1:0.177: probe with driver es2_ap_driver failed with error -71 [ 384.438757][ T5972] usb 13-1: USB disconnect, device number 33 [ 384.447561][ T1347] usb 10-1: string descriptor 0 read error: -22 [ 384.457600][ T1347] usb 10-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 384.462865][ T1347] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.520198][ T1347] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.526261][ T1347] usb 10-1: MIDIStreaming interface descriptor not found [ 384.531329][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.577741][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.705013][ T5972] usb 10-1: USB disconnect, device number 30 [ 384.845366][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.877468][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.913377][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.301401][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.595607][T15322] nbd3: detected capacity change from 0 to 63 [ 385.601205][T15325] block nbd3: NBD_DISCONNECT [ 385.607782][T15325] block nbd3: Disconnected due to user request. [ 385.612514][T15325] block nbd3: shutting down sockets [ 385.849408][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2811'. [ 386.273836][ T7478] usb 13-1: new high-speed USB device number 34 using dummy_hcd [ 386.519115][ T7478] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.524814][ T7478] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.550386][ T7478] usb 13-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 386.571176][ T7478] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.601043][ T7478] usb 13-1: SerialNumber: syz [ 386.667745][ T5985] usb 14-1: new high-speed USB device number 34 using dummy_hcd [ 386.737382][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.813690][ T7478] usb 13-1: 0:2 : does not exist [ 386.861172][ T5985] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.870148][ T7478] usb 13-1: USB disconnect, device number 34 [ 386.872591][ T5985] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.913090][ T5985] usb 14-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 386.924277][ T5985] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.948916][ T5985] usb 14-1: config 0 descriptor?? [ 387.371467][ T5985] hid-led 0003:27B8:01ED.0014: unbalanced collection at end of report description [ 387.392299][ T5985] hid-led 0003:27B8:01ED.0014: probe with driver hid-led failed with error -22 [ 387.536565][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.577692][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.586287][T15370] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 387.590588][ T29] usb 14-1: USB disconnect, device number 34 [ 387.610673][T15370] overlayfs: missing 'lowerdir' [ 387.621400][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.027320][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.379851][T15389] tipc: Enabling of bearer rejected, already enabled [ 388.975853][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 388.975872][ T40] audit: type=1400 audit(1764228930.740:1489): avc: denied { write } for pid=15413 comm="syz.9.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 389.116271][T15422] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2848'. [ 389.150604][ T5985] usb 13-1: new high-speed USB device number 35 using dummy_hcd [ 389.387667][ T5985] usb 13-1: Using ep0 maxpacket: 16 [ 389.392399][ T5985] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.395839][ T5985] usb 13-1: config 0 has no interface number 0 [ 389.411539][ T5985] usb 13-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 389.434594][ T5985] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.450958][ T5985] usb 13-1: Product: syz [ 389.455122][ T5985] usb 13-1: Manufacturer: syz [ 389.461664][ T5985] usb 13-1: SerialNumber: syz [ 389.473057][ T5985] usb 13-1: config 0 descriptor?? [ 389.481714][ T5985] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 389.745624][ T9002] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 389.937430][ T9002] usb 8-1: Using ep0 maxpacket: 16 [ 389.941412][ T9002] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 389.947079][ T9002] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 390.002638][ T9002] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 390.006757][ T9002] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.011454][ T9002] usb 8-1: Product: syz [ 390.029705][ T9002] usb 8-1: Manufacturer: syz [ 390.033572][ T9002] usb 8-1: SerialNumber: syz [ 390.039576][ T9002] usb 8-1: config 0 descriptor?? [ 390.049773][ T9002] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 390.070713][ T9002] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 390.127399][ T9000] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 390.290782][ T9000] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.292064][ T5985] gspca_spca1528: reg_w err -71 [ 390.301010][ T9000] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.317816][ T9000] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 390.321393][ T5985] spca1528 13-1:0.1: probe with driver spca1528 failed with error -71 [ 390.323467][ T9000] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.332693][ T5985] usb 13-1: USB disconnect, device number 35 [ 390.346837][ T9000] usb 10-1: config 0 descriptor?? [ 390.659997][ T9002] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 390.663228][ T9002] em28xx 8-1:0.0: Config register raw data: 0x2f [ 390.665883][ T9002] em28xx 8-1:0.0: I2S Audio (1 sample rate(s)) [ 390.669474][ T9002] em28xx 8-1:0.0: No AC97 audio processor [ 390.792150][ T9000] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 390.847409][ T9000] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 390.850482][ T9000] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 390.882036][ T9000] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 390.888188][ T9000] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 390.912144][ T9000] hid-steam 0003:28DE:1142.0015: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 390.943338][T15439] binder: 15438:15439 ioctl c0306201 200000000300 returned -11 [ 390.988282][ T1347] usb 10-1: USB disconnect, device number 31 [ 391.070752][T15443] overlayfs: missing 'lowerdir' [ 391.521625][ T9002] usb 8-1: USB disconnect, device number 27 [ 391.649534][ T9010] usb 14-1: new high-speed USB device number 35 using dummy_hcd [ 391.814753][T15469] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2870'. [ 391.847849][ T9010] usb 14-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 391.881137][ T9010] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.889638][ T9010] usb 14-1: Product: syz [ 391.908216][ T9010] usb 14-1: Manufacturer: syz [ 391.913342][ T9010] usb 14-1: SerialNumber: syz [ 391.928515][ T9010] usb 14-1: config 0 descriptor?? [ 392.251210][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2876'. [ 392.255736][T15482] bridge_slave_1: left allmulticast mode [ 392.259602][T15482] bridge_slave_1: left promiscuous mode [ 392.262553][T15482] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.334121][T15482] bridge_slave_0: left allmulticast mode [ 392.338905][T15482] bridge_slave_0: left promiscuous mode [ 392.341578][T15482] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.419834][ T9010] usb 14-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 392.467707][ T5972] usb 13-1: new high-speed USB device number 36 using dummy_hcd [ 392.624057][ T5972] usb 13-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 392.628180][ T5972] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.633584][ T5972] usb 13-1: config 0 descriptor?? [ 392.636486][ T9010] usb 14-1: failed to fetch extended address, random address set [ 392.791471][ T40] audit: type=1400 audit(1764228934.560:1490): avc: denied { module_load } for pid=15486 comm="syz.3.2877" path="/newroot/sys/kernel/notes" dev="sysfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 392.841811][ T9010] usb 14-1: USB disconnect, device number 35 [ 393.300362][ T5972] usb 13-1: Cannot set autoneg [ 393.304905][ T5972] MOSCHIP usb-ethernet driver 13-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 393.331483][ T5972] usb 13-1: USB disconnect, device number 36 [ 393.430179][ T840] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 393.600300][ T840] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 393.604303][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.618424][ T840] usb 8-1: config 0 descriptor?? [ 393.636904][ T840] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 393.856417][ T840] gp8psk: usb in 128 operation failed. [ 393.878180][ T840] gp8psk: usb in 137 operation failed. [ 393.933528][ T840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 393.947840][ T840] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 393.951199][ T840] usb 8-1: media controller created [ 393.979538][ T840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 394.031371][ T840] gp8psk_fe: Frontend attached [ 394.034369][ T840] usb 8-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 394.047489][ T840] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 394.233710][T15517] tipc: Started in network mode [ 394.240025][T15517] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 394.244395][T15517] tipc: Enabling of bearer rejected, failed to enable media [ 394.248426][ T840] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 394.254093][ T840] gp8psk: found Genpix USB device pID = 203 (hex) [ 394.375645][T15524] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 394.469004][ T9002] usb 8-1: USB disconnect, device number 28 [ 394.560708][ T9002] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 395.171556][T15536] x_tables: unsorted underflow at hook 1 [ 395.182227][ T40] audit: type=1400 audit(1764228936.950:1491): avc: denied { watch_reads } for pid=15535 comm="syz.3.2898" path="/282" dev="tmpfs" ino=1465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 395.468464][T15546] netlink: 'syz.3.2901': attribute type 10 has an invalid length. [ 395.492700][T15546] team0: Port device dummy0 added [ 395.780983][T15559] overlayfs: missing 'workdir' [ 395.918661][ T5985] usb 13-1: new high-speed USB device number 37 using dummy_hcd [ 396.100030][ T5985] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 396.105341][ T5985] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 396.114550][ T5985] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 396.148172][ T5985] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 396.152899][ T5985] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 396.176011][T15551] syz.3.2904 (15551) used greatest stack depth: 17064 bytes left [ 396.182802][ T5985] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 396.249339][ T5985] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 396.255126][ T5985] usb 13-1: Product: syz [ 396.269253][ T5985] usb 13-1: Manufacturer: syz [ 396.295741][ T5985] cdc_wdm 13-1:1.0: skipping garbage [ 396.309049][ T5985] cdc_wdm 13-1:1.0: skipping garbage [ 396.315735][ T5985] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 396.335271][ T5985] cdc_wdm 13-1:1.0: Unknown control protocol [ 396.700038][T15585] overlayfs: missing 'workdir' [ 396.920133][T15597] binder: BINDER_SET_CONTEXT_MGR already set [ 396.922348][T15597] binder: 15596:15597 ioctl 4018620d 2000000000c0 returned -16 [ 396.926874][T15597] binder: BINDER_SET_CONTEXT_MGR already set [ 396.932131][T15597] binder: 15596:15597 ioctl 4018620d 200000000040 returned -16 [ 396.937864][T15597] binder: 15596:15597 ioctl c0306201 200000000300 returned -11 [ 397.269665][ T9010] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 397.405554][T15612] overlayfs: missing 'lowerdir' [ 397.504085][ T9010] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.513388][ T9010] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.520666][ T9010] usb 8-1: config 0 interface 0 has no altsetting 0 [ 397.525682][ T9010] usb 8-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 397.553592][ T9010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.562137][ T9010] usb 8-1: config 0 descriptor?? [ 398.005219][ T9010] input: HID 28bd:0909 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:28BD:0909.0016/input/input31 [ 398.083324][ T9010] uclogic 0003:28BD:0909.0016: input,hidraw1: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0 [ 398.127917][ C3] vkms_vblank_simulate: vblank timer overrun [ 398.178777][ T1347] usb 8-1: USB disconnect, device number 29 [ 398.529421][ C3] vkms_vblank_simulate: vblank timer overrun [ 398.681535][ C3] vkms_vblank_simulate: vblank timer overrun [ 398.721306][ T5985] usb 13-1: USB disconnect, device number 37 [ 399.047874][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2948'. [ 399.296421][T15670] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2953'. [ 399.386390][ T29] usb 13-1: new high-speed USB device number 38 using dummy_hcd [ 399.648918][ T29] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 399.658774][ T29] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 399.691298][ T29] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 399.727089][ T29] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 399.733129][ T29] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 399.807781][ T29] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 399.812112][ T29] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 399.817302][ T29] usb 13-1: Product: syz [ 399.819985][ T29] usb 13-1: Manufacturer: syz [ 400.391351][T15685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2957'. [ 400.430640][ C3] vkms_vblank_simulate: vblank timer overrun [ 400.470208][ T29] cdc_wdm 13-1:1.0: skipping garbage [ 400.473321][ T29] cdc_wdm 13-1:1.0: skipping garbage [ 400.488444][ T29] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 400.493594][ T29] cdc_wdm 13-1:1.0: Unknown control protocol [ 400.611909][ C3] vkms_vblank_simulate: vblank timer overrun [ 400.641920][ C3] vkms_vblank_simulate: vblank timer overrun [ 400.770687][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2960'. [ 400.776587][T15692] bridge_slave_1: left allmulticast mode [ 400.787330][T15692] bridge_slave_1: left promiscuous mode [ 400.790648][T15692] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.832769][T15692] bridge_slave_0: left allmulticast mode [ 400.835218][T15692] bridge_slave_0: left promiscuous mode [ 400.838585][T15692] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.909778][ C3] vkms_vblank_simulate: vblank timer overrun [ 401.162090][ C3] vkms_vblank_simulate: vblank timer overrun [ 401.479350][T15703] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 401.495777][T15703] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 402.073744][T15717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2966'. [ 