last executing test programs: 22m47.491697394s ago: executing program 0 (id=839): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') exit(0x80000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000150a010400000000000000200a0000030909000000797a31000000000900020073797a30000000000900010073797a3100000000730008002f578452008bd7137842e3d514774740d410313dbb9907ea97dd3e5bc186a1a70e563280f435416b06e272b3f744421f7322fa14e594858147fcb6fc2369ab20b52a8d966a2b522d3463458d813c291260943f94ddf787499f26e55dc17b69ad8a9ebb77850cdb74e5bf821101b1ed00"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4c008) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3681, &(0x7f0000000300)={0x0, 0xf20f, 0x1, 0x4, 0x1e}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) r3 = openat$fb0(0xffffff9c, &(0x7f0000000100), 0xc0100, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x1) 22m46.59433532s ago: executing program 0 (id=845): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r2, 0x0, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0, 0x0, 0x100000000, 0x0, 0x2, r1}]) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r5, 0x186a0, 0x0) lseek(r5, 0x249f0, 0x0) 22m45.534737178s ago: executing program 0 (id=850): r0 = userfaultfd(0x80801) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) cachestat(r0, &(0x7f00000001c0)={0x1, 0x10000}, 0x0, 0xee) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=@getroute={0x14, 0x1a, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200480c1}, 0x0) 22m45.383142251s ago: executing program 0 (id=852): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0xb75, 0x100, 0x0, 0x9}}]}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(r6, &(0x7f0000000140)='1\x00', 0x1) 22m43.907697551s ago: executing program 2 (id=857): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x280, 0x78, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200, 0x3}) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x5) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, 0x14, 0x101, 0x70bd27, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x10, {0x4e24, 0x4e24, [0x3, 0xffff, 0xf, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x80, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x10) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r2, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) 22m43.907362547s ago: executing program 0 (id=858): r0 = openat$full(0xffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8008640b, &(0x7f00001d1040)={0x1, &(0x7f0000075e80)=[{0x4000000, 0x0, 0x0, 0x2, 0x7}]}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./debug/failslab/probability\x00', &(0x7f00000001c0), 0x41000, &(0x7f0000000200)={[{@redirect_dir_nofollow}, {@verity_on}, {@verity_on}, {@upperdir={'upperdir', 0x3d, './debug'}}, {@volatile}, {@workdir={'workdir', 0x3d, './debug/failslab/probability'}}, {@index_off}, {@metacopy_on}], [{@dont_appraise}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/failslab/probability\x00', 0x1, 0x0) 22m43.579683287s ago: executing program 0 (id=860): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2fc0}], 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d", 0x8) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r5 = syz_open_dev$rtc(&(0x7f0000000080), 0xee, 0x200000) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x142}, {r5, 0x4}, {r0, 0x8}, {r2, 0x582}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000440)={[0x33b, 0x1]}, 0x8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x1) 22m42.946381462s ago: executing program 2 (id=861): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@xino_auto}, {@index_off, 0x3a}], [{@uid_gt={'uid>', r0}}], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000280)='./bus\x00', 0x8000, 0x52) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x1, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfff, 0xa}, 0x0, &(0x7f0000000400)={0x7fc, 0x1ff, 0x800000, 0x0, 0x0, 0x1}, 0x0, 0x0) 22m42.325485668s ago: executing program 2 (id=865): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') exit(0x80000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000150a010400000000000000200a0000030909000000797a31000000000900020073797a30000000000900010073797a3100000000730008002f578452008bd7137842e3d514774740d410313dbb9907ea97dd3e5bc186a1a70e563280f435416b06e272b3f744421f7322fa14e594858147fcb6fc2369ab20b52a8d966a2b522d3463458d813c291260943f94ddf787499f26e55dc17b69ad8a9ebb77850cdb74e5bf821101b1ed00"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4c008) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3681, &(0x7f0000000300)={0x0, 0xf20f, 0x1, 0x4, 0x1e}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) r3 = openat$fb0(0xffffff9c, &(0x7f0000000100), 0xc0100, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x1) 22m41.408583508s ago: executing program 2 (id=869): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r5, 0x1) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r7, 0x26}, 0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140), &(0x7f00000001c0)=0x4) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/notes', 0x101003, 0x38) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r8 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0x3c3b, 0x1000, 0x5, 0x2d2}) r9 = io_uring_setup(0x7627, &(0x7f00000002c0)={0x0, 0x653f, 0x10000, 0x0, 0x1c9, 0x0, r8}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r10}, 0x38) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[r8], 0x1) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r1}, 0x8) 22m40.712259519s ago: executing program 2 (id=872): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000007d0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x51, 0x1, [{0xb}]}}) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) creat(&(0x7f0000000180)='./rpc_pipefs\x00', 0x182) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) lseek(r4, 0x8000, 0x4) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x500000000088, &(0x7f0000000580)={0x5, 0xb, 0x5}) setpgid(r5, r6) socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000100)=0xc) 22m40.427161146s ago: executing program 2 (id=875): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="0000000000001c250000fe00030000000000000002000000000000000000000000001300"], 0x24}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0x5, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) ioctl$TCXONC(r2, 0x540a, 0x2) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r3, 0x541e, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r8 = syz_open_pts(r2, 0x2000) r9 = getgid() setgid(r9) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000340)=0x8) ioctl$TCXONC(r8, 0x540a, 0x3) 22m19.512738955s ago: executing program 32 (id=860): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2fc0}], 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d", 0x8) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r5 = syz_open_dev$rtc(&(0x7f0000000080), 0xee, 0x200000) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x142}, {r5, 0x4}, {r0, 0x8}, {r2, 0x582}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000440)={[0x33b, 0x1]}, 0x8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x1) 22m19.441541833s ago: executing program 33 (id=875): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="0000000000001c250000fe00030000000000000002000000000000000000000000001300"], 0x24}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0x5, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) ioctl$TCXONC(r2, 0x540a, 0x2) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r3, 0x541e, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r8 = syz_open_pts(r2, 0x2000) r9 = getgid() setgid(r9) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000340)=0x8) ioctl$TCXONC(r8, 0x540a, 0x3) 15m57.112743535s ago: executing program 4 (id=2573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet(0xa, 0x801, 0x84) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB]) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="3ce2", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) shutdown(r0, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xffffffff], 'ip6gretap0\x00', 'bond0\x00', {0x1722a77d736144f5}, {0xff}, 0x8, 0x0, 0x3, 0x14}, 0x0, 0x124, 0x14c, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_vlan\x00', {0x22, 0x9, 0x0, 0x1, 0x6, 0xb3c, 0x10, 0x20, 0x20}, {0x6}}}, @common=@unspec=@addrtype1={{0x28}, {0x684, 0x9, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1, 0x2}}}, {{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x4, 0x0, [0x34d, 0x4, 0x3, 0xb, 0x6, 0x2, 0x3da6, 0xd, 0x407, 0x7, 0x5, 0xe420, 0x3, 0x10, 0x7f, 0x2d], 0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x60, 0x1, "bf50e684840e31838b38a8722c839ed5aca31d87e30f043f5135ab48dfbc"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x39c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syslog(0x3, &(0x7f0000000900), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.incfs.size\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f0000000000)='./file0\x00') sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="ec00000010000100feffffff0001000064010100000000000000000000000000e00000020000000000000000000000004e2107144e2300050000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e030100000000000000d77882a50000000000000004d56c000000fe8000000000000000000000000000aa00000000000075c4e5a4b8b1326400000300000000000000000200000000000000f8ff7fffffffffff8100000000000000ffffffffffffffff02000000000000000900000000000000fcffffffffffffff0100b89eccf33e29ba29ffff2bbd700000000000020001004400d0a9"], 0xec}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 15m56.135688202s ago: executing program 4 (id=2575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x1800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15m56.028062997s ago: executing program 4 (id=2576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000001f01f007f0000007b00000001000000", @ANYRES32, @ANYBLOB="0000000700cd420c2e9f5ab7ba27d9a3eb9009c549315b863d8d5f6c4e6b7adca96890a4c403320ac26ed19bb8aafc64233f77534b4b443cb724f74a4be23b40ff3305b693e9c501fe305a929701bf95c982c262e5c67413da518fd23ff7882f21284c1642acd55733514ec8d944af0fc7b5464508b8433df2c01fa464dedb7c4de3a80af8d1404ae7f12b78bfdf1f461ecc7aabeeb344aabf94a78b497599c453aaa6c13eff1deca7a67ed2b00ff5880e0063140a84f9aeb62d623724a00925e71defd64a0369255f6b970e80d6a36a73224eade901cf51737b3922528788af602c6dc256a0cc0f5e38b048071c4189f05858667e78c1badafa3131d2346926c18c18f973e8553474a5bed4767a43829d46378aaf5bcbcc1e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r2 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x3, 0x1000, 0x1000, r2}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r3, 0x0, r5, 0x0, 0x80, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) getrandom(0x0, 0x0, 0x2) 15m55.016070457s ago: executing program 4 (id=2579): socket$alg(0x26, 0x5, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000900)="9b", 0x1}], 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r1, &(0x7f0000000240)='k', 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) io_uring_setup(0x4e8b, &(0x7f00000000c0)={0x0, 0x2655, 0x40, 0x3, 0x248}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 15m54.82980945s ago: executing program 4 (id=2582): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000200000004000000000000000e5030000"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x1ac, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffff00, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'ipvlan0\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0xe}, 0x0, 0x188, 0x1ac, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x7b}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'hsr0\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x1, 0xfffffffe, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3dc) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000300)) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 15m54.345785788s ago: executing program 4 (id=2585): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006, 0x300}, 0x0, 0x0) 15m54.176088301s ago: executing program 34 (id=2585): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006, 0x300}, 0x0, 0x0) 14m5.98308106s ago: executing program 5 (id=3220): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x134, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364) (fail_nth: 21) 14m5.72893887s ago: executing program 5 (id=3221): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dbg\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dbg/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x1, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000200)=0x1) write(r1, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x207e, 0x0) close_range(r4, r4, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000180)) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x150, 0x150, 0x10c, 0xf8010000, 0x214, 0x238, 0x238, 0x214, 0x238, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xfff, 0x3, 0x80000000, '\x00', 'syz0\x00', {0x2}}}}, {{@ipv6={@empty, @loopback, [0xffffff00, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000], 'veth1_to_hsr\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@mh={{0x24}, {"32cf", 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x0, "63f7a1fbb94c431944e97076644735eba4733738bfaf410f23c5e5cc9b03"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c09425, &(0x7f0000001500)={"c7fa86f20000008000004000", 0x0, 0x0, {0x2, 0x7ff}, {0xec, 0x4}, 0x6, [0x1d0, 0x3fc000000000000, 0x5, 0x40, 0x0, 0x3, 0x8, 0xd, 0x7, 0x7, 0x9, 0x2, 0x4, 0x4, 0x0, 0x5]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000380)={{r3}, r6, 0x8, @unused=[0xffffffffffffffff, 0x399, 0x35, 0x5], @name="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"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r8 = getpgrp(0x0) move_pages(r8, 0x3, &(0x7f0000001380)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f00000013c0)=[0xd1, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0], 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r7, &(0x7f0000000240)=[{{0x0, 0x2710}, 0x11, 0x2, 0xef}, {{}, 0x12, 0x4, 0x5b}, {{0x0, 0x2710}, 0x4, 0x2, 0x3ff}, {{r9, r10/1000+10000}, 0x16, 0x9, 0x80}, {{0x0, 0xea60}, 0x17, 0x0, 0xb5}, {{}, 0x3, 0x9, 0x4}], 0x60) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r11, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r11, 0x4004743a, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x28) 14m5.524045731s ago: executing program 5 (id=3232): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x605, 0x4, 0x1, {0x0, 0x0, 0x0, 0x1, {0xffff, 0x1}, {0xffff, 0xe}, {0x0, 0x3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x4000, 0x10, 0x80, 0x8, 0x7, 0x8, 0x6}}, @TCA_RED_STAB={0x104}, @TCA_RED_MAX_P={0x8, 0x3, 0x100}]}}]}, 0x57}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/hibernate_compression_threads', 0x1, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='0000:00:02.0\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='vmxnet3\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/vmxnet3/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='0000:00:02.0\x00', 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='0000:00:03.0\x00', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='vmxnet3\x00', 0x7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vmxnet3/bind\x00', 0x1, 0x0) write(r9, &(0x7f0000000240)='0000:00:03.0\x00', 0xc) write$UHID_INPUT2(r3, &(0x7f0000000180)=ANY=[], 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x5, 0x90e, 0xc8a, 0x810, r1, 0x2, '\x00', r2, r3, 0x4, 0x2, 0x1}, 0x50) 14m4.931191913s ago: executing program 5 (id=3225): socket$alg(0x26, 0x5, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000900)="9b", 0x1}], 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r1, &(0x7f0000000240)='k', 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) io_uring_setup(0x4e8b, &(0x7f00000000c0)={0x0, 0x2655, 0x40, 0x3, 0x248}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 14m4.732066925s ago: executing program 5 (id=3227): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x38) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ac0)={'syz1\x00', {0x3, 0xc7d, 0x8, 0x2}, 0x57, [0xe, 0x3ff, 0x72, 0x4, 0xfffffffb, 0xef, 0x9, 0x4, 0x8, 0xfffffffe, 0x38, 0x1, 0x4, 0x3, 0x1, 0x1, 0x7f, 0x5, 0x4, 0xa5e, 0x7, 0xfffffff7, 0x2a, 0x5, 0x9, 0xff, 0x1, 0xff, 0x8, 0xd, 0x4, 0xc94d, 0xa, 0x2, 0xc, 0x4, 0x3, 0x2, 0x8, 0x6, 0x7, 0xca7, 0x7, 0x8000, 0x9, 0x10, 0x7fff, 0x39d, 0x1, 0x1, 0xffffff17, 0xb0, 0x3a6, 0xed14, 0x2, 0x2, 0x58441878, 0x3, 0x19e0, 0x92, 0x3, 0x8, 0x240, 0x80000001], [0x0, 0x1, 0x6, 0x9, 0x443f, 0x2, 0x0, 0x7, 0x9, 0x8, 0x5, 0x5, 0xb35c, 0xd, 0x71, 0x9, 0xe8a, 0x9aaf, 0xffff, 0x2, 0x3, 0x200, 0xfffffff3, 0x7fffffff, 0x0, 0x6, 0x7, 0x267c, 0x101, 0x7f, 0x8, 0xffffffff, 0x0, 0x3, 0x7, 0x10001, 0x8, 0xc74, 0x8, 0xc, 0xf992, 0x9, 0x0, 0x2, 0x9, 0x9, 0x0, 0x6, 0x3, 0x6, 0x5, 0x8, 0x6, 0x7fff, 0x6, 0x9e71, 0x4, 0x8, 0x5, 0xfff, 0x5, 0x10, 0xa, 0x5e12a8bc], [0xbc9, 0x8, 0x2, 0x800, 0x8, 0xb, 0xb, 0x3, 0xfffffffe, 0x4, 0x0, 0x2, 0x78a1a3d4, 0x5, 0x5, 0x0, 0x0, 0xffffe000, 0x6, 0x5, 0x49, 0x2, 0x1, 0x6, 0x9, 0x9, 0x2, 0xb, 0xffffff5b, 0x1, 0x9, 0x3, 0xfff, 0x5, 0x5, 0x1, 0xd9f7, 0xe8, 0x800, 0x3, 0x8, 0x6, 0xb, 0xfd47, 0x6, 0x1, 0x9, 0x3, 0x6, 0xfffffff7, 0x40, 0x826f, 0x10000, 0x2, 0x3, 0x10001, 0x1, 0x95e, 0x3f2, 0x10, 0xb29d, 0x1, 0x1, 0x3], [0x833e, 0x7, 0x3, 0x2, 0x3, 0x6, 0x5, 0xe1d5, 0x7, 0x34, 0x9, 0x8, 0x9, 0x9, 0x4, 0x5, 0x1, 0xe, 0x3, 0x9, 0x2b65, 0x5, 0x5, 0xf, 0x7c2, 0x80000000, 0x1ccc, 0x8, 0x400, 0x4, 0xe, 0x2, 0x9, 0xfff, 0x8, 0x800, 0x8c, 0x2, 0x4, 0x8, 0x0, 0x3ff, 0x1, 0x800, 0x401, 0x0, 0x4, 0x7f, 0x676, 0x1, 0x8, 0x7, 0xb, 0x3, 0x6, 0x4, 0x7ff, 0xb69, 0xf5, 0xf45, 0x6, 0x5, 0x3, 0x3]}, 0x45c) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf252800000005002b000205002e00000000000a0001007770616e3000"/50], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xf0, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x18, 0x0, 0x800, "c133a12a91872b3730"}, {0x48, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f5167"}, {0x28, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0xc, 0x113, 0x9}, {0xc, 0x110, 0x4}], 0x190}, 0x4000c010) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) 14m3.313961916s ago: executing program 5 (id=3234): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x38) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ac0)={'syz1\x00', {0x3, 0xc7d, 0x8, 0x2}, 0x57, [0xe, 0x3ff, 0x72, 0x4, 0xfffffffb, 0xef, 0x9, 0x4, 0x8, 0xfffffffe, 0x38, 0x1, 0x4, 0x3, 0x1, 0x1, 0x7f, 0x5, 0x4, 0xa5e, 0x7, 0xfffffff7, 0x2a, 0x5, 0x9, 0xff, 0x1, 0xff, 0x8, 0xd, 0x4, 0xc94d, 0xa, 0x2, 0xc, 0x4, 0x3, 0x2, 0x8, 0x6, 0x7, 0xca7, 0x7, 0x8000, 0x9, 0x10, 0x7fff, 0x39d, 0x1, 0x1, 0xffffff17, 0xb0, 0x3a6, 0xed14, 0x2, 0x2, 0x58441878, 0x3, 0x19e0, 0x92, 0x3, 0x8, 0x240, 0x80000001], [0x0, 0x1, 0x6, 0x9, 0x443f, 0x2, 0x0, 0x7, 0x9, 0x8, 0x5, 0x5, 0xb35c, 0xd, 0x71, 0x9, 0xe8a, 0x9aaf, 0xffff, 0x2, 0x3, 0x200, 0xfffffff3, 0x7fffffff, 0x0, 0x6, 0x7, 0x267c, 0x101, 0x7f, 0x8, 0xffffffff, 0x0, 0x3, 0x7, 0x10001, 0x8, 0xc74, 0x8, 0xc, 0xf992, 0x9, 0x0, 0x2, 0x9, 0x9, 0x0, 0x6, 0x3, 0x6, 0x5, 0x8, 0x6, 0x7fff, 0x6, 0x9e71, 0x4, 0x8, 0x5, 0xfff, 0x5, 0x10, 0xa, 0x5e12a8bc], [0xbc9, 0x8, 0x2, 0x800, 0x8, 0xb, 0xb, 0x3, 0xfffffffe, 0x4, 0x0, 0x2, 0x78a1a3d4, 0x5, 0x5, 0x0, 0x0, 0xffffe000, 0x6, 0x5, 0x49, 0x2, 0x1, 0x6, 0x9, 0x9, 0x2, 0xb, 0xffffff5b, 0x1, 0x9, 0x3, 0xfff, 0x5, 0x5, 0x1, 0xd9f7, 0xe8, 0x800, 0x3, 0x8, 0x6, 0xb, 0xfd47, 0x6, 0x1, 0x9, 0x3, 0x6, 0xfffffff7, 0x40, 0x826f, 0x10000, 0x2, 0x3, 0x10001, 0x1, 0x95e, 0x3f2, 0x10, 0xb29d, 0x1, 0x1, 0x3], [0x833e, 0x7, 0x3, 0x2, 0x3, 0x6, 0x5, 0xe1d5, 0x7, 0x34, 0x9, 0x8, 0x9, 0x9, 0x4, 0x5, 0x1, 0xe, 0x3, 0x9, 0x2b65, 0x5, 0x5, 0xf, 0x7c2, 0x80000000, 0x1ccc, 0x8, 0x400, 0x4, 0xe, 0x2, 0x9, 0xfff, 0x8, 0x800, 0x8c, 0x2, 0x4, 0x8, 0x0, 0x3ff, 0x1, 0x800, 0x401, 0x0, 0x4, 0x7f, 0x676, 0x1, 0x8, 0x7, 0xb, 0x3, 0x6, 0x4, 0x7ff, 0xb69, 0xf5, 0xf45, 0x6, 0x5, 0x3, 0x3]}, 0x45c) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xf0, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x18, 0x0, 0x800, "c133a12a91872b3730"}, {0x48, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f5167"}, {0x28, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0xc, 0x113, 0x9}, {0xc, 0x110, 0x4}], 0x190}, 0x4000c010) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) 14m3.009654499s ago: executing program 35 (id=3234): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x38) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ac0)={'syz1\x00', {0x3, 0xc7d, 0x8, 0x2}, 0x57, [0xe, 0x3ff, 0x72, 0x4, 0xfffffffb, 0xef, 0x9, 0x4, 0x8, 0xfffffffe, 0x38, 0x1, 0x4, 0x3, 0x1, 0x1, 0x7f, 0x5, 0x4, 0xa5e, 0x7, 0xfffffff7, 0x2a, 0x5, 0x9, 0xff, 0x1, 0xff, 0x8, 0xd, 0x4, 0xc94d, 0xa, 0x2, 0xc, 0x4, 0x3, 0x2, 0x8, 0x6, 0x7, 0xca7, 0x7, 0x8000, 0x9, 0x10, 0x7fff, 0x39d, 0x1, 0x1, 0xffffff17, 0xb0, 0x3a6, 0xed14, 0x2, 0x2, 0x58441878, 0x3, 0x19e0, 0x92, 0x3, 0x8, 0x240, 0x80000001], [0x0, 0x1, 0x6, 0x9, 0x443f, 0x2, 0x0, 0x7, 0x9, 0x8, 0x5, 0x5, 0xb35c, 0xd, 0x71, 0x9, 0xe8a, 0x9aaf, 0xffff, 0x2, 0x3, 0x200, 0xfffffff3, 0x7fffffff, 0x0, 0x6, 0x7, 0x267c, 0x101, 0x7f, 0x8, 0xffffffff, 0x0, 0x3, 0x7, 0x10001, 0x8, 0xc74, 0x8, 0xc, 0xf992, 0x9, 0x0, 0x2, 0x9, 0x9, 0x0, 0x6, 0x3, 0x6, 0x5, 0x8, 0x6, 0x7fff, 0x6, 0x9e71, 0x4, 0x8, 0x5, 0xfff, 0x5, 0x10, 0xa, 0x5e12a8bc], [0xbc9, 0x8, 0x2, 0x800, 0x8, 0xb, 0xb, 0x3, 0xfffffffe, 0x4, 0x0, 0x2, 0x78a1a3d4, 0x5, 0x5, 0x0, 0x0, 0xffffe000, 0x6, 0x5, 0x49, 0x2, 0x1, 0x6, 0x9, 0x9, 0x2, 0xb, 0xffffff5b, 0x1, 0x9, 0x3, 0xfff, 0x5, 0x5, 0x1, 0xd9f7, 0xe8, 0x800, 0x3, 0x8, 0x6, 0xb, 0xfd47, 0x6, 0x1, 0x9, 0x3, 0x6, 0xfffffff7, 0x40, 0x826f, 0x10000, 0x2, 0x3, 0x10001, 0x1, 0x95e, 0x3f2, 0x10, 0xb29d, 0x1, 0x1, 0x3], [0x833e, 0x7, 0x3, 0x2, 0x3, 0x6, 0x5, 0xe1d5, 0x7, 0x34, 0x9, 0x8, 0x9, 0x9, 0x4, 0x5, 0x1, 0xe, 0x3, 0x9, 0x2b65, 0x5, 0x5, 0xf, 0x7c2, 0x80000000, 0x1ccc, 0x8, 0x400, 0x4, 0xe, 0x2, 0x9, 0xfff, 0x8, 0x800, 0x8c, 0x2, 0x4, 0x8, 0x0, 0x3ff, 0x1, 0x800, 0x401, 0x0, 0x4, 0x7f, 0x676, 0x1, 0x8, 0x7, 0xb, 0x3, 0x6, 0x4, 0x7ff, 0xb69, 0xf5, 0xf45, 0x6, 0x5, 0x3, 0x3]}, 0x45c) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xf0, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x18, 0x0, 0x800, "c133a12a91872b3730"}, {0x48, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f5167"}, {0x28, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0xc, 0x113, 0x9}, {0xc, 0x110, 0x4}], 0x190}, 0x4000c010) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) 10m41.956222717s ago: executing program 7 (id=4224): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x1c, 0x49, 0x100, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x4044084) syz_emit_ethernet(0x76, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0xfe, 0x1, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1d}}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x3, 0x4, 0x800, 0x5, 0x11, 0x1, @private=0xa0100fe, @rand_addr=0x64010102, {[@cipso={0x86, 0x19, 0x3, [{0x6, 0x4, "9595"}, {0x5, 0x2}, {0x0, 0xd, "ba243ccd3c34beb25539e6"}]}, @timestamp_prespec={0x44, 0x1c, 0x97, 0x3, 0x3, [{@multicast1, 0xfffffffe}, {@empty, 0x1}, {@remote}]}]}}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4041004) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_run_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modules_conf_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0xb4}, 0x1, 0x0, 0x0, 0x850}, 0x81) 10m41.720452277s ago: executing program 7 (id=4227): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mq_open(&(0x7f0000000680)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQF\xc0uT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xeca0\xa0B\xae|\x00\x00\x00', 0x40, 0x40, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x100, 0x44041) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xc, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000200)=0x8) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f0000000000), 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x21a641, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x9104, 0x7ffd, 0x1a, "b0bfac0000000003000018bfff4000"}) r2 = syz_open_pts(r1, 0x200) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xa) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x10, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x92) connect$inet6(r5, 0x0, 0x22) 10m39.11956908s ago: executing program 7 (id=4228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0_to_team\x00', 0x1}) r1 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x800}, 0x1c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000240)=0x8) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) madvise(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0xb) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x2d, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) 10m38.809577116s ago: executing program 7 (id=4232): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0xe020400) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) (async) recvmmsg$unix(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) msgget$private(0x0, 0x351) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="196c0000", @ANYRES16=r4, @ANYBLOB="01002abd02000000df25060000002800070073797374656d5f753a6f626a6563745f723a7379736c6f67645f657865635f743a73300014000300000000000000000000000000000000011400020000000000000000000000ffffffffffff"], 0x64}, 0x1, 0x0, 0x0, 0x40090}, 0x80ac) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) (async) umount2(&(0x7f0000000440)='./file0\x00', 0x2) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 10m38.367821672s ago: executing program 7 (id=4235): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02753e868a10000000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 10m37.627579307s ago: executing program 7 (id=4238): iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f00000004c0)='addr=127\x87u\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x00\xe2R\xbb\xef8CJ8|\xd8\xc0\x10\xb3C\xa6\x04;%.