402.097246][ C3] vkms_vblank_simulate: vblank timer overrun [ 402.342755][ C3] vkms_vblank_simulate: vblank timer overrun [ 402.352826][ T40] audit: type=1400 audit(1764228944.000:1492): avc: denied { lock } for pid=15718 comm="syz.3.2967" path="socket:[65832]" dev="sockfs" ino=65832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 402.390065][ C3] vkms_vblank_simulate: vblank timer overrun [ 402.425865][ C3] vkms_vblank_simulate: vblank timer overrun [ 402.514586][ T5972] usb 13-1: USB disconnect, device number 38 [ 402.831147][T15729] Bluetooth: MGMT ver 1.23 [ 402.920299][T15731] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 402.923821][T15731] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 403.168764][T15737] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2975'. [ 403.371723][ T40] audit: type=1326 audit(1764228945.140:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15738 comm="syz.8.2976" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9813b8f7c9 code=0x0 [ 403.376441][ T9002] usb 14-1: new full-speed USB device number 36 using dummy_hcd [ 403.473367][ C2] vkms_vblank_simulate: vblank timer overrun [ 403.744109][ T9002] usb 14-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 403.757546][ T9002] usb 14-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.772628][ T9002] usb 14-1: config 0 interface 0 has no altsetting 0 [ 403.776088][ T9002] usb 14-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 403.780287][ T9002] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.812970][ T9002] usb 14-1: config 0 descriptor?? [ 404.451531][ T9002] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0 [ 404.455015][ T9002] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0 [ 404.459865][ T9002] hid-steam 0003:28DE:1102.0017: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.9-1/input0 [ 404.465330][ C2] vkms_vblank_simulate: vblank timer overrun [ 404.488131][ C2] vkms_vblank_simulate: vblank timer overrun [ 404.692391][ C2] vkms_vblank_simulate: vblank timer overrun [ 404.984610][ T9002] hid-steam 0003:28DE:1102.0017: Steam Controller 'XXXXXXXXXX' connected [ 404.991590][ T9002] input: Steam Controller as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:28DE:1102.0017/input/input32 [ 405.018546][ T9002] hid-steam 0003:28DE:1102.0018: unknown main item tag 0x0 [ 405.174863][ T9002] hid-steam 0003:28DE:1102.0018: unknown main item tag 0x0 [ 405.229301][T15763] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2984'. [ 405.246161][T15763] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2984'. [ 405.311733][ T9002] hid-steam 0003:28DE:1102.0018: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.9-1/input0 [ 405.353595][ T9002] usb 14-1: USB disconnect, device number 36 [ 405.499197][ T9002] hid-steam 0003:28DE:1102.0017: Steam Controller 'XXXXXXXXXX' disconnected [ 406.188025][ C2] vkms_vblank_simulate: vblank timer overrun [ 406.486305][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2993'. [ 406.493130][T15784] bridge_slave_1: left promiscuous mode [ 406.496530][T15784] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.517837][T15784] bridge_slave_0: left allmulticast mode [ 406.521679][T15784] bridge_slave_0: left promiscuous mode [ 406.524467][T15784] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.635486][ C2] vkms_vblank_simulate: vblank timer overrun [ 406.721232][ C2] vkms_vblank_simulate: vblank timer overrun [ 406.812733][T15787] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2994'. [ 406.816528][T15787] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2994'. [ 407.241675][ T1347] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 407.459798][ T1347] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 407.466182][ T1347] usb 10-1: can't read configurations, error -71 [ 408.053266][ C2] vkms_vblank_simulate: vblank timer overrun [ 408.137253][ C2] vkms_vblank_simulate: vblank timer overrun [ 408.843148][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3005'. [ 408.990236][T15826] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3007'. [ 408.996620][T15826] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3007'. [ 409.533355][ T5985] usb 13-1: new low-speed USB device number 39 using dummy_hcd [ 409.730091][ T5985] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 409.736878][ T5985] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.741610][ T5985] usb 13-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 409.774073][ C2] vkms_vblank_simulate: vblank timer overrun [ 409.786443][ T5985] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.795277][ T5985] usb 13-1: config 0 descriptor?? [ 410.180633][ T40] audit: type=1400 audit(1764228951.950:1494): avc: denied { accept } for pid=15837 comm="syz.5.3011" lport=54478 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.191393][ T40] audit: type=1400 audit(1764228951.950:1495): avc: denied { setopt } for pid=15837 comm="syz.5.3011" lport=54478 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 410.230816][ T5985] hid-rmi 0003:1532:011D.0019: hidraw1: USB HID v0.08 Device [HID 1532:011d] on usb-dummy_hcd.8-1/input0 [ 410.451607][ T1347] usb 13-1: USB disconnect, device number 39 [ 410.797598][ C2] vkms_vblank_simulate: vblank timer overrun [ 411.033294][ C2] vkms_vblank_simulate: vblank timer overrun [ 411.069011][ C2] vkms_vblank_simulate: vblank timer overrun [ 411.201254][ C2] vkms_vblank_simulate: vblank timer overrun [ 411.441206][ C2] vkms_vblank_simulate: vblank timer overrun [ 411.599532][T15855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3017'. [ 411.919864][ T40] audit: type=1326 audit(1764228953.680:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.3.3020" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14b778f7c9 code=0x0 [ 412.129277][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.210328][ T40] audit: type=1400 audit(1764228954.960:1497): avc: denied { mounton } for pid=15869 comm="syz.8.3023" path="/564/file0" dev="tmpfs" ino=2980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 413.306915][ T40] audit: type=1400 audit(1764228955.040:1498): avc: denied { create } for pid=15869 comm="syz.8.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 413.613182][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.092440][T15871] orangefs_mount: mount request failed with -4 [ 414.195024][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.501181][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.126410][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.097403][ T5985] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 416.264145][ T5985] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 416.284010][ T5985] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.294644][ T5985] usb 8-1: config 0 interface 0 has no altsetting 0 [ 416.325140][ T5985] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 416.334832][ T5985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.359275][ T5985] usb 8-1: config 0 descriptor?? [ 416.811595][ T5985] hid-steam 0003:28DE:1102.001A: unknown main item tag 0x0 [ 416.820558][ T5985] hid-steam 0003:28DE:1102.001A: unknown main item tag 0x0 [ 416.824725][ T5985] hid-steam 0003:28DE:1102.001A: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 416.901639][ T5985] hid-steam 0003:28DE:1102.001A: Steam Controller 'XXXXXXXXXX' connected [ 416.908234][ T5985] input: Steam Controller as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:28DE:1102.001A/input/input33 [ 416.999838][ T5985] hid-steam 0003:28DE:1102.001B: unknown main item tag 0x0 [ 417.027894][ T5985] hid-steam 0003:28DE:1102.001B: unknown main item tag 0x0 [ 417.094708][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.120474][ T5985] hid-steam 0003:28DE:1102.001B: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 417.245090][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.250671][ T1347] usb 8-1: USB disconnect, device number 30 [ 417.339574][ T1347] hid-steam 0003:28DE:1102.001A: Steam Controller 'XXXXXXXXXX' disconnected [ 418.126806][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.977370][ T40] audit: type=1400 audit(1764228960.630:1499): avc: denied { mount } for pid=15897 comm="syz.9.3031" name="/" dev="rpc_pipefs" ino=65946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 418.988856][ T40] audit: type=1400 audit(1764228960.640:1500): avc: denied { listen } for pid=15897 comm="syz.9.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 419.707856][T15904] binder: 15903:15904 ioctl c0306201 200000000300 returned -11 [ 419.891664][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3035'. [ 421.954836][T15941] binder: 15940:15941 ioctl 4018620d 0 returned -22 [ 421.959713][T15941] binder: 15940:15941 ioctl c0306201 200000000080 returned -14 [ 422.369760][T15943] binder: 15940:15943 ioctl 4018620d 0 returned -22 [ 427.606794][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.619338][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.632119][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.658581][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.677537][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 427.809841][T15962] lo speed is unknown, defaulting to 1000 [ 428.688828][T15962] chnl_net:caif_netlink_parms(): no params data found [ 428.961410][T15962] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.979927][T15962] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.986131][T15962] bridge_slave_0: entered allmulticast mode [ 428.993055][T15962] bridge_slave_0: entered promiscuous mode [ 429.016000][T15962] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.018943][T15962] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.036282][T15962] bridge_slave_1: entered allmulticast mode [ 429.042549][T15962] bridge_slave_1: entered promiscuous mode [ 429.167665][T15962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.198356][T15962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.260078][T15962] team0: Port device team_slave_0 added [ 429.304421][T15962] team0: Port device team_slave_1 added [ 429.361724][T15962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.368026][T15962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.414862][T15962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.465259][T15962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.490581][T15962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.522571][T15962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.618386][T15962] hsr_slave_0: entered promiscuous mode [ 429.624536][T15962] hsr_slave_1: entered promiscuous mode [ 429.640525][T15962] debugfs: 'hsr0' already exists in 'hsr' [ 429.643406][T15962] Cannot create hsr debugfs directory [ 429.759317][ T5936] Bluetooth: hci2: command tx timeout [ 431.847387][ T5936] Bluetooth: hci2: command tx timeout [ 432.528069][T15962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 432.573656][T15962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 432.701501][T15962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 432.728121][T15962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 433.041541][T15962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.186213][T15962] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.264714][ T7893] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.271813][ T7893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.289009][ T7893] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.306603][ T7893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.585013][T15962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 433.667885][T15962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.917390][ T5936] Bluetooth: hci2: command tx timeout [ 434.336616][T15962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.602994][T15962] veth0_vlan: entered promiscuous mode [ 434.664018][T15962] veth1_vlan: entered promiscuous mode [ 434.733767][T15962] veth0_macvtap: entered promiscuous mode [ 434.807395][T15962] veth1_macvtap: entered promiscuous mode [ 434.831949][T15962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.851994][T15962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.551321][ T7898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.598814][ T7898] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.613339][ T7898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.622931][ T7898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.009494][ T5936] Bluetooth: hci2: command tx timeout [ 436.108093][ T5985] usb 14-1: new full-speed USB device number 37 using dummy_hcd [ 436.379851][ T5985] usb 14-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 436.383817][ T5985] usb 14-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.425223][ T5985] usb 14-1: config 0 interface 0 has no altsetting 0 [ 436.441547][ T5985] usb 14-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 436.458550][ T5985] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.473064][ T5985] usb 14-1: config 0 descriptor?? [ 436.962895][ T5985] usbhid 14-1:0.0: can't add hid device: -71 [ 436.965296][ T5985] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 436.979306][ T5985] usb 14-1: USB disconnect, device number 37 [ 437.041971][ T7892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.066590][ T7892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.202501][ T7892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.227684][ T7892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.024374][ T5942] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 440.043352][ T5942] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 440.093934][ T5942] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 440.124195][ T5942] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 440.134610][ T5942] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.227143][T16063] lo speed is unknown, defaulting to 1000 [ 440.921710][T16063] chnl_net:caif_netlink_parms(): no params data found [ 440.937739][ T1347] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 441.271176][ T1347] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 441.275658][ T1347] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 441.300678][T16063] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.306477][ T1347] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.312425][T16063] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.335217][ T40] audit: type=1400 audit(1764228983.110:1501): avc: denied { bind } for pid=16077 comm="syz.9.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 441.354769][T16063] bridge_slave_0: entered allmulticast mode [ 441.358820][T16063] bridge_slave_0: entered promiscuous mode [ 441.365523][T16063] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.370214][T16063] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.377640][T16063] bridge_slave_1: entered allmulticast mode [ 441.378571][ T1347] usb 8-1: config 0 descriptor?? [ 441.386746][T16063] bridge_slave_1: entered promiscuous mode [ 441.414414][T16071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 441.466260][T16063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.473827][T16063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.588736][T16063] team0: Port device team_slave_0 added [ 441.624669][T16063] team0: Port device team_slave_1 added [ 441.672101][T16071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.689237][T16071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.689345][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3065'. [ 441.691721][T16063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.691737][T16063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.691757][T16063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.726389][T16063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.767677][T16063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.790498][T16063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.897435][T16063] hsr_slave_0: entered promiscuous mode [ 441.901207][T16063] hsr_slave_1: entered promiscuous mode [ 441.915114][T16063] debugfs: 'hsr0' already exists in 'hsr' [ 441.915356][ T1347] elan 0003:04F3:0755.001C: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 441.918210][T16063] Cannot create hsr debugfs directory [ 442.202138][ T840] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 442.294236][ T29] usb 8-1: USB disconnect, device number 31 [ 442.319376][ T5936] Bluetooth: hci6: command tx timeout [ 442.532198][ T840] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 442.548266][ T840] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.555421][ T840] usb 5-1: config 0 interface 0 has no altsetting 0 [ 442.559759][ T840] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 442.575044][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.585211][ T840] usb 5-1: config 0 descriptor?? [ 443.034661][ T840] usbhid 5-1:0.0: can't add hid device: -71 [ 443.039851][ T840] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 443.048185][ T840] usb 5-1: USB disconnect, device number 2 [ 443.708792][T16110] binder: 16109:16110 ioctl c0306201 200000000300 returned -11 [ 443.881757][ T5936] Bluetooth: Unexpected continuation frame (len 4) [ 444.111649][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'. [ 444.121830][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'. [ 444.418421][ T5936] Bluetooth: hci6: command tx timeout [ 444.522137][T16063] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 444.539571][T16063] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 444.540150][ T6036] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 444.620149][T16063] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 444.628634][T16063] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 444.771491][ T6036] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 444.780011][ T6036] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 444.787108][ T6036] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 444.846620][ T6036] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 444.862897][ T6036] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 444.863948][T16063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.904980][T16063] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.923548][ T6036] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 444.925466][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.932052][ T7892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.949605][ T6036] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 444.951415][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.959400][ T7892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.972318][ T6036] usb 8-1: Product: syz [ 444.979817][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.999765][ T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 445.007483][ T6036] usb 8-1: Manufacturer: syz [ 445.015803][ T6036] cdc_wdm 8-1:1.0: skipping garbage [ 445.019182][ T6036] cdc_wdm 8-1:1.0: skipping garbage [ 445.023650][ T6036] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 445.026685][ T6036] cdc_wdm 8-1:1.0: Unknown control protocol [ 445.172812][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 445.180110][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.191248][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.198076][ T24] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 445.227905][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.238768][ T24] usb 5-1: config 0 descriptor?? [ 445.390416][T16063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.538905][T16063] veth0_vlan: entered promiscuous mode [ 445.566614][T16063] veth1_vlan: entered promiscuous mode [ 445.705990][T16063] veth0_macvtap: entered promiscuous mode [ 445.712852][T16063] veth1_macvtap: entered promiscuous mode [ 445.716676][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 445.741730][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 445.776904][ T24] usb 5-1: USB disconnect, device number 3 [ 445.962696][T16063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.073682][T16063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.114265][ T7952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.139121][ T7952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.144542][ T7952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.160230][ T7952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.383567][ T7893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.389075][ T7893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.413170][ T7893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.418402][ T7893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.483623][ T5936] Bluetooth: hci6: command tx timeout [ 447.282348][ T24] usb 8-1: USB disconnect, device number 32 [ 448.559903][ T5936] Bluetooth: hci6: command tx timeout [ 453.207459][ T5985] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 453.416891][ T5985] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 453.422477][ T5985] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.482139][ T5985] usb 8-1: config 0 interface 0 has no altsetting 0 [ 453.486255][ T5985] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 453.523904][ T5985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.534142][ T5985] usb 8-1: config 0 descriptor?? [ 454.014894][ T5985] usbhid 8-1:0.0: can't add hid device: -71 [ 454.019123][ T5985] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 454.062310][ T5985] usb 8-1: USB disconnect, device number 33 [ 454.770986][T16230] binder: 16229:16230 ioctl c0306201 200000000300 returned -11 [ 455.973142][ C2] vkms_vblank_simulate: vblank timer overrun [ 456.048071][ C2] vkms_vblank_simulate: vblank timer overrun [ 456.083693][ T7893] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.094886][ T7893] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.106100][ T7893] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 456.125453][ T7893] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 457.114546][T16254] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 457.130775][ T1347] IPVS: starting estimator thread 0... [ 457.298595][T16257] IPVS: using max 25 ests per chain, 60000 per kthread [ 457.344964][ C2] vkms_vblank_simulate: vblank timer overrun [ 457.388909][ T7893] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.394210][ T7893] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.394835][ C2] vkms_vblank_simulate: vblank timer overrun [ 457.422860][ T7893] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 457.422942][ T7893] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 457.458422][ C2] vkms_vblank_simulate: vblank timer overrun [ 457.494101][T16259] binder: 16258:16259 ioctl c0306201 200000000300 returned -11 [ 457.626388][ T7893] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.633396][ T7893] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.640364][ T7893] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 457.651504][ T7893] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 457.970699][ T7893] bond0: (slave netdevsim0): Releasing backup interface [ 457.980790][ T7893] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.985338][ T7893] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.006428][ T7893] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 458.027874][ T7893] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 458.168322][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'. [ 458.519810][ C2] vkms_vblank_simulate: vblank timer overrun [ 459.135460][ C2] vkms_vblank_simulate: vblank timer overrun [ 459.178939][ C2] vkms_vblank_simulate: vblank timer overrun [ 459.397162][ C2] vkms_vblank_simulate: vblank timer overrun [ 459.477571][ C2] vkms_vblank_simulate: vblank timer overrun [ 459.694565][ T7893] bond2 (unregistering): (slave geneve2): Releasing active interface [ 459.794900][ C2] vkms_vblank_simulate: vblank timer overrun [ 459.907106][ T5942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 459.932594][ T5942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 459.961190][ T5942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 459.965389][ T5942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.005641][ T5942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.084507][T16285] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3114'. [ 460.408912][ C2] vkms_vblank_simulate: vblank timer overrun [ 460.989544][ T7893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.024215][ T7893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.030561][ T7893] bond0 (unregistering): Released all slaves [ 461.038659][ T7893] bond1 (unregistering): Released all slaves [ 461.074077][ T7893] bond2 (unregistering): Released all slaves [ 461.118105][ T7893] bond3 (unregistering): Released all slaves [ 461.124984][ C2] vkms_vblank_simulate: vblank timer overrun [ 461.261006][ C2] vkms_vblank_simulate: vblank timer overrun [ 461.645666][ C2] vkms_vblank_simulate: vblank timer overrun [ 461.660641][ T5936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 461.694001][ T5936] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 461.805759][ T5936] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 461.875683][ C2] vkms_vblank_simulate: vblank timer overrun [ 461.896959][ T5936] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 461.978770][ T5936] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 462.168079][ T5936] Bluetooth: hci4: command tx timeout [ 462.514292][ T7893] bond4 (unregistering): Released all slaves [ 462.869711][ T7893] bond5 (unregistering): Released all slaves [ 462.886603][ T7893] bond6 (unregistering): Released all slaves [ 462.975239][T16282] lo speed is unknown, defaulting to 1000 [ 463.028687][ C2] vkms_vblank_simulate: vblank timer overrun [ 463.084796][ C2] vkms_vblank_simulate: vblank timer overrun [ 463.180729][ C2] vkms_vblank_simulate: vblank timer overrun [ 463.527757][T16295] lo speed is unknown, defaulting to 1000 [ 463.538610][ T7893] tipc: Left network mode [ 464.095929][T16282] chnl_net:caif_netlink_parms(): no params data found [ 464.226012][T16295] chnl_net:caif_netlink_parms(): no params data found [ 464.249756][ T5936] Bluetooth: hci4: command tx timeout [ 464.260454][ T5940] Bluetooth: hci5: command tx timeout [ 464.513850][ C2] vkms_vblank_simulate: vblank timer overrun [ 464.614260][ C2] vkms_vblank_simulate: vblank timer overrun [ 464.710629][ T7893] hsr_slave_0: left promiscuous mode [ 464.797990][ T7893] veth1_macvtap: left promiscuous mode [ 464.811214][ T7893] veth0_macvtap: left promiscuous mode [ 464.813772][ T7893] veth1_vlan: left promiscuous mode [ 464.828321][ T7893] veth0_vlan: left promiscuous mode [ 465.470218][ C2] vkms_vblank_simulate: vblank timer overrun [ 465.543746][ C2] vkms_vblank_simulate: vblank timer overrun [ 465.709200][ C2] vkms_vblank_simulate: vblank timer overrun [ 465.902963][ C2] vkms_vblank_simulate: vblank timer overrun [ 465.972263][ C2] vkms_vblank_simulate: vblank timer overrun [ 466.301424][ C2] vkms_vblank_simulate: vblank timer overrun [ 466.327993][ T5940] Bluetooth: hci5: command tx timeout [ 466.331164][ T5936] Bluetooth: hci4: command tx timeout [ 466.406963][ T7893] team0 (unregistering): Port device team_slave_1 removed [ 466.589931][ T7893] team0 (unregistering): Port device team_slave_0 removed [ 467.066261][ C2] vkms_vblank_simulate: vblank timer overrun [ 467.904393][T16282] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.907674][T16282] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.910339][T16282] bridge_slave_0: entered allmulticast mode [ 467.914456][T16282] bridge_slave_0: entered promiscuous mode [ 467.932740][T16282] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.937457][T16282] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.940118][ C2] vkms_vblank_simulate: vblank timer overrun [ 467.943686][T16282] bridge_slave_1: entered allmulticast mode [ 467.965039][T16282] bridge_slave_1: entered promiscuous mode [ 467.993609][T16323] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.085102][ T7915] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.107464][ T7915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.151938][T16282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.163579][T16282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.205545][T16328] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 468.291202][ C2] vkms_vblank_simulate: vblank timer overrun [ 468.399097][T16282] team0: Port device team_slave_0 added [ 468.402176][ T5940] Bluetooth: hci5: command tx timeout [ 468.414764][ T5936] Bluetooth: hci4: command tx timeout [ 468.459226][T16295] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.490101][ C2] vkms_vblank_simulate: vblank timer overrun [ 468.494206][T16295] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.500930][T16295] bridge_slave_0: entered allmulticast mode [ 468.508814][T16295] bridge_slave_0: entered promiscuous mode [ 468.515368][T16282] team0: Port device team_slave_1 added [ 468.521023][T16295] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.523806][T16295] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.528820][T16295] bridge_slave_1: entered allmulticast mode [ 468.537059][T16295] bridge_slave_1: entered promiscuous mode [ 