\xfbt\xf1\xe5\x19\x9f\x11b\x9d\xfcY:]\xa4\xad3O\x8d|\x94\x8f\xa8\xabYM\xc9\xa3\xa2f\xa6\xb8Y\x81\x92_)C\xab\xc8v\x00\xf8\xf4\xe8\xc62`\xaa\\q}\xb6\xc9=D\xba\x95\xceG\xa6\xc8#\xf0P\x8e\xc5z\xd2x\x14\x86\xbf\xae\xa9\x97\xdd\x93Q\xe2\xec\xe5\x8ch\xf8\xaeG\x11\x9e\xca\xf9K\xca\xce\xf0C\x86\v\xf17~a\xa21Fk?\xc5\xdfH\xb0s\x7f\xbbYI\xbeI\xb8\\\xee\x02S\xf8lBLd=G \x107\xa9\x91\xf6m\xdd\x88\xffp\x11\x18_\xfb[\x13\xb8\xb9') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket(0x8, 0x1, 0x3ff) close_range(r2, r3, 0x0) 10m37.491518202s ago: executing program 36 (id=4238): iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f00000004c0)='addr=127\x87u\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x00\xe2R\xbb\xef8CJ8|\xd8\xc0\x10\xb3C\xa6\x04;%.\xfbt\xf1\xe5\x19\x9f\x11b\x9d\xfcY:]\xa4\xad3O\x8d|\x94\x8f\xa8\xabYM\xc9\xa3\xa2f\xa6\xb8Y\x81\x92_)C\xab\xc8v\x00\xf8\xf4\xe8\xc62`\xaa\\q}\xb6\xc9=D\xba\x95\xceG\xa6\xc8#\xf0P\x8e\xc5z\xd2x\x14\x86\xbf\xae\xa9\x97\xdd\x93Q\xe2\xec\xe5\x8ch\xf8\xaeG\x11\x9e\xca\xf9K\xca\xce\xf0C\x86\v\xf17~a\xa21Fk?\xc5\xdfH\xb0s\x7f\xbbYI\xbeI\xb8\\\xee\x02S\xf8lBLd=G \x107\xa9\x91\xf6m\xdd\x88\xffp\x11\x18_\xfb[\x13\xb8\xb9') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket(0x8, 0x1, 0x3ff) close_range(r2, r3, 0x0) 3m28.41591398s ago: executing program 1 (id=6087): r0 = socket(0x10, 0xa, 0x7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x89, 0xe, '\x00', [@generic={0x1c, 0x6d, "74c880f69d9083a7bf995e60db983d26d66ab7c5c386467e28d244894c62be806e84e5fdedab4d41ce92538b5475da46acc6b72aae96d463649f78f09a4cc7acc02f42f2b4e6cd29ffa543d04918f46d51b55cefae0b99e1c4e0bee976e3dc7ccd59da45aa3c0cc776380fcd91"}, @ra={0x5, 0x2, 0xec}, @enc_lim={0x4, 0x1, 0x6}]}, 0x80) write(r0, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ff00ff000000240000001ff80000", 0x1c) 3m27.869227895s ago: executing program 1 (id=6089): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3m25.17226911s ago: executing program 1 (id=6095): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x40}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xfff1, 0xf}, {}, {0x3, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x8}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8000}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m25.083596205s ago: executing program 1 (id=6096): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_emit_ethernet(0x8e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x7}, 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstat(r3, &(0x7f0000000140)) 3m23.081446205s ago: executing program 1 (id=6103): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3m22.743845675s ago: executing program 1 (id=6105): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b000100"], 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pread64$ublk_bdev(0xffffffffffffffff, &(0x7f0000000140)=""/98, 0x62, 0x5) syz_usb_connect$uac2(0x6, 0x9f, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x1, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x8, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x8, 0x2d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x4, 0x405, 0x4, 0x4, 0xe, 0x28e, 0x4}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x206, 0x2, 0x1, 0x2, 0x5, 0x9, 0x81, 0x8}, @selector_unit={0x8, 0x24, 0xb, 0x7, 0x3, "3a0f92"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x8, 0x5, {0x8, 0x25, 0x1, 0x80, 0x3, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xa0, 0x8, 0x7, {0x8, 0x25, 0x1, 0x0, 0x3, 0x7f, 0x400}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x7, 0x53, 0x4, 0x10, 0x8}, 0xa2, &(0x7f0000000340)={0x5, 0xf, 0xa2, 0x2, [@generic={0x81, 0x10, 0x8c76d167b5332eb0, "2442f5669e35bea0bc0112eed89b1113b7386180efc07b7f8bfadb4275cb45d82be2963aace0624a5b4c1f4dc013a6dfe48ee5370dc9d00abb161e0ab445d028d58aa0ed285fc0ee7af9727f630c373bd52e50bbde916767120bb24daf5cf41c8d3e32d2d0c9af0210efeb578b60fd469fffa7a0d524dcb78308899c3650"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9d, 0x4, 0x7fffffb, 0xf00f, 0x8, [0xff3f00, 0xffffcf, 0xff000f, 0xff0000]}]}, 0x20000038, [{0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="5f03eb740be07cb3c8b1c2cf7ab5aa667b7089bd67eadf30b5d792abc293e215a6d72af9dbc619507a702ab68f083c9f58e7c04e9b92bb0e9d1b8604bacde116bc56568db16e7401aba4f10129de2f717b3dfa714cca6a2fcb552c0e347c2265"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44e}}, {0xb5, &(0x7f00000004c0)=@string={0xb5, 0x3, "048b4b38ce773fc65976d340f5b0f3797a1fac8434bc0cadfb04723453d4920b3ca1ba9328c578e9b166b97d219fa8b99a2a3d68cca46dc4981a0b81127c2937a0ead08a6fbc6f852b9664ca1de4a1ec91bc6dbc9c9f7054ba2ac790da15578cc1004edffeae655dcfd4a983f2ca4c91de892f546d0504cbe5a511584c3630c209ba724e71ecd2e9cc3cd7bbee60afbc4cfe8e01780a4a21511b9f9f8bcbabe11cb28b1648ddd4b5d8db3f20c6669b937ed44d"}}, {0xad, &(0x7f0000000580)=@string={0xad, 0x3, "68c6a073be0fcab8c844b2d34705ca471a4c91d47d778001bcbc2bef50847ef41fed015deb55447b048905e3320c2ba184e18d678e0520aa562a669339c2b14be7e16d59a92b64fdbd0ff00cb2f5551109f591db1541b965c8bf8a85f60b3a9009e8f268b65625efdf063c963eba6ce4d23efad9d3899233c73db4a86bc4d68ba1eac83a6de11a274495067fdd97e946f07ab1452df2de7393ec091d4a83624e69b97b9cd7e7b5aca8a8da"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2c01}}, {0xca, &(0x7f0000000680)=ANY=[@ANYBLOB="ca03d54506bb72cd420be5a133fd2464618432b3a4ea3c7c03caf9215824d7e42916e533d3f8a5c9dad2ea1988cbe37790133d663f54872a37c91da696fb41cfdaf2111b4e8090a8a56ff722d4833bac0d418f75fc0c6650a84f4e16174e44d0986fb9855235a96e375b6e3e34191a10a9ae51f2430b35e16c4c6c3abc6e01703f175d7e36c508db6cdc60ca185b531256ef8494ae94171590c1091b56b6e2708a135fcdc5b0d0094ea97fa3d32259cc7f0ae5bcab2c8fb1e41c58c7c7254f19d8ab90ed000000000000"]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1818}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 3m22.638728338s ago: executing program 37 (id=6105): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b000100"], 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pread64$ublk_bdev(0xffffffffffffffff, &(0x7f0000000140)=""/98, 0x62, 0x5) syz_usb_connect$uac2(0x6, 0x9f, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x1, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x8, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x8, 0x2d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x4, 0x405, 0x4, 0x4, 0xe, 0x28e, 0x4}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x206, 0x2, 0x1, 0x2, 0x5, 0x9, 0x81, 0x8}, @selector_unit={0x8, 0x24, 0xb, 0x7, 0x3, "3a0f92"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x8, 0x5, {0x8, 0x25, 0x1, 0x80, 0x3, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xa0, 0x8, 0x7, {0x8, 0x25, 0x1, 0x0, 0x3, 0x7f, 0x400}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x7, 0x53, 0x4, 0x10, 0x8}, 0xa2, &(0x7f0000000340)={0x5, 0xf, 0xa2, 0x2, [@generic={0x81, 0x10, 0x8c76d167b5332eb0, "2442f5669e35bea0bc0112eed89b1113b7386180efc07b7f8bfadb4275cb45d82be2963aace0624a5b4c1f4dc013a6dfe48ee5370dc9d00abb161e0ab445d028d58aa0ed285fc0ee7af9727f630c373bd52e50bbde916767120bb24daf5cf41c8d3e32d2d0c9af0210efeb578b60fd469fffa7a0d524dcb78308899c3650"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9d, 0x4, 0x7fffffb, 0xf00f, 0x8, [0xff3f00, 0xffffcf, 0xff000f, 0xff0000]}]}, 0x20000038, [{0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="5f03eb740be07cb3c8b1c2cf7ab5aa667b7089bd67eadf30b5d792abc293e215a6d72af9dbc619507a702ab68f083c9f58e7c04e9b92bb0e9d1b8604bacde116bc56568db16e7401aba4f10129de2f717b3dfa714cca6a2fcb552c0e347c2265"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44e}}, {0xb5, &(0x7f00000004c0)=@string={0xb5, 0x3, "048b4b38ce773fc65976d340f5b0f3797a1fac8434bc0cadfb04723453d4920b3ca1ba9328c578e9b166b97d219fa8b99a2a3d68cca46dc4981a0b81127c2937a0ead08a6fbc6f852b9664ca1de4a1ec91bc6dbc9c9f7054ba2ac790da15578cc1004edffeae655dcfd4a983f2ca4c91de892f546d0504cbe5a511584c3630c209ba724e71ecd2e9cc3cd7bbee60afbc4cfe8e01780a4a21511b9f9f8bcbabe11cb28b1648ddd4b5d8db3f20c6669b937ed44d"}}, {0xad, &(0x7f0000000580)=@string={0xad, 0x3, "68c6a073be0fcab8c844b2d34705ca471a4c91d47d778001bcbc2bef50847ef41fed015deb55447b048905e3320c2ba184e18d678e0520aa562a669339c2b14be7e16d59a92b64fdbd0ff00cb2f5551109f591db1541b965c8bf8a85f60b3a9009e8f268b65625efdf063c963eba6ce4d23efad9d3899233c73db4a86bc4d68ba1eac83a6de11a274495067fdd97e946f07ab1452df2de7393ec091d4a83624e69b97b9cd7e7b5aca8a8da"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2c01}}, {0xca, &(0x7f0000000680)=ANY=[@ANYBLOB="ca03d54506bb72cd420be5a133fd2464618432b3a4ea3c7c03caf9215824d7e42916e533d3f8a5c9dad2ea1988cbe37790133d663f54872a37c91da696fb41cfdaf2111b4e8090a8a56ff722d4833bac0d418f75fc0c6650a84f4e16174e44d0986fb9855235a96e375b6e3e34191a10a9ae51f2430b35e16c4c6c3abc6e01703f175d7e36c508db6cdc60ca185b531256ef8494ae94171590c1091b56b6e2708a135fcdc5b0d0094ea97fa3d32259cc7f0ae5bcab2c8fb1e41c58c7c7254f19d8ab90ed000000000000"]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1818}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 8.87693162s ago: executing program 9 (id=6680): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{0x0}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4808}, 0x40a0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e21, 0x3, 'wlc\x00', 0x23, 0x81, 0x3b}, {@remote, 0x4e23, 0x3, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16=r9], 0x1c}}, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000300530400082bbd9200ffdbdf25"], 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) 7.786791048s ago: executing program 9 (id=6683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'macsec0\x00', @random="6ae16539b7c3"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(0x0, 0x42000, 0x18) ftruncate(r2, 0x2007ffb) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x271d, 0x0, &(0x7f0000000000)) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0x0, 0x11, 0xff, @loopback={0x60}, @mcast2}}}, 0xfdef) 4.551835302s ago: executing program 9 (id=6688): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x480, 0x10c) getdents(r0, &(0x7f0000000400)=""/213, 0xd5) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000001c0)='./bus\x00', 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 4.341339451s ago: executing program 9 (id=6690): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) pselect6(0x40, &(0x7f0000000040)={0x3, 0x2, 0x4, 0x81, 0x5c185099, 0x2, 0x12, 0xc0000000000}, 0x0, &(0x7f0000000180)={0x8, 0x10000, 0xff, 0x9, 0xfffffffffffffff7, 0x3, 0x37339521, 0x1}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f023}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="0203000916000000000000000000000004000300fb000000000000000000000000000000000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000030100007005000500008000000a00000000000000ff0100000000000000000000000000010000000000000000a0b0fae1310d645bde77ec484abd96dcf9002e336b20773e557f2a6ea08906aee06a5266123dd7a74a3c442fe9c07187863947fa3b40c234077f2939e00dbe44e48bb2e6ae7d7cb725569def68e7bf4b2488a9dd3a84efedce965cd28b4e938503e7fa04fed4a1bf6338d587c851861341fba2aa628df90a29eff57de8e15c9c1da15ee76a749c8c1f8448c29ceb8f7262f784d75120a143292577f5e56f863d9ac3"], 0xb0}}, 0x0) socket$netlink(0x10, 0x3, 0xc) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1, 0x0, 0x7) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_usb_connect$uac2(0x6, 0x9f, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x1, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x8, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x8, 0x2d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x4, 0x405, 0x4, 0x4, 0xe, 0x28e, 0x4}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x206, 0x2, 0x1, 0x2, 0x5, 0x9, 0x81, 0x8}, @selector_unit={0x8, 0x24, 0xb, 0x7, 0x3, "3a0f92"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x8, 0x5, {0x8, 0x25, 0x1, 0x80, 0x3, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xa0, 0x8, 0x7, {0x8, 0x25, 0x1, 0x0, 0x3, 0x7f, 0x400}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x7, 0x53, 0x4, 0x10, 0x8}, 0xa2, &(0x7f0000000340)={0x5, 0xf, 0xa2, 0x2, [@generic={0x81, 0x10, 0x8c76d167b5332eb0, "2442f5669e35bea0bc0112eed89b1113b7386180efc07b7f8bfadb4275cb45d82be2963aace0624a5b4c1f4dc013a6dfe48ee5370dc9d00abb161e0ab445d028d58aa0ed285fc0ee7af9727f630c373bd52e50bbde916767120bb24daf5cf41c8d3e32d2d0c9af0210efeb578b60fd469fffa7a0d524dcb78308899c3650"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9d, 0x4, 0x7fffffb, 0xf00f, 0x8, [0xff3f00, 0xffffcf, 0xff000f, 0xff0000]}]}, 0x20000038, [{0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="5f03eb740be07cb3c8b1c2cf7ab5aa667b7089bd67eadf30b5d792abc293e215a6d72af9dbc619507a702ab68f083c9f58e7c04e9b92bb0e9d1b8604bacde116bc56568db16e7401aba4f10129de2f717b3dfa714cca6a2fcb552c0e347c2265"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44e}}, {0xb5, &(0x7f00000004c0)=@string={0xb5, 0x3, "048b4b38ce773fc65976d340f5b0f3797a1fac8434bc0cadfb04723453d4920b3ca1ba9328c578e9b166b97d219fa8b99a2a3d68cca46dc4981a0b81127c2937a0ead08a6fbc6f852b9664ca1de4a1ec91bc6dbc9c9f7054ba2ac790da15578cc1004edffeae655dcfd4a983f2ca4c91de892f546d0504cbe5a511584c3630c209ba724e71ecd2e9cc3cd7bbee60afbc4cfe8e01780a4a21511b9f9f8bcbabe11cb28b1648ddd4b5d8db3f20c6669b937ed44d"}}, {0xad, &(0x7f0000000580)=@string={0xad, 0x3, "68c6a073be0fcab8c844b2d34705ca471a4c91d47d778001bcbc2bef50847ef41fed015deb55447b048905e3320c2ba184e18d678e0520aa562a669339c2b14be7e16d59a92b64fdbd0ff00cb2f5551109f591db1541b965c8bf8a85f60b3a9009e8f268b65625efdf063c963eba6ce4d23efad9d3899233c73db4a86bc4d68ba1eac83a6de11a274495067fdd97e946f07ab1452df2de7393ec091d4a83624e69b97b9cd7e7b5aca8a8da"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2c01}}, {0xca, &(0x7f0000000680)=ANY=[@ANYBLOB="ca03d54506bb72cd420be5a133fd2464618432b3a4ea3c7c03caf9215824d7e42916e533d3f8a5c9dad2ea1988cbe37790133d663f54872a37c91da696fb41cfdaf2111b4e8090a8a56ff722d4833bac0d418f75fc0c6650a84f4e16174e44d0986fb9855235a96e375b6e3e34191a10a9ae51f2430b35e16c4c6c3abc6e01703f175d7e36c508db6cdc60ca185b531256ef8494ae94171590c1091b56b6e2708a135fcdc5b0d0094ea97fa3d32259cc7f0ae5bcab2c8fb1e41c58c7c7254f19d8ab90ed000000000000"]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1818}}]}) 4.260437037s ago: executing program 6 (id=6692): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x10, 0x7, 0xa445, 0x9, {{0x16, 0x4, 0x1, 0x1d, 0x58, 0x65, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @local, {[@timestamp={0x44, 0x14, 0x16, 0x0, 0x9, [0x5, 0x5c67, 0xe2d, 0x8]}, @generic={0x88, 0x7, "05a78e26fd"}, @timestamp_prespec={0x44, 0x24, 0xc3, 0x3, 0x7, [{@multicast2, 0x7ff}, {@multicast1}, {@loopback, 0xffffffff}, {@remote, 0x7}]}, @ssrr={0x89, 0x3, 0xa9}]}}}}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000000000002100000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000002bea16fd5b3480c2ffb702000008000000b70300000000000085000000170000009500000000000000751110c915d342866ef5b9f3ffeaa4592775ea8e85b9c6b1ed0943d6443ba09d53afcb0ec624e15c300b841168be5616e20cacca"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1004}, [@IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0xfffffffffffffdbd, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000406030000000000000000000000000005000100070000008b434b420557e3bc2663192cab715837"], 0x1c}}, 0x40000) mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') 2.991166092s ago: executing program 6 (id=6696): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x1, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.783056021s ago: executing program 3 (id=6697): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xe, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000340)={0x3, r2, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0xffffffff, 0xfffffffc], [], [0xfffffffffffffffc, 0x0, 0x8]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001100)={r4, 0x0, {0x0, 0x0, 0x0, 0x400, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x14, "339f020bbe82b398000100000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8333c691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f044158d9744b66cc530000000400000001000000002200", [0x314d39d0, 0x245]}}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="481200001000050400000080000000000000", @ANYRES32=0x0, @ANYBLOB="21000000212c0100687307000000000000000100", @ANYRESOCT=r6, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="0500070001000000"], 0x48}, 0x1, 0x0, 0x0, 0x100}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/601]) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbb"], 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161e42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000200), 0x0, r10}, 0x64) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000000000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="18007f02afb700ecf09a030000000000010000004b3ea13eb60000000000000000000000000000000000000000000000eccec49d77227cfda3cbf2d80d0234c642cb4339f8b4111c44e4a146", @ANYRES32=r11, @ANYBLOB="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"], 0x40) write(r1, 0x0, 0x0) syz_ublk_add_dev(r1, 0x0, r0, 0x0, 0x0, &(0x7f00000000c0)) setns(0xc9, 0x0) r12 = socket(0x8, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r12, 0x84, 0x42000004, 0x0, 0x5c) socket$inet6_tcp(0xa, 0x1, 0x0) 2.782774076s ago: executing program 3 (id=6698): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000048e4bbacd2b4ec4fdd4f9d912670000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) read$midi(r4, &(0x7f00000001c0)=""/70, 0xffffffd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x10}, 0x50) syz_io_uring_setup(0x7628, &(0x7f0000000440)={0x0, 0xf668, 0x80, 0x4, 0x178}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) 2.430406927s ago: executing program 3 (id=6699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000700)={0x0, 0x80000003}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.328905032s ago: executing program 3 (id=6700): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$inet_sctp(0x2, 0x4, 0x84) r0 = gettid() syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r2, 0x0, 0x2a, 0x0) write(r2, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r1, &(0x7f0000000780)=""/221, 0xfdef) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 2.1146942s ago: executing program 3 (id=6701): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='ip=127.0.0.1,port=4369,user=root,password=root,vers=3.1.1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x15, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800df00b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000080)='GPL\x00', 0x6}, 0x94) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000200)={0x0, 0xd5, 0x7, &(0x7f0000000140)={0x1b, "490cec20d9d67599e2e7fc0057e2ec86f3df46d76096e2b28c6b61ab2ad5afb874"}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x6}, 0x50) pselect6(0x40, &(0x7f0000000040)={0x3ff, 0x3b1, 0x3, 0x7, 0xa85, 0x8, 0x8, 0x9}, &(0x7f00000001c0)={0x3, 0x7fffffffffffffff, 0x7, 0x9, 0x4, 0x10001, 0xb26, 0x69e71ea}, &(0x7f00000002c0)={0x0, 0xc, 0x7f8, 0x0, 0x180000000, 0x200, 0x8, 0x1}, &(0x7f0000000340), &(0x7f00000004c0)={&(0x7f00000003c0)={[0x80000001, 0x8001]}, 0x8}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000140)}, 0x10) 2.023354137s ago: executing program 6 (id=6702): socket$pppoe(0x18, 0x1, 0x0) mkdir(&(0x7f0000000000)='./dbg/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dbg\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dbg/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.920060792s ago: executing program 6 (id=6703): socket$packet(0x11, 0x3, 0x300) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) (async) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x827812, &(0x7f00000001c0)=ANY=[]) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x14b101) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, 0x0, 0x0) (async) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) (async, rerun: 32) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000340)={'pcl818\x00', [0x100, 0x5, 0x13600, 0x6, 0x2, 0x10005, 0xf9, 0x3, 0x80008, 0x5, 0x2, 0x1, 0x7, 0x800, 0x6, 0xfd, 0x0, 0x80000000, 0x8, 0x7fffffff, 0xb740, 0xca9e, 0x9, 0x20001e58, 0x8, 0xf39e, 0x7, 0x1539b804, 0x9, 0x1, 0x2]}) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async) write$P9_RFSYNC(r1, 0x0, 0x0) (async, rerun: 64) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) 1.863368194s ago: executing program 9 (id=6704): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\t\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.635532562s ago: executing program 6 (id=6705): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) syz_emit_ethernet(0xb8, &(0x7f0000000100)={@local, @remote, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@llc_tr={0x11, {@snap={0xab, 0x0, ',,', "d700", 0x0, "0b1cf057df4883d383c6b51615385ed034f260c786ec1af4330b8a6d78d4eec77aa9dfbf1d4a7da489eefd824d83530c7ca2fd385fbe421fb4bd02cd9c4d3933db71140adc2e61e66bdd7e9dbb2d78124f9fa2d1a39eca71cc4b69deac0628d1767822a7ab4b3b1f6b6af43b62d0e5cf0a64345ccc5e30607436c5cd3cc16cec92f356be1d0670821b96838bf621edf2035f50f7565f7fb9b7f81c6490"}}}}}, 0x0) readv(r0, &(0x7f0000000ec0)=[{&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000740)=""/169, 0xa9}, {&(0x7f0000000800)=""/180, 0xb4}, {&(0x7f00000008c0)=""/212, 0xd4}, {&(0x7f00000009c0)=""/161, 0xa1}, {&(0x7f0000000b80)=""/227, 0xe3}, {&(0x7f0000000c80)=""/192, 0xc0}, {&(0x7f0000000d40)=""/165, 0xa5}, {&(0x7f0000000e00)=""/52, 0x34}], 0x9) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.576838356s ago: executing program 8 (id=6706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001e00)=ANY=[@ANYBLOB="f81200000f0a03"], 0x12f8}, 0x1, 0x0, 0x0, 0x4fe30cc6382c0708}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7d}]}, 0x24}, 0x1, 0x0, 0x0, 0xc881}, 0xc0) 1.574903608s ago: executing program 9 (id=6707): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xfffffffe, 0x3}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000a00)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc8, 