468.630835][T16295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.639871][T16295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.679831][T16282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.682758][T16282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.712747][T16282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.721747][T16282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.733286][T16282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.774222][T16282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.849636][T16295] team0: Port device team_slave_0 added [ 468.862439][T16282] hsr_slave_0: entered promiscuous mode [ 468.868934][T16282] hsr_slave_1: entered promiscuous mode [ 468.874626][T16282] debugfs: 'hsr0' already exists in 'hsr' [ 468.879004][T16282] Cannot create hsr debugfs directory [ 468.884485][T16295] team0: Port device team_slave_1 added [ 469.039598][T16295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.056769][T16295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.069328][T16295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.075740][T16295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.092752][T16295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.161881][ C2] vkms_vblank_simulate: vblank timer overrun [ 469.163920][T16295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.202730][T16295] hsr_slave_0: entered promiscuous mode [ 470.288550][T16295] hsr_slave_1: entered promiscuous mode [ 470.293784][T16295] debugfs: 'hsr0' already exists in 'hsr' [ 470.296615][T16295] Cannot create hsr debugfs directory [ 470.303016][ T7893] IPVS: stop unused estimator thread 0... [ 470.511052][ T5936] Bluetooth: hci5: command tx timeout [ 470.748041][ C3] vkms_vblank_simulate: vblank timer overrun [ 470.884670][ C3] vkms_vblank_simulate: vblank timer overrun [ 471.205356][ C3] vkms_vblank_simulate: vblank timer overrun [ 471.344365][ C3] vkms_vblank_simulate: vblank timer overrun [ 471.517615][ T40] audit: type=1400 audit(1764229013.280:1502): avc: denied { shutdown } for pid=16352 comm="syz.1.3129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 471.770219][ T7915] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.074224][ T7915] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.361296][ C3] vkms_vblank_simulate: vblank timer overrun [ 472.375456][ T7915] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.512708][ C3] vkms_vblank_simulate: vblank timer overrun [ 472.568791][ C3] vkms_vblank_simulate: vblank timer overrun [ 472.772243][T16295] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.777457][T16295] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.852034][T16282] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 472.908274][T16282] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 472.998688][ T7915] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.024388][T16282] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 473.108751][T16282] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 473.132285][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 473.191596][T16295] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.207949][T16295] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.333258][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 473.338490][ T29] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 473.341966][ T29] usb 6-1: config 0 has no interface number 0 [ 473.344434][ T29] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 473.356420][ T29] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 473.366891][ T29] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 473.371340][ T29] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 473.376840][ C3] vkms_vblank_simulate: vblank timer overrun [ 473.402298][ T29] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 473.402325][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.404231][ T29] usb 6-1: config 0 descriptor?? [ 473.424671][ T29] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 473.426407][ C3] vkms_vblank_simulate: vblank timer overrun [ 473.446603][ C3] vkms_vblank_simulate: vblank timer overrun [ 473.459417][ T5940] Bluetooth: hci5: command 0x0405 tx timeout [ 473.507330][T16295] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.513857][T16295] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.626006][ T29] usb 6-1: USB disconnect, device number 4 [ 473.632108][ T29] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 473.655436][T16282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.744574][ C3] vkms_vblank_simulate: vblank timer overrun [ 473.928619][ C3] vkms_vblank_simulate: vblank timer overrun [ 474.117982][T16282] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.123793][ T7915] bridge_slave_1: left allmulticast mode [ 474.126946][ T7915] bridge_slave_1: left promiscuous mode [ 474.131360][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.166654][ T7915] bridge_slave_0: left allmulticast mode [ 474.179785][ T7915] bridge_slave_0: left promiscuous mode [ 474.188980][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.960617][ C3] vkms_vblank_simulate: vblank timer overrun [ 475.245437][ T7915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.262543][ T7915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.268136][ T7915] bond0 (unregistering): Released all slaves [ 475.330211][ T7924] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.334049][ T7924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.346253][ C3] vkms_vblank_simulate: vblank timer overrun [ 475.359382][ T7951] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.359479][ T7951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.378103][ C3] vkms_vblank_simulate: vblank timer overrun [ 475.909431][T16295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 475.962909][T16414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3136'. [ 476.143727][T16295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 476.199682][T16295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 476.265992][T16295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 476.426800][T16282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.752053][T16437] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 476.853886][ C3] vkms_vblank_simulate: vblank timer overrun [ 476.879675][ C3] vkms_vblank_simulate: vblank timer overrun [ 477.113230][ T7915] hsr_slave_0: left promiscuous mode [ 477.120961][ T7915] hsr_slave_1: left promiscuous mode [ 477.123639][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.127529][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.179421][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.182356][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.196605][ C3] vkms_vblank_simulate: vblank timer overrun [ 477.331344][ T7915] veth1_macvtap: left promiscuous mode [ 477.372850][ T7915] veth0_macvtap: left promiscuous mode [ 477.375340][ T7915] veth1_vlan: left promiscuous mode [ 477.394756][ T7915] veth0_vlan: left promiscuous mode [ 477.421255][ C3] vkms_vblank_simulate: vblank timer overrun [ 477.672603][ C3] vkms_vblank_simulate: vblank timer overrun [ 477.707606][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3144'. [ 478.204693][ C3] vkms_vblank_simulate: vblank timer overrun [ 478.344001][ C3] vkms_vblank_simulate: vblank timer overrun [ 478.913683][ C3] vkms_vblank_simulate: vblank timer overrun [ 479.011346][ C3] vkms_vblank_simulate: vblank timer overrun [ 479.187437][ C3] vkms_vblank_simulate: vblank timer overrun [ 479.228795][ T7915] team0 (unregistering): Port device team_slave_1 removed [ 479.255187][ C3] vkms_vblank_simulate: vblank timer overrun [ 479.354919][ T7915] team0 (unregistering): Port device team_slave_0 removed [ 479.790829][ C3] vkms_vblank_simulate: vblank timer overrun [ 479.944685][ C3] vkms_vblank_simulate: vblank timer overrun [ 480.116644][ C3] vkms_vblank_simulate: vblank timer overrun [ 480.196609][ C3] vkms_vblank_simulate: vblank timer overrun [ 480.264102][ C3] vkms_vblank_simulate: vblank timer overrun [ 480.388600][ C3] vkms_vblank_simulate: vblank timer overrun [ 480.456861][ C3] vkms_vblank_simulate: vblank timer overrun [ 480.941374][T16295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.979556][T16282] veth0_vlan: entered promiscuous mode [ 480.992131][T16282] veth1_vlan: entered promiscuous mode [ 481.142669][T16295] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.246321][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.252203][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.288164][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.294620][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.304284][T16282] veth0_macvtap: entered promiscuous mode [ 481.329033][T16282] veth1_macvtap: entered promiscuous mode [ 481.408017][T16282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.468372][T16282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.576069][ T7898] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.595632][ T7898] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.650083][ T7898] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.879253][ T7898] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.963779][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.968593][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.064227][ T7951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.068097][ T7951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.309221][T16492] binder: 16491:16492 ioctl 4018620d 0 returned -22 [ 482.312676][T16295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.345538][T16492] binder: 16491:16492 ioctl c0306201 200000000300 returned -11 [ 482.419708][T16295] veth0_vlan: entered promiscuous mode [ 482.455714][T16295] veth1_vlan: entered promiscuous mode [ 482.466173][ T40] audit: type=1400 audit(1764229024.230:1503): avc: denied { write } for pid=16493 comm="syz.6.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 482.537695][T16295] veth0_macvtap: entered promiscuous mode [ 482.565863][T16295] veth1_macvtap: entered promiscuous mode [ 482.674921][T16295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.687479][T16295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.743030][ T7924] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.749488][ T7924] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.760932][ T7924] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.773842][ T7924] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.911343][ T7898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.915112][ T7898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.005011][ T7951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.015316][ T7951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.251419][T16543] binder: 16542:16543 ioctl 4018620d 0 returned -22 [ 485.260457][T16543] binder: 16542:16543 ioctl c0306201 200000000300 returned -11 [ 485.489555][T16551] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4. [ 485.999798][T16563] binder: BINDER_SET_CONTEXT_MGR already set [ 486.013362][T16563] binder: 16562:16563 ioctl 4018620d 200000000040 returned -16 [ 486.021660][T16563] binder: 16562:16563 ioctl c0306201 200000000300 returned -11 [ 486.490832][ T5972] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 486.564580][T16569] IPv6: NLM_F_CREATE should be specified when creating new route [ 486.669293][ T5972] usb 11-1: device descriptor read/64, error -71 [ 487.013392][ T5972] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 487.157458][ T5972] usb 11-1: device descriptor read/64, error -71 [ 487.268036][ T5972] usb usb11-port1: attempt power cycle [ 487.692128][ T5972] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 487.792121][ T5972] usb 11-1: device descriptor read/8, error -71 [ 488.086030][ T5972] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 488.148699][ T5972] usb 11-1: device descriptor read/8, error -71 [ 488.276721][ T5972] usb usb11-port1: unable to enumerate USB device [ 489.927848][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3182'. [ 489.948657][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3182'. [ 491.389811][T16598] syz.6.3186 (16598): drop_caches: 2 [ 494.555987][ T40] audit: type=1400 audit(1764229036.320:1504): avc: denied { override_creds } for pid=16614 comm="syz.2.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 495.021691][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'. [ 495.025738][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'. [ 495.278275][T16628] binder: BINDER_SET_CONTEXT_MGR already set [ 495.298780][T16628] binder: 16627:16628 ioctl 4018620d 200000000040 returned -16 [ 495.302889][T16628] binder: 16627:16628 ioctl c0306201 200000000300 returned -11 [ 496.271687][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3204'. [ 496.286756][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3204'. [ 496.621024][T16656] binder: 16655:16656 ioctl c0306201 0 returned -14 [ 496.626595][T16656] binder: 16655:16656 ioctl c0306201 200000000300 returned -11 [ 496.821841][ T9002] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 496.957394][ T9002] usb 7-1: device descriptor read/64, error -71 [ 497.208968][ T9002] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 497.338363][ T9002] usb 7-1: device descriptor read/64, error -71 [ 497.447821][ T9002] usb usb7-port1: attempt power cycle [ 497.547787][ T40] audit: type=1400 audit(1764229039.320:1505): avc: denied { bind } for pid=16669 comm="syz.1.