0x91}}}, 0x7) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r3, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r3, 0xc0405610, &(0x7f0000000500)="0100"/64) socket$unix(0x1, 0x1, 0x0) ioctl(r4, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r4, 0xc058560f, &(0x7f0000000700)="0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000500000000000000002c0100"/84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) ioctl(r4, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r6, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x19}, "60dcf9307f17d30dfc08a753b8ec8e75ec8b77b110cce7c5c1"}, 0x1d) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0x200, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.477438015s ago: executing program 8 (id=6708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000008000000000003"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) r1 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0, 0x300}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000005c0)={0x0, "8d884da6c24d0c06473c7c5c62f6c411"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x400) sendfile(r4, r4, 0x0, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x800, 0x18, 0x1}, 0x18) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet(r8, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r9 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) r10 = syz_ublk_setup_io_uring(0x31cc, &(0x7f0000000280)={0x0, 0x6f51, 0x40000, 0x800, 0x1004, 0x0, r7}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r14 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r14) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r14, 0x10, &(0x7f0000000080)={0x3}) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000200)={0x2e, 0x2, 0x0, r6, 0x1212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, r14, 0x0, 0x11}}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1080, 0x0) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r15, 0x5, 0x7000000, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x4000000) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000015c0)={r2, 0x0, 0x0, [0x7f, 0x3, 0x8000000000000001, 0x8001, 0x17e2], [0x3, 0x0, 0x100, 0x6, 0x1, 0x1000, 0x7, 0x3, 0x1, 0x7, 0xf, 0x0, 0x9, 0x4, 0x5, 0x80, 0x5, 0x2, 0x3, 0xffe0000000000000, 0xffffffff, 0x7, 0xb83, 0x5, 0x8, 0x1, 0x9, 0x8000, 0x4, 0x68, 0x0, 0x11ff5fc6, 0x3, 0x800, 0x2, 0x1, 0x7fffffffffffffff, 0xe, 0x7, 0x48c, 0xfffffffffffffffe, 0x1, 0xf, 0x0, 0x1, 0x5, 0x4, 0x3, 0xd, 0xc, 0x97, 0xffffffff, 0x9, 0xd, 0x7, 0x4, 0x9, 0x5e3, 0x7122, 0x54, 0x4, 0x1000, 0x6, 0x800, 0x0, 0x3, 0x1, 0x2, 0x3, 0x7, 0x3, 0x1, 0x2f3f, 0x3, 0x3, 0x1, 0x0, 0xffffffff, 0x3, 0x1000, 0x800, 0x7, 0x1, 0xd7a3, 0x0, 0x10001, 0xffff, 0x10001, 0x1, 0x5, 0x8, 0x4, 0x2, 0x1, 0x1000, 0x1, 0x8000000000000000, 0x3, 0x9, 0x8001, 0x9856, 0x1, 0x7, 0xc, 0x9, 0x400, 0x1, 0x8, 0x7, 0xc779, 0xe, 0x0, 0x4, 0x3, 0x5, 0xd, 0x3, 0x8001, 0x1c000000000, 0x3, 0x2]}) 30.52016ms ago: executing program 8 (id=6709): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$inet_sctp(0x2, 0x4, 0x84) r0 = gettid() syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r2, 0x0, 0x2a, 0x0) write(r2, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r1, &(0x7f0000000780)=""/221, 0xfdef) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 17.731865ms ago: executing program 3 (id=6710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x1, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16.184572ms ago: executing program 8 (id=6711): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x101) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) getdents(r2, &(0x7f0000000480)=""/89, 0x59) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000000)=""/49, 0x31) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20000800, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x88) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x40000a, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0xd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f00000012c0)=""/4096, &(0x7f00000022c0)=0x1000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa) getdents64(r8, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00', 0x0) 15.433745ms ago: executing program 6 (id=6712): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) pselect6(0x40, &(0x7f0000000040)={0x3, 0x2, 0x4, 0x81, 0x5c185099, 0x2, 0x12, 0xc0000000000}, 0x0, &(0x7f0000000180)={0x8, 0x10000, 0xff, 0x9, 0xfffffffffffffff7, 0x3, 0x37339521, 0x1}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f023}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0) socket$netlink(0x10, 0x3, 0xc) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1, 0x0, 0x7) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_usb_connect$uac2(0x6, 0x9f, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x1, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x8, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x8, 0x2d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x4, 0x405, 0x4, 0x4, 0xe, 0x28e, 0x4}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x206, 0x2, 0x1, 0x2, 0x5, 0x9, 0x81, 0x8}, @selector_unit={0x8, 0x24, 0xb, 0x7, 0x3, "3a0f92"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x8, 0x5, {0x8, 0x25, 0x1, 0x80, 0x3, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xa0, 0x8, 0x7, {0x8, 0x25, 0x1, 0x0, 0x3, 0x7f, 0x400}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x7, 0x53, 0x4, 0x10, 0x8}, 0xa2, &(0x7f0000000340)={0x5, 0xf, 0xa2, 0x2, [@generic={0x81, 0x10, 0x8c76d167b5332eb0, "2442f5669e35bea0bc0112eed89b1113b7386180efc07b7f8bfadb4275cb45d82be2963aace0624a5b4c1f4dc013a6dfe48ee5370dc9d00abb161e0ab445d028d58aa0ed285fc0ee7af9727f630c373bd52e50bbde916767120bb24daf5cf41c8d3e32d2d0c9af0210efeb578b60fd469fffa7a0d524dcb78308899c3650"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9d, 0x4, 0x7fffffb, 0xf00f, 0x8, [0xff3f00, 0xffffcf, 0xff000f, 0xff0000]}]}, 0x20000038, [{0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="5f03eb740be07cb3c8b1c2cf7ab5aa667b7089bd67eadf30b5d792abc293e215a6d72af9dbc619507a702ab68f083c9f58e7c04e9b92bb0e9d1b8604bacde116bc56568db16e7401aba4f10129de2f717b3dfa714cca6a2fcb552c0e347c2265"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44e}}, {0xb5, &(0x7f00000004c0)=@string={0xb5, 0x3, "048b4b38ce773fc65976d340f5b0f3797a1fac8434bc0cadfb04723453d4920b3ca1ba9328c578e9b166b97d219fa8b99a2a3d68cca46dc4981a0b81127c2937a0ead08a6fbc6f852b9664ca1de4a1ec91bc6dbc9c9f7054ba2ac790da15578cc1004edffeae655dcfd4a983f2ca4c91de892f546d0504cbe5a511584c3630c209ba724e71ecd2e9cc3cd7bbee60afbc4cfe8e01780a4a21511b9f9f8bcbabe11cb28b1648ddd4b5d8db3f20c6669b937ed44d"}}, {0xad, &(0x7f0000000580)=@string={0xad, 0x3, "68c6a073be0fcab8c844b2d34705ca471a4c91d47d778001bcbc2bef50847ef41fed015deb55447b048905e3320c2ba184e18d678e0520aa562a669339c2b14be7e16d59a92b64fdbd0ff00cb2f5551109f591db1541b965c8bf8a85f60b3a9009e8f268b65625efdf063c963eba6ce4d23efad9d3899233c73db4a86bc4d68ba1eac83a6de11a274495067fdd97e946f07ab1452df2de7393ec091d4a83624e69b97b9cd7e7b5aca8a8da"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2c01}}, {0xca, &(0x7f0000000680)=ANY=[@ANYBLOB="ca03d54506bb72cd420be5a133fd2464618432b3a4ea3c7c03caf9215824d7e42916e533d3f8a5c9dad2ea1988cbe37790133d663f54872a37c91da696fb41cfdaf2111b4e8090a8a56ff722d4833bac0d418f75fc0c6650a84f4e16174e44d0986fb9855235a96e375b6e3e34191a10a9ae51f2430b35e16c4c6c3abc6e01703f175d7e36c508db6cdc60ca185b531256ef8494ae94171590c1091b56b6e2708a135fcdc5b0d0094ea97fa3d32259cc7f0ae5bcab2c8fb1e41c58c7c7254f19d8ab90ed000000000000"]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1818}}]}) 722.234µs ago: executing program 8 (id=6713): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x8, 0x7, 0xb, 0x2}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x48212b8952c3aff5, 0x70bd24, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$can_raw(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x1d, r4}, 0x10, &(0x7f0000000340)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "817ba97dfcab7b12"}, 0x10}, 0x1, 0x0, 0x0, 0x24008090}, 0x20004800) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffdfffd}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007b00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000690000027b8af8ff00000000bca2000000000000a6020000f8ffffffb703000002000000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) close(r6) write$binfmt_script(r5, &(0x7f0000000840)={'#! ', './file0', [{0x20, '-)*'}, {0x20, '\x86*\x17\xe3+\xf3\xec\xe4\x9bC\xa3\xa4\xfe>\xa56\t\x00\xff\xb3\xcb\xc5\xfa\x14\x91\xfa\xd7\xd6\xf8\x11\x17o\x14p\xf7Kx\xf5\xad=\xe7\xf6\x8b\xbd\xb3>\xf8\xcfT\xa8\x19\x9c\\\xe1\xf6\xefG\xef-\x14UU\xa2\xd8\x94DK\xd6,\xf0\xebAi\xa9k\x9a\xa8\x88\xd7\x1b\xc1\x1e8\x8c\xb4$\xd4\xf9\xee\xe3s\xc1\xc6\xc3\x852\xd4\xbf\xe8\x10\a\x7f\x1cV\x9e\x7f\n\x8d\r\xb6\xe4\x16\x0f.\x9a\x86\x02\x8b\xcc\xa5\x9f\xc1\x7f\xf9\x8bE\xa5\xe9vG\xf0!\xb9B\x9b,\xf6\x88\xa2\xc62\xe9\x957wz3l\xc5\xde$\x05\x9e\x06\x9a\x02\xaa\xf2\xbb^^p$\x1fWE\x0e\rP\xdau\xb9\xd4\x97dyF\xe0\"\x03\x9a\x03\x92\xfd\xe1I\xf3/q\xf6j<\x173-\x93\xcf\x85\x1dN\xf4\xa0\x90\x02x\x9cL\n\xa5EW%\x7f2\xd6\xaa\xd8D\x95+\x0fERGj\x8d$\x12\xab\x16\xabM\xed%\xae\v\xb0\xe9\xaf\xe3\xde~\x9c\x9d\x91\xae\xcex\x8e>y\x17k\x03\xb1\x89\xe3v\xb2\xd5J\xd4n\x924(V\xc8\x93\xeaI\x15\"\xe1\xeeE)}\xe0\x81mD\xb0\xe1\x96\xdbo\xed8?J\xe2\xefA[8\nj\x1ci?h\xe7\xab\xfe\xe3@m\xff\x12\x0f\xe1?K\'\xa8!\xf1\x82\'VS\xae\x12%\xe8\xd7\xed\x80\xab~:\x17\xea\\u\xe8\xbb\xe1!\xe4\xd8\xa8h9\xab\xd4\xb2\xbb\xd8Vq\x99u\x8f\xd7\xa2y\x83P\xe2fa\xf8C4\xfbw\x11\xcd\x12\x88\xc44\x84tr&j\xff$\x8f$F\x96\xd5\xceR=Q\xef\xfa{\xa4\xe2\xd0\x9d\x95\x83\x9f)\x14h]!\xea\xcez\x98\xe4\xf7\x85n\x96\xb6\xdcI\xe2&Kkq\xd4\xbb\xa6\xd5jtZ\xed'}, {0x20, 'vxcan0\x00'}, {0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, '\xff\x7ft\x00\x00\x00\x00\x00'}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}], 0xa, "90daf12686227ebae369cfd00b224008e32c225c72f672a3031d730d7acd5ab87dfc7a0a"}, 0x200) bind$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x1f8, @none, 0x8, 0x2}, 0xe) 0s ago: executing program 8 (id=6714): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet(0xa, 0x801, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0xfe, 0x7fff0006}]}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000280), 0x400000, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0xc, 0x40, 0x2, 0x6}, {0x100, 0x9, 0x9, 0x4}, {0x1ff, 0x9, 0x80, 0xffffffff}, {0x101, 0x1, 0xa}, {0xf, 0x0, 0xff, 0xffffffff}, {0x1, 0x7f, 0x0, 0x2}, {0x6, 0x10, 0x5, 0x800}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xff07, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x1) keyctl$search(0xa, 0x0, &(0x7f0000000380)='encrypted\x00', &(0x7f0000000580)={'syz', 0x1}, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0x98f900}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000000, 0x2) munlockall() connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) fcntl$setstatus(r2, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) kernel console output (not intermixed with test programs): d impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.784742][ T2139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1576.845550][ T2139] hsr_slave_0: entered promiscuous mode [ 1576.848915][ T2139] hsr_slave_1: entered promiscuous mode [ 1576.851904][ T2139] debugfs: 'hsr0' already exists in 'hsr' [ 1576.853850][ T2139] Cannot create hsr debugfs directory [ 1576.949564][ T5445] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1577.078157][T17808] IPVS: stop unused estimator thread 0... [ 1577.199689][ T2276] pim6reg: entered allmulticast mode [ 1577.222481][ T2269] pim6reg: left allmulticast mode [ 1577.330704][ T5445] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1577.444244][ T5831] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1577.597484][ T5831] usb 8-1: Using ep0 maxpacket: 8 [ 1577.604727][ T5831] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1577.615100][ T5831] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1577.619089][ T5831] usb 8-1: config 0 has no interface number 0 [ 1577.621763][ T5831] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1577.633561][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.649725][ T5831] usb 8-1: config 0 descriptor?? [ 1577.661006][ T5831] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1577.810240][ T2139] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1577.876346][T15344] Bluetooth: hci2: command tx timeout [ 1577.885350][ T2139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1577.895264][ T2139] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1577.932228][ T2139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1577.938138][ T2139] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1577.951415][ T2139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1577.993169][ T2139] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1578.072403][ T2139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1578.092322][ T2292] pim6reg: entered allmulticast mode [ 1578.192896][ T2292] pim6reg: left allmulticast mode [ 1578.247923][ T2305] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6129'. [ 1578.833024][ T2139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.870396][ T2139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.880465][T24728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.882821][T24728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.890003][T24728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.892359][T24728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.938094][ T1350] usb 8-1: USB disconnect, device number 55 [ 1578.971474][ T2318] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6133'. [ 1579.034339][ T2318] syzkaller1: entered promiscuous mode [ 1579.036564][ T2318] syzkaller1: entered allmulticast mode [ 1579.053050][ T2320] pim6reg: entered allmulticast mode [ 1579.068125][ T2320] pim6reg: left allmulticast mode [ 1579.425870][ T2345] syzkaller0: entered promiscuous mode [ 1579.427799][ T2345] syzkaller0: entered allmulticast mode [ 1579.470598][ T2139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1579.804528][ T2139] veth0_vlan: entered promiscuous mode [ 1580.102608][T15344] Bluetooth: hci2: command tx timeout [ 1580.236444][ T2139] veth1_vlan: entered promiscuous mode [ 1580.296139][ T2139] veth0_macvtap: entered promiscuous mode [ 1580.319026][ T2139] veth1_macvtap: entered promiscuous mode [ 1580.347162][ T2139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.370833][ T2139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.381541][ T2362] pim6reg: entered allmulticast mode [ 1580.385298][ T2362] pim6reg: left allmulticast mode [ 1580.415887][ T5782] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.429370][ T5782] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.432115][ T2362] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6140'. [ 1580.512792][ T5782] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.550774][ T9995] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.619126][T24715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.622002][T24715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.687365][T24715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.691237][T24715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.228845][ T2378] netlink: 'syz.9.6113': attribute type 1 has an invalid length. [ 1581.235772][ T2378] netlink: 84 bytes leftover after parsing attributes in process `syz.9.6113'. [ 1581.241056][ T2374] pim6reg: entered allmulticast mode [ 1581.242991][ T2378] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6113'. [ 1581.342679][ T2374] pim6reg: left allmulticast mode [ 1583.169206][ T2394] netlink: Conntrack attr has 12 unknown bytes [ 1583.184016][ T2394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1583.404851][ T2402] pim6reg: entered allmulticast mode [ 1583.408112][ T2402] pim6reg: left allmulticast mode [ 1583.467129][ T2406] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6149'. [ 1583.507031][ T2409] netlink: 'syz.8.6151': attribute type 1 has an invalid length. [ 1583.511861][ T2409] netlink: 84 bytes leftover after parsing attributes in process `syz.8.6151'. [ 1583.515760][ T2409] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6151'. [ 1584.111822][ T2419] pim6reg: entered allmulticast mode [ 1584.114605][ T2422] pim6reg: left allmulticast mode [ 1585.167627][ T9] usb 11-1: new high-speed USB device number 81 using dummy_hcd [ 1585.336806][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 1585.452543][ T10] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1585.722982][ T9] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1586.200221][ T2438] pim6reg: entered allmulticast mode [ 1586.202930][ T9] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1586.264021][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1586.720748][ T2439] pim6reg: left allmulticast mode [ 1586.797075][ T9] usb 11-1: config 0 has no interface number 0 [ 1586.814987][ T10] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1586.978834][ T9] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1586.984172][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.010005][ T9] usb 11-1: config 0 descriptor?? [ 1587.021119][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1587.023785][ T10] usb 8-1: config 0 has no interface number 0 [ 1587.025719][ T10] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1587.029110][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.039813][ T9] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1587.051397][ T10] usb 8-1: config 0 descriptor?? [ 1587.062470][ T10] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1587.655700][T16887] usb 8-1: USB disconnect, device number 56 [ 1588.131500][ T1350] usb 11-1: USB disconnect, device number 81 [ 1588.242452][ T2462] netlink: 'syz.9.6161': attribute type 1 has an invalid length. [ 1588.248723][ T2462] netlink: 84 bytes leftover after parsing attributes in process `syz.9.6161'. [ 1588.254201][ T2462] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6161'. [ 1588.371700][ T2472] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6165'. [ 1589.836504][ T2517] random: crng reseeded on system resumption [ 1590.483760][ T2534] netlink: 'syz.3.6172': attribute type 1 has an invalid length. [ 1590.486365][ T2534] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6172'. [ 1590.489523][ T2534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6172'. [ 1591.116261][ T10] usb 11-1: new high-speed USB device number 82 using dummy_hcd [ 1591.302379][ T2558] pim6reg: entered allmulticast mode [ 1591.304866][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 1591.307433][ T10] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1591.316980][ T2558] pim6reg: left allmulticast mode [ 1591.322292][ T10] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1591.328585][ T10] usb 11-1: config 0 has no interface number 0 [ 1591.332083][ T10] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1591.336841][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.344903][ T10] usb 11-1: config 0 descriptor?? [ 1591.360319][ T10] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1592.028287][ T50] usb 11-1: USB disconnect, device number 82 [ 1592.426263][ T2587] usbip_vudc: v_rx exit with error -32 [ 1592.488247][ T2590] FAULT_INJECTION: forcing a failure. [ 1592.488247][ T2590] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.496013][ T2590] CPU: 0 UID: 0 PID: 2590 Comm: syz.9.6185 Tainted: G L syzkaller #0 PREEMPT(full) [ 1592.496044][ T2590] Tainted: [L]=SOFTLOCKUP [ 1592.496051][ T2590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1592.496061][ T2590] Call Trace: [ 1592.496071][ T2590] [ 1592.496079][ T2590] dump_stack_lvl+0x100/0x190 [ 1592.496113][ T2590] should_fail_ex.cold+0x5/0xa [ 1592.496154][ T2590] should_failslab+0xc2/0x120 [ 1592.496183][ T2590] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1592.496207][ T2590] ? __kasan_kmalloc+0xaa/0xb0 [ 1592.496230][ T2590] ? __request_module+0x2d5/0x6a0 [ 1592.496256][ T2590] kstrdup+0x51/0xe0 [ 1592.496297][ T2590] __request_module+0x2d5/0x6a0 [ 1592.496317][ T2590] ? __pfx___request_module+0x10/0x10 [ 1592.496345][ T2590] ? find_held_lock+0x2b/0x80 [ 1592.496368][ T2590] ? rtnl_link_ops_get+0x17b/0x2c0 [ 1592.496393][ T2590] ? rtnl_link_ops_get+0x17b/0x2c0 [ 1592.496424][ T2590] rtnl_newlink+0x1657/0x2380 [ 1592.496456][ T2590] ? __pfx_rtnl_newlink+0x10/0x10 [ 1592.496479][ T2590] ? rcu_is_watching+0x12/0xc0 [ 1592.496501][ T2590] ? kasan_quarantine_put+0x104/0x240 [ 1592.496521][ T2590] ? lockdep_hardirqs_on+0x78/0x100 [ 1592.496549][ T2590] ? kfree_skbmem+0x19a/0x210 [ 1592.496566][ T2590] ? kmem_cache_free+0x127/0x6b0 [ 1592.496596][ T2590] ? find_held_lock+0x2b/0x80 [ 1592.496633][ T2590] ? find_held_lock+0x2b/0x80 [ 1592.496653][ T2590] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1592.496676][ T2590] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1592.496702][ T2590] ? __pfx_rtnl_newlink+0x10/0x10 [ 1592.496726][ T2590] rtnetlink_rcv_msg+0x95e/0xe90 [ 1592.496753][ T2590] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1592.496785][ T2590] ? ref_tracker_free+0x37e/0x6c0 [ 1592.496810][ T2590] netlink_rcv_skb+0x159/0x420 [ 1592.496832][ T2590] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1592.496858][ T2590] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1592.496887][ T2590] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1592.496910][ T2590] netlink_unicast+0x585/0x850 [ 1592.496934][ T2590] ? __pfx_netlink_unicast+0x10/0x10 [ 1592.496960][ T2590] netlink_sendmsg+0x8b0/0xda0 [ 1592.496985][ T2590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.497008][ T2590] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1592.497033][ T2590] ____sys_sendmsg+0xa4d/0xbe0 [ 1592.497050][ T2590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.497072][ T2590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1592.497102][ T2590] ___sys_sendmsg+0x190/0x1e0 [ 1592.497124][ T2590] ? __pfx____sys_sendmsg+0x10/0x10 [ 1592.497156][ T2590] ? find_held_lock+0x2b/0x80 [ 1592.497194][ T2590] __sys_sendmsg+0x160/0x210 [ 1592.497218][ T2590] ? __pfx___sys_sendmsg+0x10/0x10 [ 1592.497246][ T2590] ? __pfx_ksys_write+0x10/0x10 [ 1592.497269][ T2590] __do_fast_syscall_32+0xe7/0x970 [ 1592.497292][ T2590] ? lockdep_hardirqs_on+0x78/0x100 [ 1592.497317][ T2590] do_fast_syscall_32+0x32/0x70 [ 1592.497344][ T2590] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1592.497369][ T2590] RIP: 0023:0xf7f87fec [ 1592.497391][ T2590] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 1592.497401][ T2590] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1592.497419][ T2590] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 1592.497428][ T2590] RDX: 00000000200088c2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1592.497438][ T2590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1592.497447][ T2590] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1592.497457][ T2590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1592.497478][ T2590] [ 1592.824844][ T2590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.886227][ T2603] pim6reg: entered allmulticast mode [ 1592.892793][ T2603] pim6reg: left allmulticast mode [ 1593.112627][ T2620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6194'. [ 1593.116415][ T2620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6194'. [ 1594.041773][ T2636] netlink: 'syz.6.6199': attribute type 11 has an invalid length. [ 1594.090257][ T1350] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1594.258508][ T1350] usb 8-1: Using ep0 maxpacket: 8 [ 1594.261343][ T1350] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1594.267259][ T1350] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1594.272476][ T1350] usb 8-1: config 0 has no interface number 0 [ 1594.276281][ T1350] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1594.290470][ T1350] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.312500][ T1350] usb 8-1: config 0 descriptor?? [ 1594.324574][ T1350] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1594.501028][ T2663] fuse: Bad value for 'user_id' [ 1594.502724][ T2663] fuse: Bad value for 'user_id' [ 1594.702050][ T2671] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1594.722589][ T2671] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1594.733308][ T2671] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1594.756876][ T2681] FAULT_INJECTION: forcing a failure. [ 1594.756876][ T2681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1594.773374][ T2681] CPU: 0 UID: 0 PID: 2681 Comm: syz.9.6211 Tainted: G L syzkaller #0 PREEMPT(full) [ 1594.773405][ T2681] Tainted: [L]=SOFTLOCKUP [ 1594.773411][ T2681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1594.773421][ T2681] Call Trace: [ 1594.773428][ T2681] [ 1594.773435][ T2681] dump_stack_lvl+0x100/0x190 [ 1594.773464][ T2681] should_fail_ex.cold+0x5/0xa [ 1594.773484][ T2681] _copy_from_user+0x2e/0xd0 [ 1594.773512][ T2681] get_compat_msghdr+0xb3/0x480 [ 1594.773540][ T2681] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1594.773585][ T2681] ? _kstrtoull+0x13c/0x1f0 [ 1594.773602][ T2681] ? __pfx__kstrtoull+0x10/0x10 [ 1594.773623][ T2681] ___sys_sendmsg+0x1b6/0x1e0 [ 1594.773644][ T2681] ? __pfx____sys_sendmsg+0x10/0x10 [ 1594.773662][ T2681] ? __lock_acquire+0x49f/0x1a40 [ 1594.773707][ T2681] __sys_sendmmsg+0x309/0x440 [ 1594.773732][ T2681] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1594.773754][ T2681] ? find_held_lock+0x2b/0x80 [ 1594.773781][ T2681] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1594.773816][ T2681] ? fput+0x79/0x100 [ 1594.773836][ T2681] ? ksys_write+0x1ac/0x250 [ 1594.773856][ T2681] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1594.773872][ T2681] ? lockdep_hardirqs_on+0x78/0x100 [ 1594.773895][ T2681] __do_fast_syscall_32+0xe7/0x970 [ 1594.773919][ T2681] ? lockdep_hardirqs_on+0x78/0x100 [ 1594.773942][ T2681] do_fast_syscall_32+0x32/0x70 [ 1594.773965][ T2681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1594.774003][ T2681] RIP: 0023:0xf7f87fec [ 1594.774025][ T2681] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 1594.774032][ T2681] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 1594.774049][ T2681] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002340 [ 1594.774059][ T2681] RDX: 00000000000003e8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1594.774069][ T2681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1594.774077][ T2681] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1594.774087][ T2681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1594.774110][ T2681] [ 1595.055646][ T1350] usb 8-1: USB disconnect, device number 57 [ 1595.216261][ T2698] fuse: Bad value for 'user_id' [ 1595.224038][ T2698] fuse: Bad value for 'user_id' [ 1595.754342][ T2713] netlink: 'syz.8.6220': attribute type 3 has an invalid length. [ 1595.770298][ T2713] netlink: 'syz.8.6220': attribute type 1 has an invalid length. [ 1595.772887][ T2713] netlink: 228 bytes leftover after parsing attributes in process `syz.8.6220'. [ 1596.243693][ T2730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6224'. [ 1596.248416][ T2730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6224'. [ 1596.255983][ T2730] bond_slave_0: entered allmulticast mode [ 1596.408547][ T10] usb 13-1: new full-speed USB device number 50 using dummy_hcd [ 1596.571146][ T10] usb 13-1: not running at top speed; connect to a high speed hub [ 1596.583611][ T10] usb 13-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1596.598749][ T10] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1596.627806][ T10] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1596.641951][ T10] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.656055][ T10] usb 13-1: Product: syz [ 1596.661413][ T10] usb 13-1: Manufacturer: syz [ 1596.674412][ T10] usb 13-1: SerialNumber: syz [ 1596.712234][ T10] oti6858 13-1:1.0: oti6858 converter detected [ 1596.724292][ T10] usb 13-1: oti6858 converter now attached to ttyUSB0 [ 1596.758902][ T2732] fuse: Bad value for 'user_id' [ 1596.766599][ T2732] fuse: Bad value for 'user_id' [ 1596.867970][ T2734] syzkaller0: entered promiscuous mode [ 1596.870000][ T2734] syzkaller0: entered allmulticast mode [ 1599.305485][ T10] usb 13-1: USB disconnect, device number 50 [ 1599.336552][ T10] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1599.378686][ T10] oti6858 13-1:1.0: device disconnected [ 1599.456042][ T2749] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6231'. [ 1602.523911][ T2760] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6233'. [ 1602.559895][ T2740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1602.594327][ T2740] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1602.745056][ T2740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1602.747779][ T2740] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1602.783504][ T2740] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1602.881115][ T2740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1602.923603][ T2740] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1602.972768][ T2740] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1603.039933][ T2773] FAULT_INJECTION: forcing a failure. [ 1603.039933][ T2773] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.044262][ T42] audit: type=1326 audit(1529.414:28174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2766 comm="syz.8.6235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 1603.050807][ T2773] CPU: 0 UID: 0 PID: 2773 Comm: syz.9.6236 Tainted: G L syzkaller #0 PREEMPT(full) [ 1603.050838][ T2773] Tainted: [L]=SOFTLOCKUP [ 1603.050843][ T2773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1603.050850][ T2773] Call Trace: [ 1603.050854][ T2773] [ 1603.050859][ T2773] dump_stack_lvl+0x100/0x190 [ 1603.050879][ T2773] should_fail_ex.cold+0x5/0xa [ 1603.050893][ T2773] should_failslab+0xc2/0x120 [ 1603.050911][ T2773] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 1603.050927][ T2773] ? __get_vm_area_node+0x101/0x330 [ 1603.050947][ T2773] __get_vm_area_node+0x101/0x330 [ 1603.050965][ T2773] __vmalloc_node_range_noprof+0x228/0x1630 [ 1603.050982][ T2773] ? compat_do_replace+0x241/0x7a0 [ 1603.051003][ T2773] ? compat_do_replace+0x241/0x7a0 [ 1603.051023][ T2773] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1603.051040][ T2773] ? compat_copy_ebt_replace_from_user+0x2c8/0x3f0 [ 1603.051056][ T2773] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 1603.051076][ T2773] ? compat_do_replace+0x241/0x7a0 [ 1603.051090][ T2773] __vmalloc_node_noprof+0xad/0xf0 [ 1603.051107][ T2773] ? compat_do_replace+0x241/0x7a0 [ 1603.051123][ T2773] compat_do_replace+0x241/0x7a0 [ 1603.051139][ T2773] ? __pfx_compat_do_replace+0x10/0x10 [ 1603.051163][ T2773] ? bpf_lsm_capable+0x9/0x10 [ 1603.051177][ T2773] ? security_capable+0x80/0x260 [ 1603.051194][ T2773] do_ebt_set_ctl+0x3f4/0x4a0 [ 1603.051210][ T2773] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1603.051226][ T2773] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1603.051246][ T2773] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1603.051263][ T2773] nf_setsockopt+0x8d/0xf0 [ 1603.051278][ T2773] ip_setsockopt+0xcb/0xf0 [ 1603.051296][ T2773] tcp_setsockopt+0xa7/0x100 [ 1603.051310][ T2773] smc_setsockopt+0x1b6/0xa40 [ 1603.051325][ T2773] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1603.051339][ T2773] ? __pfx_smc_setsockopt+0x10/0x10 [ 1603.051353][ T2773] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1603.051365][ T2773] ? __pfx_smc_setsockopt+0x10/0x10 [ 1603.051379][ T2773] do_sock_setsockopt+0xf3/0x1d0 [ 1603.051417][ T2773] __sys_setsockopt+0x119/0x190 [ 1603.051437][ T2773] __ia32_sys_setsockopt+0xbc/0x160 [ 1603.051451][ T2773] ? __do_fast_syscall_32+0x98/0x970 [ 1603.051468][ T2773] ? lockdep_hardirqs_on+0x78/0x100 [ 1603.051483][ T2773] __do_fast_syscall_32+0xe7/0x970 [ 1603.051499][ T2773] ? lockdep_hardirqs_on+0x78/0x100 [ 1603.051515][ T2773] do_fast_syscall_32+0x32/0x70 [ 1603.051531][ T2773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1603.051546][ T2773] RIP: 0023:0xf7f87fec [ 1603.051560][ T2773] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 1603.051565][ T2773] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1603.051576][ T2773] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1603.051583][ T2773] RDX: 0000000000000080 RSI: 0000000080000500 RDI: 00000000000000e0 [ 1603.051590][ T2773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1603.051596][ T2773] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1603.051602][ T2773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1603.051616][ T2773] [ 1603.052846][ T2773] syz.9.6236: vmalloc error: size 144, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 1603.065330][ T42] audit: type=1326 audit(1529.423:28175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2766 comm="syz.8.6235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 1603.074988][ T2773] ,cpuset=/,mems_allowed=0-1 [ 1603.077759][ T2773] CPU: 0 UID: 0 PID: 2773 Comm: syz.9.6236 Tainted: G L syzkaller #0 PREEMPT(full) [ 1603.077776][ T2773] Tainted: [L]=SOFTLOCKUP [ 1603.077780][ T2773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1603.077787][ T2773] Call Trace: [ 1603.077791][ T2773] [ 1603.077797][ T2773] dump_stack_lvl+0x100/0x190 [ 1603.077815][ T2773] warn_alloc.cold+0x94/0xa8 [ 1603.077828][ T2773] ? __pfx_warn_alloc+0x10/0x10 [ 1603.077841][ T2773] ? __kasan_kmalloc+0x8a/0xb0 [ 1603.077861][ T2773] ? __get_vm_area_node+0x208/0x330 [ 1603.077880][ T2773] __vmalloc_node_range_noprof+0xccd/0x1630 [ 1603.077902][ T2773] ? compat_do_replace+0x241/0x7a0 [ 1603.077921][ T2773] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1603.077938][ T2773] ? compat_copy_ebt_replace_from_user+0x2c8/0x3f0 [ 1603.077953][ T2773] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 1603.077972][ T2773] ? compat_do_replace+0x241/0x7a0 [ 1603.077985][ T2773] __vmalloc_node_noprof+0xad/0xf0 [ 1603.078002][ T2773] ? compat_do_replace+0x241/0x7a0 [ 1603.078017][ T2773] compat_do_replace+0x241/0x7a0 [ 1603.078033][ T2773] ? __pfx_compat_do_replace+0x10/0x10 [ 1603.078056][ T2773] ? bpf_lsm_capable+0x9/0x10 [ 1603.078068][ T2773] ? security_capable+0x80/0x260 [ 1603.078082][ T2773] do_ebt_set_ctl+0x3f4/0x4a0 [ 1603.078098][ T2773] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1603.078113][ T2773] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1603.078133][ T2773] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1603.078149][ T2773] nf_setsockopt+0x8d/0xf0 [ 1603.078164][ T2773] ip_setsockopt+0xcb/0xf0 [ 1603.078183][ T2773] tcp_setsockopt+0xa7/0x100 [ 1603.078196][ T2773] smc_setsockopt+0x1b6/0xa40 [ 1603.078209][ T2773] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1603.078222][ T2773] ? __pfx_smc_setsockopt+0x10/0x10 [ 1603.078236][ T2773] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1603.078249][ T2773] ? __pfx_smc_setsockopt+0x10/0x10 [ 1603.078262][ T2773] do_sock_setsockopt+0xf3/0x1d0 [ 1603.078281][ T2773] __sys_setsockopt+0x119/0x190 [ 1603.078299][ T2773] __ia32_sys_setsockopt+0xbc/0x160 [ 1603.078313][ T2773] ? __do_fast_syscall_32+0x98/0x970 [ 1603.078330][ T2773] ? lockdep_hardirqs_on+0x78/0x100 [ 1603.078344][ T2773] __do_fast_syscall_32+0xe7/0x970 [ 1603.078360][ T2773] ? lockdep_hardirqs_on+0x78/0x100 [ 1603.078375][ T2773] do_fast_syscall_32+0x32/0x70 [ 1603.078391][ T2773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1603.078406][ T2773] RIP: 0023:0xf7f87fec [ 1603.078420][ T2773] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 1603.078425][ T2773] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1603.078435][ T2773] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1603.078442][ T2773] RDX: 0000000000000080 RSI: 0000000080000500 RDI: 00000000000000e0 [ 1603.078448][ T2773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1603.078455][ T2773] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1603.078474][ T2773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1603.078489][ T2773] [ 1603.079687][ T2773] Mem-Info: [ 1603.086786][ T42] audit: type=1326 audit(1529.433:28176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2766 comm="syz.8.6235" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 1603.104334][ T2773] active_anon:4244 inactive_anon:2049 isolated_anon:0 [ 1603.104334][ T2773] active_file:1427 inactive_file:10897 isolated_file:0 [ 1603.104334][ T2773] unevictable:0 dirty:86 writeback:17 [ 1603.104334][ T2773] slab_reclaimable:7562 slab_unreclaimable:87401 [ 1603.104334][ T2773] mapped:25577 shmem:2897 pagetables:1652 [ 1603.104334][ T2773] sec_pagetables:361 bounce:0 [ 1603.104334][ T2773] kernel_misc_reclaimable:0 [ 1603.104334][ T2773] free:36524 free_pcp:4699 free_cma:0 [ 1603.238335][ T42] audit: type=1326 audit(1529.584:28177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2766 comm="syz.8.6235" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa5008 code=0x7ffc0000 [ 1603.245616][ T2773] Node 0 active_anon:4kB inactive_anon:40kB active_file:36kB inactive_file:384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:256kB dirty:40kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7840kB pagetables:1224kB sec_pagetables:1188kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1603.249975][ T42] audit: type=1326 audit(1529.584:28178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2766 comm="syz.8.6235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 1603.251808][ T2773] Node 1 active_anon:17040kB inactive_anon:8156kB active_file:5672kB inactive_file:47352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102732kB dirty:440kB writeback:68kB shmem:11588kB shmem_thp:6144kB shmem_pmdmapped:6144kB anon_thp:0kB kernel_stack:8188kB pagetables:5452kB sec_pagetables:256kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1603.254352][ T42] audit: type=1326 audit(1529.584:28179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2766 comm="syz.8.6235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 1603.255567][ T2773] Node 0 [ 1603.261763][ T42] audit: type=1326 audit(1529.613:28180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2766 comm="syz.8.6235" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 1603.291800][ T2773] DMA free:2684kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1603.299980][ T42] audit: type=1326 audit(1529.613:28181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2766 comm="syz.8.6235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 1603.314393][ T2773] lowmem_reserve[]: [ 1603.332672][ T42] audit: type=1326 audit(1529.613:28182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2766 comm="syz.8.6235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 1603.341138][ T2773] 0 [ 1603.353558][ T42] audit: type=1326 audit(1529.613:28183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2766 comm="syz.8.6235" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a74eb code=0x7ffc0000 [ 1603.380892][ T2773] 280 280 280 280 [ 1603.415509][ T2773] Node 0 DMA32 free:44996kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:2048KB free_highatomic:620KB active_anon:4kB inactive_anon:40kB active_file:36kB inactive_file:384kB unevictable:0kB writepending:40kB zspages:396kB present:1032196kB managed:287068kB mlocked:0kB bounce:0kB free_pcp:600kB local_pcp:0kB free_cma:0kB [ 1603.425715][ T2773] lowmem_reserve[]: 0 0 0 0 0 [ 1603.427440][ T2773] Node 1 DMA32 free:97084kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17312kB inactive_anon:8156kB active_file:5672kB inactive_file:47420kB unevictable:0kB writepending:508kB zspages:5652kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:17868kB local_pcp:2940kB free_cma:0kB [ 1603.438699][ T2773] lowmem_reserve[]: 0 0 0 0 0 [ 1603.440398][ T2773] Node 0 DMA: 39*4kB (UE) 12*8kB (U) 8*16kB (UE) 14*32kB (U) 1*64kB (U) 0*128kB 1*256kB (E) 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2684kB [ 1603.447213][ T2773] Node 0 DMA32: 757*4kB (UMEH) 420*8kB (UMEH) 119*16kB (UMEH) 217*32kB (UMEH) 101*64kB (UMEH) 46*128kB (UMH) 16*256kB (UME) 10*512kB (UM) 6*1024kB (UM) [ 1603.447317][ T2790] fuse: Bad value for 'user_id' [ 1603.447321][ T2773] 1*2048kB [ 1603.447332][ T2790] fuse: Bad value for 'user_id' [ 1603.452337][ T2773] (M) 0*4096kB = 44996kB [ 1603.459073][ T2773] Node 1 DMA32: 2614*4kB (UME) 1966*8kB (UME) 606*16kB (UME) 201*32kB (UME) 141*64kB (UME) 59*128kB (UME) 53*256kB (UME) 16*512kB (UME) 6*1024kB (UME) 5*2048kB (M) 0*4096kB = 97032kB [ 1603.465446][ T2773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1603.468575][ T2773] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1603.472420][ T2773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1603.476755][ T2773] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1603.479979][ T2773] 18188 total pagecache pages [ 1603.481609][ T2773] 1915 pages in swap cache [ 1603.483131][ T2773] Free swap = 81392kB [ 1603.485574][ T2773] Total swap = 124996kB [ 1603.487214][ T2773] 524155 pages RAM [ 1603.488560][ T2773] 0 pages HighMem/MovableOnly [ 1603.490231][ T2773] 211495 pages reserved [ 1603.491616][ T2773] 0 pages cma reserved [ 1603.537130][ T1350] usb 13-1: new high-speed USB device number 51 using dummy_hcd [ 1603.602988][ T2793] syzkaller0: entered promiscuous mode [ 1603.604824][ T2793] syzkaller0: entered allmulticast mode [ 1603.732104][ T1350] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1603.761919][ T1350] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.765027][ T1350] usb 13-1: Product: syz [ 1603.766421][ T1350] usb 13-1: Manufacturer: syz [ 1603.768378][ T1350] usb 13-1: SerialNumber: syz [ 1603.903902][ T1350] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1604.702643][T16469] Bluetooth: hci1: command 0x0c1a tx timeout [ 1604.868848][T16469] Bluetooth: hci0: command 0x0405 tx timeout [ 1604.870940][T15344] Bluetooth: hci3: command 0x0c1a tx timeout [ 1605.036339][T16469] Bluetooth: hci2: command 0x0c1a tx timeout [ 1605.036861][ T1350] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 1605.046930][ T1350] ath9k_htc: Failed to initialize the device [ 1605.646562][ T1350] usb 13-1: ath9k_htc: USB layer deinitialized [ 1606.908906][T16469] Bluetooth: hci1: command 0x0c1a tx timeout [ 1607.081995][T16469] Bluetooth: hci0: command 0x0405 tx timeout [ 1607.228748][T16469] Bluetooth: hci2: command 0x0c1a tx timeout [ 1609.423838][T16469] Bluetooth: hci2: command 0x0c1a tx timeout [ 1610.450675][ T9141] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1610.550357][ T2803] pim6reg: entered allmulticast mode [ 1610.579182][ T2804] syzkaller0: entered promiscuous mode [ 1610.581037][ T2804] syzkaller0: entered allmulticast mode [ 1610.587183][ T2805] pim6reg: left allmulticast mode [ 1610.656668][ T2767] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1610.659650][ T2767] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1610.662559][ T2767] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1610.669102][ T2767] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1610.928287][T16887] usb 13-1: USB disconnect, device number 51 [ 1610.965936][ T9] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1611.140254][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1611.142950][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1611.147738][ T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1611.155271][ T9] usb 8-1: config 0 has no interface number 0 [ 1611.157965][ T9] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1611.178296][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.202469][ T9] usb 8-1: config 0 descriptor?? [ 1611.233838][ T9] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1612.049662][ T1350] usb 8-1: USB disconnect, device number 58 [ 1612.325382][ T2841] jffs2: notice: (2841) jffs2_build_xattr_subsystem: complete building xattr subsystem, 12 of xdatum (0 unchecked, 12 orphan) and 12 of xref (3 dead, 9 orphan) found. [ 1612.451435][ T2845] netlink: 'syz.6.6249': attribute type 2 has an invalid length. [ 1612.454744][ T2845] netlink: 'syz.6.6249': attribute type 1 has an invalid length. [ 1612.768142][ T2847] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6250'. [ 1612.806781][T16469] Bluetooth: hci2: command 0x0c1a tx timeout [ 1612.809473][T16469] Bluetooth: hci0: command 0x0405 tx timeout [ 1612.812133][T16469] Bluetooth: hci3: command 0x0c1a tx timeout [ 1612.814737][T16469] Bluetooth: hci1: command 0x0c1a tx timeout [ 1618.000385][ T2856] fuse: Bad value for 'user_id' [ 1618.002601][ T2856] fuse: Bad value for 'user_id' [ 1618.309297][ T2873] pim6reg: entered allmulticast mode [ 1618.334084][ T2873] pim6reg: left allmulticast mode [ 1618.414522][ T2871] socket: no more sockets [ 1618.536362][ T2871] socket: no more sockets [ 1618.604672][ T2871] socket: no more sockets [ 1620.150537][ T42] kauditd_printk_skb: 69 callbacks suppressed [ 1620.150553][ T42] audit: type=1326 audit(1545.630:28253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2893 comm="syz.6.6259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1620.211419][ T42] audit: type=1326 audit(1545.630:28254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2893 comm="syz.6.6259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1620.229307][ T42] audit: type=1326 audit(1545.630:28255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2893 comm="syz.6.6259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1620.259051][ T42] audit: type=1326 audit(1545.630:28256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2893 comm="syz.6.6259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1620.279695][ T42] audit: type=1326 audit(1545.630:28257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2893 comm="syz.6.6259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1620.313136][ T42] audit: type=1326 audit(1545.630:28258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2893 comm="syz.6.6259" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1620.339268][ T2902] ./dev/nullb1: Can't lookup blockdev [ 1620.347498][ T42] audit: type=1326 audit(1545.630:28259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2893 comm="syz.6.6259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1620.382143][ T42] audit: type=1326 audit(1545.630:28260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2893 comm="syz.6.6259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1620.393900][ T2903] pim6reg: entered allmulticast mode [ 1620.423831][ T42] audit: type=1326 audit(1545.630:28261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2893 comm="syz.6.6259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1620.447717][ T2903] pim6reg: left allmulticast mode [ 1620.456751][ T42] audit: type=1326 audit(1545.630:28262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2893 comm="syz.6.6259" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1620.469472][ T2899] null_blk: nullb1: using native zone append [ 1620.789927][ T2899] null_blk: disk nullb1 created [ 1620.913055][ T2908] netfs: Duplicate cookie detected [ 1620.914885][ T2908] netfs: O-cookie c=00000016 [fl=4008 na=0 nA=0 s=-] [ 1620.917488][ T2908] netfs: O-cookie V=00000018 [9p,syz,] [ 1620.919355][ T2908] netfs: O-key=[8] 'e537ac0400000000' [ 1620.921119][ T2908] netfs: N-cookie c=00000017 [fl=8 na=0 nA=0 s=-] [ 1620.923285][ T2908] netfs: N-cookie V=00000018 [9p,syz,] [ 1620.925152][ T2908] netfs: N-key=[8] 'e537ac0400000000' [ 1620.976677][ T2910] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1621.069856][ T2910] kvm: kvm [2909]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 1621.188478][ T2918] fuse: Bad value for 'user_id' [ 1621.193326][ T2918] fuse: Bad value for 'user_id' [ 1621.282682][ T2921] jffs2: notice: (2921) jffs2_build_xattr_subsystem: complete building xattr subsystem, 12 of xdatum (0 unchecked, 12 orphan) and 12 of xref (3 dead, 9 orphan) found. [ 1621.310277][ T2921] input: syz1 as /devices/virtual/input/input61 [ 1621.327559][ T2921] input: failed to attach handler leds to device input61, error: -6 [ 1622.071295][ T2944] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1622.073895][ T2944] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1622.093738][ T2944] vhci_hcd vhci_hcd.0: Device attached [ 1622.574369][ T2952] FAULT_INJECTION: forcing a failure. [ 1622.574369][ T2952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1622.578491][ T2952] CPU: 2 UID: 0 PID: 2952 Comm: syz.3.6271 Tainted: G L syzkaller #0 PREEMPT(full) [ 1622.578514][ T2952] Tainted: [L]=SOFTLOCKUP [ 1622.578518][ T2952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1622.578525][ T2952] Call Trace: [ 1622.578530][ T2952] [ 1622.578536][ T2952] dump_stack_lvl+0x100/0x190 [ 1622.578556][ T2952] should_fail_ex.cold+0x5/0xa [ 1622.578570][ T2952] _copy_from_user+0x2e/0xd0 [ 1622.578589][ T2952] get_compat_msghdr+0xb3/0x480 [ 1622.578609][ T2952] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1622.578631][ T2952] ___sys_sendmsg+0x1b6/0x1e0 [ 1622.578645][ T2952] ? __pfx____sys_sendmsg+0x10/0x10 [ 1622.578663][ T2952] ? find_held_lock+0x2b/0x80 [ 1622.578686][ T2952] __sys_sendmsg+0x160/0x210 [ 1622.578702][ T2952] ? __pfx___sys_sendmsg+0x10/0x10 [ 1622.578721][ T2952] ? __pfx_ksys_write+0x10/0x10 [ 1622.578736][ T2952] __do_fast_syscall_32+0xe7/0x970 [ 1622.578752][ T2952] ? lockdep_hardirqs_on+0x78/0x100 [ 1622.578769][ T2952] do_fast_syscall_32+0x32/0x70 [ 1622.578785][ T2952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1622.578799][ T2952] RIP: 0023:0xf70aefec [ 1622.578813][ T2952] Code: Unable to access opcode bytes at 0xf70aefc2. [ 1622.578818][ T2952] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1622.578829][ T2952] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800001c0 [ 1622.578836][ T2952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1622.578842][ T2952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1622.578848][ T2952] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1622.578854][ T2952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1622.578867][ T2952] [ 1622.648885][T16367] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1622.761220][ T7453] usb 56-1: SetAddress Request (2) to port 0 [ 1623.243830][ T2944] wg2 speed is unknown, defaulting to 1000 [ 1623.364873][ T7453] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1624.441802][ T2944] wg2 speed is unknown, defaulting to 1000 [ 1624.454258][ T2944] wg2 speed is unknown, defaulting to 1000 [ 1624.704136][ T2945] vhci_hcd: connection reset by peer [ 1624.715016][ T5782] vhci_hcd vhci_hcd.9: stop threads [ 1624.723753][ T2964] fuse: Bad value for 'user_id' [ 1624.726368][ T5782] vhci_hcd vhci_hcd.9: release socket [ 1624.768050][ T2964] fuse: Bad value for 'user_id' [ 1624.848944][ T5782] vhci_hcd vhci_hcd.9: disconnect device [ 1625.025367][ T2967] pim6reg: entered allmulticast mode [ 1625.039782][ T2944] infiniband syz2: set active [ 1625.048416][ T2944] infiniband syz2: added wg2 [ 1625.051004][ T2968] pim6reg: left allmulticast mode [ 1625.100233][ T2970] jffs2: notice: (2970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 12 of xdatum (0 unchecked, 12 orphan) and 12 of xref (3 dead, 9 orphan) found. [ 1625.107533][ T1350] wg2 speed is unknown, defaulting to 1000 [ 1625.149493][ T2960] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6274'. [ 1625.236331][ T2944] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1625.241858][ T2944] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1625.247322][ T2944] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1625.484351][ T2944] RDS/IB: syz2: added [ 1625.489170][ T2944] smc: adding ib device syz2 with port count 1 [ 1625.496877][ T2944] smc: ib device syz2 port 1 has no pnetid [ 1625.502502][ T1350] wg2 speed is unknown, defaulting to 1000 [ 1625.510426][ T2944] wg2 speed is unknown, defaulting to 1000 [ 1625.964345][ T2944] wg2 speed is unknown, defaulting to 1000 [ 1626.249080][ T2944] wg2 speed is unknown, defaulting to 1000 [ 1626.263129][ T2999] pim6reg: entered allmulticast mode [ 1626.273362][ T2999] pim6reg: left allmulticast mode [ 1626.378966][ T2944] wg2 speed is unknown, defaulting to 1000 [ 1626.385775][ T2999] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6278'. [ 1626.441209][ T9] usb 13-1: new high-speed USB device number 52 using dummy_hcd [ 1626.599428][ T9] usb 13-1: Using ep0 maxpacket: 8 [ 1626.604527][ T9] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1626.618446][ T9] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 1626.628337][ T9] usb 13-1: config 0 has no interface number 0 [ 1626.636320][ T2944] wg2 speed is unknown, defaulting to 1000 [ 1626.638421][ T9] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1626.675177][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.690953][ T9] usb 13-1: config 0 descriptor?? [ 1626.774690][ T9] iowarrior 13-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1626.879549][ T2944] wg2 speed is unknown, defaulting to 1000 [ 1626.924202][ T3012] overlayfs: failed to resolve './file0': -2 [ 1626.950639][T13788] Bluetooth: hci4: Frame reassembly failed (-90) [ 1626.989138][ T3014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.998497][ T3014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1627.006845][ T3014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1627.022078][ T3014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1627.031719][ T50] usb 11-1: new full-speed USB device number 83 using dummy_hcd [ 1627.139845][ T2944] wg2 speed is unknown, defaulting to 1000 [ 1627.206760][ T50] usb 11-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1627.228640][ T50] usb 11-1: config 0 has an invalid interface number: 205 but max is 0 [ 1627.234139][ T50] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.242202][ T50] usb 11-1: config 0 has no interface number 0 [ 1627.246938][ T50] usb 11-1: config 0 interface 205 has no altsetting 0 [ 1627.303509][ T50] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.309272][ T50] usb 11-1: Product: syz [ 1627.312414][ T50] usb 11-1: Manufacturer: syz [ 1627.316035][ T50] usb 11-1: SerialNumber: syz [ 1627.322222][ T50] usb 11-1: config 0 descriptor?? [ 1627.333756][ T50] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1627.338886][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 1627.360888][ T50] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1627.370437][ T50] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1627.385133][ T50] usb 11-1: media controller created [ 1627.398077][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1627.410474][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 1627.424908][ T50] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1627.439835][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input62 [ 1627.450822][ T50] dvb-usb: schedule remote query interval to 150 msecs. [ 1627.456163][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 1627.485208][ T50] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1627.607743][ T3021] netlink: 'syz.9.6282': attribute type 1 has an invalid length. [ 1627.613781][ T3021] netlink: 'syz.9.6282': attribute type 1 has an invalid length. [ 1627.640927][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 1627.643077][ T50] dvb-usb: error while querying for an remote control event. [ 1627.782914][ T3028] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1627.880714][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 1628.141002][ T9] usb 13-1: USB disconnect, device number 52 [ 1628.832292][ T3032] fuse: Bad value for 'user_id' [ 1628.838807][ T3032] fuse: Bad value for 'user_id' [ 1628.904962][ T50] dvb-usb: error while querying for an remote control event. [ 1628.992527][ T3036] netlink: 1 bytes leftover after parsing attributes in process `syz.9.6286'. [ 1629.001564][ T3036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1629.080916][T15344] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1629.088056][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 1629.103400][ T50] dvb-usb: error while querying for an remote control event. [ 1629.310838][ T1350] dvb-usb: bulk message failed: -22 (1/0) [ 1629.321453][ T1350] dvb-usb: error while querying for an remote control event. [ 1629.330908][ T7453] usb 56-1: device descriptor read/8, error -110 [ 1629.474261][ T1350] usb 11-1: USB disconnect, device number 83 [ 1629.591245][ T1350] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1629.791993][ T3048] netlink: 'syz.6.6290': attribute type 4 has an invalid length. [ 1630.282822][ T7453] usb usb56-port1: attempt power cycle [ 1631.031632][ T3055] fuse: Bad value for 'user_id' [ 1631.042762][ T3055] fuse: Bad value for 'user_id' [ 1631.257753][ T3070] loop5: detected capacity change from 0 to 7 [ 1631.430144][ T7453] usb usb56-port1: unable to enumerate USB device [ 1631.569570][ T3083] pim6reg: entered allmulticast mode [ 1631.604569][ T3083] pim6reg: left allmulticast mode [ 1631.646909][ T3070] Dev loop5: unable to read RDB block 7 [ 1631.654535][ T3072] support for cryptoloop has been removed. Use dm-crypt instead. [ 1631.659942][ T3070] loop5: unable to read partition table [ 1631.667230][ T3070] loop5: partition table beyond EOD, truncated [ 1631.670653][ T3070] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1632.031012][ T3089] RDS: rds_bind could not find a transport for ::ffff:10.1.1.5, load rds_tcp or rds_rdma? [ 1632.799379][ T3095] fuse: Bad value for 'user_id' [ 1632.813346][ T3095] fuse: Bad value for 'user_id' [ 1633.244315][ T3108] 9p: Bad value for 'wfdno' [ 1633.523023][ T3116] kAFS: bad VL server IP address [ 1633.738511][ T7453] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1633.762432][ T3098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1633.907926][ T7453] usb 8-1: Using ep0 maxpacket: 8 [ 1633.912935][ T7453] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1633.927904][ T7453] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1633.935466][ T7453] usb 8-1: config 0 has no interface number 0 [ 1633.946293][ T7453] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1633.964622][ T7453] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.983185][ T7453] usb 8-1: config 0 descriptor?? [ 1633.999909][ T7453] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1634.349657][ T3123] fuse: Bad value for 'user_id' [ 1634.361199][ T3123] fuse: Bad value for 'user_id' [ 1635.018020][ T3139] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1635.102199][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 1635.102213][ T42] audit: type=1326 audit(1559.807:28288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.6.6320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1635.135043][ T42] audit: type=1326 audit(1559.826:28289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.6.6320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1635.154015][ T42] audit: type=1326 audit(1559.826:28290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.6.6320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1635.178946][ T42] audit: type=1326 audit(1559.826:28291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.6.6320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1635.201120][ T42] audit: type=1326 audit(1559.826:28292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.6.6320" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1635.226008][ T42] audit: type=1326 audit(1559.826:28293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.6.6320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1635.260189][ T42] audit: type=1326 audit(1559.826:28294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.6.6320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1635.278048][ T42] audit: type=1326 audit(1559.835:28295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.6.6320" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1635.298368][ T42] audit: type=1326 audit(1559.873:28296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.6.6320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1635.315943][ T7453] usb 8-1: USB disconnect, device number 59 [ 1635.334961][ T42] audit: type=1326 audit(1559.873:28297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.6.6320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 1636.028657][ T3161] fuse: Bad value for 'user_id' [ 1636.035221][ T3161] fuse: Bad value for 'user_id' [ 1636.297698][ T3166] syzkaller0: entered promiscuous mode [ 1636.302701][ T3166] syzkaller0: entered allmulticast mode [ 1636.758262][ T3172] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6323'. [ 1636.861751][ T9] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1637.053645][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1637.056220][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1637.060000][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1637.082281][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1637.086091][ T9] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1637.089630][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1637.096754][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.146786][ T9] usbtmc 8-1:16.0: bulk endpoints not found [ 1638.134478][ T3188] vim2m vim2m.0: Removing vim2m [ 1638.252106][ T3188] vim2m vim2m.0: Device registered as /dev/video103 [ 1639.778774][ T5733] usb 8-1: USB disconnect, device number 60 [ 1643.467984][ T3170] pim6reg: entered allmulticast mode [ 1643.469807][ T3171] pim6reg: left allmulticast mode [ 1643.497466][ T3196] syzkaller0: entered promiscuous mode [ 1643.499563][ T3196] syzkaller0: entered allmulticast mode [ 1643.603931][ T3206] fuse: Bad value for 'user_id' [ 1643.605996][ T3206] fuse: Bad value for 'user_id' [ 1643.785615][ T3214] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6338'. [ 1643.900074][ T3214] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6338'. [ 1644.179436][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1644.479195][ T3218] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 1644.508174][ T3214] team0: Device ipvlan2 failed to register rx_handler [ 1644.936813][ T3237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6341'. [ 1645.138766][ T3237] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.199887][ T3247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6345'. [ 1645.259768][ T3237] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.389962][ T3237] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.548158][ T3237] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.007161][ T1350] usb 13-1: new high-speed USB device number 53 using dummy_hcd [ 1647.193538][ T1350] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1647.549438][ T1350] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1647.552347][ T1350] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1647.555971][ T1350] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1647.558936][ T1350] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1647.562475][ T1350] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1647.567676][ T1350] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1647.570616][ T1350] usb 13-1: Product: syz [ 1647.573222][ T1350] usb 13-1: Manufacturer: syz [ 1647.584380][ T1350] cdc_wdm 13-1:1.0: skipping garbage [ 1647.586392][ T1350] cdc_wdm 13-1:1.0: skipping garbage [ 1647.592119][ T1350] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 1647.594326][ T1350] cdc_wdm 13-1:1.0: Unknown control protocol [ 1647.752566][ T3268] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6349'. [ 1647.771916][ T3270] netlink: 'syz.3.6350': attribute type 11 has an invalid length. [ 1647.823395][ T1350] usb 13-1: USB disconnect, device number 53 [ 1648.801415][ T3281] netlink: 'syz.9.6352': attribute type 1 has an invalid length. [ 1648.906454][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1648.945175][ T3284] fuse: Bad value for 'user_id' [ 1648.947231][ T3284] fuse: Bad value for 'user_id' [ 1648.999965][ T3286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6354'. [ 1649.191248][ T9995] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.278223][ T9995] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.292961][ T9995] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.263866][ T3297] netlink: 'syz.9.6358': attribute type 10 has an invalid length. [ 1650.436824][ T9995] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.175636][ T3297] team0: Port device dummy0 added [ 1651.236914][ T3305] netlink: 'syz.6.6360': attribute type 5 has an invalid length. [ 1651.294652][ T3306] netlink: 'syz.6.6360': attribute type 5 has an invalid length. [ 1651.760548][ T10] usb 11-1: new high-speed USB device number 84 using dummy_hcd [ 1651.761169][ T1350] usb 13-1: new full-speed USB device number 54 using dummy_hcd [ 1651.878247][ T3328] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6362'. [ 1651.940687][ T1350] usb 13-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1651.969254][ T1350] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1651.981865][ T1350] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1651.997128][ T1350] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.001903][ T1350] usb 13-1: Product: syz [ 1652.006137][ T1350] usb 13-1: Manufacturer: syz [ 1652.010858][ T1350] usb 13-1: SerialNumber: syz [ 1652.025382][ T1350] usb 13-1: config 0 descriptor?? [ 1652.035122][ T1350] hub 13-1:0.0: bad descriptor, ignoring hub [ 1652.041990][ T1350] hub 13-1:0.0: probe with driver hub failed with error -5 [ 1652.055869][ T1350] input: syz syz as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input63 [ 1652.385891][ T3325] pim6reg: entered allmulticast mode [ 1652.390929][ T3326] pim6reg: left allmulticast mode [ 1652.392921][ T10] usb 11-1: Using ep0 maxpacket: 32 [ 1652.446430][ T9606] IPVS: starting estimator thread 0... [ 1652.569214][ T3334] IPVS: using max 47 ests per chain, 112800 per kthread [ 1652.744677][ T10] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1652.747672][ T10] usb 11-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1652.750760][ T10] usb 11-1: no configurations [ 1652.752774][ T10] usb 11-1: can't read configurations, error -22 [ 1652.799830][ T3337] fuse: Bad value for 'user_id' [ 1652.801754][ T3337] fuse: Bad value for 'user_id' [ 1653.294175][ T3351] tipc: Started in network mode [ 1653.295967][ T3351] tipc: Node identity 4, cluster identity 4711 [ 1653.298046][ T3351] tipc: Node number set to 4 [ 1653.302200][ T3351] netlink: 'syz.9.6370': attribute type 1 has an invalid length. [ 1653.308838][ T3351] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6370'. [ 1653.378076][ T3353] kAFS: bad VL server IP address [ 1654.029436][ T3373] pim6reg: entered allmulticast mode [ 1654.651129][ T3376] pim6reg: left allmulticast mode [ 1655.423101][ T3373] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6374'. [ 1655.483256][ T1350] usb 13-1: USB disconnect, device number 54 [ 1655.528023][ T3393] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6378'. [ 1655.621363][ T3397] pim6reg: entered allmulticast mode [ 1655.646443][ T3397] pim6reg: left allmulticast mode [ 1655.701590][ T3403] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6379'. [ 1655.824462][ T3405] pim6reg: entered allmulticast mode [ 1656.499007][ T10] usb 11-1: new high-speed USB device number 86 using dummy_hcd [ 1656.531989][ T3405] pim6reg: left allmulticast mode [ 1657.117165][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 1657.261833][ T10] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1657.583824][ T3408] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6380'. [ 1657.634637][ T10] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1657.731325][ T10] usb 11-1: config 0 has no interface number 0 [ 1657.733301][ T10] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1657.736241][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.741748][ T10] usb 11-1: config 0 descriptor?? [ 1657.745243][ T10] iowarrior 11-1:0.1: no interrupt-in endpoint found [ 1657.941042][ T1350] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 1658.087360][ T9606] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1658.109853][ T1350] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1658.121400][ T1350] usb 14-1: config index 0 descriptor too short (expected 45, got 36) [ 1658.128247][ T1350] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.145655][ T1350] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1658.165848][ T1350] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1658.192123][ T1350] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.215643][ T1350] usb 14-1: config 0 descriptor?? [ 1658.278961][ T9606] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1658.287330][ T9606] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1658.302181][ T9606] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1658.314913][ T9606] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1658.326208][ T9606] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1658.338393][ T9606] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1658.354534][T17808] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 1658.365116][ T9606] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1658.376514][ T9606] usb 8-1: Product: syz [ 1658.378003][ T9606] usb 8-1: Manufacturer: syz [ 1658.397115][ T9606] cdc_wdm 8-1:1.0: skipping garbage [ 1658.403022][ T9606] cdc_wdm 8-1:1.0: skipping garbage [ 1658.420131][ T9606] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1658.424108][ T9606] cdc_wdm 8-1:1.0: Unknown control protocol [ 1658.506286][ T10] usb 11-1: USB disconnect, device number 86 [ 1658.660084][ T1350] plantronics 0003:047F:FFFF.0036: reserved main item tag 0xd [ 1658.672775][ T1350] plantronics 0003:047F:FFFF.0036: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1658.774882][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1658.775128][ T10] usb 8-1: USB disconnect, device number 61 [ 1658.777057][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1658.777074][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1658.869702][ T1350] usb 14-1: USB disconnect, device number 2 [ 1658.902951][ T9606] usb 13-1: new full-speed USB device number 55 using dummy_hcd [ 1659.073011][ T9606] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1659.094338][ T9606] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1659.098187][ T9606] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1659.106374][ T9606] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.774545][ T9606] usb 13-1: GET_CAPABILITIES returned 0 [ 1659.844872][ T9606] usbtmc 13-1:16.0: can't read capabilities [ 1659.989034][ T3447] pim6reg: entered allmulticast mode [ 1660.028447][ T3447] pim6reg: left allmulticast mode [ 1660.091866][ T3428] block nbd0: server does not support multiple connections per device. [ 1660.170628][ T3428] block nbd0: shutting down sockets [ 1660.260995][ T9606] usb 13-1: USB disconnect, device number 55 [ 1660.560506][ T3455] jffs2: notice: (3455) jffs2_build_xattr_subsystem: complete building xattr subsystem, 12 of xdatum (0 unchecked, 12 orphan) and 12 of xref (3 dead, 9 orphan) found. [ 1660.633970][ T3457] FAULT_INJECTION: forcing a failure. [ 1660.633970][ T3457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1660.660662][ T3457] CPU: 2 UID: 0 PID: 3457 Comm: syz.6.6393 Tainted: G L syzkaller #0 PREEMPT(full) [ 1660.660696][ T3457] Tainted: [L]=SOFTLOCKUP [ 1660.660702][ T3457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1660.660713][ T3457] Call Trace: [ 1660.660720][ T3457] [ 1660.660728][ T3457] dump_stack_lvl+0x100/0x190 [ 1660.660759][ T3457] should_fail_ex.cold+0x5/0xa [ 1660.660781][ T3457] strncpy_from_user+0x3b/0x2d0 [ 1660.660809][ T3457] do_getname+0x78/0x390 [ 1660.660858][ T3457] user_path_at+0x26/0x60 [ 1660.660880][ T3457] __ia32_sys_mount+0x1fb/0x310 [ 1660.660907][ T3457] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1660.660927][ T3457] ? ksys_write+0x1ac/0x250 [ 1660.660947][ T3457] ? __pfx_ksys_write+0x10/0x10 [ 1660.660970][ T3457] __do_fast_syscall_32+0xe7/0x970 [ 1660.660998][ T3457] ? lockdep_hardirqs_on+0x78/0x100 [ 1660.661022][ T3457] do_fast_syscall_32+0x32/0x70 [ 1660.661049][ T3457] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1660.661073][ T3457] RIP: 0023:0xf703efec [ 1660.661096][ T3457] Code: Unable to access opcode bytes at 0xf703efc2. [ 1660.661104][ T3457] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 1660.661120][ T3457] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 1660.661127][ T3457] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000280 [ 1660.661134][ T3457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1660.661140][ T3457] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1660.661146][ T3457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1660.661161][ T3457] [ 1661.032569][ T3464] pim6reg: entered allmulticast mode [ 1661.041575][ T3464] pim6reg: left allmulticast mode [ 1661.099956][ T3466] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6394'. [ 1662.747955][ T3473] pim6reg: entered allmulticast mode [ 1662.752270][ T3474] pim6reg: left allmulticast mode [ 1662.834908][ T3473] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6397'. [ 1663.492605][ T3480] pim6reg: entered allmulticast mode [ 1663.573524][ T3482] pim6reg: left allmulticast mode [ 1663.672050][ T3495] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6401'. [ 1663.841323][ T3494] pim6reg: entered allmulticast mode [ 1663.871678][ T3493] pim6reg: left allmulticast mode [ 1664.232208][ T3507] pim6reg: entered allmulticast mode [ 1664.333992][ T3509] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6405'. [ 1664.336923][ T3509] openvswitch: netlink: Flow actions attr not present in new flow. [ 1664.400793][ T3509] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6405'. [ 1664.406436][ T3509] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6405'. [ 1664.413799][ T3509] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6405'. [ 1664.418014][ T3507] pim6reg: left allmulticast mode [ 1666.501968][ T3515] netlink: 'syz.6.6406': attribute type 5 has an invalid length. [ 1666.724742][ T3532] pim6reg: entered allmulticast mode [ 1667.420269][ T3531] pim6reg: entered allmulticast mode [ 1667.651882][ T3538] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6409'. [ 1667.804581][ T3534] pim6reg: left allmulticast mode [ 1667.964350][ T9] usb 11-1: new high-speed USB device number 87 using dummy_hcd [ 1668.154701][ T3532] pim6reg: left allmulticast mode [ 1668.275807][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 1668.278888][ T9] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1668.284807][ T9] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1668.289641][ T9] usb 11-1: config 0 has no interface number 0 [ 1668.293904][ T9] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1668.302055][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.384683][ T9] usb 11-1: config 0 descriptor?? [ 1668.407613][ T9] iowarrior 11-1:0.1: no interrupt-in endpoint found [ 1668.480949][ T3547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6413'. [ 1668.489019][ T3547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6413'. [ 1668.537768][T17808] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1668.541583][T17808] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1668.544617][ T3547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6413'. [ 1668.545256][T17808] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1668.552878][T17808] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1668.553774][ T3547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6413'. [ 1670.622304][ T10] usb 11-1: USB disconnect, device number 87 [ 1670.708526][ T3572] syzkaller0: entered promiscuous mode [ 1670.711580][ T3572] syzkaller0: entered allmulticast mode [ 1670.798424][T28543] libceph: connect (1)[c::]:6789 error -101 [ 1670.800664][T28543] libceph: mon0 (1)[c::]:6789 connect error [ 1670.961679][ T3574] ceph: No mds server is up or the cluster is laggy [ 1671.222194][T28543] libceph: connect (1)[c::]:6789 error -101 [ 1671.224188][T28543] libceph: mon0 (1)[c::]:6789 connect error [ 1671.286878][ T3574] netlink: 1010 bytes leftover after parsing attributes in process `syz.9.6418'. [ 1671.289658][ T3574] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1671.428786][ T3591] pim6reg: entered allmulticast mode [ 1671.444699][ T3591] pim6reg: left allmulticast mode [ 1671.510382][ T3592] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1671.739145][ T3597] openvswitch: netlink: Flow actions attr not present in new flow. [ 1672.323551][ T3599] tipc: New replicast peer: 255.255.255.255 [ 1672.589510][ T3599] tipc: Enabled bearer , priority 10 [ 1673.550511][ T3609] netlink: 'syz.6.6424': attribute type 1 has an invalid length. [ 1673.562663][ T3605] pim6reg: entered allmulticast mode [ 1673.575823][ T3607] pim6reg: left allmulticast mode [ 1673.830396][ T3617] netlink: 'syz.9.6426': attribute type 14 has an invalid length. [ 1673.844024][T28543] usb 11-1: new high-speed USB device number 88 using dummy_hcd [ 1673.848650][ T3617] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6426'. [ 1673.889244][ T3618] netlink: 'syz.9.6426': attribute type 14 has an invalid length. [ 1673.894848][T17808] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1673.904545][T17808] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1673.952209][ T3618] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6426'. [ 1673.958007][T17808] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1673.966623][T17808] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1674.086549][T28543] usb 11-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1674.102472][T28543] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 1674.107936][T28543] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1674.131720][T28543] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.143262][ T3609] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1674.146900][T28543] spcp8x5 11-1:1.0: SPCP8x5 converter detected [ 1674.162452][T28543] usb 11-1: SPCP8x5 converter now attached to ttyUSB0 [ 1674.369098][ T9] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1674.400924][ T9606] usb 13-1: new high-speed USB device number 56 using dummy_hcd [ 1674.527319][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1674.530279][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1674.535173][ T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1674.538015][T28543] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 1674.538970][ T9] usb 8-1: config 0 has no interface number 0 [ 1674.543905][ T9] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1674.547129][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.548691][ T3609] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 1674.552719][ T3609] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 1674.553004][ T9] usb 8-1: config 0 descriptor?? [ 1674.557949][ T3609] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1674.565481][ T9] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 1674.590692][ T9606] usb 13-1: Using ep0 maxpacket: 8 [ 1674.593297][ T9606] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1674.598298][ T9606] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 1674.602016][ T9606] usb 13-1: config 0 has no interface number 0 [ 1674.605376][ T9606] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1674.608659][ T9606] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.616485][ T9606] usb 13-1: config 0 descriptor?? [ 1674.625491][ T9606] iowarrior 13-1:0.1: no interrupt-in endpoint found [ 1674.675956][ T3609] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1674.717668][ T3609] netlink: 'syz.6.6424': attribute type 5 has an invalid length. [ 1674.729419][T28543] usb 14-1: not running at top speed; connect to a high speed hub [ 1674.734407][T28543] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1674.746464][T28543] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1674.752735][T28543] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1674.763550][T28543] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.767840][T28543] usb 14-1: Product: 恚휙⠤臨犟蠚퇱쉈錧슛⠥頄踾鏱藆ꩀ斢䔊香幰崼鍇鶺Ɛ綑ჽ䙌⨹嫂⶿닫⡥ᜲ藨뺇ᡂ❫ [ 1674.780915][T28543] usb 14-1: Manufacturer: ᰊ [ 1674.783912][T28543] usb 14-1: SerialNumber: ခ [ 1674.929043][ T9606] usb 11-1: USB disconnect, device number 88 [ 1674.966065][ T9606] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1674.979295][ T9606] spcp8x5 11-1:1.0: device disconnected [ 1675.025196][T28543] cdc_ncm 14-1:1.0: bind() failure [ 1675.038550][T28543] cdc_ncm 14-1:1.1: CDC Union missing and no IAD found [ 1675.044121][T28543] cdc_ncm 14-1:1.1: bind() failure [ 1675.057503][T28543] usb 14-1: USB disconnect, device number 3 [ 1675.245221][ T9606] usb 13-1: USB disconnect, device number 56 [ 1675.282422][ T10] usb 8-1: USB disconnect, device number 62 [ 1675.717456][ T3645] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6433'. [ 1676.610941][ T3666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6438'. [ 1677.947431][T24719] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1678.697857][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6447'. [ 1678.783046][ T3739] syzkaller0: entered promiscuous mode [ 1678.785358][ T3739] syzkaller0: entered allmulticast mode [ 1682.955182][ T3795] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1687.314570][ T3816] netlink: 'syz.6.6468': attribute type 5 has an invalid length. [ 1687.323110][ T3813] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 1687.329167][ T5733] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1687.372463][ T3817] netlink: 'syz.6.6468': attribute type 5 has an invalid length. [ 1687.487476][ T5733] usb 8-1: Using ep0 maxpacket: 32 [ 1687.490735][ T5733] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1687.493273][ T5733] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1687.500037][ T5733] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1687.503690][ T5733] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1687.515037][ T5733] usb 8-1: config 14 has no interface number 0 [ 1687.518208][ T5733] usb 8-1: config 14 has no interface number 1 [ 1687.520600][ T5733] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1687.524607][ T5733] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1687.528340][ T5733] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1687.532383][ T5733] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1687.536067][ T5733] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1687.539638][ T5733] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1687.544557][ T5733] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1687.546844][ T5733] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1687.551388][ T5733] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.553950][ T5733] usb 8-1: Product: syz [ 1687.555486][ T5733] usb 8-1: Manufacturer: syz [ 1687.557064][ T5733] usb 8-1: SerialNumber: syz [ 1687.666590][ T9606] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 1687.761580][ T1350] usb 11-1: new high-speed USB device number 89 using dummy_hcd [ 1687.825761][ T9606] usb 14-1: Using ep0 maxpacket: 8 [ 1687.828776][ T9606] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1687.833830][ T9606] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 1687.837900][ T9606] usb 14-1: config 0 has no interface number 0 [ 1687.840642][ T9606] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1687.844792][ T9606] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.851396][ T9606] usb 14-1: config 0 descriptor?? [ 1687.857199][ T9606] iowarrior 14-1:0.1: no interrupt-in endpoint found [ 1687.919682][ T1350] usb 11-1: Using ep0 maxpacket: 32 [ 1687.929911][ T1350] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1687.939543][ T1350] usb 11-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1687.950571][ T1350] usb 11-1: no configurations [ 1687.952854][ T1350] usb 11-1: can't read configurations, error -22 [ 1688.000910][ T5733] legousbtower 8-1:14.57: interrupt endpoints not found [ 1688.009852][ T3822] netlink: 'syz.8.6470': attribute type 5 has an invalid length. [ 1688.063762][ T3823] netlink: 'syz.8.6470': attribute type 5 has an invalid length. [ 1688.142549][T28543] usb 14-1: USB disconnect, device number 4 [ 1688.424662][ T5733] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1688.428802][ T5733] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1688.436547][ T9606] usb 13-1: new high-speed USB device number 57 using dummy_hcd [ 1688.605652][ T9606] usb 13-1: Using ep0 maxpacket: 32 [ 1688.619360][ T9606] usb 13-1: unable to get BOS descriptor or descriptor too short [ 1688.626695][ T9606] usb 13-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1688.633564][ T9606] usb 13-1: no configurations [ 1688.639798][ T9606] usb 13-1: can't read configurations, error -22 [ 1688.818537][T28543] libceph: connect (1)[c::]:6789 error -101 [ 1688.821359][T28543] libceph: mon0 (1)[c::]:6789 connect error [ 1688.824223][T28543] libceph: connect (1)[c::]:6789 error -101 [ 1688.827236][T28543] libceph: mon0 (1)[c::]:6789 connect error [ 1688.961602][ T3831] ceph: No mds server is up or the cluster is laggy [ 1689.038731][ T3831] netlink: 1010 bytes leftover after parsing attributes in process `syz.9.6472'. [ 1689.041791][ T3831] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1690.857868][ T3849] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6474'. [ 1690.864978][ T3849] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6474'. [ 1690.900812][ T5733] usb 8-1: USB disconnect, device number 63 [ 1690.930910][ T5733] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 1691.060769][ T3853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6477'. [ 1691.104455][ T1350] libceph: connect (1)[c::]:6789 error -101 [ 1691.106818][ T1350] libceph: mon0 (1)[c::]:6789 connect error [ 1691.132691][ T1350] libceph: connect (1)[c::]:6789 error -101 [ 1691.160709][ T1350] libceph: mon0 (1)[c::]:6789 connect error [ 1691.285173][ T3855] ceph: No mds server is up or the cluster is laggy [ 1691.290572][ T3867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1691.313021][ T3867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1691.526368][ T5733] usb 13-1: new high-speed USB device number 59 using dummy_hcd [ 1691.819085][ T5733] usb 13-1: Using ep0 maxpacket: 8 [ 1692.316469][ T5733] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1692.955029][ T5733] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 1693.231202][ T5733] usb 13-1: config 0 has no interface number 0 [ 1693.388877][ T5733] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1693.403386][ T5733] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.408231][ T5733] usb 13-1: config 0 descriptor?? [ 1693.413217][ T5733] iowarrior 13-1:0.1: no interrupt-in endpoint found [ 1693.697502][ T3899] pim6reg: entered allmulticast mode [ 1693.711922][ T9606] usb 13-1: USB disconnect, device number 59 [ 1693.829585][ T3899] pim6reg: left allmulticast mode [ 1693.946127][ T3899] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6485'. [ 1694.207351][ T3903] netlink: 'syz.6.6488': attribute type 1 has an invalid length. [ 1694.392515][ T3914] netlink: 'syz.8.6492': attribute type 2 has an invalid length. [ 1694.398380][ T3914] binder: 3913:3914 ioctl 400c620e 80000100 returned -22 [ 1696.552559][ T7453] libceph: connect (1)[c::]:6789 error -101 [ 1696.554686][ T3932] pim6reg: entered allmulticast mode [ 1696.560696][ T7453] libceph: mon0 (1)[c::]:6789 connect error [ 1696.572463][ T3932] pim6reg: left allmulticast mode [ 1696.648032][ T3928] ceph: No mds server is up or the cluster is laggy [ 1696.716743][ T3928] netlink: 1010 bytes leftover after parsing attributes in process `syz.8.6495'. [ 1696.720108][ T3928] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1696.841410][ T7453] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 1697.001395][ T7453] usb 14-1: Using ep0 maxpacket: 8 [ 1697.012035][ T7453] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1697.019477][ T7453] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 1697.022951][ T7453] usb 14-1: config 0 has no interface number 0 [ 1697.028876][ T7453] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1697.041279][ T7453] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.058149][ T7453] usb 14-1: config 0 descriptor?? [ 1697.070860][ T7453] iowarrior 14-1:0.1: no interrupt-in endpoint found [ 1697.473201][ T7453] usb 14-1: USB disconnect, device number 5 [ 1697.812508][ T3962] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6501'. [ 1698.113497][ T9606] libceph: connect (1)[c::]:6789 error -101 [ 1698.115706][ T9606] libceph: mon0 (1)[c::]:6789 connect error [ 1698.267188][ T3973] ceph: No mds server is up or the cluster is laggy [ 1698.340866][T28543] usb 11-1: new high-speed USB device number 91 using dummy_hcd [ 1698.352671][ T3973] netlink: 1010 bytes leftover after parsing attributes in process `syz.9.6506'. [ 1698.356195][ T3973] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1698.529069][T28543] usb 11-1: Using ep0 maxpacket: 8 [ 1698.532573][T28543] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1698.540669][T28543] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1698.546795][T28543] usb 11-1: config 0 has no interface number 0 [ 1698.551504][T28543] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1698.558322][T28543] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.569786][T28543] usb 11-1: config 0 descriptor?? [ 1698.577740][T28543] iowarrior 11-1:0.1: no interrupt-in endpoint found [ 1698.911046][ T3987] loop5: detected capacity change from 0 to 7 [ 1699.106423][ T3993] netlink: 'syz.9.6510': attribute type 5 has an invalid length. [ 1699.132058][ T3993] netlink: 'syz.9.6510': attribute type 5 has an invalid length. [ 1699.469889][ T3987] Dev loop5: unable to read RDB block 7 [ 1699.477772][ T3990] support for cryptoloop has been removed. Use dm-crypt instead. [ 1699.485348][ T3987] loop5: unable to read partition table [ 1699.494580][ T3987] loop5: partition table beyond EOD, truncated [ 1699.510427][ T3987] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1699.769138][ T4001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.885666][ T1350] libceph: connect (1)[c::]:6789 error -101 [ 1699.887776][ T1350] libceph: mon0 (1)[c::]:6789 connect error [ 1700.031904][ T4003] ceph: No mds server is up or the cluster is laggy [ 1700.095244][T28543] usb 11-1: USB disconnect, device number 91 [ 1700.142319][ T4009] netlink: 1010 bytes leftover after parsing attributes in process `syz.9.6513'. [ 1700.148118][ T4009] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1700.521639][T28543] libceph: connect (1)[c::]:6789 error -101 [ 1700.523708][T28543] libceph: mon0 (1)[c::]:6789 connect error [ 1700.532056][ T1350] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 1700.566261][ T4013] ceph: No mds server is up or the cluster is laggy [ 1700.630325][ T4019] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.6515'. [ 1700.633452][ T4019] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1700.690017][ T1350] usb 14-1: Using ep0 maxpacket: 8 [ 1700.693840][ T1350] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1700.698060][ T1350] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 1700.701604][ T1350] usb 14-1: config 0 has no interface number 0 [ 1700.703738][ T1350] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1700.709939][ T1350] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.713863][T28543] IPVS: starting estimator thread 0... [ 1700.727543][ T1350] usb 14-1: config 0 descriptor?? [ 1700.738714][ T1350] iowarrior 14-1:0.1: no interrupt-in endpoint found [ 1700.816492][ T4022] IPVS: using max 47 ests per chain, 112800 per kthread [ 1701.201838][ T7453] usb 14-1: USB disconnect, device number 6 [ 1701.962014][ T4036] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 1701.964152][ T4036] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1701.987048][ T4036] vhci_hcd vhci_hcd.0: Device attached [ 1701.996864][ T4038] netlink: 'syz.3.6521': attribute type 23 has an invalid length. [ 1702.090845][ T4045] vhci_hcd: connection closed [ 1702.091324][ T5782] vhci_hcd vhci_hcd.9: stop threads [ 1702.098320][ T5782] vhci_hcd vhci_hcd.9: release socket [ 1702.100945][ T5782] vhci_hcd vhci_hcd.9: disconnect device [ 1702.414006][ T4059] pim6reg: entered allmulticast mode [ 1702.434386][ T4033] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1702.487537][ T4059] pim6reg: left allmulticast mode [ 1702.560601][ T4060] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6523'. [ 1702.782419][ T4062] netlink: 'syz.8.6524': attribute type 5 has an invalid length. [ 1702.836567][ T4063] netlink: 'syz.8.6524': attribute type 5 has an invalid length. [ 1704.254212][T28543] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 1704.361496][ T4066] ceph: No mds server is up or the cluster is laggy [ 1704.472656][ T4083] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.6525'. [ 1704.978728][T28543] usb 13-1: new high-speed USB device number 60 using dummy_hcd [ 1705.141285][T28543] usb 13-1: Using ep0 maxpacket: 8 [ 1705.145786][T28543] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1705.202375][T28543] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 1705.308629][T28543] usb 13-1: config 0 has no interface number 0 [ 1705.347327][ T4098] pim6reg: entered allmulticast mode [ 1705.351004][T28543] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1705.356219][T28543] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.362283][ T4100] pim6reg: left allmulticast mode [ 1705.368637][T28543] usb 13-1: config 0 descriptor?? [ 1705.384067][T28543] iowarrior 13-1:0.1: no interrupt-in endpoint found [ 1705.407204][ T4094] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6530'. [ 1705.768223][T28543] usb 13-1: USB disconnect, device number 60 [ 1705.904399][ T9606] libceph: connect (1)[c::]:6789 error -101 [ 1705.904742][ T4116] program syz.9.6536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1705.906550][ T9606] libceph: mon0 (1)[c::]:6789 connect error [ 1705.953542][ T1125] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1705.956690][ T1125] ata1.00: irq_stat 0x40000000 [ 1705.960750][ T4110] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6535'. [ 1705.963984][ T4110] openvswitch: netlink: Flow key attr not present in new flow. [ 1705.966139][ T1125] ata1.00: failed command: ZAC MANAGEMENT OUT [ 1705.974001][ T1125] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 18 [ 1705.974001][ T1125] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 1705.983075][ T4118] jffs2: notice: (4118) jffs2_build_xattr_subsystem: complete building xattr subsystem, 12 of xdatum (0 unchecked, 12 orphan) and 12 of xref (3 dead, 9 orphan) found. [ 1705.989146][ T1125] ata1.00: status: { DRDY ERR } [ 1705.991370][ T1125] ata1.00: error: { ABRT } [ 1705.993213][ T1125] ata1.00: device reported invalid CHS sector 0 [ 1706.002647][ T4116] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6536'. [ 1706.065616][ T1125] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 1706.066040][ T4112] ceph: No mds server is up or the cluster is laggy [ 1706.069190][ T1125] ata1: failed to read log page 10h (errno=-5) [ 1706.077273][ T1125] ata1.00: exception Emask 0x1 SAct 0x1000 SErr 0x0 action 0x0 [ 1706.081397][ T1125] ata1.00: irq_stat 0x40000000 [ 1706.087779][ T1125] ata1.00: failed command: READ FPDMA QUEUED [ 1706.094132][ T1125] ata1.00: cmd 60/d8:60:26:ee:0a/02:00:00:00:00/40 tag 12 ncq dma 372736 in [ 1706.094132][ T1125] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 1706.126641][ T1125] ata1.00: status: { DRDY } [ 1706.130451][ T1125] ata1.00: configured