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 497.578394][ T40] audit: type=1400 audit(1764229039.320:1506): avc: denied { name_bind } for pid=16669 comm="syz.1.3212" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 497.599156][ T40] audit: type=1400 audit(1764229039.320:1507): avc: denied { node_bind } for pid=16669 comm="syz.1.3212" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 497.684010][T16677] binder: 16676:16677 ioctl c0306201 0 returned -14 [ 497.721177][T16677] binder: 16676:16677 ioctl c0306201 200000000300 returned -11 [ 497.806706][ T9002] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 497.833304][ T5936] Bluetooth: hci6: link tx timeout [ 497.834736][ T9002] usb 7-1: device descriptor read/8, error -71 [ 497.874044][ T5936] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.161154][ T9002] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 498.207427][ T9002] usb 7-1: device descriptor read/8, error -71 [ 498.367681][ T9002] usb usb7-port1: unable to enumerate USB device [ 498.521523][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3222'. [ 499.945810][ T5940] Bluetooth: hci6: command 0x0406 tx timeout [ 502.980771][ T5935] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 503.213975][ T5935] usb 6-1: device descriptor read/64, error -71 [ 503.614497][ T5935] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 503.793936][ T5935] usb 6-1: device descriptor read/64, error -71 [ 503.908520][ T5935] usb usb6-port1: attempt power cycle [ 504.247465][ T8995] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 504.288874][ T5935] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 504.321800][ T5935] usb 6-1: device descriptor read/8, error -71 [ 504.447631][ T8995] usb 7-1: Using ep0 maxpacket: 8 [ 504.456487][ T8995] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 504.459842][ T8995] usb 7-1: config 0 has no interface number 0 [ 504.467584][ T8995] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 504.519576][ T8995] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 504.540685][ T8995] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 504.569647][ T8995] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 504.585610][ T8995] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 504.620528][ T5935] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 504.640019][ T8995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.659722][ T8995] usb 7-1: config 0 descriptor?? [ 504.664796][ T5935] usb 6-1: device descriptor read/8, error -71 [ 504.690373][ T8995] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 504.797571][ T5935] usb usb6-port1: unable to enumerate USB device [ 504.886763][ T5935] usb 7-1: USB disconnect, device number 14 [ 504.917132][ T5935] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 506.016707][ T5936] Bluetooth: hci5: unexpected event for opcode 0x0402 [ 506.523720][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.748912][T16791] binder: 16790:16791 ioctl c0306201 200000000300 returned -11 [ 511.317477][ C2] vkms_vblank_simulate: vblank timer overrun [ 511.385664][T16797] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 511.436314][ C2] vkms_vblank_simulate: vblank timer overrun [ 511.522973][ C2] vkms_vblank_simulate: vblank timer overrun [ 511.819144][ T1347] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 511.880229][ C2] vkms_vblank_simulate: vblank timer overrun [ 512.096677][ T1347] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 512.099960][ T1347] usb 6-1: config 0 has no interface number 0 [ 512.103094][ T1347] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 512.108354][ T1347] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 512.114980][ T1347] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 512.122760][ T1347] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 512.133273][ T1347] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 512.140681][ T1347] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 512.149115][ T1347] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 512.155523][ T1347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.167633][ T1347] usb 6-1: config 0 descriptor?? [ 512.173565][T16799] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 512.179980][T16799] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 512.192657][ T1347] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 512.416122][ T1347] usb 6-1: USB disconnect, device number 9 [ 512.481212][ T1347] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 512.637388][ C2] vkms_vblank_simulate: vblank timer overrun [ 514.627465][ C2] vkms_vblank_simulate: vblank timer overrun [ 515.120459][ C2] vkms_vblank_simulate: vblank timer overrun [ 515.283219][ C2] vkms_vblank_simulate: vblank timer overrun [ 515.380202][ C2] vkms_vblank_simulate: vblank timer overrun [ 515.546689][ T5936] Bluetooth: hci5: link tx timeout [ 515.581454][ T5936] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 515.621689][ T5940] Bluetooth: hci5: link tx timeout [ 515.624587][ T5940] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 515.680199][ C2] vkms_vblank_simulate: vblank timer overrun [ 516.117419][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3270'. [ 516.437886][T16836] hpfs: hpfs_map_sector(): read error [ 516.540395][ C2] vkms_vblank_simulate: vblank timer overrun [ 516.592263][ C2] vkms_vblank_simulate: vblank timer overrun [ 516.816234][ C2] vkms_vblank_simulate: vblank timer overrun [ 517.016319][ C2] vkms_vblank_simulate: vblank timer overrun [ 517.108280][ C2] vkms_vblank_simulate: vblank timer overrun [ 517.132146][ T40] audit: type=1400 audit(1764229058.880:1508): avc: denied { setattr } for pid=16837 comm="syz.1.3271" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 517.268967][T16842] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 517.313590][ C2] vkms_vblank_simulate: vblank timer overrun [ 517.448758][ C2] vkms_vblank_simulate: vblank timer overrun [ 517.514335][ T5940] Bluetooth: hci5: link tx timeout [ 517.520700][ T5940] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.678960][ T5940] Bluetooth: hci5: command 0x0405 tx timeout [ 517.915869][ C2] vkms_vblank_simulate: vblank timer overrun [ 518.088895][ C2] vkms_vblank_simulate: vblank timer overrun [ 518.104345][T16857] FAULT_INJECTION: forcing a failure. [ 518.104345][T16857] name failslab, interval 1, probability 0, space 0, times 0 [ 518.139775][T16857] CPU: 0 UID: 0 PID: 16857 Comm: syz.6.3280 Not tainted syzkaller #0 PREEMPT(full) [ 518.139800][T16857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 518.139811][T16857] Call Trace: [ 518.139818][T16857] [ 518.139825][T16857] dump_stack_lvl+0x16c/0x1f0 [ 518.139848][T16857] should_fail_ex+0x512/0x640 [ 518.139871][T16857] ? fs_reclaim_acquire+0xae/0x150 [ 518.139895][T16857] should_failslab+0xc2/0x120 [ 518.139916][T16857] __kmalloc_noprof+0xdd/0x880 [ 518.139942][T16857] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 518.139969][T16857] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 518.139990][T16857] tomoyo_realpath_from_path+0xc2/0x6e0 [ 518.140013][T16857] ? tomoyo_profile+0x47/0x60 [ 518.140039][T16857] tomoyo_path_number_perm+0x245/0x580 [ 518.140057][T16857] ? tomoyo_path_number_perm+0x237/0x580 [ 518.140107][T16857] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 518.140127][T16857] ? find_held_lock+0x2b/0x80 [ 518.140172][T16857] ? find_held_lock+0x2b/0x80 [ 518.140195][T16857] ? hook_file_ioctl_common+0x145/0x410 [ 518.140226][T16857] ? __fget_files+0x20e/0x3c0 [ 518.140249][T16857] security_file_ioctl+0x9b/0x240 [ 518.140273][T16857] __x64_sys_ioctl+0xb7/0x210 [ 518.140301][T16857] do_syscall_64+0xcd/0xfa0 [ 518.140320][T16857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.140338][T16857] RIP: 0033:0x7f7b35f8f7c9 [ 518.140353][T16857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.140370][T16857] RSP: 002b:00007f7b36eab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.140388][T16857] RAX: ffffffffffffffda RBX: 00007f7b361e5fa0 RCX: 00007f7b35f8f7c9 [ 518.140399][T16857] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000005 [ 518.140410][T16857] RBP: 00007f7b36eab090 R08: 0000000000000000 R09: 0000000000000000 [ 518.140420][T16857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.140430][T16857] R13: 00007f7b361e6038 R14: 00007f7b361e5fa0 R15: 00007ffcd2959278 [ 518.140456][T16857] [ 518.140464][T16857] ERROR: Out of memory at tomoyo_realpath_from_path. [ 518.326660][ C2] vkms_vblank_simulate: vblank timer overrun [ 518.480650][ C2] vkms_vblank_simulate: vblank timer overrun [ 518.725819][T16290] libceph: connect (1)[c::]:6789 error -101 [ 518.733097][T16290] libceph: mon0 (1)[c::]:6789 connect error [ 518.733997][ T5936] Bluetooth: hci6: Invalid handle: 0x3065 > 0x0eff [ 518.745321][T16862] ceph: No mds server is up or the cluster is laggy [ 518.826141][T16866] overlayfs: failed to resolve './file2': -2 [ 518.881587][T16867] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3282'. [ 518.904678][ C2] vkms_vblank_simulate: vblank timer overrun [ 518.948855][ T40] audit: type=1400 audit(1764229060.710:1509): avc: denied { write } for pid=16858 comm="syz.1.3282" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 519.066645][T16869] netlink: 'syz.6.3283': attribute type 4 has an invalid length. [ 519.071031][T16869] netlink: 'syz.6.3283': attribute type 1 has an invalid length. [ 519.074511][T16869] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3283'. [ 519.447967][ C2] vkms_vblank_simulate: vblank timer overrun [ 520.457137][ C2] vkms_vblank_simulate: vblank timer overrun [ 520.630637][T16903] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3296'. [ 520.828275][ T40] audit: type=1400 audit(1764229062.590:1510): avc: denied { ioctl } for pid=16909 comm="syz.2.3299" path="cgroup:[4026533295]" dev="nsfs" ino=4026533295 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 520.840261][ C2] vkms_vblank_simulate: vblank timer overrun [ 521.029206][T16914] netlink: 'syz.2.3301': attribute type 1 has an invalid length. [ 521.068891][T16914] bond1: (slave bridge1): making interface the new active one [ 521.074506][T16914] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 521.084830][T16916] netlink: 'syz.2.3301': attribute type 1 has an invalid length. [ 521.101995][T16917] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 521.292802][ T5936] Bluetooth: hci5: unexpected event for opcode 0x080d [ 521.576929][T16924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16924 comm=syz.1.3304 [ 521.776895][ C2] vkms_vblank_simulate: vblank timer overrun [ 521.839209][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3305'. [ 521.864773][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3305'. [ 521.970489][T16935] FAULT_INJECTION: forcing a failure. [ 521.970489][T16935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.007298][T16935] CPU: 1 UID: 0 PID: 16935 Comm: syz.2.3307 Not tainted syzkaller #0 PREEMPT(full) [ 522.007324][T16935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 522.007335][T16935] Call Trace: [ 522.007342][T16935] [ 522.007350][T16935] dump_stack_lvl+0x16c/0x1f0 [ 522.007372][T16935] should_fail_ex+0x512/0x640 [ 522.007397][T16935] _copy_from_user+0x2e/0xd0 [ 522.007421][T16935] do_hidp_sock_ioctl.constprop.0+0x367/0x510 [ 522.007445][T16935] ? __pfx_do_hidp_sock_ioctl.constprop.0+0x10/0x10 [ 522.007486][T16935] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 522.007510][T16935] ? kasan_quarantine_put+0x10a/0x240 [ 522.007540][T16935] ? tomoyo_path_number_perm+0x18d/0x580 [ 522.007563][T16935] sock_do_ioctl+0x118/0x280 [ 522.007580][T16935] ? __pfx_sock_do_ioctl+0x10/0x10 [ 522.007601][T16935] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 522.007626][T16935] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 522.007650][T16935] sock_ioctl+0x227/0x6b0 [ 522.007667][T16935] ? __pfx_sock_ioctl+0x10/0x10 [ 522.007682][T16935] ? hook_file_ioctl_common+0x145/0x410 [ 522.007711][T16935] ? selinux_file_ioctl+0x180/0x270 [ 522.007728][T16935] ? selinux_file_ioctl+0xb4/0x270 [ 522.007747][T16935] ? __pfx_sock_ioctl+0x10/0x10 [ 522.007764][T16935] __x64_sys_ioctl+0x18e/0x210 [ 522.007790][T16935] do_syscall_64+0xcd/0xfa0 [ 522.007808][T16935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.007825][T16935] RIP: 0033:0x7f17eb38f7c9 [ 522.007840][T16935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.007856][T16935] RSP: 002b:00007f17ec301038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.007873][T16935] RAX: ffffffffffffffda RBX: 00007f17eb5e5fa0 RCX: 00007f17eb38f7c9 [ 522.007884][T16935] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000005 [ 522.007894][T16935] RBP: 00007f17ec301090 R08: 0000000000000000 R09: 0000000000000000 [ 522.007903][T16935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.007911][T16935] R13: 00007f17eb5e6038 R14: 00007f17eb5e5fa0 R15: 00007fff52f18208 [ 522.007933][T16935] [ 522.360108][ C2] vkms_vblank_simulate: vblank timer overrun [ 522.585816][ T40] audit: type=1400 audit(1764229064.350:1511): avc: denied { wake_alarm } for pid=16941 comm="syz.2.3310" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 522.765097][ C2] vkms_vblank_simulate: vblank timer overrun [ 522.792117][ C2] vkms_vblank_simulate: vblank timer overrun [ 522.820174][ T40] audit: type=1400 audit(1764229064.580:1512): avc: denied { read } for pid=16954 comm="syz.6.3314" path="socket:[69466]" dev="sockfs" ino=69466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 523.040309][ C2] vkms_vblank_simulate: vblank timer overrun [ 523.503631][ T1347] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 523.640318][ C2] vkms_vblank_simulate: vblank timer overrun [ 523.700801][ T1347] usb 7-1: Using ep0 maxpacket: 8 [ 523.751006][ T1347] usb 7-1: config 2 interface 0 has no altsetting 0 [ 523.782115][T16965] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.786642][T16965] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.798206][ T1347] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 523.807676][ T1347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.816969][ T1347] usb 7-1: Product: syz [ 523.826265][ T1347] usb 7-1: Manufacturer: syz [ 523.830025][ T1347] usb 7-1: SerialNumber: syz [ 523.924189][ C2] vkms_vblank_simulate: vblank timer overrun [ 524.132198][ C2] vkms_vblank_simulate: vblank timer overrun [ 524.239913][T16965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.316306][ C2] vkms_vblank_simulate: vblank timer overrun [ 524.317701][T16965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.516158][T16974] ntfs3(sr0): Primary boot signature is not NTFS. [ 524.546838][T16974] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 524.797698][ T5936] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 524.803138][ T5936] Bluetooth: hci4: Injecting HCI hardware error event [ 524.809965][ T5936] Bluetooth: hci4: hardware error 0x00 [ 525.121828][ T7908] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.141300][ T7908] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.203298][T16981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3321'. [ 525.210601][ T7908] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.227028][ T7908] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.258628][ T1347] usb 7-1: USB disconnect, device number 15 [ 525.357397][ T5942] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 525.374778][ T5942] Bluetooth: hci5: Injecting HCI hardware error event [ 525.588994][T16997] gfs2: not a GFS2 filesystem [ 525.674489][T17006] binder: 17005:17006 ioctl 4018620d 0 returned -22 [ 525.680678][T17006] binder: 17005:17006 ioctl c0306201 200000000300 returned -11 [ 525.808687][T17010] netlink: 'syz.3.3330': attribute type 1 has an invalid length. [ 525.862762][T17010] bond1: (slave geneve2): making interface the new active one [ 525.872355][T17010] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 525.876600][ T7898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 525.885124][ T7924] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 525.903106][ T7924] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 525.908651][ T7924] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 526.146313][T17018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'. [ 526.150325][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3333'. [ 526.250882][T17024] netlink: 