for UDMA/100 [ 1706.134489][ T7453] libceph: connect (1)[c::]:6789 error -101 [ 1706.136131][ T1125] sd 0:0:0:0: [sda] tag#12 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1706.137091][ T7453] libceph: mon0 (1)[c::]:6789 connect error [ 1706.161202][ T1125] sd 0:0:0:0: [sda] tag#12 Sense Key : Aborted Command [current] [ 1706.166167][ T1125] sd 0:0:0:0: [sda] tag#12 Add. Sense: No additional sense information [ 1706.179013][ T1125] sd 0:0:0:0: [sda] tag#12 CDB: Read(10) 28 00 00 0a ee 26 00 02 d8 00 [ 1706.182660][ T4112] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.6537'. [ 1706.187542][ T4112] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1706.190326][ T1125] I/O error, dev sda, sector 716326 op 0x0:(READ) flags 0x80700 phys_seg 47 prio class 2 [ 1706.197208][ T1125] ata1: EH complete [ 1706.262713][ T4124] ceph: No mds server is up or the cluster is laggy [ 1706.351207][ T4124] netlink: 1010 bytes leftover after parsing attributes in process `syz.9.6539'. [ 1706.366393][ T4124] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1708.428105][ T4152] netlink: 'syz.8.6546': attribute type 5 has an invalid length. [ 1708.459433][ T4155] netlink: 'syz.9.6547': attribute type 5 has an invalid length. [ 1708.464963][ T4155] netlink: 'syz.9.6547': attribute type 5 has an invalid length. [ 1708.476174][ T4152] netlink: 'syz.8.6546': attribute type 5 has an invalid length. [ 1709.008397][ T4167] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6552'. [ 1709.134963][ T4167] syzkaller0: entered promiscuous mode [ 1709.145044][ T4167] syzkaller0: entered allmulticast mode [ 1711.231060][ T4191] ceph: No mds server is up or the cluster is laggy [ 1711.694677][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1711.891025][ T4199] netlink: 'syz.6.6558': attribute type 5 has an invalid length. [ 1711.980478][ T4200] netlink: 'syz.6.6558': attribute type 5 has an invalid length. [ 1716.928583][ T4202] binder_alloc: 4201: binder_alloc_buf, no vma [ 1717.113599][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 1717.113613][ T42] audit: type=1326 audit(1637.577:28301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4204 comm="syz.9.6561" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x0 [ 1717.235807][T28543] usb 11-1: new high-speed USB device number 92 using dummy_hcd [ 1717.270327][ T7453] libceph: connect (1)[c::]:6789 error -101 [ 1717.272413][ T7453] libceph: mon0 (1)[c::]:6789 connect error [ 1717.418072][ T4225] ceph: No mds server is up or the cluster is laggy [ 1717.673152][ T4234] netlink: 'syz.3.6568': attribute type 5 has an invalid length. [ 1717.681145][ T4234] netlink: 'syz.3.6568': attribute type 5 has an invalid length. [ 1717.833719][T28543] usb 11-1: Using ep0 maxpacket: 8 [ 1718.301558][T28543] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1719.003710][T28543] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1719.148332][T28543] usb 11-1: config 0 has no interface number 0 [ 1719.150669][T28543] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1719.162593][T28543] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.175385][T28543] usb 11-1: config 0 descriptor?? [ 1719.185663][T28543] iowarrior 11-1:0.1: no interrupt-in endpoint found [ 1719.430515][ T4241] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1720.186390][ T4259] pim6reg: entered allmulticast mode [ 1720.263656][ T4259] pim6reg: left allmulticast mode [ 1720.353578][ T4262] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6571'. [ 1720.876744][ T1350] usb 11-1: USB disconnect, device number 92 [ 1721.366572][ T4274] netlink: 'syz.9.6575': attribute type 5 has an invalid length. [ 1721.374271][ T4274] netlink: 'syz.9.6575': attribute type 5 has an invalid length. [ 1721.378227][ T7453] libceph: connect (1)[c::]:6789 error -101 [ 1721.380755][ T7453] libceph: mon0 (1)[c::]:6789 connect error [ 1721.468278][ T4283] serio: Serial port ptm0 [ 1721.545543][ T4278] ceph: No mds server is up or the cluster is laggy [ 1721.643366][ T1350] usb 13-1: new high-speed USB device number 61 using dummy_hcd [ 1721.763904][ T4294] netlink: zone id is out of range [ 1721.771200][ T4294] netlink: zone id is out of range [ 1721.780398][ T4294] netlink: zone id is out of range [ 1721.796317][ T4294] netlink: zone id is out of range [ 1721.840874][ T4294] netlink: zone id is out of range [ 1721.856214][ T4294] netlink: zone id is out of range [ 1721.865874][ T4294] netlink: zone id is out of range [ 1721.874646][ T4294] netlink: zone id is out of range [ 1721.884839][ T4294] netlink: zone id is out of range [ 1721.893204][ T4294] netlink: zone id is out of range [ 1722.154521][ T42] audit: type=1326 audit(1642.356:28302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4291 comm="syz.6.6580" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x0 [ 1722.255396][ T1350] usb 13-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 1722.561258][ T1350] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.743607][T16469] Bluetooth: hci4: command 0xfc05 tx timeout [ 1724.753188][T15344] Bluetooth: hci4: Reading Intel version command failed (-110) [ 1724.755039][ T4325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.756809][T16469] Bluetooth: hci4: Resetting usb device. [ 1724.763180][ T4325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.766232][ C0] Bluetooth: hci4: urb ffff8880289d5000 failed to resubmit (2) [ 1724.769613][ C0] Bluetooth: hci4: urb ffff8880289d5d00 failed to resubmit (2) [ 1724.986660][ T7453] usb 13-1: reset high-speed USB device number 61 using dummy_hcd [ 1725.123107][ T7453] usb 13-1: device descriptor read/64, error -32 [ 1725.376346][ T7453] usb 13-1: reset high-speed USB device number 61 using dummy_hcd [ 1725.513260][ T7453] usb 13-1: device descriptor read/64, error -32 [ 1725.672889][ T4337] netlink: 'syz.3.6587': attribute type 5 has an invalid length. [ 1725.683276][ T4337] netlink: 'syz.3.6587': attribute type 5 has an invalid length. [ 1725.766323][ T7453] usb 13-1: reset high-speed USB device number 61 using dummy_hcd [ 1725.798564][ T7453] usb 13-1: device descriptor read/8, error -32 [ 1726.052334][ T7453] usb 13-1: reset high-speed USB device number 61 using dummy_hcd [ 1726.082465][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1726.097992][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1726.126084][ T7453] usb 13-1: device descriptor read/8, error -32 [ 1726.226742][ T4347] ceph: No mds server is up or the cluster is laggy [ 1726.304405][ T7453] raw-gadget.0 gadget.8: failed to queue suspend event [ 1726.311589][ T5733] usb 13-1: USB disconnect, device number 61 [ 1726.329648][ T5733] raw-gadget.0 gadget.8: failed to queue reset event [ 1726.420654][ T5733] raw-gadget.0 gadget.8: failed to queue resume event [ 1726.546724][ T5733] usb 13-1: new high-speed USB device number 62 using dummy_hcd [ 1726.549537][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1726.551913][ T5733] raw-gadget.0 gadget.8: failed to queue reset event [ 1726.620563][ T5733] raw-gadget.0 gadget.8: failed to queue resume event [ 1726.685027][ T5733] usb 13-1: device descriptor read/64, error -32 [ 1726.730755][ T4370] pim6reg: entered allmulticast mode [ 1726.770491][ T4370] pim6reg: left allmulticast mode [ 1726.800221][ T5733] raw-gadget.0 gadget.8: failed to queue suspend event [ 1726.805694][ T5733] raw-gadget.0 gadget.8: failed to queue reset event [ 1726.845631][ T4372] netlink: 'syz.8.6594': attribute type 5 has an invalid length. [ 1726.849084][ T4373] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6592'. [ 1726.900067][ T4374] netlink: 'syz.8.6594': attribute type 5 has an invalid length. [ 1726.916061][ T5733] raw-gadget.0 gadget.8: failed to queue resume event [ 1727.001010][ T5733] usb 13-1: new high-speed USB device number 63 using dummy_hcd [ 1727.005891][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1727.013187][ T5733] raw-gadget.0 gadget.8: failed to queue reset event [ 1727.084519][ T5733] raw-gadget.0 gadget.8: failed to queue resume event [ 1727.158320][ T5733] usb 13-1: device descriptor read/64, error -32 [ 1727.287060][ T5733] raw-gadget.0 gadget.8: failed to queue suspend event [ 1727.546656][ T5733] usb usb13-port1: attempt power cycle [ 1727.553242][ T4383] pim6reg: entered allmulticast mode [ 1727.799776][ T5733] raw-gadget.0 gadget.8: failed to queue disconnect event [ 1727.959767][ T4327] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1727.989919][ T4384] pim6reg: left allmulticast mode [ 1728.537741][ T5733] raw-gadget.0 gadget.8: failed to queue reset event [ 1729.173448][ T5733] raw-gadget.0 gadget.8: failed to queue resume event [ 1729.184368][ T5733] raw-gadget.0 gadget.8: failed to queue reset event [ 1729.430377][ T5733] raw-gadget.0 gadget.8: failed to queue resume event [ 1730.109298][ T5733] usb 13-1: new high-speed USB device number 64 using dummy_hcd [ 1730.722977][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1730.751391][ T5733] usb 13-1: device descriptor read/8, error -32 [ 1731.116509][ T5733] raw-gadget.0 gadget.8: failed to queue suspend event [ 1731.151993][ T4312] raw-gadget.0 gadget.8: failed to queue disconnect event [ 1731.308366][ T4400] 2: renamed from team_slave_1 (while UP) [ 1731.558227][ T9] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 1731.713925][ T9] usb 14-1: Using ep0 maxpacket: 8 [ 1731.717051][ T9] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1731.722395][ T9] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 1731.728766][ T9] usb 14-1: config 0 has no interface number 0 [ 1731.736562][ T9] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1731.742126][ T4415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6605'. [ 1731.748338][ T9] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.042523][ T4416] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234756656 (33878053248 ns) > initial count (25262286960 ns). Using initial count to start timer. [ 1732.374113][ T4418] pim6reg: entered allmulticast mode [ 1732.422444][ T4419] pim6reg: left allmulticast mode [ 1732.505630][ T9] usb 14-1: config 0 descriptor?? [ 1732.532501][ T9] iowarrior 14-1:0.1: no interrupt-in endpoint found [ 1732.662030][T28543] libceph: connect (1)[c::]:6789 error -101 [ 1732.671972][T28543] libceph: mon0 (1)[c::]:6789 connect error [ 1732.678781][ T4408] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6603'. [ 1732.854141][ T4423] ceph: No mds server is up or the cluster is laggy [ 1733.124015][ T4441] pim6reg: entered allmulticast mode [ 1733.274043][ T10] usb 14-1: USB disconnect, device number 7 [ 1734.611101][ T4441] pim6reg: left allmulticast mode [ 1735.016915][ T4453] pim6reg: entered allmulticast mode [ 1735.257674][ T4453] pim6reg: left allmulticast mode [ 1737.979080][ T4468] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 1737.982310][ T4468] netdevsim netdevsim9: Falling back to sysfs fallback for: ./file0 [ 1738.916252][ T1350] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1739.095950][ T1350] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1739.640282][ T1350] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.390573][ T1350] usb 8-1: Product: syz [ 1740.391994][ T1350] usb 8-1: Manufacturer: syz [ 1740.620628][ T1350] usb 8-1: SerialNumber: syz [ 1740.957746][ T1350] usb 8-1: config 0 descriptor?? [ 1740.964958][ T1350] usb 8-1: can't set config #0, error -71 [ 1740.971794][ T1350] usb 8-1: USB disconnect, device number 64 [ 1741.273918][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1741.278798][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1741.299436][ T10] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 1741.436866][ T4521] ceph: No mds server is up or the cluster is laggy [ 1741.457854][ T10] usb 14-1: Using ep0 maxpacket: 8 [ 1741.459693][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6622'. [ 1741.470696][ T10] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1741.546148][ T10] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 1741.553126][ T10] usb 14-1: config 0 has no interface number 0 [ 1741.562404][ T10] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1741.583084][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.602762][ T4521] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.6625'. [ 1741.607596][ T10] usb 14-1: config 0 descriptor?? [ 1741.614918][ T4521] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1741.633460][ T10] iowarrior 14-1:0.1: no interrupt-in endpoint found [ 1742.374340][ T4537] netlink: 'syz.3.6626': attribute type 3 has an invalid length. [ 1742.655594][ T9] usb 14-1: USB disconnect, device number 8 [ 1743.556110][ T2141] Bluetooth: hci2: command 0x0c1a tx timeout [ 1744.749981][T24715] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1745.367611][ T4582] pim6reg: entered allmulticast mode [ 1745.507418][ T10] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1746.013551][ T4583] pim6reg: entered allmulticast mode [ 1746.308626][ T4585] pim6reg: left allmulticast mode [ 1746.339267][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1746.784063][ T10] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1747.314277][ T4582] pim6reg: left allmulticast mode [ 1747.315513][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1747.318664][ T10] usb 8-1: config 0 has no interface number 0 [ 1747.320937][ T10] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1747.324397][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.341136][ T10] usb 8-1: config 0 descriptor?? [ 1747.369932][ T10] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 1747.454482][ T4569] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6634'. [ 1747.754660][ T4598] CIFS: Attempting to mount //127.0.0.1/share [ 1747.791663][ T4598] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1747.801138][ T4598] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1747.886607][ T10] usb 11-1: new high-speed USB device number 93 using dummy_hcd [ 1748.048357][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 1748.051813][ T10] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1748.056122][ T10] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1748.058459][ T10] usb 11-1: config 0 has no interface number 0 [ 1748.065626][ T10] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1748.075543][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.109663][ T10] usb 11-1: config 0 descriptor?? [ 1748.131955][ T10] iowarrior 11-1:0.1: no interrupt-in endpoint found [ 1748.712278][ T4615] pim6reg: entered allmulticast mode [ 1748.723281][ T4616] pim6reg: left allmulticast mode [ 1749.573936][ T7453] usb 8-1: USB disconnect, device number 65 [ 1750.803810][ T7453] usb 11-1: USB disconnect, device number 93 [ 1753.081880][ T42] audit: type=1326 audit(1671.687:28303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.3.6644" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x0 [ 1754.547420][ T4642] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6647'. [ 1755.074360][ T4633] pim6reg: entered allmulticast mode [ 1755.090197][ T4641] pim6reg: left allmulticast mode [ 1756.264532][ T4664] pim6reg: entered allmulticast mode [ 1756.291661][ T4664] pim6reg: left allmulticast mode [ 1756.405641][ T4665] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6653'. [ 1756.989524][ T4327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1757.012639][ T4327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1757.019117][ T4327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1757.022488][ T4327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1757.025231][ T4327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1757.104775][T29590] syz_tun (unregistering): left allmulticast mode [ 1757.119349][T29590] syz_tun (unregistering): left promiscuous mode [ 1757.126108][T29590] bridge0: port 3(syz_tun) entered disabled state [ 1757.170010][ T1350] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 1757.291411][ T4675] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6656'. [ 1757.340805][ T1350] usb 14-1: Using ep0 maxpacket: 8 [ 1757.345762][ T1350] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1757.362839][ T1350] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 1757.368080][ T1350] usb 14-1: config 0 has no interface number 0 [ 1757.375667][ T1350] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1757.397667][ T1350] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.408339][ T1350] usb 14-1: config 0 descriptor?? [ 1757.421556][ T1350] iowarrior 14-1:0.1: no interrupt-in endpoint found [ 1757.513795][ T4686] mqueue: Unknown parameter 'addr' [ 1757.604873][T16367] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.609781][T16367] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.668113][ T4678] sctp: [Deprecated]: syz.6.6657 (pid 4678) Use of int in max_burst socket option. [ 1757.668113][ T4678] Use struct sctp_assoc_value instead [ 1757.817206][T16367] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.833190][T16367] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.853552][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6659'. [ 1757.862937][ T4695] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6659'. [ 1757.899052][ T1350] usb 14-1: USB disconnect, device number 9 [ 1757.925695][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6659'. [ 1757.931094][ T4695] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6659'. [ 1757.950318][ T9995] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1757.962063][ T9995] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1757.966780][ T9995] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1757.970371][ T9995] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1757.980151][T16367] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.003048][T16367] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.127071][ T4671] wg2 speed is unknown, defaulting to 1000 [ 1758.584463][ T4706] pim6reg: entered allmulticast mode [ 1758.652318][T16367] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.671021][T16367] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.889956][ T4706] pim6reg: left allmulticast mode [ 1759.070084][ T4717] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6663'. [ 1759.262011][ T4327] Bluetooth: hci1: command tx timeout [ 1759.372905][ T4728] [U]  [ 1759.402557][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1759.406112][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1759.548832][ T4734] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.6665'. [ 1759.559584][ T4734] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1759.690648][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1759.854252][T16367] bridge_slave_1: left allmulticast mode [ 1759.859697][T16367] bridge_slave_1: left promiscuous mode [ 1759.863405][T16367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.872862][T16367] bridge_slave_0: left allmulticast mode [ 1759.876031][T16367] bridge_slave_0: left promiscuous mode [ 1759.880325][T16367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.144893][T16367] team0: Port device bond0 removed [ 1760.148867][T16367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1760.154802][T16367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1760.159489][T16367] bond0 (unregistering): Released all slaves [ 1760.197054][ T4723] ceph: No mds server is up or the cluster is laggy [ 1760.328556][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1760.345509][T16367] U: left promiscuous mode [ 1760.375949][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6668'. [ 1760.378946][ T4745] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6668'. [ 1760.437342][ T4746] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6668'. [ 1760.444528][ T4746] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6668'. [ 1760.577346][ T4671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.579785][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.583020][ T4671] bridge_slave_0: entered allmulticast mode [ 1760.587284][ T4671] bridge_slave_0: entered promiscuous mode [ 1760.592424][ T4671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.595576][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.598982][ T4671] bridge_slave_1: entered allmulticast mode [ 1760.640163][ T4671] bridge_slave_1: entered promiscuous mode [ 1760.684336][ T4671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1760.712124][ T4671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1760.748574][ T4671] team0: Port device team_slave_0 added [ 1760.755919][ T4671] team0: Port device team_slave_1 added [ 1760.789947][ T4671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1760.798285][ T4671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1760.811383][ T4671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1760.843680][ T4671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1760.845952][ T4671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1760.864852][ T4671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1760.943738][ T4671] hsr_slave_0: entered promiscuous mode [ 1760.953019][ T4671] hsr_slave_1: entered promiscuous mode [ 1760.955344][ T4671] debugfs: 'hsr0' already exists in 'hsr' [ 1760.957807][ T4671] Cannot create hsr debugfs directory [ 1761.196015][T16367] tipc: Left network mode [ 1761.452290][ T4327] Bluetooth: hci1: command tx timeout [ 1761.479814][ T4759] pim6reg: entered allmulticast mode [ 1761.485539][ T4760] pim6reg: left allmulticast mode [ 1761.819205][ T4762] pim6reg: entered allmulticast mode [ 1761.830209][ T4762] pim6reg: left allmulticast mode [ 1762.177305][ T4782] random: crng reseeded on system resumption [ 1762.242098][ T7453] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1763.005648][ T5445] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1763.404824][ T4804] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.6677'. [ 1763.548089][ T4805] pim6reg: entered allmulticast mode [ 1763.566820][ T4806] pim6reg: left allmulticast mode [ 1763.636375][ T4327] Bluetooth: hci1: command tx timeout [ 1763.648757][ T4805] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6678'. [ 1763.913345][ T4792] ceph: No mds server is up or the cluster is laggy [ 1764.538328][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6679'. [ 1764.562879][ T4809] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6679'. [ 1764.591807][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6679'. [ 1764.620688][ T4811] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6679'. [ 1764.650805][T16367] hsr_slave_0: left promiscuous mode [ 1764.687017][T16367] hsr_slave_1: left promiscuous mode [ 1764.725986][T16367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1764.740338][T16367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1764.758354][T16367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1764.776174][T16367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1764.831960][T16367] veth1_macvtap: left promiscuous mode [ 1764.869790][T16367] veth0_macvtap: left promiscuous mode [ 1764.916368][T16367] veth1_vlan: left promiscuous mode [ 1764.925632][T16367] veth0_vlan: left promiscuous mode [ 1765.082346][ T4818] netlink: 'syz.3.6681': attribute type 5 has an invalid length. [ 1765.140762][ T4819] netlink: 'syz.3.6681': attribute type 5 has an invalid length. [ 1765.231933][ T50] IPVS: starting estimator thread 0... [ 1765.326006][ T4823] IPVS: using max 47 ests per chain, 112800 per kthread [ 1765.414474][T16367] team0 (unregistering): Port device team_slave_1 removed [ 1765.423895][T16367] team0 (unregistering): Port device team_slave_0 removed [ 1765.702718][ T4671] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1765.760016][ T4671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1765.788529][ T4671] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1765.827754][ T4327] Bluetooth: hci1: command tx timeout [ 1765.852176][ T4828] netlink: 'syz.3.6684': attribute type 5 has an invalid length. [ 1765.856748][ T4671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1765.866062][ T4828] netlink: 'syz.3.6684': attribute type 5 has an invalid length. [ 1765.868924][ T4671] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1765.970090][ T4671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1765.973011][ T4671] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1765.977260][ T4671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1766.343751][ T4671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1766.385461][ T4671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1766.404597][ T9141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.406979][ T9141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1766.428270][T16367] IPVS: stop unused estimator thread 0... [ 1766.469494][ T9141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.471754][ T9141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1767.259412][ T4851] overlayfs: overlapping lowerdir path [ 1769.100697][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6689'. [ 1769.111839][ T4867] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6689'. [ 1769.117382][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6689'. [ 1769.132931][ T4867] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6689'. [ 1769.139079][ T4671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1769.199765][ T4877] netlink: 'syz.3.6691': attribute type 5 has an invalid length. [ 1769.365911][ T4888] pim6reg: entered allmulticast mode [ 1769.392746][ T4671] veth0_vlan: entered promiscuous mode [ 1769.399327][ T4888] pim6reg: left allmulticast mode [ 1769.444635][ T9606] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 1769.453914][ T4894] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6692'. [ 1769.762092][ T4897] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6693'. [ 1769.823351][ T4896] pim6reg: entered allmulticast mode [ 1769.825751][ T4895] pim6reg: left allmulticast mode [ 1769.844185][ T4671] veth1_vlan: entered promiscuous mode [ 1769.871292][ T4671] veth0_macvtap: entered promiscuous mode [ 1769.876131][ T4671] veth1_macvtap: entered promiscuous mode [ 1769.887353][ T9606] usb 14-1: Using ep0 maxpacket: 8 [ 1769.888864][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1769.907855][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1769.983371][T16367] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.133939][ T9995] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.151730][ T9995] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.184178][T16367] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.211700][T24728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.238772][T24728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.280983][ T9606] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1770.358797][ T4900] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16 [ 1770.378153][ T9141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.406355][ T9606] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 1770.408073][ T9141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.413676][ T9606] usb 14-1: config 0 has no interface number 0 [ 1770.415776][ T9606] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1770.419013][ T9606] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.434486][ T9606] usb 14-1: config 0 descriptor?? [ 1770.441509][ T9606] iowarrior 14-1:0.1: no interrupt-in endpoint found [ 1770.625325][ T4907] netlink: 'syz.3.6697': attribute type 10 has an invalid length. [ 1770.875290][ T4909] kAFS: No cell specified [ 1771.033114][ T10] usb 14-1: USB disconnect, device number 10 [ 1771.095491][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6699'. [ 1771.098485][ T4921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6699'. [ 1771.107407][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6699'. [ 1771.110310][ T4921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6699'. [ 1771.229111][ T4923] pim6reg: entered allmulticast mode [ 1771.252673][ T4923] pim6reg: left allmulticast mode [ 1771.723936][ T4935] CIFS: Attempting to mount //127.0.0.1/share [ 1772.196799][ T7453] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 1772.355861][ T7453] usb 14-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1772.371272][ T7453] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1772.374830][ T7453] usb 14-1: Product: syz [ 1772.379280][ T7453] usb 14-1: Manufacturer: syz [ 1772.414658][ T7453] input: Samsung SUR40 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/input/input65 [ 1772.673646][ T4935] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1772.685126][ T4935] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1772.709356][ T4327] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 1772.756543][ T4943] ceph: No mds server is up or the cluster is laggy [ 1773.383151][ T50] usb 11-1: new high-speed USB device number 94 using dummy_hcd [ 1773.538974][ T50] usb 11-1: Using ep0 maxpacket: 8 [ 1773.542032][ T50] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1773.546209][ T50] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1773.549142][ T50] usb 11-1: config 0 has no interface number 0 [ 1773.551530][ T50] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1773.560725][ T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.567386][ T50] usb 11-1: config 0 descriptor?? [ 1773.571588][ T50] iowarrior 11-1:0.1: no interrupt-in endpoint found [ 1773.602295][ T7453] videodev: could not get a free minor [ 1773.604229][ T7453] sur40 14-1:1.0: Unable to register video subdevice. [ 1773.606472][ T7453] sur40 14-1:1.0: probe with driver sur40 failed with error -23 [ 1773.615061][ T5128] ================================================================== [ 1773.617675][ T5128] BUG: KASAN: slab-use-after-free in sur40_open+0x46c/0x500 [ 1773.620051][ T5128] Read of size 8 at addr ffff8880272da000 by task acpid/5128 [ 1773.622912][ T5128] [ 1773.624263][ T5128] CPU: 0 UID: 0 PID: 5128 Comm: acpid Tainted: G L syzkaller #0 PREEMPT(full) [ 1773.624280][ T5128] Tainted: [L]=SOFTLOCKUP [ 1773.624285][ T5128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1773.624292][ T5128] Call Trace: [ 1773.624299][ T5128] [ 1773.624306][ T5128] dump_stack_lvl+0x100/0x190 [ 1773.624333][ T5128] print_report+0x13d/0x4b0 [ 1773.624361][ T5128] ? __virt_addr_valid+0x239/0x430 [ 1773.624384][ T5128] ? sur40_open+0x46c/0x500 [ 1773.624401][ T5128] kasan_report+0xdf/0x1c0 [ 1773.624421][ T5128] ? sur40_open+0x46c/0x500 [ 1773.624437][ T5128] ? __pfx_sur40_open+0x10/0x10 [ 1773.624455][ T5128] sur40_open+0x46c/0x500 [ 1773.624476][ T5128] input_open_device+0x24c/0x3d0 [ 1773.624498][ T5128] mousedev_open_device+0xe2/0x140 [ 1773.624518][ T5128] mousedev_open+0x2fd/0x580 [ 1773.624533][ T5128] ? __pfx_mousedev_open+0x10/0x10 [ 1773.624548][ T5128] chrdev_open+0x234/0x6a0 [ 1773.624561][ T5128] ? __pfx_apparmor_file_open+0x10/0x10 [ 1773.624577][ T5128] ? __pfx_chrdev_open+0x10/0x10 [ 1773.624589][ T5128] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1773.624604][ T5128] do_dentry_open+0x6ab/0x14d0 [ 1773.624616][ T5128] ? __pfx_chrdev_open+0x10/0x10 [ 1773.624628][ T5128] vfs_open+0x82/0x3f0 [ 1773.624642][ T5128] path_openat+0x2873/0x4280 [ 1773.624658][ T5128] ? __pfx_path_openat+0x10/0x10 [ 1773.624671][ T5128] do_file_open+0x20e/0x430 [ 1773.624682][ T5128] ? __pfx_do_file_open+0x10/0x10 [ 1773.624698][ T5128] ? alloc_fd+0x471/0x7a0 [ 1773.624709][ T5128] ? do_getname+0x191/0x390 [ 1773.624723][ T5128] do_sys_openat2+0x10f/0x1e0 [ 1773.624737][ T5128] ? __pfx_do_sys_openat2+0x10/0x10 [ 1773.624753][ T5128] __x64_sys_openat+0x12d/0x210 [ 1773.624768][ T5128] ? __pfx___x64_sys_openat+0x10/0x10 [ 1773.624786][ T5128] do_syscall_64+0x115/0x840 [ 1773.624801][ T5128] ? clear_bhb_loop+0x70/0xc0 [ 1773.624814][ T5128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.624825][ T5128] RIP: 0033:0x7fd1b0cfa407 [ 1773.624836][ T5128] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1773.624847][ T5128] RSP: 002b:00007fff5eece7e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1773.624859][ T5128] RAX: ffffffffffffffda RBX: 00007fd1b0c70780 RCX: 00007fd1b0cfa407 [ 1773.624866][ T5128] RDX: 0000000000080800 RSI: 00007fff5eece9f0 RDI: ffffffffffffff9c [ 1773.624878][ T5128] RBP: 00007fff5eece9f0 R08: 0000000000000000 R09: 0000000000000000 [ 1773.624884][ T5128] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000080 [ 1773.624891][ T5128] R13: 00007fff5eeceaf0 R14: 00005598bf05b7fe R15: 00007fff5eeceb10 [ 1773.624902][ T5128] [ 1773.624906][ T5128] [ 1773.707603][ T5128] Allocated by task 7453: [ 1773.708985][ T5128] kasan_save_stack+0x30/0x50 [ 1773.710469][ T5128] kasan_save_track+0x14/0x30 [ 1773.711973][ T5128] __kasan_kmalloc+0xaa/0xb0 [ 1773.713433][ T5128] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1773.715121][ T5128] sur40_probe+0x1a8/0x1580 [ 1773.716579][ T5128] usb_probe_interface+0x303/0x8f0 [ 1773.718203][ T5128] really_probe+0x241/0xa60 [ 1773.719700][ T5128] __driver_probe_device+0x20e/0x450 [ 1773.721364][ T5128] driver_probe_device+0x4a/0x140 [ 1773.723038][ T5128] __device_attach_driver+0x1df/0x320 [ 1773.724762][ T5128] bus_for_each_drv+0x159/0x1e0 [ 1773.726362][ T5128] __device_attach+0x1e4/0x4d0 [ 1773.727880][ T5128] device_initial_probe+0xaf/0xd0 [ 1773.729481][ T5128] bus_probe_device+0x64/0x160 [ 1773.731010][ T5128] device_add+0x121d/0x1970 [ 1773.732442][ T5128] usb_set_configuration+0xd97/0x1c60 [ 1773.734158][ T5128] usb_generic_driver_probe+0xa1/0xe0 [ 1773.735878][ T5128] usb_probe_device+0xef/0x400 [ 1773.737595][ T5128] really_probe+0x241/0xa60 [ 1773.739381][ T5128] __driver_probe_device+0x20e/0x450 [ 1773.741503][ T5128] driver_probe_device+0x4a/0x140 [ 1773.743335][ T5128] __device_attach_driver+0x1df/0x320 [ 1773.745273][ T5128] bus_for_each_drv+0x159/0x1e0 [ 1773.747117][ T5128] __device_attach+0x1e4/0x4d0 [ 1773.748734][ T5128] device_initial_probe+0xaf/0xd0 [ 1773.750497][ T5128] bus_probe_device+0x64/0x160 [ 1773.752203][ T5128] device_add+0x121d/0x1970 [ 1773.753694][ T5128] usb_new_device.part.0+0xcc2/0x1686 [ 1773.759494][ T5128] hub_event.cold+0x1e3/0xe90 [ 1773.760898][ T5128] process_one_work+0xa23/0x1940 [ 1773.762362][ T5128] worker_thread+0x5ef/0xe50 [ 1773.763763][ T5128] kthread+0x370/0x450 [ 1773.765197][ T5128] ret_from_fork+0x72b/0xd50 [ 1773.766943][ T5128] ret_from_fork_asm+0x1a/0x30 [ 1773.768662][ T5128] [ 1773.769508][ T5128] Freed by task 7453: [ 1773.770955][ T5128] kasan_save_stack+0x30/0x50 [ 1773.772663][ T5128] kasan_save_track+0x14/0x30 [ 1773.774281][ T5128] kasan_save_free_info+0x3b/0x70 [ 1773.776108][ T5128] __kasan_slab_free+0x5f/0x80 [ 1773.777855][ T5128] kfree+0x22b/0x6c0 [ 1773.779258][ T5128] sur40_probe+0xc36/0x1580 [ 1773.780800][ T5128] usb_probe_interface+0x303/0x8f0 [ 1773.782671][ T5128] really_probe+0x241/0xa60 [ 1773.784325][ T5128] __driver_probe_device+0x20e/0x450 [ 1773.786111][ T5128] driver_probe_device+0x4a/0x140 [ 1773.787736][ T5128] __device_attach_driver+0x1df/0x320 [ 1773.789593][ T5128] bus_for_each_drv+0x159/0x1e0 [ 1773.791176][ T5128] __device_attach+0x1e4/0x4d0 [ 1773.792851][ T5128] device_initial_probe+0xaf/0xd0 [ 1773.794614][ T5128] bus_probe_device+0x64/0x160 [ 1773.796319][ T5128] device_add+0x121d/0x1970 [ 1773.797833][ T5128] usb_set_configuration+0xd97/0x1c60 [ 1773.799741][ T5128] usb_generic_driver_probe+0xa1/0xe0 [ 1773.801589][ T5128] usb_probe_device+0xef/0x400 [ 1773.803189][ T5128] really_probe+0x241/0xa60 [ 1773.804596][ T5128] __driver_probe_device+0x20e/0x450 [ 1773.806493][ T5128] driver_probe_device+0x4a/0x140 [ 1773.808302][ T5128] __device_attach_driver+0x1df/0x320 [ 1773.810228][ T5128] bus_for_each_drv+0x159/0x1e0 [ 1773.811950][ T5128] __device_attach+0x1e4/0x4d0 [ 1773.813595][ T5128] device_initial_probe+0xaf/0xd0 [ 1773.815410][ T5128] bus_probe_device+0x64/0x160 [ 1773.817145][ T5128] device_add+0x121d/0x1970 [ 1773.818743][ T5128] usb_new_device.part.0+0xcc2/0x1686 [ 1773.820660][ T5128] hub_event.cold+0x1e3/0xe90 [ 1773.822377][ T5128] process_one_work+0xa23/0x1940 [ 1773.824022][ T5128] worker_thread+0x5ef/0xe50 [ 1773.825498][ T5128] kthread+0x370/0x450 [ 1773.826945][ T5128] ret_from_fork+0x72b/0xd50 [ 1773.828590][ T5128] ret_from_fork_asm+0x1a/0x30 [ 1773.830128][ T5128] [ 1773.830917][ T5128] The buggy address belongs to the object at ffff8880272da000 [ 1773.830917][ T5128] which belongs to the cache kmalloc-4k of size 4096 [ 1773.835838][ T5128] The buggy address is located 0 bytes inside of [ 1773.835838][ T5128] freed 4096-byte region [ffff8880272da000, ffff8880272db000) [ 1773.840328][ T5128] [ 1773.841101][ T5128] The buggy address belongs to the physical page: [ 1773.843098][ T5128] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x272d8 [ 1773.845819][ T5128] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1773.848436][ T5128] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1773.850780][ T5128] page_type: f5(slab) [ 1773.852059][ T5128] raw: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 1773.854732][ T5128] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1773.857407][ T5128] head: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 1773.860087][ T5128] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1773.862760][ T5128] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1773.865439][ T5128] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1773.868139][ T5128] page dumped because: kasan: bad access detected [ 1773.870135][ T5128] page_owner tracks the page as allocated [ 1773.872013][ T5128] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6358171559, free_ts 0 [ 1773.878013][ T5128] post_alloc_hook+0xfd/0x120 [ 1773.879516][ T5128] get_page_from_freelist+0xf48/0x3530 [ 1773.881232][ T5128] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1773.883097][ T5128] new_slab+0xa2/0x640 [ 1773.884392][ T5128] refill_objects+0xe3/0x410 [ 1773.885876][ T5128] __pcs_replace_empty_main+0x376/0x680 [ 1773.887640][ T5128] __kmalloc_cache_node_noprof+0x542/0x6c0 [ 1773.889488][ T5128] bdi_alloc+0x44/0x140 [ 1773.890824][ T5128] __alloc_disk_node+0xac/0x6b0 [ 1773.892374][ T5128] __blk_mq_alloc_disk+0x89/0x120 [ 1773.893974][ T5128] nbd_dev_add+0x492/0xb10 [ 1773.895402][ T5128] nbd_init+0x291/0x2b0 [ 1773.896779][ T5128] do_one_initcall+0x11d/0x700 [ 1773.898298][ T5128] kernel_init_freeable+0x6ea/0x7b0 [ 1773.900015][ T5128] kernel_init+0x1f/0x1e0 [ 1773.901382][ T5128] ret_from_fork+0x72b/0xd50 [ 1773.902859][ T5128] page_owner free stack trace missing [ 1773.904535][ T5128] [ 1773.905304][ T5128] Memory state around the buggy address: [ 1773.907094][ T5128] ffff8880272d9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1773.909582][ T5128] ffff8880272d9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1773.912102][ T5128] >ffff8880272da000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1773.914798][ T5128] ^ [ 1773.916099][ T5128] ffff8880272da080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1773.918595][ T5128] ffff8880272da100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1773.921093][ T5128] ================================================================== [ 1773.946117][ T10] usb 14-1: USB disconnect, device number 11 [ 1773.980213][ T5128] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1773.982544][ T5128] CPU: 0 UID: 0 PID: 5128 Comm: acpid Tainted: G L syzkaller #0 PREEMPT(full) [ 1773.985766][ T5128] Tainted: [L]=SOFTLOCKUP [ 1773.987158][ T5128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1773.990178][ T5128] Call Trace: [ 1773.991213][ T5128] [ 1773.992162][ T5128] dump_stack_lvl+0x100/0x190 [ 1773.993663][ T5128] vpanic+0x552/0x970 [ 1773.994983][ T5128] ? __pfx_vpanic+0x10/0x10 [ 1773.996445][ T5128] ? mark_held_locks+0x40/0x70 [ 1773.997999][ T5128] ? sur40_open+0x46c/0x500 [ 1773.999438][ T5128] panic+0xd1/0xe0 [ 1774.000790][ T5128] ? __pfx_panic+0x10/0x10 [ 1774.002395][ T5128] ? sur40_open+0x46c/0x500 [ 1774.003874][ T5128] ? preempt_schedule_common+0x42/0xc0 [ 1774.005595][ T5128] ? check_panic_on_warn+0x1f/0x90 [ 1774.007247][ T5128] check_panic_on_warn.cold+0x19/0x34 [ 1774.008936][ T5128] end_report.part.0+0x3a/0x90 [ 1774.010456][ T5128] kasan_report.cold+0xe/0x18 [ 1774.011993][ T5128] ? sur40_open+0x46c/0x500 [ 1774.013459][ T5128] ? __pfx_sur40_open+0x10/0x10 [ 1774.015019][ T5128] sur40_open+0x46c/0x500 [ 1774.016420][ T5128] input_open_device+0x24c/0x3d0 [ 1774.017992][ T5128] mousedev_open_device+0xe2/0x140 [ 1774.019622][ T5128] mousedev_open+0x2fd/0x580 [ 1774.021107][ T5128] ? __pfx_mousedev_open+0x10/0x10 [ 1774.022736][ T5128] chrdev_open+0x234/0x6a0 [ 1774.024178][ T5128] ? __pfx_apparmor_file_open+0x10/0x10 [ 1774.026104][ T5128] ? __pfx_chrdev_open+0x10/0x10 [ 1774.027681][ T5128] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1774.029671][ T5128] do_dentry_open+0x6ab/0x14d0 [ 1774.031194][ T5128] ? __pfx_chrdev_open+0x10/0x10 [ 1774.032764][ T5128] vfs_open+0x82/0x3f0 [ 1774.034068][ T5128] path_openat+0x2873/0x4280 [ 1774.035493][ T5128] ? __pfx_path_openat+0x10/0x10 [ 1774.037083][ T5128] do_file_open+0x20e/0x430 [ 1774.038523][ T5128] ? __pfx_do_file_open+0x10/0x10 [ 1774.040124][ T5128] ? alloc_fd+0x471/0x7a0 [ 1774.041514][ T5128] ? do_getname+0x191/0x390 [ 1774.042968][ T5128] do_sys_openat2+0x10f/0x1e0 [ 1774.044455][ T5128] ? __pfx_do_sys_openat2+0x10/0x10 [ 1774.046112][ T5128] __x64_sys_openat+0x12d/0x210 [ 1774.047668][ T5128] ? __pfx___x64_sys_openat+0x10/0x10 [ 1774.049358][ T5128] do_syscall_64+0x115/0x840 [ 1774.050835][ T5128] ? clear_bhb_loop+0x70/0xc0 [ 1774.052360][ T5128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.054280][ T5128] RIP: 0033:0x7fd1b0cfa407 [ 1774.055768][ T5128] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1774.061833][ T5128] RSP: 002b:00007fff5eece7e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1774.064635][ T5128] RAX: ffffffffffffffda RBX: 00007fd1b0c70780 RCX: 00007fd1b0cfa407 [ 1774.067394][ T5128] RDX: 0000000000080800 RSI: 00007fff5eece9f0 RDI: ffffffffffffff9c [ 1774.069883][ T5128] RBP: 00007fff5eece9f0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.072401][ T5128] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000080 [ 1774.074897][ T5128] R13: 00007fff5eeceaf0 R14: 00005598bf05b7fe R15: 00007fff5eeceb10 [ 1774.077672][ T5128] [ 1774.080213][ T5128] Kernel Offset: disabled [ 1774.081603][ T5128] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:13:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000070 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0f305 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc900222df250 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000070 R14=ffffffff9b6e3229 R15=ffffffff85a0f2a0 RIP=ffffffff85a0f32f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd1b0c70780 ffffffff 00c00000 GS =0000 ffff888096bf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005598cddec5d0 CR3=000000002904d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000008000007f Opmask01=00000000000107ff Opmask02=000000000101ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005598bf0580b0 0000000000000006 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000030 746e6576652f7475 706e692f7665642f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 25203a726f727265 2064616572207265 79616c207475706e 6900000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00051f574a575740 0541444057055740 5c4449055150554b 4c00000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007002400000001 0005000800000000 0004000800000001 0003000800000022 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005598bf05c778 0000000000000000 0000000200000005 00005598bf05c388 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005598bf05b6d5 0000000000000001 0000000200000005 00005598bf05c778 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200000005 00005598bf05c388 0000000000000001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005598bf05b6ac 0000000000000001 0000000000000005 00005598bf05b6c1 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2d2e28332220 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3724bf2f2b2427bf 2d2e2832312435bf 3728252433342c2f 33bf2d2e28332220 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b53eaa RDX=ffff88801c742540 RSI=ffffffff81b53ece RDI=ffff88801c742540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b53ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000c0fee1 Opmask01=0000000000000000 Opmask02=00000000fffffdff Opmask03=0000000020400004 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0034706f6f6c2f6b 636f6c622f6c6175 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559a35dc21b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53985f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53985f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f115c435d431610 120300161e121d5c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 431d1c1a1416015c 43000611171d5c43 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0034706f6f6c2f6b 636f6c622f6c6175 747269762f736563 697665642f737973 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000371 0000000000000000 34706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559a35dbe520 0000559a35db6510 0000000000000041 0000000000000035 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53985f2220 00007f53985f2220 0000000000003d81 0031003077617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 422c45422c44422c 43422c42422c4142 2c39422c38422c37 422c44412c43412c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36412c35412c3441 2c33412c46392c45 392c44392c43392c 42392c46382c4538 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c43382c30382c46 372c45372c44372c 43372c42372c4137 2c39372c37372c36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000002 RCX=ffffffff82829b5a RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff9121bad0 RBP=ffff88801e2db720 RSP=ffffc9000460f540 R8 =0000000000000000 R9 =fffffbfff224375a R10=ffffffff9121bad7 R11=0000000000000000 R12=ffff88802b442710 R13=ffffffff9464f700 R14=ffff88802b442700 R15=ffff88801e2db000 RIP=ffffffff82829b62 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff1825d6300 ffffffff 00c00000 GS =0000 ffff888096df3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055907346a000 CR3=0000000048e83000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001a41 0000001800000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6301ffffffffffff fffff5080a80031c 000003cc0000000d 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800000800000800 0c08000100000008 060a0106dc00010d c80008000180022d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8002020800010000 0008060a0106ea00 3a3a3a6301ffffff fffffffffff50801 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003656372756f73 01ffffffffffffff fff3082d80030008 000fffffffff020f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff02020800 0100000008060a01 06ea0008000a8002 040007c400687065 ZMM24=43a23f1d43a23f1d 43a23f1d43a23f1d 43a23f1d43a23f1d 43a23f1d43a23f1d 43a23f1d43a23f1d 43a23f1d43a23f1d 43a23f1d43a23f1d 43a23f1d43a23f1d ZMM25=b76ecab3b76ecab3 b76ecab3b76ecab3 b76ecab3b76ecab3 b76ecab3b76ecab3 b76ecab3b76ecab3 b76ecab3b76ecab3 b76ecab3b76ecab3 b76ecab3b76ecab3 ZMM26=cf7eaae9cf7eaae9 cf7eaae9cf7eaae9 cf7eaae9cf7eaae9 cf7eaae9cf7eaae9 cf7eaae9cf7eaae9 cf7eaae9cf7eaae9 cf7eaae9cf7eaae9 cf7eaae9cf7eaae9 ZMM27=4375f30f4375f30f 4375f30f4375f30f 4375f30f4375f30f 4375f30f4375f30f 4375f30f4375f30f 4375f30f4375f30f 4375f30f4375f30f 4375f30f4375f30f ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=422f0000422f0000 422f0000422f0000 422f0000422f0000 422f0000422f0000 422f0000422f0000 422f0000422f0000 422f0000422f0000 422f0000422f0000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b53eaa RDX=ffff88801c7fa540 RSI=ffffffff81b53ece RDI=ffff88801c7fa540 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b53ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c230000 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000