'syz.3.3335': attribute type 7 has an invalid length. [ 526.326045][T17024] netlink: 'syz.3.3335': attribute type 7 has an invalid length. [ 526.336580][ T7898] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.344817][ T7924] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.363100][ T7924] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.367980][ T7924] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.430323][T17026] netlink: 'syz.3.3335': attribute type 10 has an invalid length. [ 526.450778][T17026] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.456445][T17026] bond0: (slave team0): Enslaving as an active interface with an up link [ 526.592074][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3331'. [ 526.611360][T17036] bridge_slave_1: left allmulticast mode [ 526.613804][T17036] bridge_slave_1: left promiscuous mode [ 526.616878][T17036] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.681873][T17036] bridge_slave_0: left allmulticast mode [ 526.683883][T17036] bridge_slave_0: left promiscuous mode [ 526.686439][T17036] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.888243][ T5936] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 527.221811][T17053] FAULT_INJECTION: forcing a failure. [ 527.221811][T17053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.246552][T17053] CPU: 1 UID: 0 PID: 17053 Comm: syz.3.3343 Not tainted syzkaller #0 PREEMPT(full) [ 527.246579][T17053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 527.246590][T17053] Call Trace: [ 527.246597][T17053] [ 527.246605][T17053] dump_stack_lvl+0x16c/0x1f0 [ 527.246646][T17053] should_fail_ex+0x512/0x640 [ 527.246673][T17053] _copy_from_user+0x2e/0xd0 [ 527.246700][T17053] memdup_user+0x6b/0xe0 [ 527.246719][T17053] hidp_connection_add+0xd12/0x2000 [ 527.246756][T17053] do_hidp_sock_ioctl.constprop.0+0x3dd/0x510 [ 527.246785][T17053] ? __pfx_do_hidp_sock_ioctl.constprop.0+0x10/0x10 [ 527.246835][T17053] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 527.246865][T17053] ? kasan_quarantine_put+0x10a/0x240 [ 527.246900][T17053] ? tomoyo_path_number_perm+0x18d/0x580 [ 527.246929][T17053] sock_do_ioctl+0x118/0x280 [ 527.246950][T17053] ? __pfx_sock_do_ioctl+0x10/0x10 [ 527.246975][T17053] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 527.247002][T17053] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 527.247034][T17053] sock_ioctl+0x227/0x6b0 [ 527.247053][T17053] ? __pfx_sock_ioctl+0x10/0x10 [ 527.247070][T17053] ? hook_file_ioctl_common+0x145/0x410 [ 527.247101][T17053] ? selinux_file_ioctl+0x180/0x270 [ 527.247120][T17053] ? selinux_file_ioctl+0xb4/0x270 [ 527.247141][T17053] ? __pfx_sock_ioctl+0x10/0x10 [ 527.247161][T17053] __x64_sys_ioctl+0x18e/0x210 [ 527.247937][T17053] do_syscall_64+0xcd/0xfa0 [ 527.247959][T17053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.247977][T17053] RIP: 0033:0x7f14b778f7c9 [ 527.248020][T17053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.248035][T17053] RSP: 002b:00007f14b8634038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.248053][T17053] RAX: ffffffffffffffda RBX: 00007f14b79e5fa0 RCX: 00007f14b778f7c9 [ 527.248065][T17053] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000005 [ 527.248076][T17053] RBP: 00007f14b8634090 R08: 0000000000000000 R09: 0000000000000000 [ 527.248087][T17053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.248098][T17053] R13: 00007f14b79e6038 R14: 00007f14b79e5fa0 R15: 00007fffea739898 [ 527.248124][T17053] [ 527.434737][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3344'. [ 527.671591][T17057] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 527.679225][ T40] audit: type=1400 audit(1764229069.420:1513): avc: denied { lock } for pid=17056 comm="syz.3.3345" path="socket:[71615]" dev="sockfs" ino=71615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 527.679378][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3344'. [ 527.729391][T17057] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 527.780844][T17057] vhci_hcd vhci_hcd.0: Device attached [ 527.790392][T17058] vhci_hcd: connection closed [ 527.794311][ T7951] vhci_hcd: stop threads [ 527.805709][ T7951] vhci_hcd: release socket [ 527.807980][ T7951] vhci_hcd: disconnect device [ 528.173874][T17072] mmap: syz.6.3349 (17072): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 528.278775][ T8995] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 528.461631][ T8995] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.467658][ T8995] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.487654][ T8995] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 528.492801][ T8995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 528.517588][ T8995] usb 6-1: SerialNumber: syz [ 528.735380][T17064] block nbd1: not configured, cannot reconfigure [ 528.770939][T17064] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 528.812410][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3355'. [ 528.815763][ T8995] usb 6-1: 0:2 : does not exist [ 528.818595][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3355'. [ 528.828186][ T8995] usb 6-1: unit 10 not found! [ 528.862521][ T8995] usb 6-1: USB disconnect, device number 10 [ 529.599611][T17122] team0: Device gtp0 is of different type [ 530.541072][T17142] serio: Serial port ptm0 [ 530.569705][T17153] netlink: 'syz.1.3368': attribute type 10 has an invalid length. [ 530.662055][T17153] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 530.879667][T17162] netlink: 'syz.3.3370': attribute type 39 has an invalid length. [ 531.000496][T17159] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 531.012008][T17159] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 531.028735][T17159] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 531.040305][T17159] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 531.871448][T17172] netlink: 'syz.3.3371': attribute type 23 has an invalid length. [ 531.912570][T17172] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3371'. [ 531.919840][T17160] syz.1.3369: vmalloc error: size 2396160, failed to allocated page array size 4680, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 531.950831][T17160] CPU: 1 UID: 0 PID: 17160 Comm: syz.1.3369 Not tainted syzkaller #0 PREEMPT(full) [ 531.950854][T17160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 531.950863][T17160] Call Trace: [ 531.950869][T17160] [ 531.950876][T17160] dump_stack_lvl+0x16c/0x1f0 [ 531.950895][T17160] warn_alloc+0x248/0x3a0 [ 531.950918][T17160] ? __pfx_warn_alloc+0x10/0x10 [ 531.950946][T17160] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 531.950969][T17160] ? __vmalloc_node_noprof+0xad/0xf0 [ 531.950990][T17160] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 531.951015][T17160] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 531.951037][T17160] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 531.951062][T17160] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 531.951078][T17160] __vmalloc_node_noprof+0xad/0xf0 [ 531.951095][T17160] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 531.951114][T17160] __vmalloc_node_range_noprof+0xb3b/0x1480 [ 531.951138][T17160] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 531.951160][T17160] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 531.951184][T17160] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 531.951201][T17160] vmalloc_user_noprof+0x9e/0xe0 [ 531.951218][T17160] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 531.951235][T17160] vb2_vmalloc_alloc+0x135/0x3f0 [ 531.951254][T17160] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 531.951270][T17160] __vb2_queue_alloc+0x8c9/0x1280 [ 531.951301][T17160] vb2_core_create_bufs+0x559/0xab0 [ 531.951320][T17160] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 531.951342][T17160] ? __mutex_trylock_common+0xe9/0x250 [ 531.951359][T17160] vb2_create_bufs+0x5e8/0x840 [ 531.951378][T17160] ? __pfx_vb2_create_bufs+0x10/0x10 [ 531.951390][T17160] ? __mutex_lock+0x1c5/0x1060 [ 531.951415][T17160] vb2_ioctl_create_bufs+0x244/0x3e0 [ 531.951433][T17160] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.951455][T17160] vidioc_create_bufs+0x7d/0xf0 [ 531.951484][T17160] v4l_create_bufs+0x151/0x260 [ 531.951505][T17160] __video_do_ioctl+0xb77/0xf00 [ 531.951528][T17160] ? __might_fault+0xe3/0x190 [ 531.951548][T17160] ? __pfx___video_do_ioctl+0x10/0x10 [ 531.951576][T17160] video_usercopy+0x4d0/0x1720 [ 531.951590][T17160] ? __pfx___video_do_ioctl+0x10/0x10 [ 531.951610][T17160] ? selinux_kernel_read_file+0xe0/0x130 [ 531.951627][T17160] ? __pfx_video_usercopy+0x10/0x10 [ 531.951658][T17160] v4l2_ioctl+0x1bd/0x250 [ 531.951682][T17160] ? __pfx_v4l2_ioctl+0x10/0x10 [ 531.951702][T17160] __x64_sys_ioctl+0x18e/0x210 [ 531.951725][T17160] do_syscall_64+0xcd/0xfa0 [ 531.951740][T17160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.951754][T17160] RIP: 0033:0x7fc3cd18f7c9 [ 531.951767][T17160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.951780][T17160] RSP: 002b:00007fc3cdf75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.951794][T17160] RAX: ffffffffffffffda RBX: 00007fc3cd3e6090 RCX: 00007fc3cd18f7c9 [ 531.951803][T17160] RDX: 0000200000000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 531.951812][T17160] RBP: 00007fc3cd213f91 R08: 0000000000000000 R09: 0000000000000000 [ 531.951820][T17160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.951828][T17160] R13: 00007fc3cd3e6128 R14: 00007fc3cd3e6090 R15: 00007fff3c2ded18 [ 531.951848][T17160] [ 531.951853][T17160] Mem-Info: [ 532.311729][T17160] active_anon:17924 inactive_anon:4034 isolated_anon:0 [ 532.311729][T17160] active_file:586 inactive_file:38145 isolated_file:0 [ 532.311729][T17160] unevictable:1768 dirty:138 writeback:0 [ 532.311729][T17160] slab_reclaimable:9200 slab_unreclaimable:94665 [ 532.311729][T17160] mapped:29480 shmem:17838 pagetables:1346 [ 532.311729][T17160] sec_pagetables:313 bounce:0 [ 532.311729][T17160] kernel_misc_reclaimable:0 [ 532.311729][T17160] free:380318 free_pcp:8287 free_cma:0 [ 532.341398][T17160] Node 0 active_anon:47984kB inactive_anon:16136kB active_file:2236kB inactive_file:152300kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98192kB dirty:552kB writeback:0kB shmem:44704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14160kB pagetables:4320kB sec_pagetables:1252kB all_unreclaimable? no Balloon:0kB [ 532.364696][T17160] Node 1 active_anon:23712kB inactive_anon:0kB active_file:108kB inactive_file:280kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:19728kB dirty:0kB writeback:0kB shmem:26648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:1040kB pagetables:1064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 532.387511][T17160] Node 0 DMA free:5980kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1308kB inactive_anon:5420kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:44kB free_cma:0kB [ 532.426998][T17160] lowmem_reserve[]: 0 1239 1239 1239 1239 [ 532.430147][T17160] Node 0 DMA32 free:40964kB boost:0kB min:27580kB low:34472kB high:41364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46676kB inactive_anon:10716kB active_file:2236kB inactive_file:152288kB unevictable:3536kB writepending:552kB zspages:0kB present:2080628kB managed:1269464kB mlocked:0kB bounce:0kB free_pcp:9872kB local_pcp:4548kB free_cma:0kB [ 532.460224][T17160] lowmem_reserve[]: 0 0 0 0 0 [ 532.463045][T17160] Node 1 Normal free:1474328kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23712kB inactive_anon:0kB active_file:108kB inactive_file:280kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:23024kB local_pcp:1728kB free_cma:0kB [ 532.509053][T17160] lowmem_reserve[]: 0 0 0 0 0 [ 532.511211][T17160] Node 0 DMA: 39*4kB (UM) 34*8kB (UM) 21*16kB (UM) 23*32kB (UM) 6*64kB (UM) 6*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (U) 1*2048kB (M) 0*4096kB = 5980kB [ 532.521555][T17160] Node 0 DMA32: 1*4kB (M) 771*8kB (M) 419*16kB (ME) 272*32kB (ME) 92*64kB (ME) 49*128kB (ME) 25*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40140kB [ 532.539230][T17160] Node 1 Normal: 194*4kB (ME) 136*8kB (UME) 295*16kB (UME) 257*32kB (UME) 159*64kB (UME) 105*128kB (UME) 55*256kB (UM) 41*512kB (UM) 22*1024kB (UM) 7*2048kB (UM) 333*4096kB (UM) = 1474328kB [ 532.556548][T17160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 532.568831][T17160] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 532.573963][T17160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 532.594143][T17160] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 532.599386][T17179] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 532.601705][T17160] 56565 total pagecache pages [ 532.612395][T17160] 0 pages in swap cache [ 532.614982][T17160] Free swap = 124996kB [ 532.627711][T17160] Total swap = 124996kB [ 532.630635][T17160] 1048443 pages RAM [ 532.632874][T17160] 0 pages HighMem/MovableOnly [ 532.635995][T17160] 281764 pages reserved [ 532.645660][T17160] 0 pages cma reserved [ 532.826778][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3374'. [ 532.833929][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3374'. [ 533.130001][ T5936] Bluetooth: hci6: link tx timeout [ 533.166088][T17202] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 533.186439][T17206] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 533.286489][T17208] lo speed is unknown, defaulting to 1000 [ 533.695032][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'. [ 533.699249][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'. [ 533.723169][T17246] netlink: 'syz.3.3383': attribute type 10 has an invalid length. [ 534.253965][ T6036] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 534.444815][ T6036] usb 6-1: Using ep0 maxpacket: 8 [ 534.451066][ T6036] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 534.456939][ T6036] usb 6-1: config 0 has no interface number 0 [ 534.459637][ T6036] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 534.497475][ T6036] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 534.506158][ T6036] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 534.548157][ T6036] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 534.559572][ T6036] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 534.566118][ T6036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.606348][ T6036] usb 6-1: config 0 descriptor?? [ 534.692264][ T6036] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 534.913300][ T6036] usb 6-1: USB disconnect, device number 11 [ 534.927240][ T6036] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 535.057396][T17296] deleting an unspecified loop device is not supported. [ 535.263431][T17301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3393'. [ 535.272434][T17301] bridge_slave_1: left allmulticast mode [ 535.279533][T17301] bridge_slave_1: left promiscuous mode [ 535.283264][T17301] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.330474][T17301] bridge_slave_0: left allmulticast mode [ 535.335665][T17301] bridge_slave_0: left promiscuous mode [ 535.346966][T17301] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.440617][T17304] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 535.736952][T17316] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3396'. [ 535.744649][T17319] netlink: 212352 bytes leftover after parsing attributes in process `syz.6.3397'. [ 536.221716][ T5936] Bluetooth: hci6: link tx timeout [ 536.541199][T17338] x_tables: duplicate underflow at hook 1 [ 536.713335][T17345] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 536.739686][T17341] xfrm1: entered allmulticast mode [ 536.770354][ T5936] Bluetooth: hci6: unexpected event for opcode 0x0c1a [ 537.407601][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3411'. [ 537.428727][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3411'. [ 537.446163][T17371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3411'. [ 537.490901][ T5936] Bluetooth: hci6: unexpected event for opcode 0x0c7c [ 537.927614][T17384] ptrace attach of "/syz-executor exec"[16063] was attempted by "/syz-executor exec"[17384] [ 538.316151][T17401] xt_socket: unknown flags 0xe4 [ 538.435137][ T5936] Bluetooth: hci6: link tx timeout [ 538.509534][T17403] __nla_validate_parse: 1 callbacks suppressed [ 538.509550][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3420'. [ 538.518213][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3420'. [ 538.666650][T17405] FAULT_INJECTION: forcing a failure. [ 538.666650][T17405] name failslab, interval 1, probability 0, space 0, times 0 [ 538.671420][T17405] CPU: 0 UID: 0 PID: 17405 Comm: syz.6.3421 Not tainted syzkaller #0 PREEMPT(full) [ 538.671444][T17405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 538.671455][T17405] Call Trace: [ 538.671464][T17405] [ 538.671472][T17405] dump_stack_lvl+0x16c/0x1f0 [ 538.671495][T17405] should_fail_ex+0x512/0x640 [ 538.671519][T17405] should_failslab+0xc2/0x120 [ 538.671538][T17405] kmem_cache_alloc_noprof+0x75/0x6e0 [ 538.671563][T17405] ? dst_alloc+0x99/0x1a0 [ 538.671587][T17405] ? dst_alloc+0x99/0x1a0 [ 538.671605][T17405] dst_alloc+0x99/0x1a0 [ 538.671625][T17405] rt_dst_alloc+0x35/0x3a0 [ 538.671644][T17405] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 538.671671][T17405] ip_route_output_key_hash+0x10f/0x2b0 [ 538.671692][T17405] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 538.671719][T17405] ? find_held_lock+0x2b/0x80 [ 538.671743][T17405] ip_route_output_flow+0x27/0x150 [ 538.671764][T17405] udp_sendmsg+0x1af9/0x2870 [ 538.671783][T17405] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 538.671809][T17405] ? avc_has_perm_noaudit+0xe0/0x3b0 [ 538.671833][T17405] ? __pfx_udp_sendmsg+0x10/0x10 [ 538.671850][T17405] ? avc_has_perm+0x144/0x1f0 [ 538.671883][T17405] ? sock_has_perm+0x259/0x2f0 [ 538.671946][T17405] ? __pfx_sock_has_perm+0x10/0x10 [ 538.671978][T17405] ? __import_iovec+0x1dd/0x650 [ 538.672001][T17405] ? __pfx_udp_sendmsg+0x10/0x10 [ 538.672019][T17405] inet_sendmsg+0x105/0x140 [ 538.672044][T17405] ____sys_sendmsg+0x973/0xc70 [ 538.672063][T17405] ? copy_msghdr_from_user+0x10a/0x160 [ 538.672085][T17405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.672105][T17405] ? __pfx__kstrtoull+0x10/0x10 [ 538.672136][T17405] ___sys_sendmsg+0x134/0x1d0 [ 538.672160][T17405] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.672193][T17405] ? find_held_lock+0x2b/0x80 [ 538.672239][T17405] __sys_sendmmsg+0x200/0x420 [ 538.672266][T17405] ? __pfx___sys_sendmmsg+0x10/0x10 [ 538.672296][T17405] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 538.672325][T17405] ? fput+0x9b/0xd0 [ 538.672346][T17405] ? ksys_write+0x1ac/0x250 [ 538.672363][T17405] ? __pfx_ksys_write+0x10/0x10 [ 538.672384][T17405] __x64_sys_sendmmsg+0x9c/0x100 [ 538.672405][T17405] ? lockdep_hardirqs_on+0x7c/0x110 [ 538.672421][T17405] do_syscall_64+0xcd/0xfa0 [ 538.672441][T17405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.672459][T17405] RIP: 0033:0x7f7b35f8f7c9 [ 538.672475][T17405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.672491][T17405] RSP: 002b:00007f7b36eab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 538.672507][T17405] RAX: ffffffffffffffda RBX: 00007f7b361e5fa0 RCX: 00007f7b35f8f7c9 [ 538.672517][T17405] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 538.672527][T17405] RBP: 00007f7b36eab090 R08: 0000000000000000 R09: 0000000000000000 [ 538.672537][T17405] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 538.672547][T17405] R13: 00007f7b361e6038 R14: 00007f7b361e5fa0 R15: 00007ffcd2959278 [ 538.672570][T17405] [ 538.675847][ T6005] IPVS: starting estimator thread 0... [ 539.167498][T17406] IPVS: using max 26 ests per chain, 62400 per kthread [ 539.195297][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3425'. [ 539.205754][T17418] bridge_slave_1: left allmulticast mode [ 539.208801][T17418] bridge_slave_1: left promiscuous mode [ 539.228766][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.255600][T17418] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.662324][T17443] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 539.695151][T17443] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 540.199319][ T40] audit: type=1400 audit(1764229081.970:1514): avc: denied { bind } for pid=17459 comm="syz.1.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 540.318689][T17462] input: syz0 as /devices/virtual/input/input34 [ 540.570650][ T5972] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 540.601607][ T40] audit: type=1400 audit(1764229082.370:1515): avc: denied { lock } for pid=17483 comm="syz.1.3439" path="socket:[72376]" dev="sockfs" ino=72376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 540.770929][ T5972] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 540.774932][ T5972] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.799780][ T5972] usb 8-1: Product: syz [ 540.801918][ T5972] usb 8-1: Manufacturer: syz [ 540.805100][ T5972] usb 8-1: SerialNumber: syz [ 540.840711][ T5972] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 540.869783][ T5998] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 540.948336][T17501] binder: 17500:17501 ioctl c0306201 0 returned -14 [ 540.951418][T17501] binder: 17500:17501 ioctl c0306201 200000000300 returned -11 [ 541.061552][ T40] audit: type=1400 audit(1764229082.820:1516): avc: denied { watch } for pid=17502 comm="syz.6.3443" path="/78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 541.077527][T17505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.119397][ T40] audit: type=1400 audit(1764229082.820:1517): avc: denied { watch_sb } for pid=17502 comm="syz.6.3443" path="/78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 541.166980][T17505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.191786][ T840] usb 8-1: USB disconnect, device number 34 [ 541.232013][ T5936] Bluetooth: hci6: link tx timeout [ 541.965265][ T5998] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 541.988759][ T5998] ath9k_htc: Failed to initialize the device [ 542.004184][ T840] usb 8-1: ath9k_htc: USB layer deinitialized [ 542.222664][T17542] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.3453'. [ 542.409829][ T5936] Bluetooth: hci3: command 0x0406 tx timeout [ 542.412910][ T9004] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 542.417050][ T9004] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 542.588849][T17542] "syz.3.3453" (17542) uses obsolete ecb(arc4) skcipher [ 543.774794][T17599] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input35 [ 544.356039][T17627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3467'. [ 544.491151][ T5936] Bluetooth: hci6: command 0x0406 tx timeout [ 544.512992][ T9004] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 544.515393][ T9004] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 544.794208][ T40] audit: type=1400 audit(1764229086.540:1518): avc: denied { create } for pid=17658 comm="syz.3.3474" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 544.795299][T17659] (syz.3.3474,17659,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 544.910829][ T40] audit: type=1400 audit(1764229086.680:1519): avc: denied { ioctl } for pid=17665 comm="syz.1.3476" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 544.915001][T17666] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 545.105662][T17701] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 545.132596][T17707] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3479'. [ 545.283005][T17707] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3479'. [ 546.049899][ T40] audit: type=1400 audit(1764229087.810:1520): avc: denied { map } for pid=17738 comm="syz.6.3490" path="/dev/net/tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 546.220452][T17749] netlink: 'syz.3.3491': attribute type 1 has an invalid length. [ 546.221424][T17750] usb usb9: usbfs: process 17750 (syz.3.3491) did not claim interface 0 before use [ 546.242389][T17750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3491'. [ 546.499346][T17789] lo speed is unknown, defaulting to 1000 [ 547.081327][T17829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3495'. [ 547.676723][T17841] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3498'. [ 547.680936][T17841] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 547.907662][T17849] xt_cgroup: path and classid specified [ 547.949079][T17853] program syz.3.3501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.061961][T17861] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 548.421510][T17866] /dev/sr0: Can't open blockdev [ 548.428757][T17868] gfs2: gfs2 mount does not exist [ 548.434824][ T40] audit: type=1400 audit(1764229090.200:1521): avc: denied { setopt } for pid=17872 comm="syz.6.3508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 548.736269][T17883] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3510'. [ 548.765222][T17883] vlan0: entered promiscuous mode [ 548.848714][T17889] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 549.131679][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 549.136022][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 549.740324][T17923] netlink: 'syz.6.3520': attribute type 5 has an invalid length. [ 549.976435][T17924] netlink: 'syz.6.3520': attribute type 5 has an invalid length. [ 550.000443][T17940] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 550.061251][ T40] audit: type=1400 audit(1764229091.830:1522): avc: denied { accept } for pid=17948 comm="syz.1.3523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 550.712182][T17974] binder: 17973:17974 ioctl c0306201 200000000300 returned -11 [ 550.786064][T17979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17979 comm=syz.1.3530 [ 550.964994][T17988] lo speed is unknown, defaulting to 1000 [ 550.989190][T17991] program syz.3.3532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 550.992210][T17986] program syz.3.3532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 550.997854][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'. [ 551.010588][T17992] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3533'. [ 551.081700][T17995] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3534'. [ 551.166330][T17995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.772967][T18031] loop3: detected capacity change from 0 to 14 [ 551.783056][T18031] Dev loop3: unable to read RDB block 14 [ 551.786613][T18031] loop3: unable to read partition table [ 551.792530][T18031] loop3: partition table beyond EOD, truncated [ 551.795467][T18031] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 554.443681][ T40] audit: type=1400 audit(1764229096.210:1523): avc: denied { mounton } for pid=18055 comm="syz.3.3542" path="/472/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 554.785357][T18064] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 555.188544][T17984] Set syz1 is full, maxelem 65536 reached [ 555.351441][T18081] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3549'. [ 555.641160][T18094] overlayfs: workdir and upperdir must be separate subtrees [ 556.121294][T18119] tmpfs: Bad value for 'mpol' [ 556.124791][T18119] tmpfs: Bad value for 'mpol' [ 556.700087][ T9000] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 556.882088][ T9000] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 556.936156][ T9000] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.942411][ T9000] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.947346][ T9000] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 556.972442][ T9000] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.986356][ T9000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.010553][ T9000] usb 8-1: config 0 descriptor?? [ 557.423849][ T9000] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 557.504096][ T9000] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 557.738240][ T9000] usb 8-1: USB disconnect, device number 35 [ 558.636392][T18177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3568'. [ 558.645508][T18180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3568'. [ 558.704934][T18177] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18177 comm=syz.3.3568 [ 558.843460][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3569'. [ 558.849216][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3569'. [ 559.235393][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.280583][T18203] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 559.291734][T18203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 559.297337][T18203] vhci_hcd vhci_hcd.0: Device attached [ 559.297893][ T40] audit: type=1400 audit(1764229101.060:1524): avc: denied { append } for pid=18205 comm="syz.3.3575" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 559.328655][T18203] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(10) [ 559.331381][T18203] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 559.338328][T18203] vhci_hcd vhci_hcd.0: Device attached [ 559.354297][T18210] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(13) [ 559.357045][T18210] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 559.361200][T18210] vhci_hcd vhci_hcd.0: Device attached [ 559.399295][T18203] QAT: Device 13 not found [ 559.439382][T18204] vhci_hcd: connection closed [ 559.449813][T18208] vhci_hcd: connection closed [ 559.451620][T18211] vhci_hcd: connection closed [ 559.471607][ T7898] vhci_hcd: stop threads [ 559.490254][ T7898] vhci_hcd: release socket [ 559.498701][ T7898] vhci_hcd: disconnect device [ 559.511016][ T7898] vhci_hcd: stop threads [ 559.513102][ T7898] vhci_hcd: release socket [ 559.516603][ T7898] vhci_hcd: disconnect device [ 559.521823][ T7898] vhci_hcd: stop threads [ 559.523591][ T7898] vhci_hcd: release socket [ 559.545321][ T7898] vhci_hcd: disconnect device [ 559.563944][ T29] vhci_hcd: vhci_device speed not set [ 559.711855][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.824906][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3580'. [ 559.835823][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3580'. [ 560.179060][ T6036] ================================================================== [ 560.182375][ T6036] BUG: KASAN: slab-use-after-free in __mutex_lock+0xe87/0x1060 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 560.185996][ T6036] Read of size 8 at addr ffff888066084320 by task kworker/0:5/6036 [ 560.190546][ T40] audit: type=1400 audit(1764229101.950:1525): avc: denied { write } for pid=5903 comm="syz-executor" path="pipe:[6254]" dev="pipefs" ino=6254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 560.204565][ T6036] [ 560.204584][ T6036] CPU: 0 UID: 0 PID: 6036 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 560.204606][ T6036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 560.204618][ T6036] Workqueue: events l2cap_chan_timeout [ 560.204647][ T6036] Call Trace: [ 560.204655][ T6036] [ 560.204663][ T6036] dump_stack_lvl+0x116/0x1f0 [ 560.204680][ T6036] print_report+0xcd/0x630 [ 560.204699][ T6036] ? __virt_addr_valid+0x81/0x610 [ 560.204721][ T6036] ? __phys_addr+0xe8/0x180 [ 560.204742][ T6036] ? __mutex_lock+0xe87/0x1060 [ 560.204759][ T6036] kasan_report+0xe0/0x110 [ 560.204783][ T6036] ? __mutex_lock+0xe87/0x1060 [ 560.204801][ T6036] ? l2cap_chan_timeout+0x6d/0x310 [ 560.204822][ T6036] __mutex_lock+0xe87/0x1060 [ 560.204840][ T6036] ? l2cap_chan_timeout+0x6d/0x310 [ 560.204864][ T6036] ? __pfx___mutex_lock+0x10/0x10 [ 560.204881][ T6036] ? debug_object_deactivate+0x1ec/0x3a0 [ 560.204922][ T6036] ? l2cap_chan_timeout+0x6d/0x310 [ 560.204943][ T6036] l2cap_chan_timeout+0x6d/0x310 [ 560.204966][ T6036] process_one_work+0x9cf/0x1b70 [ 560.204989][ T6036] ? __pfx_process_one_work+0x10/0x10 [ 560.205008][ T6036] ? assign_work+0x1a0/0x250 [ 560.205025][ T6036] worker_thread+0x6c8/0xf10 [ 560.205043][ T6036] ? __kthread_parkme+0x19e/0x250 [ 560.205066][ T6036] ? __pfx_worker_thread+0x10/0x10 [ 560.205083][ T6036] kthread+0x3c5/0x780 [ 560.205098][ T6036] ? __pfx_kthread+0x10/0x10 [ 560.205114][ T6036] ? rcu_is_watching+0x12/0xc0 [ 560.205136][ T6036] ? __pfx_kthread+0x10/0x10 [ 560.205151][ T6036] ret_from_fork+0x675/0x7d0 [ 560.205166][ T6036] ? __pfx_kthread+0x10/0x10 [ 560.205182][ T6036] ret_from_fork_asm+0x1a/0x30 [ 560.205209][ T6036] [ 560.205216][ T6036] [ 560.289043][ T6036] Allocated by task 16882: [ 560.290592][ T6036] kasan_save_stack+0x33/0x60 [ 560.292468][ T6036] kasan_save_track+0x14/0x30 [ 560.294157][ T6036] __kasan_kmalloc+0xaa/0xb0 [ 560.296207][ T6036] l2cap_conn_add.part.0+0x60/0xa60 [ 560.298066][ T6036] l2cap_chan_connect+0x15e5/0x2020 [ 560.300149][ T6036] l2cap_sock_connect+0x3ba/0x740 [ 560.302358][ T6036] kernel_connect+0x107/0x180 [ 560.304369][ T6036] rfcomm_dlc_open+0x821/0xaa0 [ 560.306128][ T6036] rfcomm_sock_connect+0x423/0x670 [ 560.308035][ T6036] __sys_connect_file+0x141/0x1a0 [ 560.310123][ T6036] __sys_connect+0x13b/0x160 [ 560.312107][ T6036] __x64_sys_connect+0x72/0xb0 [ 560.314078][ T6036] do_syscall_64+0xcd/0xfa0 [ 560.316002][ T6036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.318426][ T6036] [ 560.319451][ T6036] Freed by task 16295: [ 560.321218][ T6036] kasan_save_stack+0x33/0x60 [ 560.323675][ T6036] kasan_save_track+0x14/0x30 [ 560.326113][ T6036] __kasan_save_free_info+0x3b/0x60 [ 560.328412][ T6036] __kasan_slab_free+0x5f/0x80 [ 560.330497][ T6036] kfree+0x2b8/0x6d0 [ 560.332074][ T6036] l2cap_conn_del+0x59c/0x730 [ 560.333764][ T6036] l2cap_disconn_cfm+0x96/0xd0 [ 560.335760][ T6036] hci_conn_hash_flush+0x10e/0x260 [ 560.337629][ T6036] hci_dev_close_sync+0x602/0x11d0 [ 560.339421][ T6036] hci_dev_do_close+0x2e/0x90 [ 560.341214][ T6036] hci_unregister_dev+0x227/0x640 [ 560.343240][ T6036] vhci_release+0x17d/0x230 [ 560.345165][ T6036] __fput+0x402/0xb70 [ 560.346686][ T6036] task_work_run+0x150/0x240 [ 560.348818][ T6036] do_exit+0x86f/0x2bf0 [ 560.351040][ T6036] do_group_exit+0xd3/0x2a0 [ 560.353229][ T6036] __x64_sys_exit_group+0x3e/0x50 [ 560.355208][ T6036] x64_sys_call+0x150b/0x1730 [ 560.356989][ T6036] do_syscall_64+0xcd/0xfa0 [ 560.358480][ T6036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.360563][ T6036] [ 560.361551][ T6036] The buggy address belongs to the object at ffff888066084000 [ 560.361551][ T6036] which belongs to the cache kmalloc-1k of size 1024 [ 560.366178][ T6036] The buggy address is located 800 bytes inside of [ 560.366178][ T6036] freed 1024-byte region [ffff888066084000, ffff888066084400) [ 560.371943][ T6036] [ 560.372950][ T6036] The buggy address belongs to the physical page: [ 560.375454][ T6036] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x66080 [ 560.379176][ T6036] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 560.382680][ T6036] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 560.386100][ T6036] page_type: f5(slab) [ 560.387933][ T6036] raw: 00fff00000000040 ffff88801b442dc0 ffffea000139ac00 dead000000000002 [ 560.391250][ T6036] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 560.394393][ T6036] head: 00fff00000000040 ffff88801b442dc0 ffffea000139ac00 dead000000000002 [ 560.397668][ T6036] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 560.401607][ T6036] head: 00fff00000000003 ffffea0001982001 00000000ffffffff 00000000ffffffff [ 560.405026][ T6036] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 560.408194][ T6036] page dumped because: kasan: bad access detected [ 560.410188][ T6036] page_owner tracks the page as allocated [ 560.411995][ T6036] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/1), ts 173744677247, free_ts 153158002270 [ 560.418572][ T6036] post_alloc_hook+0x1af/0x220 [ 560.420472][ T6036] get_page_from_freelist+0x10a3/0x3a30 [ 560.422394][ T6036] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 560.424523][ T6036] alloc_pages_mpol+0x1fb/0x550 [ 560.426582][ T6036] new_slab+0x24a/0x360 [ 560.428345][ T6036] ___slab_alloc+0xd79/0x1a50 [ 560.430464][ T6036] __slab_alloc.constprop.0+0x63/0x110 [ 560.432898][ T6036] __kmalloc_noprof+0x501/0x880 [ 560.434946][ T6036] ieee802_11_parse_elems_full+0x1db/0x3780 [ 560.437864][ T6036] ieee80211_inform_bss+0x10b/0x1140 [ 560.440421][ T6036] cfg80211_inform_single_bss_data+0x8ea/0x1df0 [ 560.443795][ T6036] cfg80211_inform_bss_data+0x22b/0x3be0 [ 560.446541][ T6036] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 560.448958][ T6036] ieee80211_bss_info_update+0x310/0xab0 [ 560.451152][ T6036] ieee80211_scan_rx+0x4cf/0xb30 [ 560.453460][ T6036] ieee80211_rx_list+0x1c15/0x2b20 [ 560.455622][ T6036] page last free pid 7880 tgid 7880 stack trace: [ 560.458112][ T6036] free_unref_folios+0xa31/0x1610 [ 560.460108][ T6036] folios_put_refs+0x4be/0x750 [ 560.462296][ T6036] release_pages+0x2a2/0x4b0 [ 560.464699][ T6036] io_free_region+0x102/0x2e0 [ 560.467169][ T6036] io_ring_exit_work+0xa1d/0x10f0 [ 560.470361][ T6036] process_one_work+0x9cf/0x1b70 [ 560.473108][ T6036] worker_thread+0x6c8/0xf10 [ 560.475292][ T6036] kthread+0x3c5/0x780 [ 560.476958][ T6036] ret_from_fork+0x675/0x7d0 [ 560.478798][ T6036] ret_from_fork_asm+0x1a/0x30 [ 560.480708][ T6036] [ 560.481750][ T6036] Memory state around the buggy address: [ 560.485077][ T6036] ffff888066084200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 560.488278][ T6036] ffff888066084280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 560.491426][ T6036] >ffff888066084300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 560.494897][ T6036] ^ [ 560.497421][ T6036] ffff888066084380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 560.501285][ T6036] ffff888066084400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 560.504770][ T6036] ================================================================== [ 560.507935][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.510965][ T6036] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 560.513984][ T6036] CPU: 0 UID: 0 PID: 6036 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 560.518495][ T6036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 560.523409][ T6036] Workqueue: events l2cap_chan_timeout [ 560.525733][ T6036] Call Trace: [ 560.526999][ T6036] [ 560.528221][ T6036] dump_stack_lvl+0x3d/0x1f0 [ 560.530367][ T6036] vpanic+0x640/0x6f0 [ 560.532087][ T6036] panic+0xca/0xd0 [ 560.534209][ T6036] ? __pfx_panic+0x10/0x10 [ 560.536782][ T6036] ? check_panic_on_warn+0x1f/0xb0 [ 560.539256][ T6036] check_panic_on_warn+0xab/0xb0 [ 560.541384][ T6036] end_report+0x107/0x170 [ 560.543104][ T6036] kasan_report+0xee/0x110 [ 560.544942][ T6036] ? __mutex_lock+0xe87/0x1060 [ 560.546864][ T6036] ? l2cap_chan_timeout+0x6d/0x310 [ 560.548607][ T6036] __mutex_lock+0xe87/0x1060 [ 560.550444][ T6036] ? l2cap_chan_timeout+0x6d/0x310 [ 560.552096][ T6036] ? __pfx___mutex_lock+0x10/0x10 [ 560.553748][ T6036] ? debug_object_deactivate+0x1ec/0x3a0 [ 560.555730][ T6036] ? l2cap_chan_timeout+0x6d/0x310 [ 560.557802][ T6036] l2cap_chan_timeout+0x6d/0x310 [ 560.559955][ T6036] process_one_work+0x9cf/0x1b70 [ 560.562450][ T6036] ? __pfx_process_one_work+0x10/0x10 [ 560.565077][ T6036] ? assign_work+0x1a0/0x250 [ 560.567068][ T6036] worker_thread+0x6c8/0xf10 [ 560.568994][ T6036] ? __kthread_parkme+0x19e/0x250 [ 560.571121][ T6036] ? __pfx_worker_thread+0x10/0x10 [ 560.573277][ T6036] kthread+0x3c5/0x780 [ 560.574992][ T6036] ? __pfx_kthread+0x10/0x10 [ 560.577025][ T6036] ? rcu_is_watching+0x12/0xc0 [ 560.579065][ T6036] ? __pfx_kthread+0x10/0x10 [ 560.581055][ T6036] ret_from_fork+0x675/0x7d0 [ 560.583143][ T6036] ? __pfx_kthread+0x10/0x10 [ 560.585163][ T6036] ret_from_fork_asm+0x1a/0x30 [ 560.587114][ T6036] [ 560.589228][ T6036] Kernel Offset: disabled [ 560.590865][ T6036] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:34:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852984a5 RDI=ffffffff9addb7c0 RBP=ffffffff9addb780 RSP=ffffc90004007520 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9addb780 R15=ffffffff85298440 RIP=ffffffff852984cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffea738ec0 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa3e4cd10884436c bde29fcd499a9308 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b4b09cf6a47b7cc3 2ffbfffd78042e9d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002c300752056d07 d2b2dae4140743a8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 244ef55dae6f9436 3d57bd5d9a628632 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5317348de525e5f8 268bc7ceae9e29bc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 996efa624e0af027 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dd1e169aa9d3fbbd f4faccfa94989c7b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 94513fb300000000 da3e18d321d618ad ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f872651355c8d3b 5101ea9fa6c4f513 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 13d8d9c0ddb585a3 ae70d5ac490fa911 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffffbfff35a78ff RBX=ffff88805a2ac000 RCX=ffffffff8199137c RDX=1ffffffff35a7902 RSI=0000000000000004 RDI=ffffc900033c7190 RBP=ffffc900033c7348 RSP=ffffc900033c7220 R8 =0000000000000001 R9 =fffff52000678e32 R10=0000000000000003 R11=0000000000000001 R12=dffffc0000000000 R13=ffff88805a2ab000 R14=ffffffff9ad3c7f8 R15=00000000000020ab RIP=ffffffff84accbd6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff8880d6b05000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa577517d60 CR3=0000000025100000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5769ba6c3 00007fa5769ba6c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd451fdad0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556a7d5ca4 000055556a7d5b70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556a7d75c4 000055556a7d75c0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5769bad20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556a7d84e3 000055556a7d8340 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556a7d8338 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000fffffffffffff 0408808080801000 0010000fffffffff ffff040100000008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000fffffff ffffff0408808080 8010000010000fff ffffffffff040100 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000008060c0156d4 02a9800418838388 8208000100000208 0606010fd20fffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0402a9d0 0300100002a9c003 00100002a9b00300 1000149803021000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1488030881838c90 0800148003148004 02a9a00300100002 a9900328100002a9 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000228083 RBX=0000000000000002 RCX=ffffffff8b60e2a9 RDX=0000000000000000 RSI=ffffffff8da2c165 RDI=ffffffff8bf073c0 RBP=ffffed1003bd2920 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801de94900 R14=ffffffff908214d0 R15=0000000000000000 RIP=ffffffff8b60cd5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f14b8633f98 CR3=0000000056434000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00307265646e6962 2f73667265646e69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14b7815050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14b781505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14b7815057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14b781506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14b78150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14b78151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000010000 0000000000000000 00000002ff000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14b851d100 00007f14b79ba460 00007f14b79b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14b79ba4b8 00007f14b79ba4b0 00007f14b79ba4a8 00007f14b79ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000000000ef RCX=ffffffff819bcf31 RDX=ffff88801bf02480 RSI=ffffffff819bcf1f RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000078fb88 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000f1f73 R13=0000000000000200 R14=ffff888024dba480 R15=ffffc9000078fc50 RIP=ffffffff819bcf21 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000004a80 CR3=000000004b9c6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd2959600 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b36015050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b3601505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b36015057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b3601506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b360150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b360151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000